Stuck Orders - I can already hear the sigh - Not another one!

All PayPal orders are now getting stuck. The customer is returned to my site as they should be but no order is registered and they have:

Your Order Number is:

but no order number.

I have had PayPal working flawlessly on all three of my sites from a single account for over a year and not had a single hiccup but then my host made some server changes at the time my problems started :(

I accept credit cards via the Protx Direct module and have no problems with this or the cheque module. I've also done a clean install of 1.2.7d and have the same problem.

My host now has Register Globals = OFF and PHP API Mode = cgi. They've also said "You'll need to make sure nothing the PayPal is calling back to has permissions above 755"

I've trawled through the dozens of threads covering stuck orders but found nothing to assist me.

I have also:-
Checked the default email (spelling, caps etc.)
Checked the PayPal IPN Return URL is correct.
Checked ipn_main_handler.php is where it should be and gives no errors
Removed and reinstalled PayPal
Done a complete fresh install of 1.2.7d on a clean database with no mods added.
Checked my error log for clues.
Removed meta_tags.php from my overrides.
Read the FAQ on php in cgi mode and sent this to my host.

My host suggested testing with register_globals = on by creating a php.ini in both the store and admin root. Apparently someone else had the same issue after the changes and this fixed it for them. Not for me though but besides the store and admin root what other directories would I need to add the file to? Would this matter anyway as I thought Zen is happy with either globals on or off?

The contents of my php.ini :-

register_globals = On
zend_optimizer.optimization_level=15
zend_extension="/usr/local/Zend/lib/ZendOptimizer.so"

What else can I try that could troubleshoot this taking the server changes into account?

My set-up:-
Zen Cart 1.2.7d
Database Patch Level: 1.2.7
PHP Version 4.4.2
Server API CGI
register_globals Off
safe_mode Off
mysql 4.1.19

Any help would be greatly appreciated. :D

Brent

PS. I have installed the stuck paypal orders script and after running the orders are pushed through and fully functional.

Thank you Brent for taking the time to post your solution :)

It is very helpful to others who are searching and find your thread :)

Kudos to u!

Hi,

My post was probably badly worded. What I was trying to say is the orders are there but are truly stuck. I had seen other posts where Linda had been asking various questions to try and ascertain if anything was being recorded.

I wanted to show that they were all there but needed a little help :D

I also still need help :D

Brent

I've just enabled the Nochex payment module and that works so whatever my problem it only affects PayPal.

Is PayPal looking for any files with permissions above 755 when it returns to the store?

I've run out of ideas to troubleshoot this. :(

Brent - I am sorry I can't be more help - i haven't ever had a problem with using the paypal module :(

are you positive that the IPN in your paypal is set to return to the correct place? And the module is configured correctly ?

I am just making stabs here - I truly don't have a firm answer for you :(

Hi Brent! :)

Brent:

Would this matter anyway as I thought Zen is happy with either globals on or off?

I don't know anything about the paypal aspects of Zen Cart but when I just rewrote the Protx Form module the other day it was obvious straight away that the reason so many people had been having problems with it not recording the order was that a check was made for a variable which was only registered if register_globals was on.

If you let me know what files you are using (are they the paypal ones included with ZC?) I can have a look for you!

All the best...

Conor

TinaS:

....are you positive that the IPN in your paypal is set to return to the correct place? And the module is configured correctly ?

Yes :yes: As I said I've had it working without a hitch across all three stores for over a year without a single stuck order. Then the security was tightened on the server and the same day PayPal stopped working.

My host tells me they have hundreds of Zen and osC stores and nobody else appears to be affected.

Conor:

.... If you let me know what files you are using (are they the paypal ones included with ZC?) I can have a look for you!
Hi Conor,

Hope you are well, perhaps this warm spell is to blame :D

Yes, I'm running the default files but I am using the additional section of code that allows you to customise the paypal checkout page for each store. In my fresh install I tested though it was the bog standard module.

Thanks for the offer of help.

Brent

Brent:

Hope you are well, perhaps this warm spell is to blame :D

Umm.. to blame for what? :)

I've been on the forum every day recently as I just wrote the new Protx Form module! :thumbsup:

Brent:

Yes, I'm running the default files but I am using the additional section of code that allows you to customise the paypal checkout page for each store. In my fresh install I tested though it was the bog standard module.

Well, there's nothing that would fail, that I can see, in the standard files... what is this "additional section of code" you are talking about?

Thanks,

Conor

conor:

Umm.. to blame for what? :)

I've been on the forum every day recently as I just wrote the new Protx Form module! :thumbsup:

Not you Conor! Can't fault your service :D I was referring to the sudden unexplained PayPal glitch.

conor:

.. what is this "additional section of code" you are talking about?

I'll have to have a look at the files again as it was over a year ago that I changed this. From memory there is a section of code that is commented out that adds a new field in admin allowing you to set a custom payment page name i.e. one that matches your customised paypal payment page. I think there was the odd post about in the Archive forum saying that this section could be problematic but it's always worked for me.

I have however done a clean install to rule this out.

My host has asked > What other files does the module call and what are the permissions of them? Any idea?

Thanks

Brent

When PayPal returns to my store after accepting payment is it only running checkout_process.php?

If the orders are not being processed is this where are should start?

ask your host if they have blocked incoming traffic to ports 80 or 443,
this looks alot like a firewall issue,

NO none of the files paypal uses are set to over 755.
most should be 644

Hi Merlin,

Pretty sure they don't but I will check again. I've read your numerous posts covering this problem but nothing seemed to apply to me.

You probably haven't played with Nochex as it's UK based so may not know the answer. If Nochex works but PayPal won't does this give me any clues? What does PayPal do/access that other Payment gateways don't do?

My host knows their stuff and this is the first problem that has them stumped. The main problem being that the changes they made don't seem to have affected the majority of stores. I am hopeful though as someone else has now reported the same issue so I'm not alone. :D

As stated earlier the changes consisted of setting register_globals to off and running php in cgi mode. They also used a script to set all configure.php files to 444 as there were a number of insecure sites that were being exploited. As a test I've now set globals to on via a php.ini but this has not helped. So anything obscure that changing to cgi mode could be causing my grief?

Brent

register globals on or off wont cause this issue as zen cart is recomemded for globals OFF

php as cgi could be an issue but probably not,
make sure that if they added APF that they leave the correct ports open for incoming,
in this case 80 and 443,

paypal is picky,
you can also try replacing the ipn_main_handler.php in the root and make sure it is set to 755

Merlin,

This is the latest response I've had from my host:-

I am pretty certain now this has got to be to do with mod_security and altering the ruleset
Anything you could sugest on this? The strange thing as that this issue really does only appear to be affecting two sites, mine being one, and all the rest are fine.

Brent

ask them WHAT rules they implemented in mode security

Here's their reply:-

I have checked the mod_security rules for your domain and they are not blocking any of your requests.

Please see the access logs for your domain which shows code '200' meaning that it is not throwing an error here :

++++++++++++++++++++++++++++++++++++++++++++++++++++++
65.254.32.50 - - [22/Jul/2006:16:29:25 +0100] "GET /store/ipn_main_handler.php HTTP/1.0" 200 0 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8) Gecko/20051111 Firefox/1.5"
65.254.32.50 - - [22/Jul/2006:16:29:26 +0100] "GET /favicon.ico HTTP/1.0" 200 825 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8) Gecko/20051111 Firefox/1.5"
++++++++++++++++++++++++++++++++++++++++++++++++++++++

Is this of any help?