ANZ eGate - Frustrating Secure Hash Problem

[johnwey]

I've worked through all the setup hassles integrating Zen Cart with the terrific ANZ team here in Australia, and we're almost there after weeks of working things out.

I get one last error -- and it looks like it's Zen Cart based.

After going all the way through ANZ's eGate, we land back on the site with a message "Secure Hash was not able to be verified against the Secret Hash, possible tampering with response"

The ANZ guy says it could be because in Australia the banks don't check against a cardholder's address, whereas in the USA you do.

This is what he said:
"The only thing I can think of is that for some reason the shopping cart is looking at the message
Secure Hash was not able to be verified against the Secret Hash, possible tampering with response
instead of the Transaction Response.
I have no idea why it is doing this or why it has this message. If the Secure Hash was incorrectly set in the payment module it would not re-direct to the ANZ pages in the first place."

The payment module was a modification of osCommerce's payment module that I got in here from another Aussie.

Can anyone please tell me where I can change the code so the cart can function?

Thanks in advance

John

[johnwey]

I thought maybe it will help if I provide the error code?

>>>>>>>>>> begins >>>>>>>>>>>>>>>>>>

There was an error when processing a transaction response from the MIGS
Payment Gateway

Secure Hash was not able to be verified against the Secret Hash,
possible tampering with response

Details of the Error are as follows

MIGS:
btn_submit_x=73
btn_submit_y=17
main_page=checkout_process session_id=080b56be9be6bc5534594ce7aba8456f
session_name=zenid
vpc_3DSXID=xnbLzG4wFn51GyZ2DSy8kBR5lww=
vpc_AVSResultCode=Unsupported
vpc_AcqAVSRespCode=Unsupported
vpc_AcqCSCRespCode=Unsupported
vpc_AcqResponseCode=00
vpc_Amount=2790
vpc_AuthorizeId=033062
vpc_BatchNo=20071217
vpc_CSCResultCode=Unsupported
vpc_Card=VC
vpc_Command=pay
vpc_Locale=en_AU
vpc_MerchTxnRef=AT20071216214221/1
vpc_Merchant=ANZBYRONBREW
vpc_Message=Approved
vpc_OrderInfo=AT20071216214221
vpc_ReceiptNo=071217000001
vpc_TransactionNo=2000000000
vpc_TxnResponseCode=0
vpc_VerSecurityLevel=06
vpc_VerStatus=E
vpc_VerType=3DS
vpc_Version=1


ORDER CUSTOMER:
firstname=Name
lastname=Sirname
company=
street_address=8/686 Street Road
suburb=
city=City Name
postcode=1234
state=New South Wales
zone_id=183
country=Array
format_id=1
telephone=0212345678
[email protected]


