Page 1 of 1

Credit card number verification w/o gateway

Posted: Fri Jan 08, 2010 2:32 pm
by CraigH
I have a customer who only accepts VISA/Mastercard. They have both payment methods enabled for the store, but don't use a payment gateway as they manually run the transactions at their B&M store. The problem they are running into is that if you select VISA from the drop-down list when entering your payment/CC information, you are able to enter a Discover or Amex card number into the CC number field. There doesn't seem to be any type of AbleCommerce validation happening with the credit card number being entered.

I had assumed there was AbleCommerce-based number validation going on based on the credit card type selected, but this doesn't seem to be the case.

In addition, why do all of these places have you enter in the type of CC when that information is already contained in the actually credit card number based on the first digit, for example.

Is there a way to resolve this without using a payment gateway?

Re: Credit card number verification w/o gateway

Posted: Mon Jan 11, 2010 5:36 am
by mazhar
You modify your payment method controls to include some .NET validator controls to validate the entered data.

Re: Credit card number verification w/o gateway

Posted: Mon Jan 11, 2010 1:54 pm
by CraigH
So the default AbleCommerce installation doesn't include this feature? I know that even version 5.5 included this.

Per the user-guide under payment methods:

"For each type of credit card, there is an automatic check-sum validation built into AbleCommerce. This ensures that the customer has entered their credit card number correctly."

I'm assuming that this checksum doesn't include verifying that someone also selected the correct TYPE of card?

Re: Credit card number verification w/o gateway

Posted: Mon Jan 11, 2010 2:20 pm
by Shopping Cart Admin
Hello,

AbleCommerce verifies it's a valid CC number, before it's sent to the gateway. Over the years as new cards are introduced the specific validation of certain card types was found to be an issue. The payment gateway doesn't care what CC type it is and we collect the information for accounting purposes only.

Re: Credit card number verification w/o gateway

Posted: Tue Jan 12, 2010 9:40 am
by CraigH
That didn't really answer my question very well.

So from what I understand:
* The credit card number is validated before it is sent to the payment gateway.
* The card type isn't used for the validation.

Here are questions I don't have an answer to:
1) What type of credit card validation is done? Is it based on the type of the card or is there just a single validation check done on the credit card number that has nothing to do with what type of credit card it is, for example, the exact same check is done regardless of whether the number is for a VISA or a Mastercard?
2) Having anything sent to the payment gateway should be irrelevant as not everyone will be doing this, so that shouldn't really be part of this conversation as I stated that my customer isn't using a payment gateway.

If the answer to my question #1 is that there is just a single validation check done and that check isn't based in any way on what type of credit card it is, then I can tell my customer that I don't have a solution to his problem without customizing his store.

If the answer to my question #1 is that the validation does take into account the type of credit card based on the actual number of the card (first digit), then why isn't that taken into account?

Thanks for any additional details.

Re: Credit card number verification w/o gateway

Posted: Thu Jan 14, 2010 2:58 pm
by nickc
The validation being performed is a simple error check: mod10 (http://en.wikipedia.org/wiki/Luhn_algorithm). Card type is not considered.
I believe the point being made here is that further validations need to be made by the cc processing entity anyway, so in addition to being volatile (first digit is not a unique identifier, valid lengths vary, new ranges are introduced regularly, etc.) and therefore onerous to maintain, they would be redundant.

Re: Credit card number verification w/o gateway

Posted: Thu Jan 14, 2010 3:43 pm
by CraigH
Thank you, that better answers my question.

I'm very surprised that there isn't a simple VISA or Mastercard validation being done with the default AC 7 installation. I assumed (I've never looked into it) that it would be easy to implement.

Re: Credit card number verification w/o gateway

Posted: Thu Jan 14, 2010 3:56 pm
by jmestep
and therefore onerous to maintain, they would be redundant.
Yes, we had trouble in Able 5 when one of the card companies added a new number pattern because 5 had more validation, I believe.