WorldPay Module version 2.0 - Support thread

Good Morning,

This is the new support thread for WorldPay version 2.0 the old thread was 44 pages long and covered bugs that have all been solved over the last 4 years or by this release as well as security flaws that have now been fixed.

Version 2.0 has been completely revamped and has many extras and additional security and debugging features such as:

• There is now a new page in the admin section which you get to by clicking on Customers > WorldPayments
• This new page logs all WorldPay responses including cancelled transactions (and what was in the shopping cart)
• It shows whether thetransactions were in test mode or Live.
• It breaks down each WorldPay response, showing if there is a mismatch in the billing address registered to the credit card and the billing address supplied to your shop.
• If the transaction was sucessful it links back to the order.
• The order is now filled out with any warning messages (the customer does not see this)
• Order emails also include any WorldPay Warning or Caution messages (not to the customer)

temporarily the file is available at

http://########################.co.uk/WorldPay_ZC1.3.x_v2.0.zip

this is the standard version that will shortly be available from the Free Software Add-Ons section. There will be another release based on the same codebase called SBD (secure by default). The version above is designed for backwards compatibility and should not stop a live shop working. The SDB version will only be enabled if all security features are turned on.

Thank you
Philip Clarke.

The latest version is available here:

http://########################.co.uk/WorldPay_ZC1.3.x_v2.01.zip

after a stupid mistake (of my own) was found in the new HTML instructions, where people could not see http://<wpdisplay item="MC_callback">. People reading the text file instructions would not have found this error.

Philip.

Hi Philip,

I am still not getting the callback after I pay or cancel from worldpay. I have installed the latest 2.01. It just stays on the thank you page. Please Help!

Thank you.

Quote:

---

Originally Posted by abbas1

Hi Philip,

I am still not getting the callback after I pay or cancel from worldpay. I have installed the latest 2.01. It just stays on the thank you page. Please Help!

Thank you.

---

This is the debug procedure.

a) turn on debugging in Admin and add your email address.
b) do a test transaction.
c) look at any emails you get from worldpay to see if you have any with the subject "Callback Failure Alert From WorldPay"

now in the case of
a) not working and there being no email (check spam folders too), then worldpay is not talking to your server, either firewall, or the http://http://<wpdisplay item="MC_callback"> is not correct.
If you have c) then worldpay has gone somewhere, just not to the correct page.
If in
c) there is a message 302 then you have been sent to the hacker page, so look at youe debug email for the word callbackPW and check that it is sending the correct password through.

If it is sending the correct password through to the correct page, and you are receiving the debug emails from your store, Then in WorldPay, the test side of the site may need to be saved to production or vice versa.

Of course the other thing that could be happening is that you don't have a worldpay account, in which case why are you installing the module :cry:

Thanks
Philip.

Hi Philip,

Thanks for the info, but I realised it was my mistake. The whole website was password protected, hence the authentication was failing. This caused the callback failure.

On another note, I would like to thank you for the worldpay module and all your efforts.

Quote:

---

Originally Posted by abbas1

Hi Philip,

Thanks for the info, but I realised it was my mistake. The whole website was password protected, hence the authentication was failing. This caused the callback failure.

On another note, I would like to thank you for the worldpay module and all your efforts.

---

That's quite alright for the mistake (I've done it myself many times, over the last few weeks).

Thank you for the thanks, consider installing the Secure by Default (SBD) version which will be added this week, it will have version checking so that if there is ever an exploit, it can notify the shop owner with the need to upgrade. It is GPL but won't be available from here as it disables itself if the module is insecure (lack of passwords, MD5 etc...) during installation (not if an exploit is found though) which would break a "live shop", it's for the more experienced user rather than someone looking to plug the original exploits I found.

Has admin > customer >worldpay payments worked for you ? in the previous versions people were concerned that someone may use a fake credit card at worldpay after having filled out their billing details in the shop, and the previous versions discarded the worldpay information.

Philip.

Just to say Philip is a coding genuis - my world pay module is running like a dream.

My call back was not working and it fell to the old classic - "world pay not configured at the clients side" error.

Just to say a MASSIVE THANK YOU! for the time Philip spent looking at this and trying to solve an issue - which was nothing to do with his code.

Genius!

I too am having the same problem with callback.
I have the latest copy of Zencart and the latest copy of WorldPay module. (WorldPay_ZC1.3.x_v2.01)
I do get the Callback Failure Alert From WorldPay (302)
I have enabled the debugging email.
I have check that it is sending the correct password through and this is where I have got stuck.
There is no mention of the word callbackPW or the password its self in the debug email?

Can any one help me?

Paul J Thomas

Quote:

---

Originally Posted by leisurering

I too am having the same problem with callback.
I have the latest copy of Zencart and the latest copy of WorldPay module. (WorldPay_ZC1.3.x_v2.01)
I do get the Callback Failure Alert From WorldPay (302)
I have enabled the debugging email.
I have check that it is sending the correct password through and this is where I have got stuck.
There is no mention of the word callbackPW or the password its self in the debug email?

Can any one help me?

Paul J Thomas

---

Yes what does the first line of the debug email say ?

That you are receving an email is a good thing as at least wroldpay is trying to talk to your shop.

Philip.

Upgraded world pay module to new version 2.01 and everything went fine. Received my first order with the new module and received this message in the new order confirmation email from my cart:

WorldPay has issued a WARNING for this transaction
go to Admin _ Customers _ Worldpay Payments WP#4

When i go into the Worldpay Payments it shows that everything passed and there are no warnings. Everything matched. Any ideas?

Since this only shows on my end i'm not concerned with this little glitch i can live with it :D Just wondered if it was an easy fix.

827 4 xxxxxxxxxx Xxxx Xxxxxx
United Kingdom
None Issued GBP 10.34


Orders

Worldpay Transaction Id: xxxxxxxxxx
(appears in subject line of emails)

AVS Code: xxxx
Card Verification Value check:
(the 3 digit number of on the back): matched
Postcode check: matched
Address check: matched
Country check: matched

Original Order Country: United Kingdom
Credit Card Country: United Kingdom
Countries Match

Order Total: GBP 10.34
WorldPay Authorised Total: GBP 10.34
Totals Match

Original Billing Address: xxxxx
xxxxxx
xxxxxxxxxx
WorldPay CC Address: xxxxxxx
xxxxxx
xxxxxxxxx
Addresses Match

Original Billing Postcode: xxxx xxx
WorldPay CC Postcode: xxxx xxx
Postcodes Match

Thanks for all the good work on this module. It has made my life alot easier. :clap:

Okay so the email side is "buggered" and but there's not warning on the admin page or anything like that, ans there's no warning on the order page ?

(Good things I made is to the client doesn't see it huh ?)

I've probably got a true/ false wrong somewhere, it's a bit difficult "testing" since eevry test credit card always issues a warning by default.

Philip.
Paypal donation to [email protected] please, or you can wait for the SBD modules.

Quote:

---

Originally Posted by philip_clarke

Okay so the email side is "buggered" and but there's not warning on the admin page or anything like that, ans there's no warning on the order page ?

(Good things I made is to the client doesn't see it huh ?)

I've probably got a true/ false wrong somewhere, it's a bit difficult "testing" since eevry test credit card always issues a warning by default.

Philip.
Paypal donation to [email protected] please, or you can wait for the SBD modules.

---

Nope no warnings any place else. I checked in the worldpay admin and everything is ok and everything in zencart shows ok so like i said it's just one of those minor bugs i can happily live with :yes: i'm sure it will show itself in time and it will get fixed but it doesn't seem to effect the way anything works and like you said the customer never sees it so were good to go.

