ePDQ module for v1.5.0

I have just installed the latest version (Dec 2012) of Barclay's ePDQ payment interface, you can get the updated Zen Cart payment module by asking the ePDQ support team. They provide it purely "as is" ie unsupported. It seems to have been developed for version 1.3.9 but works ok with v1.5.0, there are a few issues which might cause some headaches-

1. ePDQ expects the monetary amount to be charged to the credit/debit card without a decimal point (ie in pence). The Zen module does this by multiplying the total order amount by 100, which assumes there are no fractions of a penny. You may have fractions if your shipping is a percentage of the order total - the order confirmation pages automatically round up to display the amounts, but when the data is passed to ePDQ you'll see the message

"amount too long or not numeric" or "amount not a number"

because you have a decimal point in the amount. I added a round() function on the order total amount to fix this.

2. I don't know if its just my installation but if a customer has not provided a telephone number in their account the ePDQ module fails with the message:

"unknown order/1/s"

Something to do with the SHASIGN data check on the ePDQ side of things (telephone number is not marked as mandatory but it seems to be). I added some code to default the phone number to 0 if none has been supplied to fix this.

3. You will not get ePDQ to work if the URL calling it includes the ZENID parameter eg if using a shared SSL certificate (you will probably see error "unknown order/1/r"). EPDQ needs a consistent URL to call it.

Perhaps this info will help someone else. :smile:
Mick

Thanks Mark. This has been useful information to me.

I have installed and I'm now at the testing stage. I'm stuck on your third point:

Quote:

---

3. You will not get ePDQ to work if the URL calling it includes the ZENID parameter eg if using a shared SSL certificate (you will probably see error "unknown order/1/r"). EPDQ needs a consistent URL to call it.

---

My test account does contain a phone number but I get "unknown order/1/r"

Any ideas how I can resolve it? Are you saying that I need to remove or disable to SSL cert in order for ePDQ to work?

Thanks :-)

Quote:

---

Originally Posted by Redspan

Any ideas how I can resolve it? Are you saying that I need to remove or disable to SSL cert in order for ePDQ to work?

---

Our ePDQ runs fine in a full SSL environment ie we bought an SSL certificate for the domain, the problem I found earlier was using a shared SSL certificate in a testing environment.

With shared SSL Zencart calls the ePDQ module with a variable token (zenid) in the URL and it needs to be called with a fixed URL I guess for security.

In your ePDQ technical settings for "Data and origin verification -> URL of the merchant page containing the payment form that will call the page:orderstandard.asp" make sure the URL is correct. Ours is the https domain followed by

/index.php?main_page=checkout_confirmation

If you are running with a shared certificate you will need to purchase a full SSL certificate for your domain unless you can strip the zenid out of the URL before calling ePDQ. I think the general advice is its better to not use shared SSL with Zencart for a live website.

Cheers,
Mick

I'm fairly sure my SSL cert is for the domain. I've tested both the site and checked the account where the cert is registered and everything is in order. There's no mention of it being shared and it refers to the domain itself.

I've checked that are of the settings you mentioned and it's all correct, and the SHA IN and OUT match correctly.

I've got ePDQ support to raise a ticket....

Sounds an odd problem - error "unknown order/1/r" is listed only as a mismatch between the calling URL and what you have configured in your ePDQ tech settings. If your SSL domain looks like https://<your_domain> then its not shared. The "zenid" token can show up in the URL for various reasons, search in the forum for more info.

I found it useful to see exactly what was being called and the parameters being passed - in a Chrome browser run through an order checkout, at step 2 of 3 right click the "Continue Checkout" button and choose "Inspect element". The "action" setting on the form named "checkout_payment" should match your "Data and origin verification -> URL of the merchant page containing the payment form that will call the page:orderstandard.asp" setting.

If you do "Inspect element" on the "Confirm the order" button at step 3 of 3 you see the call to ePDQ and the parameters being passed.

Support was helpful but quite slow, I hope they can sort it for you.
Cheers,
Mick

Well that got me one step closer!

I did as you suggested and the data passed includes http:// not https://, so once I'd amended the epdq settings I got to the card information screen. The amount of the transaction was there where before it was missing.

I see the test info that Barclaycard provide includes card numbers but no expiry or CSV number, so I've yet to find out how to finish the test but I expect a call to them will resolve that.

Isn't it a bit of security risk that anyone can view these same details?

Quote:

---

Originally Posted by Redspan

I see the test info that Barclaycard provide includes card numbers but no expiry or CSV number, so I've yet to find out how to finish the test

---

It's very common that the use of "test" card numbers can be coincided with "any future date" and "any 3-digit number" for expiry/CVV respectively. Some systems use specific dates and specific CVV values to trigger a specific error response in test mode, but it should be safe to start with something like that.

You're quite right DrByte, 01/2013 and 123 work fine. Should've tried that at least - thanks!

Now, testing Visa and Mastercard with amounts and card numbers, each payment is authorised and I see the 'return to site' button.

Only trouble is, when I'm returned to the site the message is "Please accept our apologies. There has been an error in processing your payment, please try again."

