Page MenuHomePhabricator

wellness check on Civi's no-card #s in name field
Closed, DuplicatePublic

Description

cid=61348773's donation came through with a 16 digit full card number in the name field. I will update that with the donor's name. I know there is some logic in Civi to watch out for this, but just wanted to check that it's still active?

cid=54200232 is the same donor but I have not yet merged them in case that would obscure any info

comment from Elliott in Slack: "let's check on the front-end logic that tries to avoid this too"

Event Timeline

get the cardholderName with card # from createdPaymentOutput, could check if that is pure number, then remove them
payments-ingenico-20231108.gz:Nov 7 06:33:44 payments1005 ingenico_gateway: 195024751:195024751.1 RETURNED FROM CURL:{"createdPaymentOutput":{"payment":{"id":"000000657040200179760000100001","hostedCheckoutSpecificOutput":{"hostedCheckoutId":"06549da2-b622-71ff-a32c-2b368b0c4f57","variant":"102"},"paymentOutput":{"amountOfMoney":{"amount":535,"currencyCode":"EUR"},"references":{"merchantReference":"195024751.1","paymentReference":"0"},"paymentMethod":"card","cardPaymentMethodSpecificOutput":{"paymentProductId":3,"fraudResults":{"fraudServiceResult":"no-advice","avsResult":"N","cvvResult":"M"},"card":{"cardholderName":"****"}}},"status":"PENDING_APPROVAL","statusOutput":{"isCancellable":true,"isRetriable":false,"statusCategory":"PENDING_MERCHANT","statusCode":600,"statusCodeChangeDateTime":"20231107073342","isAuthorized":true,"isRefundable":false}},"paymentCreationReferences":{"additionalReference":"195024751.1","externalReference":"195024751.1"},"paymentStatusCategory":"SUCCESSFUL"},"status":"PAYMENT_CREATED"}

ah, it's Ingenico, that explains why our front-end validation didn't catch it. Well, that's another reason to quit serving the Ingenico forms to anyone! T345461: Edit configuration to send explicit Ingenico requests to Adyen

ah, it's Ingenico, that explains why our front-end validation didn't catch it. Well, that's another reason to quit serving the Ingenico forms to anyone! T345461: Edit configuration to send explicit Ingenico requests to Adyen

Yeah, Ingenico has no way to check at our end, do you feel we could merge this ticket with https://phabricator.wikimedia.org/T345461 then? since we are no going to quit serving the Ingenico, this issue will be gone after that.