VirtueMart Forum

VirtueMart Dev/Coding Central: VM1 (old version) => Development Projects, Modifications, Hacks & Tweaks. VM1.1 => Payment Modules => Topic started by: deneb on January 29, 2006, 05:02:44 AM

Title: Down with OCC? (Offline Credit Card)
Post by: deneb on January 29, 2006, 05:02:44 AM
Are you Down with OCC?

If any one does offline credit card processing...I have created a payment method to do just so! I am currently using this on a clients site, and it works great.

This VirtueMart payment method collects credit card information for later offline (manual) processing. OCC is intended to replace the standard Credit Card method that uses Authorize.net.

I tested this with Joomla v1.0.7 and VirtueMart 1.0.2 ( works with Joomla 1.0.2/ Virtuemart 1.0.1)

Please de-activate the standard 'Credit Card' payment method if OCC payment method is active. This is for best results so you don't confuse or scare the customer with multiple 'Credit Card' methods during checkout.

Follow the instructions included in the attached file.

Comments, questions, concerns? Post 'em here.


[attachment cleanup by admin]
Title: Re: Down with OCC? (Offline Credit Card)
Post by: deneb on February 02, 2006, 06:50:24 AM
Just a side note...

Use this payment method at your own risk as there may be legal issues involved. You do the research.

You can find a way to unmask the card numbers in this forum by searching on: mask digits or something

but I suggest that when you are viewing the order list, force that page into secure mode before going further. Then view the order page or the order print view pop-up with the unmasked digits. ;)
Title: Re: Down with OCC? (Offline Credit Card)
Post by: Cholic on February 02, 2006, 19:40:04 PM
Hello,

Thanks a bunch for the payment method module.  Im just having a small problem with it.  When I enter a Credit Card number, it says that it is not valid and when I try the testing credit card number (4111111111111111) it tells me that its the testing # and wont continue with the checkout...

Could there be a step I missed?

Im running Joomla 1.0.4 with Virtuemart 1.0.1

Do I need to upgrade to Joomla 1.0.7?  Could this be the problem?

Thanks in advance,

Kristen
Title: Re: Down with OCC? (Offline Credit Card)
Post by: deneb on February 03, 2006, 01:33:14 AM
Hey Cholic,
Did you disable the standard Credit Card method, then enable this OCC? You may still be using the standard CC method.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: SaltAquatics on February 03, 2006, 04:02:34 AM
I did everything to the T on the directions, and am getting "Invalid Account Number" as my error.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: Cholic on February 03, 2006, 05:23:11 AM
Quote from: deneb on February 03, 2006, 01:33:14 AM
Hey Cholic,
Did you disable the standard Credit Card method, then enable this OCC? You may still be using the standard CC method.

Hello,

Yes the standard Credit Card methid has been disabled (I checked it like 10 times).  When I enter a random Credit Card number and Name I still get the error "you have entered an invalid Credit Card Number". 

Can you exaplain again how the credit card info is stored into virtuemart and how part of the credit card # is delivered by email or something.  Where do I enter the email to where the credit card # will be sent?

Thanks in advacne,

Kristen :)
Title: Re: Down with OCC? (Offline Credit Card)
Post by: deneb on February 03, 2006, 08:51:07 AM
First off, can you try choosing "Credit Card" instead of "Use Payment Processor" in the Payment method type config for OCC. This might help with the errors.

Cholic, use these for testing:
//Visa Test Account           4007000000027
//Amex Test Account           370000000000002
//Master Card Test Account    6011000000000012
//Discover Test Account       5424000000000015


This method is based on the Authorize.net payment method. It merely bypasses the the whole server connect and records a response code into db. The code is needed for later use. So, it just allows the cc data to be recorded and 'approved'. It does cycle thru the existing card validation routines. So it does basic checks. That is what the errors are from.

A note: Nothing gets sent from your server with this payment method. So it is safe.

Also,  NO emails are sent anywhere with credit card numbers! VM sends a masked payment summary in the email to the admin. the numbers are also visible when you log in to the admin and view the orders.

Out of the box, VM will mask parts of the CC number everywhere. You can unmask them, as mentioned in above post. And again, get in secure mode if you view these as unmasked for safest use, especially emails. Then you punch those numbers into a merchant terminal for auth/capture.

Title: Re: Down with OCC? (Offline Credit Card)
Post by: Cholic on February 03, 2006, 23:44:57 PM
Thanks Deneb,

The instructions you gave worked perfectly.  I changed the Credit Card Processor to just Credit Card.  The test CC numbers also went through fine.  I have just one more question: where do I change the email address, so that a copy of the transaction also gets sent to me?  I changed the super administrator pass, but that wasnt it.

THanks again Deneb,

Kristen  :D
Title: Re: Down with OCC? (Offline Credit Card)
Post by: SaltAquatics on February 04, 2006, 01:26:05 AM
I followed the directions given, and again when processing, and entering a phony card number (with appropriate number of digits, etc) I still get the error, "Invalid Account Number". Anything else I could do? I also have it set to Credit Card VS Payment Processor. Thanks again.

Javier
Title: Re: Down with OCC? (Offline Credit Card)
Post by: deneb on February 04, 2006, 01:58:32 AM
Quote from: Cholic on February 03, 2006, 23:44:57 PM
Thanks Deneb,

The instructions you gave worked perfectly.  I changed the Credit Card Processor to just Credit Card.  The test CC numbers also went through fine.  I have just one more question: where do I change the email address, so that a copy of the transaction also gets sent to me?  I changed the super administrator pass, but that wasnt it.

THanks again Deneb,

Kristen  :D

Copy of Orders are sent to whatever you have set in the contact email setting under the store config:
VM backend>Store>Edit Store>Contact Information tab

There is also the super admin user email and has a 'Receive System Emails' check box.

You should try to see which is which...don't remember right now.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: deneb on February 04, 2006, 01:59:55 AM
Quote from: SaltAquatics on February 04, 2006, 01:26:05 AM
I followed the directions given, and again when processing, and entering a phony card number (with appropriate number of digits, etc) I still get the error, "Invalid Account Number". Anything else I could do? I also have it set to Credit Card VS Payment Processor. Thanks again.

