Authorize.net SIM - not secure option

Authorize.net is stating that the SIM option should be used in case of no SSL installed - see

http://developer.authorize.net/guides/

However, when activating authorize.net on zen cart, it prompts entering a cc info. My understanding was that it should redirect to authorize.net secure gateway and ask for the cc info there and not on an unsecured zen checkout page. Am I missing something?

Thanks

Did you activate the proper Authorize.net option in the admin? Make sure you activate the SIM method (not the AIM method) in the admin.

Yes, it is a standard (SIM) module and it gives a prompt for a cc info on the step 3 of the checkout. The difference, when I activate the AIM module, is that it also has a cvv number field

UPDATE:

I just activated the SIM method on a zen test site and see what you are talking about now. Typically when using the SIM method, the user is taken to an off site secure form (on the Authnet gateway), thus no need for a SSL cert. (transactions are processed off the server).

In this case I see the same thing you do. The user is forced to enter their CC number on a non-ssl connection and only when they are asked to confirm the order (the last step) is the transaction actually submitted for processing.

yes, something is wrong here. The SIM option should redirect the user to the ssl encrypted authorize.net page (like the 2co.com module or paypal IPN).

the question remains the same: is it a drawback in the zen authorize.net module or we are missing some settings here?

That SIM module is obsolete and hasn't actually had any feature updates in a couple years. (And is really poorly designed)

A full-featured SIM module is now built-in to the upcoming v1.3.8 release.

DrByte, when can we expect ver 1.3.8 to be released?

Also, will it incorporate PayPal Pro?

andy1234:

DrByte, when can we expect ver 1.3.8 to be released?

Also, will it incorporate PayPal Pro?

Yes it will.

Date not yet determined. You'll find that we seldom if ever give an expected date for new releases.
"Soon" is the best answer you'll get :blush:

Hmmm ... I think it's backportable...

1. Uninstall your existing SIM module
2. unzip the attached file and upload the 2 updates to your site
3. re-install the SIM module.
4. configure the settings
   Set Gateway Mode to offline in order to send transactions over to authnet for payment on their site.

Feedback would be appreciated.

trying to follow this setup...

2 issues so far:

1st:
what is the MD5 Hash - Encryption Key SIM install is asking for ?
i don't see where to generate it on authorizeNet

2nd:
i'm using the API Login ID and Transaction Key provided by authNet, but am still getting the same (13) error code
"The merchant login ID or password is invalid or the account is inactive."

the other issue mentioned is solved - SIM is no longer asking for CC info on the non-SSL site... now if we can just get the handshake transaction squared away...

thank you, good Dr.
/a

ambiguator:

1st:
what is the MD5 Hash - Encryption Key SIM install is asking for ?
i don't see where to generate it on authorizeNet

1. login to authnet merchant area
2. Click on Account
3. You'll be on the Settings Page.
   Halfway down the page is a section about "security settings"
   One of the links is "MD5-Hash".
   Pick a word or phrase, recommended with letters and numbers and some uppercase letters.
   Save it.

enter that same word/phrase into your Zen Cart authnet MD5-hash field

seems i have answered this question and more before i saw your reply:

first - it seems that the md5 function works fine with a blank MD5 key.

secondly - i was posting to the wrong authnet server.

not wishing to dig through anything else to figure out the proper method of fixing this issue, i added this line to the top of authorize.php:

   define(AUTHORIZENET_DEVELOPER_MODE, 'on');

which causes me to post to
https://test.authorize.net/gateway/transact.dll

instead of the default
https://secure.authorize.net/gateway/transact.dll

now everything works peach-ily.

did i forget to mention that i am not a merchant but developing the site for a client? didn't realize that was relevant...

thanks again, Doc!

/a

hey guys, i have very similar issues establishing ZC for a client who doesn't want to pay for an SSL. I'm using the SIM option and everything seems great until we go over to Authorize.net. once we're on the site there, it takes all the credit card information, and sends us back to my shopping cart with a "This transaction has been declined.Your credit card was declined. Please try another card or contact your bank for more info." message no matter how many different cards are tried from different banks. I noticed that the zen cart stopped asking for ANY credit card info once i set up Dr. Byte's new SIM payment module, so i'm wondering if there's some sort of issue there. Anybody else having this problem or have suggestions?

roma - when you're using SIM, your zen-cart site is not supposed to ask for CC info - that's what Dr. Byte's updated module addresses (at least in part).

If you are still having trouble with authnet and the CC being declined, check that you are in Test mode (if you want to test) and that you're using a proper Test CC#.

If you are in Test mode but using a real-life valid CC#, then it will be declined.

If you are not in Test mode but using a Test CC#, then it will also be declined.

If that still fails, hit the form back with more specific information (ie. what modes you're in, what CC# you're using, what URLs you're posting to on authnet, version of ZC and authnet, etc.)

thanks ambiguator!

I'm in production mode for both the zen cart and the auth.net account.
when i click the "confirm the order" button i get taken to the authorize.net gateway at https://secure.authorize.net/gateway/transact.dll

the really really weird thing is that at 9:30 am I went ahead and bought an item through the site using a live credit card. now authorize.net is suddenly rejecting everything again. very very strange