minuteman1970 Posted January 18, 2006 Posted January 18, 2006 Prior to having an SSL OSc store, I had activated the "split credit card Email address", whereby it would email me the middle numbers of my customer's credit card. This also served as a means of giving me a head's up that a new order had come in. After setting up SSL, I deactivated the split CC feature. Now I don't get emails when a new order arrives. By the way, I intentionally don't have OSc send my CC info to Authorize.net, as I want to confirm stock prior to charging the customer. Is there any way of setting up a order notification feature? thanks.
GraphicsGuy Posted January 18, 2006 Posted January 18, 2006 Yes, in admin>configuration enter your email address in the box titled "Send extra order email to". This will send you a copy of the order summary email that is sent to the customer. Rule #1: Without exception, backup your database and files before making any changes to your files or database. Rule #2: Make sure there are no exceptions to Rule #1.
minuteman1970 Posted January 18, 2006 Author Posted January 18, 2006 Yes, in admin>configuration enter your email address in the box titled "Send extra order email to". This will send you a copy of the order summary email that is sent to the customer. that was easy, thanks!!
GraphicsGuy Posted January 18, 2006 Posted January 18, 2006 Regarding the way you are doing the credit cards now, I would recommend continueing to split the card information. SSL secures the customer connection with the server and your admin section. However it is still a violation of card company security policies to store complete card information on a computer that is connected to the Internet. If anyone ever hacks the server and takes complete card information from your database, you could be heavily fined (i.e. $20,000) and lose your merchant account. Something to think about. Rule #1: Without exception, backup your database and files before making any changes to your files or database. Rule #2: Make sure there are no exceptions to Rule #1.
poster1582 Posted March 15, 2008 Posted March 15, 2008 Since sending ANY information like this through the e-mail is NOT secure, why is this even an option??? All anyone would have to do is hack your database and grab your e-mails, which isn't particularly easy, but, still, it's not anywhere near impossible.
Recommended Posts
Archived
This topic is now archived and is closed to further replies.