Authorize.net SIM changes made 9/8/2015

[RixStix]

We received the email notice from Authorize.net regarding changes only hours before being implemented last night. The changes do not disrupt the ability to process transactions. The changes will impact the format of the information displayed and receipts.

The updates are to increase security of Authorize.net hosted payment form, receipt page and email receipts.

Affected:

• Support for HTML tags, JavaScript and CSS in the payment form, receipt page and email receipts have been disabled. This includes the use of links and hosted images.
• If you are currently presenting a logo on the hosted payment form, receipt page or email receipts in the header or footer, that logo will no longer appear.

In order to present a logo moving forward, your developer or solution provider will need to send the logo URL via an API call using x_logo_url.

For example, x_logo_url=http://www.authorize.net/images/authorizenet_150_42.gif. Please note that this method will only allow for one logo to be displayed on both the payment form and receipt page.

I found that particular code already present in /includes/payments/authorizenet.php around line 402.
Uncomment the line and insert a link to your logo image.

The Auth.net text is attached

[lat9]

Thanks for the post, Rick!

It seems like a good approach, going forward, would be to further modify the authorizenet.php module to include another configuration setting that identifies the image file-name to be sent to Authorize.net (since that version of the logo might require different dimensions from your store's main logo). If the value's not specified (or the file's not found), then no logo would be displayed.

[RixStix]

I'm not sure that I understand the need to modify the authorizenet.php file other than uncommenting the line and inserting the path to any image desired.

I was surprised at the extremely short notice from auth.net.

[lat9]

I was just thinking that for the Authorize.net-SIM-using store-owners that aren't comfortable editing the PHP files, having a configuration setting would be "nice".

[DrByte]

I found that particular code already present in /includes/modules/payments/authorizenet.php around line 402.
Uncomment the line and insert a link to your logo image.

Yes, that's the correct approach.


As for future ZC versions, we're exploring options for whether to make this particular logo URL configurable via the Admin without editing the .php file.

[RixStix]

I was just thinking that for the Authorize.net-SIM-using store-owners that aren't comfortable editing the PHP files, having a configuration setting would be "nice".

Didn't stop to think of the obvious support issues that manual editing of files sometimes causes. We can be our own worst enemies at times because we don't, won't or misread the available support files. Unfortunately, guilty BTDT but trying to do better.

Yes, that's the correct approach.
As for future ZC versions, we're exploring options for whether to make this particular logo URL configurable via the Admin without editing the .php file.

Thank you.

[RixStix]

FWIW,

570 px wide for a logo image fits/centers nicely within the auth.net SIM payment form.

[CustomDesign]

Yes, that's the correct approach.


As for future ZC versions, we're exploring options for whether to make this particular logo URL configurable via the Admin without editing the .php file.

Thank you ALL for your help.