[ic] Credit Card Question

interchange-users@icdevgroup.org interchange-users@icdevgroup.org
Wed Sep 11 08:30:05 2002


On Tue, Sep 10, 2002 at 10:49:49PM -0700, Dan Browning wrote:
> At 10:26 PM 9/10/2002 -0700, you wrote:
> >Back in 1999 or so I wrote a minivend 3.x connector
> >for a small DOS/Windows based ordering/account package
> >that is popular in the mail order catalog/retail
> >world.  I'm converting this client to IC and am having
> >an issue with the credit card.  Back in the minivend
> >days I totally rewrote all the reports and emails.
> >Emails and transactions got the last four digits, the
> >reports "file" had the full cc number and was piped
> >into the converter program where it was converted to a
> >dataformat the ordering/accounting/inventory package
> >likes and shipped off to secure computer basically not
> >on the internet.  The number never sees the light of
> >day again.
> >
> >So now of course all my converter/transport gets is
> >"41 NEED ENCRYPTION 1111 12/02".
> >
> >I searched the mailing list and the
> >&credit_card=standard keep option in the profile.order
> >seemed like the ticket, but hasn't worked out.
> >
> >The error log indicates that IC is trying to run PGP
> >(and failing).
> >
> >So what's my best option.  Changing the PGP program
> >that gets run (to NULL or cat)?  If so where?
> >variable.txt, a GUI option?
> 
> I would recommend encrypting it anyway, then decrypting it at whatever 
> point you actually need it (e.g. just before "piped into the 
> converter").  The [encrypt] usertag posted by Ed LaFrance (check the 
> archives) might come in handy.

There's a fun project, integrating PGP into one of those DOS
or windows batch credit card processing programs.  :-)

We typically do this sort of thing by sending the order by
ssh or encrypted dbiproxy via a linux gateway/firewall at the 
client site.  It ultimately ends up in a "batch" file on samba
or some other database; they are all plain text at that point.
So much for end to end security.

Your solution will depend on your infrastructure - about which
you were less than clear - but if you could hack mv3 to your 
needs, you can do it in ic too.


> 
> /~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\
> | Dan Browning, Kavod Technologies      <dan.browning@kavod.com> |
> | (360) 882-7872 x7, 6700 NE 162nd Ave, Suite 210, Vancouver, WA |
> \~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~/
> I'm going to live forever, or die trying!
>                 -- Spider Robinson
> 
> _______________________________________________
> interchange-users mailing list
> interchange-users@icdevgroup.org
> http://www.icdevgroup.org/mailman/listinfo/interchange-users
> 

-- 

Christopher F. Miller, Publisher                               cfm@maine.com
MaineStreet Communications, Inc           208 Portland Road, Gray, ME  04039
1.207.657.5078                                         http://www.maine.com/
Content/site management, online commerce, internet integration, Debian linux