Help with Quantum Vault

[webbcite]

I'm new to WHMCS and am in the process of configuring it to work with Quantum Vault. I've been going through the documentation and I think I have it setup, but I have a question that does appear to be answered in the docs or forum posts.

 

The documentation says "Contrary to what you might think, you should leave the "Disable Credit Card Storage" setting unticked in Setup > General Settings > Security as that will disable entry by a client." I made sure this was unticked and then went to testing using the Visa test number 4111111111111111 to pay for an invoice. It created the vault account and the invoice shows as paid. In the MySQL database, it appears that there is CC#data being stored in my database. I then went to the customer account and "Credit Card Information" and entered the hash. It displayed the full CC#.

 

My understanding was that using Quantum Vault it wasn't possible to view CC# information and that it would not be stored locally on the server. Ticking the "Disable Credit Card Storage" setting then removes the CC# and the customer no longer has the ability to update their CC# through their WHMCS account.

 

Am I doing something wrong? I don't want to store CC#'s locally, but I do need customer to be able to update their CC#'s.

 

Thanks in advance for any help.

[And then there was one les]

Its probably an error in the documentation. I would take the module setting at its face value and "tick to disable". Actually on looking at the documentation. I am assuming that the tick to disable storage box is also being used to disable card input which seems wrong to me.

Edited May 8, 2013 by CDJ Hosting

[webbcite]

Agreed. Anyone using quantum vault that may have knowledge of how this works for allowing customers to update their credit cards?

[bear]

In their client area, there is a link to update their details. When they choose that, one of the options is update the CC. That shows the details, but not the actual card number. They enter the info, it's submitted to QG, done. No local storage that I've seen, and it won't expose the current card number if someone gained access.

[SeanP]

A while back, I converted from the Quantum Gateway module to the Quantum Vault module using the conversion script provided by WHMCS. The functionality I felt was missing, after converting to Quantum Vault, was the ability for the client to remove their credit card on file. In my experience, the client was only able to add a credit card when they paid an invoice. At that point, the card was on file in the Quantum Vault and they had no way to remove it. Also, they had no way to turn off automatic billing. So, I wrote a module to allow the client to add a card on file (without paying an invoice first), remove their card on file, and enable/disable automatic billing for their card. I posted about it, to see if there was any interest in such a module, but got little response (one person wanting the source code). Here is a link to my post:

 

http://forum.whmcs.com/showthread.php?71774-Quantum-Vault-Client-Management-Module

 

I haven't released it, but have considered it. For me, it was a must-have to provide functionality that was missing, after I converted to the Quantum Vault module.

 

Sean