Gateway mode is set to "offsite", yes. Hmm, if hacked, then potentially someone has my userid and password for that zencart - unique to the installation, fortunately. Also the info for our auth.net account, yes? (now changed BTW)
Is there any possibility *other* than hacking to explain the behavior? Seems that a hacker seeking credit card numbers would do a better job of imitating a secure site.
Thread: No Authorize.net communication
Results 1 to 9 of 9
Hybrid View
-
11 May 2012, 10:34 PM #1
New Zenner
- Join Date
- May 2012
- Posts
- 38
- Plugin Contributions
- 0
Re: No Authorize.net communication
-
11 May 2012, 10:47 PM #2
Sensei
- Join Date
- Jan 2004
- Posts
- 66,443
- Plugin Contributions
- 279
Re: No Authorize.net communication
In checkout ,how many payment options (radio buttons) are you presented with? What are they?
In Admin->Modules->Payment, how many modules are showing green or yellow dots? Which ones, and why?
I suspect that the credit card fields you're saying you see are coming from another module..
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
-
11 May 2012, 10:48 PM #3
Sensei
- Join Date
- Jan 2004
- Posts
- 66,443
- Plugin Contributions
- 279
Re: No Authorize.net communication
True. But it doesn't minimize the urgency of doing an upgrade on your site, either way.
Originally Posted by dream_mike
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
-
13 May 2012, 02:08 PM #4
New Zenner
- Join Date
- May 2012
- Posts
- 38
- Plugin Contributions
- 0
Re: No Authorize.net communication
I changed the relevant password fields at Authorize.net on Friday, as soon as you mentioned the possibility of hacking. I have deleted that entire zencart installation, and am proceeding with a 1.5.0 from zencart. I am sort of expecting this problem to replicate itself with that one, but we'll see
Thank you for the caution.
Slightly off topic, I actually have another installation (multiple subdomains) without auth.net - am using it to learn how to control zencart. That one was a Dreamhost 1-click installation from about a week ago - and it is v 1.3.9h.
Is that version also known-compromised? And does anyone know why Dreamhost isn't installing the latest zencart?
-
13 May 2012, 03:39 PM #5
Sensei
- Join Date
- Jan 2004
- Posts
- 66,443
- Plugin Contributions
- 279
Re: No Authorize.net communication
Based on my experiences, I suspect the answer is: probably just part of their general incompetence. Originally Posted by dream_mike
They never could run it securely on their servers anyway.
But this discussion thread is about Authorize.net, not DH..
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
-
14 May 2012, 02:29 PM #6
New Zenner
- Join Date
- May 2012
- Posts
- 38
- Plugin Contributions
- 0
Re: No Authorize.net communication
Hmm. Selection of Dreamhost happened before I got involved. Could you expand a little on your "never could run it securely on their servers anyway" comment? I might need to explain this to our site sysadmin.
And thanks, again.
-
14 May 2012, 09:25 PM #7
Sensei
- Join Date
- Jan 2004
- Posts
- 66,443
- Plugin Contributions
- 279
Re: No Authorize.net communication
They can't run with "Recreate Session" enabled, which thus leaves the store vulnerable to session hijacking.
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
Similar Threads
-
v151 Switching From Authorize.net (SIM) to AUthorize.net (AIM)
By dinohaven in forum General QuestionsReplies: 1Last Post: 2 Dec 2014, 05:56 PM -
v150 Difference Between Authorize.net (SIM) and Authorize.net (AIM)
By joem83 in forum Built-in Shipping and Payment ModulesReplies: 4Last Post: 30 Aug 2012, 10:48 PM -
Authorize.net Communication Problem
By Fuzzy Ink in forum Built-in Shipping and Payment ModulesReplies: 3Last Post: 19 Mar 2009, 12:41 AM -
Authorize.net AIM Communication Error after moving server to GoDaddy VirtualDedicated
By snowkrash in forum Built-in Shipping and Payment ModulesReplies: 6Last Post: 26 Nov 2008, 06:33 AM
