Last Four of Credit Card in Invoice Emails

joestern · #1 03-06-2009, 03:57 PM

I want to add something saying, basically, "Your order was billed to the credit card ending XXXX" into my order confirmation emails. I've been working with this file:

/mail/order_invoice.tpl

and I know how to add in the right place, but I don't know how to extract this info from the system. I had X-Cart do it in my 3.7 customizations, but now I'm trying this round myself.

Has anyone done this? Any ideas?

balinor · #2 03-06-2009, 04:22 PM

You can't do that unless you store the CC info, which you can't do if you want to be PCI Compliant.

rogue · #3 03-07-2009, 04:19 AM

You could store the last 4 of the card. - - Modify the code that is already there that stores the card # to only store last 4 then use that on the invoice.

How do you give a credit if you don't have the card number later?

balinor · #4 03-07-2009, 05:55 AM

Using your payment gateway

joestern · #5 03-07-2009, 06:48 AM

So far, anyway, I am storing the CC numbers. I understand that this isn't recommended, and my next project is to work on my back end to make this unnecessary.

But since I am, is there a way to extract the number and mask it?

balinor · #6 03-07-2009, 08:23 AM

Sorry Joe, not something I am willing to assist with for security reasons.

joestern · #7 03-09-2009, 02:29 PM

I totally understand. I didn't get that it's related to a sensitive area - I'll just skip it in this upgrade. Probably customers would be happier these days with less info, in many ways.

joestern · #8 03-10-2009, 02:27 PM

So it looks like I can't even get the type of credit in here, is that right? Is it part of the encrypted area?

That's a problem for me because I have my in-house database parse the orders by credit card type so that I can match my batches to my Visa/MC settlements versus my Amex and Discover ones.

Is it possible that the credit card type is also stored elsewhere?

rshandel · #9 08-03-2009, 09:45 AM

Is it PCI compliant if we only store the last 4 digits of the credit card number?

rshandel · #10 08-04-2009, 07:24 AM

Rogue,

Could you point me in right direction so I can modify the code that stores the credit card number - I'd like to store only the last for digits of the cc in the database as well.

Thanks,