ProductCart Shopping Cart Software Forums : Capturing cc number in admin with Paypal WPP https://forum.productcart.com/ Copyright (c) 2006-2013 Web Wiz Forums - All Rights Reserved. Sun, 12 Apr 2026 03:15:06 +0000 Mon, 15 Aug 2011 11:52:45 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.04 360 https://forum.productcart.com/RSS_post_feed.asp?TID=4661 <![CDATA[ProductCart Shopping Cart Software Forums]]> https://forum.productcart.com/forum_images/pc_logo_50.png https://forum.productcart.com/ <![CDATA[Capturing cc number in admin with Paypal WPP : Matt and Hamish both told you...]]> https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18115.html#18115 Author: Greg Dinger
Subject: 4661
Posted: 15-August-2011 at 11:52am

Matt and Hamish both told you this is a really bad idea.  Please take that to heart.  DON'T DO THIS.
 
I am in the midst of dealing with two stores that have been hacked in the past 6 weeks.  Both stores were not upgraded for years and therefore were down level (so this is not a reflection of an issue with the current version of ProductCart).  Regardless, someone found a way to get into these sites.  Once they did so,  they were able to  query the database and steal cards.  Both merchants now have HUGE problems on their hands.
 
Early Impact makes careful decisions about how and when to store data.  If their warnings, and the above story is not sufficient to discourage you from making changes that are a BAD IDEA, then you can go ahead and do whatever you feel is necessary.  Don't say we did not warn you.
]]> Mon, 15 Aug 2011 11:52:45 +0000 https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18115.html#18115 <![CDATA[Capturing cc number in admin with Paypal WPP : look at all the replied and still...]]> https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18114.html#18114 Author: Ludwig
Subject: 4661
Posted: 15-August-2011 at 1:02am

look at all the replied and still not an answer to my question ]]> Mon, 15 Aug 2011 01:02:49 +0000 https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18114.html#18114 <![CDATA[Capturing cc number in admin with Paypal WPP : Originally I posted a reply to...]]> https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18098.html#18098 Author: Ludwig
Subject: 4661
Posted: 09-August-2011 at 6:40pm

Originally I posted a reply to your inquiry to advise you do not save the credit card number.  My understanding now is that you intend to store it for an extended period of time in case there is a chargeback.  Saving the credit card data for an extended period of time is definitely not advisable.

No, we just need the card number termporarily to get the issuing bank and call to verify name, phone number or address then we can purge the card number. this would save so much time and hassel of having to get every cc order to call us and give us their cc number on the phone so we can use it to verify info with issue bank
]]> Tue, 09 Aug 2011 18:40:34 +0000 https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18098.html#18098 <![CDATA[Capturing cc number in admin with Paypal WPP : When Authorize.Net is set to AUTH_ONLY,...]]> https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18097.html#18097 Author: Matt
Subject: 4661
Posted: 09-August-2011 at 6:06pm

When Authorize.Net is set to AUTH_ONLY, credit card information is encrypted and stored in the store database and should be regularly removed using the Purge Credit Card Numbers feature (this is done automatically in version 3.5 and above when using the Batch Processing feature). When it’s set to capture funds (AUTH_CAPTURE), credit card information is not stored in the store database. Storing credit card information is required to successfully process the order(s) using the batch processing feature.

This scenario does not apply to PayPal because you process everything with Reference ID and they are flexible about changing the total when there was an AUTH_ONLY.  

Originally I posted a reply to your inquiry to advise you do not save the credit card number.  My understanding now is that you intend to store it for an extended period of time in case there is a chargeback.  Saving the credit card data for an extended period of time is definitely not advisable.

Setting aside all of the terms of PayPal, which I have not investigated.  This is simply not worth the risk for you or your customers.

