Paymentech (aka VersaPay, aka Orbital)

sab522:

I would like to be sure I missed nothing : in the latest one, there are no files for the "classes" folder ?

I contacted Paymentech and they confirm everything is correct. (We already have another shopping cart system working with Paymentech account that's gone live since 3 months)
The card number is a valid one.
Added all our server IP addresses in their records.
But into Zen Cart, when I checkout, i got same error message : "An unexpected credit card gateway error occured. Your order was not processed. "

I have installed the Paymentech module and I am having the exact same problem. I get a "gateway error" just like you.

The other info for the error is: ProcStatus = 9717 - Security Information - agent/chain/merchant is missing.

I don't see anywhere in this module to enter your client number, maybe that is the problem?

no, that just means you don't have your account set up properly on their end. It means their server doesn't recognize your server.

Thank you for replying. I called Paymentech and they say the error indicates an IP address problem.

I have a shared hosting package with 1&1 hosting, with a fixed IP address (which I verified) and dedicated SSL with the same IP address (at least that's what they tel me). Paymentech says they have this IP on their production server but it's not working :)

I had the same problem... and Paymentech was NO help in figuring it out! For me it turned out to be a port that had to be opened at the server to allow proper communication between the two. So grill the paymentech folks and make sure you get the info you need and then call your host and make sure they play nice. If they don't, get a different host. Best of luck, but I'm sure it has nothing to do with the module.

You are correct. Your module was fine.

The error was the IP address and Paymentech weren't exactly helpful in sorting it out. My website FTP address, the one listed in the domain record, is what I gave them day 1 and was correct. For whatever reason, the xml requests sent to Paymentech were coming from a slightly different IP address. I had to ask them what that was and instruct them to add that IP. Since then, things are behaving as expected.

Maybe to help people in the future to avoid the same problem, it would be a good idea to add a bit of info to your readme file about this issue? A bit about the 9717 error code, and that it means that Paymentech is seeing a different IP from you means you should call them and see what IP is actually sending the info and have them manually add it to their records.

Thank you for offering your help & code.

The "different" IP address is likely the "primary" IP address of the server on which your website is hosted ... since CURL requests will be initiated from that address, regardless of the dedicated-IP address of your own domain. So, unless you have a dedicated server, the confusion you mentioned is unsurprising.

A similar, but less common, situation would occur if you were using a proxy server for your CURL traffic. Fortunately, most contemporary hosting companies don't need to use proxies.

How would you typically determine this IP address of CURL requests? That would be good to know for future reference :)

Also, AmEx and Discvoer transactions are being rejected with the message "The credit card number starting with 3714 was not entered correctly, or we do not accept that kind of card. Please try again or use another credit card." Any ideas?

Stupid me, I needed to turn on AmEx and Discover under Admin > Config > Credit Cards!

So here are my tips for making this work.

1. Paymentech does work with ZenCart - it's not certified by them but it works.
2. Download, install, and configure the Paymentech module at
   http://www.zen-cart.com/index.php?main_page=product_contrib_info&products_id=796
3. Make sure "Credit Card - Offline Processing" is "removed" under Admin > Modules > Payment in ZenCart so that when you run your credit card transactions, the only option is for Paymentech.
4. Obtain IP Address by running test transactions and calling Paymentech support for results. Ask them what IP address the requests came from and have them add this IP to your account. In my case, the IP Address was different than our actual server IP.
5. Make sure that all the credit cards you want to accept are turned on in ZenCart under Admin > Configuration > Credit Cards
6. Profit.

Does anyone know which line needs to be UNCOMMENTED to return the information that Paymentech needs to certify? This question was asked earlier in this thread, with no response. There does not seem to be any indication in the readme file either.

Thanks & Regards.

Thanks for the module! I recently installed the module for a client and it works perfectly.

The set-up was actually much smoother than I expected. I contacted my rep and told him I was using Zen Cart and gave him my client's website IP addresses and about an hour later the system starting accepting CC orders from the site.

Orbital stated that Zen Cart is indeed an 'authorized shopping cart' and that there were no other steps to complete.

Again, thanks for the contribution!

Ben

http://www.keepitlucid.com

Painful (not the module, the company)! Maybe it's just because we have a clueless rep Evelyn
Rodriguez, but my experience with Paymentech/Orbital was terrible! First we had to fill out this 19 page document to create a new division for e-commerce. Ok, that's fine I guess, however it took weeks for them to process this.

Then when that was complete she called Orbital with me on the line and they said we had to go through the "certification" process.