SERVER VARS:
PATH=/usr/local/bin:/usr/bin:/bin
DOCUMENT_ROOT=/home/username/public_html
HTTP_ACCEPT=image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,
application/x-shockwave-flash, application/vnd.ms-powerpoint,
application/vnd.ms-excel, application/msword, */*
HTTP_ACCEPT_LANGUAGE=en-au,ko;q=0.5
HTTP_CONNECTION=Keep-Alive
HTTP_COOKIE=zenid=080b56be9be6bc5534594ce7aba8456f
HTTP_HOST=www.weebsite.com.au
HTTP_PRAGMA=no-cache
HTTP_USER_AGENT=Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
.NET CLR 1.1.4322; .NET CLR 2.0.50727) HTTP_VIA=1.0 SBSSERVER
REMOTE_ADDR=61.29.45.62 REMOTE_PORT=36555
SCRIPT_FILENAME=/home/username/public_html/shop/index.php
SERVER_ADDR=11.22.33.44 [email protected]
SERVER_NAME=www.website.com.au
SERVER_PORT=80
SERVER_SOFTWARE=Apache/1.3.39 (Unix) mod_auth_passthrough/1.8
mod_log_bytes/1.2 mod_bwlimited/1.4 FrontPage/5.0.2.2635.SR1.2
mod_ssl/2.8.30 OpenSSL/0.9.7a PHP-CGI/0.1b GATEWAY_INTERFACE=CGI/1.1
SERVER_PROTOCOL=HTTP/1.1 REQUEST_METHOD=GET
QUERY_STRING=main_page=checkout_process&btn_submit_x=73&btn_submit_y=17&
sess
ion_id=080b56be9be6bc5534594ce7aba8456f&session_name=zenid&vpc_3DSXID=xn
bLzG
4wFn51GyZ2DSy8kBR5lww%3D&vpc_AVSResultCode=Unsupported&vpc_AcqAVSRespCod
e=Un
supported&vpc_AcqCSCRespCode=Unsupported&vpc_AcqResponseCode=00&vpc_Amou
nt=2
790&vpc_AuthorizeId=033062&vpc_BatchNo=20071217&vpc_CSCResultCode=Unsupp
orte
d&vpc_Card=VC&vpc_Command=pay&vpc_Locale=en_AU&vpc_MerchTxnRef=AT2007121
6214
221%2F1&vpc_Merchant=MERCHANTNAME&vpc_Message=Approved&vpc_OrderInfo=AT2
0071
216214221&vpc_ReceiptNo=071217000001&vpc_SecureHash=2E4A9499DAED5BC04D91
4A76
156A96F6&vpc_TransactionNo=2000000000&vpc_TxnResponseCode=0&vpc_VerSecur
ityL
evel=06&vpc_VerStatus=E&vpc_VerType=3DS&vpc_Version=1
REQUEST_URI=/shop/index.php?main_page=checkout_process&btn_submit_x=73&b
tn_s
ubmit_y=17&session_id=080b56be9be6bc5534594ce7aba8456f&session_name=zeni
d&vp
c_3DSXID=xnbLzG4wFn51GyZ2DSy8kBR5lww%3D&vpc_AVSResultCode=Unsupported&vp
c_Ac
qAVSRespCode=Unsupported&vpc_AcqCSCRespCode=Unsupported&vpc_AcqResponseC
ode=
00&vpc_Amount=2790&vpc_AuthorizeId=033062&vpc_BatchNo=20071217&vpc_CSCRe
sult
Code=Unsupported&vpc_Card=VC&vpc_Command=pay&vpc_Locale=en_AU&vpc_MerchT
xnRe
f=AT20071216214221%2F1&vpc_Merchant=MERCHANTNAME&vpc_Message=Approved&vp
c_Or
derInfo=AT20071216214221&vpc_ReceiptNo=071217000001&vpc_SecureHash=2E4A9
499D
AED5BC04D914A76156A96F6&vpc_TransactionNo=2000000000&vpc_TxnResponseCode
=0&v
pc_VerSecurityLevel=06&vpc_VerStatus=E&vpc_VerType=3DS&vpc_Version=1
SCRIPT_NAME=/shop/index.php
PHP_SELF=/shop/index.php
argv=Array
argc=1

>>>>> ends >>>>>>>>>

Cheers

John

[Absolute]

Hi John,

The response code all looks fairly good. The response from your gateway isn't the problem - it'll be the after_process function within the payment module which needs to be looked at, to discover why there is a problem.

Could you email me the module so I can take a look?

Absolute

[johnwey]

Absolutely!

It's on its way

Cheers

John

[missym]

Hi John,

I'm in the process of trying to install the ANZ module (probably the same one that you used) but haven't been successful with even getting it to go to the egate. Anyhow, I'm curious as to whether you've got your problem fixed (because I'll probably end up with that problem too).

~M

[missym]

Hi John,

I'm not sure if you've got your problem resolved, if you have.. don't need to read on. But for those that are experiencing the same problem as John's, go to the Payment module and change it so that it's set up to use Merchant-Hosted Integration Model rather than server. Should look like something below:

Enable MIGS Payment Module
True

Merchant-Hosted Integration Model
True

MIGS Test Host Simulator
True

MIGS Merchant ID
ANZNAME

MIGS Access Code
<Code from TESTANZNAME>

MIGS Secure Hash Secret
<Hash from TESTANZNAME>

Optional Notification Email Address
[email protected]

Payment Zone
--none--

Sort order of display
0

[AndyTech]

Hi John,

I have the same problem like you. If I use the hosted by server method or hosted by merchant without sercure hash, everything is fine. The payment will go through but the ANZ will record that transaction in non secure hash payment. Have you find the solution yet? Looking forward to your reply.

Thank you.

[R-Lo]

so did you guys getting it intergrated into your site ok? My client has asked me whether she should sign up to the ANZ eGate, I have to confirm whether it will work or not...?
thx