Cybersource expired session

[pmshope]

I have searched high and low for a solution, and I'm desperate. Any help will be greatly appreciated!

ZC v1.3.8a
Cybersource module v1.04 (great contribution by deBeaujeu!).

The order is getting through to Cybersource fine, but on the return, it always gives the "Whoops, your session has expired" and the order is not recorded in ZC.

I know this problem has been logged before. I've been through the forum and the very detailed implementation guidelines. These are the measures I've already taken:

- module files installed (4) and checked settings
- submitting to 'https://orderpage.ic3.com/hop/ProcessOrder.do'
- obtained new HOP file

- double-checked module settings in ZC admin
- installed and active
- set to "production" mode
- database content seems correct

- SSL is dedicated (one domain, not several)
- also verified with Comodo Vengine
- SSL enabled (true) for catalog and admin

- checked Cybersource settings
- return receipt url and box checked
- decline receipt url and box checked

- reviewed the following forum posts (and others):
- http://www.zen-cart.com/forum/showth...505#post337505
- http://www.zen-cart.com/forum/showth...ght=shared+SSL


Also reviewed posts on general time-out issues and changed the following:
- set cURL proxy to 'false' (using GoDaddy)
- tried disabling SSL, no effect

I don't know if the issue is with ZC, Cybersource, GoDaddy or me!
Help! please and thanks.

[kobra]

I don't know if the issue is with ZC, Cybersource, GoDaddy or me!

If on GoDaddy shared I believe you are out of luck!!
If you are serious about your online besiness and it is not a hobby I suggest that you align yourself with a eCommerce host.

This is most likely a php session timing issue and GD, historically, will recommend that you move to your own VPS or dedicated to resolve the issue as this bolsters their business and moves those that are serious off their "hobby" servers

[deBeaujeu]

Your list of verifications is rather complete and tends to exclude the ZC application as well as the CyberSource Gateway from the list of culprits. The expired session anomaly is most frequently related to a shared SSL certificate. This is not your case.
The host server should normally be the next in line. More so in the case of Go Daddy. If you are in position to migrate to a reputable host server, I would recommend to do just that as a best solution to save troubles and effort. From personal experience, I avoid using Go Daddy unless I have no choice as a consultant.

I share Kobra position on the very difficult experience in using Go Daddy low cost hosting offerings.

deBeaujeu

[pmshope]

Thank you both so much for your quick responses and advice. I believe you are correct that the problem does not lie with Cybersource or the module.

After trying many changes, however, I just realized the primary issue now seems to be only with Firefox. Since I wasn't diligent about testing the other browsers all along, I can't be sure which settings fixed the problem. (If I figure that out, I'll post it here.) In the meantime, I'll redirect my search to resolving the Firefox issue (or post to General Questions if needed).

Re: GoDaddy, I've used them for several years with minimal problems. However, I don't particularly like their image or spotty support and do plan to research better options for the future.

Thanks again!

Cheers,
PM

[kobra]

Re: GoDaddy, I've used them for several years with minimal problems.

Have you been operating an eCommerce business on their "Hobby" shared servers though??

[milobloom]

I am having the same problem

Whoops! Your Session Has Expired.
and makes you re-log on and goes in circles like that.

Trying to use Cyber Source Payment Module
Zencart 1.3.8
VPS Hosting
Also using a godaddy SSL cert (Would this be the problem?)

I tried everything... I am at wits end!

www.NothingButCostumes.com

[milobloom]

I tried

turning on - Force Cookies

and it worked!

Am I going to run into any troubles forcing the cookie?

[Feznizzle]

Hi Milobloom,

I am about to buy a Godaddy muli-site cert, so I've been combing the forums to see if anybody had problems with it.

I see that you did have an issue and that you resolved it by turning on the "force cookie".

But you asked the same question I wondered about:
"Am I going to run into any troubles forcing the cookie? "

I am wondering what the answer was. Could you give us an update?

Thanks,
Mike

BTW, in case somebody wants to offer general advice (I'd love that!), I am running ZC 1.3.8a on a VPS. I am configuring 5 stores, each with unique IP.