Warning: Missing argument 4 for validate() cc_validation.php

[shellyky]

Havent gotten an order since the 29th, i just looked and after entering the CC #, it goes to checkout_confirmation.php and says this error:

 

Warning: Missing argument 4 for validate() in catalog\includes\classes\cc_validation.php on line 16

Warning: Cannot modify header information - headers already sent by (output started at catalog\includes\classes\cc_validation.php:16) in catalog\includes\functions\general.php on line 33

 

I opened my cc_validation and it shows its been edited on 12/30. Interesting because i didn't do it. i compared it with the file from another site and it looks like cvv info was added in several locations. Below is a copy of this file. How can i get this fixed? Any ideas?

 

------------

<?php
/*
 $Id: cc_validation.php,v 1.3 2003/02/12 20:43:41 hpdl Exp $

 osCommerce, Open Source E-Commerce Solutions
 http://www.oscommerce.com

 Copyright (c) 2003 osCommerce

 Released under the GNU General Public License
*/

 class cc_validation {
   var $cc_type, $cc_number, $cc_expiry_month, $cc_expiry_year, $cc_cvv2;

   function validate($number, $expiry_m, $expiry_y, $cvv2) {
     $this->cc_number = ereg_replace('[^0-9]', '', $number);

     if (ereg('^4[0-9]{12}([0-9]{3})?$', $this->cc_number)) {
       $this->cc_type = 'Visa';
     } elseif (ereg('^5[1-5][0-9]{14}$', $this->cc_number)) {
       $this->cc_type = 'Master Card';
     } elseif (ereg('^3[47][0-9]{13}$', $this->cc_number)) {
       $this->cc_type = 'American Express';
     } elseif (ereg('^3(0[0-5]|[68][0-9])[0-9]{11}$', $this->cc_number)) {
       $this->cc_type = 'Diners Club';
     } elseif (ereg('^6011[0-9]{12}$', $this->cc_number)) {
       $this->cc_type = 'Discover';
     } elseif (ereg('^(3[0-9]{4}|2131|1800)[0-9]{11}$', $this->cc_number)) {
       $this->cc_type = 'JCB';
     } elseif (ereg('^5610[0-9]{12}$', $this->cc_number)) { 
       $this->cc_type = 'Australian BankCard';
     } else {
       return -1;
     }

     if (is_numeric($expiry_m) && ($expiry_m > 0) && ($expiry_m < 13)) {
       $this->cc_expiry_month = $expiry_m;
     } else {
       return -2;
     }

     $current_year = date('Y');
     $expiry_y = substr($current_year, 0, 2) . $expiry_y;
     if (is_numeric($expiry_y) && ($expiry_y >= $current_year) && ($expiry_y <= ($current_year + 10))) {
       $this->cc_expiry_year = $expiry_y;
     } else {
       return -3;
     }

     if ($expiry_y == $current_year) {
       if ($expiry_m < date('n')) {
         return -4;
       }
     }

     if  ( (strlen($cvv2) < 3) or (strlen($cvv2) > 4)) {
         return -5;
       }

     return $this->is_valid();
   }

   function is_valid() {
     $cardNumber = strrev($this->cc_number);
     $numSum = 0;

     for ($i=0; $i<strlen($cardNumber); $i++) {
       $currentNum = substr($cardNumber, $i, 1);

// Double every second digit
       if ($i % 2 == 1) {
         $currentNum *= 2;
       }

// Add digits of 2-digit numbers together
       if ($currentNum > 9) {
         $firstNum = $currentNum % 10;
         $secondNum = ($currentNum - $firstNum) / 10;
         $currentNum = $firstNum + $secondNum;
       }

       $numSum += $currentNum;
     }

// If the total has no remainder it's OK
     return ($numSum % 10 == 0);
   }
 }
?>

[germ]

When things get changed, and you're sure YOU didn't do it, it might be a sign you have been hacked.

 

From the change you have posted about it would appear someone could be attempting to steal CC info.

 

If that is the case, there may be another changed file in the checkout process where they could be sending CC info somewhere.

 

Something to ponder.

:)