Cheers

Y'all Come and see us. http://britishbeefjerky.co.uk

Quote:

---

Originally Posted by Bigenuf

Nope no warnings any place else. I checked in the worldpay admin and everything is ok and everything in zencart shows ok so like i said it's just one of those minor bugs i can happily live with :yes: i'm sure it will show itself in time and it will get fixed but it doesn't seem to effect the way anything works and like you said the customer never sees it so were good to go.

Cheers

Y'all Come and see us. http://britishbeefjerky.co.uk

---

This is bordering on the bizarre, when I created the royal mail modules, some who has a biltong shop tested a beta that accidentally emails me out if someone clicks one button on one page, and they never ever upgraded even after 2 years and postal rate changes every so often I get emails from their customers about delivery charges.

I think I know what I've done, silly mistake really but also it should trigger at all should be fixed now, just have to zip things up.

okay

http://bouncing.org/WorldPay_ZC1.3.x_v2.02.zip

Now that should work if WorldPay is following it's own instructions. The Documentation states that if there is no warning or caution then a value will not be set, but there is a possibility that the value is set to something like "waf.Harmless" in which case, it's going to still email the shop owner.

If it does it again, then just run the debugging (doesn't harm a live site) and look to see if wafMerchMessage exists in the debug email, if it is there then I need to know the value, if it's not I'll need to rty and figure what's setting the email alerts off but not the warning signs on the worldpay page.

Philip.

Quote:

---

Originally Posted by philip_clarke

okay

http://bouncing.org/WorldPay_ZC1.3.x_v2.02.zip

Now that should work if WorldPay is following it's own instructions. The Documentation states that if there is no warning or caution then a value will not be set, but there is a possibility that the value is set to something like "waf.Harmless" in which case, it's going to still email the shop owner.

If it does it again, then just run the debugging (doesn't harm a live site) and look to see if wafMerchMessage exists in the debug email, if it is there then I need to know the value, if it's not I'll need to rty and figure what's setting the email alerts off but not the warning signs on the worldpay page.

Philip.

---

Hi Philip,

Just installed the new 2.02.
I have a dummy account which i use to test the cart. I just checked the order history of the dummy customer and found this :cry:

http://britishbeefjerky.co.uk/images/wp1.jpg

this was generated with a dummy credit card which worldpay suggests using so i would expect the country code to be wrong but now the customer will see any warnings sent to admin. This shows in the customer orders in admin

http://britishbeefjerky.co.uk/images/wp2.jpg

We then used a valid credit card for a purchase and this is the result
This is in the customers account history

http://britishbeefjerky.co.uk/images/wp3.jpg

This is in the zencart customer order
http://britishbeefjerky.co.uk/images/wp4.jpg

This is from the WorldPay Payment Responses page
http://britishbeefjerky.co.uk/images/wp5.jpg

as you can see in the last 2 pics the order and order history both show warnings but the worldpay response says no warnings, everything matches.

Thought i had debug on but didn't. I now have it on and will check for any other messages when i get in the office tomorrow.

Like i said, i'm a happy camper :D just trying to help debug some minor things.

Time for bed 4 a.m. comes early.
Thanks for your attention

There's probably something in the comparison setting off a total mismatch, shouldn't be difficult to debug. The Totals mismatch is actually an additional check perform by this module only. Worldpay has no way of knowing whether the amount it's debiting are the same as was on your website (well that's a big generalisation but it can be true).

There's about 3 different places to compare things, a) for the product email, b) for adding to an order, c) for the new series of pages. Unfortunately as all the sections are different and some work with stored information, and others work with information being posted straight through, it's easy for little bugs to come through (and helpful of you for finding them)

An interesting thing, is that worldpay does not always issue a caution on country mismatches or other things, it's a discretionary system, so I made the decsions to post the data through this end and compare it with what is written in worldpay, just in case for example someone is using a nicked credit card to buy goods. In theory WorldPay could clear that (if the address were okay) and you would be none the wiser. If worldpay flags something up at a later date, you should be able to claim your money back "easier", saying "oi you cleared this" and this is where the goods were delivered too btw. If you were in doubt (becasue of big billing address/ worldpay address, you could delay sending goods by 24 hours, and then you should get a message through from worldpay says "err, that credit card we cleared...."

An interesting thing too. Only since version 2 (maybe 1.03) has zencart sent through the billing address. Prior to this, even though it asked your shoppers for billing details, it would then go ahead and send out their regstration details regardless due to a big omission in the code dating back to about 2004.

http://bouncing.org/WorldPay_ZC1.3.x_v2.03.zip

This is an important update with many thanks to Bigenuf for the screenshots that showed a small possible "customer relations" problem. Here's the changelog:

Quote:

---

v2.03 - Important Upgrade - New feature requires remove and install.
5 November 2008

New Discreet feature added. Although WorldPay warnings were being mailed to the store owner, the customer was never supposed to be able to see these. Unfortunately they appear on the customer's ::My Account:: page. Now one can choose whether to be "Discreet" and not let the customer know if any warnings were issued. Many thanks to Bigenuf for providing screenshots

Fixed bug where incoming payment values were being treated as a string not as a number so falsely setting off a "Payment Value Mismatch" warning.

Fixed bug on country matching, this may still be a "known issue" in the USA because WorldPay provides the country information as "United States" whereas Zencart stores the country as "United States of America"

Please note that these updates are not historical, once an order is generated one cannot remove the comments. (This is for legal reasons, e.g. your business had a registered address on an order in 2007 changed in 2008, the law states that the invoice/ order must not change after it has been issued, so an order is "fixed" with only additional comments being allowed).

---

Bigenuf has found an important issue which I will write a module for. If you have a difficult customer and you write in the comments "This guy is a pain in the B*TT", and don't Notify Customer you would expect the notes to be for your own private viewing, by Bigenuf has shown that the "private notes" are visible to the customer in ::my accounts::

I have created a discreet mode for this payment module, so that you are still notified by email (twice) if worldpay issues a caution or a warning, you can still check country/ postcode matches on the WorldPay Payments page, but by default you are now "discreet" in that the details do not appear on the orders unless you want to.

Unfortunately this module does NOT and cannot backdate comments on orders.

I will create a new module to enable a discreet mode on global order comments (that I may be able to backdate), so that you can write "this customer is a pain..." and then they won't be able to see it. I personally know that I once wrote "Possible Fraud" against one customer after repeated problems with delivery, so I will address this as soon as possible, bearing in mind that on November 7th I may be having keyhole surgery if I am "fit" enough.

Philip.

I installed the new version 2.03 early this morning. I've had a few orders since then but none with any worldpay warnings. Everything looks spot on but will have to wait until a warning is issued to see that it fully works:D.

Once again thanks for the great work.

I have been working through a "discreet" system now for marking up orders, that will be global with an "Internal Office Display Only" setting, so that people wil be able to safely write memos and their customers. I'll then have to make a decision as to whether I should remove the discreet mode in this module and insist on installing the other one (which is better as it sorts out all other modules too, if any others want to write the code in).

The current text on the orders page is confusing, where it says "Append Comments" it actually means Append comments to the customer notification email if you have chosen to send on out, but the comments are still going to appear here and on the client's ::my account:: pages.

I have got it working! don’t use caps in your WP passwords, just use lowercase and its working fine. Thanks for this thread its been a great help!

Quote:

---

Originally Posted by leisurering

I have got it working! don’t use caps in your WP passwords, just use lowercase and its working fine. Thanks for this thread its been a great help!

---

Ok the last time you reported in, you stated that the callbackPW was not appearing in your emails. Now are you saying that it appears but only if it is lower case ?

If this is the case, then you need to go over your steps again, as to how you saved things in worldpay, because there is no changing of case in "the worldpay module", it would all be over at worldpay's ends.

