Page 1 of 1

Credit Card Encryption

Posted: Wed Nov 12, 2008 10:39 am
by Cornerstone
Hello,

My company has setup all the necessary parts to make the shopping cart work with shipping info and payment gateways. The only problem is when we us a credit card to purchase an order Able stores the credit card number and exp date in the ac_Payments table in the column EncryptedAccountData.

If this column says “Encrypted” why is it clear as day what the card information is? Is this a setting in the site or do we have to add code to actually encrypt this data?

Thanks,
Derek

Re: Credit Card Encryption

Posted: Wed Nov 12, 2008 11:19 am
by mazhar
Make sure the Enable Credit Card Storage checkbox is checked in Configure > Security > General page on admin side.

Re: Credit Card Encryption

Posted: Wed Nov 12, 2008 11:25 am
by Cornerstone
Ahh! Great, didn't see that setting before.

Thanks for helping.

Re: Credit Card Encryption

Posted: Thu Nov 13, 2008 5:14 pm
by Logan Rhodehamel
Cornerstone wrote:Ahh! Great, didn't see that setting before.
Was that actually the answer? If I am reading this right, you are asking why the Encrypted... field has plain text? In that event, it means you have not yet set an encryption key. Configure -> Security -> Encryption Key is the place to get that taken care of.

Re: Credit Card Encryption

Posted: Fri Nov 14, 2008 7:25 am
by Cornerstone
Well, although the original question was about the Encryption. Not saving the credit card information is even better.

BUT knowing that is how to make it encrypted is also a great thing to know.

Thanks for the help :).

Derek