Ceon Manual/Offline Card Payment Module v1.0.0!

Hi,

It gives me great pleasure to release the first version of our Manual/Offline Card payment module for Zen Cart!

This Payment Module provides everything a Zen Cart shop owner needs to accept Credit/Debit Card payments over the internet for inputting into a Manual/Offline Card Processing System.


Full details about the contribution are available at its website:

Information and Downloads - http://dev.ceon.net/web/zen-cart/ceon_manual_card


I recommend that you take a look at the above site but for those who want more information first (lazy you :) ), here is the feature list:


Features

This Payment Module has been written to be as comprehensive as possible (despite the limited nature of a payment module for Manual Card Processing). The current feature list follows.

Support for many Card Types

Each card type can be enabled or disabled at the click of a button inside the admin. Cards currently supported:

• Visa
• Mastercard
• Switch/UK Maestro
• Visa Delta
• Solo
• American Express
• Visa Electron - UKE
• Diners Club International
• JCB

Please Note: If you would like additional card types added, please just ask us. It's not difficult for us to add more (mostly we need need to know details like “Are Start Dates required/optional/not used?” etc.).


Allows gathering of the following information:

o Card Holder's Name
o Card Type
o Card Number
o Expiry Date
o CVV Code
o Start Date (Switch/UK Maestro/Solo/American Express Only)
o Issue Number (Switch/UK Maestro/Solo Only)

Please Note: The CVV code and middle digits of the credit/debit card number are sent in an e-mail to the store owner. This means that the full details don't need to be stored on the server and is by far the most secure way to collect Card Details for manual/offline processing. The rest of the details can be accessed at all times through the "Orders" section of the Admin.


Retains entered Card Details right throughout the checkout process.

If a user goes back to change their Shipping Address, or realises at the Confirmation Stage of the checkout procedure that they have entered some incorrect information, when they return to the Payment Page the card details they entered previously will be automatically restored. This prevents any frustration with customers having to re-type details and should help prevent customers leaving at the last hurdle! Please note: If your server has PEAR:Crypt_Blowfish installed, this information is kept encrypted in the session so as to protect the confidentiality of the details!


Visual Validation Feedback using JavascriptVisual Feedback of Javascript Validation.

In order to catch any problems with Card Details entered by the customer as quickly and easily as possible, this module will not only alert the user to any incorrect information when they attempt to submit the form, it will actually highlight the form fields which require their attention. Again this should help to reduce customers getting frustrated and leaving at the last hurdle!

http://dev.ceon.net/web/zen-cart/ceo...ed_display.png

Icons for each Credit Card accepted.

If you enable the option in the admin, icons are displayed for each credit/debit card accepted (see picture at right). Maybe not an essential feature, but it does look more professional for your shop!


Ability to disable Autocomplete.

Some browsers store credit/debit card numbers and/or CVV numbers entered and automatically insert them in a card number field/CVV field when a user returns to a website. This can be quite disconcerting to customers so the option to have this browser feature disabled is offered (and set by default) by the Ceon Manual Card payment module.


Dynamic Start Date and Issue Number support.

Certain cards (Switch/Maestro/Solo/American Express) may need a Start Date to be supplied for authorisation to take place, while certain cards (Switch/Maestro/Solo) also may need an Issue Date to be supplied. This module dynamically displays the necessary form gadgets to capture this information from the user based on the cards types enabled in the admin.


Debug Support.

Sometimes there can be problems with a shop's server settings. The debug mode allows you to see what information was to be sent and the server setup (encryption settings) identified so you can check your settings. Most people should never need this though and it is subsequently disabled by default.


Complete support for Zen Cart 1.3.x's Observer/Notification System.

There are two versions of this module, one of which makes full use of Zen Cart 1.3.x's handy new notification system to make installation even more of a breeze!


Enjoy! :thumbsup:

Please read the documentation before posting any questions in this thread so that we can hopefully keep the number of posts here down to a minimum!

Download NOW!

If you like this contribution and get a lot of use out of it, please consider making a donation!

All the best...

Conor
ceon

Hi,

Forgot to post a screenshot of the Javascript Validation Visual Feedback, so here it is... (also, it's "Maestro" and not "UK Maestro", there isn't any difference anymore! :) )


http://dev.ceon.net/web/zen-cart/ceo...screenshot.png


If you like/use this module please let us know (or even better, donate! :P )

All the best...

Conor
ceon

Quote:

---

Originally Posted by conor

.......

Please Note: The CVV code and middle digits of the credit/debit card number are sent in an e-mail to the store owner. This means that the full details don't need to be stored on the server and is by far the most secure way to collect Card Details for manual/offline processing. The rest of the details can be accessed at all times through the "Orders" section of the Admin.....

---

Hi Conor,

Just a thought. If you have the Email Archiving mod installed will these emails then be archived in your database therefore leaving a security hole?

Regards

Brent

Quote:

---

Originally Posted by Brent

Hi Conor,

Just a thought. If you have the Email Archiving mod installed will these emails then be archived in your database therefore leaving a security hole?

Regards

Brent

---

If it does, then surely that also applies to the existing ZC cc module?

Hi Brent,

I love your questions sometimes... you really think about things from a strong security perspective... as a result they really benefit everyone!

I'm happy to say that this module sends the e-mails as "cc_middle_digs" so Zen Cart doesn't archive them. The e-mail sent to the e-mail address as specified in the module's configuration is the ONLY way to get the middle digits and the CVV number.

It also has a message at the bottom of it (in capitals!) which reminds the user to delete the e-mail once they've charged the card.

Tried to make this one 100% secure from the start, but it's great to have someone asking important questions as a backup! :cool:

All the best...

