WorldPay Module version 2.0 - Support thread

leisurering:

I have got it working! don’t use caps in your WP passwords, just use lowercase and its working fine. Thanks for this thread its been a great help!

Ok the last time you reported in, you stated that the callbackPW was not appearing in your emails. Now are you saying that it appears but only if it is lower case ?

If this is the case, then you need to go over your steps again, as to how you saved things in worldpay, because there is no changing of case in "the worldpay module", it would all be over at worldpay's ends.

It may be that while changing you password around, you've saved something in a different way (copy to production environment manybe ?) because previously there have been reports of WorldPay behaving oddly in setting values for the test side of things, and it's quite important that we be able to distinguish between "your world pay bug" and bugs that are in the ZC module.

Bigenuf:

I installed the new version 2.03 early this morning. I've had a few orders since then but none with any worldpay warnings. Everything looks spot on but will have to wait until a warning is issued to see that it fully works:D.

Once again thanks for the great work.

Right Bigenuf, you know that thing we found, where people could "view order" and see things that could be regarded as "office only" comments ? I've written a module for it called SBD_Discreet, the test thread is here:

http://www.zen-cart.com/forum/showthread.php?t=112636

I'd appreciate it if you could try it out.
Thanks
Philip.

OK well First thanxs to the people that have been working on this realy is appreciated have a small problem though Im not getting the call back the debug email is telling me ive got a password problem but i must be going blind cause i realy cant see any password in the debug email:no:

You should look for the words callbackPW in your email, the most likely thing is that if you haven't got that word, then worldpay has not sent it through.

Sometimes settings need to be saved twice, sometimes you have to transfer the settings to your production environment (buttons at bottom or the worldya screen).

If you enable http error messages in WorldPay, you should also see a 302 error, because without a password, your shop thinks worldpay is a hacker !

hi and thanxsnow have the test transactions runinig fine on the empty zc system now to add it to the site and send it live best regards and thaxs from allthose who spent so long frustrated with the original mod

Hi folks... have registered on the forum simply to thank Philip for this module....

Ive tried various shopping carts and in the past made the mistake of setting them up with products/attributes etc etc only to find that the payment module didn't work correctly (Worldpay).

I thought i'd try Zencart with a view to implementing the Worldpay payment system if possible - i'm afraid i have no knowledge of how to code so i'm totally reliant on others...

I came across the 44 page thread highlighting the security issue in previous versions of the Worldpay module and was intrigued enough to stay up until 4am this morning reading it.. which brought me to this thread...

I've implemented Philip's latest Module and am sat here with a smile so wide i'm in danger of swallowing my ears!! IT WORKS Brilliantly for me!!!

The only issue i had was my own fault as i didn't actually know what exactly the CALLBACK was supposed to do... i'd originally set up my own payment response pages in the Worldpay admin console (ResultY.html & ResultsC.html) which meant that it over-rode this module's operation. As soon as i deleted my ResultY.html & ResultsC.html files everything worked perfectly...

My site isn't live yet - not even populated it with products so i can't be 100% sure that i've got everything right but by 'eck.... it's feckin' excellent!!

A massive thanks to Philip and every individual who assisted him(degugging etc)....

I take my hat off to you all... thanks again..... 'n' still can't stop smilin':D... feel like a dog with 2 willys!:oops:

regards
Ian

And I thank you sir and your two willys.

Philip.

ALL users should upgrade because of a possible security exploit.

Can be found here:

http://exploitingIT.co.uk/WorldPay_ZC1.3.x_v2.04.zip

Many thanks to crazycucumber for spotting an old flaw that had crept back in to haunt versions up to 2.04

Philip.

philip_clarke:

ALL users should upgrade because of a possible security exploit.

Can be found here:

http://exploitingIT.co.uk/WorldPay_ZC1.3.x_v2.04.zip

Many thanks to crazycucumber for spotting an old flaw that had crept back in to haunt versions up to 2.04

Philip.

