I am just finishing up a PHP implementation of a credit card processing app using the CIM Soap based service. I've already used the test server to test basic creation of profiles, payment profiles and addresses and wanted to try throwing and properly handling failures on new payment profile validations.
I tried creating a new payment profile under an existing customer profile using completely wrong information - wrong billto address details, wrong expiration date and wrong CVV code. It accepted. I verified the validationMode was set to 'liveMode' and tried it again, same result.
So I switched it to the live server with the live credentials and it did the same thing.
I thought the CreateCustomerPaymentProfile was supposed to verify the card details when creating a new profile with validationMode set to liveMode? Am I missing something???
OK, the AVS Response will give me details on the address check, but the Card Code response is coming back as 'P' (not processed) and neither of those seem to tell me anything about why the expiration date is not being validated?