Revision History

[ADDED] Module now automatically selects itself as the current payment method whenever a customer enters any data or makes any selections in the payment form. Makes checkout that little bit quicker/easier for the customer!

[BUGFIX] If an order had been placed using Ceon Manual Card and the customer went back to place another order in their current session, and if Blowfish encryption was being used to store the sensitive card details, the software would wrongly try to decrypt the non-existent sensitive details from the previous order.

[BUGFIX] The name of the check for the sensitive details setting hadn't been updated in the configuration checker so it wasn't displaying warnings if problems with the configuration were detected.

[BUGFIX] Upgrade instructions had incorrect file names for two of the files to be deleted (they mistakenly listed the new files that replace the old files).

[BUGFIX] Module was incorrectly reporting that those with version 2.0.0 didn't need to upgrade whereas the database has changed since 2.0.0 so upgrading is essential.

[ADDED] Option to ask for CVV number added. Enabled by default but if disabled no CVV field is displayed and the customer is not asked for the card's CVV number.

[ADDED] The card number and card CVV number fields are now highlighted whenever an error has been encountered and these sensitive details aren't being stored in the session, to make it clearer to the customer that they must re-enter the card number (and CVV number if it is being used).

[ADDED] Length of value entered for the Card Holder is now checked when JavaScript is disabled and an appropriate error message displayed.

[UPDATED] Option to store details in the session changed to being an option to store the “sensitive” details in the session (card number and CVV number). All other card details are now always stored in the session.

[UPDATED] All error messages for the data entered are now displayed. Previously just the first error was displayed.

[UPDATED] JavaScript to add the checkbox for cards which have no CVV number updated so that an extra div tag doesn't have to be part of the HTML for the CVV number field. Results a in much neater layout.

[UPDATED] Card number and expiry date checks moved from separate class to confirmation pre check method.

[UPDATED] Keys for configuration options renamed to use Ceon namespace.

[UPDATED] Reference characters removed from method parameters in module's files as parameters are already passed by reference in later versions of PHP (Results in better compatibility with PHP 5.3).

[UPDATED] Method of passing error messages changed to conform to new format for Zen Cart 1.3.9+. This will avoid any problems with security changes to be implemented in later versions of Zen Cart.

[UPDATED] FAQs completely rewritten to make them a lot more informative, usable and easier to follow. Lots more information about configuring servers for access to PEAR:Crypt_Blowfish added.

[ADDED] Cards Accepted Sidebox added. Allows the dynamic display of icons for each credit/debit card accepted even before the customer has reached the checkout stage.

[ADDED] Option to disable Blowfish encryption added.

[ADDED] Support for Discover cards added.

[ADDED] Information about switching off Blowfish encryption or storage of details in session added to admin and ConfigCheck class.

[UPDATED] Information about fixing access to Blowfish files updated.

[BUGFIX] Issue number field in database was only one digit long whereas some issue numbers can have two digits (e.g. American Express or cards people have had for a long, long time).

[REMOVED] Donation link removed from admin for better compliance with Zen Cart module distribution rules. Next to no-one donated anyway! :(

[BUGFIX] Wrong expiry date was being displayed on confirmation page.

[ADDED] Module now automatically checks include paths against any open_basedir restrictions and displays the information necessary to fix a misconfigured server's access to its PEAR installation/Crypt_Blowfish files.

[UPDATED] FAQs updated in documentation with some more information about how to fix problems with a server's access to the PEAR:Crypt_Blowfish package.

[ADDED] Ability for customer to indicate that their card has no CVV number added. Includes run-time JavaScript functionality to dynamically add the necessary “indication” checkbox gadget to the form when the customer has filled in all other card details but not entered a CVV number. (Necessary for Laser cards).

[ADDED] Ability to set custom formats for the month and year select gadgets added.

[ADDED] Option to enable/disable storage of entered card details added. If details aren't being stored, encryption is not necessary.

[ADDED] Module now checks for ability of PHP installation to access PEAR library on the server, as well as its ability to access PEAR:Crypt_Blowfish.

[ADDED] Module now warns the user on the catalog side if the card details are being stored in the session but encryption can't be used.

[UPDATED] Module now allows usage of normal HTML tags for error messages due to new support of error message encoding.

[UPDATED] Encryption Keyphrase configuration option moved to the Security section and description updated to make things easier for new users of the module.

[UPDATED] Version handling updated to be much more reliable.

[BUGFIX] Version 1.2.1 was incorrectly reporting an out of date database version. (New database version for 1.4.0 nullifies this bug.)

[BUGFIX] Debug output now always outputs information about the open_basedir setting for the server. Previously this information was (wrongly) only displayed if safe mode was enabled.

[UPDATED] FAQs updated in documentation with much more comprehensive information about how to fix problems with a server's access to the PEAR:Crypt_Blowfish package.

[UPDATED] Security issue identified with session clearing-functionality... all users should upgrade so that card details are cleared upon a successful checkout!

[UPDATED] Minor documentation updates, including information about adding an extra code snippet to a file for Zen Cart 1.2.x.

[UPDATED] Documentation updated to use new display class for better on-screen rendering. Better print output formatting also added. (Tested in IE6-7, Mozilla 2.x and Safari 3.x).

[ADDED] Version information section added to Admin to aid identification of the currently installed version of the module. Also allows online version checking through use of “Check for updates” link.

[UPDATED] References to “Delta” changed to “Visa Debit” as this is the official/proper name for these cards now.

[UPDATED] Card icons updated/added for Visa, Visa Debit, Visa Electron, MasterCard and Maestro.

[UPDATED] References to “Switch” have been removed... As of 30th June 2007, “Switch” became “Maestro”.

[UPDATED] Admin configuration re-organised and arranged into groups for easier configuration.

[UPDATED] Documentation reworked into multiple files.

[UPDATED] Documentation (FAQs) updated with information about manual installation of the necessary Blowfish encryption files.

1.0.0

1.0.0beta1