Suddenly having Authorize.net SIM Timeouts on GoDaddy

I know this has been discussed, and there is a link to help on this issue here.. https://www.zen-cart.com/tutorials/index.php?article=402 , but I can't seem to find anything wrong and all of my websites are 'not working'..... Background.. 1st of all, I haven't changed anything. I have Two hosting accounts (godaddy).. On 1 hosting account I have one Website with SSL .. on the 2nd hosting account, which is on a different server, I have a main website with SSL, and in the root I have the 2 other websites. Two sites are Zen Version 1.5.0 and Two websites are Version 1.5.1. I have recently renewed my SSL certificates, but supposedly the SSL's are up and running, because it was just a renewal. All 4 websites are timing out after Authorize.net captures money from the customer, so if I get an order I don't know what the customer ordered, and they are confused too because their order didn't complete; so I had to put all 4 websites in Maintenance mode.

I have not changed anything on any of the websites in months, and Godaddy says they have not changed anything, and Authorize.net says they have not changed anything. I use the code in ZenCart for the URL information.. (I did not manually set the URL information in my Authorize.net account, I let the Zen code do that).

What happened? I mean, what should I try in order to fix this problem? All of my websites are down. Any help would be Greatly Appreciated!!!!.. Thanks!!!! :)

The timeout message on authorize.net page, after credit card processing says, (as you may know)... and the order (customer) stays on that page

"An error occurred while trying to report this transaction to the merchant. An e-mail has been sent to the merchant
informing them of the error. The following is the result of the attempt to charge your credit card.

  This transaction has been approved.

It is advisable for you to contact the merchant to verify that you will receive the product or service. "

One more question that may help me get to the bottom of this. If I am to set my response URL manually in my Authorize.net account settings, the Zen Cart authorize.net module says "SETTINGS..Your "response" and "receipt" URL settings in your Authorize.net Merchant Profile can be left BLANK, or can be set to point to http://your_domain.com/foldername/index.php?main_page=checkout_payment" .. but every time I try to set it manually, the order doesn't even get TO the page on Authorize.net where you enter the CC information, it goes to a white page with this error "The following errors have occurred. (14) The referrer, relay response or receipt link URL is invalid."

My questions.. I obviously replace "your_domain.com" with my domain, but what do I replace "/foldername" with? and, where is this "page", or piece of code, so that I can see if it is even there... maybe some hacked me and removed it? seems unlikely since all 4 websites, on 2 different servers aren't working, but I need to find out why Authorize.net is timing out when it tries to communicate back to my sites, and I don't even know 'where' it's trying to communicate TO.. I think that would be a starting place for me,, at least to find out where authorize.net is trying to go... I don't really have a clue here, but I know my sites are all down so any help would be greeeeeat!! Thanks!! :)

When I use the AIM Authorize.net module, everything works, but I need to use SIM..... **Also, the 'timeout' is instant.. it doesn't 'sit there' for 10 seconds waiting to timeout.. it happens instantly... Authorize.net and GoDaddy both assure me it's nothing they have done. My SSL (botth of hem) are working as they should according to GoDaddy. Is there ANYTHING in my Zen Cart files that needs to be updated possibly? Thanks :)

I am having the same issue. I have talked to godaddy and they feel they have researched the issue as best they can. “With no resolve.”
I am now trying AGAIN to deal with authorize.net and cybersource.
I am seeing that the transaction is making it to the authorize.net/cybersource side, and is posting. But what happens is that the response back to zencart is not getting to my cart. I do not know if authorize.net/cybersource has changed something, or what the issue from there. It is not a true time out issue, as the response from authorize.net or zencart take less than one second after I hit the submit key of the final step in the purchase.

Ok, I just got off the phone with Authorize.net, they are aware of the issue, and acknowledge that it is on their side. At their request I sent them a screen shot of the response from the browser and the error code from the zencart log file. my log file was in the cache folder yours may be the logs folder. They said that they are working to fix the issue, and it could be fixed as early as today.

gokeypa, thanks... I have talked to Authorize.net twice, and they said it wasn't them; Gosh, I'm glad you got that out of them. Thanks for the info, and I will definitely keep you filled with any information that I get. When/if your problem is fixed, please post here with exactly what happened, so that I can communicate that with Authorize.net. I get the feeling it's going to be like pulling teeth to get them to believe me; and once again, thanks! ps.. a name (you can private message me) from Authorize.net of the person that fixed the problem would be great so that I can contact them. Like I said, I have already contacted them twice..

