Jump to content

m0hamedessam

Members
 View Profile  See their activity

  • Posts

    98

  • Joined

  • Last visited

 Content Type 

Posts posted by m0hamedessam

  10. Need Offline Credit Card Gateway

    in Extensions

    Posted

    The problem falls with PCI-DSS Compliance rules & regs.

    While I know you do not need the CVC (Card Verification Code) for this type of payment, it is still always best not to store card information locally. Even with public/private key encryption, it still is a risk that should be considered.

    I know the Blesta team is very cautious when it comes to security, but I still think they may not want to develop it.

     

     

    The credit card information is split into 2 parts, one is sent to your email while the other is saved in the store. The version that is saved in the store is MCRYPT_RIJNDAEL_256 and base64 using a 40 character randomly generated key that is md5 hashed.

     

    Compliance Mode:

    - Cardholder name, Card Type, Exp Date are stored in Database

    - Card number stored in database like this: xxxx42526325xxxx (and encrypted)

    - First and Last 4 (or 3 for Amex) are sent via email to the store owner email like this: 4242xxxxxxxx4563

    - CVV is emailed but not stored in the database

    - Cardholder name is NOT sent with the email

  15. Offline Payment Instructions

    in Support

    Posted

    there's any code for Offline Payment Instructions to show and hide code depends on group_id & pricing_id

     

    can i use  if  elseif/else ?

     

    for example

     

    if group_id=1&pricing_id=3 show= {html code}

     

    please give me example code if it possible ?

     

    Thanks

  18. Open Many Accounts With Same Email

    in Feature Requests

    Posted

    ok, I've fixed it (easy method for now, I might mess with it a bit more later to make it look the way I had it before...but I needed a quick fix :))

     

    I've updated my original post with how to go about doing it.  I've also uploaded the altered file if you need since I didn't keep the directions on how to alter it to this after having already altered it via my first method.

     

    https://drive.google.com/file/d/0Bxf_vG3b8bYQd2FWUjhYSDd4NEU/edit?usp=sharing

     

    thanks i fix it now

  21. Open Many Accounts With Same Email

    in Feature Requests

    Posted

    If I'm understanding this correctly you want to disallow the ability to sign up with more than one username with the same e-mail.  I didn't like the ability to use a username at all so I simply removed that field from the sign-up form thus forcing people to use their e-mail address as their username...  That should have the same effect if I'm not mistaken...

     

    attachicon.gifsignup.png

     

    good idea hope blesta team understand that and give us option to enable this or not anyway thanks my friend i will try your trick just let me know file path i should edit

  25. Open Many Accounts With Same Email

    in Feature Requests

    Posted

    yes thats what im talking about it giveing option to on or off depends on each one needs like other scripts because not all clients here use blesta for hosting its billing system anyway.

    im sorry to post here because on v3.0 was work and you can't signup with same email on database so now not so i don't know its bug or not we can wait paul confirm but i really need it badly.

×
×
  • Create New...