NOTICE: We've Moved to a Ticket System for Support
As of August 31, 2017 (12am EST) our support forums will be retired (read-only), and we will be moving to a support ticket system. This will allow us to better organize and answer support requests, and provide a more personalized experience as we assist our customers.
For the time being, we will leave our forums open for reading and learning while we work on creating a more robust Knowledge Base for everyone to use.
If you are a WC Vendors Pro customer please open a support ticket here. If you are a WC Vendors user please open a support ticket on the Wordpress.org forums.
The information on this forum is outdated and in most instances no longer relevant. Please be sure to check our documentation for the most up to date information.
Thank you to all of our customers!
- This topic has 4 replies, 2 voices, and was last updated 7 years, 2 months ago by
.
-
Posts
-
Hey,
It seems like when someone makes a purchase with Stripe their credit card data is saved on their my account page which they can use to later pay for a future order. I do not want to store any credit card info on my servers, why is there no option to disable this?
No, that’s not what happens. We need to make you a forum where you can ask google-able questions in and have google answer you. 😉 https://www.speakinginbytes.com/2014/02/credit-card-tokenization/
@ben
Still not answered. Theoretically if a database is comprimised, those tokens can be used to make charges on customer’s credit cards. Am I right or wrong? My question is, how do I forcefully remove this part about storing tokens once a charge has been made?Yep, you’re wrong. That is not how tokenization works.
A customer has to check the checkbox to remember the card to begin with, all that does is store a token. Only Stripe knows what this token means. And it only works only on your website only for that customer only for your stripe api key / data. There is no better security. You are worrying about something that is not a problem.
A customer has to check the box to remember the card to begin with, so if you dont want that, edit the code to remove the checkbox from appearing. What you can do with notepad is amazing! 🙂
@ben That’s the issue, I’m not talking about Stripe Checkout here, I know that there is a checkbox for it. But this is the regular checkout with CC fields on the payment page. There is no checkbox there for “Remember Me” so the customer doesn’t get to choose whether they want that token to be stored or not. It gets stored either way.
- The forum ‘Stripe Commissions & Gateway Support’ is closed to new topics and replies.