BV Commerce Forum
»
BV Commerce Support
»
General Support
»
Cannot Access/Retrieve Credit Card Info in Admin
Rank: Member
Joined: 6/4/2004(UTC)
Posts: 58
|
This is a major problem for our store right now so I thought I should post about it separately (I mentioned it in another topic for a different problem). If anyone knows of something I need to be doing differently please let me know. Right now all Credit Card Numbers are still asterisked-out (****-****-****-1234) in the Order Admin even thought the "Display Full Credit Card Information In Admin Console?" checkbox is checked. Thanks, -Aaron DezTech attached the following image(s):  BV5Bug_CCNumInAdmin.gif (62kb) downloaded 45 time(s).You cannot view/download attachments. Try to login or register.
|
|
|
|
|
|
Rank: Member
Joined: 3/3/2006(UTC)
Posts: 1,737
|
Have you clicked the "Payment" tab? You should see this: MitchA attached the following image(s): cc-payment.jpg (29kb) downloaded 88 time(s).You cannot view/download attachments. Try to login or register. |
Optimists invent airplanes,
Pessimists buy parachutes. |
|
|
|
|
|
Rank: Member
Joined: 6/4/2004(UTC)
Posts: 58
|
Thanks, that part seems to be working since SP3.2, but for order processing it would be best to have a printable screen that had the whole order info like BVC2004 used to have. The Admin Receipt in BVC2004 had everything. I looked for a mergable field for CC#, but couldn't find one. I imagine the reasoning MIGHT be that the regular order viewing screen and the printing screens are HTTP. Only this Payment screen is HTTPS.
I suppose I might need to make code changes to have the standard View Order screen be HTTPS and also show the CC#. I just kind of expected THAT to be the functionality when clicking that box...
-Aaron
|
|
|
|
|
|
Rank: Member
Joined: 3/3/2006(UTC)
Posts: 1,737
|
The admin's Print Template for the order can't show the cc#... ie: [[Order.CreditCardNumber]]. Don't know why. - print screen? |
Optimists invent airplanes,
Pessimists buy parachutes. |
|
|
|
|
|
Rank: Member
Joined: 6/6/2005(UTC)
Posts: 483
|
Why do you need to be able to print the entire entire CC number? I would think this would be a huge security issue (PCI compliance?).
I think it is bad enough there is a toggle switch so anyone with admin rights can view it. Keep in mind you have the expiration date available too. I can't even view that information on my credit card processors web site. They give me the first 4 and last 4, thats it. No expiration date or CVV.
Some of you seem to want Hacker Safe on your site but also want access to all of your customers CC information. <shrug>
Bob Noble
|
|
|
|
|
|
Rank: Member
Joined: 3/3/2006(UTC)
Posts: 1,737
|
Bob, I'd think that there are a few companies that use a cart site for only a small part of thier business. Recurring customers, comm'l clients, etc. might find it easier to do business on a daily basis if the corporate cc# is just kept 'on file'. I have a few clients who fax me their packing list. I then enter the order for them with thier card info. I keep thier # safe, but I don't make it visible on the screen in admin for security reasons, as you stated even though I work alone. |
Optimists invent airplanes,
Pessimists buy parachutes. |
|
|
|
|
|
Rank: Member
Joined: 5/29/2007(UTC)
Posts: 12
|
Does BVCommerce allow the ability for a customer to "save" their credit card info?
|
|
|
|
|
|
Rank: Member
Joined: 2/21/2007(UTC)
Posts: 1,113
|
No -- and if it did, you would open yourself up to security and compliance issues. |
|
|
|
|
|
|
Rank: Member
Joined: 5/29/2007(UTC)
Posts: 12
|
I completely agree Joe. And was trying to persuade a client away from even thinking about wanting this feature. But I wanted to be able to absolutely confirm whether it was possible in BVCommerce. Thanks for the quick response!
|
|
|
|
|
|
Rank: Member
Joined: 7/14/2004(UTC)
Posts: 254
|
Hi Guys, this thread prompts me to ask a related question. I understand about the need for CC security / compliance etc, but from a process perspective, what are recommended best practices for BVC5 for the following scenarios? <OL> * Sell a software Product or Service (1 SKU) that requires annual support fees. First year support is included in the SKU price. Ideally, support renewal would be done at our end against a CC (which implies retention of details). Alternatively, we would need to notify customers via email prompting them to return to site and renew. * As above but with monthly payments, starting after end of first year. I can't see monthly email notifications scaleing or being practical. </OL> Now, there are some obvious similarities with several software companies and hosts etc...given the security issues, how should I manage this on a BVC platform? Thanks John
|
|
|
|
|
|
Rank: Member
Joined: 3/25/2006(UTC)
Posts: 111
|
Hello,
I think there are two issues here, one is the display of the credit cart info and the second is storing the credit card info.
I can't use BVCommerce since I can't copy and paste the entire order, with the cc info into the third party software, writeitonce for import into Quickbooks. This is because the CC info is not on the invoice in the admin and you have to go to another page to get it. I don't do real time CC processesing and don't want to.
I never print the invoice with the cc info and the cc information is automatically deleted (just shows ***) from Quickbooks once the order is processed and totally deleted from writeitonce when the order is archived.
You don't normally want to store the CC info after processing it and now, not allowed to if you want to be in compliance with industry standards.
All I would need is for the cc info to be present within the invoice on a https page, when manually processing the information (copy and paste into writeitonce) and immediately removing it once the invoice is processed. This is how two of my other carts work, and a third one I had 7 years ago.
|
|
|
|
|
|
Forum Jump
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.