I strongly recommend that you find another way to validate your orders.  For instance, you could switch entirely to PayPal Express Checkout or require a signature form.
]]> Tue, 09 Aug 2011 18:06:46 +0000 https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18097.html#18097 <![CDATA[Capturing cc number in admin with Paypal WPP : the authorize.net gateway allows...]]> https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18096.html#18096 Author: Ludwig
Subject: 4661
Posted: 09-August-2011 at 5:39pm

the authorize.net gateway allows the cc number to get in the admin panel. i love how the entire credit card processing industry is rigged against the merchant, if there is a chargeback YOU DONT EVEN KNOW WHO THE ISSUING BANK IS and you can't find out unless you take it to court, THE ISSU BANK is the sole artiber for who is liable so if i comes down to th bank or merchant guess who they will place libaility on, yes the merchance and the merchant is robbed blind because they don't even know who the issuing bank is unless they actually gather data beforehand and in out but you need th card number to do that and you can't even see the card number when an order is placed


]]> Tue, 09 Aug 2011 17:39:56 +0000 https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18096.html#18096 <![CDATA[Capturing cc number in admin with Paypal WPP : Hi, I expect you would be in breach...]]> https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18095.html#18095 Author: Hamish
Subject: 4661
Posted: 09-August-2011 at 5:20pm

Hi, I expect you would be in breach of the visa rules if you did this. ]]> Tue, 09 Aug 2011 17:20:55 +0000 https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18095.html#18095 <![CDATA[Capturing cc number in admin with Paypal WPP : So can this be done with a custom...]]> https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18093.html#18093 Author: Ludwig
Subject: 4661
Posted: 09-August-2011 at 11:05am

So can this be done with a custom edit? so that when capturing CC on my site i can get the CC number in my control panel like I can if I use the authorize.net gateway?

Edited by Ludwig - 09-August-2011 at 11:06am]]> Tue, 09 Aug 2011 11:05:37 +0000 https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18093.html#18093 <![CDATA[Capturing cc number in admin with Paypal WPP : Matt, I&#039;m talking about...]]> https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18086.html#18086 Author: Ludwig
Subject: 4661
Posted: 08-August-2011 at 12:32pm

Matt, I'm talking about using Paypal's Website Payment's Pro services where we process credit cards directly through our site - this is different than Paypal payments where you have a confirmed address - those payments aren't a problem... I'm talking about where the customer inputs their credit card on our site and they never see Paypal or even know Paypal is processing their credit card... those are the ones where I want capture the cc number in admin panel


Edited by Ludwig - 08-August-2011 at 12:33pm]]> Mon, 08 Aug 2011 12:32:38 +0000 https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18086.html#18086 <![CDATA[Capturing cc number in admin with Paypal WPP : Hi Ludwig, we cannot advise this...]]> https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18085.html#18085 Author: Matt
Subject: 4661
Posted: 08-August-2011 at 11:49am

Hi Ludwig,  we cannot advise this for PayPal.  Why not use PayPal's advanced fraud checking capabilities? PayPal already has advanced fraud checking.  They even have "confirmed addresses" and you can indicate you only ship to confirmed buyers with confirmed addresses.
]]> Mon, 08 Aug 2011 11:49:26 +0000 https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18085.html#18085 <![CDATA[Capturing cc number in admin with Paypal WPP : Hi, how can we set it up to...]]> https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18084.html#18084 Author: Ludwig
Subject: 4661
Posted: 08-August-2011 at 7:50am

Hi, how can we set it up to save the card number in the admin panel with Paypal WPP so it can be purged later like the other gateway options can do? We need the card number so we can call the bank and verify information on the customer... it would be awesome if we didn't have to get the customer to call us and give us the card number over the phone because a lot of people don't like doing that! Thanks.

Edited by Ludwig - 08-August-2011 at 7:51am]]> Mon, 08 Aug 2011 07:50:40 +0000 https://forum.productcart.com/capturing-cc-number-in-admin-with-paypal-wpp_topic4661_post18084.html#18084