Is this normal for tests?

Quote:

---

Originally Posted by Redspan

Is this normal for tests?

---

Probably not.
You'll have to work with your gateway tech staff on that.

Quote:

---

Originally Posted by DrByte

Probably not.
You'll have to work with your gateway tech staff on that.

---

You mean ePDQ support? I have a ticket open.

I guest the problem lies with my own site because these test ePDQ orders aren't showing up in the Orders section of the ZC admin area.

I know orders work with PayPal as the site has successfully processed such an order, but wouldn't test ePDQ orders get listed (to be deleted after the tests conclude)?

Quote:

---

Looking at the logs, the payment was completed successfully and returned to https://www.blahblah.com/index.php?m...eckout_process appended with a list of parameters and values confirming the success of the payment request (shown below - this was returned for Order I.D xxxxxxxxxx

edit

In terms of the error message, as this appears on your site, it would appear that there is an issue with how you are handling the response from ePDQ.

---

This was their response. I guess I need to look at my site in more detail.

Quote:

---

The message "Please accept our apologies. There has been an error in processing your payment, please try again." is a hashing mismatch on the return to Zencart, check your Zencart Passphase Out exactly matches whats in the ePDQ tech settings.
Test orders will appear like any other order once this works.
Sounds like you're not far off getting it working.

---

Cheers,
Mick

Quote:

---

Originally Posted by Redspan

appended with a list of parameters and values confirming the success of the payment request

---

Can you share that list of parameters and values?

Quote:

---

Originally Posted by zedmick

I have just installed the latest version (Dec 2012) of Barclay's ePDQ payment interface, you can get the updated Zen Cart payment module by asking the ePDQ support team. They provide it purely "as is" ie unsupported. It seems to have been developed for version 1.3.9 but works ok with v1.5.0, there are a few issues which might cause some headaches-

---

Who currently is working on this since I'd kinda like a copy and nobody I contact seems to reply...

Quote:

---

Originally Posted by marach

Who currently is working on this since I'd kinda like a copy and nobody I contact seems to reply...

---

The ePDQ support team should give you a copy on request, can be a bit slow in replying...

I've been away but I'm still working on this. I still have a ticket open with ePDQ Support.

Quote:

---

Originally Posted by DrByte

Can you share that list of parameters and values?

---

Code:

---

3:16:42 PM : https://www.blahblah.com/index.php?main_page=checkout_process&orderID=00xxxxxxx3&currency=GBP&amount=14%2E98&PM=CreditCard&ACCEPTANCE=test123&STATUS=5&CARDNO=XXXXXXXXXXXX1111&ED=0113&CN=Andy+Customer&TRXDATE=01%2F31%2F13&PAYID=xxxxxxxx&NCERROR=0&BRAND=VISA&IP=1%2E11%2E1%2E1&SHASIGN=hashhashhashhashhashhashhashhash

---

ePDQ's comments were:

Quote:

---

I would suggest turning off the setting that includes the transaction parameters to your redirect URL(s), to see if the same message occurs on your page. This would confirm if it is the information being sent back that is causing the problem on your page, but ultimately we are not able to confirm anything of detail on what you should do on your site.

All we can confirm is that ePDQ has sent the parameters appended to your redirect URL, shown in my earlier email, and typically your redirect URL would handle this data.

---

?

How do I do this? turning off the setting that includes the transaction parameters to your redirect URL(s)

Quote:

---

Originally Posted by Redspan

How do I do this? turning off the setting that includes the transaction parameters to your redirect URL(s)

---

I'm guessing that that's a setting in your ePDQ account on their site.
Or, again guessing, maybe it's a setting in your ePDQ module in your Zen Cart admin?

Zen Cart's security system doesn't like long parameters in URLs, since that's often what hackers use when probing sites for vulnerabilities. It could be that the SHASIGN=hashhashhashhashhashhashhashhashhashhashhashhashhashhash is throwing it.

That's it :smile:

I deselected I would like to receive transaction feedback parameters on the redirection URLs in the edpdq settings and ran a test and the order completed correctly.

Thank you for your help and suggestions :smile:

Quote:

---

Originally Posted by zedmick

The ePDQ support team should give you a copy on request, can be a bit slow in replying...

---

All I'm getting from them at the moment is static "I'm sorry I have no information on that, the module should be provided by zen-cart themselves"

I went from Test to Prod today. They said I just needed to change the setting in the ZC module from test to prod, but of course there was a little more to it than that.

When I logged into the Prod ePDQ backend I had to check all the parameters and noticed the SHA passwords weren't correct. I also had to modify one of the URLs (as above).

Finally (and with less hair than I started the day with), it appears to be working. I've ordered something and checked out successfully and the notifications have arrived, and the transaction is recorded.

Only lose end now is the page to which the customer is sent after leaving the secure payment area. Bydefault it goes to a page saying 'Your Shopping Cart is Empty' which is a bit vague.

I'm loathe to change anything in the Prod backend are but presumably I need to change Accepturl: displayed when the payment has been authorised, stored, accepted or is waiting to be accepted.

from
https://www.blahblah.com/index.php?m...eckout_process
to
https://www.blahblah.com/index.php?main_page=account or what is the page that shows a successful completion of order?

