View Single Post
  #6  
Old 11-17-2012, 04:52 AM
 
carpeperdiem carpeperdiem is offline
 

X-Guru
  
Join Date: Jul 2006
Location: New York City, USA
Posts: 5,399
 

Default Re: Card type & last 4 passed to x-cart?

Yes, but...

The string is obfuscated.

Deciphering the khash string is a few levels beyond my pay grade.

Does xpc really have to bring this data in encrypted? We're only looking for the last4 and card type. This is NOT against PCI rules. Once the card number is truncated, it's no longer a credit card and poses no security risk to the cardholder or the merchant.

Alex or x-cart engineers, why did you bring this data back to xcart encrypted? How can we decrypt into strings we can use?

Thx
J
__________________
xcart 4.5.4 gold+ w/x-payments 1.0.6; xcart gold 4.4.4
Reply With Quote