PayPal RESTful API Payment Module

zencart 2.1
opc

i am testing the PayPal RESTful API Payment Module on my localhost.

For some reason I am not seeing the pay later button. I do see the paypal button

I did read somewhere that it wont appear on a testing server. Is that true. Am I missing a step?

chadlly2003:

zencart 2.1
opc

i am testing the PayPal RESTful API Payment Module on my localhost.

For some reason I am not seeing the pay later button. I do see the paypal button

I did read somewhere that it wont appear on a testing server. Is that true. Am I missing a step?
You won't see the Pay Later button on the Zen Cart side, just the "PayPal" button. Once you navigate to your PayPal account, you can choose to pay via Pay Later.

With a PayPal business account and the proper PayLater Messaging settings in the mod itself, the Pay in 4 option will show up in Checkout, the Shopping Cart, Product Pages, and Product Listing/Search results depending on which ones you select.

Clicking on the learn more results in a pop-up explaining the cost to the customer.

As lat9 stated, the actual ability to select it does not show up until the customer selects PayPal and clicks on Confirm Order.

Even then, if the customer is considered a poor risk, the option will not be given to them.

dbltoe:

....and the proper PayLater Messaging settings in the mod itself, the Pay in 4 option will show up in Checkout, the Shopping Cart, Product Pages, and Product Listing/Search results depending on which ones you select.

Which mod is that where you edit the Pay Later Messaging settings? I didn't see that in the Paypal Restful mod.

This is definitely something I'd like to implement on my own site. I remember seeing steps (provided by PayPal) on how to integrate that into your webpage, but if you're saying it's something that can be enabled via ZenCart module settings, I'd like to know.

Have you loaded the 1.3.0 version?

Edit the settings and scroll down to PayLater Messaging.

[Attachment no longer available]

dbltoe:

Have you loaded the 1.3.0 version?

Oh snap, I thought I was running the latest and failed to see the new version! Thanks for pointing that out. Can't wait to try this new feature.

Only way i see PayLater is when i go through the checkout process click paypal and confirm payment. Than i am in the paypal and click on pay later which is not so easy to get to.

This is exactly what I am looking for. But seem to be missing something.
When enabled, it will show the lower installment-based pricing for the presented product or cart amount.

the only way i can get the message to display.

Add this
path: includes\templates\bootstrap\common\html_header.php

<script src="https://www.paypal.com/sdk/js?client-id=xxxxxxxxxxxx-xxxxxxxx=USD&intent=capture&components=buttons,messages&enable-funding=paylater"></script>

includes\templates\your_template\templates\tpl_product_info_display.php

add this **note i use special price not product_price

<div 
  data-pp-message
  data-pp-style-layout="text"
  data-pp-style-logo-type="inline"
  data-pp-style-text-color="black"
  data-pp-amount="<?php echo zen_get_products_special_price($_GET['products_id']); ?>">
</div>

result

on the product info page
just add this

<!-- paypal buy now message  -->
<div class="" 
  data-pp-message
  data-pp-style-layout="text"
  data-pp-style-logo-type="inline"
  data-pp-style-text-color="black"
  data-pp-amount="<?php echo zen_get_products_special_price($_GET['products_id']); ?>">
</div>
<!-- eof paypal buy now message  -->

shopping cart

<!-- paypal buy now message  -->
<div class=""
  data-pp-message
  data-pp-style-layout="text"
  data-pp-style-logo-type="inline"
  data-pp-style-text-color="black"
  data-pp-amount="<?php echo $_SESSION['cart']->show_total(); ?>">
</div>
<!-- eof paypal buy now message  -->

Please omit the header entry...

Seems to work

I have a question.... I noticed that sometimes when you check out and the paypal window popup up. If I click on guest checkout and put an email address in it just keeps spinning. This happens a lot but not all the time. Is this a paypal issue or a zencart issue.

chadlly2003:

I have a question.... I noticed that sometimes when you check out and the paypal window popup up. If I click on guest checkout and put an email address in it just keeps spinning. This happens a lot but not all the time. Is this a paypal issue or a zencart issue.

You've not provided enough information to determine whether the source of the issue lies with PayPal or Zen Cart. If you activate your browser's Developer Tools (by pressing F12 on a Windows computer) and view the "Console" tab, that will show any javascript/jQuery type issues going on.

@lat9

Got this payment module up and running smoothly, and thought it would be a good idea to add spaces when a customer starts typing in a credit card number, e.g with a mastercard if a customer types in the 16 digit card number, it automatically creates a blank space after each forth number, and with Amex where numbers are slightly different, the blank space are created where they should go.

Thought this to be a good idea, as it may confuse customers whether to type in the card number without spaces or not; but by having it automatically applied as they type confirms how the number should be entered.

Also, got the card logo to show for the card that's being used as well, once the first card digits get entered.

E.G: Customer uses a mastercard, as soon as they type the first 4 digits, a mastercard logo appears.

Got this working; just got a few final tweaks to make, and wanted to know if this would be something that you'd like to push into a future update of the payment module?