It may be that while changing you password around, you've saved something in a different way (copy to production environment manybe ?) because previously there have been reports of WorldPay behaving oddly in setting values for the test side of things, and it's quite important that we be able to distinguish between "your world pay bug" and bugs that are in the ZC module.

Quote:

---

Originally Posted by Bigenuf

I installed the new version 2.03 early this morning. I've had a few orders since then but none with any worldpay warnings. Everything looks spot on but will have to wait until a warning is issued to see that it fully works:D.

Once again thanks for the great work.

---

Right Bigenuf, you know that thing we found, where people could "view order" and see things that could be regarded as "office only" comments ? I've written a module for it called SBD_Discreet, the test thread is here:

http://www.zen-cart.com/forum/showthread.php?t=112636

I'd appreciate it if you could try it out.
Thanks
Philip.

OK well First thanxs to the people that have been working on this realy is appreciated have a small problem though Im not getting the call back the debug email is telling me ive got a password problem but i must be going blind cause i realy cant see any password in the debug email:no:

You should look for the words callbackPW in your email, the most likely thing is that if you haven't got that word, then worldpay has not sent it through.

Sometimes settings need to be saved twice, sometimes you have to transfer the settings to your production environment (buttons at bottom or the worldya screen).

If you enable http error messages in WorldPay, you should also see a 302 error, because without a password, your shop thinks worldpay is a hacker !

hi and thanxsnow have the test transactions runinig fine on the empty zc system now to add it to the site and send it live best regards and thaxs from allthose who spent so long frustrated with the original mod

Hi folks... have registered on the forum simply to thank Philip for this module....

Ive tried various shopping carts and in the past made the mistake of setting them up with products/attributes etc etc only to find that the payment module didn't work correctly (Worldpay).

I thought i'd try Zencart with a view to implementing the Worldpay payment system if possible - i'm afraid i have no knowledge of how to code so i'm totally reliant on others...

I came across the 44 page thread highlighting the security issue in previous versions of the Worldpay module and was intrigued enough to stay up until 4am this morning reading it.. which brought me to this thread...

I've implemented Philip's latest Module and am sat here with a smile so wide i'm in danger of swallowing my ears!! IT WORKS Brilliantly for me!!!

The only issue i had was my own fault as i didn't actually know what exactly the CALLBACK was supposed to do... i'd originally set up my own payment response pages in the Worldpay admin console (ResultY.html & ResultsC.html) which meant that it over-rode this module's operation. As soon as i deleted my ResultY.html & ResultsC.html files everything worked perfectly...

My site isn't live yet - not even populated it with products so i can't be 100% sure that i've got everything right but by 'eck.... it's feckin' excellent!!

A massive thanks to Philip and every individual who assisted him(degugging etc)....

I take my hat off to you all... thanks again..... 'n' still can't stop smilin':D... feel like a dog with 2 willys!:oops:

regards
Ian

And I thank you sir and your two willys.

Philip.

ALL users should upgrade because of a possible security exploit.

Can be found here:

http://########################.co.uk/WorldPay_ZC1.3.x_v2.04.zip

Many thanks to crazycucumber for spotting an old flaw that had crept back in to haunt versions up to 2.04

Philip.

Quote:

---

Originally Posted by philip_clarke

ALL users should upgrade because of a possible security exploit.

Can be found here:

http://########################.co.uk/WorldPay_ZC1.3.x_v2.04.zip

Many thanks to crazycucumber for spotting an old flaw that had crept back in to haunt versions up to 2.04

Philip.

---

Good Evening Philip,

I installed the WorldPay_ZC1.3.x_v2.04 this afternoon.
Slow day so only received 1 order this afternoon.
It shows None Issued under the Advisory of the WorldPay Payment Responses but off to the right where it shows the details it shows:
AVS Code: 2422
Card Verification Value check:
(the 3 digit number of on the back): matched
Postcode check: not matched
Address check: matched
Country check: matched

Original Billing Postcode: SW1 4NU
WorldPay CC Postcode: SW1 4NU
Postcodes Match

I don't have access to the debug email right now but if needed i will get it tomorrow. Not sure if it's a bug or not.
Cheers, and thanks :D
Lake

Quote:

---

Originally Posted by Bigenuf

Good Evening Philip,

I installed the WorldPay_ZC1.3.x_v2.04 this afternoon.
Slow day so only received 1 order this afternoon.
It shows None Issued under the Advisory of the WorldPay Payment Responses but off to the right where it shows the details it shows:
AVS Code: 2422
Card Verification Value check:
(the 3 digit number of on the back): matched
Postcode check: not matched
Address check: matched
Country check: matched

Original Billing Postcode: SW1 4NU
WorldPay CC Postcode: SW1 4NU
Postcodes Match

I don't have access to the debug email right now but if needed i will get it tomorrow. Not sure if it's a bug or not.
Cheers, and thanks :D
Lake

---

Evening Bigenuf

Nah, check your worldpay email, the documents for worldpay state that they use their own methods for calculating whether a warning or caution should be issued, I'm betting that a postcode does not score high on the list of suspicious activity. The docs aren't exactly clear as to what will 100% trigger off a warning, but bearingin mind that postcodes are generally only accurate to 3 houses or a block of flats and the CVV number matches, it's probably not enough. Worldpay will issue a warning or caution email as well as the shop system notifying you, I provide the extra information so that if something does happen, then you can quite rightly go to WorldPay and argue your case.

I used to like on hospital grounds and our postcode never matched anything, which was a problem as my wife (Doctor in Neonates) needs CRB clearance which relies on address and postcode matching, she once got suspended because someone had written "Number Fourteen" for the flat one year and "Number 14" for the next.

Philip.

Hi, I'm a ZC newbie and working with an already set-up system that has an older version of this module installed.

I just wanted to make sure I'm installing this properly:

I've uploaded the WorldPay_ZC1.3.x_v2.04 directory to includes/modules/payment/ - do I need to upload any other files? Or do I need to upload files to the individual directories as they are set out in the unzipped archive?

I ask because I see a 'worldpay.php' file, dated 12/12/2004 in the includes/modules/payment/ dir too.

Thanks for your help,
C.

Morning,

Right, (note down your md5 passwords) Click the remove module on your old one, copy everything as is to your server, putting the admin files in admin and the includes in includes. Then install, fill out your passords and you will have to put a "payment response password" in no and then do it over at worldpay to make your system hacker safe.

In all likelihood the new module will also warn you of old files on your system that are potentially vulnerable and should be removed manually (e.g. deleted)

If you have problem then enable debug mode which will email whomever, with what worldpay is sending to your server, do not post a debug email to the forum as it contains your passwords !

The module has been tested for 1.3.7 and above versions of ZC if it's an earlier module you may need more help, als you will have a new page under customers called WorldPay Payments, that gives you much more detail of each transaction and also of repeated cancelled transactions (which may be honest or maybe someone testing out a list of dodgy credit card numbers).

Thank you

Philip.

Hi Philip,

thanks for getting back...

So, I've tried to upgrade the module following the instructions and after uploading each file and making sure each file is in the correct directory I get the modules>payment screen (screen-grab attached) where I've lost the WorldPay module and also the sideboxes...

Help please...:blink:

Attachment 4825

Quote:

---

Originally Posted by chptif

Hi Philip,

thanks for getting back...

So, I've tried to upgrade the module following the instructions and after uploading each file and making sure each file is in the correct directory I get the modules>payment screen (screen-grab attached) where I've lost the WorldPay module and also the sideboxes...

Help please...:blink:

---

Okay send me the email personally, there's an option to by my screen name and I'll sort you out, I do just have to pop out for about twenty minutes now though.

Philip.

