Stripe.com payment integration module

[Fjolsvith]

I've been running the Stripe payment module for nearly two years and am finally getting around to addressing a problem with it.

The typical order amount on my store is $4-6k, which can cause issues for a customer on checkout. For example, they possibly do not have sufficient funds in their bank account (if using a debit card). Or, their card has a daily limit which is less than the order amount. Or, their fraud protection kicks in, declining the transaction.

When one of these declines happens for a customer, Zencart redirects back to Step 2 of the checkout process and gives the error message of "Please confirm the terms and conditions bound to this order by ticking the box below." The Payment module should be telling the customer why their card is being declined. It is frustrating for me because people try to order 2-3 times and then quit, probably with misgivings about the integrity of my store.

Is there anywhere in the module for me to look to see what can be modified to make it give a detailed error description when the customer is returned to Step 2?

[Fjolsvith]

I'm reporting a bug in this payment module. It has to do with a customer who is trying to do a second purchase with a credit card, who once before had a successful purchase with the credit card using the Stripe payment module.

The second time the customer is checking out, the module fails to process the transaction if the customer has a prior StripeCustomerID returned by Stripe, and returns the customer to Step 2 of the checkout process. This value is tested for on line 399 of the file 'stripepay.php'.

[marton_1]

I'm reporting a bug in this payment module. It has to do with a customer who is trying to do a second purchase with a credit card, who once before had a successful purchase with the credit card using the Stripe payment module.

The second time the customer is checking out, the module fails to process the transaction if the customer has a prior StripeCustomerID returned by Stripe, and returns the customer to Step 2 of the checkout process. This value is tested for on line 399 of the file 'stripepay.php'.

Probably not much help! But I have customers who have had multiple successful purchases with the credit card using the Stripe payment module even this week one who managed to make an incorrect but successful duplicate payment in under one minute.
If they are returned to Step 2 of the checkout process then it may be their credit is not good enough for their purchase?
Did you check the Stripe.com dashboard for error messages?

[Fjolsvith]

Probably not much help! But I have customers who have had multiple successful purchases with the credit card using the Stripe payment module even this week one who managed to make an incorrect but successful duplicate payment in under one minute.
If they are returned to Step 2 of the checkout process then it may be their credit is not good enough for their purchase?
Did you check the Stripe.com dashboard for error messages?

The Stripe dashboard doesn't even show a failed transaction. Had two returning customers in the last two weeks attempt the purchase. After the recent one, I verified the problem by myself making a purchase and then trying a second one (which failed). This is frustrating as heck.

Since there's no failed transaction, it isn't an issue with the card being declined.

On your site, if a customer's card is declined, do they get sent back to Step 2 with an error message explaining why it is declined?

[alexexela]

On further research it seems that as this plugin redirects you to the Stripe site where everything happens then probably nothing needs to be changed; anybody have a different view?

With my understanding, this module does not support the new SCA requirement. There is no procedure in this module that allows the customers to go to their bank's 3D Secure authentication page and then come back to your zen cart website. From my reading on Stripe's API, the "Payment Intents API" is the new standard, while the older "Charge API" (that this module uses) does not support SCA.

It doesn't mean that this stripe plugin will stop working after September. But there is a chance that the bank will reject the customer's credit card (with "do_not_honor") because your site cannot go to the bank's 3D Secure authentication page.

We need an update to this.

[hairydog]

We need an update to this.

I think you are correct, but is anyone working on it?

[gernot]

I've been in touch with Stripe, their customer support tells me SCA is mostly for European locations and that we can still continue to use the non-SCA methods elsewhere.
I am waiting for a rep to get back to me about the implications of SCA for other locations, including Japan.

Anyone know if Zen Cart use qualifies for a better deal, like it does with some other payment processors? I will ask, but I'd prefer to hear an answer from this side also in case Stripe's customer support simply does not know.

[gernot]

Never heard back from Stripe about SCA implications as they promised, will write them again tomorrow.
In the meantime, I installed the (latest) v1.3.4 of the Stripe module.
API version is still set at v1.3.2, not sure if that should be updated in includes/modules/payment/stripepay.php

$this->api_version = 'Stripe Payments v 1.3.2 for ZenCart';

I added JPY (Japanese Yen ) to the configuration in the same file for the configuration parameter MODULE_PAYMENT_STRIPEPAY_CURRENCY.
No idea if that will be all that is required, perusing the code did not bring up any obvious issues to me (apart from that the comments are also a bit dated in part).
I'll report back when I get a Stripe account here in Japan and try to integrate it.
Plus SCA-related info when I get some.

