Paypal Website Payments Pro Upgrade - 3D SECURE 2022

Many of you will have noticed that Website Payments Pro for Zen Cart is now throwing up errors and not usable.

Hopefully this post will get the ball rolling with regards to getting Payments Pro Upgraded so it works with the latest Zen Cart Versions.

I invite other developers that might be interested in getting this module upgraded so we can continue to use a Paypal Credit/Debit Card form on our Zen Cart Websites without errors or finding that the current Payments Pro becomes deprecated. This must work across the Standard Checkout, One Page Checkout (lat9) and Bootstrap. It must also implement 3D Secure.

So according to Paypal this is where we start:

https://developer.paypal.com/docs/checkout/advanced/integrate

Nick1973:

Many of you will have noticed that Website Payments Pro for Zen Cart is now throwing up errors and not usable.

Hopefully this post will get the ball rolling with regards to getting Payments Pro Upgraded so it works with the latest Zen Cart Versions.

I invite other developers that might be interested in getting this module upgraded so we can continue to use a Paypal Credit/Debit Card form on our Zen Cart Websites without errors or finding that the current Payments Pro becomes deprecated. This must work across the Standard Checkout, One Page Checkout (lat9) and Bootstrap. It must also implement 3D Secure.

So according to Paypal this is where we start:

https://developer.paypal.com/docs/checkout/advanced/integrate
A posting of the errors received would be helpful!

Also, is this only in the UK? I haven't heard of issues in the US.

WPP cannot be ungraded for 3DS v.2 as Cardinal are no longer handling Paypal's 3DS processing from October when 3DS v2 will be required in UK and EU by Visa and Mastercard. (Currently they process 3DSv.1.0) Paypal have no plans to continue to support 3DS in WPP past that date.
If you had Cardinal credentials supplied prior to March 2022 WPP should still work until then. (Match 2022 3DS became a legal requirement for cc transactions in the UK)

*At the moment the US does not require 3DS for cc transactions, hence no interest from the devs to sort something out as WPP will continue to work for US based sites. There is no mention of it being introduced in 1.58 on Github, at least as far as I can see.

Paypal is deprecating WPP and has replaced it with Paypal Commerce. It's completely different and (afaik) Paypal themselves will be handling the 3DS verification.
I've been asking for months if/when Commerce will be integrated into Zen Cart but have had no response apart from "we will tell you when", been told to stop posting about it and had a thread closed.

Open Cart and Woocommerce are two open source carts with Commerce integration in the Paypal directory.
https://www.opencart.com/index.php?r...nsion_id=38358
https://woocommerce.com/products/woo...ypal-payments/
I had hoped this would mean ZC integration would not be too big a job but no-one has shown any interest in writing it. I'd be interested in seeing if we could get a group together to pay a developer, but not sure how many are actually interested. The only figure I've been given is too high - it will be cheaper to switch to another cart, even with paying someone to mimic my ZC design and transfer everything over.
As it stands, if something isn't sorted out by end of August I will have to move to a different cart as there appears to be no working cc module for ZC with 3DS functionality.

*Also, is this only in the UK? I haven't heard of issues in the US.

No, it is the UK and the EU. The US does not use 3DS yet.
I think the reason it seems to be only UK based cart owners having the issue is that Paypal is not as common as a payment processor in the EU.

Another reason I'm glad we dropped PP in favor of Square. If you have decent sales, Square will offer you a better rate. Contact them before you sign up. And, they refund fees when you refund customers (unlike PP). Keep ZC, ditch PP.

You can also help out ZC by using their affiliate link:

https://squareup.com/t/f_partnerships/d_partnerpage/p_zencart/c_general/o_free_processing/u_signup/l_us?route=signup%3Fsignup_token%3D6BB5B2E676

I'm in the US, but a quick Google search says they are available in the UK and EU, but I did not check the details.

gsh68:

I had hoped this would mean ZC integration would not be too big a job but no-one has shown any interest in writing it. I'd be interested in seeing if we could get a group together to pay a developer, but not sure how many are actually interested. The only figure I've been given is too high - it will be cheaper to switch to another cart, even with paying someone to mimic my ZC design and transfer everything over.

switching to another cart is not a decision to be taken lightly...

and the idea that it may be cheaper for one site does not mean it is cheaper for all sites.

lat9:

A posting of the errors received would be helpful!