Conor
ceon

Hi Conor,

Thanks for making this available :smile:

Just installed to test and getting a 'cannot redeclare' conflict with your Protx mod (Protx mod installed but not turned on in admin):

PHP Code:

---

Fatal error: Cannot redeclare file_exists_in_include_path() 

(previously declared in /[path to file]/admin/includes/functions/extra_functions/ceon_manual_card_functions_file_system.php:28)

in /[path to file]/includes/functions/extra_functions/protx_direct_functions_file_system.php on line 27 


---

Cancel that report - for anyone reading who has the same error, the solution is to upgrade to v 2.04 of the Protx mod which includes a check to see if that function has already been declared previously by this mod :smile:

Hi Pixxi,

Glad you like the module!

I was going to say you must have an older version of our protx_direct module but you beat me to it, thanks! :thumbsup:

I introduced the check for the existence of that particular function in version 2.0.3 of the protx_direct module so anyone with that version need not upgrade to 2.0.4 if they don't want to (as not much has changed between those two versions)... upgrading won't do any harm of course though! :)

All the best...

Conor
ceon

Quote:

---

to accept Credit/Debit Card payments over the internet for inputting into a Manual/Offline Card Processing System.

---

Quote:

---

Allows gathering of the following information:

o Card Holder's Name
o Card Type
o Card Number
o Expiry Date
o CVV Code
o Start Date (Switch/UK Maestro/Solo/American Express Only)
o Issue Number (Switch/UK Maestro/Solo Only)

Please Note: The CVV code and middle digits of the credit/debit card number are sent in an e-mail to the store owner. This means that the full details don't need to be stored on the server and is by far the most secure way to collect Card Details for manual/offline processing. The rest of the details can be accessed at all times through the "Orders" section of the Admin.

---

Okay, let's get this straight. In most cases collecting information online and then running it through an EPOS terminal in an offfline 'bricks and mortar' shop will put the shop owner in violation of the agreement they have entered into with Mastercard/Visa. You can end up with a visit to your shop, your EPOS terminal ripped out and be blacklisted for life from using thir services again.

Secondly, under current UK legislation and under Mastercard/Visa T's and C's you are not allowed to store credit card information in an online environment unless:
1. The card details are stored on a separate server, used only for that purpose, and which can only be accessed by the ip address of the store collecting the information.
2. The company storing the data will have to submit to an annual security audit, carried out by trained industry professionals experienced in security audits (the cost will run into 000's of pounds a year.

This is why, in the UK at least, the use of Credit Card modules on websites, to collect card data for manual processing, is a thing of the past.

In the case of a complaint from a customer about a fraudulent transaction on their card from a website collecting and storing card details the hosting company can end up with that whole server being seized.

Vger

That is quite a bold statement - can you supply references to the relevant documentation to back it up?

Below is a snippet, and a link to a full article which goes into some depth to explain this. What's not in the article is the requirement to keep credit card data on a separate server - but this is how it is being applied in practice:

Quote:

---

Payment Card Industry Data Security Standard
Build and Maintain a Secure NetworkRequirement
1: Install and maintain a firewall configuration to protect data Requirement
2: Do not use vendor-supplied defaults for system passwords and other security parameters Protect Cardholder Data Requirement
3: Protect stored dataRequirement
4: Encrypt transmission of cardholder data and sensitive information across public networksMaintain a Vulnerability Management Program Requirement
5: Use and regularly update anti-virus softwareRequirement
6: Develop and maintain secure systems and applicationsImplement Strong Access Control Measures Requirement
7: Restrict access to data by business need-to-knowRequirement
8: Assign a unique ID to each person with computer accessRequirement
9: Restrict physical access to cardholder dataRegularly Monitor and Test NetworksRequirement
10: Track and monitor all access to network resources and cardholder dataRequirement
11: Regularly test security systems and processes.Maintain an Information Security PolicyRequirement
12: Maintain a policy that addresses information

---

The devil is in the detail, some of which is listed in the full article:

http://64.233.183.104/search?q=cache...k&ct=clnk&cd=1

And this quote from Protx:

Quote:

---

Recently Visa, MasterCard and other major card schemes have introduced security audits to ensure that all merchants who collect credit card data comply with strict guidelines surrounding the collection and storage of credit card data.

VSP Direct merchants collect credit card data on their own website and will be asked by their bank to undergo an audit to ensure that data is kept secure at all times.

Alternatively, if you do not wish to undergo such an audit, then you can outsource the collection of credit card data to Protx, by using VSP Form or VSP Server.

---

Vger

Thank you for that as I'm just about to explain this to a customer. :thumbsup:

Hi,

What Vger says is true and is something we reinforce in our Protx Direct payment module's documentation, however, as with all policies in life, it's up to yourselves to judge what to do about compliance.

As is mentioned in the documentation for this module, we take no responsibility for anyone's usage of the module.

What I will say here though is that at no point are the customer's card full details stored in your database by this module. Obviously a SSL certificate to secure your checkout is recommended as essential by us but again it is up to the individual shop owner to take responsibility for their decisions as to how they accept card details.

All the best...

Conor
ceon

Hi,

Just wanted to check if the CEON module works with v1.3.6. I can see no reason why it shouldn't, but always better safe than sorry :smile:

Quote:

---

Originally Posted by imac

Hi,

Just wanted to check if the CEON module works with v1.3.6. I can see no reason why it shouldn't, but always better safe than sorry :smile:

---

We are using conners module with our carts running 1.3.6 We have not found any problems with it.

Another great module from the ceon team : :cool:

Quote:

---

Originally Posted by AndrewClarke

We are using conners module with our carts running 1.3.6 We have not found any problems with it.

