Ceon Manual Card Payment Module v2.0.0!

[Honsan]

I've read the instruction. I wonder if I just copy just the file listed in step 1 or all the files in the zip files.

I did copied all the files to the directories. After installation, only authoriz module remains in the payment module. What have I done wrong?

[conor]

Hi,

I've read the instruction. I wonder if I just copy just the file listed in step 1 or all the files in the zip files

Really, the instructions are very specific. They say to copy only the files from within the "files" folder (not the files folder itself or any folder outside of that).

I appreciate though that English may not be your first language and that you may therefore find it a little harder to follow.

You should delete all the files you copied across and start again, this time only copying the files from inside the "files" folder.

I did copied all the files to the directories. After installation, only authoriz module remains in the payment module. What have I done wrong?

In the FAQs you will find an FAQ which describes what I think is the cause of this problem and how to fix it.

If you're still really stuck then send me FTP and admin details and I'll install the software for you.

All the best..

Conor
ceon

[dbltoe]

@nickgreaves

I think PCI compliance is driving some people to paranoia on the issue. That and some unscrupulous firms that refuse to remove false positives and blame it on the fact that partial numbers are in the database of a site. In my opinion they are getting a kick back on the $19.95 to $21.95 fees charged to "non-compliant" merchants.

As Conor stated, his method is designed for a wide range of businesses and shipping/processing methods. Even with the first and last four numbers, a hacker would need to process nearly 17 million combinations in order to find the "correct" number. If the CVV is not stored (as it should not be), then the permutations rise to over 150 million.

True, the speed of computers could run 150 million processes in a short period of time, but where could the hacker actually find a site that would cross reference 150 million combinations with a specific name. It far too easy to get the information from a waiter or mall worker with a scanner built in to a cell phone. The new smart chips can be collected simply by someone getting near you in a crowd while having a receiver in a purse or briefcase.

The combination of Conor's mod with the removal of all CVV codes in an up to date Zen Cart should never be rated as a failure for PCI compliance. There are other factors (frontpage and others) that may be on the same server as Zen Cart and possibly cause a PCI failure.

So, using this mod on a PCI certified host with a current Zen Cart will pass all the tests. If not, the testing company should be challenged. We have fought the battle many times and (in one case) actually had the customer change their cc merchant. The customer even saved money on fees in the process.

[conor]

Hi,

I think PCI compliance is driving some people to paranoia on the issue. That and some unscrupulous firms that refuse to remove false positives and blame it on the fact that partial numbers are in the database of a site. In my opinion they are getting a kick back on the $19.95 to $21.95 fees charged to "non-compliant" merchants.

in one case) actually had the customer change their cc merchant. The customer even saved money on fees in the process.

Thanks for a very interesting post. Can I also join dbltoe here in saying to beware of unscrupulous companies.. especially those trying to freak companies out about their security setup..

If a compliance company comes to you (cold calls/emails) "warning" you about compliance matters and suggesting their services, be just as worried about their honesty as that of the people who try to steal card details in the first place.

Most of the compliance companies appear to put their profits leagues ahead of their commitment to honesty or to providing a fair level of value to their customers. It's frustratingly hard to know which ones are genuine, and good value for money, and which are only in it to make a quick buck off "compliance tests"!

Reminds me a lot of the SEO companies who get in contact to offer to "increase your rankings... for a rather large fee"! :|

All the best..

Conor
ceon

[Honsan]

Hi,



Really, the instructions are very specific. They say to copy only the files from within the "files" folder (not the files folder itself or any folder outside of that).

I appreciate though that English may not be your first language and that you may therefore find it a little harder to follow.

You should delete all the files you copied across and start again, this time only copying the files from inside the "files" folder.



In the FAQs you will find an FAQ which describes what I think is the cause of this problem and how to fix it.

If you're still really stuck then send me FTP and admin details and I'll install the software for you.

All the best..

Conor
ceon

Thanks Conor, I think I need your help will pm you later.

[Honsan]

Hi Conor,

I have installed Coen Manual Card module successfully. I suspect the mess is casued by the stylesheet and Blowfish not installed.

Thanks a lot.

[conor]

Hi,

I have installed Coen Manual Card module successfully.

Glad to hear you got things sorted.

Enjoy the new software! :)

All the best..

Conor
ceon

[timps]

How to add more than one email address for "extra card information" to be sent to. There will be 3 different people within the company responsible for this. IIRC the original zencart allowed this, yes? Not sure I would use this, but it would present one more possible option for avoiding one manager deleting an email before another manager got it.

[conor]

Hi,

How to add more than one email address for "extra card information" to be sent to. There will be 3 different people within the company responsible for this. IIRC the original zencart allowed this, yes? Not sure I would use this, but it would present one more possible option for avoiding one manager deleting an email before another manager got it.

What happens if all three managers charge the card?

This is a BAD idea.. instead you should change your company's operating procedures to using a SHARED address for something as important as card details.

If you really want it sent to three addresses though, I think you can do that by adding the addresses (email part only., no names or <>), separated by commas.

Seriously, don't even consider that though, if you have any sense!

All the best..

Conor
ceon

[timps]

Each manager is responsible for a specific and distinct line of product and won't have anything to do with the others, with the exception of vacation coverage etc.

The shared address is my first consideration. I usually set up their email clients as IMAP, so was concerned that one would delete before another got it, but I suppose I could use pop3 instead.

I tried using commas to separate addresses but it failed with a message - "The Ceon Manual Card payment module has been enabled but it has not been configured to send the necessary card information to the store owner by e-mail. The E-mail Address to send card information to must be set in Admin->Modules->Payment->Ceon Manual Card." I also tried with a comma and space, and the names and <> with the same result. That's why I'm asking about it here.

With a single address the mod works great. Oh and by the way, thanks for creating and supporting it!

What would be ideal is if an address could be set for specific products or groups of products. Yeah, I know it would be better if we didn't have to rely on manual card processing, but that's just not the case here.