WorldPay Module for ZenCartv1.3x

[duncanad]

I'll try to summarise here where things lie with regard to the new upgraded WorldPay integration. The following applies only to transactions in TEST mode. If anyone has put any LIVE transactions through an upgraded account could they please post the result.

Thanks to cosmicegg for allowing me to put through test transactions from my test site via her upgraded account.

This is what I get:

1. When I confirm the order I see a WorldPay page asking if I want to re-direct to the test server. This is as expected.

2. When I click the 'Redirect to TEST' button I see the normal WorldPay opening page with the 'Test Mode' message at the top. Again this is as I would expect. However I am not seeing all the card payment options I would expect - only Mastercard and Amex. All the card options available on your account should be available here, however loutka in his post above reports that this only applies to the TEST environmenet and that the full set of card payment options are available in the Live environment.

3. I choose 'Mastercard' and got the normal WorldPAy card details page with the 'Test Mode' message at the top. Again this is as expected.

4. I then input test card details and changed the 'Cardholder's Name' field as follows:

a) 'REFUSED' - result, refused transaction message.
b) 'AUTHORISED' - result, the WorldPay standard 'Thank You' page, no callback to my test site and therefore no order created in Zencart. Email received from WorldPay
c) 'ERROR' - reult, error message
d) 'CAPTURED' - result, the WorldPay standard 'Thank You' page, no callback to my test site and therefore no order created in Zencart. Email received from WorldPay

The above would appear to bethe same results as reported by Nickster99 above.

If you experience the same resulyts you should report the lack of a callback in b) and d) to WorldPay. It looks as if WorldPay are not attempting the callback. My test site works fine with my old, non-upgraded account. Others also report that their sites also worked perfectly prior to upgrade so I think WorldPay is where the problem lies.

Please post here any response you get from WorldPay.

According to the WorldPay documentation upgraded accounts should use the old WorldPay URL for LIVE transactions:
https://select.worldpay.com/wcc/purchase
and use a new URL for TEST transactions:
https://select-test.worldpay.com/wcc/purchase

I set up my test site to access the new TEST URL. If anyone else wants to try this you should set TEST MODE in admin to 100 or 101, and in includes/modules/payment/worldpay.php comment out line 53 and add a new line 54 as follows:

//	  $this->form_action_url = 'https://select.worldpay.com/wcc/purchase';
	  $this->form_action_url = 'https://select-test.worldpay.com/wcc/purchase';

Here are the results I got:

When I confirm the order in Zencart the first thing I get is a warning page from Internet Explorer telling me that the security certificate for the website (WorldPay) is dodgy and advising me strongly not to continue.

If I ignore the warnings I get to the normal WorldPay entry page (with Test Mode message) but again can only choose Mastercard or Amex. Choosing Mastercard and using test card data but leaving the 'Cardholder's Name' field as is I get the WorldPay 'Thank You' page but no callback to my test site. I also get an email from WorldPay. I get the 'Thank You' page, ie successful transaction, regardless of whether my TEST MODE is set to 100 or 101!

However if I replace the 'Cardholder's Name' field with 'REFUSED', 'AUTHORISED', 'ERROR' or 'CAPTURED' I get the predicted outcome. It looks like this is the way it is going to have to work from now on.

The main issues here are the problem with the security certificate and the lack of the callback. If you get the same results as me - pester the life out of WorldPay. The whole point of the TEST environment is to test that the callback works!

Incidentaly if you try to access the new TEST URL via a non-upgraded account it won't work - you will get an error message (and a certificate problem warning).

Alan

[duncanad]

MD5 is not required, but if you use it you need to set it up both in the WorldPay module admin and at the WorldPay end. If you don't do both it will not work.

Alan

[duncanad]

loutka,

For secure callback you need to set the callback URL in the WorldPay control panel to:
https://<wpdisplay item="MC_callback"

You also need to change some code in incudes/modules/payment/worldpay.php at about line 128 from

      $callback_url = zen_href_link(FILENAME_WPCALLBACK, $zenId);
      $worldpay_callback = explode('http://', $callback_url);

to

      $callback_url = zen_href_link(FILENAME_WPCALLBACK, $zenId, 'SSL');
      $worldpay_callback = explode('https://', $callback_url);

Alan

[loutka]

loutka,

For secure callback you need to set the callback URL in the WorldPay control panel to:
https://<wpdisplay item="MC_callback"

You also need to change some code in incudes/modules/payment/worldpay.php

Hi Alan,
I have made those changes and now my callback doesn't work.

Before I was redirected back to our site, but with broken SSL, now I'm not redirested at all (just end on "Thank you, your payment was successful" page).

And Order is not processed in the Zen-Cart.

[loutka]

So there are two settings:
1) Redirected back to our website with no SSL
2) No redirection with working SSL

None of these is acceptable

The site is live, with payments in test mode... Need to fixed this asap... No response from WP about callback or SSL...

Any other suggestions?

[duncanad]

Loutka,

Did you set the callback URL in the WorldPay Control Panel in the TEST environment and not the PRODUCTION environment?

Alan

[loutka]

Did you set the callback URL in the WorldPay Control Panel in the TEST environment and not the PRODUCTION environment?

Yep! I changed setting in TEST to:
https://<wpdisplay item="MC_callback">

but you said to change it to:
https://<wpdisplay item="MC_callback"

I thought you forget closing brackets... So I tried it both ways...

It's same - change is just when I modify worldpay.php in Zen-Cart.

As I said:
1) no redirection when $callback_url set to contain https
2) no SSL when $callback_url not set to have https

Loutka

[duncanad]

Loutka,

Sorry about the typo - yes there should be a closing bracket.

I would change everything back to non SSL mode - this is the way it was working for you before anyway.

Is your site now working in LIVE mode? Do you get the same SSL error in LIVE mode?

Alan

[loutka]

Is your site now working in LIVE mode? Do you get the same SSL error in LIVE mode?

Payments are still set to work in TEST mode, because I don't want to set to LIVE mode, before I'm sure all transactions are secure.

Our site is live - costomers are coming and they want to shop...

Thanks, Loutka

[duncanad]

Loutka,

I have discovered that two of my customers have upgraded accounts which appear to have been working perfectly in LIVE mode for some time. Now that I know they have been upgraded I have been able to do some testing on them. One of them works perfectly in TEST mode (apart from the no VISA payment option issue) and the other also works but I get a warning message in IE just prior to callback asking if I want to view both secure and non secure elements on the page. If I click 'Yes' the callback completes successfully.

I have no idea why I am getting this warning message in IE - it doesn't happen in Firefox - and for only one of the accounts although I am using the one Zencart site for testing both. This warning is not necessarily a security issue. It just means that IE thinks there are some elements on the page which are being called by http rather than https e.g. a script or image called from an external URL. My guess is that this may not happen on a live transaction and even if it does it's an annoyance rather than an issue.

I suggest that now the callback is working in TEST mode you try putting through a low value LIVE transaction to test what happens in LIVE mode.

If you do this could you please post back here with the result.

Alan