Another great module from the ceon team : :cool:

---

Good to know. Many thanks. :thumbsup:

Our store is in the UK, and I tried installing this mod, but it always gives me the same error
"The expiration date entered for the card is invalid. Please check the date and try again."

I can set it to any date in the future and the error is the same! Could it be something to do with the date reversal thing?

Apart from that, it looks good!

Hi,

Quote:

---

Originally Posted by kelvyn

I can set it to any date in the future and the error is the same! Could it be something to do with the date reversal thing?

---

I'm sorry to say that any problems encountered are due to a malfunctioning site and not the payment module itself... hopefully I can help kelvyn with his site privately.

All the best...

Conor

DOH! How annoying! My host had updated the latest version of php5 a couple of days agp - except Zend haven't caught up! So I've had to downgrade to php4, which is a nightmare as it's so slow.

But anyway, that part of the site is fixed, so now we can carry on diagnosing the credit card problem!

Thanks for spotting that, Conor!

I have a customer in Germany trying to pay using his Maestro card:

With my shopping cart filled up with fine items there's no chance for me to
get the items paid. I do not own any Credit Card and the system always says,
that the number of my Maestro Card is invalid

I am using 1.3.2 with the CEON module. I get dozens of orders per day, but this person's card is not accepted - it would be great to be able to turn off the number checking anyway as we process the cards using a separate online system.

Connor has helpfully found that this won't work because my server is in a different timezone than me.

I was wondering if the Time Zone Offset plugin might work, but I was hoping not to use it as it over-rides so many core files which have already been over-ridden by other plugins (roll on full over-rides!).

Is there any way to make time-checking javascript use the SERVER time rather than the users local PC time? And I'm still not sure why a pc with a 5 hour difference to the server should not be accepting and expiry date months or years into the future. And also, won't this mean that this contrib can't work for anyone shopping from anywhere unless it's the same timezone as the server?

Hi,

I need more information than that to help you.

What is the exact error?

When does it occur? (At the javascript stage?, after?)

Quote:

---

Originally Posted by palm

I am using 1.3.2 with the CEON module. I get dozens of orders per day, but this person's card is not accepted - it would be great to be able to turn off the number checking anyway as we process the cards using a separate online system.

---

The numbers aren't checked with this module... it's too unreliable to use BIN codes, hence the "Card Type" selection gadget being used now.

The only checking of the number is that it's longer than 10 numbers and the standard Zen Cart code.

Feel free to e-mail me about this at the address on the website. Please also let me know what version of the module you are using.

It's highly likely however that something's wrong with your customer's details but we'll see... :)

All the best...

Conor

Quote:

---

Originally Posted by palm

I have a customer in Germany trying to pay using his Maestro card:

With my shopping cart filled up with fine items there's no chance for me to
get the items paid. I do not own any Credit Card and the system always says,
that the number of my Maestro Card is invalid

I am using 1.3.2 with the CEON module. I get dozens of orders per day, but this person's card is not accepted - it would be great to be able to turn off the number checking anyway as we process the cards using a separate online system.

---

My German customer tells me their Maestro card is issued by "Volksbank/Raiffeisenbank Rendsburg-Eckernfoerde" and the card number does not have the standard 16 digits. I wonder if this is the reason its failing to be recognised as a valid card number?

Hi palm,

Quote:

---

Originally Posted by palm

My German customer tells me their Maestro card is issued by "Volksbank/Raiffeisenbank Rendsburg-Eckernfoerde" and the card number does not have the standard 16 digits. I wonder if this is the reason its failing to be recognised as a valid card number?

---

More than likely that's causing the Zen Cart CC number checking code to fail and this is your problem but without any more information I'm in the dark here. Sorry.

All the best...

Conor

kelvyn: I'm running this on a server with the time zone offset set to +19, no problem.

A great little module this, even have it working on my testing server, encryption and all.

I've installed the module on a test server. Looks interesting, but where in Admin can I see the first and last four digits of the cc number?

Okay... I've found it in Orders -> Edit.

Hi Conor,

I'm trying to install your module.
I have Zencart 1.3.0 and PHP 4.4 and dedicated SSL

Following your instructions I downloaded the files to my computer.
As soon as I upload the first file (admin/includes/extra_datafiles/ceon_manual_card_database_tables.php) I cannot access my admin area. I get the error message:

Warning: main(includes/extra_datafiles/music_type_database_names.php) [function.main]: failed to open stream: No such file or directory in /admin/includes/init_includes/init_file_db_names.php on line 39

Fatal error: main() [function.require]: Failed opening required 'includes/extra_datafiles/music_type_database_names.php' (include_path='.:/usr/local/lib/php') in /admin/includes/init_includes/init_file_db_names.php on line 39

Also, the uploaded files do not appear correctly. Instead of the file name, a small icon is shown, and no attributes are set. Is this supposed to happen?

I thought perhaps this was all sorted when the SQL patch was run, but I can't access mt admin section! (I don't know how to do it otherwise).

I've tried three times now, and my only solution seems to be to restore a backup.

Please help!!!

Hi Ousel,

Unfortunately those problems weren't caused by your installation of this module... those errors indicate that you have missing files in your Zen Cart installation.

You are missing (at least) the file:

includes/extra_datafiles/music_type_database_names.php

Which has nothing to do with any payment modules. Also, if files aren't appearing "correctly" then they can never be used.

I'm sorry but you have really corrupted your installation... there's no way that anything I or anyone else could help you with files that don't even have a file name.

I think either your FTP software is broken or your server has failed. Either way a reinstall sounds like the only option. :(

Wish I could give you better news than that.

All the best... good luck with your reinstall!