I am too having the same problem Redspan,

My checkout confirmation page goes to the epdq payment pages and when the transaction is successfull it comes back to my store but doesnt add the order to my admin area.

having looked at your previous posts about turning off the transaction parameters
"I deselected I would like to receive transaction feedback parameters on the redirection URLs in the edpdq settings"

Where is that? lol ive looked all over the place, am i going mad.

Im using the default epdq module on the zencarts plugins page, do i have the wrong version?

im all confuddled now, any help would be appreciated.

http://falconindustrial.co.uk/workwearstore

Quote:

---

Originally Posted by Redspan

I went from Test to Prod today. They said I just needed to change the setting in the ZC module from test to prod, but of course there was a little more to it than that.

When I logged into the Prod ePDQ backend I had to check all the parameters and noticed the SHA passwords weren't correct. I also had to modify one of the URLs (as above).

Finally (and with less hair than I started the day with), it appears to be working. I've ordered something and checked out successfully and the notifications have arrived, and the transaction is recorded.

Only lose end now is the page to which the customer is sent after leaving the secure payment area. Bydefault it goes to a page saying 'Your Shopping Cart is Empty' which is a bit vague.

I'm loathe to change anything in the Prod backend are but presumably I need to change Accepturl: displayed when the payment has been authorised, stored, accepted or is waiting to be accepted.

from
https://www.blahblah.com/index.php?m...eckout_process
to
https://www.blahblah.com/index.php?main_page=account or what is the page that shows a successful completion of order?

---

Cant get Barclaycard epdq working in zencart wont record orders can anyone help
Hi Adrian,

Thank you for the email.

The specifics of the customer’s order is not something that would be handled by the ePDQ system – this data would be retained exclusively within Zen Cart. Please escalate this to Zen Cart’s support forums if the application is not functioning as expected.

Anything further, please let me know.

Regards

Matt Farmer | eComm Technical Support
Barclaycard Payment Acceptance | GBS Operations
Pillar J.14.3 | 1234 Pavilion Drive | Northampton
NN4 7SG | United Kingdom | http://www.barclaycard.co.uk | Mail Van 24
Telephone (0844) 8240230

COMPANY CONFIDENTIAL

From: Adrian Walker [mailto:[email protected]]
Sent: 08 May 2013 14:25
To: EPDQ Support : Barclaycard
Cc: [email protected]
Subject: technical mangers

hi

Having spoken to Grace she as advised me to email the exact problem that we are having with Zen cart Integrating with Barclaycard epdq system.

1) the order is taken on website ok
2) the payment is recorded with no trace of the actual goods require( which means we after ring the customer up and ask what they have order)


I’ve attached a screen shot of the Zen cart set up so your teams can please advise us on the best solution
I’ve attached a screen shot after I had placed an order ,payment taken no stock recorded and goods still in the basket

Hope this helps

Kind Regards
Adrian Walker

Barclaycard epdq

keep getting this error message when a payment is made can anyone help!!

1146 Table 'web247-a-zenc-2.epdq' doesn't exist
in:
[insert into epdq (epdq_order_id, zen_order_id, epdq_amount, epdq_acceptance, epdq_status, epdq_payid, epdq_customer_name) VALUES ('1112912331', '66', '0.01', '403530', '9', '704130647', 'adrian walker')]

In the last 10 days or so we have been having what sounds like the same problems intermittently ie we have had 2 orders where all we get is the barclays payment email.

Zen cart has no order recorded and the customer_basket still has the goods sitting in it. Our site has been running fine since July 2012 and we have not made software changes for months.

Before that we would get the occasional order completely duplicated. The problems only happen through the epdq payment module and are not consistent... very odd.

I have emailed support about a barclaycard upgrade that went in around May 15th and await a reply.

Hi all,

Is there anyone could upload the updated ePDQ module to the web?

Thanks.

is ePDQ still in use or has barclaycard changed the system that much a new module is needed? my current providers where not 3d secure v2 so i want to go direct to barclaycard rather than through takepayments if possible. My module potentially is an answer with a few tweaks as it does go through 3d secure v2 just a 4th party responsible for ensuring the switchover was seemless messed up, i had a rubbish one last christmas so would be awesome to ensure the checkout works as expected this christmas :)

Quote:

---

Originally Posted by flappingfish

is ePDQ still in use or has barclaycard changed the system that much a new module is needed? my current providers where not 3d secure v2 so i want to go direct to barclaycard rather than through takepayments if possible. My module potentially is an answer with a few tweaks as it does go through 3d secure v2 just a 4th party responsible for ensuring the switchover was seemless messed up, i had a rubbish one last christmas so would be awesome to ensure the checkout works as expected this christmas :)

---

I am trying to integrate the epdq payment module with 1.5.8, managed to get the payment across to the test Barclaycard server, with logo etc, now I am trying to pass the result back, the 1.5.0 ipn handler doesn't work, so I am trying to port the PayPal ipn_handler from 1.5.8. But I imagine I may need some help.