summaryrefslogtreecommitdiff
path: root/httemplate/misc/process
diff options
context:
space:
mode:
authorMitch Jackson <mitch@freeside.biz>2018-11-04 10:07:30 -0500
committerMitch Jackson <mitch@freeside.biz>2018-11-04 10:14:27 -0500
commitac50269d081f6490705d103186e5b89baac58930 (patch)
tree9be86fd4187ae9b372eeda987541522911ebe2cd /httemplate/misc/process
parentd2ea891f4e914f17f5c094ffc3adc9d6ae2bbaed (diff)
RT# 81616 Mask CVV on Process Card Payment page
Diffstat (limited to 'httemplate/misc/process')
-rw-r--r--httemplate/misc/process/payment.cgi4
1 files changed, 3 insertions, 1 deletions
diff --git a/httemplate/misc/process/payment.cgi b/httemplate/misc/process/payment.cgi
index 5f945a71a..6163b93dd 100644
--- a/httemplate/misc/process/payment.cgi
+++ b/httemplate/misc/process/payment.cgi
@@ -124,7 +124,9 @@ if ( $payby eq 'CHEK' ) {
if ( defined $cust_main->dbdef_table->column('paycvv') ) {
if ( length($cgi->param('paycvv') ) ) {
- if ( cardtype($payinfo) eq 'American Express card' ) {
+ if ( $cgi->param('paycvv') =~ /^\*+$/ ) {
+ $paycvv = $cust_main->paycvv;
+ } elsif ( cardtype($payinfo) eq 'American Express card' ) {
$cgi->param('paycvv') =~ /^(\d{4})$/
or errorpage("CVV2 (CID) for American Express cards is four digits.");
$paycvv = $1;