Storing Partial Credit Card Information...

[ArchitecturalDepot.com]

Hi there.

We are looking to add a feature where a repeat customer can use the same credit card that they used on a previous order. The same way that Amazon.com or OfficeDepot.com would. I do not want Miva to store the entire credit card number of the customers, just the last few digits. That way, during checkout, the customer can select the saved credit card, or they can enter in a new credit card.

I am looking for someone to write a module for this. I don't believe that I could securely do this using my limited knowledge of Miva, Miva Scripts, and Miva Templates.

I appreciate all input and advice.

Thank you,
James Morris
ArchitecturalDepot.com (http://www.architecturaldepot.com)

[Vic - WolfPaw Computers]

I would strongly caution you not to implement this.

There is no reason you should compromise your customers credit card security by saving it. While I understand the intent of offering the convenience, it simply is not worth it.

When you carry the insurance policies of Amazon.com and Office Depot, then you can think about this.


Hi there.

We are looking to add a feature where a repeat customer can use the same credit card that they used on a previous order. The same way that Amazon.com or OfficeDepot.com would. I do not want Miva to store the entire credit card number of the customers, just the last few digits. That way, during checkout, the customer can select the saved credit card, or they can enter in a new credit card.

I am looking for someone to write a module for this. I don't believe that I could securely do this using my limited knowledge of Miva, Miva Scripts, and Miva Templates.

I appreciate all input and advice.

Thank you,
James Morris
ArchitecturalDepot.com (http://www.architecturaldepot.com)

[ArchitecturalDepot.com]

Thank you for the reply Vic. I do not intend to keep the entire credit card number stored on the server, just the last four digits for Visa, Amex, Disc and the last five digits for AMEX. The same information that would be seen on a Credit Card receipt from a restaraunt or gas station. Does that still sound risky to you or would that be worth persuing?

Thank you,
James Morris
ArchitecturalDepot.com (http://www.architecturaldepot.com)

[Vic - WolfPaw Computers]

That way, during checkout, the customer can select the saved credit card, or they can enter in a new credit card

Then where would the selection for the saved credit card come from? You are contradicting yourself in your post.

Thank you for the reply Vic. I do not intend to keep the entire credit card number stored on the server, just the last four digits for Visa, Amex, Disc and the last five digits for AMEX. The same information that would be seen on a Credit Card receipt from a restaraunt or gas station. Does that still sound risky to you or would that be worth persuing?

Thank you,
James Morris
ArchitecturalDepot.com (http://www.architecturaldepot.com)

[ArchitecturalDepot.com]

I must not be making myself clear. What I want is a partial credit card number stored on the Miva server. Not the whole card. Like my VISA card ending in 4999. I am not afraid to have that information displayed or stored on a server. Any server. We do not process our transactions live, so a credit card number displaying only 4999 would not throw an error and would be able to be placed on our website. The customers full credit card number is stored on a different secure server.

What I would need is a separate field in the customer record database that could store the credit card name, last four digits 4999 and the expiration date 08/2009. Could this be done?

Thanks,
James

[Vic - WolfPaw Computers]

Can it be done?

Yes. With custom customer fields. However - how you choose to populate and display this information may be tricky.

You would have to have the customer enter the last 4 numbers of the credit card when they created an account in the store. If they do not create an account, the data would not be saved.


I must not be making myself clear. What I want is a partial credit card number stored on the Miva server. Not the whole card. Like my VISA card ending in 4999. I am not afraid to have that information displayed or stored on a server. Any server. We do not process our transactions live, so a credit card number displaying only 4999 would not throw an error and would be able to be placed on our website. The customers full credit card number is stored on a different secure server.

What I would need is a separate field in the customer record database that could store the credit card name, last four digits 4999 and the expiration date 08/2009. Could this be done?

Thanks,
James

[ArchitecturalDepot.com]

Now we are cooking. So what I need is a module that will scrub the majority of the credit card number leaving only the last 4 digits and write them to the custom customer fields when the customer is going from the OPAY screen to the INVC screen.

Please reply if you are a developer and interested in doing this.

Thank you for your help Vic.

Thank you,
James Morris
ArchitecturalDepot.com (http://www.architecturaldepot.com)