Javier

You have to use the test card numbers posted above because it performs a numerical check!
Title: Re: Down with OCC? (Offline Credit Card)
Post by: SaltAquatics on February 04, 2006, 05:44:26 AM
Those test numbers work great. My question now is, if my server in no way connects to anything, how on earth would it know if the account was valid or not before i punch it into my machine? Thanks again.

Javier
Title: Re: Down with OCC? (Offline Credit Card)
Post by: deneb on February 04, 2006, 07:46:56 AM
Quotehow on earth would it know if the account was valid or not before i punch it into my machine?

you don't (it doesn't)

all you know is that it passed VM's initial checks. 8)
Title: Re: Down with OCC? (Offline Credit Card)
Post by: SaltAquatics on February 04, 2006, 09:31:26 AM
So in theory, why wouldnt the "made up" credit card numbers I put in work? Like I said in a previous post, I put one in, and I get account invalid.... In theory, it shouldnt give me that error should it?

Javier
Title: Re: Down with OCC? (Offline Credit Card)
Post by: deneb on February 04, 2006, 19:40:22 PM
Quote from: SaltAquatics on February 04, 2006, 09:31:26 AM
So in theory, why wouldnt the "made up" credit card numbers I put in work? Like I said in a previous post, I put one in, and I get account invalid.... In theory, it shouldnt give me that error should it?

Javier

because Vm does a mathmatical check on the number to verify the CC# is a valid format!
Title: Re: Down with OCC? (Offline Credit Card)
Post by: Cholic on February 10, 2006, 22:06:01 PM
I think I may have found a bug in this OCC module.  If I an incorrect CC number, then the CC # will not be approved.  But when I enter the correct CC # with any combination of the 3 digit security code or experation, the OCC wil approve the Credit Card.

I would really like it to check both security code and experation date before approving the Credit Card.

Thanks in advance!

Kristen  8)
Title: Re: Down with OCC? (Offline Credit Card)
Post by: deneb on February 11, 2006, 02:50:50 AM
Quote from: Cholic on February 10, 2006, 22:06:01 PM
I think I may have found a bug in this OCC module.  If I an incorrect CC number, then the CC # will not be approved.  But when I enter the correct CC # with any combination of the 3 digit security code or experation, the OCC wil approve the Credit Card.

I would really like it to check both security code and experation date before approving the Credit Card.

Thanks in advance!

Kristen  8)

This is not a bug. It's intended functionality.

Please read the above posts about testing numbers and incorrect (invalid) CC numbers. VM is built in to use a numerical check to ensure validity of CC numbers. OCC uses these checks but just stores the CC data for later use. There is no way to tell if a card will be authorized by the card issuer until you bang the card manually!

CVV code and Exp Date can only be verified by the merchant services online. Then it would not be offline, right?

Maybe this payment method is not for you.
8)
Title: Re: Down with OCC? (Offline Credit Card)
Post by: Cholic on February 11, 2006, 19:20:20 PM
OK,

Got it.  Now I understand how it works.

Thanks man,

Kristen
Title: Re: Down with OCC? (Offline Credit Card)
Post by: medlington on February 21, 2006, 17:08:13 PM
Hi,

Im wanting to take switch / Meastro cards aswell as credit cards on my site, can i just add a new credit card type and call it 'switch' or will these mathmatical checks not recognise the switch card numbers as being in a valid format?

would it be better to create a whole new payment method for the switch card and then somehow disable these mathmatical checks?

thanks,
Title: Re: Down with OCC? (Offline Credit Card)
Post by: deneb on February 22, 2006, 03:21:06 AM
QuoteIm wanting to take switch / Meastro cards aswell as credit cards on my site, can i just add a new credit card type and call it 'switch' or will these mathmatical checks not recognise the switch card numbers as being in a valid format?

Yes, add credit card to VM list. There is support for it. Did you try it yet? Do an order with the Switch card and see what happens. This method does not do any live connects. ;)

Quotewould it be better to create a whole new payment method for the switch card and then somehow disable these mathmatical checks?

No, see above response to first bit.

Title: Re: Down with OCC? (Offline Credit Card)
Post by: Nguyen on March 01, 2006, 03:52:55 AM
Hi I need help.

I got the offline to work, however were do i download the number so i can process it later.   I cannot find where my customer credit card numbers after i have it process.  Please help i am a newbie....thanks a million
Title: Re: Down with OCC? (Offline Credit Card)
Post by: deneb on March 01, 2006, 04:15:19 AM
Quote from: Nguyen on March 01, 2006, 03:52:55 AM
Hi I need help.

I got the offline to work, however were do i download the number so i can process it later.   I cannot find where my customer credit card numbers after i have it process.  Please help i am a newbie....thanks a million

Check out this thread. (http://virtuemart.net/index.php?option=com_smf&Itemid=99999999&topic=13297.msg24208#msg24208)
Title: Re: Down with OCC? (Offline Credit Card)
Post by: holsum on March 05, 2006, 19:43:35 PM
I use teh authorize.net payment module and it works for most of my customers.  Some international customers have problems and we have to manually process their orders.  This Payment module you create looks PERFECT for that!

So here is my question.  Can I use both and let the customer choose which payment method?  International Customers choose OCC local customers choose the standard method?

Thanks,
-Holsum
Title: Re: Down with OCC? (Offline Credit Card)
Post by: Shopmonger7 on March 10, 2006, 16:56:40 PM
This may not be particular to the OCC module, but why is it that when a credit card error has been found due to VM's Luhn and other checking routines, that the user is brought back to index.php after the error has been displayed on the confirmation page instead of to the payment option page ?

I have also found this behaviour when checking the credit card payment option and entering NO values for name, number and CCV.

Checked with a vanilla install of joomla 1.0.7 ecommerce edition + OCC payment module.

Is this by design?

