The basic Authorize.net module that comes with the oscommerce package has several problems. One of which is that it does not ask for the CVV number from the card holder. This contribution fixes that, as well as other, problems with the stock install. It does require Curl to be installed by your host (most hosts already have this installed but please verify first) and a shared or private ssl.