I see in veriosn 5.3 the "Useful Links" blocks in the user area has now changed to "Account Management Links". Das is good! Makes more sense. However, the "Update Credit Card Info" link is not good. We state in our PCI policy that we do DO NOT save or retain customer card numbers. All transactions are processed by PayPal or Stripe on THEIR servers. So my questions is, how and why is aMember grabbing and saving the customer's card number? Saving these numbers would violate our PCI compliance level... I don't want my customers to see this, how can I disable that link or customize what is shown in the Account Management block? Better yet, how can I disable aMember from saving the user's credit card number. I do like the facts that the address is automatically added to their profile. Cheers!
Hello, aMember do not store or transmit CC info in case of Stripe. This link allow to updated CC info on Stripe server. You can remove this link the following way: http://www.amember.com/docs/How_to_add/remove_link_in_"Useful_Links"_block Best Regards.
Thanks for the quick rely... The "Update credit card info" selection looks like it is saving only Stripe transaction data. It should not even be saving that data according to my integration method and their terms. To hide it, I need the specific page ID. The URL is ...mydomain dot com/member/payment/stripe/update so how would I change the following...: PHP: <?phpAm_Di::getInstance()->hook->add(Am_Event::GET_MEMBER_LINKS, function(Am_Event $e){ $ret = $e->getReturn(); foreach($ret as $k=>$v) { if(strpos($k, 'payment-history')!==false) { unset($ret[$k]); } } $e->setReturn($ret);}); Note: I see there is a new option on the Stripe payment plugin to use the hosted option. Did that change recently because I thought is was previously all using the hosted option.
Just replace 'payment-history' with 'payment/stripe/update' in this code. Hosted version means user will see popup window from stripe site. Both options hosted/not hosted do not store or process CC info. Best Regards.
Thanks Caesar.... Just one last question, if CC number is not stored in amember, then how is it pulling it up in the "Update CC info" page?
You see only masked number and expiration date. aMember retrieve it from Stripe server base on token.