Can I email these please?

As an example they start with:

Dear store owner,An error occurred when attempting to initiate the payment-validation transaction. As a courtesy, only the error "number" was shown to your customer. The details of the error are shown below.12002 Processor Decline.This transaction cannot be processed due to either missing, incomplete or invalid 3-D Secure authentication values.Zen Cart message: 12002 [] Processor Decline. - This transaction cannot be processed due to either missing, incomplete or invalid 3-D Secure authentication values.

Nick1973:

Can I email these please?

As an example they start with:

Dear store owner,An error occurred when attempting to initiate the payment-validation transaction. As a courtesy, only the error "number" was shown to your customer. The details of the error are shown below.12002 Processor Decline.This transaction cannot be processed due to either missing, incomplete or invalid 3-D Secure authentication values.Zen Cart message: 12002 [] Processor Decline. - This transaction cannot be processed due to either missing, incomplete or invalid 3-D Secure authentication values.
You can send them to my direct email; PM me if you don't have it already. Additionally, which version of Zen Cart is being run?

If possible, could/would you enable the payment method's Debug Mode, setting it to "Log File" and send me one of those, too?

I would be interested in finding more about this, I am in the UK also. Guess we are only 3 months away from them turning off all paypal pro support.

HeathenMagic:

I would be interested in finding more about this, I am in the UK also. Guess we are only 3 months away from them turning off all paypal pro support.

From Paypal -

Strong Customer Authentication (“SCA”) is now fully enforced across the UK and Europe, which requires you to ensure you have 3DS 2.0 enabled to process card payments online.

3DS is the industry standard protocol that allows card issuers to authenticate their cardholders when making online transactions. It is supported and mandated by all major card networks.

Visa and Mastercard have mandated the use of the new EMV 3DS (“3DS 2.0”) protocol in order to ensure that users are provided the best experience and regulatory requirements are supported.

Visa and Mastercard have announced that from 14 October 2022 they will no longer support 3DS 1.0. Authentication requests using this version of the protocol will fail after this date.

To continue to process card payments after 14 October 2022 please contact your partner platform and upgrade to a 3DS 2.0 compliant solution.

Nick1973:

From Paypal -

Strong Customer Authentication (“SCA”) is now fully enforced across the UK and Europe, which requires you to ensure you have 3DS 2.0 enabled to process card payments online.

3DS is the industry standard protocol that allows card issuers to authenticate their cardholders when making online transactions. It is supported and mandated by all major card networks.

Visa and Mastercard have mandated the use of the new EMV 3DS (“3DS 2.0”) protocol in order to ensure that users are provided the best experience and regulatory requirements are supported.

Visa and Mastercard have announced that from 14 October 2022 they will no longer support 3DS 1.0. Authentication requests using this version of the protocol will fail after this date.

To continue to process card payments after 14 October 2022 please contact your partner platform and upgrade to a 3DS 2.0 compliant solution.

Yes I also got the email this morning. I originally got told to turn off back in March, but they must have walked back the deadline (I got call from Paypal). I put back on shortly after. I would be interested in helping towards development if there is enough of us to get together and do it. I do also donate when I can to zencart itself, but I understand this might not be in their remit as it specific to certain zones.

HeathenMagic:

Yes I also got the email this morning. I originally got told to turn off back in March, but they must have walked back the deadline (I got call from Paypal). I put back on shortly after. I would be interested in helping towards development if there is enough of us to get together and do it. I do also donate when I can to zencart itself, but I understand this might not be in their remit as it specific to certain zones.

It would be a great shame if they don't do something about it as there are alot of Zen Cart Users, and developers across Europe and in the UK. To me, Paypal and the Square Module are now important payment options and should be treated as a priority development. Otherwise it basically locks European and UK users out of using paypal. The OLD Square module will keep functioning until October as well. There is another thread for that and the new SquareWebPay module though so best keep to the topic :-)

Like you I am also happy to help in whatever way I can with development.

