The current design is to seperate placing the order and actual order processing. The design goal is the scalability.
There is a seperate task in the orderpipeline clearing the creditcard# older than a certain days (I believe the default is 30 days). If you really don't want credit card# stored, I suggest you use PayPal or Google Checkout. If you have technical background, you could change the checkout process to include the credit card authorization.
DotShoppingCart Staff
|