Peter
Title: Re: Down with OCC? (Offline Credit Card)
Post by: deneb on March 11, 2006, 00:35:34 AM
Quotewhy is it that when a credit card error has been found due to VM's Luhn and other checking routines, that the user is brought back to index.php after the error has been displayed on the confirmation page instead of to the payment option page ?

That is part of the current version of VM, not my OCC payment method.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: wheat on March 18, 2006, 06:18:41 AM
I've installed the OCC module and it seems to function properly, except by accident I hit the Next button to continue without having entered any of the credit card info; the credit card radio button by default is already selected. The page then actually continues to the Complete Order page.   Is this correct?  Would there be a reason to not inhibit this functionality, so that if the methoed of payment is CC that the appropriate CC info then been entered before continuing to the Complete Order page.

thoughts?
Title: Re: Down with OCC? (Offline Credit Card)
Post by: Soeren on March 21, 2006, 12:08:09 PM
Bug report here:
http://virtuemart.net/index.php?option=com_flyspray&do=details&id=616&tasks=all&Itemid=83

ciao, Soeren
Title: Re: Down with OCC? (Offline Credit Card)
Post by: wheat on March 26, 2006, 11:26:18 AM
Thanks!  That did the trick  ;D
Title: Re: Down with OCC? (Offline Credit Card)
Post by: winfreepcs on March 28, 2006, 20:07:23 PM
I've upgraded to Joomla 1.0.8 and VM 1.0.4.

And I've followed the instruction to the T.

When I finish and save. I would go back to activate it and the fonts got bigger. Not only that, but the bottom half where I get to select credit card is gone.

So can you check to see if your plug in still works? Or shall this be reported as a bug?

Thanks,
JSG
Title: Re: Down with OCC? (Offline Credit Card)
Post by: surfychik on March 29, 2006, 11:33:41 AM
Sorry if this is a dumb post, but is there a problem with the built in offline processing option that comes with virtuemart? Seems to me that complete credit card numbers are secure as parts are stored in order and parts in email to system admin?
I was overjoyed to find this feature in virtuemart (as would a lot of non-profit sites who can't afford payment processors). So whats the need for vm_payment_method_OCC_v1.0.1.zip ?

thanks folks - what a great product and community!!!

lesley
Title: Re: Down with OCC? (Offline Credit Card)
Post by: winfreepcs on March 29, 2006, 17:37:50 PM
It's my understanding that there's no built-in Offline CC in Virtuemart, hence the plug-in/hacking.

I don't think Virtuemart really wants to help merchants using VM to break their merchant account policy.

So to do OCC basically is to do it at your own risk.

JSG
Title: Re: Down with OCC? (Offline Credit Card)
Post by: deneb on March 29, 2006, 18:15:51 PM
Quote from: winfreepcs on March 28, 2006, 20:07:23 PM
I've upgraded to Joomla 1.0.8 and VM 1.0.4.

And I've followed the instruction to the T.

When I finish and save. I would go back to activate it and the fonts got bigger. Not only that, but the bottom half where I get to select credit card is gone.

So can you check to see if your plug in still works? Or shall this be reported as a bug?

Thanks,
JSG

Not a bug with OCC. The problems you are experiencing are not a result of this OCC payment method.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: deneb on March 29, 2006, 18:25:59 PM
Quote from: winfreepcs on March 29, 2006, 17:37:50 PM
It's my understanding that there's no built-in Offline CC in Virtuemart, hence the plug-in/hacking.

I don't think Virtuemart really wants to help merchants using VM to break their merchant account policy.

So to do OCC basically is to do it at your own risk.

JSG


QuoteIt's my understanding that there's no built-in Offline CC in Virtuemart, hence the plug-in/hacking.
Yes!
.
Quote
I don't think Virtuemart really wants to help merchants using VM to break their merchant account policy.
Pure speculation on your part! Again, this OCC payment method does nothing to break the rules.

QuoteSo to do OCC basically is to do it at your own risk.
CC processing always carries a risk of fraud or info theft when accepting credit cards, whether it is off-line or live. Live transactions are no safer than off-line and visa-versa.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: deneb on March 29, 2006, 18:28:49 PM
Quote from: surfychik on March 29, 2006, 11:33:41 AM
Sorry if this is a dumb post, but is there a problem with the built in offline processing option that comes with virtuemart? Seems to me that complete credit card numbers are secure as parts are stored in order and parts in email to system admin?
I was overjoyed to find this feature in virtuemart (as would a lot of non-profit sites who can't afford payment processors). So whats the need for vm_payment_method_OCC_v1.0.1.zip ?

thanks folks - what a great product and community!!!

lesley


Quotebut is there a problem with the built in offline processing option that comes with virtuemart?
offline processing does not cone in VirtueMart

use my OCC payment method to accomplish that end. this is a custom hack not built into VM
Title: Re: Down with OCC? (Offline Credit Card)
Post by: winfreepcs on March 29, 2006, 21:30:31 PM
Quote
I don't think Virtuemart really wants to help merchants using VM to break their merchant account policy.
Pure speculation on your part! Again, this OCC payment method does nothing to break the rules.
Quote

I think you're misunderstanding me so please do not get so defensive. I'm not insuation that OCC breaks the rule.

I'm guessing that by NOT including Offline Credit Card processing it keeps VM and those that use VM out of trouble. Your OCC is an option for those that CHOSE to do offline cc processing whereas merchant account processors prefer online credti card processing.

Chill, dude. I am using your hacked plugin as it is what I was looking for.

Thanks,
JSG
Title: Re: Down with OCC? (Offline Credit Card)
Post by: deneb on March 29, 2006, 23:34:14 PM
QuoteI'm guessing that by NOT including Offline Credit Card processing it keeps VM and those that use VM out of trouble.

I'm chill.. just want to set the record straight. No, it is just a time/ demand thing with developing an offline cc method. You are reading too much into this.

How is offline going to get you into trouble as opposed to on-line?
If you are collecting CVV2 codes, VM stores them in DB regardless of transaction mode or even the cc payment method used.

My OCC payment method does not handle the collecting/validating or storing of cc data, at all.