Conor

Excellent Module, thanks very much, can some light be led on how to set up the blowfish encryption? Im new to this, thankyou

I'm fairly sure this is something for your host

Hi,
I realy hope that someone can help me here as I'm in a bit of a hole.

I've installed the Ceon module on a clients site. The module worked well and the extra digits were being sent through to an email address.

I changed this email for testing purposes to a personal one of my own. Again all worked well.

Launch day came and I switch it back to the clients email. Now the digits aren't being sent. For some reason the will send them to any email on my personal domain, but not to any other email address on any other domain.

I've tryed re-installing the module but nothing seems to work. If anyone can shed some light it would be greatly appreciated.

Regards
Roger

Quote:

---

Originally Posted by roger@archiweb

Hi,
Launch day came and I switch it back to the clients email. Now the digits aren't being sent. For some reason the will send them to any email on my personal domain, but not to any other email address on any other domain.

---

Has anything changed on the general zen cart email settings?
If not, I'd ask you host whether there's any reason for this, and I'd ask you client to double check his spam folder :)

Nope nothing has changed that I'm aware of, should it have?

I've been onto the host, they say there is nothing wrong on their end but they are less that helpfull to say the least.
And as for the spam folder i've checked it personally and even turn the spam filter off on the account its being sent to.

Hi this may be a stupid question but I have installed this module and everything works fine, however I cannot find the credit card start date or issue number unless I go directly into the database, is there anyway that this can show up in admin or in the e-mail? thanks

Hi,

You'll find those details in the "Order" section of the admin... the Start Date and Issue number are listed under "Extra Information provided by Ceon Manual Card module".

Don't know how you could miss that! :lol:

All the best...

Conor
ceon

Hi there, I have installed the module and everything seemed to go ok.

I went online and placed a test order and it worked ok.

When I go into the admin and view the order details I get this error before the order:

Warning: admin_notification(/home/gretnafc/public_html/gretnadirect/includes/modules/payment/ceon_manual_card/ceon_manual_card_admin_notification.php): failed to open stream: No such file or directory in /home/gretnafc/public_html/gretnadirect/includes/modules/payment/ceon_manual_card.php on line 950

Fatal error: admin_notification(): Failed opening required '/home/gretnafc/public_html/gretnadirect/includes/modules/payment/ceon_manual_card/ceon_manual_card_admin_notification.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/gretnafc/public_html/gretnadirect/includes/modules/payment/ceon_manual_card.php on line 950

However, the order details are shown below ok, except the issue and start date.

Any help would be much appreciated asap.

Many thanks

Keith

Quote:

---

Originally Posted by kmelv

Hi there, I have installed the module and everything seemed to go ok.

I went online and placed a test order and it worked ok.

When I go into the admin and view the order details I get this error before the order:

Warning: admin_notification(/home/gretnafc/public_html/gretnadirect/includes/modules/payment/ceon_manual_card/ceon_manual_card_admin_notification.php): failed to open stream: No such file or directory in /home/gretnafc/public_html/gretnadirect/includes/modules/payment/ceon_manual_card.php on line 950

Fatal error: admin_notification(): Failed opening required '/home/gretnafc/public_html/gretnadirect/includes/modules/payment/ceon_manual_card/ceon_manual_card_admin_notification.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/gretnafc/public_html/gretnadirect/includes/modules/payment/ceon_manual_card.php on line 950

However, the order details are shown below ok, except the issue and start date.

Any help would be much appreciated asap.

Many thanks

Keith

---

Have you uploaded the SQL patch that comes with the mod?

Yeah everything has been uploaded, followed all the steps as normal.

Hi,

There are only two options here.... you haven't copied across the file:

includes/modules/payment/ceon_manual_card/ceon_manual_card_admin_notification.php

Or

You have copied it across but the permissions on the directory:

includes/modules/payment/ceon_manual_card

aren't correct and so PHP can't open the above file.

All the best...

Conor

Checked the files and permissions and all is correct, very confusing...

Would I be best starting from scratch? Removing the mod and trying again?

Hi,

This is specifically a PHP permissions error. Please send me your SSH/FTP details at the address listed on this module's support site and I'll find out what's wrong.

I don't think removing and reinstalling the module would make any difference to the permissions.

There's no need to reply to this thread, please just e-mail me privately, no point adding extra pages to this thread! :)

All the best...

Conor

Hi. I hope this is the correct place to post?

We have installed the mod which works great apart from the error You do NOT have PEAR:Crypt_Blowfish installed on your server!

Our host has installed PEAR:Crypt_Blowfish but we still get the error.
They said they have had this error before but cannot remember what the fix was.

If anyone has any ideas that would be great.

Cheers
Rob

Hi,

Did you read the FAQs?

Please send the debug information to the address on the module's support site and we'll do what we can to help you. :yes:

(Please don't post the info here!)

All the best...

Conor

Thanks Conor.

Ive run the debug and the includes path doesnt show anything to do with Pear.

I will contact my host and hopefully they can sort it.

Regards
Rob

Hi Rob,

That would be the problem then! ;)

They should be able to get that sorted for you in no time.

Another happy user then! :)

All the best...

Conor

Ok. My host don't seem to know what I am talking about.

Where do we go to change the path?

Thanks

Hi,

I'm seriously worried about the competency of your host then... who do you use? :lamo:

Setting up the include path for a PHP distribution is very basic server work, I'm surprised they don't know how to do this!

Please contact me at the address on the support website and I'll help you get this sorted.

I'd appreciate it if you would make no further posts to this thread about this as it isn't an issue with the module (and the more pages that are taken up the harder it is for others to find out how to fix any problems they have which are specific to this module).

All the best...

Conor

Hi Conor, sorry but I am back again. The start date and issue number for switch/maestro cards are not showing anywhere unless I go into the main order database. Is there something I have not configured correctly?

