removing credt card info

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

   We also added the following code to the removeCC.asp file (our full file above) so the Security number isn't displayed in our database.  What is displayed is * for every character entered so you at least have an idea of how many they entered.

     'CheckRS is found in IASUtil.asp

     Dim editSC, iEditSCLen

     Do While CheckRS(RS)     

            editCC = RS("CardNumber")

            editSC = RS("CardSecurity")

     RS.MoveNext

     Loop

'.....skipping code here...

'start of Replace Security Code with asterick values

     iEditSCLen = Len(editSC)

     If iEditSCLen > 0 Then

            editSC = Replace(Space(iEditSCLen), " ", "*")

            SQLStmt = "UPDATE DISTINCTROW [payment] "

            SQLStmt = SQLStmt & "SET CardSecurity='" & editSC & "' "

            SQLStmt = SQLStmt & "WHERE Orderid=" & order & "; "

            Set SimpleAdo = New CSimpleAdo

            SimpleAdo.setConnectionString = Session("ConnectionString")

            Success = SimpleAdo.ExecuteInsertUpdate(SQLStmt)

            Set SimpleAdo = Nothing

     End if

     'end of Replace Security Code with asterick values

We also put code in this file that will reduce all credit card values over 4 digits to only include the last 4 digits.  After a user has placed an order you can comment this out or remove.

'start of reducing all credit card numbers greater then 4 characters

     Set SimpleAdo = New CSimpleAdo

     SimpleAdo.setConnectionString = Session("ConnectionString")

     Success = SimpleAdo.ExecuteInsertUpdate("UPDATE payment SET cardnumber = right(cardnumber, 4) WHERE len(cardnumber) > 1;")

     Set SimpleAdo = Nothing

'end of reducing all credit card numbers greater then 4 characters