In certain cases, the system administrator would require to know the credit card numbers. The billing system therefore has an API call that when provided with the encrypted card number returns the decrypted credit card.
SECURITY
It is the responsibility of system administrator to keep the database secure and password protected. Additional level of security is provided by Hosting Controller itself by placing a check in API call that before returning the decrypted credit card number checks the Hosting Controller status and returns successful results ONLY if it finds the product registered on the machine where the code is being executed. This mechanism will work well under the supposition that a hacker will never have a registered product and the API call will not work under the Demo mode or on a pirated copy.
IMPLEMENTATION
The following code snippet returns User Name, First Name, Last Name, Card Number, Expiration Date, CVV2, and Customer Email Address.
Create a file card.asp in the /Admin folder of Hosting Controller, paste in it the following code, and run the card.asp page from http://YourDomain.com:8077/Card.asp.
Credit Card Numbers
User | Name | Last Name | Card No. | Expiry | CVV2 | |