Mandatory SagePay Payment Gateway Upgrade to Protocol version 3

SagePay are telling UK customers to upgrade their payment gateway software to use their new SagePay 3 protocol. The deadline given is 31st July 2015. After that it seems that payments using previous protocol versions will not work.

Specifically their website says "your business has been highlighted as using a version of our protocol (2.23) that will not be supported by Sage Pay from 31 July 2015."

So I called their support people to find out if this was true and if I understood the very confusing (and possibly confused) guy I spoke to, it is true!

I asked if there was a ZenCart plug in to handle the upgrade. They said I should call the people at ZenCart and ask them, or I should hire someone to write some software.

My main questions are: is there a plugin out there that handles this and that I have missed? if not, is anyone working on one? and if not, can anyone recommend a good UK payment gateway that does have an up-to-date Zencart plugin?

It would be helpful to know: which Sagepay module are you currently using? (ie: where did you get it? who wrote it?)

We use a couple on different sites, Sage Pay Form v1.0.1 and Ceon Sage Pay Form v2.0.2.

Just had another e-mail from SagePay, excerpts below:

"Have you upgraded to Version 3?

In order for you to continue processing payments without any interruption to your service, you must upgrade to Sage Pay Version 3.

The deadline for upgrading is 4 months away. If you do not upgrade by 31st July 2015 then you will not be able to process payments and all support for your current version of Sage Pay will be discontinued.

How do I upgrade?

Technical changes will need to be made to your Sage Pay settings.

If you would like more information about keeping up with latest technology, contact Sage Pay through your usual channels.

If you have already migrated to Sage Pay Version 3, please disregard this message."

Here is a link to the SagePay website with an overview of the upgrade process:
https://www.sagepay.co.uk/support/12/36/sage-pay-version-3-00-what-questions-to-ask

Is anyone looking at providing an add-on for this? It's beyond our technical abilities. Alternatively, can anyone recommend a good UK payment gateway that does have an up-to-date Zencart plugin?

Just found an answer buried in the Ceon Open Letter where they say they have software that implements version 3 protocol :-)

Thread closed?

As a user of this contribution, while I see there is a commercial update available, I felt it important to keep the community GNU version relevant and useful so I have updated it to comply with SagePay Protocol v3.00 minimum requirements and tested it with Sage Pay on ZC 1.50, 1.51 and 1.52 with no problems.

I have submitted the updates to this site as version 2.1. https://www.zen-cart.com/downloads.php?do=file&id=1453

In the mean time if anyone is desperate for updates to Protocol v3.00 for their store, please feel free to message me.

Andrew

I almost purchased the comercial version today, but stopped short and sent a message to the company asking if they proivid instal instructions like the mods on here. I also asked about what support they offered for users. I have been using Zen Cart for 5 years and always found they soloution to any issue with this forum and I am not so sure I would get the same support for a comercial mod.

I await the update mod with aticipation and would just like to say a big thank you for updating this Andrew.

Did you get any response?

ConsultMe:

As a user of this contribution, while I see there is a commercial update available, I felt it important to keep the community GNU version relevant and useful so I have updated it to comply with SagePay Protocol v3.00 minimum requirements and tested it with Sage Pay on ZC 1.50, 1.51 and 1.52 with no problems.

Well done Andrew!

I have ceon sagepay version 2.1 installed on a dev site zencart v1.5.3

couple of things

since the ugrade, in modules > payment, it says Ceon Sage Pay Form v2.0.2, when the live site which has not been upgraded shows Ceon Sage Pay Form v2.0.3, so it appears to have downgraded!

However, i have run a few tests and i can checkout successfully, all works fine, payment taken, notification and confirmation emails sent.

But, i am now unsure as to whether the upgrade took place and whether the site is now sagepay protocol 3.00 complient

Is there any way i can tell if the upgrade was successful? And when will the below message, which appears when log in to sagepay, disappear?

'You will have to cease trading on this version (v2.23) unless you upgrade by the end of this month'.

any input would be great, it's really not that clear to me even though i have read documents etc

matt

consultMe - would you be able to respond to my queries in post above?

or anyone else?

It also appears to work with 1.39h

The **Ceon Sage Pay Form - Version: 2.1 **plug in on this page https://www.zen-cart.com/downloads.php?do=file&id=1453 just reverted back to an older version, not much confidence in it, plus i got no response back from developer (must be busy, that's fine) so i went with http://www.jsweb.uk/zen-cart-plugins/payment/ceon-jsweb-sagepay-form-for-zen-cart, installed myself, super easy, uploaded files and a quick db update and that was it. Once 1, or 2 orders go through using updated sagepay plugin the upgrade warning on sagepay disappeared.

mattys:

The **Ceon Sage Pay Form - Version: 2.1 **plug in on this page https://www.zen-cart.com/downloads.php?do=file&id=1453 just reverted back to an older version, not much confidence in it, plus i got no response back from developer (must be busy, that's fine) so i went with http://www.jsweb.uk/zen-cart-plugins/payment/ceon-jsweb-sagepay-form-for-zen-cart, installed myself, super easy, uploaded files and a quick db update and that was it. Once 1, or 2 orders go through using updated sagepay plugin the upgrade warning on sagepay disappeared.

how do you know that it 'revered back to an older version' The main issue I have with the jsweb version is that they will not support it unless you are running 1.5x. Since 1.39h is still considered to be secure and we happen to be running it on a live site, its a bit much to say upgrade first, and sagepay dont have a way of showing which transactions conformed - I might try switching the loggin on to see if there is some indication in that.

Tried to speak to SP, but they had 20 people in the queue at the time

I'm running all the upgrades across the other sites next week and will then check with sagepay to see if the changes are now showing the new protocol.

otherwise I will have to try the jsweb version, and hope it works with 1.39h

Si

...because as i mention in my initial post:

*'since the upgrade, in modules > payment, it says Ceon Sage Pay Form v2.0.2, when the live site which has not been upgraded shows Ceon Sage Pay Form v2.0.3, so it appears to have downgraded!'

*basically, when i 'upgraded' to 'The **Ceon Sage Pay Form - Version: 2.1 **', the version displayed in modules > payment went from v2.0.3 to v2.0.2. this does not mean that the module didnt work, it did (although i have my doubts as to whether it was sagepay 3 protocol and not sure if it would have deactivated the upgrade warning on sagepay), these unknowns and errors didnt fill me with confidence and this is quite an important upgrade to get right, for obvious reasons, that's why i went with jsweb. i'd rather it was free, but hey, it's gotta work...

if i were you i would think about upgrading your zencart sites to 1.5.*, i think the longer you leave it the more messy it can become

sagepay are so slow to get back to you, i had responses to questions i had emailed them a week or so later, after i had actually sorted everything, not great

After a weekend of running the update, sagepay is no longer shoiw a red banner, so I think its a reasonable assumption that we are now on protocol 3. I'm not too worried about the version not increasing in the admin display - even I can change that.

Upgrading a site from 1.3h to 1.54 is a far greater task than fixing a module, itsn't something that can be done in a week, and its something we are planning to do in the next couple of months.

I'll migrate the rest of our sites this week and check if its all working

Si