Support

If forms to email is required (for example, because the order is later manually entered into a different computer system), it is possible to encrypt email. We recommend GNUPG, but it is not easy to configure. You will likely need somebody to help you using it on the web server and each client PC that recieves the encrypted email.

Instead of encrypting email, a good shopping cart system uses email only for order notifications. To review order details, see credit card numbers, etc., the merchant logs into a SSL secured administration system. For merchants that ship physical goods, the full credit card numbers must be stored in a database (at least temporarily) - US postal regulations require merchants to ship goods before charging credit cars. However, the credit card numbers can be stored encrypted and there should be no way for a customer to see the full card number (even with a successful login or on sales receipts). Current VISA regulations suggest that only the last 4 digits of the card number be show in most circumstances.