WorldPay Module for ZenCartv1.3x

[philip_clarke]

That may not be the only module, but now we know what we are looking for (strangely encrypted sessions in the database is one big giveaway now) and it only requires a small config change to make everything work so everyone should be dancing.

What's interesting is that it protects php invisibly on a virtual host, because the bulk hosting end of the market has no access to their log files so can't see that something is examining their sessions for possible security issues and then locking down. It would be a great piece of software for running WorldPay itself, as it stops people intercepting sessions URL variables or session cookies, so if one only need to stay in the same website it's fantastic, it's a right bugger when you need WorldPay to talk outside of it's box and it doesn't inform you that it's going to cut the lines of communication.

That jon> bloke, seriously, he has done a sterling effort, because he could just have walked away from WorldPay and we would never have known the answer and the same old "I don't get told a payment's been made" or "my session's being dropped" or "I have a redirect failing on line 22 because the headers have already been sent". ALL of these bugs can be caused by that additional invisible module. (some of them can be caused by people being silly too, but hell, I'm one more step closer to enlightenment ).

Philip.

[pcourtney]

sterling work Jon and Philip, good to know that we have chaps like you around who can persevere with this sort of stuff and come up trumps

[niklasalbin]

Hi,

I'm having the same 302 problem as others. I could really use some help as a php5 upgrade brought down my payment system. It's not a high volume site but still...

WorldPay Java HTTP Request Object is attempting to acces and comes back with the 302, resulting in an error and failure of callback. I'd love some help. I just did a clean install of the module, applying Phil's new worldpay.php.

I tried to have a look in the database for oddities in the session table but didn't really know what to look for.

I'm not using ssl, btw.

Regards,

Niklas

[philip_clarke]

Now have you installed the new callback password ?

In fact PM me and I'll have a look.

I am exceptionally unwell at the moment though, so be quick while I am still up.

[niklasalbin]

Thanks to Philip for helping me out.

Turned out that WorldPay was not submitting the password. I tried entering the password into the test environment (as well as the production evironment) and suddenly everything worked. Very peculiar.

[rued]

Yes that WP-thing is quite stupid in that way.

You can not change config in test environment, and you can not log in and then go to production to change this.

You have to log in to production first, change config there - and then enter test environment ... :)

[niklasalbin]

Maybe I should clarify, in case someone else runs into a similar problem. the site has been live for a good year now. When I added the password to the production environment, I thought that was enough. It turned out, however, that I needed to add it to test environment as well.

Niklas