Hi,

Sounds like you've missed the file:

includes/modules/payment/ceon_manual_card/ceon_manual_card_admin_notification.php

Once you have copied that file across you will see the Start Date/Issue Number in the information about the order in the admin.

If that doesn't fix this for you please e-mail me at the address on the module's website.

All the best...

Conor

Hi We have installed this module but it is not showing up on the payment page and we have enabled it.

Any ideas?

Regards

Adam

In the Admin, change “Enable Debugging Output” to “True”.

I can't find this anywhere, please let me know.

Hi,

Quote:

---

Originally Posted by monkeytastic

In the Admin, change “Enable Debugging Output” to “True”.

I can't find this anywhere, please let me know.

---

When using payment modules in Zen Cart, each module has its own admin configuration, accessible via Modules > Payment.

Click on ceon_manual_card to see the configuration for the module, you'll find all options in there!

All the best...

Conor

Thanks Conor (and for the mod)

I'm unsure what the below means and how I can fix

Warning:
You do NOT have PEAR:Crypt_Blowfish installed on your server!

----------------------
Card Details Received:
----------------------
Card Number: xxxxxxxxxxxxxxxx
Card Type: xxxx
Card Owner: xxxx
Card Expiry Date: xxxx
CVV Number: xxx
Card Start Date (If on card):
Card Issue No. (If on card):

------------------------------------------
Card Number Able to be Sent Successfully?:
------------------------------------------
Yes... would have been emailed to: sales@xxxx.co.uk
------------------------------------------
--------------------
Encryption NOT USED!
--------------------

------------------------------
Include paths for this system:
------------------------------

.:/usr/lib/php

----------------------
Safe mode in use?: no
----------------------

I also have an ssl for the checkout so does the above need to be fixed anyway?

Hi conor,

I'm trying to download this contribution, but your website tells me that's it's unavailable (as you're working on a new website).

Do you have an alternative download link please?

Hi Alex,

Quote:

---

Originally Posted by Alex Clarke

Do you have an alternative download link please?

---

I'm afraid not. Please contact us using the contact page on the website and I'll e-mail a copy to you.

All the best...

Conor

Thanks very much for this mod. It really suits our company. But there is one problem we have had with the system regarding the following:

"Please Note: The CVV code and middle digits of the credit/debit card number are sent in an e-mail to the store owner. This means that the full details don't need to be stored on the server and is by far the most secure way to collect Card Details for manual/offline processing. The rest of the details can be accessed at all times through the "Orders" section of the Admin."

As everyone here is aware I am sure, email is not 100% reliable. For some reason, we had an occurance last week, where the extra card details and CVV number for 3 consecutive orders within a few hours did not come through. This meant of course that there is no way of processing the orders.

Over a week later they have still not come through, so we have had to phone the customers and ask for the extra details over the phone. As I'm sure everyone will understand, the customers were not very happy to do this.

The problem with these certain emails was probably a fault of our service provider, but this is certainly a weakness in this otherwise excellent Mod.

I tried thinking of ways around this. I tried to add a 2nd email address to the credit card payment module (stockroom>modules>payments>credit card) so that the extra details are sent to 2 cards, and whilst it would allow me to add a second address, it then failed to send an email to either address when I placed an order. I tried this with spaces, with a comma, colon and with a semi colon between the email addresses, but each alternative failed to work.

Therefore if one of these emails with extra card details do not turn up, is there anything we can do? Is there a way of ensuring that these details are sent to 2 email addresses, or has anyone gor a better idea?

Hi,

Quote:

---

Originally Posted by bonheddwr

Thanks very much for this mod. It really suits our company. But there is one problem we have had with the system regarding the following:

---

I'm glad that you find it useful! :)

Quote:

---

Originally Posted by bonheddwr

As everyone here is aware I am sure, email is not 100% reliable.

---

Of course nothing in life is 100% reliable but we run our own servers and haven't had a report of any e-mail going missing on even one occasion in the past 5 years. :yes:

If you are getting reports of e-mail going missing then you should move to a reliable host immediately!

I don't know who your hosting provider is but mail from a Zen Cart store to the store owner should never go missing. There is no excuse other than a shoddy hosting provider!

Quote:

---

Originally Posted by bonheddwr

Is there a way of ensuring that these details are sent to 2 email addresses, or has anyone gor a better idea?

---

I think it's essential you move hosts immediately, I wouldn't be comfortable letting an incompetent company run my business' website!

However you may also like to try entering two e-mail addresses in the module's configuration with a comma inbetween. I don't know if that will work but it's worth trying.

Hope that helps!

"However you may also like to try entering two e-mail addresses in the module's configuration with a comma inbetween. I don't know if that will work but it's worth trying."

Hi. I tried this but couldn't get it to send to either email when this was done. I think that this would answer our issue, as we could ensure that the extra card details are sent to our businedd and personal addresses, and therefore if one address fails, the information will be available through the other one. I would obviously ensure that these extra details are deleted from all mail accounts.

Can you give me any extra advice regarding this?

Hi,

Quote:

---

Originally Posted by bonheddwr

Can you give me any extra advice regarding this?

---

I'm sorry but I think the only professional solution for you would be to move hosts.

There's no problem upgrading the module to send the e-mail to more than one address but I wouldn't do that as standard as a matter of principle. I don't believe that anyone should try to run an e-commerce shop on an unreliable host, I wouldn't want my card details treated in this way so I won't advocate a system that would cause this situation for anyone else.

Hope I don't sound too harsh but you are playing with potential fraud and stress for customers here.

