Hi Securfocus -

Try this. Look at around line 158 of qbms.php in includes/modules/payment/qbms.php

Find these two lines (I prefer to use quote rather than code so you can see the whole line - but these are only TWO lines):

Code:
$payment_error_return = 'payment_error=' . $this->code . '&error=' . urlencode($error) . '&qbms_cc_owner=' . urlencode($_POST['qbms_cc_owner']) . '&qbms_cc_expires_month=' . $_POST['qbms_cc_expires_month'] . '&qbms_cc_expires_year=' . $_POST['qbms_cc_expires_year'];

zen_redirect(zen_href_link(FILENAME_CHECKOUT_PAYMENT, $payment_error_return, 'SSL', true, false));
Replace with the following two lines (or you can comment them out if you like and just add these two lines):

Code:
$messageStack->add_session('checkout_payment', $error, 'error');

zen_redirect(zen_href_link(FILENAME_CHECKOUT_PAYMENT, '', 'SSL', true, false));
This is in fact the right way to do it with current Zen Cart specs, so this is now added to update when/if another release happens. Just wondering if in your case, this helps with the broken URL. Worth a try anyway?

Mydanilo - you should apply this change - or download 1.7c from "you know where"!! :)