This is evident in the fact that if you want to turn off (or modify the functionality of) DB storage of cc data (including CVV2 #s)...you have to modify other stock VM files.

Have fun!
8)
Title: Re: Down with OCC? (Offline Credit Card)
Post by: Xemnosyst on March 30, 2006, 19:52:27 PM
Quote from: deneb on February 02, 2006, 06:50:24 AM
but I suggest that when you are viewing the order list, force that page into secure mode before going further. Then view the order page or the order print view pop-up with the unmasked digits. ;)

I see how to unmask the digits, but how do I ensure that the order print page is only ever viewed securely?
Title: Re: Down with OCC? (Offline Credit Card)
Post by: Xemnosyst on March 30, 2006, 20:09:45 PM
Quote from: Xemnosyst on March 30, 2006, 19:52:27 PM
I see how to unmask the digits, but how do I ensure that the order print page is only ever viewed securely?

Ha!  I just answered my own question!  Here's my solution:

In the file administrator\components\com_virtuemart\html\order.order_print.php I changed the lines

              echo ps_checkout::asterisk_pad( $dbaccount->f("account_number"), 4, true );
             if( $dbaccount->f('order_payment_code')) {
               echo '<br/>(CVV Code: '.$dbaccount->f('order_payment_code').') ';
             }


to


           if( @$_SERVER['HTTPS'] == 'on' ) {
             echo $dbaccount->f("account_number");
             if( $dbaccount->f('order_payment_code')) {
               echo '<br/>(CVV Code: '.$dbaccount->f('order_payment_code').') ';
             }
           }
           else {
              echo ps_checkout::asterisk_pad( $dbaccount->f("account_number"), 4, false );
           }
Title: Re: Down with OCC? (Offline Credit Card)
Post by: simbo1905 on March 30, 2006, 20:24:11 PM
Quote from: deneb on March 29, 2006, 18:25:59 PM
CC processing always carries a risk of fraud or info theft when accepting credit cards, whether it is off-line or live. Live transactions are no safer than off-line and visa-versa.

i dont store the card number at all nor the cvv security code. i do an online payment transaction authorize.net. so "online is no safter than offline" is not true for me. i am no safer from being ripped off with a stolen card number (except i have set my payment gateway to only approve orders when the billing address really does match the card holder address) but my customers are a lot safer from my making a mistake or my hosters messing up (or an employee being a criminal) as i have only billing addresses to steal but no card data.

http://www.theregister.co.uk/2005/07/15/who_pays_for_security_breaches/
Title: Re: Down with OCC? (Offline Credit Card)
Post by: winfreepcs on March 30, 2006, 21:32:07 PM
Quote from: Xemnosyst on March 30, 2006, 20:09:45 PM
Quote from: Xemnosyst on March 30, 2006, 19:52:27 PM
I see how to unmask the digits, but how do I ensure that the order print page is only ever viewed securely?

Ha!  I just answered my own question!  Here's my solution:

In the file administrator\components\com_virtuemart\html\order.order_print.php I changed the lines

              echo ps_checkout::asterisk_pad( $dbaccount->f("account_number"), 4, true );
             if( $dbaccount->f('order_payment_code')) {
               echo '<br/>(CVV Code: '.$dbaccount->f('order_payment_code').') ';
             }


to


           if( @$_SERVER['HTTPS'] == 'on' ) {
             echo $dbaccount->f("account_number");
             if( $dbaccount->f('order_payment_code')) {
               echo '<br/>(CVV Code: '.$dbaccount->f('order_payment_code').') ';
             }
           }
           else {
              echo ps_checkout::asterisk_pad( $dbaccount->f("account_number"), 4, false );
           }


I tried and didn't work. How do I get https:// in admin?

JSG
Title: Re: Down with OCC? (Offline Credit Card)
Post by: simbo1905 on March 30, 2006, 22:02:32 PM
Quote from: winfreepcs on March 30, 2006, 21:32:07 PM
How do I get https:// in admin?

if you are on apache you can force https in /administrator with this tip

http://virtuemart.net/index.php?option=com_smf&Itemid=71&topic=16629.0



Title: Re: Down with OCC? (Offline Credit Card)
Post by: mhpcs on April 03, 2006, 14:08:07 PM
Quote from: deneb on February 22, 2006, 03:21:06 AM
QuoteIm wanting to take switch / Maestro cards aswell as credit cards on my site, can i just add a new credit card type and call it 'switch' or will these mathmatical checks not recognise the switch card numbers as being in a valid format?

Yes, add credit card to VM list. There is support for it. Did you try it yet? Do an order with the Switch card and see what happens. This method does not do any live connects. ;)

Hi All

Thank you for this great OCC payment module deneb it is exactly what I am looking for. I have installed it on my Joomla 1.0.8 + VM 1.0.4 site.

I do have a question/plea for help, I also need to accept Switch/Maesto cards on my site. I've added the card 'types' to the list in the admin interface and they display correctly during checkout. However here in the UK we also need to take the Start Date from the card, please could anyone help me with this one?

I spent some time last night trying to get the below 'hack' working, but I didn't have much success, perhaps this was because it was done on VM 1.0.1?
http://virtuemart.net/index.php?option=com_smf&Itemid=71&topic=13584.0

I have been searching the forums for some time and have seen another 'hack' to do this which I may try tonight, but it was done on VM 1.0.2 so I am wondering if it will work  ???

If anyone out there would be able to help that would be great, when something goes wrong I get totally stuck (but I'm learning  ;D)

Kind Regards
Marc

Title: Re: Down with OCC? (Offline Credit Card)
Post by: deneb on April 03, 2006, 22:20:00 PM
You have to modify other files to collect extra cc# info, not this OCC.

Post your question in that thread you mentioned.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: aaronc on May 10, 2006, 21:15:34 PM
Hi Mark

Did you get anywhere with this, as I need the exact same lol

Cheers
Aaron
Title: Re: Down with OCC? (Offline Credit Card)
Post by: dbds on May 19, 2006, 23:45:30 PM
Fantastic module thanks.

