[Done v1.3.7] Possible Linkpoint Bug?

[aerodynamic hippo]

I'm not sure if this is the right forum for this, or even if this is a bug, or if it's been posted before (I didn't find it in a search) so please move/delete as you see fit.

In any case, I was trying to install linkpoint for a customer, and I kept getting the 'card declined' error. I checked the db table and saw that I was getting the 'Invalid XML' message. After trying to fix it on my own, I called linkpoint tech support (very helpful), and they told me it was likely trying to send an invalid character.

Again, looking through the submitted fields in the DB, I saw that the ip field had a box in it, not an ip address. I asked tech support if that was a necessary field, they said no, so I went into the linkpoint api code and removed the references to it. The next transaction I tried went right through.

Now, I had set up the API for another client the week previous, and not had this issue - same host and everything - the only difference being that one was using SSL and one is not (as of yet, I'm trying to get them to get the cert).

The field in question is set by $_SERVER['REMOTE_ADDR'] - I don't know enough about SSL to know if that would prevent it from getting the address (I would imagine it would), but in any case since LP is part of the release now I thought you might like to know about the issue I had, and also if anyone else has and searches for LP that they might find this info.

[DrByte]

You might try adding this to your /init_includes/init_sanitize.php file:

/**
 * sanitize $_SERVER vars
 */
  $_SERVER['REMOTE_ADDR'] = preg_replace('/[^0-9.%]/', '', $_SESSION['REMOTE_ADDR']);

This will strip all non-numeric characters from the IP address. If there are no characters left, then there should be no error.

[tvadpro]

Running ZC 1.3.7 and the LinkPoint module doesn't connect if there is a special character anywhere in the packet. I added the code Doc suggested, put my amended init_sanitize.php in the overrides folder, and my next test threw this error:

Warning: strstr(): Empty delimiter. in /hsphere/local/home/sksadmin/shedkitstore.com/includes/modules/payment/linkpoint_api.php on line 86

I looked again at the file and discovered the code already exists at line 90. Doesn't seem to be doing much good, though, as orders fail whenever there is a special character in the billing address. After deleting the file from the overrides folder, I replaced the special character using the customer's account controls, tried the transaction again, and it went through.

This special character problem doesn't seem to affect PayPal IPN, but it blows YourPay orders every time. How does everyone else deal with it? Require customers to change their names or addresses?

You might try adding this to your /init_includes/init_sanitize.php file:

/**
 * sanitize $_SERVER vars
 */
  $_SERVER['REMOTE_ADDR'] = preg_replace('/[^0-9.%]/', '', $_SESSION['REMOTE_ADDR']);

This will strip all non-numeric characters from the IP address. If there are no characters left, then there should be no error.