WorldPay Module version 2.0 - Support thread

[philip_clarke]

Good Morning,

This is the new support thread for WorldPay version 2.0 the old thread was 44 pages long and covered bugs that have all been solved over the last 4 years or by this release as well as security flaws that have now been fixed.

Version 2.0 has been completely revamped and has many extras and additional security and debugging features such as:

• There is now a new page in the admin section which you get to by clicking on Customers > WorldPayments
• This new page logs all WorldPay responses including cancelled transactions (and what was in the shopping cart)
• It shows whether thetransactions were in test mode or Live.
• It breaks down each WorldPay response, showing if there is a mismatch in the billing address registered to the credit card and the billing address supplied to your shop.
• If the transaction was sucessful it links back to the order.
• The order is now filled out with any warning messages (the customer does not see this)
• Order emails also include any WorldPay Warning or Caution messages (not to the customer)

temporarily the file is available at

http://########################.co.uk/WorldPay_ZC1.3.x_v2.0.zip

this is the standard version that will shortly be available from the Free Software Add-Ons section. There will be another release based on the same codebase called SBD (secure by default). The version above is designed for backwards compatibility and should not stop a live shop working. The SDB version will only be enabled if all security features are turned on.

Thank you
Philip Clarke.

[philip_clarke]

The latest version is available here:

http://########################.co.uk/WorldPay_ZC1.3.x_v2.01.zip

after a stupid mistake (of my own) was found in the new HTML instructions, where people could not see http://<wpdisplay item="MC_callback">. People reading the text file instructions would not have found this error.

Philip.

[abbas1]

Hi Philip,

I am still not getting the callback after I pay or cancel from worldpay. I have installed the latest 2.01. It just stays on the thank you page. Please Help!

Thank you.

[philip_clarke]

Hi Philip,

I am still not getting the callback after I pay or cancel from worldpay. I have installed the latest 2.01. It just stays on the thank you page. Please Help!

Thank you.

This is the debug procedure.

a) turn on debugging in Admin and add your email address.
b) do a test transaction.
c) look at any emails you get from worldpay to see if you have any with the subject "Callback Failure Alert From WorldPay"

now in the case of
a) not working and there being no email (check spam folders too), then worldpay is not talking to your server, either firewall, or the http://http://<wpdisplay item="MC_callback"> is not correct.
If you have c) then worldpay has gone somewhere, just not to the correct page.
If in
c) there is a message 302 then you have been sent to the hacker page, so look at youe debug email for the word callbackPW and check that it is sending the correct password through.

If it is sending the correct password through to the correct page, and you are receiving the debug emails from your store, Then in WorldPay, the test side of the site may need to be saved to production or vice versa.

Of course the other thing that could be happening is that you don't have a worldpay account, in which case why are you installing the module

Thanks
Philip.

[abbas1]

Hi Philip,

Thanks for the info, but I realised it was my mistake. The whole website was password protected, hence the authentication was failing. This caused the callback failure.

On another note, I would like to thank you for the worldpay module and all your efforts.

[philip_clarke]

Hi Philip,

Thanks for the info, but I realised it was my mistake. The whole website was password protected, hence the authentication was failing. This caused the callback failure.

On another note, I would like to thank you for the worldpay module and all your efforts.

That's quite alright for the mistake (I've done it myself many times, over the last few weeks).

Thank you for the thanks, consider installing the Secure by Default (SBD) version which will be added this week, it will have version checking so that if there is ever an exploit, it can notify the shop owner with the need to upgrade. It is GPL but won't be available from here as it disables itself if the module is insecure (lack of passwords, MD5 etc...) during installation (not if an exploit is found though) which would break a "live shop", it's for the more experienced user rather than someone looking to plug the original exploits I found.

Has admin > customer >worldpay payments worked for you ? in the previous versions people were concerned that someone may use a fake credit card at worldpay after having filled out their billing details in the shop, and the previous versions discarded the worldpay information.

Philip.

[rikartalex]

Hi Philip,

Thanks for the info, but I realised it was my mistake. The whole website was password protected, hence the authentication was failing. This caused the callback failure.

On another note, I would like to thank you for the worldpay module and all your efforts.

Hi Philip or abbas1

I am having the same problem as above, my website is password protected and the callback just stays on the Worldpay thank you page.

Worldpay say this can be solved by setting the callback URL to something like http://username[email protected]/. Is this correct and do you know which line of code I should change?

Thanks

Richard

[leisurering]

I too am having the same problem with callback.
I have the latest copy of Zencart and the latest copy of WorldPay module. (WorldPay_ZC1.3.x_v2.01)
I do get the Callback Failure Alert From WorldPay (302)
I have enabled the debugging email.
I have check that it is sending the correct password through and this is where I have got stuck.
There is no mention of the word callbackPW or the password its self in the debug email?

Can any one help me?

Paul J Thomas

[philip_clarke]

I too am having the same problem with callback.
I have the latest copy of Zencart and the latest copy of WorldPay module. (WorldPay_ZC1.3.x_v2.01)
I do get the Callback Failure Alert From WorldPay (302)
I have enabled the debugging email.
I have check that it is sending the correct password through and this is where I have got stuck.
There is no mention of the word callbackPW or the password its self in the debug email?

Can any one help me?

Paul J Thomas

Yes what does the first line of the debug email say ?

That you are receving an email is a good thing as at least wroldpay is trying to talk to your shop.

Philip.

[imiq]

Hello

I am having a call back problem... I am receiving an faliled call back email with a 404 error. I have been through everything to see what page is not being found but have and no luck...

Can anyone direct me in the right direction.