Important Notice from AspDotNetStorefront
It is with dismay that we report that we have been forced, through the action of hackers, to shut off write-access to this forum. We are keen to leave the wealth of material available to you for research. We have opened a new forum from which our community of users can seek help, support and advice from us and from each other. To post a new question to our community, please visit: http://forums.vortx.com
Results 1 to 2 of 2

Thread: Storing CVV2 codes for manual processing?

  1. 11-05-2009, 11:33 AM #1
    rpeters83 is offline Member
    Join Date
    Aug 2009
    Posts
    41

    Default Storing CVV2 codes for manual processing?

    One of our clients is requesting to get a report of CC info, along with the CVV2, for manual processing. I saw a field in the database called CardIssueNumber, but not sure if it's for.

    What are the legalities of storing this number for manual processing later? Can I pull it to build a custom report? Thanks.
  2. 11-05-2009, 11:57 AM #2
    AspDotNetStorefront Staff - Scott's Avatar
    AspDotNetStorefront Staff - Scott is offline Administrator
    Join Date
    Mar 2007
    Location
    Ashland, OR
    Posts
    2,390

    Default

    While we can't get into the legalities of that, storing CC numbers does make becoming PCI compliant harder, and storing CCV codes would make it impossible. PCI prohibits ever storing that code. It's not generally necessary anyway as few online processors require it anymore. If you decide to do so, you'll have to make some code mods to do it.

    I would recommend spending some time on the official PCI site to figure out what the rules that apply to your site are going to be. By this time next year those rules will be mandatory for pretty much anyone wanting to do business online.

    https://www.pcisecuritystandards.org/
    ECommerce Shopping Cart