Hi Guys,
Great module here, which I (and this is unusual) found really easy to install :-)

I'd like to be able to put the start date and issue number on packingslip.php I don't actually use the packing slip as a proper packing slip, I've added the other card details to it and use it to print out and check our stock before put the payment through our terminal. The packing slip is then destroyed and the invoice printed and sent out with the cc payment slip and the order.

I've figured out how to add all the other details but not the start date or issue number, any help would be greatly appreciated.

GREAT mod -- solved most of my client's problems, so thank you. We'll be contributing soon.

I had a weird issue pop up, however, after using this for a month. I don't know if it's something we can solve in your mod files or in the basic Zen Cart files, so i thought I'd start here anyway.

I installed your mod, and all was working just fine. The last day we got an order was Friday, 10/5. Everything seemed fine. Yesterday, 10/9, we got an order, but the admin NEW ORDER email that we receive was formatting with the order confirmation email template. This alarmed my client because all of the admin-related items were missing from the email. We're getting around this by having the client use the admin area for order processing, instead of straight from the email alert.

Can you suggest any reason as to why the emails are coming in differently? I did only a few things to the cart between 10/5 and yesterday, and none of them had anything to do with emails. Here's what I did:
- disable Amex as a payment option
- Edit topmost header menu to add a link
- set nl registration to default to html
- remove nl unsub link in information sidebox

Any ideas you might have would be most appreciated. If you think this is something that I should handle aside from the Ceon mod, please let me know that, too.

thanks!

Hi,

Quote:

---

Originally Posted by go2pub

Great module here, which I (and this is unusual) found really easy to install :-)

---

Thanks! I'm glad you find it useful! :)

Quote:

---

Originally Posted by go2pub

I've figured out how to add all the other details but not the start date or issue number, any help would be greatly appreciated.

---

I'd be happy to write the necessary code for you for a nominal (i.e. very small) fee.. if you're interested please get in contact at the following address:

http://dev.ceon.net/contact_us

All the best...

Conor
Ceon

Hi,

Quote:

---

Originally Posted by traypup

GREAT mod -- solved most of my client's problems, so thank you. We'll be contributing soon.

---

Two people finding it useful in two days.. that's good news! ;)

Thanks for saying you'll contribute, any amount is more than welcome! :)

Quote:

---

Originally Posted by traypup

I had a weird issue pop up, however, after using this for a month. I don't know if it's something we can solve in your mod files or in the basic Zen Cart files, so i thought I'd start here anyway.

---

The issue you are talking about is definitely not related to this module but it sounds like you've changed some e-mail setting which is causing a different template to be loaded from the template previously used.

Please get in contact with your admin login details and I'll see if I can see what has changed (can't guarantee that I'll be able to spot anything but I can certainly give it a go! :) ).

http://dev.ceon.net/contact_us

Al the best...

Conor
Ceon

Conor,

Thanks so much for offering to look into my problem. Turns out you're right and it had nothing to do with your mod. Someone changed an email setting -- nobody is fessing up, though! LOL At least I found the problem: The admin emails were set to send as HTML instead of text. I changed it back and the client is happy now. yay!

Thanks again!
traypup :clap:

Hi,

I'm glad you've got things running the way you wanted now! :)

All the best...

Conor

Hi,

I have installed this helpful little mod.. and crypt blowfish.. set it up in the payment mod in the admin page, but when testing, the opt to pay via card doesn't show up? I have it set to be used.. any ideas?


Cheers
Dan

Quote:

---

Originally Posted by DanAllkins

Hi,

I have installed this helpful little mod.. and crypt blowfish.. set it up in the payment mod in the admin page, but when testing, the opt to pay via card doesn't show up? I have it set to be used.. any ideas?


Cheers
Dan

---

It's ok solved it.. I had the Zen-cart CC mod installed as well and they didn't like each other... uninstalled the zen cart cc mod and all is well now!

Hi,

Quote:

---

Originally Posted by DanAllkins

It's ok solved it.. I had the Zen-cart CC mod installed as well and they didn't like each other... uninstalled the zen cart cc mod and all is well now!

---

That shouldn't make a difference.. are you sure you just hadn't accidentally selected a Payment Zone instead of leaving it set to --none--?

That would cause the module to only show up for addresses from the selected zone.

The module doesn't conflict with the Zen Cart CC module so, although I'm glad you've got yourself sorted, it wasn't by disabling that! :)

(Although there's no reason to use both together anyway ;) ).

Another happy customer... :clap:

All the best...

Conor
Ceon

Hi,
I have stumbled across this thread and think it's what I need. I am in the Uk, using 1.3.7 and am going to start using Paypal virtual terminal. Would this mod gather all the info required (as far as you know) to process via PVT?

Thanks
Pete

Quote:

---

Originally Posted by mediathing

Hi,
I have stumbled across this thread and think it's what I need. I am in the Uk, using 1.3.7 and am going to start using Paypal virtual terminal. Would this mod gather all the info required (as far as you know) to process via PVT?

Thanks
Pete

---

Hi Pete,

It sure would, I am in the UK nad using paypal VT and it works a treat, you must remember though that your checkout must have a 128 SSL seal and under paypal pro's policies you must still offer the Paypal express checkout.

Hope that helps.
Regards

Adam

Quote:

---

Originally Posted by JOKESBYPOST

Hi Pete,

It sure would, I am in the UK nad using paypal VT and it works a treat, you must remember though that your checkout must have a 128 SSL seal and under paypal pro's policies you must still offer the Paypal express checkout.

Hope that helps.
Regards

Adam

---

I knew that with website payments pro the express button had to be shown but wasn't aware that you had to have the express with vt...Do you have many issues with customers clicking the express button thinking it's the checkout button?