Good Evening Philip,

I installed the WorldPay_ZC1.3.x_v2.04 this afternoon.
Slow day so only received 1 order this afternoon.
It shows None Issued under the Advisory of the WorldPay Payment Responses but off to the right where it shows the details it shows:
AVS Code: 2422
Card Verification Value check:
(the 3 digit number of on the back): matched
Postcode check: not matched
Address check: matched
Country check: matched

Original Billing Postcode: SW1 4NU
WorldPay CC Postcode: SW1 4NU
Postcodes Match

I don't have access to the debug email right now but if needed i will get it tomorrow. Not sure if it's a bug or not.
Cheers, and thanks :D
Lake

Bigenuf:

Good Evening Philip,

I installed the WorldPay_ZC1.3.x_v2.04 this afternoon.
Slow day so only received 1 order this afternoon.
It shows None Issued under the Advisory of the WorldPay Payment Responses but off to the right where it shows the details it shows:
AVS Code: 2422
Card Verification Value check:
(the 3 digit number of on the back): matched
Postcode check: not matched
Address check: matched
Country check: matched

Original Billing Postcode: SW1 4NU
WorldPay CC Postcode: SW1 4NU
Postcodes Match

I don't have access to the debug email right now but if needed i will get it tomorrow. Not sure if it's a bug or not.
Cheers, and thanks :D
Lake

Evening Bigenuf

Nah, check your worldpay email, the documents for worldpay state that they use their own methods for calculating whether a warning or caution should be issued, I'm betting that a postcode does not score high on the list of suspicious activity. The docs aren't exactly clear as to what will 100% trigger off a warning, but bearingin mind that postcodes are generally only accurate to 3 houses or a block of flats and the CVV number matches, it's probably not enough. Worldpay will issue a warning or caution email as well as the shop system notifying you, I provide the extra information so that if something does happen, then you can quite rightly go to WorldPay and argue your case.

I used to like on hospital grounds and our postcode never matched anything, which was a problem as my wife (Doctor in Neonates) needs CRB clearance which relies on address and postcode matching, she once got suspended because someone had written "Number Fourteen" for the flat one year and "Number 14" for the next.

Philip.

Hi, I'm a ZC newbie and working with an already set-up system that has an older version of this module installed.

I just wanted to make sure I'm installing this properly:

I've uploaded the WorldPay_ZC1.3.x_v2.04 directory to includes/modules/payment/ - do I need to upload any other files? Or do I need to upload files to the individual directories as they are set out in the unzipped archive?

I ask because I see a 'worldpay.php' file, dated 12/12/2004 in the includes/modules/payment/ dir too.

Thanks for your help,
C.

Morning,

Right, (note down your md5 passwords) Click the remove module on your old one, copy everything as is to your server, putting the admin files in admin and the includes in includes. Then install, fill out your passords and you will have to put a "payment response password" in no and then do it over at worldpay to make your system hacker safe.

In all likelihood the new module will also warn you of old files on your system that are potentially vulnerable and should be removed manually (e.g. deleted)

If you have problem then enable debug mode which will email whomever, with what worldpay is sending to your server, do not post a debug email to the forum as it contains your passwords !

The module has been tested for 1.3.7 and above versions of ZC if it's an earlier module you may need more help, als you will have a new page under customers called WorldPay Payments, that gives you much more detail of each transaction and also of repeated cancelled transactions (which may be honest or maybe someone testing out a list of dodgy credit card numbers).

Thank you

Philip.

Hi Philip,

thanks for getting back...

So, I've tried to upgrade the module following the instructions and after uploading each file and making sure each file is in the correct directory I get the modules>payment screen (screen-grab attached) where I've lost the WorldPay module and also the sideboxes...

Help please...:blink:

Attachment #4825

chptif:

Hi Philip,

thanks for getting back...

So, I've tried to upgrade the module following the instructions and after uploading each file and making sure each file is in the correct directory I get the modules>payment screen (screen-grab attached) where I've lost the WorldPay module and also the sideboxes...

Help please...:blink:

Okay send me the email personally, there's an option to by my screen name and I'll sort you out, I do just have to pop out for about twenty minutes now though.

Philip.

Hello
I am working on my first Zencart installation and the client wants to use Worldpay.

