
Originally Posted by
gsh68
I'm afraid I do not know the specifics.
lat9 did the upgrade including the Paypal mods.
It's possible the Paypal upgrades in 1.57d are the same - it may be worth asking lat9.
It looks like most (unfortunately, not all) changes that @gsh68 indicates have been rolled into the zc157d release. I'll be updating the Zen Cart repository with the changes required for /includes/modules/payment/paypalwpp.php as well as a minor change to /includes/modules/payment/paypaldp.php that are required for continued PayFlow processing.
That 'minor' change to /includes/modules/payment/paypaldp.php (which should be done only for 3DS processing) can be found on line 125 of the module, changing the default value for the variable:
Code:
//-bof-Indicating non-support, since the 3DS iframe doesn't support the AJAX interface
var $collectsCardDataOnsite = false;
//-eof-Indicating ...
Note: It's very important that a site's samesite cookie setting is none, since the secure-auth will result in an iframe being displayed (for proper 'samesite cookie' support, the site should be running on a PHP version >= 7.3). To do this, create a file named samesite_cookie.php in the site's /includes/extra_datafiles sub-directory that contains the following
Code:
<?php
// -----
// Identify that the site uses the 'samesite' cookie setting of 'None', since the
// Payflow-UK payment can result in an iframe to gather the 3DS verification.
//
if (ENABLE_SSL === 'true') {
define('COOKIE_SAMESITE', 'none');
}
Bookmarks