Authorize.net SIM - not secure option

[andy1234]

Authorize.net is stating that the SIM option should be used in case of no SSL installed - see

http://developer.authorize.net/guides/

However, when activating authorize.net on zen cart, it prompts entering a cc info. My understanding was that it should redirect to authorize.net secure gateway and ask for the cc info there and not on an unsecured zen checkout page. Am I missing something?

Thanks

[econcepts]

Did you activate the proper Authorize.net option in the admin? Make sure you activate the SIM method (not the AIM method) in the admin.

[andy1234]

Yes, it is a standard (SIM) module and it gives a prompt for a cc info on the step 3 of the checkout. The difference, when I activate the AIM module, is that it also has a cvv number field

[econcepts]

UPDATE:

I just activated the SIM method on a zen test site and see what you are talking about now. Typically when using the SIM method, the user is taken to an off site secure form (on the Authnet gateway), thus no need for a SSL cert. (transactions are processed off the server).

In this case I see the same thing you do. The user is forced to enter their CC number on a non-ssl connection and only when they are asked to confirm the order (the last step) is the transaction actually submitted for processing.

[andy1234]

yes, something is wrong here. The SIM option should redirect the user to the ssl encrypted authorize.net page (like the 2co.com module or paypal IPN).

the question remains the same: is it a drawback in the zen authorize.net module or we are missing some settings here?

[DrByte]

That SIM module is obsolete and hasn't actually had any feature updates in a couple years. (And is really poorly designed)

A full-featured SIM module is now built-in to the upcoming v1.3.8 release.

[andy1234]

DrByte, when can we expect ver 1.3.8 to be released?

Also, will it incorporate PayPal Pro?