[gernot]

Zen Cart 1.5.6c
DB patch level: 1.5.6
PHP: 7.3.6-1

Quick update. Got my Stripe account set up today on the Japan site, verified and all, test and live API keys obtained and inserted into Stripe plugin configuration.
Sadly, a test brings up a well-known error during checkout in step 3 when pressing order confirmation button.
First we have the blank screen with just the following text displayed:

WARNING: An Error occurred, please refresh the page and try again.

On refreshing the page (https://***/shop/index.php?main_page...t_confirmation) there is the error displayed in the Zen Cart checkout confirmation page:

Must provide source or customer

.
Checking the log on the Stripe site (actually quite impressive debugging support there) does not enlighten me yet, nor does Stack Overflow where this is discussed in one instance:
https://stackoverflow.com/questions/...ce-or-customer

So I guess I'll be reading docs and figuring out what Javascript (I assume) is not populating a field.

For reference, the debug log:

***/shop# cat logs/myDEBUG-20190725-004321-968029.log
[25-Jul-2019 00:43:22 Asia/Tokyo] Stripe Notice: Undefined property of Stripe_Charge instance: customer
[25-Jul-2019 00:43:22 Asia/Tokyo] Stripe Notice: Undefined property of Stripe_Charge instance: disputed
[25-Jul-2019 00:43:22 Asia/Tokyo] Stripe Notice: Undefined property of Stripe_Charge instance: fee
[25-Jul-2019 00:43:22 Asia/Tokyo] Stripe Notice: Undefined property of Stripe_Charge instance: invoice
[25-Jul-2019 00:43:22 Asia/Tokyo] Stripe Notice: Undefined property of Stripe_Object instance: address_city
[25-Jul-2019 00:43:22 Asia/Tokyo] Stripe Notice: Undefined property of Stripe_Object instance: address_country
[25-Jul-2019 00:43:22 Asia/Tokyo] Stripe Notice: Undefined property of Stripe_Object instance: address_line1
[25-Jul-2019 00:43:22 Asia/Tokyo] Stripe Notice: Undefined property of Stripe_Object instance: address_line1_check
[25-Jul-2019 00:43:22 Asia/Tokyo] Stripe Notice: Undefined property of Stripe_Object instance: address_line2
[25-Jul-2019 00:43:22 Asia/Tokyo] Stripe Notice: Undefined property of Stripe_Object instance: address_zip
[25-Jul-2019 00:43:22 Asia/Tokyo] Stripe Notice: Undefined property of Stripe_Object instance: address_zip_check
[25-Jul-2019 00:43:22 Asia/Tokyo] Request URI: /shop/index.php?main_page=checkout_process, IP address: 192.168.0.3
#1 trigger_error() called at [***/shop/includes/classes/db/mysql/query_factory.php:171]
#2 queryFactory->show_error() called at [***/shop/includes/classes/db/mysql/query_factory.php:143]
#3 queryFactory->set_error() called at [***/shop/includes/classes/db/mysql/query_factory.php:270]
#4 queryFactory->Execute() called at [***/shop/includes/functions/functions_general.php:952]
#5 zen_db_perform() called at [***/shop/includes/modules/payment/stripepay.php:495]
#6 stripepay->after_process() called at [***/shop/includes/classes/payment.php:254]
#7 payment->after_process() called at [***/shop/includes/modules/pages/checkout_process/header_php.php:17]
#8 require(***/shop/includes/modules/pages/checkout_process/header_php.php) called at [***/shop/index.php:36]
--> PHP Fatal error: 1364:Field 'stripe_object' doesn't have a default value :: INSERT INTO stripe_data (orders_id, stripe_charge_id, customers_id, stripe_amount, stripe_amount_refunded, stripe_currency, stripe_customer, stripe_description, stripe_disputed, stripe_fee, stripe_invoice, stripe_paid, stripe_address_city, stripe_address_country, stripe_address_line1, stripe_address_line1_check, stripe_address_line2, stripe_address_zip, stripe_address_zip_check, stripe_country, stripe_fingerprint, stripe_cvc_check, stripe_name, stripe_last4, stripe_exp_month, stripe_exp_year, stripe_type) VALUES ('34', 'ch_1EzmcgIvuX80g3UFyVX17IG5', '2', '58290', '0', 'JPY', '', '<testemailaddresshere>', '', '', '', '1', '', '', '', '', '', '', '', 'US', 'lHfW1lpMAnH1N1Ea', 'pass', '<My Name>', '4242', '1', '2021', 'Visa') ==> (as called by) ***/shop/includes/functions/functions_general.php on line 952 <== in ***/shop/includes/classes/db/mysql/query_factory.php on line 171

Note: The email address is removed here in the post, it is actually a proper email format. Ditto for My Name.
I suspect perhaps the "US" is wrong, but that can be handled later.

[gernot]

Post #109 on this thread gives a suggestion to fix the missing stripe_object value:
https://www.zen-cart.com/showthread....92#post1320892
Will try this and report back.