CyberSource Invalid Field

[Holgate]

Last fall I had Cybersource playing nice with Zen...but that was a couple versions ago for the core and module.

This time (Zen 1.3.0.1 and CyberSource v1.04), I'm getting a field data error when I checkout. I'm using 'production' status in Zen's Cybersource setup. All field names are returning with a 'VALID' setting except the orderPage_signaturePublic ...which is coming back 'INVALID'.

I don't even know what that field is :-( ...I've traced it back in the HOP.php as a public key or something, and each time I run a new checkout test the Field Value changes - some random generated script key I suppose. This all occurs in the 'Check Order Data' results page url: https://orderpage.ic3.com/hop/ProcessOrder.do

Anyone have any suggestions? I bet it's a no-brainer...but I can't figure it...yet...

[Holgate]

Ok. Cybersource resolved this issue for me. It's a one-line code fix in your HOP.php that is generated from the Cybersource website:

On (or around) line 32, AFTER

function cybs_sha1($in)  {

enter this

return pack ("H*", sha1($in));

I was told that the original HOP.php is appropriate for Windows servers, but this is a bug that can be fixed for Linux servers. Processing orders perfectly now.



Also - I've mentioned in another thread, but for newbs like myself - if you want Cybersource to automatically capture the sale edit the cs.php file:

On (or around) line 310, find

zen_draw_hidden_field('orderPage_transactionType','authorize') . "\n" .

and change it to

zen_draw_hidden_field('orderPage_transactionType','sale') . "\n" .

If you leave it as the word 'authorize' instead of 'sale' you'll have to make sure you log-in to Cybersource everytime you make a sale to 'capture' the charge.

Thnx Zen!

[iWebGeek]

I've been looking for a fix to that problem. Thanks!

One thing though, I'm testing without a secure server but when I checkout an order, it asks me to validate a SSL that's not from my site, but another one. What's up with this?

The site it's coming from is gallerynetwork.com

Any ideas??

[Holgate]

I think I read about another instance of mixed up certificates in this forum... maybe another client using the same host/server, or something like that?

I'm testing without SSL now too, but plan to edumacate myself by experience very soon with a certificate & dedicated IP - that seems to be the benchmark for professional store status.

[iWebGeek]

I guess I'll have to try to setup my own SSL..

another question, I downloaded a security key from cybersource's business center but I have no idea what to do with it???

I am a newb to all of this, trying to set up an online store for my company.

[Holgate]

The Cybersource 'Security Key' is used "to submit orders with the Simple Order API". I believe this is another seperate/different way of processing orders with a cart setup. I think the service I've used previously (UltraCart) uses the API system - something about including the key in it's server clusters blah blah blah. I'm live with UltraCart now, and able to test the HOP script with Zen at the same time... so I know it's an alternative way to achieve order processing.

What is API? Does Zen have a way to setup API with Cybersource?.. I have no idea... I'm guessing not, or there would be no need for the HOP script. So I don't think the Security Key youve downloaded is applicable in the Zen setup.

Anyone?..

[iWebGeek]

OKay thanks!

Would you mind writing a short tutorial on how to implement the SSL with Zen Cart? I've already got the cybersource module installed, so I just need instructions on how to add the SSL once I've purchased it.

[Holgate]

I don't know about a tutorial but I'd be glad to report my experience after installing the SSL. Basically, I'm going to ask my host provider to take care of it for me - then I'll scour the forum for other SSL threads if I have any Zen problems.

I'm really trying to hold out though, until Absolute completes work on his Multiple Stores With One Checkout. But if that's not done by early July I'll have to move forward without it.

[iWebGeek]

Alright, not a problem. I probably should check into my host helping me with the SSL, but they will probably charge a fee for it.

[Holgate]

Don't get me wrong - I'd write one if I was qualified... I'm just hacking my way through on the road to Zen.