Documentation error

Project:Ubercart Contributions
Component:Code
Category:bug report
Priority:critical
Assigned:Unassigned
Status:active
Description
Project: 
Ubercart

In http://www.ubercart.org/docs/user/2731/credit_card_settings#security

The documentation wrongly states that the settings can be changed from the menu at /admin/store/payment/cc_encrypt

There is no such menu. It should be admin/store/settings/payment/edit/methods

Version: 
Ubercart 1.x-dev
Ryan's picture
Offline
Joined: 08/07/2007
Juice: 15438
Re: Documentation error

Not a documentation error - it's referring to the update form that lets you encrypt existing CC data. I've updated the docs to try and make it a little less ambiguous. I can see how it could have been mistaken.

TR
TR's picture
Offline
Bug FinderFAQ ModeratorGetting busy with the Ubercode.
Joined: 11/05/2007
Juice: 3424
Re: Re: Documentation error
Assigned to:Ryan» TR

OK, I see.

Still,

/admin/store/payment/cc_encrypt does not exist. It should be
/admin/store/settings/payment/cc_encrypt

The UI is a little weak; encryption is not turned on explicitly but is triggered only when "Do Not Store" is unchecked && a filepath for the key is entered. Perhaps there should be an "Enable Encryption" checkbox, to give positive vibes?

And as long as you're spending a few minutes messing with the encryption UI, can you think about how to allow for alternative encryption algorithms? You'll probably see a contribution for this soon, and it would be nice to have a place to plug it into.

<tr>.
Ryan's picture
Offline
Joined: 08/07/2007
Juice: 15438
Re: Re: Re: Documentation error
Assigned to:TR» Ryan

Hmm... I'm not sure if an abstraction layer is really necessary for encryption. If the algorithm is weak (I knew it had limitations, but it's better than nothing and still encourages the ideal of not storing anything), let's replace it in core and not have two options.

somatics's picture
Offline
Joined: 08/18/2007
Juice: 121
#4
Category:» bug report
Priority:normal» critical
Assigned to:Ryan» Guest

URGENT: I am trying to change the encryption of our Authorize.net payment method, b/c we switched to a new gateway account with Authorize.net. However, when I go to ourdomain.com/admin/store/settings/payment/cc_encrypt to do so I get the /admin/store/settings/payment page -- which is what always happens when a child directory does not exist.

What do we do?! We can't accept credit cards without out this key!!!