Would like to show complete cc in backend - offline cc processing plugin

[conlippert]

Hello,
We are using the offline cc processing plugin by alatek. We also have version 2.0.6 so the email is showing the last 4 digits of the cc card fine, but we would like to show the entire card number in the administrator back end so we can actually manually enter the numbers right from the order screen. I found some code in alatek_creditcard.php for where the last 4 digits are replaced with '*'s. Is this the best place to remove those stars? Or will that mess up the email also? Just looking for some advice...would rather change it in the views but didn't see where that could happen.
Thanks,
Connie L.

[jjk]

I think you are trying to create a security problem.
The first part of the credit card number is visible in the VM2 administraton 'Orders' view as long as the order status is "Pending" and will be deleted if you change the order status to "Confirmed". The second part (4 digits) is sent to you via email.
If you change the code to display the full credit card number in the backend, you might have a serious liability problem when your site becomes hacked.

[conlippert]

It's an administrative issue for my client. They would like to show the cc number in full in the VM Order administrator. Once the number is manually recorded, then switch to confirm will delete the number. In reality, the number will not be there for very long since orders are monitored closely. Also all our other security layers are in place...ssl, host permissions, database permissions, etc.

[jjk]

It's an administrative issue for my client.

I suppose if you implement that, your client will fail PCI compliance.
http://www.pcicomplianceguide.org/pcifaqs.php