Don't save credit card details

Created on 5 March 2023, about 2 years ago
Updated 20 May 2023, almost 2 years ago

After completing a test transaction, the credit card details are saved to the user's account.

I don't want this to happen for security reasons; can I just delete or comment out all the $payment_method->save(); lines?

I've found this in:

PaymentIntentTest.php
CreatePaymentTest.php
Stripe.php

Ngā mihi,
Glenn

💬 Support request
Status

Closed: works as designed

Component

Code

Created by

🇳🇿New Zealand glennnz

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • Status changed to Active almost 2 years ago
  • 🇳🇿New Zealand glennnz

    Stripe allows me to disable the saving of credit card details via their API, and I can see the function 'setup_future_usage' all over the place in the code.

    How do I get to this option? I can't find it.....

  • 🇳🇿New Zealand glennnz

    I found the setting in the Checkout Flow settings, but no matter the selection (On session or Off session), the previously used CC details keep reappearing.

    Glenn

  • 🇮🇱Israel jsacksick

    What setting did you find? This issue was previously closed? Why did you reopen it?

  • Status changed to Closed: works as designed almost 2 years ago
  • 🇳🇿New Zealand john pitcairn

    I think there is some confusion about how Stripe integration works. @glennnz, all that is saved is a stripe token. Credit card details are not stored in the Drupal database. They are not even entered on the Drupal site UI, the form fields are iframes hosted directly at Stripe. Raw card details never touch your site.

Production build 0.71.5 2024