Hello
I am working on my first Zencart installation and the client wants to use Worldpay.

The installation instructions just say:

Copy all supplied files to your Zen Cart installation, keeping the same directory structure. No core files are overwritten by this.

I dont get this - into the site root? There are folders called admin, docs and includes. I already have an includes folder in my root (obviously) so where is the new one to go?
Thanks muchly
iX

Quote:

---

Originally Posted by chptif

Hi Philip,

thanks for getting back...

So, I've tried to upgrade the module following the instructions and after uploading each file and making sure each file is in the correct directory I get the modules>payment screen (screen-grab attached) where I've lost the WorldPay module and also the sideboxes...

Help please...:blink:

Attachment 4825

---

BTW, losing side boxes is very bad, menas that you have an unsolveable error but ZC sets the error reporting to zero so you don't see it and everything stops. My bet is that there's a missing file that it is trying to call.

Quote:

---

Originally Posted by Ixnay

Hello
I am working on my first Zencart installation and the client wants to use Worldpay.

The installation instructions just say:

Copy all supplied files to your Zen Cart installation, keeping the same directory structure. No core files are overwritten by this.

I dont get this - into the site root? There are folders called admin, docs and includes. I already have an includes folder in my root (obviously) so where is the new one to go?
Thanks muchly
iX

---

where you see index.php and the folders includes/ admin/ docs/ editors/ cache/ download/ etc... that folder is called the Website root. You copy the folders straight into there. This is straight forward of you are using a good ftp program or scp or putty or unzipping the files on your system, but if you are using a "bad" ftp program you have to copy each file to the corresponding location on the server.

so /WorldPay_ZC1.3.x_v2.04/admin/worldpay_response.php

goes into YOUR_WEBSiTE_ROOT/admin/

If anyone wants more help just PM me.

Philip.

Hi Philip,

have installed the module properly - restored my backup this morning and tried it all again from scratch and everything looks good. Thanks for your time and help.

DrByte, thanks for the debug tool :smile:

C.

Okay, all files copied to server but there is no way to enable the module in admin/modules. Should there not be something in my httpdocs/includes/modules/payment/ folder? There is nothing there relating to Worldpay. If somebody could provide me with a checklist of what files should be in what folders I'd appreciate it.
Thanks

Quote:

---

Originally Posted by Ixnay

Okay, all files copied to server but there is no way to enable the module in admin/modules. Should there not be something in my httpdocs/includes/modules/payment/ folder? There is nothing there relating to Worldpay. If somebody could provide me with a checklist of what files should be in what folders I'd appreciate it.
Thanks

---

Here's the full list

./admin/includes/boxes/extra_boxes/worldpay_response_customers_dhtml.php
./admin/includes/classes/worldpay.php
./admin/includes/languages/english/extra_definitions/worldpay_response.php
./admin/includes/languages/english/worldpay_response.php
./admin/worldpay_response.php
./docs/worldpay/changeLog.txt
./docs/worldpay/index.php
./docs/worldpay/install_historical_1.01.txt
./docs/worldpay/install_historical.txt
./docs/worldpay/install.txt
./docs/worldpay/known.txt
./docs/worldpay/LICENSE
./includes/extra_datafiles/wp_callback_filenames.php
./includes/languages/english/extra_definitions/wp_cc_accept.php
./includes/languages/english/modules/payment/worldpay.php
./includes/languages/english/wp_callback_hacker_response.php
./includes/languages/english/wp_callback.php
./includes/modules/pages/wp_callback_hacker_response/header_php.php
./includes/modules/pages/wp_callback/header_php.php
./includes/modules/payment/worldpay.php
./includes/modules/sideboxes/wp_cc_accept.php
./includes/modules/wp_checkout_cancelled.php
./includes/modules/wp_checkout_process.php
./includes/modules/wp_checkout_success.php
./includes/templates/template_default/sideboxes/tpl_wp_cc_accept.php
./includes/templates/template_default/templates/tpl_modules_wp_checkout_cancelled.php
./includes/templates/template_default/templates/tpl_modules_wp_checkout_success.php
./includes/templates/template_default/templates/tpl_wp_callback_default.php
./includes/templates/template_default/tpl_wp_callback_hacker_response_default.php
./worldpay_suhosin.php
./wpcheck.php

you may have missed coying over

./includes/modules/payment/worldpay.php

Righto then - module installed and my Zen Cart seesm to be talking to the Worldpay server!
However this is not the result I was expecting. I assumed that the customer would enter card details into an https page on my site and that the details would be passed transparently to Worldpay - instead the customer is taken to the ugly ol' Worldpay pages to make the transaction. Is this the way its supposed to work?
Ta

Yep - that's the way WorldPay does it...but you can edit their pages although if I recall correctly, it's a bit of a tedious process.

Quote:

---

Originally Posted by Ixnay

Righto then - module installed and my Zen Cart seesm to be talking to the Worldpay server!
However this is not the result I was expecting. I assumed that the customer would enter card details into an https page on my site and that the details would be passed transparently to Worldpay - instead the customer is taken to the ugly ol' Worldpay pages to make the transaction. Is this the way its supposed to work?
Ta

---

Yes and this is the manual,

http://www.worldpay.com/support/kb/mergedProjects/htmlredirect/rhtml5202.html

note the big red writing and skull that says "you cannot collect details on your site".

If that is what you want to do, then WorldPay is not the gateway for for you, try Protx or possibly one of the advacned paypal options.

Philip.

Okay, thanks very much. I thought maybe I was being a bit thick. Hadn't read the manual though I must admit. It seems to me that WorldPay is not that great a deal for anyone. They charge the clients a big chunk, and cannot fully integrate into the site. I would prefer to use Secpay but there is no payments module for that.
But kudos to you for getting this all happening, and I really appreciate your swift help.
Cheers

Quote:

---

Originally Posted by Ixnay

Okay, thanks very much. I thought maybe I was being a bit thick. Hadn't read the manual though I must admit. It seems to me that WorldPay is not that great a deal for anyone. They charge the clients a big chunk, and cannot fully integrate into the site. I would prefer to use Secpay but there is no payments module for that.
But kudos to you for getting this all happening, and I really appreciate your swift help.
Cheers

---

Give me the details on Secpay and I'll see what I can do !

http://www.paypoint.net/support/paym...upport/guides/

Have at it! They seem to be called Paypoint now but are essentially the same thing. I have been using them for years in conjunction with Mals Cart. The nice thing about this lot is that they charge about half of what the other gateways do, plus they get the money into the clients account within 28 hours. And they answer the phone. Bonus!
Oh, and if you sign up with them as a reseller you get a little percentage on every transaction they make with clients you have signed up.
Its almost like money for nothing.
I have had a Russian programmer build an interface for me when I once (ONCE) used the LiteCommerce program. Its certainly doable and would make a great add on for Zen Cart.
Cheers
j

Quote:

---

Originally Posted by Ixnay

http://www.paypoint.net/support/paym...upport/guides/

Have at it! They seem to be called Paypoint now but are essentially the same thing. I have been using them for years in conjunction with Mals Cart. The nice thing about this lot is that they charge about half of what the other gateways do, plus they get the money into the clients account within 28 hours. And they answer the phone. Bonus!
Oh, and if you sign up with them as a reseller you get a little percentage on every transaction they make with clients you have signed up.
Its almost like money for nothing.
I have had a Russian programmer build an interface for me when I once (ONCE) used the LiteCommerce program. Its certainly doable and would make a great add on for Zen Cart.
Cheers
j

---

I'll see what I can schedule in, I'm just about to release some security software for ZC and am in the final stages of testing some of the software (as well a maintaining this).

