WorldPay Module version 2.0 - Support thread

I know Philip replied but for anybody else stuck with this here's what i did to remove the visa / mastercard dropdown box.

In the file tpl_checkout_payment_default.php in includes\templates\template_default\templates in the new worldpay mod version 2.08 at line 148 find the following code:

<!-- BOF Draw CC dropdown box -->
<?php
//This assumes that the Worldpay is your FIRST in your sort order in the ADMIN > Payment > Modules
//If not then change the value of $i to match where in the order you want it
if ($i==0)
{
    //Create the array of credit cards as per Worldpay documentation
    $cc1[] = array('id' => 'VISA', 'text' => 'Visa');
    $cc1[] = array('id' => 'MSCD', 'text' => 'MasterCard');
    echo zen_draw_pull_down_menu("paymentType", $cc1,'','',''); 
}
?>
<!-- EOF Draw CC dropdown box -->

and either commment out or delete it. That's it!

philip_clarke:

That sounds interesting, that's a redirect that has appeared further down the chain than the password check. Since you get the success email then a) worldpay is talking to the server, b) the password is correct.

So have you checked if you have suhosin installed on the server (in admin > modules > payment > worldpay) it should tell you.

What happens if you put something in your cart, do all the select shipping things and then cancel in worldpay before you "pay" do you get back to the site with a cancellation message or are you re-directed to a login screen to re-establish the session. The most likely cause for a 302 is that your site has not re-established the session when worldpay sent through the details. "OR" and I have seen this once before, sometimes the website doesn't store the payment method in the session and it re-establishes the sessions then goes, oops not payment method and throws worldpay back to a login screen. As yet the cause of this one is unknown, the site it was seen on was a very busy one, so if suhosin is not causing the problems then I'd like to see the site (PM) me, to try and get to the bottom of it.

Philip.

I have the same problem as above. My payment goes through as i get the notification from Worldpay but customer is not returned to my site and I don't get details of the order. When I cancel the order I get this from worldpay:

Secure Payment Page
Sorry, there was an error in processing this transaction:
No payment information is available. This means that one of the following has occurred:
you have completed or cancelled your payment
you have cookies disabled. To complete your payment, enable cookies by changing the privacy settings in your browser. Then return to the merchant's site and resubmit your payment
your session at RBS WorldPay has timed out. Please return to the merchant's site and resubmit your payment.

I can't work out how to check suhosin. I went to the worldpay payment module but can't find it - does that mean I don't have it? Not even sure what it is.

Thak you
Suekay

If you go into your admin section and go to tools > server version/ info and look through that page, if you have suhosin then it will be listed there. If you don't have suhosin then something may be incorrect in your session set up in admin > configuration > sessions as it is very rare that on a correctly configured site, that cancelling the transaction in worldpay doesn't get you back to your store.
Thank you
Philip.

philip_clarke:

If you go into your admin section and go to tools > server version/ info and look through that page, if you have suhosin then it will be listed there. If you don't have suhosin then something may be incorrect in your session set up in admin > configuration > sessions as it is very rare that on a correctly configured site, that cancelling the transaction in worldpay doesn't get you back to your store.
Thank you
Philip.

Hi Philip,

I can't find suhosin in server version info. I've reinstalled the mod incase I made a mistake. I hit the remove button in the payment modules section first then reinstalled each file. When I installed it again the infomation in all the fileds was already there, is this correct for a reinstall, I thought I'd have to write all the passwords in again? Not sure what to do now, any ideas?
Thank you
Suekay

It is totally correct that when you remove and install the module all of the passwords are correct (because otherwise upgraders would lose all their information). What happens now is that you PM with details of what you have in your session configuration (becuase it's not generally stuff you want to publish).
Thank you
Philip.

Well I have read and searched and not found so I will ask the question.

Got the Worldpay module installed and working great, both test and live (thx Philip). Removed the 2nd drop down leaving just the drop down that allows the cards that are set in admin.

However (you knew there would be one), my client has setup paypal through Worldpay. I do not have an option to add the paypal "card" as an option to the drop down list. If I select "I will choose later" for the card option I can pick paypal when I get to the worldpay site and that seems to work ok.

So finally to the question, can I add Paypal as an option on the dropdown? and have it automatically go to Worldpay and redirect to paypal?

Thx,
Slan

slannesh:

Well I have read and searched and not found so I will ask the question.

Got the Worldpay module installed and working great, both test and live (thx Philip).

