does anyone use cybersource?

I have a client who would like to use Cybersource payment gateway with Zencart. I read a few posts and am concerned as to how easy it would be to get it to work properly. I see the module is not listed in the Downloads section, but I found it in one of the posts.

Can anyone tell me if they are currently using this module, and is it working properly? And how difficult was it to get it to work?

Thanks.

hp9:
At one point in time, in the past, the CyberSource Payment module was created and actively maintained by a contributor(s). Today, it is a different story. There is no known contributor involved anymore and, ZC Developper team members refrain from responding to any thread/post on the subject. Why this situation exists is a mystery to me. If anyone knows, please be kind enough to let us know.
I managed to install and process transactions with the CyberSource Payment module using the SOP (Silent Order POST) connection method. I did not modify the Payment module php code except for a few parameter settings (i.e. account number).
The Zen Cart Retail Store served by CyberSource has been online since mid-November 2006 with no problems to report. The low transaction volume so far is no warranty that the existing environment is bug free. Moreover, I have to admit that the testing environment provided by CyberSource did not allow complete testing of all transaction types. I took the decision to go ahead, knowing very well that the risk level was a bit high on the CyberSource side. My level of confidence was much greater on the Zen Cart side with all testing scenarios completing impeccably.
After reviewing dozens of threads/posts from the Zen Cart Forum, I am under the impression that most of the reported difficulties are related to improper parameter settings on the CyberSource Business Center environment. You need to read very carefully and understand the CyberSource documentation available on the SOP connection method. I do not recommend the HOP (Hosted Order Page) connection method.
Please review Zen Cart Forum thread=49297 for more details:
http://www.zen-cart.com/forum/showthread.php?t=49297

deBeaujeu

Thanks for your response. It seems like Cybersource may not be a good choice to use with Zencart, as it will take a great deal of my time to get it set up to work right, if at all.

I'm going to see if my client will consider other payment gateways, or maybe not use Zencart if Cyber source says another cart works better with them.

hp9:
Bank of America is pushing hard to have their merchant account customers signed with CyberSource but the bank will also accept other Payment Processors should the customer requests it. This was the answer I obtained from the Marketing Rep at B of A.
Authorize.net (AIM) appears to be better supported by the Zen Cart Team (the payment module is delivered with the Zen Cart software).
It is my understanding that CyberSource serves approximately 15,000 customers (mostly larger organizations) and Authorize.net supports approximately 150,000 customers (mostly small and medium businesses). The Zen Cart package is not to be found in the CyberSource Certified Shopping Cart List. Could it be that CyberSource does not associate with organizations offering software under the GNU General Public License?
http://www.cybersource.com/partners/...rts/solutions/

deBeaujeu

I think the issue is more that its a third party module and is not supported by the zen cart team,

I can tell you however that the cybersource module does work,
there is another post that describes having to make a few changes to the HOP file when you get it, and then you need to set force cookies to true.
this will allow the session ID to be passed back and will complete the transaction,

Thanks. Do you have to go to Cybersource to get their module?

No its in the downloads section
the only thing you get from CyberSource is the HOP file

I couldn't find it in the downloads section. Is it in the Payment Module section? I didn't see anything with Cybersource in the name.

Thanks for your help.

http://www.motwo.com/cybersource_v1.04.zip
get it from here

I have made one modification to HOP.php file to remove a warning message (missing argument 2 for InsertSignature) appearing on Step 3 of 3 page of the Checkout process:

Before modification (at or near line 172):
function InsertSignature($amount, $currency) {

After modification (at or near line 172):
function InsertSignature($amount) {

This workaround patch eliminates the warning message but restricts currency to US dollars only (not elegant but practical in my case since the store sells in the US only). See also t=41608.

I also updated the CyberSource MerchantID (at or near line 166):
function getMerchantID() { return "vxxxxxxx"; }
Replacing "vxxxxxxx” by actual merchant ID obtained from CyberSource.

Please let me know of the other changes that need to be done to the HOP.php file. Thanks.

deBeaujeu

Thanks for the help. I need to wait for my client to get back to me before I go further with this.

make sure that your cart is set to force cookies

I would also like to add that having used cybersource as the payment gateway and processing more than 300 transactions a month it has been bug free except for international orders. It seems as though some of our canadian clients can't get their cards to process and are forced to use the paypal alternative we offer.

The other things wrong are that the module doesn't yield clear error codes so if a customer makes a mistake in number or address they don't actually get an intelligible response. I don't know if this is a Cybersource issue or the gateway issue(HOP) but the CVV code isn't verified. I have offered to pay someone familiar with payment gateways to fix this and contribute it back, but have had no takers.

