Page 1 of 1
test credit card
Posted: Wed Jul 11, 2018 10:20 am
by 1JoJo2
TrustWave is failing my scan vulnerability test because I have a 'test credit card'. Where in the website site would this be located and can I delete?
OCART VERSION 2.0.1.1
Re: test credit card
Posted: Wed Jul 11, 2018 10:22 am
by 1JoJo2
correction:
Ocart version 2.1.0.2
Re: test credit card
Posted: Thu Jul 12, 2018 5:39 pm
by ADD Creative
I think you would be best asking TrustWave what they mean by 'test credit card' and where they detected it.
Re: test credit card
Posted: Thu Jul 12, 2018 11:36 pm
by 1JoJo2
Trustwave says they should not be able to detect any credit card at all. My website host believes that the test credit card detected is in Ocart. Trustwave has no support available so I need to figure this out on my own. Any idea where Ocart would keep a credit card number test or otherwise?
Re: test credit card
Posted: Fri Jul 13, 2018 6:00 pm
by ADD Creative
No credit card numbers are stored in OpenCart. The only exception is maybe a third-party payment module and even then the data should be encrypted with proper access controls. Which payment module are you using?
Re: test credit card
Posted: Fri Jul 13, 2018 10:27 pm
by 1JoJo2
PsiGate payment module is what I am using by Schoginni. I contacted him already but have not heard back. I just checked the code for the module and there was nothing there. I know Psigate uses a test card but how this would be attached to the Ocart site is a mystery.
Thanks in advance for any ideas or advice.