My Authorize.net module stopped working on September 11 2016

[DrByte]

Yes, I was running an authorization to test it out and both billing and shipping addresses are there. Authorize.net was working until September 11 (that's when I received the last successful order through Authorize.net). PayPal works just fine. I didn't make any changes to the site that I'm aware of so I was thinking something was changed on the Authorize.net side.

carlwhat is helping you confirm that the problem is not in the authnet module, but instead somewhere else in your site.

I recommend doing a complete site analysis as though you were hacked, to prove that you weren't. ... cuz it seems something is interfering with the proper handling of order data ... and I suspect files in your /includes/classes folder have been tampered with ... and perhaps elsewhere as well.

See: http://www.zen-cart.com/wiki/index.p...ing_From_Hacks

[AvaAdorn]

Okay, I added the new code (yes I did find the AIM debug in the Cache directory). I got a bunch of stuff on the screen:

order Object ( [info] => Array ( [order_status] => 2 [currency] => USD [currency_value] => 1.00000000 [payment_method] => [payment_module_code] => [coupon_code] => [shipping_method] => Zone Rates (Shipping to US) [shipping_module_code] => zones_zones [shipping_cost] => 0 [subtotal] => 2.5 [shipping_tax] => 0 [tax] => 0 [total] => 0 [tax_groups] => Array ( [0] => 0 ) [comments] => [ip_address] => xxx [cc_type] => MasterCard [cc_owner] => Ava xxx [cc_number] => XXXXXXXXXXXX9509 [cc_expires] => [cc_cvv] => *** ) [totals] => Array ( ) [products] => Array ( [0] => Array ( [qty] => 1 [my_stock_id] => USPS-DOM-SC-250 [name] => Signature Confirmation [model] => USPS-DOM-SC-250 [tax] => 0 [tax_groups] => Array ( [0] => Sales Tax ) [tax_description] => Sales Tax [price] => 2.5000 [final_price] => 2.5 [onetime_charges] => 0 [weight] => 0 [products_priced_by_attribute] => 0 [product_is_free] => 0 [products_discount_type] => 0 [products_discount_type_from] => 0 [id] => 414 [rowClass] => rowEven ) ) [customer] => Array ( [firstname] => xxx [lastname] => xxx [company] => [street_address] => xxx [suburb] => [city] => xxx [postcode] => xxx [state] => California [zone_id] => 12 [country] => Array ( [id] => 223 [title] => United States [iso_code_2] => US [iso_code_3] => USA ) [format_id] => 2 [telephone] => xxx [email_address] => xxx ) [delivery] => Array ( [firstname] => xxx [lastname] => xxx [company] => [street_address] => xxx [suburb] => [city] => xxx [postcode] => xxx [state] => California [zone_id] => 12 [country] => Array ( [id] => 223 [title] => United States [iso_code_2] => US [iso_code_3] => USA ) [country_id] => 223 [format_id] => 2 ) [content_type] => physical [email_low_stock] => [products_ordered_attributes] => [products_ordered] => [products_ordered_email] => [attachArray] => [billing] => Array ( [firstname] => xxx [lastname] => xxx [company] => [street_address] => xxx [suburb] => [city] => xxx [postcode] => xxx [state] => xxx [zone_id] => 12 [country] => Array ( [id] => 223 [title] => United States [iso_code_2] => US [iso_code_3] => USA ) [country_id] => 223 [format_id] => 2 ) ) /home2/xxx/public_html/includes/modules/payment/authorizenet_aim.php:311

[carlwhat]

great!

something is wrong with your:

includes/classes/order.php

from the info that you posted, we can see that the:

order->info['subtotal'] = 2.50

but yet:

order->info['total'] = 0

which is why authnet is failing because of a $0 charge.

i would follow the link that drByte posted. something is wrong within that file and perhaps you were hacked.... or did you make a change to that file?

good luck! let us know what you find out.

[AvaAdorn]

Probably hacked because I did not make a change to the file. I'll follow Dr. Byte's instructions. Thanks for the help!

[AvaAdorn]

I went back to a previous backup before September 11 and the issue with Authorize.net still persisted. So now I'm not so sure if the site was hacked. I used the old orders.php file and it didn't change anything. I also consulted with my hosting company and they said they were not aware of any hacks to the server. Could it be something else?

[DrByte]

Did you check ALL files? Or only those 2? There are hundreds of files used, even just to get "to" the two files you mentioned. And several directories auto-load "all" files in them, even if they're unauthorized or unwanted, which is what hackers often try to exploit. Hence the guidance to do a *complete* compare of everything, including unexpected/new files that weren't published with original ZC files.

[carlwhat]

i agree that it is worth while to look at all your files.

you were successfully authorizing cards on the 10th, and then it stopped working on the 11th. there has been no change to authorize.net; so something must have happened on your site.

the value for $order->info['total'] is updated in numerous spots so the problem could have happened anywhere.

good luck!

[AvaAdorn]

What is the best way to compare files? What do you use?

[carlwhat]

i like to use meld:

http://meldmerge.org/

i run linux on most of computers. but it does look like they have a windows version.

i'm sure there are other tools out there....

[DrByte]

What is the best way to compare files? What do you use?

A few posts back I gave you this link:
http://www.zen-cart.com/wiki/index.p...ing_From_Hacks
... which in one of its steps has a link to: https://www.zen-cart.com/wiki/index....Obscure_Issues
... in which the two most popular tools, WinMerge and Beyond Compare are listed.
But if you want even more, see: http://www.zen-cart.com/wiki/index.php/Useful_Tools