WorldPay Module version 2.0 - Support thread

[Ooba_Scott]

Yeh i think you are correct in the fact that ZC2 will not be compatible with 1.38a as the changes are fairly major......but it does mean every module will need to be re-written to be compatible with v2 (althougth some modules will be made redundant, as i belive some will become standard)


Im not to bothered if WP keeps or remove the base href tag now, as i have fixed up my site to work without it, and the thankyou/cancellation page now looks fine (well as fine as its going to get)
I have made the css stylesheets absolute URL's, and i have turned off the left/right columns and footer so it doesnt try to display images that can not be found.

Yeh i understand what you mean about it is isnt worth keeping the mod if they fix the holes and the mod isnt fixable....that would suck.

Be a hard conversation to have with my clients who already have Wolrdpay accounts :S

[petelutonuk]

I know nothing about these other security holes mentioned but I can't help wondering if when they fix them they will affect all payments from any website and if that happens there would be so many people affected. As I still have 10 months of my annual Worldpay fee to use up I will use this module while I can. If they filter so much that it doesn't work before then, I will demand a portion of my money back. CAN ANYONE TELL ME if it is possible just to send the cart information to Worldpay, like you would with a simple HTML site, so that I can use Worldpays standard "Yes"html payment receipt page?

[Bigenuf]

You can remove the callback <wpdisplay item="MC_callback"> in the worldpay production management area or uncheck the callback i forget which but the problem then as i can remember is that worldpay will not send back the cart info so you will not have a record of the payment unless you go into your worldpay account and even then you won't know exactly what they ordered or what shipping address they might have specified or the mode of shipping they also will not receive a receipt from your cart or an email or even a record of it in their account they can refer back to. They will receive an email from worldpay saying they paid a specified amount to you.
If i'm wrong please someone correct me.

[petelutonuk]

My current HTML site still uses MC_callback. The customer gets a "Thank you" email using a script from the sendmail on my server confirming what they have ordered and I get a detailed email of product codes and prices, delivery address etc. Because of the whitelisting I have set the default Worldpay "Thank you" page to resultY.html (or resultC.html) receipt page. If I could just do this for my Zencart site I would be happy enough.

[Bigenuf]

If that works for you great. But the only drawback i can see is that you open your shop up to a vulnerability that Philip found where people could send fake orders through your store and it looked like they had paid at worldpay. That was when version 2.0 of this module was born. So i will be just using a template override to compensate for the look of the pages and the security will stay in place as Philip designed it.

[petelutonuk]

I don't know from the various suggestions which is the easiest method to get round the base href filtering (if they do enforce it). I don't want to hard code anything if possible and I don't want to mess up my site and not be able to figure out what went wrong. I guess that is why I back up my site and database every time I make a significant change. Perhaps I should pay Philip (I miss him already ) to sort me out...

[Bigenuf]

I would hire Philip if your not sure otherwise,

Look back on page 39 of this thread and you will see how i have done it. Using the method i describe there all you are doing is making an override for the worldpay callback pages, namely the success page and failure or cancelled page. If you use the override then if worldpay do put the href back into the whitlist then just delete the folder and nothing in Philips module has been touched but if they don't put the href in then you can customise those 2 pages using the override and it will not effect any of your other zencart pages. You do have to hard code a couple of url's but nothing too dificult.

Lake

[Ooba_Scott]

hardcoding the absolute css links is pretty straight forwards and easy and isnt time consuming at all.....but yes hardcoding every image link would be time consuming and hard work and probably easier to pay phillip to do it as he has created a script that will hunt down and the links which would saves hours of your time...

....the other option would be to just not show the side boxes etc so you wouldnt need to hardcode the image links at all.......

This is pretty simple to do aswel, infact bigenuf kindly produced documentation on how to do this back a few pages.

For me this is the simlpest solution and the site still looks pretty decent