The installation instructions just say:

Copy all supplied files to your Zen Cart installation, keeping the same directory structure. No core files are overwritten by this.

I dont get this - into the site root? There are folders called admin, docs and includes. I already have an includes folder in my root (obviously) so where is the new one to go?
Thanks muchly
iX

chptif:

Hi Philip,

thanks for getting back...

So, I've tried to upgrade the module following the instructions and after uploading each file and making sure each file is in the correct directory I get the modules>payment screen (screen-grab attached) where I've lost the WorldPay module and also the sideboxes...

Help please...:blink:

Attachment #4825

BTW, losing side boxes is very bad, menas that you have an unsolveable error but ZC sets the error reporting to zero so you don't see it and everything stops. My bet is that there's a missing file that it is trying to call.

Ixnay:

Hello
I am working on my first Zencart installation and the client wants to use Worldpay.

The installation instructions just say:

Copy all supplied files to your Zen Cart installation, keeping the same directory structure. No core files are overwritten by this.

I dont get this - into the site root? There are folders called admin, docs and includes. I already have an includes folder in my root (obviously) so where is the new one to go?
Thanks muchly
iX

where you see index.php and the folders includes/ admin/ docs/ editors/ cache/ download/ etc... that folder is called the Website root. You copy the folders straight into there. This is straight forward of you are using a good ftp program or scp or putty or unzipping the files on your system, but if you are using a "bad" ftp program you have to copy each file to the corresponding location on the server.

so /WorldPay_ZC1.3.x_v2.04/admin/worldpay_response.php

goes into YOUR_WEBSiTE_ROOT/admin/

If anyone wants more help just PM me.

Philip.

Hi Philip,

have installed the module properly - restored my backup this morning and tried it all again from scratch and everything looks good. Thanks for your time and help.

DrByte, thanks for the debug tool :smile:

C.

Okay, all files copied to server but there is no way to enable the module in admin/modules. Should there not be something in my httpdocs/includes/modules/payment/ folder? There is nothing there relating to Worldpay. If somebody could provide me with a checklist of what files should be in what folders I'd appreciate it.
Thanks

Ixnay:

Okay, all files copied to server but there is no way to enable the module in admin/modules. Should there not be something in my httpdocs/includes/modules/payment/ folder? There is nothing there relating to Worldpay. If somebody could provide me with a checklist of what files should be in what folders I'd appreciate it.
Thanks

Here's the full list

./admin/includes/boxes/extra_boxes/worldpay_response_customers_dhtml.php
./admin/includes/classes/worldpay.php
./admin/includes/languages/english/extra_definitions/worldpay_response.php
./admin/includes/languages/english/worldpay_response.php
./admin/worldpay_response.php
./docs/worldpay/changeLog.txt
./docs/worldpay/index.php
./docs/worldpay/install_historical_1.01.txt
./docs/worldpay/install_historical.txt
./docs/worldpay/install.txt
./docs/worldpay/known.txt
./docs/worldpay/LICENSE
./includes/extra_datafiles/wp_callback_filenames.php
./includes/languages/english/extra_definitions/wp_cc_accept.php
./includes/languages/english/modules/payment/worldpay.php
./includes/languages/english/wp_callback_hacker_response.php
./includes/languages/english/wp_callback.php
./includes/modules/pages/wp_callback_hacker_response/header_php.php
./includes/modules/pages/wp_callback/header_php.php
./includes/modules/payment/worldpay.php
./includes/modules/sideboxes/wp_cc_accept.php
./includes/modules/wp_checkout_cancelled.php
./includes/modules/wp_checkout_process.php
./includes/modules/wp_checkout_success.php
./includes/templates/template_default/sideboxes/tpl_wp_cc_accept.php
./includes/templates/template_default/templates/tpl_modules_wp_checkout_cancelled.php
./includes/templates/template_default/templates/tpl_modules_wp_checkout_success.php
./includes/templates/template_default/templates/tpl_wp_callback_default.php
./includes/templates/template_default/tpl_wp_callback_hacker_response_default.php
./worldpay_suhosin.php
./wpcheck.php

you may have missed coying over

./includes/modules/payment/worldpay.php