BUT WorldPay is not that bad, and I'll tell you why. When I first found the flaw in this module, someone pointed out that I have a particularly criminal mind. Now if I were to hack Zencart with WorldPay, then all I would be left with, would be a load of addresses and email details (still worth something), but let's say that I hacked a server that sent Credit Card details away. Not stored them in anyway, just sends them through to protx or paypoint.

What I would do is I would change the URL of the form to send the information to a server that I controlled and then I forward the exact same information onto PayPoint. Nothing would look out of the ordinary, you as a shop keeper would still get all of your money as paypoint would send it back, your customers would get their goods, but in the middle, I would happily be collecting credit card details with very little chance of discovery and the system would probably only stop when you upgraded and overwrote the file I'd altered.

Now with worldpay, you can't do this, you could send the user to a fake worldpay website to reap their details, but it's not going to last long as the shop owner is going to receive complaints pretty quickly, and it's not going to be able to send you back to the website to the correct places, like checkout success, maybe it would last a week rather than six months.

Just my 2c, I don't use worldpay I just maintain the module, although I am working on software that would stop the first scenario from happening, I just didn't realise that point, when I was musing over the pros and cons.

Philip.

Quote:

---

Originally Posted by Ixnay

Okay, thanks very much. I thought maybe I was being a bit thick. Hadn't read the manual though I must admit. It seems to me that WorldPay is not that great a deal for anyone. They charge the clients a big chunk, and cannot fully integrate into the site. I would prefer to use Secpay but there is no payments module for that.
But kudos to you for getting this all happening, and I really appreciate your swift help.
Cheers

---

did you check out Stephen's module that he did for Secpay clients back in October 2006

http://www.zen-cart.com/
index.php?main_page=product_contrib_info&products_id=328

Hi Philip, do you think the time has come for Zen Cart to now list your Worldpay ver 2.04 in the Free Software Add Ons page

AND hopefully the Zen Cart webmaster will now list Worldpay (in conjunction with your ver 2 module ) on the Recommeded Services page

zen-cart.com/index.php?main_page=infopages&pages_id=39


Also, I think now is the time to alert Worldpay to the marvelous work you have done in the last few months to get this far

I notice Zen Cart is not listed on the Storebuilder Directory
worldpay.com/storebuilders/index.php?c=UK

It does not cost anything for Zen Cart to do this

worldpay.com/storebuilders/content.php?page=why&c=UK

But the "Merchant Benefits" are clear to see, and it would give potential users of Zen Cart more confidence to be sure !

just noticed it is in the Free Software Add Ons list

zen-cart.com/index.php?main_page=contrib_search_result&keyword=worldpay

:clap:

Just wanted to say thanks to Phillip for his work on the worldpay module. There is another point to this that I dont think many have realised which is this new module is compatible with PHP5 which I believe the old worldpay module wasnt. Considering the next release of Zen Cart will be based on PHP5 it's a godsend to me and my business that Phil has come along. ( All due respect to Duncan - the original author )

I have just uninstalled the old module and put the new one on in less than 10 minutes. Looking good so far in that my own card functioned perfectly. One word of caution to those who had previously changed their "tpl_wp_cc_accept.php" is that it is overwritten by the new module. If you have read the instructions though and backed up everything it's a simple copy and paste from your backup to retrieve it or better still leave it off altogether if you are upgrading.

As I said this looks to be working straight away - I await the first warning etc to see how this handles but I'm confident it will do as advertised. Once it does I will be making a donation to the paypal account [email protected] and I urge all those who have benefited from this fantastic piece of work to do so too.

Top Man Phillip :bigups:

Thank you for the comments, and for the extra information about tpl_wp_cc_accept.php I shall move that into an "optional" folder and modify the instructions in the next release.

With regards to the transition from php 4 to 5, although this module is fully compatible, a good way to ensure compatibility at the (temporary) cost of speed, is to put

Code:

---

register_long_arrays = On

---

in either the main php.ini file or there are two other options if your hosting does not allow you access to php.ini

• if running php as an apache module (more notes below)
  
  add the line
  Code:

  ---

  php_value register_long_arrays On

  ---

  to your .htaccess file
  
  
• If running php as a CGI module (more notes below)
  
  create a php.ini file in your main website root and in your admin folder (php as CGI reads php.ini from the working folder not the webroot) with
  
  Code:

  ---

  register_long_arrays = On

  ---

  inside it and add the following code to .htaccess
  
  Code:

  ---

  <files *.ini>
order allow,deny
deny from all
</files>

  ---

The notes on modules and CGI

if you do not know if you are running php as a module or as a cgi, then create a page with

Code:

---

<?php echo php_sapi_name(); ?>

---

in it and visit it through your web browser on your server, it should tell you if it is running as an apache module or a cgi.

Thank you
Philip.

A BIG THANK YOU TO PHILIP
:clap::clap::clap::clap::clap::
WHO SORTED OUT MY PROBLEMS
OK NOW WORLD PAY IS SORTED PHIL
LETS SORT OUT MY LIFE:laugh:

And I'd like to thank you for the donation...
Thanks...
Philip...
I'll get my coat now.

Hi quick Question but for some reason the module doset apear to be showing mastero's even those these are set on i the accepted credi cards in admin any ideas?

Do you mean, "when the person has left the shop and gone to worldpay's site" or "the sidebox doesn't show" ? Because I'd only be dealing with the sidebox things on this side of worldpay.

Thank you
Philip.

Hi, philip_clarke

would it be possible for you to add surcharge on this mod? say customers wish to use credit card and want to use worldpay, as soon as the customers select the either visa card or master card, the surcharge will be showed seperate (e.g £0.95 at 2.50%) and also added to the total. Also, there should be place in admin where administartor can add surcharge in percentage term, such as, 3.55% for visa card, 2.50% for master card. Becuase we all know the worldpay is very expensive and this surcharge option will be useful.

thank you very much!

That is a seriously great suggestion.

I won't be able to split it by card unfortunately as worldpay doesn't take that information from the module, but I see no reason why we can't change the text dynamically on the module e.g. Pay by WorldPay (2.5%) surcharge and then the percentage would change dependent on the amount fixed in admin by the shopw owner. It's not going to be a quick fix though, because I'll have to integrate it into the payment total side of things (the bit that give quantity discounts and tots up taxes) so I'll have to do a little rooting around to work out the best way to "fix" it. But yes, that is a very good idea.

Philip.

There is a credit card surcharge module here:

http://www.zen-cart.com/index.php?ma...roducts_id=785

What I'll do is check it's compatibility and if necessary release a version that will plugin to the module, or make it "selectable" for worldpay only. Gives me something to do on the cold winter evenings.

Philip.

Right, I've had an in depth look at the credit card surcharge module and I'll have to do an "optional extra" module based on it for worldpay, there's a couple of not so good things about that module, for one thing it's broken with gift voucher's and the author seems to be out of contact (though the fix is posted on the forums wish I'd searched first instead of spent 30 minutes debugging it), anyway what I do not agree with, is that there is no "prior warning" for the extra surcharge, it just pops up if you specify a module to add it to, and it's not really at one with the shop, in the blurb it advertises itself as "discouraging people from paying by certain ways" or something similar and I'd be furious if on the last checkout without any warning, I got nailed for an extra 3%.

Whatever I do will be done by this time next week, I've got to decide whether to bring it into worldpay, or to re-write it to create a more generic module so that one can pick and choose. There is a change I want to make to worldpay anyway, that might go very well with a newer version of a surcharge module.

Philip.

Skip that entire conversation and use this module if you wish to add surcharges for credit cards (legal in UK, apparently not so elsewhere, and someone is really worried about it and has put warning s everywhere for non-uk users).

http://www.zen-cart.com/index.php?ma...oducts_id=1078

It works, it's stable (although the author says it's beta), it is pretty much I would have done except for automatically displaying the payment modules available, so I reckon I don't have to build it.

