WorldPay Module version 2.0 - Support thread

Do we need ssl for this mod to work then?

I am getting a password failure from my server in debug emails even thought they are the same both ends.

Dave G:

One of my customers received this email today from WP. I am hoping some one with more knowledge than I will be able to make any necessary changes to this mod to comply with the change.

Thank You
Dave G

Yes, we received the same email from RBS Worldpay today, so it looks like something is going to need changing to keep it working.

Yes we recieved it too from Worldpay. Not exactly sure how to implement this.:frusty:

Hi, I am trying to upgrade to the new version of WP but in modules section it still tells me I am using 2.9 version after I deleted all the old files. Does this matter? :blink:

Dave G:

As a result of making this change, we now need to ask you to make some small adjustments to your payment service. Importantly, you will need to make these by the 31st of May 2011 in order to continue with your current method of using MD5
I have been having a look at the requirements for this change, and also spoken wth RBS WorldPay tech support. I have now done a change to my 1.37 site which seems to work in the new format - use at your own risk.

In /includes/modules/payment/worldpay.php around line 299 there is a line like this:

$md5_signature = MODULE_PAYMENT_WORLDPAY_MD5KEY . ':'.$OrderAmt.':' . $currency . ':' . $order->customer['email_address'];
```which I have changed to
```php
$md5_signature = MODULE_PAYMENT_WORLDPAY_MD5KEY . ';' . $md5_signature_fields . ';' . $OrderAmt . ';' . $currency . ';' . $order->customer['email_address'];  
```Note that the separators have changed as well as the additional field.
If you get to the Worldpay page with the card logos, then I believe it is working ok, otherwise you will get an error at this point.

dab:

I have been having a look at the requirements for this change, and also spoken wth RBS WorldPay tech support. I have now done a change to my 1.37 site which seems to work in the new format - use at your own risk.

In /includes/modules/payment/worldpay.php around line 299 there is a line like this:

$md5_signature = MODULE_PAYMENT_WORLDPAY_MD5KEY . ':'.$OrderAmt.':' . $currency . ':' . $order->customer['email_address'];

> ```php
$md5_signature = MODULE_PAYMENT_WORLDPAY_MD5KEY . ';' . $md5_signature_fields . ';' . $OrderAmt . ';' . $currency . ';' . $order->customer['email_address'];  
```Note that the separators have changed as well as the additional field.
> If you get to the Worldpay page with the card logos, then I believe it is working ok, otherwise you will get an error at this point.

OK then what do we put into the new SignatureFields slot which is now present in the worldpay setup in both the test and production environments? 
Although i haven't had time to test it i believe all that should need to be done is add
" amount:currency:email " without the " into the SignatureFields slot. 
This information can be found in /includes/modules/payment/worldpay.php  line 298. 
How i read the worldpay information is that they have added this new field and all you are doing is telling them what info in what order you will be sending to them and it verifies that along with everything else it does.
Like i said this is untested but i'm sure if you have just made changes to your worldpay script and not changed anything in the worldpay environment on their site i can't see how it could work because they have no information on their site to match what you will be sending.
Test only in the test environment. Use at your own risk.

Bigenuf:

OK then what do we put into the new SignatureFields slot which is now present in the worldpay setup in both the test and production environments?

I think the difference is that, as mentioned in the Worldpay email above, there are two methods of calculationg the signature, Static and Dynamic. The method originally used by this contribution seems to be dynamic, so that's how I carried on. I presume the new field on Worldpay is for Static signatures.

dab:

I think the difference is that, as mentioned in the Worldpay email above, there are two methods of calculationg the signature, Static and Dynamic. The method originally used by this contribution seems to be dynamic, so that's how I carried on. I presume the new field on Worldpay is for Static signatures.

I seem to think it is static, what i did was put amount:currency:email
into SignatureFields in the worldpay admin area in test and did a test purchase and everything worked great.

I went back into the test environment on worldpay and removed the email and left ie: amount:currency and did a test purchase and received this message on the worldpay site:

Secure Payment Page
Sorry, there was an error in processing this transaction:
The information sent from the merchant's site is invalid or incomplete. Please send the following information to the merchant:

The transaction cannot be processed due to the following:

* the MD5 signature could not be verified

Server information 02/Jan/2011 11:07:25 Server ID mm2imscs4p (WPReq-442646)

I went back in and added the email again and the test purchase went through with no errors.

I have added this into my production environment and will see if there are any problems with orders coming in. I'll post results as i have orders coming through today and should know before long.

Only Phil i would think would know if it is static or dynamic but this seems to work without changing any of the scripting i guess you could change the order of you SignatureField in the script and change it in the worldpay setup, just to make yours different then others for added security.

Cheers.