Gokeypa, just got off of the phone with Authorize.net. They explained to me that they had an intermittent problem today (Monday), but the problem was fixed, and the specific problem I have isn't/wasn't associated with that Authorize.net problem from today. The girl I spoke with, Loraine, assured me that it was definitely a GoDaddy problem because she has had several people, all using GoDaddy hosting, that are having the same problem, and one of her customers told her of a recent change GoDaddy has done in which they (GoDaddy) is requiring information that Authorize.net does not provide, thus causing the timeout/rejection error... He asked her to provide that information in the Authorize.net response, which, of course, she could not. She could not remember specifically what the customer wanted; she said possibly something about an http file?? but wasn't sure.. but said that every one of the people having this problem were using GoDaddy.... gosh, I have spent hours on the phone with GoDaddy, Authorize.net, changing things in my websites, calling GoDaddy again and again, reading Zen Cart forums, posting,, etc.. I'm getting frustrated unfortunately... If you find anything out, please let me know.. Thanks!!

1.5 hours on the phone with GoDaddy (this time), and they say nothing is wrong. 30 min on phone with Authorize.net (this time) and they say it's not them. Total of over 4 hours on the phone.. I haven't changed anything in my Zen Carts, so I don't see how it can be Zen... I have 4 websites, with TWO completely different Authorize.net accounts, on TWO separate servers, that are all getting this rejection/timeout message. I guess I am going to have to ditch GoDaddy, get new hosting, re-build the websites, and go from there...and I still can't be guaranteed I won't get the same error at that point. I would like to use AIM module, but I can't get the AIM module enabled sites to pass the TrustWave PCI Security Scan.. That's why I have been using the SIM..... Anyone reading this, please see if you can help me get this figured out.. Thansk!!!!! :)

Johnnycopilot:

I guess I am going to have to ditch GoDaddyWhile I'd rather not take sides about hosting companies, nobody would argue with you about leaving GoDaddy, especially given that they're denying any help to you about this.

Johnnycopilot:

get new hosting, re-build the websitesAnd that's pretty simple: http://www.zen-cart.com/content.php?142 (the article is lengthy, but that's just because it tries to cover every possible nuance. But you really just need a backup of the database and the server files, to copy to the new server, with a few steps in between as described in the article)

Johnnycopilot:

I would like to use AIM module, but I can't get the AIM module enabled sites to pass the TrustWave PCI Security Scan..
I haven't seen anyplace where you detailed what issues they're complaining about. What exactly is "failing" the scan?

Johnnycopilot:

One more question that may help me get to the bottom of this. If I am to set my response URL manually in my Authorize.net account settings, the Zen Cart authorize.net module says "SETTINGS..Your "response" and "receipt" URL settings in your Authorize.net Merchant Profile can be left BLANK, or can be set to point to http://your_domain.com/foldername/index.php?main_page=checkout_payment" .. but every time I try to set it manually, the order doesn't even get TO the page on Authorize.net where you enter the CC information, it goes to a white page with this error "The following errors have occurred. (14) The referrer, relay response or receipt link URL is invalid."

My questions.. I obviously replace "your_domain.com" with my domain, but what do I replace "/foldername" with? and, where is this "page", or piece of code, so that I can see if it is even there... maybe some hacked me and removed it? seems unlikely since all 4 websites, on 2 different servers aren't working, but I need to find out why Authorize.net is timing out when it tries to communicate back to my sites, and I don't even know 'where' it's trying to communicate TO.. I think that would be a starting place for me,, at least to find out where authorize.net is trying to go... I don't really have a clue here, but I know my sites are all down so any help would be greeeeeat!! Thanks!! :)

the "/foldername" refers to whatever folder your store is in ... if any.

So if your store is https://www.example.com without any subdirectory, then you'd use https://www.example.com/index.php?main_page=checkout_payment

But if you had your store in a folder named "zencart" then you'd use https://www.example.com/zencart/index.php?main_page=checkout_payment

ie: click on your store's "login" link, copy that URL and change main_page=login to main_page=checkout_payment

Dr. Byte, thanks!! .... I am going to look over what you said very carefully and do SOMETHING, just don't know what yet... ha.... As far as my PCI Scans not passing using the AIM module;; I'll have to set sites to AIM, and then run the scan manually to see exactly what they don't like (TrustWave scans automatically every month). When I was trying to get passing certificates, I knew so little about it and spent so much time trying to fix the problems using AIM (without success), I simply switched to SIM and all of the sites passed at that point. At the time, it made my life so much easier that I was satisfied. I'm would imagine that failing has something to do with the plugins, or templates I am using. If you have any suggestions as to what I may test, change, or try to make my response from Authorize.net start working again, I'm all ears. OH,, one more thing.. My SSL certificates have recently renewed. They used to be 256 Bit, and now they're.. Private Key Length: 2048 bits .... Signature Algorithm: SHA-2 .. I wonder if this may have something to do with them not working? Thanks :)

Dr. Byte, when I go to www.mysite.....=checkout_payment,,,, that page is there and looks normal... so I guess it's not gone... Thanks

Hi Johnnycopilot

Do you know what hosting you are using on Godaddy? I am on 2G hosting. The new servers on godaddy are using 5G hosting. Godaddy says that the new servers MAY help some of the issue regarding response time. I do not think that is the main issue at hand.

