ePath Payment received but no orders

[oavs]

Hi,

We dont use paypal or Google. We use e-Path.
Out of 7 consecutive orders, 7 order payments gone through but only 2 orders received. Those 2 orders are in admin showing nothing else.

Where do I look?

This is the latest Log files ---------------------

[16-Sep-2020 20:13:18 Australia/Sydney] Request URI: /index.php?main_page=checkout_process, IP address: xxx.116.220.xxx
#1 require_once() called at [/home/xxxxx/public_html/includes/functions/extra_functions/functions_bmz_image_handler.php:14]
#2 include(/home/xxxxx/public_html/includes/functions/extra_functions/functions_bmz_image_handler.php) called at [/home/xxxxx/public_html/includes/modules/extra_functions.php:43]
#3 include(/home/xxxxx/public_html/includes/modules/extra_functions.php) called at [/home/xxxxx/public_html/includes/init_includes/init_general_funcs.php:51]
#4 require_once(/home/xxxxx/public_html/includes/init_includes/init_general_funcs.php) called at [/home/xxxxx/public_html/includes/autoload_func.php:37]
#5 require(/home/xxxxx/public_html/includes/autoload_func.php) called at [/home/xxxxx/public_html/includes/application_top.php:219]
#6 require(/home/xxxxx/public_html/includes/application_top.php) called at [/home/xxxxx/public_html/index.php:25]
--> PHP Deprecated: Array and string offset access syntax with curly braces is deprecated in /home/xxxxx/public_html/includes/classes/bmz_image_handler.class.php on line 413.

[16-Sep-2020 20:13:18 Australia/Sydney] Request URI: /index.php?main_page=checkout_process, IP address: xxx.116.220.xxx
#1 include_once() called at [/home/xxxxx/public_html/includes/classes/payment.php:76]
#2 payment->__construct() called at [/home/xxxxx/public_html/includes/modules/checkout_process.php:45]
#3 require(/home/xxxxx/public_html/includes/modules/checkout_process.php) called at [/home/xxxxx/public_html/includes/modules/pages/checkout_process/header_php.php:14]
#4 require(/home/xxxxx/public_html/includes/modules/pages/checkout_process/header_php.php) called at [/home/xxxxx/public_html/index.php:35]
--> PHP Deprecated: Methods with the same name as their class will not be constructors in a future version of PHP; epath has a deprecated constructor in /home/xxxxx/public_html/includes/modules/payment/epath.php on line 15.
----------------------------------------------------

[dbltoe]

--> PHP Deprecated: Array and string offset access syntax with curly braces is deprecated in /home/xxxxx/public_html/includes/classes/bmz_image_handler.class.php on line 413.

You didn't say but, I guess you're using PHP 7.4?

Look at those files in the area they mention for something similar to

$str = "test";
echo($str{0});

and change the curly brackets into square brackets. On the same key, just don't hold down the shift.

The above (when fixed) would look like

$str = "test";
echo($str[0]);

[oavs]

You didn't say but, I guess you're using PHP 7.4?

Look at those files in the area they mention for something similar to

$str = "test";
echo($str{0});

and change the curly brackets into square brackets. On the same key, just don't hold down the shift.

The above (when fixed) would look like

$str = "test";
echo($str[0]);

First of all thank you for super fast response. This is really important for my client big customer as they are only getting some orders.. why some and not others have no idea? e-path processing?? server processing for consecutive orders not sure. Like to know

Yes PHP 7.4 used

Searched 1824 files for> $str = "test"; <and nothing can be found..

[dbltoe]

What you are really looking for is the curly brackets. What I gave you was an example of how they were used and how to fix it. I have no idea what your files will look like as I am not using the mod.

[DrByte]

dbltoe's reply was regarding the bmz image handler deprecation notice.

There's also the payment module deprecation notice for its constructor signature:

--> PHP Deprecated: Methods with the same name as their class will not be constructors in a future version of PHP; epath has a deprecated constructor in /home/xxxxx/public_html/includes/modules/payment/epath.php on line 15.

That's telling you that on line 15 of the module is a function that's named the same as the class name from a few lines earlier. Instead of saying something like "function epath()" it should say "function __construct()" (change the function name to __construct, leaving everything else the same. Yes, that's two underscores preceding "construct".

Both are just deprecation messages. Neither are indications of complete failure, so neither indicates a direct correlation to failed payments.

[DrByte]

I haven't looked at the epath module code, but if it's redirecting customers offsite and then trying to bring them back again to reconnect to their shopping session, then perhaps their browser is the culprit.

Browsers (especially Chrome) have recently begun enforcing SameSite=Strict restrictions as a default, and if your payments are handled on a page that requires redirecting away from Zen Cart and then back again, your store's session cookies will not be recognized, thus the shopper is logged out.

It's quite possible that the solution is in simply applying these changes:
https://github.com/zencart/zencart/pull/3972/files
and ensuring your HTTP_SERVER setting in configure.php contains an https:// URL.

YES, IT REQUIRES SSL. Browsers increasingly don't trust non-SSL operation, especially when moving between payment gateways and stores.


It's also possible that 'lax' mode may still be too restrictive, and thus you may need to override it to 'none' using this:

Create a file named /includes/extra_configures/samesite_cookie.php containing

<?php
// -----
// Samesite cookie needs to be none due to offsite payment gateway redirects
//
define('COOKIE_SAMESITE', 'none');

[oavs]

Thank you Dr.
Did all that all info noted. Informed customer to test 6-7 consecutive orders to test.

Many many thanks :-)

[oavs]

Just wanted to make sure re;
"It's quite possible that the solution is in simply applying these changes:
https://github.com/zencart/zencart/pull/3972/files"

What is the total content of the new >> includes/init_includes/init_sessions.php file?
Not familiar with github. Github file has + and - . is that mean + what is added and - what has been taken out/replaced?

My own 1.5.7 version looks totally diffent and much longer than whats on the gidhub.

Is that the complete "init_sessions.php" file ? if only partial Is there a complete one?

Sorry Dr. Can you please clarify?

[DrByte]

Not familiar with github. Github file has + and - . is that mean + what is added and - what has been taken out/replaced?

Yes. red and - means removed/old. Green and + means added/final.

Github is only showing a few lines before/after the changed stuff. The rest is ignorable, at least in terms of the changes being referred to in this snapshot.

To get the "entire file", click the "3 dots" icon in the top right of the non-admin init_includes file and choose "View File". Then you can click the "Raw" button to get just the PHP code in text format.

https://github.com/zencart/zencart/pull/3972/files

[oavs]

Thanks again Dr. Issue is not resolved. We think it's e-Path. As it is processing the authorisation, if customer does not wait and leave the page , e-path payment goes through but orders do not get sent to admin.

We are in contact with Peter from e_path to place a note on the processing page some thing like " Page will re direct once your order payment is processed. Please stay on this page."

...or fix the e-path code to prevent this issue happening again.