Ceon Manual Card Payment Module v2.0.0!

Hi Conor,

Well, I reuploaded all files with another FTP, checked the configure.php file, and while I'm not getting any further errors in the cache, I'm still welcomed with a blank screen.

I'll send you a pm here in a moment.

Thank you for your help.

Christopher

Hi,

DCDC:

Well, I reuploaded all files with another FTP, checked the configure.php file, and while I'm not getting any further errors in the cache, I'm still welcomed with a blank screen.

You have changed the name of your zen cart's folder but didn't change the path to Zen cart in includes/configure.php

I'm not remotely surprised your site broke! :)

You had

define('DIR_FS_CATALOG', '/home/wilson/public_html/store/');

I've changed that to

define('DIR_FS_CATALOG', '/home/wilson/public_html/zencart/');

Things are now working as expected.

Hope you like the software!

All the best..

Conor
ceon

::smacks head:: :cry:

Can't believe I didn't change that when I migrated the site for the upgrade. :blush:

Thank you, Conor.

Christopher

Hi,

I have trouble in installing the Ceon Manual Card. Do I need to copy all files to the directory? I am using 1.39g version.:frusty:

Hi,

Honsan:

I have trouble in installing the Ceon Manual Card. Do I need to copy all files to the directory? I am using 1.39g version.:frusty:

Please read the instructions, I don't see the point in me repeating them here.. I've made them very clear.

All the best..

Conor
ceon

I've read the instruction. I wonder if I just copy just the file listed in step 1 or all the files in the zip files.

I did copied all the files to the directories. After installation, only authoriz module remains in the payment module. What have I done wrong?

Hi,

Honsan:

I've read the instruction. I wonder if I just copy just the file listed in step 1 or all the files in the zip files

Really, the instructions are very specific. They say to copy only the files from **within **the "files" folder (not the files folder itself or any folder outside of that).

I appreciate though that English may not be your first language and that you may therefore find it a little harder to follow.

You should delete all the files you copied across and start again, this time only copying the files from **inside **the "files" folder.

Honsan:

I did copied all the files to the directories. After installation, only authoriz module remains in the payment module. What have I done wrong?

In the FAQs you will find an FAQ which describes what I think is the cause of this problem and how to fix it.

If you're still really stuck then send me FTP and admin details and I'll install the software for you.

All the best..

Conor
ceon

@nickgreaves

I think PCI compliance is driving some people to paranoia on the issue. That and some unscrupulous firms that refuse to remove false positives and blame it on the fact that partial numbers are in the database of a site. In my opinion they are getting a kick back on the $19.95 to $21.95 fees charged to "non-compliant" merchants.

As Conor stated, his method is designed for a wide range of businesses and shipping/processing methods. Even with the first and last four numbers, a hacker would need to process nearly 17 million combinations in order to find the "correct" number. If the CVV is not stored (as it should not be), then the permutations rise to over 150 million.

True, the speed of computers could run 150 million processes in a short period of time, but where could the hacker actually find a site that would cross reference 150 million combinations with a specific name. It far too easy to get the information from a waiter or mall worker with a scanner built in to a cell phone. The new smart chips can be collected simply by someone getting near you in a crowd while having a receiver in a purse or briefcase.

The combination of Conor's mod with the removal of all CVV codes in an up to date Zen Cart should never be rated as a failure for PCI compliance. There are other factors (frontpage and others) that may be on the same server as Zen Cart and possibly cause a PCI failure.

So, using this mod on a PCI certified host with a current Zen Cart will pass all the tests. If not, the testing company should be challenged. We have fought the battle many times and (in one case) actually had the customer change their cc merchant. The customer even saved money on fees in the process.

Hi,

dbltoe:

I think PCI compliance is driving some people to paranoia on the issue. That and some unscrupulous firms that refuse to remove false positives and blame it on the fact that partial numbers are in the database of a site. In my opinion they are getting a kick back on the $19.95 to $21.95 fees charged to "non-compliant" merchants.

in one case) actually had the customer change their cc merchant. The customer even saved money on fees in the process.

Thanks for a very interesting post. Can I also join dbltoe here in saying to beware of unscrupulous companies.. especially those trying to freak companies out about their security setup..

If a compliance company comes to you (cold calls/emails) "warning" you about compliance matters and suggesting their services, be just as worried about their honesty as that of the people who try to steal card details in the first place.

Most of the compliance companies appear to put their profits leagues ahead of their commitment to honesty or to providing a fair level of value to their customers. It's frustratingly hard to know which ones are genuine, and good value for money, and which are only in it to make a quick buck off "compliance tests"!

Reminds me a lot of the SEO companies who get in contact to offer to "increase your rankings... for a rather large fee"! :|

All the best..

Conor
ceon

conor:

Hi,

Really, the instructions are very specific. They say to copy only the files from **within **the "files" folder (not the files folder itself or any folder outside of that).

I appreciate though that English may not be your first language and that you may therefore find it a little harder to follow.

You should delete all the files you copied across and start again, this time only copying the files from **inside **the "files" folder.

In the FAQs you will find an FAQ which describes what I think is the cause of this problem and how to fix it.

If you're still really stuck then send me FTP and admin details and I'll install the software for you.

All the best..

Conor
ceon
Thanks Conor, I think I need your help will pm you later.

Hi Conor,

I have installed Coen Manual Card module successfully. I suspect the mess is casued by the stylesheet and Blowfish not installed.