One question. I dont need the ccv check. How do I disable it?
Title: Re: Down with OCC? (Offline Credit Card)
Post by: simbo1905 on May 24, 2006, 22:32:57 PM
Quote from: deneb on March 29, 2006, 23:34:14 PM
If you are collecting CVV2 codes, VM stores them in DB regardless of transaction mode or even the cc payment method used.
...snip..
This is evident in the fact that if you want to turn off (or modify the functionality of) DB storage of cc data (including CVV2 #s)...you have to modify other stock VM files.
I have brought this matter up before - storing the CVV2 in the database (encrypted or not) is totally in violation of the credit card industry standard which all merchant accounts say you must comply with:
http://virtuemart.net/index.php?option=com_smf&Itemid=71&topic=16426.0
so i dont believe that a company running Virtuemart would pass an audit by their bank or their bank's CC provider. (It happens - we have a neighbour that got a surprise random audit of their companies computer systems and online store by Visa to make sure that they were compliant - they don't use VM - and they are a very small local company).

You have to read your merchant CC terms and conditions - they say that you have comply with policy of each type of credit card that you accept - download and read those and they say that you have to comply with the standards doc - download and read that and they say that it is forbidden to store CVV2.

I have modified the code not to store CVV2 on my site - i posted a patch at that link above that automatically applies my modifications.

In my case I use the authorize.net payment gateway and it uses the CVV2 to take the payment at the end of the checkout. Authorize.net accepts or rejects the payment instantly - it is unnecessary to store the CVV2 in the virtuemart database.

Visa/Amex/MasterCard/Discover et al forbid you to store the CVV2 number - that is the point of it - it cannot be leaked or stolen by sloppy database security as it is forbidden to store it unless you are Visa/Amex/MasterCard/Discover themselves!

It should be noted that it is possible to take a CC payment without taking the CVV2 number. Clearly this is more risky for the merchant - but storing the CVV2 is risky to if you get caught violating your merchant CC agreement. Use a payment gateway and they can check the CVV2, and check whether the card is cancelled, and check that the billing address given on the site matches the address held against the CC card. If the order succeeds then all is good and the funds are already held for you at your merchant account.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: jc20unc on May 25, 2006, 19:42:52 PM
I am trying to use Deneb's OCC with Mambo 4.5.3h and phpshop. I was able to install per directions but when testing after I enter the entire test CC info (Visa #4007000000027 or Visa #4111111111111111, if I enter Visa #4111111111111 I get invalid card#) I agree to Terms of Service and Click "Confirm Order" there is where I get the following error:

Fatal error: Call to a member function on a non-object in /home/glencoma/public_html/mambo/administrator/components/com_phpshop/classes/payment/ps_offlinecc.php on line 204

The following code is from lines 186 to the end (line 253), with line 204 indicated:

Something must be wrong with the $vmLogger variable? Any recommendations would be greatly appreciated.

*Update: I tried deleting the comment "//" from line 203 to see if that code was needed but I get the same error just for line 203


  /**************************************************************************
  ** name: process_payment()
  ** created by: Deneb (BMS)
  ** description: process transaction for offline use with authorize.net
  ** parameters: $order_number, the number of the order, we're processing here
  **            $order_total, the total $ of the order
  ** returns:
  ***************************************************************************/
   function process_payment($order_number, $order_total, &$d) {
   
        //Visa Test Account           4007000000027
//Amex Test Account           370000000000002
//Master Card Test Account    6011000000000012
//Discover Test Account       5424000000000015

        global $VM_LANG, $vmLogger;
       
        //$vmLogger->debug($VM_LANG->_PHPSHOP_PAYMENT_TRANSACTION_DEBUG);
LINE 204 $vmLogger->debug('Beginning to simulate processing delay');

if (OCC_DELAY_ENABLE == TRUE){
$delay_time = 6;
sleep($delay_time);
}

        //$response = array(1,1,1,1,1,1,$VM_LANG->_PHPSHOP_PAYMENT_TRANSACTION_RESPONSE);
$response = array(1,1,1,1,1,1,"Offline");

if (DEBUG) {
$_SESSION['response'] = $response; //for debug
}

        // Approved - Success!
        if ($response[0] == '1') {
           //$d["order_payment_log"] = $VM_LANG->_PHPSHOP_PAYMENT_TRANSACTION_OFFLINE;
   $d["order_payment_log"] = "PENDING: ";
           $d["order_payment_log"] .= $response[3];
           
           $vmLogger->debug( $d['order_payment_log']);
           
           // Catch Transaction ID
           $d["order_payment_trans_id"] = $response[6];

           return True;
        }
        // Payment Declined
        elseif ($response[0] == '2') {

           $vmLogger->err( $response[3] );

           $d["order_payment_log"] = $response[3];
           // Catch Transaction ID
           $d["order_payment_trans_id"] = $response[6];
           return False;
        }
        // Transaction Error
        elseif ($response[0] == '3') {

           $vmLogger->err( $response[3] );

           $d["order_payment_log"] = $response[3];
           // Catch Transaction ID
           $d["order_payment_trans_id"] = $response[6];
           return False;
        }
   }
   
}



Thanks!
Title: Re: Down with OCC? (Offline Credit Card) Spanish
Post by: SuperMau on May 26, 2006, 08:34:16 AM
Great!!! Just what I needed, Thanx. By the way, I have translated it to spanish if anyone is interested.

Thanks again.
SuperMau

[attachment cleanup by admin]
Title: Re: Down with OCC? (Offline Credit Card)
Post by: deneb on May 29, 2006, 18:53:22 PM
Quote from: dbds on May 19, 2006, 23:45:30 PM
Fantastic module thanks.

One question. I dont need the ccv check. How do I disable it?

uncheck it in the OCC payment config
Title: Re: Down with OCC? (Offline Credit Card)
Post by: 110productions on June 16, 2006, 19:57:44 PM
hey, so i installed occ and all that, but when i go to the shopping cart and try to check out a blank pages comes up with this error

SQL=SELECT oldurl, newurl FROM #__redirection WHERE oldurl LIKE '%/webcart/showcat%' LIMIT 1:
FATAL ERROR RETRIEVING SIMPLEBOARD URL

any idea's?
Title: Re: Down with OCC? (Offline Credit Card)
Post by: knate on June 27, 2006, 15:47:57 PM
I installed this payment method using the Manually Create A Payment Method instructions.