Philip.

Hi,philip_clarke

I think I will try to explain why I need this surcharge, so may help you to plan writing the codes.

I have protx on my site and it is the cheapest payment gateway in the UK so far. Worldpay is expensive, but I will use worldpay as alternative and backup. Because protx is not prefect and it always happen that some customers fail to pay via protx. I would prefer my customers use protx to pay if they can. If for some reasons they are unable pay via protx, worldpay can be put into use. Every time my customers pay via worldpay, I will loss some profit. that is why I would like to have surcharge on worldpay, to deter customes from choose worldpay without trying protx first. I will put some wording something like "We prefer customers pay by 1st payment option, and only use 2nd payment option when unable to pay by 1st payment option, since the worldpay is more expensive" in area say "please choose payment method". then customes still choose worldpay and pay by credit card, we can reasonable add surcharge on it. they have been warning beforehand.

although the different charge between protx and worldpay may be very tiny per transcation, but it will add up and become a large amount in long run.

no sure anyone will agree, but this is what I though.

thank you for your help and really appreciate it.

Quote:

---

Originally Posted by philip_clarke

Skip that entire conversation and use this module if you wish to add surcharges for credit cards (legal in UK, apparently not so elsewhere, and someone is really worried about it and has put warning s everywhere for non-uk users).

http://www.zen-cart.com/index.php?ma...oducts_id=1078

It works, it's stable (although the author says it's beta), it is pretty much I would have done except for automatically displaying the payment modules available, so I reckon I don't have to build it.

Philip.

---

Just saw this post, I will try it and let you know the result. many thanks!

Yep all you have to do is put in worldpay in lower case in the module, instead of cc and it adds a bit of text that you can change, and voila, you have a surcharge just on worldpay. I have no idea about the difference in cost between the Gateways, but just check your terms & conditions for using both gateways before installing and going live.
Philip.

Quote:

---

Originally Posted by philip_clarke

Yep all you have to do is put in worldpay in lower case in the module, instead of cc and it adds a bit of text that you can change, and voila, you have a surcharge just on worldpay. I have no idea about the difference in cost between the Gateways, but just check your terms & conditions for using both gateways before installing and going live.
Philip.

---

I replaced cc with worldpay, it appears working. However, there is a problem, the surcharge appears too soon, on the payment information page, where lists all of payment methods, the surcharge appears. This will confuse customers - they will think there is a surcharge regardless which payment method cusotmer use. What I want is only after customer select worldpay, then either surcharge appears or surcharge appears when cusotmer select worldpay and click "continue checkout".

do you know how to change the code to stop surcharge appears too soon?

thanks!

Doesn't the payment information page have a litte * next to worldpay and the words See Surcharge Fee Note Above. written underneath ?

You can also change the words in Admin using SURCHARGE Payment Description (HTML) so you could change it to Surcharge on worldpay payments only or something similar. Other than that, you should probably contact the original author of the module, because I think that it is exactly the correct place for surcharge information to appear.

Quote:

---

Originally Posted by philip_clarke

Doesn't the payment information page have a litte * next to worldpay and the words See Surcharge Fee Note Above. written underneath ?

You can also change the words in Admin using SURCHARGE Payment Description (HTML) so you could change it to Surcharge on worldpay payments only or something similar. Other than that, you should probably contact the original author of the module, because I think that it is exactly the correct place for surcharge information to appear.

---

Yes, I can change these text but it will be still confusing customers. I will try to contact original author for help.

thank you for your help! really appreciate it.

Hi,

I'm not sure if this is the right place to ask this, as in whether this is set in Zen Cart or in the WorldPay module, but I need to insert my VAT number into the notification email that goes out to the buyer on making a purchase and I'm struggling to find out how/where I can do that.

Is there an option to do something like this or does a file need to be hacked to make it happen? Any guidance is greatly appreciated.

(and my apologies if this is the wrong place for this query).

Thanks,
C.

Actually it's totally the wrong place, and I don't have a clue, I only have some general information, the "normal" way of adding the company details from this thread

http://www.zen-cart.com/forum/showthread.php?p=392615

is by plonking it in the address. Legally it's a requirement to have the number and VAT registration displayed on any invoices, credit notes or quotes, I'm not sure about emails (I wrote my own invoicing system so I've not need to set it up on own shop). This module

http://www.zen-cart.com/index.php?ma...products_id=89

does claim to add VAT things as well as check's a customer's VAT number against company (which may be taking things a bit too far).

Philip.

Just got time to test your module Philip, excellent work - well done. :)

But a few issues is there in it:

define for FILENAME_WORLDPAY is missing in admin, causing the file not to be found.

email template for email_template_wp_callback.html missing, giving big nasty error twice on top of sites when returning to shop:

Quote:

---

ERROR: The email template file for (/home/.../public_html/shop/email/email_template_) or (/home/.../public_html/shop/email/email_template_wp_callback.html) cannot be found.

---

Modules core files and language files is in UTF-8, causing problems for most shops with t.ex. latin languages, since Zen Cart up to 1.3.8 is iso-8859-1 as default (will change in 1.4 to UTF-8).

I'll fix the things I can today.

I've noticed the UTF-8 problem before because the worldpay pay on an "undefined" test site has some garbled characters, I work by default in UTF-8, half of the module is old and may be in cp-1252, the email template issue is certainly a left over from the old module and currently I don't have a worldpay account to test things with which presents quite an interesting problem.

Quote:

---

Originally Posted by philip_clarke

I don't have a worldpay account to test things with which presents quite an interesting problem.

---

That is for sure a problem. :)
Odd if WorldPay don't want to help you with that, when you help them with customers ...

Anyway, I tried converting all files into iso-8859 but still get characters messed up. Have noticed that the address shown i browser is https://select-test.worldpay.com/wcc/card (not the store address as normally) when we're returning to the shop, that is also odd - and might influence on characters?!

I applied multiple times for a test account and they never responded.

Someone let me borrow their account for a while but I have a way of faking a worldpay response anyway but then I got this far without having an account so it's not that bad. I could apply for an account with my own business banking set up, but I have no motivation to do so.

Quote:

---

Originally Posted by rued

Just got time to test your module Philip, excellent work - well done. :)

But a few issues is there in it:

define for FILENAME_WORLDPAY is missing in admin, causing the file not to be found.

---

FILENAME_WORLDPAY is defined in 2.04 in the admin side but it's in

./admin/includes/languages/english/worldpay_response.php

the english bit probably raising the problem, since there is no template default system in admin, that is not possible to fix apart from copying over to whatever language you may be working with.

I'm just working through the others

Quote:

---

Originally Posted by rued

Just got time to test your module Philip, excellent work - well done. :)

But a few issues is there in it:

define for FILENAME_WORLDPAY is missing in admin, causing the file not to be found.

---

The only solution for this one is to sort out a language for your own admin installation, as previously mentioned, there is a define for FILENAME_WORLDPAY in ./admin/includes/languages/english/worldpay_response.php so it's a matter of creating the folder and copying the file across, tell me and translate anything and I'll put an admin language file in the next release.

Quote:

---

Originally Posted by rued

email template for email_template_wp_callback.html missing, giving big nasty error twice on top of sites when returning to shop:

---

That was caused by the lack of an email template for HTML messages, strangely that shouldn't have got through the system as it must be very configuration specific as although I can trace it (and have fixed it), I've never seen that myself and my default test user is set to receive HTML emails. My guess is that your version is displaying the error->messagestack and for some reason mine has this disabled to the "public". That's curious as I've installed this module on at least 9 servers for people from this forum and I've not seen it on any installation.