Pete

Is it just VT you have subscribed to? I went for the full package.

Not really had a problem with customers thinking it was the checkout button, they only thing i have had problems with is the VT it doesnt always like Mastercards.

[FONT=Arial]Hi[/FONT]

[FONT=Arial]I have my site on shared, windows server, so, i am pretty sure Crypt_Blowfish isn't installed.[/FONT]

[FONT=Arial]So, I have opted for the method of uploading the files you can get from [/FONT][FONT=Arial]http://pear.php.net/package/Crypt_Blowfish/download[/FONT][FONT=Arial].[/FONT]

[FONT=Arial]However, I have downloaded the zip file from this site and unzipped, using many different unzip software, only to find one file, there should be several, the file is Crypt_Blowfish-1.1.0RC1, so is useless, I think.[/FONT]

[FONT=Arial]Has anyone had this problem?[/FONT]

[FONT=Arial]Can anyone poss zip the files up and send the to me?[/FONT]

[FONT=Arial]Also, i'm not sure how/where you would get/set up the encrypt key, using this method, that you then add to the configuration of this module on zen cart admin - anyone any ideas?[/FONT]

Maybe I'm not understanding what a shared windows server is, but i just put in a ticket with my host to have Blowfish installed and it was done within the hour. I didn't actually install anything myself.

Hi,

Quote:

---

Originally Posted by margecc

Maybe I'm not understanding what a shared windows server is, but i just put in a ticket with my host to have Blowfish installed and it was done within the hour. I didn't actually install anything myself.

---

That's the way it should be with any reputable host.

Unfortunately a lot of Zen Cart users seem to run their sites on fairly incompetent hosts who don't know how to set their own servers up.

Our personal recommendation is to move hosts as I wouldn't want to run a business website on a server which is managed so badly, but, bizarrely, very few take our recommendation seriously!

Anyway... just a bit of a rant... :)

All the best...

Conor
Ceon

Trying to install the package but get the message blowfish not installed. I know I have installed so I know it is a include path error.
My host says I have to do:

You will need to add /home/davi3625/php to the include path.
You can do this by adding the following code to your script:

ini_set("include_path", '/home/davi3625/php:' . ini_get("include_path") );


But where in the script do I add this?

Could anyone give advice on installing pear? We tried the module and got the message that pear wasnt installed. Contacted 1and1 who sent me a pretty useless email saying:

"
I think this software is not yet installed in your server. It is possible for you to install a software but we cannot guarantee if it will really work.
If you have any further questions please do not hesitate to contact us."

Rates among the top ten useless support replies!

So, all i could find was a reference earlier to pear being 'something on the server' - that wasnt helpful - i tried downloading the pear files supplied in link - was a tar file - fair enough but when extracting apparently had errors and couldnt. So, can anyone out there help me out with a) getting decent pear files and b) installing pear?

Im not afraid to beg if necessary!

Regards

Lyn

Hedgepig

I just added the 'crypt' folder to the root of my shop (alongside the main index.php file, which is with ipn_main_handler.php, etc.) and then I also added it to the /admin/ folder.

The attached zip file contains the 'crypt' folder.

I am using a linux server.

You then set the key in the admin area for module, anything you want. I think this module requires PHP 5, or something like that.

That was about it, just upload the folders.

Thanks ever so much - much appreciated!

regards

Lyn

Hi,

I just can't see how your system would be PCI DSS compliant. In fact, I see some areas that would suggest PCI DSS compliance would be near impossible thereby putting people at risk. I may be wrong of course so is your system PCI DSS compliant?

I use the e-Path manual payment gateway, a PCI DSS compliant gateway, have for over two years now. My customers credit card details don't even touch my website yet I process them normally into my manual merchant account just as if I had ZC capture them.

Cheers

Quote:

---

Originally Posted by mattys

Hedgepig

I just added the 'crypt' folder to the root of my shop (alongside the main index.php file, which is with ipn_main_handler.php, etc.) and then I also added it to the /admin/ folder.

The attached zip file contains the 'crypt' folder.

I am using a linux server.

You then set the key in the admin area for module, anything you want. I think this module requires PHP 5, or something like that.

That was about it, just upload the folders.

---

Thank you so much... you have just solved my headache!

Hope someone can please help me.

I have Zen 1.3.8.

I downloaded Manual CC from CEON and installed it as per the instructions. All seemed to be fine and it showed up in the modules panel.

I downloaded Blowfish and did a manual install, but cannot understand where I am supposed to access it from in order to put in the key?

More worryingly is that the CEON module has the red dot next to it, meaning of course it is switched off. But if I click the module, or any other module now, no option box comes up letting me turn them on or off.

This problem did not occur until the CEON module was installed.

Could anyone please tell me how to enable the modules to be turned on or off, and where to enter the security key, should I need to in a manual install.

Many thanks for any help.

Hello, firstly, thanks very much for this module. It appears to be exactly what I need.

I'm having a problem however. I've installed the module, and I've (or I think I have) installed crypt_blowfish using Cpanel. However, in the 'payment modules' section in Admin, it is saying, "Warning: You do NOT have PEAR:Crypt_Blowfish installed on your server!". I've turned on debug mode, and it's telling me that encryption is not on:

----------------------
Card Details Received:
----------------------
Card Number:
Card Type: Visa
Card Owner:
Card Expiry Date:
CVV Number:
Card Start Date (If on card):
Card Issue No. (If on card):

------------------------------------------
Card Number Able to be Sent Successfully?:
------------------------------------------
Yes... would have been emailed to:
------------------------------------------
--------------------
Encryption NOT USED!
--------------------

------------------------------
Include paths for this system:
------------------------------

.:/usr/lib/php

----------------------
Safe mode in use?: no
----------------------

I'll get in touch with my host later on, but I thought I'd try here first. What have I done wrong?!

