Remotely Hosted Payment Page - Possible?!?!

Update

It is deffinatly checkout_process.php that needs to let order.php know this unique value.

checkout_process.php reads the value being passed to it from the gateway and I've been working on adding code to it to make that same value available to order.php so it includes it in the confimration email.

However, the strange thing is order.php is called from within checkout_process.php so I can't really create a session wthin checkout_process.php.

Any ideas anyone??

Vger:

Please feel free to write one. And once you've done it post the info here, as I'm sure others would be interested to have it.
Vger

I would love to, but the documentation is rather sparse.

Regards,
Ian Tresman

Well after quite a while and with the kind input of Merlinpa1969 and Vger, we are not able to get Zen to read a simple value being passed back to it by a remotely hosted gateway and put it on the order confirmation emails.

From my previous posts you will see the result of all attempts, most have been per the kind suggestions from the above two "zenners".

I narrowed it down to one area:

order.php is unable to read the a value being passed back to it and therefore is unable to add it to the confirmation emails.

I'm heading over to the "suggestion" section because its a pretty basic function. OSCommerce does it without a problem - and this is something I don't like admitting very easily.

Thanks

suggest you ask DrByte

Who and where is DrByte???

DrByte is a dev here.
he willbe your best help on this

do a member search he is easy to find

I've PM'd DrByte, hope this is the appropriate thing to do. He must get hammered with mundane requests. At least he'll see that no stone has been left unturned in our quest here.

Thanks Merlinpa1969

This is not a problem in Zen Cart. The problem is with missing logic in the payment module.```php
function before_process() {
return false;
}

should be
```php
    function before_process() {
      global $messageStack, $order;
      if (!isset($_POST['ord']) || $_POST['ord'] == '') {
        $messageStack->add_session('checkout_payment', MODULE_PAYMENT_EPATH_ERROR, 'error');
        zen_redirect(zen_href_link(FILENAME_CHECKOUT_PAYMENT, '', 'SSL', true, false));
      }
      $_SESSION['ord'] = $_POST['ord'];  // this is just to keep it handy for other purposes ... it's not really needed
      $order->info['comments'] .= sprintf(MODULE_PAYMENT_EPATH_RECEIPT_NUMBER_TEXT, $_POST['ord']);
      return $_POST['ord'];
    }

There are a couple other errors in the code you had sent to Merlin. I'm attaching the updated files for your convenience.

What can I say.

It works perferctly and e-Path have approved it as the offical module for Zencart for the e-Path payment gateway.

They have given you a nice mention and published an extra link to these forums I think.....

http://thefruitboxshop.com/shopping_carts.html

Thank you oh great one.

Actually, they requested some minor alterations to the module which I have completed before they signed off on it being the officially approved one for e-Path (as far as they are concerned). But the fact remains it would not have happened had it not been for the great DrByte.

Thanks

Cool.
Perhaps you might convince them to correct their links, etc:

• the correct URL is zen-cart.com (note the hyphen)
• Zen Cart is formally spelled as two words, both capitalized, not Zencart

Glad to be of help.

Hi Dr Byte,

Advised them and they did it straight away.

Please check all is correct - http://thefruitboxshop.com/shopping_carts.html

Thanks Dr Byte

It's pretty close. Thanks for letting them know.

I see it, in the acknowledgment, they didn't change that one. I'll let them know.

Bye

Cool - Thanks.

Have they tested to be sure nobody can spoof an order? ie: start an order, go for authorization, but then fake-out the return process to make it look like the return was successful even if it wasn't?

Hi Dr Byte,

E-Path is a manual gateway so there is no success or failure responses. The merchant receives the order and then can check it (approve it or otherwise) before he/she charges the credit card.

As you know with a real time gateway the merchant doesn't have a chance to approve the order before the credit card is charged. The merchant's merchant account is open to anyone anywhere to enter any number they like. So spoofing is a real concern.

But with e-Path (as well as the cc capture in ZEN) you have that extra layer of security in that you can check the order first. If something doesn't look right the card just doesn't get charged. Perhaps the merchant can follow up with an email contact or phone to confirm things - something you can't do with a real time gateway before the card is charged. This is what I do. Its completely eliminated fake transactions for me and not having to deal with charge backs later is a blessing.

Having gone from PayPal to a real time gateway then to e-Path I've done the rounds myself and as far as I am concerned the manual way is bloody awesome. However, if other people are reading this then I should say it is not for everyone. If you do large numbers of transactions then you will surely get tired of having to charge the card yourself. You will appreciate the automation that a real time gateway offers. But then again real time gateways comes at a cost, i.e. will cost you a lot more and you don't have any control before the card is charged.

The feedback I've got from e-Path is that they are happy with the module. I had tried to further modify it so the display of the e-Path receipt number appeared under the name of the gateway in the order confirmation email, i.e., simply trying to tie it into the 'payment' display and not the 'comment' display, but didn't have much luck.

I know they are very interested in having the e-Path payment gateway option as a standard option in future Zen Carts but they can take this up with you themselves.

Thanks again Dr Byte.

P.S. And they are pretty full on into promoting Zen and OSCommerce on their main site now (http://e-path.com.au). They have the Zen logo in a graphic and mention it numerous times as "one of the worlds best shopping carts". Its great Zen is getting this type of direct support/promotion from a payment gateway.

Cool :)