When I go to Store->List Payment Methods it lists OCC twice and I get this error:

Warning: fopen(/*******/administrator/components/com_virtuemart/classes/payment/ps_offlinecc.cfg.php): failed to open stream: Permission denied in /*******/administrator/components/com_virtuemart/classes/payment/ps_offlinecc.php on line 177


Any help would be MUCH apprecitaed!

Title: Re: Down with OCC? (Offline Credit Card)
Post by: Yabba Dabba on July 16, 2006, 00:35:09 AM
deneb hasn't been around for over a month, so I don't know if this thread/hack is dead, but just in case...

Having installed OCC (many thanks!!) how can one test to see if it is working?
That is, I want to use a common cc test number, but I get the following:

"Warning: Sorry, but the Credit Card Number you've used is a testing number!"
Title: Re: Down with OCC? (Offline Credit Card)
Post by: Yabba Dabba on July 16, 2006, 01:06:22 AM
Apparently there is a variable $is_test that must return "true" for the checkout procedure to accept cc test numbers.

Not seeing where this is set. Any suggestions
Title: Re: Down with OCC? (Offline Credit Card)
Post by: Yabba Dabba on July 16, 2006, 01:09:44 AM
The only cc test number that is rejected is the ubiquitous 4111... Visa number.

Using any other test number works without being in test mode (whichever way that may be set).
Title: Re: Down with OCC? (Offline Credit Card)
Post by: eyal51 on July 16, 2006, 04:31:05 AM
Hi,

I am using a custom (local) credit card type in my site. So, I've added this card to my Credit Card List with a uniq code...

My credit card numbers are 8 digits long and the problem is that the verification proccess is checking the digits and gives me back: "The credit card in not valid.."

I've trying to add it manually inside "ps_payment_method.php" but with no luck...

Can anyone help me please?

Thanks,

Eyal
Title: Re: Down with OCC? (Offline Credit Card)
Post by: Yabba Dabba on July 16, 2006, 23:36:47 PM
I assume the OCC module includes an industry-standard Luhn checksum test to verify the cc number. If your numbers don't comply with that test, you would have to substitute your own test, or just disable the testing all together.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: eyal51 on July 18, 2006, 02:03:09 AM
That's exactly what I'm asking !

How can I disable this check??
Title: Re: Down with OCC? (Offline Credit Card)
Post by: Nicholas on August 17, 2006, 23:04:14 PM
Has this option been implimented in the latest version of VM? Because it seems like it does what your hack can do already. It sends part of the cc in the email (last 4) and the rest is on the order screen.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: esurge on August 24, 2006, 11:07:01 AM
Hello all.  :o

I want to:
1 - collect CC information for payment of the customer's order,
2 - check to see if customer's cc has a valid number,
3 - store the order in an encrypted file (i.e., I do not want to send the cc info in an e-mail)
4 - download the encrypted order
6 - decrypt the order and cc number
5 - run the cc manually when the order is read to ship.

The above is grate.

I would like to make a recommendation. This would solve a few problems.

When and order is received it goes into the pending state. Cool, if you change it to shipped or cancelled then the system should delete the following

Card Number
CVV2
Exp Date

Can some please help with this because I have A LOT of client who need this now because of the new rules and all.

PLEASE let me know

Thank you
Title: Re: Down with OCC? (Offline Credit Card)
Post by: Omini on September 26, 2006, 11:43:42 AM
I can't download anything. Is there somewhere else to download this? Thanks!
Title: Re: Down with OCC? (Offline Credit Card)
Post by: Omini on September 27, 2006, 15:16:43 PM
nevermind, I can download it now. Must have been something weird yesterday.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: peter.f on October 12, 2006, 19:57:50 PM
Hi All,
OCC seems to work smoothly. But how do I recieve the entire credit card string so that I may manually process with another system. Any help would be appreciated.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: deneb on October 25, 2006, 08:16:41 AM
Quote from: peter.f on October 12, 2006, 19:57:50 PM
Hi All,
OCC seems to work smoothly. But how do I recieve the entire credit card string so that I may manually process with another system. Any help would be appreciated.

you can search the forum on "unmask" or just "mask" and look for refs to  credit card info.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: selcuk on October 27, 2006, 14:12:10 PM
i see this error when adding this system 

Warning: fopen(/home/httpd/vhosts/.............com/httpdocs/administrator/components/com_virtuemart/classes/payment/ps_offlinecc.cfg.php): failed to open stream: Permission denied in /home/httpd/vhosts/...........com/httpdocs/administrator/components/com_virtuemart/classes/payment/ps_offlinecc.php on line 177

how can i do ?
Title: Re: Down with OCC? (Offline Credit Card)
Post by: selcuk on October 27, 2006, 14:27:06 PM
i fix this problem its about 777 
Title: Re: Down with OCC? (Offline Credit Card)
Post by: victune on December 27, 2006, 20:49:32 PM
What about disable the Credit Card Numbers check ?
In some countries there is local Visa and Mastercard cards which have only 8 digits, not 16. This make virtuemart and this great module useless, because the checking fail all time, although the credit card numbers are real.

Please, Can someone tell how to disabale it ?

Thanks.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: mikegeo on March 30, 2007, 00:44:45 AM
What if I just want to email the admin backend order/CC page to an alternate email address and  have the first part (hidden part) in the admin area show on the email.  This email would be a 2nd email box for the person who does order process.  match order sheets and process order, no backend needed?
Title: Re: Down with OCC? (Offline Credit Card)
Post by: John on April 07, 2007, 16:48:10 PM
Hi Deneb,
I have just tried your OCC addon. Works fine for the user and both they and myself get an e-mail with the last 4 digits. I then went into see the order in VM and cannot see any credit card or shipping information ? I get the following screen as attached in the Jpeg basically all of the shipping and payment info is surrounded by a red box any ideas ?