If so; happy to provide a pull request, once the final tweaks have been made.

Kind Regards,

Andy

lat9:

You've not provided enough information to determine whether the source of the issue lies with PayPal or Zen Cart. If you activate your browser's Developer Tools (by pressing F12 on a Windows computer) and view the "Console" tab, that will show any javascript/jQuery type issues going on.

These are the errors that come up with paypal popup. It does work.
Though its very random. Seems like when i use firefox it where i see it happen more than usual. I click on guest checkout and type in email and it just spins
Not sure if this is a permission issue. Or an issue on paypal site.

errors within th paypal page

Cookie “__cflb” has been rejected because it is in a cross-site context and its “SameSite” is “Lax” or “Strict”.
Cookie “__cf_bm” has been rejected for invalid domain. api.js
Cookie “__cf_bm” has been rejected for invalid domain. hcaptcha.html
Cookie “__cf_bm” has been rejected for invalid domain. hcaptcha.html
Cookie “__cf_bm” has been rejected for invalid domain. checksiteconfig
Cookie “__cf_bm” has been rejected for invalid domain. hsw.js

chadlly2003:

These are the errors that come up with paypal popup. It does work.
Though its very random. Seems like when i use firefox it where i see it happen more than usual. I click on guest checkout and type in email and it just spins
Not sure if this is a permission issue. Or an issue on paypal site.

errors within th paypal page

Cookie “__cflb” has been rejected because it is in a cross-site context and its “SameSite” is “Lax” or “Strict”.
Cookie “__cf_bm” has been rejected for invalid domain. api.js
Cookie “__cf_bm” has been rejected for invalid domain. hcaptcha.html
Cookie “__cf_bm” has been rejected for invalid domain. hcaptcha.html
Cookie “__cf_bm” has been rejected for invalid domain. checksiteconfig
Cookie “__cf_bm” has been rejected for invalid domain. hsw.js

also getting this error forgot to post it


Content-Security-Policy: The page’s settings blocked a JavaScript eval (script-src) from being executed because it violates the following directive: “script-src 'nonce-xxxxxxxxxxxxxxx' 'self' https://*.paypal.com https://*.paypalobjects.com https://*.googleapis.com” (Missing 'unsafe-eval')

Do you have any XSS configured at your .htaccess?

Shop Suey:

Do you have any XSS configured at your .htaccess?

this is a copy of my .htaccess. Usually i am fairly good at solving these issue. buto for some reason this has me stumped

this is a copy of my htaccess file

Options -Indexes

RewriteEngine On

# Force HTTPS + WWW in a SINGLE redirect
RewriteCond %{HTTPS} off [OR]
RewriteCond %{HTTP_HOST} !^www\.invertersupply\.com$ [NC]
RewriteRule ^(.*)$ https://www.invertersupply.com/$1 [L,R=301]

AddType application/x-font-ttf .ttf

<IfModule mod_headers.c>
Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google-gtagservices.com https://www.googleadservices.com https://*.doubleclick.net https://bat.bing.com https://connect.facebook.net https://www.facebook.com https://mylivechat.com https://t2.mylivechat.com https://www.shopperapproved.com https://cdn.doofinder.com https://us1-config.doofinder.com https://maps.googleapis.com https://www.paypal.com https://www.paypalobjects.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://analytics.google.com https://www.google.com https://cdn.jsdelivr.net https://mylivechat.com https://t2.mylivechat.com https://www.shopperapproved.com https://www.googleadservices.com https://*.doubleclick.net https://bat.bing.com https://connect.facebook.net https://www.facebook.com https://cdn.doofinder.com https://us1-api.doofinder.com wss://*.doofinder.com https://maps.googleapis.com https://www.paypal.com https://www.paypalobjects.com; img-src 'self' data: https://invertersupply.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.googleadservices.com https://*.doubleclick.net https://bat.bing.com https://connect.facebook.net https://www.facebook.com https://www.shopperapproved.com https://mylivechat.com https://t2.mylivechat.com https://maps.gstatic.com https://www.paypalobjects.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.doofinder.com https://t2.mylivechat.com https://code.jquery.com https://www.shopperapproved.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.doofinder.com https://t2.mylivechat.com https://code.jquery.com https://www.shopperapproved.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; frame-src https://www.googletagmanager.com https://www.google.com https://mylivechat.com https://t2.mylivechat.com https://www.googleadservices.com https://*.doubleclick.net https://www.facebook.com https://www.paypal.com; form-action 'self' https://www.facebook.com https://www.invertersupply.com https://www.paypal.com; frame-ancestors 'self'; upgrade-insecure-requests;"
</IfModule>

