Results 1 to 5 of 5

Hybrid View

  1. #1
    Join Date
    Nov 2008
    Posts
    12
    Plugin Contributions
    0

    Default [Done v1.5.0] Small bug found on Authorize.net AIM refund page

    I found a small bug on the refund page for Authorize.net.

    In Admin>customers>orders you can edit an order and void a transaction that hasn't settled.

    The input box on the right says "enter auth ID" but that didn't work; I got a "transaction not found" error message.

    So I tried the transaction ID instead and that worked.

    The file is /public_html/includes/modules/payment/authorizenet/authorizenet_admin_notification.php

    and line 76 (or 77?) is

    Line #76 : $outputVoid .= MODULE_PAYMENT_AUTHORIZENET_AIM_ENTRY_VOID . '<br />' . zen_draw_input_field('voidauthid', 'enter auth ID', 'length="32"');

    but should be this to avoid confusion:
    Line #76 : $outputVoid .= MODULE_PAYMENT_AUTHORIZENET_AIM_ENTRY_VOID . '<br />' . zen_draw_input_field('voidauthid', 'enter transaction ID', 'length="32"');

  2. #2
    Join Date
    Jan 2004
    Posts
    66,443
    Plugin Contributions
    279

    Default Re: Small bug found on Authorize.net AIM refund page

    Well, calling it a transaction ID would be equally incorrect if you were wanting to cancel an Authorize-Only authorization, ie: something that hasn't been captured yet, since there's no transaction ID associated with an Auth-only event until it is captured.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  3. #3
    Join Date
    Nov 2008
    Posts
    12
    Plugin Contributions
    0

    Default Re: Small bug found on Authorize.net AIM refund page

    I have the AIM payment module set to auth+capture and I immediately got an authID and a transID. But only the transID worked in that field to void the transaction. Are you saying that if I had set AIM to "auth-only", I wouldn't have received a transID? And in that case, do you think an authID would've voided the transaction?

  4. #4
    Join Date
    Nov 2008
    Posts
    51
    Plugin Contributions
    0

    Default Re: Small bug found on Authorize.net AIM refund page

    Boy, thanks buzzworm2 for posting that. We interpreted the label the same way you did, and we thought the screen just did not work. We tried a lot of different things, but just did not think of using the transaction key.

    Dr. Byte, is there anyway that you could make the wording clearer? I am sure more people than us have been bitten by this one. And I must confess, I am not sure what you meant by your answer.

    Meanwhile, since we authorize and capture simultaneously, I am going to just change the wording as suggested by buzzworm2, since that is clear for us.

    Thanks again, buzzworm2, for posting that.

  5. #5
    Join Date
    Jan 2004
    Posts
    66,443
    Plugin Contributions
    279

    Default Re: Small bug found on Authorize.net AIM refund page

    I suppose clearer wording of the text above that box would be:
    You may void a transaction which has not yet been settled, or an authorization which has not been captured.
    Enter the unsettled Trans ID or the uncaptured Auth ID:
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

 

 

Similar Threads

  1. v155 [Done v155a] Typo in Authorize.net AIM Module
    By numinix in forum Bug Reports
    Replies: 1
    Last Post: 5 May 2016, 04:47 AM
  2. Replies: 1
    Last Post: 4 Mar 2016, 04:17 AM
  3. Replies: 6
    Last Post: 6 Jul 2012, 06:25 AM
  4. Replies: 1
    Last Post: 29 Apr 2009, 07:58 PM
  5. [Done v1.3.8] Authorize.net Bug in 1.37?
    By phnord in forum Bug Reports
    Replies: 4
    Last Post: 17 Aug 2007, 05:40 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg