One-Page Checkout [Support Thread]

[swguy]

I am getting a number of these:

[22-Dec-2025 16:41:45 America/New_York] Request URI: /index.php?main_page=checkout_process, IP address: *.*.*.*, Language id 1
#0 /home/client/public_html/includes/modules/checkout_process.php(45): zen_debug_error_handler()
#1 /home/client/public_html/includes/modules/pages/checkout_process/header_php.php(13): require('/home/client/...')
#2 /home/client/public_html/index.php(35): require('/home/client/...')
--> PHP Warning: Undefined array key "payment" in /home/client/public_html/includes/modules/checkout_process.php on line 45.

Bootstrap 3.7.8, OPC 2.5.5, Zen Cart 2.1.0, PHP 8.3.

[Carbonless]

I have One Page Checkout 2.5.5 , recently upgraded to ZC 2.1.0, using ZCA Bootstrap-4, and Square Web Payments Module 1.0.2. With OPC turned off, I can checkout using Square Web Pay mod just fine. Turn OPC on and When I get to the cc entry and click "Review Order" I get this notification: We have a problem on our end. So Sorry! Please report this error to the Store Owner: SQ-MISSING-TOKEN

And it generates this error log: [23-Jan-2026 03:55:46 UTC] PHP Notice: missing token result: check if card button is disabled on dev console using: document.getElementById('card-button'); else look for javascript error in console. in /includes/modules/payment/square_webPay.php on line 262

Outside of my knowhow. Any help is greatly appreciated as always.

[lat9]

I have One Page Checkout 2.5.5 , recently upgraded to ZC 2.1.0, using ZCA Bootstrap-4, and Square Web Payments Module 1.0.2. With OPC turned off, I can checkout using Square Web Pay mod just fine. Turn OPC on and When I get to the cc entry and click "Review Order" I get this notification: We have a problem on our end. So Sorry! Please report this error to the Store Owner: SQ-MISSING-TOKEN

And it generates this error log: [23-Jan-2026 03:55:46 UTC] PHP Notice: missing token result: check if card button is disabled on dev console using: document.getElementById('card-button'); else look for javascript error in console. in /includes/modules/payment/square_webPay.php on line 262

Outside of my knowhow. Any help is greatly appreciated as always.

Mine too, kind of. Did you check for javascript errors in the browser's console log, as indicated in the square_webPay log you received?

[Carbonless]

OPC 2.5.5 working with SquarewebPay with these edits:

CONSOLE ERROR log that promted the fix...
Setting orderConfirmed (1), submitter (null) square.js:3:78284
Form being submitted, submit_type(review square.js:3:78284
setFormSubmitButton, payment-module: square_webPay square.js:3:78284
Showing "review" square.js:3:78284
setFormSubmitButton, enabling Review and Confirm buttons. square.js:3:78284
Form checked, passed (true) square.js:3:78284
Cookie warnings 2
The value of the attribute “expires” for the cookie “_ga_G4K94XL4P6” has been overwritten. index.php
Object { cache: false, type: "POST", traditional: true, dataType: "json", timeout: 5000, data: {…}, url: "ajax.php?act=ajaxOnePageCheckout&method=getOrderTotal", error: error(jqXHR, textStatus, errorThrown) }
square.js:3:78284
setFormSubmitButton, payment-module: square_webPay square.js:3:78284
Showing "review" square.js:3:78284
setFormSubmitButton, enabling Review and Confirm buttons. square.js:3:78284
Setting orderConfirmed (0), submitter (null) square.js:3:78284
jQuery version: 3.7.1 square.js:3:78284
TypeError: MutationObserver.observe: Argument 1 is not an object. web-client-content-script.js:2:1432872
Feature Policy: Skipping unsupported feature name “clipboard-write”. web-client-content-script.js:2:965680
Feature Policy: Skipping unsupported feature name “clipboard-write”. web-client-content-script.js:2:965905
Feature Policy: Skipping unsupported feature name “clipboard-write”. web-client-content-script.js:2:1424162
Layout was forced before the page was fully loaded. If stylesheets are not yet loaded this may cause a flash of unstyled content. webclient-infield.html
WEBGL_debug_renderer_info is deprecated in Firefox and will be removed. Please use RENDERER. main-iframe.js:3:383356
Partitioned cookie or storage access was provided to “https://web.squarecdn.com/1.82.3/mai...der.com” because it is loaded in the third-party context and dynamic state partitioning is enabled. main-iframe.js:3:379397
found checkoutOneSubmit button! square.js:3:78284


I’ve patched the One Page Checkout v2.5.5 plugin so it submits via requestSubmit() (with a real submit button) instead of form.submit(). That prevents Square from seeing submitter (null), which is the usual reason the token/nonce never gets attached and your square_webPay.php logs “missing token result”.

​I updated both:
includes/modules/pages/checkout_one/jquery.checkout_one.js
includes/modules/pages/checkout_one/jquery.checkout_one.min.js

Each now prefers:
form.requestSubmit(button)
fallback to button.click()
last resort form.submit()

File 1 (unminified)

/includes/modules/pages/checkout_one/jquery.checkout_one.js

Edit A — checkout_confirmation submit (Square “submitter = null” fix)

Find:

jQuery('form[name="checkout_confirmation"]')[0].submit();


Replace with:

(function(){
var form = jQuery('form[name="checkout_confirmation"]')[0];
if (!form) { return; }
var btn = document.getElementById('checkoutOneSubmit') || document.getElementById('card-button');
if (!btn) {
btn = form.querySelector('button[type="submit"], input[type="submit"]');
}
if (typeof form.requestSubmit === 'function') {
form.requestSubmit(btn || undefined);
} else if (btn) {
btn.click();
} else {
form.submit();
}
})();

Edit B — checkout_payment submit (when payment method handles submission)

Find:

jQuery('form[name="checkout_payment"]').submit();


Replace with:

(function(){
var form = jQuery('form[name="checkout_payment"]')[0];
if (!form) { return; }
var btn = document.getElementById('checkoutOneSubmit') || document.getElementById('card-button');
if (!btn) { btn = form.querySelector('button[type="submit"], input[type="submit"]'); }
if (typeof form.requestSubmit === 'function') {
form.requestSubmit(btn || undefined);
} else if (btn) {
btn.click();
} else {
form.submit();
}
})();

Edit C — credit-class submit (same form submit path, different trigger)

Find:

jQuery('form[name="checkout_payment"]').submit();


Replace with the same block as Edit B (above).
This occurs in the “Submitting credit-class request” handler.