Nick1973:

It would be a great shame if they don't do something about it as there are alot of Zen Cart Users, and developers across Europe and in the UK. To me, Paypal and the Square Module are now important payment options and should be treated as a priority development. Otherwise it basically locks European and UK users out of using paypal. The OLD Square module will keep functioning until October as well. There is another thread for that and the new SquareWebPay module though so best keep to the topic :-)

Like you I am also happy to help in whatever way I can with development.
It in fact locks UK/EU Zen Cart users out of accepting credit card payments. We could still use the Paypal Express button after October, but there is no current working plugin that is 3DS 2.0 compliant, as far as I know.*

*The Square Web Pay module might be compliant, but I am not sure. However many store owners have valid reasons for wanting to keep Paypal as their payment processor, from lower fees to immediate access to funds.

gsh68:

It in fact locks UK/EU Zen Cart users out of accepting credit card payments. We could still use the Paypal Express button after October, but there is no current working plugin that is 3DS 2.0 compliant, as far as I know.*

*The Square Web Pay module might be compliant, but I am not sure. However many store owners have valid reasons for wanting to keep Paypal as their payment processor, from lower fees to immediate access to funds.

Sorry I should re-phrase what I said, It in fact locks UK/EU Zen Cart users out of accepting credit card payments apart from using the Paypal Express Checkout Button. Which is not a very good option as in my experience it limits sales as not everybody knows what to do when they go over to paypal. There isn't an immediately obvious way of paying by credit card. Some people get to the Paypal Login Screen and do not realise you can also pay by card.

I use both Paypal and Square, but not the Square Web Pay Module yet as I do not believe it is totally ready. There are issues with OPC, and I know some people are having other issues with it. So I am waiting until there is an update that works well with OPC.

Nick1973:

It would be a great shame if they don't do something about it as there are alot of Zen Cart Users, and developers across Europe and in the UK. To me, Paypal and the Square Module are now important payment options and should be treated as a priority development. Otherwise it basically locks European and UK users out of using paypal. The OLD Square module will keep functioning until October as well. There is another thread for that and the new SquareWebPay module though so best keep to the topic :-)

Like you I am also happy to help in whatever way I can with development.

Yes its a great shame they are doing this. I turned off when told to by Paypal, and a few regulars moaned, I guess myself I prefer to enter card details rather than paypal so understandable. Easier to track payments on statements. I tried Square but they suddenly halted service for me, very finnicky ts and cs for certain business types.
Yes definitely I would like to chip in.

I also agree, I tried to explain to customers when they had difficulties, but it apparently is not easy to recognise it can be used for just card. Apparently a few regulars said it would not let them at all.

HeathenMagic:

I tried Square but they suddenly halted service for me, very finnicky ts and cs for certain business types.
We experienced the same issue with Square and we had to wait 90 days to receive the monies they had processed. No opening for arbitration or compliance and we were told we could never use them again even for the business that sold nothing against their TOS.

Hope the Paypal Pro module does indeed stay updated for us and those on the other side of the pond from us.

gtgeorge:

We experienced the same issue with Square and we had to wait 90 days to receive the monies they had processed. No opening for arbitration or compliance and we were told we could never use them again even for the business that sold nothing against their TOS.

Hope the Paypal Pro module does indeed stay updated for us and those on the other side of the pond from us.

Very strange how they run things. I even tried to contact them via email, even facebook messaging several times. No reply. Must be good for some people, but never again for us.

IF you have a business account with PayPal, you can specify what the customer sees at payment and bypass their attempt to capture a customer.

https://www.paypal.com/us/smarthelp/article/how-do-i-accept-credit-cards-with-checkout-using-the-guest-checkout-option-faq3226

So it appears that the devs still have no intention of integrating Paypal Commerce, so how many of us UK/EU store owners are willing to chip in for a pro written module?
And how do we go about finding someone to write it? I assume knowledge of Zen Cart is required (we aren't all on the same version...), so we can't just look for someone on the Paypal forums?

gsh68:

So it appears that the devs still have no intention of integrating Paypal Commerce, so how many of us UK/EU store owners are willing to chip in for a pro written module?
And how do we go about finding someone to write it? I assume knowledge of Zen Cart is required (we aren't all on the same version...), so we can't just look for someone on the Paypal forums?

I am willing to chip in. I am talking to a developer and not sure if this is in their remit, will find out. I did read somewhere OsCommerce has this in their software, I could be wrong, not sure if the code is similar anymore though.