Thanks a lot.

Hi,

Honsan:

I have installed Coen Manual Card module successfully.

Glad to hear you got things sorted.

Enjoy the new software! :)

All the best..

Conor
ceon

How to add more than one email address for "extra card information" to be sent to. There will be 3 different people within the company responsible for this. IIRC the original zencart allowed this, yes? Not sure I would use this, but it would present one more possible option for avoiding one manager deleting an email before another manager got it.

Hi,

timps:

How to add more than one email address for "extra card information" to be sent to. There will be 3 different people within the company responsible for this. IIRC the original zencart allowed this, yes? Not sure I would use this, but it would present one more possible option for avoiding one manager deleting an email before another manager got it.

What happens if all three managers charge the card?

This is a BAD idea.. instead you should change your company's operating procedures to using a SHARED address for something as important as card details.

If you really want it sent to three addresses though, I think you can do that by adding the addresses (email part only., no names or <>), separated by commas.

Seriously, don't even consider that though, if you have any sense!

All the best..

Conor
ceon

Each manager is responsible for a specific and distinct line of product and won't have anything to do with the others, with the exception of vacation coverage etc.

The shared address is my first consideration. I usually set up their email clients as IMAP, so was concerned that one would delete before another got it, but I suppose I could use pop3 instead.

I tried using commas to separate addresses but it failed with a message - "The Ceon Manual Card payment module has been enabled but it has not been configured to send the necessary card information to the store owner by e-mail. The E-mail Address to send card information to must be set in Admin->Modules->Payment->Ceon Manual Card." I also tried with a comma and space, and the names and <> with the same result. That's why I'm asking about it here.

With a single address the mod works great. Oh and by the way, thanks for creating and supporting it!

What would be ideal is if an address could be set for specific products or groups of products. Yeah, I know it would be better if we didn't have to rely on manual card processing, but that's just not the case here.

I agree with Conor that this is not a good setup. If you have enough busy to warrant three product managers, why waste their time processing credit card transactions when for an investment of $20-30 a month this could be automated by using a integrated payment method.

If you really, really have to process them manually and have multiple people doing so, then use one imap account that doesn't belong to any of them and have them all dip into to take their transactions.

If you really, really need them each to receive all the emails, whether they're applicable to them or not, then create one emails account and use email forwarders on that.

Hi,

timps:

The shared address is my first consideration. I usually set up their email clients as IMAP, so was concerned that one would delete before another got it, but I suppose I could use pop3 instead.

As long as they deal with it before they delete it is that not the main thing?

Maybe that's the policy to implement.. if it's there it's not dealt with. Once it's dealt with, move it into a "dealt with" folder (rather than simply deleting).

That's the way I'd rather work any such shared system.

timps:

I tried using commas to separate addresses but it failed with a message - That's why I'm asking about it here.

Ah, I forgot about that.. that's a security check I put in. It can be removed and then any number of addresses can be used. You are the first ever person to request that though and for the reasons I've mentioned above, I still recommend not using several addresses. (Nevermind the security implications of having 3 e-mails sent rather than one, more chance of it being intercepted, although that's really more of a theoretical concern than a practical one).

If you really want this though let me know and I'll take a look at how you should tweak the code for the module to allow this.

timps:

With a single address the mod works great. Oh and by the way, thanks for creating and supporting it!

Thanks for saying that. :)

timps:

What would be ideal is if an address could be set for specific products or groups of products. Yeah, I know it would be better if we didn't have to rely on manual card processing, but that's just not the case here.

What happens if there are a mix of products in the cart from two of these "assigned groups"?

If you can come up with a set set of cases for when particular addresses should be used then I'm sure it would be easy to code the changes. Unfortunately it would be custom work though, not covered by the free support here.

I still think the shared address and move to folder idea is the best way though, it effectively acts like a group "to do list".

All the best..

Conor
ceon

conor:

Hi,
As long as they deal with it before they delete it is that not the main thing?

Maybe that's the policy to implement.. if it's there it's not dealt with. Once it's dealt with, move it into a "dealt with" folder (rather than simply deleting).

That's the way I'd rather work any such shared system.
Hmm...Good point. Subconsciously I keep thinking one type of product per order, and of course that may not be the case. As kuroi mentioned, the use of forwarders is another option, but that doesn't allow one manager to know what another has already done.

If you really want this though let me know and I'll take a look at how you should tweak the code for the module to allow this.I'll go over the shared account idea with the managers and experiment a bit, but if not too much trouble I'd still like to know how/where to tweak it.

Thanks for saying that. :)Truly, the very least I could do!

What happens if there are a mix of products in the cart from two of these "assigned groups"?As per my earlier comment, I hadn't thought it all the way through.

Thanks for the input.

Actually, the original zencart manual cc mod won't send extra info to multiple addresses either.

Hi,

timps:

if not too much trouble I'd still like to know how/where to tweak it.

In includes/modules/payment/ceon_manual_card.php you'd change

if (defined('CEON_MANUAL_CARD_EMAIL') &&
                zen_validate_email(CEON_MANUAL_CARD_EMAIL)) {
            $module_configured_properly = true;
        }
```to

```php
if (defined('CEON_MANUAL_CARD_EMAIL')) {
            $module_configured_properly = true;
        }

..thereby removing the check on the e-mail address' format.

I think Zen Cart should then be fine with sending multiple e-mails by simply having commas between the addresses.

All the best..

Conor
ceon