Announcement

Collapse
No announcement yet.

Secure payment data

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    Secure payment data



    Hi folks --

    I'm doing a custom export module for a client that wants to include
    credit-card info in the export; but the're running the Simple Validation
    payment module with encryption turned on. I'm trying to figure out how to
    decrypt the data.

    I found some code in the LSK batch-report module, which I copied and
    pasted, but it doesn't seem to be working correctly. The g.passphrase
    value is always null ... I don't see any code to initialize that, so I
    suppose it must be controlled by Merchant. Does this mean that I have to
    convert my export to a batch-report module in order to get access to the
    secure data? Or is there a way for other types of modules to get
    decryption working?

    Thanks --

    Kent Multer | /| P.O.Box 701895, Dallas TX 75370
    Magic Metal Productions | / | (214) 570 8264 voice/fax
    | | [email protected]
    * Web developer/designer http://TheMagicM.com
    * E-commerce and Miva
    * Author, The Official Miva Web Scripting Book -- available on-line:
    <A HREF ="http://www.amazon.com/exec/obidos/ISBN=0966103211/magicmetalproducA">http://www.amazon.com/exec/obidos/ISBN=0966103211/magicmetalproducA</A>




    #2
    Secure payment data



    > -----Original Message-----
    > From: [email protected]
    > [mailto:[email protected]]On Behalf Of Kent
    > Sent: Saturday, August 21, 2004 4:12 PM
    > To: Miva Merchant coders list
    > Subject: [mrc] Secure payment data
    >
    >
    > Hi folks --
    >
    > I'm doing a custom export module for a client that wants to include
    > credit-card info in the export; but the're running the Simple Validation
    > payment module with encryption turned on. I'm trying to figure out how to
    > decrypt the data.
    >
    > I found some code in the LSK batch-report module, which I copied and
    > pasted, but it doesn't seem to be working correctly. The g.passphrase
    > value is always null ... I don't see any code to initialize that, so I
    > suppose it must be controlled by Merchant. Does this mean that I have to
    > convert my export to a batch-report module in order to get access to the
    > secure data? Or is there a way for other types of modules to get
    > decryption working?

    Try directly calling the function that will open the database that contains the pass
    phrase, and then try it. However, I would have to responsible remind the client that
    transferring unsecured data via ftp is not really a good idea. (Although, it could be
    downloaded via SFTP i suppose.).

    -Bruce

    ---
    Outgoing mail is certified Virus Free.
    Checked by AVG anti-virus system (<A HREF =/"http://www.grisoft.com)/">http://www.grisoft.com)</A>.
    Version: 6.0.742 / Virus Database: 495 - Release Date: 8/19/04


    Comment


      #3
      Secure payment data




      >Try directly calling the function that will open the database that
      >contains the pass
      >phrase, and then try it.

      Sorry, what function is that? I haven't found any documentation that's of
      much help with this.

      Kent Multer | /| P.O.Box 701895, Dallas TX 75370
      Magic Metal Productions | / | (214) 570 8264 voice/fax
      | | [email protected]
      * Web developer/designer http://TheMagicM.com
      * E-commerce and Miva
      * Author, The Official Miva Web Scripting Book -- available on-line:
      <A HREF ="http://www.amazon.com/exec/obidos/ISBN=0966103211/magicmetalproducA">http://www.amazon.com/exec/obidos/ISBN=0966103211/magicmetalproducA</A>



      Comment


        #4
        Secure payment data



        Oh, damn, forgot, the whole encryption thing was post compile so there is no uncompiled
        code to review...hey Miva...comma, toss us a bone here...

        -Bruce


        > -----Original Message-----
        > From: Kent [mailto:[email protected]]
        > Sent: Saturday, August 21, 2004 6:01 PM
        > To: Bruce - Phosphor Media; Miva Merchant coders list
        > Subject: RE: [mrc] Secure payment data
        >
        >
        >
        > >Try directly calling the function that will open the database that
        > >contains the pass
        > >phrase, and then try it.
        >
        > Sorry, what function is that? I haven't found any documentation that's of
        > much help with this.
        >
        > Kent Multer | /| P.O.Box 701895, Dallas TX 75370
        > Magic Metal Productions | / | (214) 570 8264 voice/fax
        > | | [email protected]
        > * Web developer/designer http://TheMagicM.com
        > * E-commerce and Miva
        > * Author, The Official Miva Web Scripting Book -- available on-line:
        > <A HREF ="http://www.amazon.com/exec/obidos/ISBN=0966103211/magicmetalproducA">http://www.amazon.com/exec/obidos/ISBN=0966103211/magicmetalproducA</A>
        >
        >
        > ---
        > Incoming mail is certified Virus Free.
        > Checked by AVG anti-virus system (<A HREF =/"http://www.grisoft.com)/">http://www.grisoft.com)</A>.
        > Version: 6.0.742 / Virus Database: 495 - Release Date: 8/19/04
        >
        ---
        Outgoing mail is certified Virus Free.
        Checked by AVG anti-virus system (<A HREF =/"http://www.grisoft.com)/">http://www.grisoft.com)</A>.
        Version: 6.0.742 / Virus Database: 495 - Release Date: 8/19/04


        Comment

        Working...
        X