Re: Card type & last 4 passed to x-cart?
Yes, but...
The string is obfuscated.
Deciphering the khash string is a few levels beyond my pay grade.
Does xpc really have to bring this data in encrypted? We're only looking for the last4 and card type. This is NOT against PCI rules. Once the card number is truncated, it's no longer a credit card and poses no security risk to the cardholder or the merchant.
Alex or x-cart engineers, why did you bring this data back to xcart encrypted? How can we decrypt into strings we can use?
Thx
J
__________________
xcart 4.5.4 gold+ w/x-payments 1.0.6; xcart gold 4.4.4
|