I don't believe it, someone that actually had worldpay work between live and the test side of their admin ?? All the problems above by suekay were over at worldpay's side, it appears that they are still having problems with data caching, in one case suekay having copied over her data to the "live" side of things, only to find that it was submitting 3 day old data to her site, and worldpay were complaining that it was the modules fault. The end result was that the module has not changed, suekay's data in the module has not changed, but the data worldpay is sending has finally stopped being cached and her site is now working perfectly.

slannesh:

So finally to the question, can I add Paypal as an option on the dropdown? and have it automatically go to Worldpay and redirect to paypal?

There is probably nothing that you can do, I can however try and find any details in the knowledgebase about how to transfer data and see if the module can be configured to pass the options through to paypal via worldpay. I would not hold my breath if I were you though, since the change to rbsworldpay all of my bookmarked information accumalated through debugging this module are useless, when they changed the domain name and didn't bother to redirect all the changed pages, so it may take some time.

Philip.

So far there is no ability to clikc through to paypall via worlpay. This article

https://crm.rbsworldpay.com/cgi-bin/rbsworldpay.cfg/php/enduser/std_adp.php?p_faqid=828&p_created=1235576117&p_sid=-D2fulAj&p_accessibility=&p_redirect=&p_lva=777&p_sp=cF9zcmNoPTEmcF9zb3J0X2J5PSZwX2dyaWRzb3J0PSZwX3Jvd19jbnQ9NTUsNTUmcF9wcm9kcz0mcF9jYXRzPSZwX3B2PSZwX2N2PSZwX3BhZ2U9MSZwX3NlYXJjaF90ZXh0PXBheXBhbA**&p_li=&p_topview=1

suggests that the page that is avoided by using selecting the credit card from a drop down, is mandatory for using paypal through worldpay. What I would suggest is that admin is used to disable the credit card select box or selector, and then the test "pay by credit card using worldpay" is changed in the define page under /language/english/worldpay.php be changed to something like "pay by worldpay or paypal".

Unless someone can find the alternate code, I can't put in a feature into the module if it doesn't exist.

Sorry

Philip

Just found the original page detailing the skipping fo the payment type via google and guesswork

https://crm.rbsworldpay.com/cgi-bin/rbsworldpay.cfg/php/enduser/std_adp.php?p_faqid=790&p_created=1235487294&p_topview=1

Avoiding this page by being able to select paypal from a drop down is not an option from the list they provide.

Thank you
Philip.

Thanks Philip,

I will keep an eye on the thread to see if you can figure out how to pass the request to Worldpay to use Paypal (but I won't hold my breath).

Glad I didn't read about any difficulties going from test to live, it would have scared me witless!

Cheers,
Slan

Hi

I was wondering if you could help me, sorry if this is the wrong place for it... but I need to create a payment process for a client for a little known payment gateway that no module exists. I hope you dont mind but I used the worldpay module as a basis for this process. But i have a problem and wondered if you would be so kind to help. It seems the problem is reported for the WP module also...

My payment process callback does not work. I think its because the customer_id in the session is not set and the checkout_process file would therefore redirect the callback request to the login page.

So I just wondered how the wp_callback recreates the customer_id session so to avoid the session check and redirection in wp_checkout_process? Even if I remove this check it doesnt work, I assume that Zencart needs it to link the request to the order.

Thanks a lot

Worldpay is sent a return URL that includes the session information, the zenid. When payment is completed worldpay sends back the completed payment information as well as a secret password and the session id.

(Previous versions of the module didn't have the password so teh whole payment gateway could be bypassed)

Unless your gateway can send back the session id (the variable zenid) AND you have suhosin disabled (if installed on the server) AND the session settings under the configuration menu in Admin are set to allow 3rd parties to recreate the session, then it would not be possible for zencart to marke the session as paid and recreate the shopping cart.

It should also be noted that
[LIST]
[]Worldpay is a non-standard module and uses a different check in moudle to any other zen cart installation as in the final stages of a completed payment, worldpay sucks the entire completed payment page into its secure server and then displays it under it's URL
[]This module does not have any "problems", it works perfectly well providing that the criterea above are met and worldpay is not cachig information.
[*]This module is more complex than others and provides more information to the shop owner, like how the credit card was validated and if addresses/ 3-digit codes matched and so might not be the best candidate to base a new module on.
[/LIST

In all other modules ZC still needs the session to be recreated and normally the way of doing this is passing the session if in the return URL. A major thing to watch out for is that there must be checks and $payment_modules->before_process(); MUST fail and redirect and EXIT if the checks don't pass (like wrong password, no MD5, wrong session number) if the before_process function does not fail, then the order will be marked up as paid regardless whether the gateway has said it passed or not. In oscommerce and some payment modules on ZC this does not happen which means a hacker can mark the order as paid while bypassing the gateway.