File 2 (minified)

/includes/modules/pages/checkout_one/jquery.checkout_one.min.js

This file contains the same functional changes, just compressed. For a forum post, the cleanest note is:

“Updated the 3 programmatic form submissions from .submit() to a requestSubmit()/click fallback so Square receives a non-null submitter, allowing tokenization/nonce injection.”

If they insist on literal paste, here are the three exact replacements by search string, which are quick and reliable even in minified code:

Minified replacement 1 — confirmation form

Search for:

jQuery('form[name="checkout_confirmation"]')[0].submit();


Replace with (minified IIFE):

(function(){var f=jQuery('form[name="checkout_confirmation"]')[0];if(!f)return;var b=document.getElementById('checkoutOneSubmit')||document.getElementById('card-button');if(!b){b=f.querySelector('button[type="submit"], input[type="submit"]')}if(typeof f.requestSubmit==='function'){f.requestSubmit(b||void 0)}else if(b){b.click()}else{f.submit()}})();

Minified replacement 2 — checkout_payment submit (1st occurrence)

Search for:

jQuery('form[name="checkout_payment"]').submit();


Replace with:

(function(){var f=jQuery('form[name="checkout_payment"]')[0];if(!f)return;var b=document.getElementById('checkoutOneSubmit')||document.getElementById('card-button');if(!b){b=f.querySelector('button[type="submit"], input[type="submit"]')}if(typeof f.requestSubmit==='function'){f.requestSubmit(b||void 0)}else if(b){b.click()}else{f.submit()}})();

Minified replacement 3 — checkout_payment submit (2nd occurrence)

Do the same replacement again for the second .submit() occurrence (credit-class submit path).

[lat9]

Wait a second ... Square Web Payments Module 1.0.2? Current versions of that payment module are v2.x.x and higher; where did you find v1.0.2?

[Carbonless]

good catch - to answer you question, I have no idea, and I guess looking at 2.0.2, I can't tell you how modified the older version I have actually is any longer.

I'm installing 2.0.2 now, it was in our mod directory as installed, but it hasn't been. Doing it now and I'll report back.

[Carbonless]

The 2.0.2 installed seemlessly, worked brilliantly, and made my earlier grappling success,... a waste of time. feel free to delete my earlier comments as to not cause confusion.

[dbltoe]

The non-commercial mod went to 1.0.4. The commercial has been at 3+ for some time.

[carlwhat]

Wait a second ... Square Web Payments Module 1.0.2? Current versions of that payment module are v2.x.x and higher; where did you find v1.0.2?

v1.0.2 is readily available here (although its use requires old outdated code):

https://www.zen-cart.com/downloads.php?do=file&id=2345

The 2.0.2 installed seemlessly, worked brilliantly, and made my earlier grappling success,... a waste of time. feel free to delete my earlier comments as to not cause confusion.

The non-commercial mod went to 1.0.4. The commercial has been at 3+ for some time.

also correct.

2.0.2 was released 12/2024; it was the last version that supports zc 1.5.7.

3.0.0 was released 5/2025. it requires zc 1.5.8, and now makes use of the new square payment flow. it no longer uses the deprecated verifyBuyer function.

3.1.1 is the latest version as of this post. it has bug fixes on the 3.x.x series and makes use of the square sdk from 8/2025.

if one is running zc 1.5.8 or higher, 3.1.1 is the recommended version to be running.

again, as of this post, 2.x.x will still work (at least to my knowledge), but it does make use of a deprecated payment flow. as to how long square will continue to accept payments using that payment flow is anyone's guess. judging from my past experience with other payment processors (specifically authorize.net), it could be many years before square stops accepting payments using that payment flow.

hope that helps.

[Carbonless]

I had to create a work around in order to get the mods for "check/money order" or "offsite payments" to work.
Zen Cart One-Page Checkout + Square – “Confirm Order” Hang (Firefox)

Issue:
After installing the One-Page Checkout (OPC) module with Square, clicking Confirm Order appeared to “hang” in Firefox. Console showed:

HTMLFormElement.requestSubmit: The submitter is not a submit button


Orders would not complete.

Root Cause:
jquery.checkout_one.min.js was calling:

form.requestSubmit(submitter)


where submitter could be:

null, or

a non-submit element (e.g. <a> or <button type="button">)

Firefox strictly enforces requestSubmit() and throws if the submitter is not a real submit control, which stops checkout execution.

Fix Applied:
Patched the minified OPC file to validate the submitter before passing it to requestSubmit().

Logic now:

If a valid <button type="submit"> or <input type="submit"> exists → use it

Otherwise → call form.requestSubmit() with no argument

Fallback to form.submit() if needed

This prevents the Firefox exception while preserving all OPC and Square logic.

File that must be patched (important):

/includes/modules/pages/checkout_one/jquery.checkout_one.min.js


(Editing only jquery.checkout_one.js is insufficient if the min file is what’s loaded.)