Woops just found out that the information is ther but it is in white text and cannot be seen, maybe its due to my template any ideas how I can adjust this ?

SOLVED it was mt template css

Cheers

Shorty

[attachment cleanup by admin]
Title: Re: Down with OCC? (Offline Credit Card)
Post by: ruben on April 28, 2007, 02:49:32 AM
Quote from: John on April 07, 2007, 16:48:10 PM
Hi Deneb,
I have just tried your OCC addon. Works fine for the user and both they and myself get an e-mail with the last 4 digits. I then went into see the order in VM and cannot see any credit card or shipping information ? I get the following screen as attached in the Jpeg basically all of the shipping and payment info is surrounded by a red box any ideas ?

Woops just found out that the information is ther but it is in white text and cannot be seen, maybe its due to my template any ideas how I can adjust this ?

SOLVED it was mt template css

Cheers

Shorty

Its not the template css its the report css am I rigth? where can I change the value of the font color of the payment information  inorder to see the credit card info without needing to selecting it?
Title: Re: Down with OCC? (Offline Credit Card)
Post by: ruben on May 02, 2007, 02:12:35 AM
still waiting
Title: Re: Down with OCC? (Offline Credit Card)
Post by: ruben on July 25, 2007, 04:43:54 AM
the problem wasnt the template css, I made a bgcolor modification to the order.order_print.php file, now i can see the data
Title: Re: Down with OCC? (Offline Credit Card)
Post by: dk9900 on October 20, 2007, 15:24:27 PM
Quote from: victune on December 27, 2006, 20:49:32 PM
What about disable the Credit Card Numbers check ?
In some countries there is local Visa and Mastercard cards which have only 8 digits, not 16. This make virtuemart and this great module useless, because the checking fail all time, although the credit card numbers are real.

Please, Can someone tell how to disabale it ?


I am looking for something similar myself, I want to accept "laser" cards which have 19 digits.

Is it possible to disable it?

Cheers.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: mrfoameruk on January 28, 2008, 13:55:20 PM
i'm geting this error when doing the new payment.

Warning: main(/home/sites/uk****y.co.uk/public_html/administrator/components/com_virtuemart/classes/payment/ps_offlinecc.php) [function.main]: failed to open stream: No such file or directory i/home/sites/ukh***shery.co.uk/public_html/administrator/components/com_virtuemart/html/store.payment_method_form.php     on line 39

Warning: main(/home/sites/u*****shery.co.uk/public_html/administrator/components/com_virtuemart/classes/payment/ps_offlinecc.php) [function.main]: failed to open stream: No such file or directory in /home/sites/uk****shery.co.uk/public_html/administrator/components/com_virtuemart/html/store.payment_method_form.php on line 39

Warning: main() [function.include]: Failed opening '/home/sites/uk******hery.co.uk/public_html/administrator/components/com_virtuemart/classes/payment/ps_offlinecc.php' for inclusion (include_path='.:/usr/share/pear') in /home/sites/u******ery.co.uk/public_html/administrator/components/com_virtuemart/html/store.payment_method_form.php on line 39
Payment Method Form


seems to install pretty much ok and seems to work but cant add a comment as this now comes up.
i do have administrator/components/com_virtuemart/         
but not a             html   /store.payment_method_form.php       directory or file

Any help apprieciated.  shame deneb is'nt around anymore
Title: Re: Down with OCC? (Offline Credit Card)
Post by: ruben on January 29, 2008, 04:51:17 AM
Hi Daneb I have a really easy question for you.... when users in my website select OCC they type in the CCnumber, the expiration date, the security number behind the credit card, etc. also they select the credit card type (Visa, master card, etc), the problem is that the credit card type doesnt appear neither in the new order email from VM or on the Order Info inside VM Control Panel, could you please provide me advise on this to make it appear? thank you in advance.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: murducky on March 09, 2008, 02:01:02 AM
Quote from: ruben on January 29, 2008, 04:51:17 AM
Hi Daneb I have a really easy question for you.... when users in my website select OCC they type in the CCnumber, the expiration date, the security number behind the credit card, etc. also they select the credit card type (Visa, master card, etc), the problem is that the credit card type doesnt appear neither in the new order email from VM or on the Order Info inside VM Control Panel, could you please provide me advise on this to make it appear? thank you in advance.

I am having the same problem. Please reply with advise asap.. it would be greatly appericated !!
Title: Re: Down with OCC? (Offline Credit Card)
Post by: murducky on March 09, 2008, 23:09:18 PM
Quote from: murducky on March 09, 2008, 02:01:02 AM
Quote from: ruben on January 29, 2008, 04:51:17 AM
Hi Daneb I have a really easy question for you.... when users in my website select OCC they type in the CCnumber, the expiration date, the security number behind the credit card, etc. also they select the credit card type (Visa, master card, etc), the problem is that the credit card type doesnt appear neither in the new order email from VM or on the Order Info inside VM Control Panel, could you please provide me advise on this to make it appear? thank you in advance.

solved my issues by search the forums

If you are using the Minted One-Point-Five by JoomlaWorks admin template + VM backoffice  that may be causing your problems, it was what my problem was read more here http://forum.virtuemart.net/index.php?topic=33499.0

I am having the same problem. Please reply with advise asap.. it would be greatly appericated !!
Title: Re: Down with OCC? (Offline Credit Card)
Post by: lilith2014 on March 10, 2008, 17:14:24 PM
Quote
I would like to make a recommendation. This would solve a few problems.

When and order is received it goes into the pending state. Cool, if you change it to shipped or cancelled then the system should delete the following

Card Number
CVV2
Exp Date

Can some please help with this because I have A LOT of client who need this now because of the new rules and all.

