Contributions

Made the zapt.php code register_globals off compatible.

Full package including cvv2 code zapping and the zap.js and zap.gif files so you don't have to grab 2 or 3 or these to get all the files.

Just an update to the zapt.php file to xxxx out the CVV2 in the admin.

Im no expert at php, just kind of guessed and it seems to work correctly.

Added to the bottom:

$sql="SELECT `cc_cvv2` FROM orders WHERE `orders_id`=('$order');";
$result=mysql_query($sql);
if (! $result) {
die ("Unable to select cc_cvv2 [$sql]");
} else {
$row = mysql_fetch_assoc($result);
$ccnum = $row['cc_cvv2'];
$newnum = "xxxx" . $newnum;

$sql="UPDATE `orders` SET `cc_cvv2`='$newnum' WHERE `orders_id`=('$order');";
$result=mysql_query($sql);
if (!$result) die ("Unable to zap card [$sql]");
}


**Not the full package, only zapt.php**

Changed the database connection in zapfunctions.php so it uses the default includes/configure.php config for the db connection

also removed extra </tr> tag from the orders.php line added either by hand edit or file upload

Instead of zapping the entire credit card number, I modified zapt.php to clear out all but the last 4 digits of the credit card. This way the customer is able to determine which card they used for the order.

The orders.php file in Adyx's fantastic contribution did not work in osCommerce 2.2-MS2 version, so I replaced the supplied one with this orders.php

Validated the Credit Card, and want to remove it from the database, but keep the customers order history intact ?

Card Zapper, lets you xxxxx out the card number of any order you choose !

Helps to make things a bit more secure.