Authorize.net AIM not returning any errors or notice on the 'test decline' card #...

[tcarden]

i'm have the Authorize.net AIM module is test mode. But when entering in the Automatic Decline CC # 4222222222222 (as shown in the admin module) it is proceeding w/ check out anyway. Shouldn't it post a notice?,
and not proceed w/ checkout?

In fact, this module is proceeding w/ checkout no matter what you put in the CC form,

ie., choose the AIM payment method, and even you enter in absolutely nothing,
the checkout transaction proceeds until the end.

i know how to do front-end validation w/ js but seems that a ZC payment module should also have some form validation going on..?,

please note, in this situation the SSL is turned on but the security certificate is not engaged. don't know if that has anything to do with it or not

any insight at all would be greatly appreciated, thanks!

[DrByte]

If it's accepting "anything" for a card number, and never rejecting a truly invalid card, then you've got something else broken other than the payment module.

You're right: Zen Cart DOES do validation before even submitting the transaction to the gateway. Relying on front-end JS for card validation is foolish, let alone pointless, for security reasons.

I can't recall ever using special card numbers to force a decline such as the one you mentioned. I simply use a truly invalid number, ie: one that doesn't pass proper cc validation rules.
Also, it's possible that the "test mode" is very different from "developer mode" where specific prices and card numbers and cvv codes trigger very specific gateway responses.

Valid numbers for testing include: http://www.zen-cart.com/content.php?187
To get an invalid one, increment any of those numbers by "1", or change the first digit to a 9.

If your store passes the invalid number to the gateway without any error first, then you've broken the built-in validation logic. Start by putting that back to normal.

[tcarden]

am troubleshooting this now.

can you confirm that the MD5 Hash is not needed for the AIM module?

i'm fairly certain that's what i read on the Authorize.net FAQ's.

[DrByte]

MD5 Hash *is* used for the AIM module when using it with Authorize.net.
The FAQ article for instructions on setting up the AIM module will confirm what you need.

[tcarden]

thanks!, i will review. i was mistaken, thought it was only for SIM

[DrByte]

Doh. My bad. It's *optional* for AIM. But if you've set it up in your authnet account, you need to set it into your payment module settings too.

http://www.zen-cart.com/content.php?...payment-module