[ic] How to get Credit Card # in admin

Mike Heins mikeh@minivend.com
Thu, 5 Apr 2001 07:57:18 -0400


Quoting Bob Puff@NLE (bob@nleaudio.com):
> Hi Gang,
> 
> Tonight I was trying to get the credit card info to appear in the admin page
> for orders.

Bad move.

> I added three new columns in the transactions database:
> credit_card_number
> credit_card_exp_month
> credit_card_exp_year
> 
> I then edited the /etc/log_entry and log_transaction files and added the following:
> credit_card_number: [value filter=strip name=mv_credit_card_number]
> credit_card_exp_month: [value filter=strip name=mv_credit_card_exp_month]
> credit_card_exp_year: [value filter=strip name=mv_credit_card_exp_year]    
> 
> After an order occurs, I can see the expiration month and date, but the credit card
> number field is blank.  I'm doing the exact same thing with all three fields - why
> is this one field not getting through?
> 
> (the admin interface is now on a secure server, so worry not about security
> issues)

Not so. What happens when your system gets cracked? Credit card numbers are
there for the taking.

Once again, I will never help you get an unencrypted credit card number on
displayed. And I hope no one else will. 

-- 
Red Hat, Inc., 131 Willow Lane, Floor 2, Oxford, OH  45056
phone +1.513.523.7621 fax 7501 <mheins@redhat.com>

Fast, reliable, cheap.  Pick two and we'll talk.  -- unknown