X-Cart forums

[joestern]

I want to add something saying, basically, "Your order was billed to the credit card ending XXXX" into my order confirmation emails. I've been working with this file:

/mail/order_invoice.tpl

and I know how to add in the right place, but I don't know how to extract this info from the system. I had X-Cart do it in my 3.7 customizations, but now I'm trying this round myself.

Has anyone done this? Any ideas?

[balinor]

You can't do that unless you store the CC info, which you can't do if you want to be PCI Compliant.

[rogue]

You could store the last 4 of the card. - - Modify the code that is already there that stores the card # to only store last 4 then use that on the invoice.

How do you give a credit if you don't have the card number later?

[balinor]

Using your payment gateway

[joestern]

So far, anyway, I am storing the CC numbers. I understand that this isn't recommended, and my next project is to work on my back end to make this unnecessary.

But since I am, is there a way to extract the number and mask it?

[balinor]

Sorry Joe, not something I am willing to assist with for security reasons.

[joestern]

I totally understand. I didn't get that it's related to a sensitive area - I'll just skip it in this upgrade. Probably customers would be happier these days with less info, in many ways.

[joestern]

So it looks like I can't even get the type of credit in here, is that right? Is it part of the encrypted area?

That's a problem for me because I have my in-house database parse the orders by credit card type so that I can match my batches to my Visa/MC settlements versus my Amex and Discover ones.

Is it possible that the credit card type is also stored elsewhere?

[rshandel]

Is it PCI compliant if we only store the last 4 digits of the credit card number?

[rshandel]

Rogue,

Could you point me in right direction so I can modify the code that stores the credit card number - I'd like to store only the last for digits of the cc in the database as well.

Thanks,