I can confirm that the changes i suggested in my last post DO work in a LIVE environment on worldpay. I've had 3 orders come in in the last hour with no problems.

Just for the record i'm using Worldpay module 2.10 on 2 versions of zencart, 1.3.7.1 and 1.3.8a

And responding to a previous posting version 2.10 will show version 2.09 in your admin.

As always backup everything and use in test environment first then go live. Use at your own risk.

Also as to if it is dynamic or static according to worldpay this module should be static

Static Signatures (recommended method of generating MD5 signatures)

Merchants, who encrypt the same transaction parameters for every transaction, must now specify their signatureFields value in their Installation Settings located in the Merchant Administration Interface. Please note that this replaces the need to send the signatureFields parameter in your order details submission.

This module sends the same params each time.

Cheers

Hi - I have received a callback failure from Worldpay because my server timed out when WP was trying to post back information. I received the payment but no details of the order in admin.

I have the transaction id, cart id and installation id.

Is there any way of forcing through this payment via a URL - I seem to remember this happening before and I cobbled something together and forced through the payment to Zencart but can't for the life of me remember how I did it.

Many thanks in advance.

Hi guys,

I am getting a

HTTP/1.0 500 Internal Server Error
Date: Fri, 28 Jan 2011 10:15:23 GMT
Server: Apache
Set-Cookie: zenid=ab5ed5359e55ec1a5342744f1f45eda9; path=/; domain=.mydomain.com
Set-Cookie: cookie_test=please_accept_for_session; expires=Sun, 27-Feb-2011 10:15:23 GMT; path=/; domain=www..mydomain.com
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Connection: close
Content-Type: text/html; charset=iso-8859-1

From worldpay sent to me. This is what I get in an email from worldpay too.

Error reported: Callback to http://www.mydomain.com/index.php?zenid=ab5ed5359e55ec1a5342744f1f45eda9&main_page=wp_callback: NOT OK, recevied HTTP status: 500
Server Reference: mm2imsps2p:callbackFailureEmail-26607:MerchReq-182-90

Any ideas?

Hi, an 500 internal server error can be very hard to track down. It can be thrown as a result of a PHP error. If you have the latest version of Zencart installed, then PHP error messages are stored in your cache directory - these will tell you the line and module that has broken. This can help shortcut the process.

500 errors can also be caused by incorrect permissions on directories / files.

Problem Solved! It was due to google_analytics.php file missing!

I've just moved my cart to a new host and now get the below message in both test and live once the card details are confirmed. Any help appreciated.

Error!

Unable to determine connection method on a link!

Known methods: NONSSL SSL

webchills:

Thanks! I finally found the <div>.
I saw your posting some pages before but did not find any suspicious divs.
Turned out that there was a ```

Can you explain this at all a bit better? I removed that div but it made no change.

Hello

I am having a call back problem... I am receiving an faliled call back email with a 404 error. I have been through everything to see what page is not being found but have and no luck...

Can anyone direct me in the right direction.

Hi imiq,

A 404 error normally means that a page can't be found. If you are receiving this on your callback page, it is possible that your settings in Worldpay's setup don't match the address of your callback script.

Log in to your worldpay administration setup and check that the callback script address listed there matches EXACTLY that of the callback script on your site (including http vs https). Note that you can have different settings for your production and test servers, so make sure that they both point to the same place.

Hi All

Hope that I am posting this question in the correct manner.

I am quite new to ZC and am currently using ZC version 1.3.9
and Worldpay Module version 2.09.

I have recently setup a small online store for a friend of mine using the above versions. I tested thoughly both using the test mode of the worldpay module and all seemed to be working correctly and as it should.

With this confirmed we moved to a live state and again tested. All payments are going through to RBS site as they should (correct amounts etc....) and also processing correctly but unfortunately since moving to the live state no order details are being stored in the Zen Cart admin area (admin > customers > orders) so were are unable to see what a customer has ordered?

Does anyone know of a reason for this or know of something that I have missed in terms of configuration in Zen Cart or within the RBS admin panel?

Any assistance on this would be very much appreciated as I am at a total loss!!

Kind Regards, Gardnico

Have you set Worldpay to live at both ends. In ZC, within admin >modules >payment >worldpay... you need to set Transaction Mode to live. In Worldpay, under Installations have you copied the Test setup to Production - you may have to re-input any passwords, as I don't think they copy across.

HI Dab

Thanks for the response, much appreciated!!

I have now solved the issue. It appeared that there were some starnge redirects occuring somewhere between our cart and the rbs site that was inhibiting and callback responses from executing correctly and also was due to the fact that I did not have the correct callback url added within our rbs admin area.

Again, thanks for the help!!

Kind Regards, Gardnico