The nice thing about the B of A and cybersource relationship is the fee structure. Some fees are waived when using cybersource.

The “set to force cookies” suggestion remains unclear to me and requires more elaboration.
From reviewing numerous Zen Cart php programs, it is my understanding that Session Management has been implemented using the MySQL database as a session store (existence of the SESSIONS table containing sesskey,expiry & value) and authenticated users with cookies enabled. A customer using a browser with cookies disabled will not be able to login into his account or to complete a purchase transaction.
The current ZC implemented Session Management very well covers the information exchange between the Zen Cart store (ZC Host) and the customer browsers with cookies enabled as a requirement.
On the other hand, the hand shaking between the ZC Host and the CyberSource Host is far from being clear to me. Do we use a form of session management or a similar concept and do we have to set parameters?

In ZC Admin >> Configuration >> Sessions both “Force Cookie Use” and Check SSL Session ID” are set to False by default.
In the case of the “Force Cookie Use” what is the real meaning of the displayed text “Force the use of sessions when cookies are only enabled”? (Is this a leftover from older ZC versions?)
In the case of the “Check SSL Session ID” should it be set to True? (Appears redundant!)

deBeaujeu

cybersource doesnt pass the session ID, so there for it needs to be stored as a cookie on the users PC

I am using the SOP (Silent Order POST) connection method which establish a connection between the CyberSource Host and the ZC Host only. In SOP, no connection is established between the CyberSource Host and the user PC.
You may be referring to the HOP (Hosted Order Page) connection method.

deBeaujeu

Thanks Romanus for your feedback on CyberSource performance. This is real boost to my confidence level and the first time I hear about a live store using CyberSource.

Pertaining to the Canadian customers, did you double-check your CyberSource Business Center SmartAuth and HOP Settings (Card was issued outside the USA, billing or shipping address cannot be verified, etc. and, Canada Dollar as Accepted Currencies under Payment Currencies in HOP Settings).
I had one VISA transaction declined following a wrong card verification number (code N). The card verification number process seems to be working?
I had 2-3 transactions with a one-penny difference between ZC order total and CyberSource authorized order total. CyberSource Customer Support claims they will not do any rounding but rather will truncate any number past 2 decimal places. Surprising, but that is the official answer (Incident ID: 100000034183).
On the ZC side, error messages appear to be quite comprehensive. On the CyberSource side, you can refer to includes/modules/payment/cs.php file to review the 12 or so defined error messages (see function before_process() at or near line 345). The contributor claims that is all you will need, but you can easily add new reasonCode. I did not obtain the complete list of reasonCode from CyberSource and did not managed to test more than 1 or 2 in live mode. Once the reasonCode is received from CyberSource (SOP connection method), ZC displays the corresponding text by inserting it at the very top of the page without the red background (could be more visible). The 520 message would be interesting to see!
I would really like to compare your CyberSource settings with mine.

deBeaujeu

hp9 thank you for starting this thread. I am a new Zen Cart user with no web design experience at all. Since October 2006 I have slowly been learning and designing my shop. I just recently added CyberSource Module and am trying to work out all the kinks. This subject is exactly were I am stuck at this moment.

I see there are others that have some knowledge and experience with the CyberSource HOP so hopefully I can join in on this and learn from all of you.

Basically orders placed from my shop process through CyberSource with no problems except that is were it ends. No order is ever created in my Admin and there is no order confirmation or invoice. I suppose it is the redirecting issue that is being spoken of.

Any advice on what I should do to get over this hurdle??

Thanks in advance.

1der_dog

In your ZC admin
go to configuration -> sessions

set force cookies to true

Thanks Merlinpa1969, I have made the change to force cookies however this did not change the check out process any. I still do not get redirected back to complete the order. The last page I get after confiming the cc information is a simple page receipt that shows order amount however I then can not move anywhere from that page. I suppose this is a page that is created from the CS side of things.

Is there anything else that I could try?

I think you need to tell cybersource to NOT display something
I dont use it, I helped a customer get the process working

I have fixed the issue of being redirected to my checkout success page by adding the URL to my HOP however completed orders still are not being captured in my ZC admin. Does anyone know what I would be missing now?

the page needs to re-direct to checkout_process not checkout_success

I made the change you mentioned and by doing so I receive an error stating possible duplication of the order. The checkout_process URL is what sends the credit card information to CS so by using that as a re-direct I am repeating that step in the check out. Is there any way around this?

checkout_process is also the returning url,
it then triggers checkout success,

1der_dog:
I will start a new thread containing detailed Implementation Guidelines for the CyberSource payment module.
The Guidelines should answer most of your questions.

deBeaujeu

That would be awesome deBeaujeu!!! Thanks.

1der_dog