I spoke with Authorize.net again today and they said that the issue they where having was fixed I informed them that I am still having the same problem. "That I am not getting a confirmation from the Authorize.net server letting my zencart know that the purchase was approved." I am running SIM as well, and I have not tried running AIM. The main reason for me is that I have a lot of add-on from zencart to make the cart look and feel the way the boss wants it. It took a long time to get right and I am still on 1.3.9h, I think to make AIM run for me I would have to change to 1.5.3 and that means a lot of work and down time that I can not afford.

The issue could be in godaddy but I just do not see how. The response from the Authorize.net server to my zencart seams to be the issue, again I get the error message with-in one second of the submission to authorize.net. So other than some odd data block from a goaddy security server "or something like that" I do not know why it would be godaddy.

gokeypa:

I am still on 1.3.9h, I think to make AIM run for me I would have to change to 1.5.3AIM has existed in ZC since before v1.3.9h ... so I'm not sure why you'd have to upgrade to v1.5.3 to get AIM support. Granted, there are always bugfixes included in newer versions.

gokeypa:

The issue could be in godaddy but I just do not see how. The response from the Authorize.net server to my zencart seams to be the issue, again I get the error message with-in one second of the submission to authorize.net. So other than some odd data block from a goaddy security server "or something like that" I do not know why it would be godaddy.
Okay, but "when" did this problem "suddenly" start happening?
What's changed?

For me I had a purchase on my site on July 24th and it all worked fine. I had a purchase on the 27th in the morning and it failed, and every purchase attempt since has failed as well.

I understand that the AIM has been around for a long time my largest concern was the PCI issue and the setup process of AIM that Johnnycopilot had talked about, and it seamed that the easiest best answer for me was the SIM route. The SIM has been working for me for a couple of years now.

DrByte, you made a comment about the return URL that I found interesting. In my log file I show the return URl should be "https://www.mysites.com/whatever_you_named_your_zencart/index.php?main_page=checkout_process&action=confirm

As it stands now on my authorize.net side I had the return URL blank. I can try putting this in the return URL and see it it works, if you think it would help. but there is one other piece to that and is the receipt method. "Receipt Method
Specify the method that should be used to render the page that the customer is linked to from the Receipt Page"

should it be LINK, GET or POST?

Ok, just got off the phone with godaddy again, and they are telling me that they have received other calls from clients not using zencart and that are using authorize.net and are on the 5g servers that are getting the same issue.

I have also tried adding the Default Relay Response URL, and that did not work either.

DrByte I did not mean to fly over your comment about godaddy, I am not a large supporter of goaddy, but I just do not think that this time it is their issue.

Please if you have more info I would love to hear about it. I have a large promo starting in a couple of days and I am sweating a little.

gokeypa:

but there is one other piece to that and is the receipt method. "Receipt Method
Specify the method that should be used to render the page that the customer is linked to from the Receipt Page"

should it be LINK, GET or POST?
Hmmmm. I've never had to mess with that setting. I'd suggest POST.

gokeypa,,, I'm on the 'old' servers. They told me the same thing. They literally don't seem to have a clue about anything technical.. I don't see how it can't be GoDaddy... nobody else has changed anything I don't believe... As far as the AIM method...... I had an eCommerce business years ago, and that's all we used. Customers like that better, rather than 'leaving' the website. My current Processor company uses TrustWave, and Trustwave sees to be the best and easiest company, that I have used for certification. oh, and my bank processor doesn't charge me for the Trustwave account. The company I have my retail merchant acct. with gives me 180 days to become compliant before they charge me for non-compliance, so I have never had a non-compliance charge with them. I LOVE them - IM me if you want to know who they are.. they are great!! no hidden fees, cheap, honest, and do what they say they will do, and they are NOT sneaky. I've had around 10 retail merchant accounts over the years (with various businesses), and these people, by far, are the best and most honest I've ever had.. Switching to, and using AIM is very easy.. Just change your two .configure files (one in yoursite/admin/includes folder and one in yoursite/includes folder to the proper settings [an added 'true' in a place or two and and added 's' in a few places], hit the install button on the AIM module, copy and paste the settings from your SIM module, and that's it (you'll have to change your folder settings to write, and then put them back to read only when you mess with your .configure files). If your site doesn't pass the scan, and your processor says anything to you about it, they should give you time to get a passing certificate before they charge you. Anyway, for the time being, that's what I have done.. until I figure this problem out.... Hopefully I can figure out how to pass with the AIM, and leave it like that..... never liked the SIM anyway.. If you already knew how to configure the AIM module, sorry, wasn't trying to sound like a know-it-all...

So are you saying that you just left authorize.net then switched to the new processor, and are using AIM? I was thinking about still using authorize.net for now, and try using AIM.