PLEASE let me know

Thank you
What happen with that?
Title: Re: Down with OCC? (Offline Credit Card)
Post by: ruben on April 17, 2008, 02:08:48 AM
Quote from: murducky on March 09, 2008, 23:09:18 PM
Quote from: murducky on March 09, 2008, 02:01:02 AM
Quote from: ruben on January 29, 2008, 04:51:17 AM
Hi Daneb I have a really easy question for you.... when users in my website select OCC they type in the CCnumber, the expiration date, the security number behind the credit card, etc. also they select the credit card type (Visa, master card, etc), the problem is that the credit card type doesnt appear neither in the new order email from VM or on the Order Info inside VM Control Panel, could you please provide me advise on this to make it appear? thank you in advance.
solved my issues by search the forums
If you are using the Minted One-Point-Five by JoomlaWorks admin template + VM backoffice  that may be causing your problems, it was what my problem was read more here http://forum.virtuemart.net/index.php?topic=33499.0
I am having the same problem. Please reply with advise asap.. it would be greatly appericated !!
My problem wasnt fixed with this. Cand anyone help please?
Title: Re: Down with OCC? (Offline Credit Card)
Post by: Lee on April 17, 2008, 02:47:28 AM
 I think the card type not showing up in the order is a different issue altogether than the one referenced (about missing check boxes) in that other post .  Probably the code necessary to include the card type in the order just isn't there or has an error.

On a separate note, the automatic order deletion last mentioned by lilith2014:  probably tying the deletion to the order status changes would be no small feat.  I choose to print the order out and then delete it (entirely) from the backend after I charge/ship it.  That way I have a softcopy (admin email), hardcopy (printout which includes the full cc#), and I use google analytics to keep track of all the order stats (not affected by deleting data from the backend).
Title: Re: Down with OCC? (Offline Credit Card)
Post by: John on May 03, 2008, 10:57:32 AM
Hi Guys,

I am looking to upgrade one of my sites to 1.10 I use the OCC payment method, does anyone know if there are any issues using this with the new version of VM ?

Thanks

John
Title: Re: Down with OCC? (Offline Credit Card)
Post by: kazmiah on May 31, 2008, 10:48:22 AM
Hi - I am desperately looking for a solution regarding the credit card type not showing in the order email or backend. Can anyone offer any advice on how they access the credit card type for offline processing. Really really appreciate any hints.

Thanks, Tanya
Title: Re: Down with OCC? (Offline Credit Card)
Post by: DontPanic on October 16, 2008, 09:02:53 AM
Hi For all who are interested I've altered the OCC module for compatability with Joomla 1.5 and vm 1.1

Just tweaked the 1.0.1 code a little.



[attachment cleanup by admin]
Title: Re: Down with OCC? (Offline Credit Card)
Post by: fidel on November 20, 2008, 00:33:57 AM
For some reason, upon checkout, I am not seeing the credit card type dropdown menu. Is there something I am missing. I have this running on one other site and cannot figure it out. Perhaps because the site it is working on has the old Mambo mos_ tables and the site it is not working on has the Joomla jos_ tables. Both are the same versions listed below. Thanks.

JOOMLA 1.0.15
VIRTUEMART 1.0.15




PROBLEM SOLVED - I inadvertently left out the (1,2,3,4,) from the jos_vm_payment_method table. Thanks.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: victune on March 11, 2009, 21:47:42 PM
Quote from: victune on December 27, 2006, 20:49:32 PM
What about disable the Credit Card Numbers check ?
In some countries there is local Visa and Mastercard cards which have only 8 digits, not 16. This make virtuemart and this great module useless, because the checking fail all time, although the credit card numbers are real.

Please, Can someone tell how to disabale it ?

Thanks.

Anyone know how to disable it ?
Title: Re: Down with OCC? (Offline Credit Card)
Post by: smitje on August 19, 2009, 17:52:01 PM
Any ideas if this complies with PCI DSS (Payment Card Industry Data Security Standard)? It would seem that the email sending parts of the card payment details are not encrypted?
Title: Re: Down with OCC? (Offline Credit Card)
Post by: coffey2049 on November 16, 2009, 16:37:32 PM
Why am I not able to see the last four digits of the Credit Card?  I need these to complete the offline transaction.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: coffey2049 on November 16, 2009, 16:42:23 PM
Hello,
I installed this and it is working great but for some reason I can not see all the digits of the card to process offline...please help!@
Title: Re: Down with OCC? (Offline Credit Card)
Post by: technext2k on November 17, 2009, 15:28:17 PM
Hi,

My question may be a bit off topic but is there a solution for a small shop to securely submit credit numbers without SSL? by default they are sent as plain text, when no SSL. Any idea? to save SSL expense?

Thanks.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: cormicar on December 05, 2009, 14:47:38 PM
You can get a basic SSL cert from godaddy for about €10 per domain per year. Just got mine and it works great for a small online store.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: Xoltic on February 04, 2011, 00:52:18 AM
Hi, i just want to know if this still working.
I'm using Joomla V. 1.5.18 and VM 1.1.6.

Because i need it.
Title: Re: Down with OCC? (Offline Credit Card)
Post by: mooseturker on February 12, 2011, 15:39:01 PM
Hi,

This is my first post so please be gentle, tearing my hair out here, I need to install offline payment process onto a new 1.5 Joomla / Virtuemart install, i have tried to install this OCC using both methods but get 'Direct Access to this location is not allowed.' in both cases. Can anyone let me know where i am going wrong.

Cheers

Trev
Title: Re: Down with OCC? (Offline Credit Card)
Post by: jenkinhill on February 12, 2011, 18:20:31 PM
The mod deneb wrote was for VirtueMart 1.0, ie a very old version (and deneb has not been back to the forum in 3 years). A member modified the code to work with VM1.1.0 but I have no idea if it would work with 1.1.7
http://forum.virtuemart.net/index.php?topic=14955.msg150144#msg150144

Be aware though, that off line processing is almost certain to break the terms of your merchant card account unless you inform them and you would have to obtain PCI clearance for what you are doing. 
Title: Re: Down with OCC? (Offline Credit Card)
Post by: webiedesign on June 11, 2011, 03:30:39 AM
Is there a way to delete the credit card info (not the whole order) from the database after the information is collected ? Perhaps via phpmyAdmin ?