Thanks very much in advance!

Hi,

Quote:

---

Originally Posted by OK Computer

Hello, firstly, thanks very much for this module. It appears to be exactly what I need.

---

Glad to hear you like it! :)

Quote:

---

I'll get in touch with my host later on, but I thought I'd try here first. What have I done wrong?!

---

The current version of the module doesn't report your open_basedir restrictions when safe mode is disabled, a new version will be released soon which does, as this is the source of your problem and so will be highlighted with huge red warning signs in the new version! ;)

The FAQs on the website have been updated with a script to run on your server and more information about what to do in your installation. You'll most likely have to contact your hosts to get them to add the PATH TO PEAR to your INCLUDE PATH and OPEN_BASEDIR settings for your VirtualHost.

Here's the updated FAQs:

http://dev.ceon.net/web/zen-cart/ceon_manual_card/faqs

I know from what you are saying that this is what you need to do so the quickest way to get it resolved is to send the results of that script to your hosts and tell them to sort your server out!

All the best...

Conor
Ceon

Hi Conor,
Thanks very much for this mod, it's a real life-saver!
I've just finished installing it and getting Pear installed, which appears to be working now having manually copied the files up...
I'm getting the following error message though:

-------------------------
Module is out of date!

Please “Remove” and “Install” the module as per the upgrade instructions that come with this module!

File Version: 1.2.1
Database Version: 1.2.0

Check for updates
-------------------------

When I click on the check for updates link, it tells me that I've got the most recent version. I followed all the steps correctly as far as I'm aware...

It all seems to work in the shop although I haven't run a full test yet.

Any help would be greatly appreciated.

Thanks.

Hi,

Quote:

---

Originally Posted by dudeshouse

It all seems to work in the shop although I haven't run a full test yet.

---

That's a bug in the version reporting of 1.2.1, your database is up to date but the code to identify it had a bug in it.

Just ignore the warning, the module will work fine.

A new version, 1.2.2 will be out shortly with a fix for this.

All the best..

Conor

First fantastic mod, made me donate straight away everything works great just one problem no Credit Card CVV Number is there when we view the order in admin, but every thing else works ok
Zen Cart 1.3.8a
Database Patch Level: 1.3.8
looking forward to getting this going as we need to take issue numbers with certain cards we accept

Hi,

Quote:

---

Originally Posted by tenerifetom

just one problem no Credit Card CVV Number is there when we view the order in admin

---

Thanks very much for your support - it's greatly appreciated and makes coding something that bit more worthwhile! :)

It's illegal to store the CVV number anywhere so it is sent to you in the e-mail along with the middle digits of the card number. This e-mail should be deleted as soon as the card has been charged.

Hope that helps!

All the best...

Conor
Ceon

ok you are right its been confirmed by the girl at another location that recieves the middle digits email that she got the cvv digits aswell so thanks , for a great mod

Just thought I'd share a problem I've been having.

Whenever I go to admin/modules/payment it will stop loading before the ceon mod and display:

Fatal error: Call to undefined function file_exists_in_include_path() in /var/www/vhosts/xxx/httpdocs/includes/modules/payment/ceon_manual_card.php on line 142

If I comment out line 142 (about blowfish) it will just error out on line 149 instead (PEAR).

It says these modules are installed - have I missed anything obvious?

Hi,

Quote:

---

Originally Posted by sourcez

Fatal error: Call to undefined function file_exists_in_include_path() in /var/www/vhosts/xxx/httpdocs/includes/modules/payment/ceon_manual_card.php on line 142

---

You must be missing the file:

includes/functions/extra_functions/ceon_manual_card_functions_file_system.php

Upload that file and the error should go away!

Also, look out for a new version of the module (with a small bugfix) before Christmas! Upgrading will be a simple matter of copying the files across, so will only take a few minutes! :)

All the best...

Conor
Ceon

Unfortunately that didn't fix the problem?

I tried reuploading all the files again too, but still not working.

It's odd, because the files were identical to the old server!

Hi,

Quote:

---

Originally Posted by sourcez

I tried reuploading all the files again too, but still not working.

It's odd, because the files were identical to the old server!

---

That is strange. It's most likely a permissions problem then.

If the file is there then there's no other reason I can think of that it cannot be opened. The module uses a function in that file and if it can't open that file it'll fail with the error you have listed.

Hope that helps!

All the best...

Conor

Quote:

---

Originally Posted by conor

That is strange. It's most likely a permissions problem then.

Conor

---

That's what I thought...BUT it CAN read the file, because if I comment out the offending section it will go on to read the next bit a couple of lines down.

Any more ideas?

Hi,

Quote:

---

Originally Posted by sourcez

That's what I thought...BUT it CAN read the file, because if I comment out the offending section it will go on to read the next bit a couple of lines down.

Any more ideas?

---

I'm sorry but short of logging in and debugging manually (with a few var_dumps()), I don't have any other ideas.

I wish you luck in getting whatever server problem you are having fixed!

All the best...

Conor

Hi,

Quote:

---

Originally Posted by sourcez

That's what I thought...BUT it CAN read the file, because if I comment out the offending section it will go on to read the next bit a couple of lines down.

Any more ideas?

---

Actually, I might have an idea.

Based on what you've said above I'm guessing that you are modifying the ceon_manual_card.php file? It is not that file which I am saying can't be read, but the file that has the function in it which ceon_manual_card is trying to call!

I still think you are missing the file I mentioned. Please FTP it up separately from all your other files and confirm that it has the same file size when uploaded as the file you extracted from the module distribution's zip file.

All the best...

Conor