New Account Management Links

Discussion in 'Customization & add-ons' started by microlinx, Aug 2, 2017.

  1. microlinx

    microlinx Member

    Joined:
    Oct 26, 2004
    Messages:
    246
    I see in veriosn 5.3 the "Useful Links" blocks in the user area has now changed to "Account Management Links". Das is good! Makes more sense.

    However, the "Update Credit Card Info" link is not good.

    We state in our PCI policy that we do DO NOT save or retain customer card numbers.
    All transactions are processed by PayPal or Stripe on THEIR servers.

    So my questions is, how and why is aMember grabbing and saving the customer's card number?
    Saving these numbers would violate our PCI compliance level...

    I don't want my customers to see this, how can I disable that link or customize what is shown in the Account Management block?

    Better yet, how can I disable aMember from saving the user's credit card number. I do like the facts that the address is automatically added to their profile.

    Cheers!
  2. caesar

    caesar aMember Pro Developer Staff Member

    Joined:
    Oct 16, 2009
    Messages:
    1,642
  3. microlinx

    microlinx Member

    Joined:
    Oct 26, 2004
    Messages:
    246
    Thanks for the quick rely...

    The "Update credit card info" selection looks like it is saving only Stripe transaction data.
    It should not even be saving that data according to my integration method and their terms.

    To hide it, I need the specific page ID. The URL is ...mydomain dot com/member/payment/stripe/update
    so how would I change the following...:

    PHP:
    <?php
    Am_Di
    ::getInstance()->hook->add(Am_Event::GET_MEMBER_LINKS, function(Am_Event $e){
        
    $ret $e->getReturn();
        foreach(
    $ret as $k=>$v) {
            if(
    strpos($k'payment-history')!==false) {
                unset(
    $ret[$k]);
            }
        }
        
    $e->setReturn($ret);
    });
    Note: I see there is a new option on the Stripe payment plugin to use the hosted option. Did that change recently because I thought is was previously all using the hosted option.
    Last edited: Aug 2, 2017
  4. caesar

    caesar aMember Pro Developer Staff Member

    Joined:
    Oct 16, 2009
    Messages:
    1,642
    Just replace 'payment-history' with 'payment/stripe/update' in this code.

    Hosted version means user will see popup window from stripe site.

    Both options hosted/not hosted do not store or process CC info.

    Best Regards.
  5. microlinx

    microlinx Member

    Joined:
    Oct 26, 2004
    Messages:
    246
    Thanks Caesar....

    Just one last question, if CC number is not stored in amember, then how is it pulling it up in the "Update CC info" page?
  6. caesar

    caesar aMember Pro Developer Staff Member

    Joined:
    Oct 16, 2009
    Messages:
    1,642
    You see only masked number and expiration date.
    aMember retrieve it from Stripe server base on token.

Share This Page