X-Cart forums

[wowfundraising]

We just got the cart set up and I notice on the invoices going out via email, the full credit card number and expiration date are shown along with all of their name/address info.

Isn't this a very bad thing to be sending via email???

And... how do I remove it or at least mask everything but the last four digits (a much more common practice).

Thanks,
Scott

[balinor]

Yea, you are going to want to turn that off Go to General Settings/E-mail options and uncheck this box:

Include order details (credit card information) into admin order notification message (it is recommended to use PGP encryption with this option enabled):

[wowfundraising]

Thanks - I did not see that. I was worried the customers who bought since we turned online were going to see their credit card info coming back to them via email. Eek. Panic attack.

All fixed.

[auggybendoggy]

in order for the recipient to use pgp don't they need a pgp key also to decrupt the email?

Gene

[mffowler]

Note to X-Cart team:

Please make this option disabled by default. It's a liability on your part to display credit card numbers in emails in stock carts...

- Mike