Quote:

---

Originally Posted by rued

Modules core files and language files is in UTF-8, causing problems for most shops with t.ex. latin languages, since Zen Cart up to 1.3.8 is iso-8859-1 as default (will change in 1.4 to UTF-8).

---

I have saved the templates into IS0-8859-1 BUT I think it will make no difference. I did a byte count of the pages and in UTF-8 and ISO-8859-1 they came up identical and I can see massive implications for the future (not just in this module). My theory is that in this case when the page is pulled from the shop and displayed at WorldPay, then worldpay is setting a header for UTF-8 but the shop's main text is in ISO-8859-1 and so some characters are getting mangled. I would need a VOLUNTEER (I do not need direct access to a merchant account or to admin or to having the site in test mode as I can fake all that) to prove this, but the big implications are that for years people have been editing the pages and storing all the information in a MySQL Latin-1 charset database (or getting paypal info back into the DB as a windows charset) and all that information is going to be pulled out in ZC 1.4 and displayed on a UTF-8 page.

Anyway, the fix for the email issue has been done along with the conversion to ISO... though I don't think it will make much of a difference. It's been submitted to the downloads page, but early adopters can get it here:

http://########################.co.uk/WorldPay_ZC1.3.x_v2.05.zip

I shall await a volunteer to see if there's anything I can do about the character set display.

Philip.

Quote:

---

Originally Posted by philip_clarke

The only solution for this one is to sort out a language for your own admin installation, as previously mentioned, there is a define for FILENAME_WORLDPAY in ./admin/includes/languages/english/worldpay_response.php so it's a matter of creating the folder and copying the file across

---

In ./admin/includes/boxes/extra_boxes/worldpay_response_customers_dhtml.php you have defined the db table, also FILNAME define could go here then. Or best, all defines moved into new files in ./includes/extra_datafiles/ and ./admin/includes/extra_datafiles/

Quote:

---

That's curious as I've installed this module on at least 9 servers for people from this forum and I've not seen it on any installation.

---

Was this maybe English sites/language then? My workaround was to copy and rename ./email/email_template_checkout.html into ./email/email_template_wp_callback.html AND ./email/no/email_template_wp_callback.html

Quote:

---

I did a byte count of the pages and in UTF-8 and ISO-8859-1 they came up identical

---

Not sure that you should see a different, as long as there isn't any special characters (like å,ø,æ,ä,ö etc.).

Quote:

---

My theory is that in this case when the page is pulled from the shop and displayed at WorldPay, then worldpay is setting a header for UTF-8 but the shop's main text is in ISO-8859-1 and so some characters are getting mangled.

---

I think you're right on this one, but not sure if I can help you debug it as I don't have any WorldPay account myself - just helping someone out with it. But I'll see if I can arrange something for you, and if so PM you.

Quote:

---

but the big implications are that for years people have been editing the pages and storing all the information in a MySQL Latin-1 charset database (or getting paypal info back into the DB as a windows charset) and all that information is going to be pulled out in ZC 1.4 and displayed on a UTF-8 page.

---

ZC 1.4 will hopefully come with a migration tool to overcome this issue, if not each and one having special characters stored would need to convert their database manually into utf8 collation. Not really a hard thing to do, can also be done directly in phpMyAdmin. Done it for some Joomla! sites, migrated from 1.0 to 1.5 - where the extensions wasn't supported by the migration tool.

Quote:

---

Originally Posted by rued

In ./admin/includes/boxes/extra_boxes/worldpay_response_customers_dhtml.php you have defined the db table, also FILNAME define could go here then. Or best, all defines moved into new files in ./includes/extra_datafiles/ and ./admin/includes/extra_datafiles/

---

Ahh, but I was working from the paypal template using

/admin/includes/languages/english/paypal.php

so that would be the correct place in theory. It could go into ./admin/includes/extra_datafiles/ but that would kill the ability to translate it into a different language as that's a global load.

Quote:

---

Originally Posted by rued

Was this maybe English sites/language then? My workaround was to copy and rename ./email/email_template_checkout.html into ./email/email_template_wp_callback.html AND ./email/no/email_template_wp_callback.html

---

The sites were English language but I suspect something else is different in the configuration, I debugged it from your error message which gave me the page ./includes/functions/functions_email.php

and this:

Code:

---

    if (!file_exists($template_filename)) {
      if (isset($block['EMAIL_TEMPLATE_FILENAME']) && $block['EMAIL_TEMPLATE_FILENAME'] != '' && file_exists($block['EMAIL_TEMPLATE_FILENAM
E'] . '.html')) {
        $template_filename = $block['EMAIL_TEMPLATE_FILENAME'] . '.html';
      } elseif (file_exists($template_filename_base . str_replace(array('_extra','_admin'),'',$module) . '.html')) {
        $template_filename = $template_filename_base . str_replace(array('_extra','_admin'),'',$module) . '.html';
      } elseif (file_exists($template_filename_base . 'default' . '.html')) {
        $template_filename = $template_filename_base . 'default' . '.html';
      } else {
        $messageStack->add('header','ERROR: The email template file for (' . $template_filename_base . ') or (' . $template_filename . ') c
annot be found.','caution');
        return ''; // couldn't find template file, so return an empty string for html message.
      }
    }

---

So there should be something on your system displaying the messagestack whereas on the other systems it's probably turned off. It only needs one file on the system to be found though, so I just copied it to email_template_wp_callback.html. It's a pity but I can't add the wpdisplay box to the email as it's a worldpay pull that puts it on the page.

Quote:

---

Originally Posted by rued

Not sure that you should see a different, as long as there isn't any special characters (like å,ø,æ,ä,ö etc.).

I think you're right on this one, but not sure if I can help you debug it as I don't have any WorldPay account myself - just helping someone out with it. But I'll see if I can arrange something for you, and if so PM you.

---

all that really needs doing, is examining what headers worldpay sends out when it pulls the page through, and a start would be Mozilla 3 and Tools > page info. I could go onto a friend's website or find an un-patched one and break into it, in "test mode" but I thought I'd ask for volunteers first.

Quote:

---

Originally Posted by rued

ZC 1.4 will hopefully come with a migration tool to overcome this issue, if not each and one having special characters stored would need to convert their database manually into utf8 collation. Not really a hard thing to do....

---

Not hard, but

1. Time consuming
2. Beyond the understanding of most basic shop administrators

The forums shall be filled with people claiming ZC is broken because of "the squiggles".

Not sure if this is the right place --> ZC 1.3.7 - php4 (sorry, other apps require) - worldpay mod 1.4 (I'm very olde worlde, I know)


This has worked fine for yonks and yonks. Suddenly, worldpay or 'bye now' buttons replaced by 'contact me' buttons (ie worldpay disappears to the shopper)
Still active in admin payments module.

Worlpay say the site is still fine for payments and not their problem (they would though)


Any ideas why a working shop suddenly becomes an unworking shop (and surprisingly, I'll also say I've not changed anything) ????




THANKS

Re above

I chickened out - moved to a php5 server.

Removed old worldpay module + installed new worldpay module 2.0.4

No difference ---> shop has no buy buttons, just a contact me which directs to my contact me page

So, tis not php or module version me thinks ---> but, what else is there for me to have lost my shop?

You've been hacked. I you didn't do anything, then someone else did. Private message me and I'll have a look around, it's not the module but something is amiss.

I am trying to centre the sidebox logo content images. I have tried in my stylesheet putting every combination of wp cc accept without success.

What is the instruction i need to centre the card logos?