<Files 403.shtml>
order allow,deny
allow from all
</Files>

Header set Set-Cookie HttpOnly;Secure

# BEGIN cPanel-generated php ini directives, do not edit
# Manual editing of this file may result in unexpected behavior.
# To make changes to this file, use the cPanel MultiPHP INI Editor (Home >> Software >> MultiPHP INI Editor)
# For more information, read our documentation (https://go.cpanel.net/EA4ModifyINI)
<IfModule php8_module>
   php_flag display_errors Off
   php_value max_execution_time 999999
   php_value max_input_time 999999
   php_value max_input_vars 1000
   php_value memory_limit 999999M
   php_value post_max_size 999999M
   php_value session.gc_maxlifetime 2880
   php_value session.save_path "/var/cpanel/php/sessions/nf-php74"
   php_value upload_max_filesize 999999M
   php_flag zlib.output_compression Off
</IfModule>
<IfModule lsapi_module>
   php_flag display_errors Off
   php_value max_execution_time 999999
   php_value max_input_time 999999
   php_value max_input_vars 1000
   php_value memory_limit 999999M
   php_value post_max_size 999999M
   php_value session.gc_maxlifetime 2880
   php_value session.save_path "/var/cpanel/php/sessions/nf-php74"
   php_value upload_max_filesize 999999M
   php_flag zlib.output_compression Off
</IfModule>
# END cPanel-generated php ini directives, do not edit

# php -- BEGIN cPanel-generated handler, do not edit
# Set the “ea-php82” package as the default “PHP” programming language.
<IfModule mime_module>
  AddHandler application/x-httpd-ea-php82 .php .php8 .phtml
</IfModule>
# php -- END cPanel-generated handler, do not edit

comment this for figuring out your issues:

<IfModule mod_headers.c> Header set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' <https://code.jquery.com> <https://cdn.jsdelivr.net> <https://cdnjs.cloudflare.com> <https://stackpath.bootstrapcdn.com> <https://www.googletagmanager.com> <https://www.google-analytics.com> <https://www.google-gtagservices.com> <https://www.googleadservices.com> https://*.doubleclick.net <https://bat.bing.com> <https://connect.facebook.net> <https://www.facebook.com> <https://mylivechat.com> <https://t2.mylivechat.com> <https://www.shopperapproved.com> <https://cdn.doofinder.com> <https://us1-config.doofinder.com> <https://maps.googleapis.com> <https://www.paypal.com> https://www.paypalobjects.com; connect-src 'self' <https://www.google-analytics.com> <https://www.googletagmanager.com> <https://analytics.google.com> <https://www.google.com> <https://cdn.jsdelivr.net> <https://mylivechat.com> <https://t2.mylivechat.com> <https://www.shopperapproved.com> <https://www.googleadservices.com> https://*.doubleclick.net <https://bat.bing.com> <https://connect.facebook.net> <https://www.facebook.com> <https://cdn.doofinder.com> <https://us1-api.doofinder.com> wss://*.doofinder.com <https://maps.googleapis.com> <https://www.paypal.com> https://www.paypalobjects.com; img-src 'self' data: <https://invertersupply.com> <https://www.google-analytics.com> <https://www.googletagmanager.com> <https://www.google.com> <https://www.googleadservices.com> https://*.doubleclick.net <https://bat.bing.com> <https://connect.facebook.net> <https://www.facebook.com> <https://www.shopperapproved.com> <https://mylivechat.com> <https://t2.mylivechat.com> <https://maps.gstatic.com> https://www.paypalobjects.com; style-src 'self' 'unsafe-inline' <https://fonts.googleapis.com> <https://cdn.jsdelivr.net> <https://cdnjs.cloudflare.com> <https://cdn.doofinder.com> <https://t2.mylivechat.com> <https://code.jquery.com> https://www.shopperapproved.com; style-src-elem 'self' 'unsafe-inline' <https://fonts.googleapis.com> <https://cdn.jsdelivr.net> <https://cdnjs.cloudflare.com> <https://cdn.doofinder.com> <https://t2.mylivechat.com> <https://code.jquery.com> https://www.shopperapproved.com; font-src 'self' <https://fonts.gstatic.com> https://cdnjs.cloudflare.com; frame-src <https://www.googletagmanager.com> <https://www.google.com> <https://mylivechat.com> <https://t2.mylivechat.com> <https://www.googleadservices.com> https://*.doubleclick.net <https://www.facebook.com> https://www.paypal.com; form-action 'self' <https://www.facebook.com> <https://www.invertersupply.com> https://www.paypal.com; frame-ancestors 'self'; upgrade-insecure-requests;" </IfModule>

Shop Suey

even if i remove all of the above it still the same issue. I made video so i could actuallyu show you guys the issue

https://www.loom.com/share/bfa9a255709a4452837f94e825c777b9

As mentioned this happens randomly.

Be aware of webserver caching timing.
It can be of course whatever but IMHO your xss comands aren't that format I 'd use or recommend.

Sorry but I don't watch any videos or loom etc.

I am not seeing the errors anymore. No changes on my end.

I also believe that while testing on my live site, I may have submitted too many times in a short period of time, which could have temporarily triggered a block from PayPal.

This is just my assumption.

I’ll leave it to the customers from here—if I receive any feedback from them regarding this issue, I’ll share an update.