Philip.

Hi Philip

Thanks very much for your detailed response. I was using zenid in the process, but still counldn't get it to work so thought it was not using it anymore, so removed it. Now I know I need to put that back in and something else is the issue. Perhaps its "the session settings under the configuration menu in Admin are set to allow 3rd parties to recreate the session". I cant see this in the Sessions configuration menu. If this is "Recreate Session", then I have it as true.

I will keep trying. Thanks a lot.

Okay removing the zenid is certainly going to not re-establish a session. Also this module looks for a password posted to it from the gateway (called callback_pw or similar), so that would also be a reason for failure. In session configuration you also need:

Check SSL Session ID False
Check User Agent False
Check IP Address False

otherwise it's not going to work IF the gateway you are working on is like worldpay where it sucks in the webpage and displays it under it's own URL whereas if it is not then your mileage may vary, something has to receive the "I've been paid" message, with paypal and google there is a totally different page that receives this data, whereas worldpay combines it with the successful checkout page, so whether worldpay was the correct module to use as a basis really does depend on the gateway set up and how it transfers information and returns the client.

Another small point, a lot of people when testing limit access to their web server as they don't want customers to be visiting and placing orders on a test site, they then forget that to mark a shopping cart as paid, the gateway does need access too, so frequently I get "it's not working" messages from people when the problem is the lack of location of the server on the net.

Philip.

Thanks for your help. I added the zenid back in. From the payment gateway it is sent back as "$_POST['donorref']". But I cant see how to re-establish the session based on this value sent back. I will keep looking.

Am not using the password at the moment, but once I can get the callback to work, I can then add this feature to increase security. The payment gateway does not pull in the page like Worldpay, but sends a POST request to a callback URL. It includes a key to check if its come from them, so i can use that also to prevent bypassing the payment gateway. I just want to get the callback to work first.

Thanks for your help - surprisingly there's little information available on creating new payment modules.

P.S. I dont want to fill your Worldpay thread up about this, so I have created a new one here for my issue as I think it may warrant its own thread: http://www.zen-cart.com/forum/showthread.php?p=745605#post745605. Thanks

I want to thank you for such a great module. All has been working well for the last month or so since we went live, but today we have had a problem in the back end.

I was going to enter a payment module, but these errors stop me from doing this.

Warning: include(/ (my directory structure) /www/includes/languages/english/modules/payment/worldpay-old.php) [function.include]: failed to open stream: No such file or directory in / (my directory structure) /admin/modules.php on line 173

Warning: include() [function.include]: Failed opening '/ (my directory structure) /www/includes/languages/english/modules/payment/worldpay-old.php' for inclusion (include_path='.:/usr/local/share/pear') in / (my directory structure) /admin/modules.php on line 173

Fatal error: Cannot redeclare class worldpay in / (my directory structure) /www/includes/modules/payment/worldpay.php on line 15

What on earth has happened? We haven added any new modules etc to the back end the site has just been zooming away doing what its meant to do...

Please help... :unsure:

On a second note, I have configured the back end part to allow american express, visa debit and a few other cards, but they dont show up in the drop down list, how can these extra card options be shown???

Out2lunch

look for a file

include/modules/payment/worldpay-old.php

it looks like you have an old file there looking for a define file under enlgish. I am not sure but it looks like someone has turned on error reporting on your server. (if it's not under your control someone may have rebooted).

Thanks for the fast reply, when you say an old file do you mean from an earlier version of the module? As I have upgraded the worldpay module to the latest version before we went live.

If this is the case should I delete the file, or replace it with one from the latest version?

I do not have access to the server, as we are hosted by someone else, so it is entirely possible that they have restarted it.

Thanks again...

I am pretty sure that there will be a file

/www/includes/modules/payment/worldpay-old.php

on the server causing the problem and that should be removed. ZC loads everything file as module in the payment directory, so even if it is defunct then it will load and I think that is causing the problem, moving it or renaming it with a different extension should solve the issue.

Philip.