There is a stylesheet hack that would involve limiting the amount of images or having a "clear:both" after everyone and then in the div using margin-left: auto and margin-giht: auto but it's a pain and doesn't really look good. The easieat way is to edit:

includes/templates/template_default/sideboxes/tpl_wp_cc_accept.php

and add the old html <center> and </center> inside the div,

Code:

---

<div id="wpccacceptContent" class="sideBoxContent">

---

Hi,philip_clarke

I have two payment mods -- Protx and Worldpay, both take payment in GBP. I am going to use Protx also take payment in euro, but no Worldpay. so is that a way to make Worldpay not appear when the shop currency is in euro? Worldpay will appear only when the shop price is display in GBP but no euro.

can you help me?

thank you in advance!

There are two ways of doing this

• pay someone to change the code
• go to the Payment Zone box and select UK as the only country that you are going to use worldpay for

You might have to set up UK as a "zone" first but then it would work from the address.

You would go into ZC admin and then to "Locations / Taxes" then to Zone definitions, Insert a new zone (bottom of the page) called "GBP only" and then add the UK to that zone, go back to worldpay and select that zone.

This is the nearest you will get, and it might not work, I've never properly tested the zone functions in worldpay.

Philip.

Quote:

---

Originally Posted by philip_clarke

There are two ways of doing this

• pay someone to change the code
• go to the Payment Zone box and select UK as the only country that you are going to use worldpay for

You might have to set up UK as a "zone" first but then it would work from the address.

You would go into ZC admin and then to "Locations / Taxes" then to Zone definitions, Insert a new zone (bottom of the page) called "GBP only" and then add the UK to that zone, go back to worldpay and select that zone.

This is the nearest you will get, and it might not work, I've never properly tested the zone functions in worldpay.

Philip.

---

Many thanks for your advice! I really appreciate it!

If that part of worldpay doesn't work then PM me and I'll fix it. I inherited WorldPay so dealt with the more serious problems than the country ones, so have not examined that section.

Quote:

---

Originally Posted by philip_clarke

If that part of worldpay doesn't work then PM me and I'll fix it. I inherited WorldPay so dealt with the more serious problems than the country ones, so have not examined that section.

---

Hi, philip_clarke

I followed your details instruction and set i up, it seems work just fine.

Thank you very much for your kindly assistance!

I really appreciate it.

Best regards!

Quote:

---

Originally Posted by abbas1

Hi Philip,

Thanks for the info, but I realised it was my mistake. The whole website was password protected, hence the authentication was failing. This caused the callback failure.

On another note, I would like to thank you for the worldpay module and all your efforts.

---

Hi Philip or abbas1

I am having the same problem as above, my website is password protected and the callback just stays on the Worldpay thank you page.

Worldpay say this can be solved by setting the callback URL to something like http://username:[email protected]/. Is this correct and do you know which line of code I should change?

Thanks

Richard

How good is your PHP ?

You'd have to build a URL in

Code:

---

function _build_callback()

---

which is inside the page includes/modules/payment/worldpay.php

PM me and I'll give you a hand.

Philip.

Hi Phillip, I am just getting Worldpay for my store and installed this mod, Worldpay is currently in test mode and the transactions are going through fine, I just have one question though lol is it supposed to auto-return you to the store in test mode? Mine doesn't on the test transactions and I wondered if it was just because of the testing and the auto-return, or even a link to return will happen when it goes live? Hope this makes sense LOL

You should always be returned to your store. I recommend hitting the cancel button in worldpay and seeing if that will return you, and if not then enable debug to see what is exactly happening.

Althought you state that the transactions are going through, are you getting your orders filled in your test site, or is your shopping cart still full when you returm ? This is a give away that worldpay is not communicating with your store correctly and the debug emails should help you.

It has been known that worldpay in test mode sometimes takes time to update the password settings at their end, so it may suddenly start working. In you debug emails you should look for callback+pw being sent from worldpay, and don't pot any debug email to the forum as you will give away your server location, merchant id and passwords !

Philip.

Hi Philip, when I did the test transactions this morning, it all went through and I got the screen that says successful transaction, no return, nothing entered into the zc database and the items still in my cart, I figured this was because I was in test mode. I have the debugging enabled but nothing was emailed, except the transaction email from worldpay that I would get as a customer.

I will keep testing as it is a very new account LOL I have only just gotten the emails that they received my banking forms etc, so hopefully it is as you suggested and needed some time :)

No you have a classic case of something wrong-itis. The debug emails should always come through Test mode or not.

There are now two options a) you have .htaccess protected your webiste so worldpa can't get to it, but this is not very likely uless you have forgotten to mention the warning worldpay emails you would be getting.

b) Go through the Worldpay admin screen and check your settings first of all, enabling the payment reponse etc... as in the instructions and then click the save button at the bottom, and it doesn't hurt to transfer them to your production settings.

Then go and have a cup of tea because WorldPay seems to work on some kind of caching system and the passwords or settings don't always go through immediately (I once saw this with a user I was helping, we banged our heads against a brick wall, re-entered all the passwords etc... nothing happened. Once cup of tea later and it all worked). It's not even fancy tea like "Earl Grey" or "Darjeeling" just a normal cup of tea seems to work, try it YMMV.

Philip.

Well the classic wrong-itis would originate from classic blonde-ness LMAO it just occurred to me while double checking things in Worldpay admin that I had entered all the details into the Production Environment and I never realised I had to enter them also into the test environment LMAO

Did so and now have emails, mainly that the callback is failing:

Error reported: Callback to https://www.havendesignz.com/store/w...121ac76daf27f9: NOT OK, recevied HTTP status: 302

I have Yellow's Simple SEO URL mod installed, could this be what is happening with the callback?

Ok, success LOL I was also getting error emails saying password failure and I saw the password in there had the last letter left off, so I updated it to something a lil shorted LMAO and also set the wp_callback url to be excluded from the seo url changes and voila, I actually got returned to the store with a successful transaction!

Thanx for your help, I don't think I would have realised my initial blonde booboo without it LOL and thanx for all your work on giving us an easy way to integrate Worldpay with our store :)

Soon as I have a few extra funds, Worldpay just cost me over 600 bucks to set up and I think my husband would have a fit if I spent any more right now LOL, I will paypal you some dollars :D

Thank you. Just woke up, I'm in UK

The easy way to test if the SEO is mucking with the redirect, is that you take the details from the HTML form on the last checkout_confirmation page before submitting to world pay, e.g. scroll down and cut the form out that is going to be submitted to worldpay.

You then add

<input name="transStatus" value="Y" type="text" />
<input name="callbackPW" value="YOUR_PASSWORD" type="text" />

and point the form towards https://www.havendesignz.com/store/wp_callback instead of http://select-test.worldpay.com

That effectively fakes the system and is where I discovered the original exploit (e.g. there was no password facility or checks so anyone mark an order up as paid by worldpay) and it should mark your order as paid, but with warnings. And you can test if the SEO is mucking with it, it's more likely that your (lack of) password created the 302.

Good morning then, about to head to bed here in Australia LOL :)

I decided to leave it with the url excluded in the seo as earlier before the password shenanigans and stuff I pointed my browser to https://www.havendesignz.com/store/wp_callback I got a partial blank page error with the hacker url bit, and it's working ok right now since I excluded the url so I will leave it as is and not push my luck LOL

Hope you have a great day! :D

Just check the cancel button on the worldpa side of things, if you are concerned about your mod_rewrite rules, that should bring you back into your shop.

Thank you
Philip.

Thanx :)

Hi Philip, I have another question for you LOL

I managed to add in an image code to have the worldpay logo display on the checkout page the same way I have the paypal logo display, however this also makes the image display on the order email as well, I took a peek at the code but could not see an obvious way to separate the two out and admit my abilities are limited LOL

Any way to do this? Thanx :)