Evelyn sent me this questionnaire, and along with it told me that this is a 6-8 week process!! Then included this nice comment:

Please note that at the time of setting this new division it was never told to us you will be using Zen Carte as a shopping cart. If you have any questions please let me know. Thank you!

Umm..nobody asked! Not even in 19 pages of the new division document did they ask.

I called her and she said that it is our responsibility to make Chase aware that we are using a cart that is not on this list: http://www.chasepaymentech.com/portal/community/chase_paymentech/public/public_website/partners/partner_directory/ecommerce_solution_partners/orbital_gateway_partners

I assume my experience is largely due to a poor rep, but I thought I'd post my experiences. I guess if you plan to use these wonderful people make sure you tell them you are using and unsupported platform when before they start processing the division.

In summary: Sucks you're having problems. Shouldn't matter what shopping cart you use (that's the point of the certification process). Once I figured out the module and passed their certification, I had no problems at all. Nobody ever asked what software I was using... just needed proof it works. The 19 page thing is normal.

• Steven

I'm in the testing period with Chase / Orbital. So far so good, except for Purchase Card Level II (basically, corporate and special business cards.) I did a few fake transactions and the lady in testing says:

"If Purchase Card Level II data is being supported you are not sending the required tags for it. Please review the spec for the additional attributes that are required."

The address to the spec is below. I assume the tags/attributes are similar to this from a regular card- <?xml version="1.0" encoding="UTF-8"?> <Request> <NewOrder> <IndustryType>EC</IndustryType> <MessageType>A</MessageType> etc.

Does anyone know how to add the tags/attributes they need? I assume it's to the paymentech.php file, but it's way beyond my knowledge.

Cheers,

Robbie

http://download.chasepaymentech.com/portal/server.pt/gateway/PTARGS_0_226_1595_0_0_18/Orbital_Gateway_XML_Specification.pdf

Only four tags/attributes need to be added:

R

The Orbital certification person responded to me with the quote below. I'll be modifying the script I suppose, but what a pain working with this company has been.

Hello

Please correct the issues below and resubmit the script for review once the issues are corrected.

-CardSecValInd is only supported on Visa and Discover and should only be sent on those card types if CardSecVal is provided. Please omit the CardSecValInd on all other transactions.

-AVSDestzip, AVSDestaddress1, AVSDestcity, AVSDeststate, AVSDestphoneNum, & AVSDestcountryCode should only be used for "Bill Me Later" transactions. Please remove from your request

I just went through the same thing (the woman was very patient in going back and forth with me many times) and figured out how to delete those parts from /includes/modules/payment/paymentech.php

<NewOrder>
				<IndustryType>EC</IndustryType>
				<MessageType>" . ( MODULE_PAYMENT_PAYMENTECH_AUTHORIZATION_TYPE == 'Authorize' ? 'A' : 'AC' ) . "</MessageType>
				<BIN>" . MODULE_PAYMENT_PAYMENTECH_BIN . "</BIN>
				<MerchantID>" . $MerchantID . "</MerchantID>
				<TerminalID>" . MODULE_PAYMENT_PAYMENTECH_TERMINAL_ID . "</TerminalID>
				<AccountNum>" . $_POST['cc_number'] . "</AccountNum>
				<Exp>" . $_POST['cc_expires'] . "</Exp>
				<CurrencyCode>" . ( $_SESSION['currency'] == 'CAD' ? '124' : '840' ) . "</CurrencyCode>
				<CurrencyExponent>2</CurrencyExponent>"
				. ( ( $_POST['cc_type'] == 'MasterCard' ) || ( $_POST['cc_type'] == 'Visa' ) ? '
				' : '') . "
				<CardSecVal>" . $_POST['cc_cvv'] . "</CardSecVal>
				<AVSzip>" . $order->billing['postcode'] . "</AVSzip>
				<AVSaddress1>" . $order->billing['street_address'] . "</AVSaddress1>"
				. ( $order->billing['suburb'] ? '
				<AVSaddress2>' . $order->billing['suburb'] . '</AVSaddress2>' : '' ) . "
				<AVScity>" . $order->billing['city'] . "</AVScity>
				<AVSstate>" . $paymentech_state_billing_code . "</AVSstate>
				<AVSphoneNum>" . substr(eregi_replace("[^0-9]", null, $order->customer['telephone']), 0, 14) . "</AVSphoneNum>
				<AVSname>" . $_POST['cc_owner'] . "</AVSname>
				<AVScountryCode>" . $paymentech_country_billing_code . "</AVScountryCode>
				<OrderID>" . $new_order_id . "</OrderID>
				<Amount>" . number_format(($order->info['total'] * $order->info['currency_value']), 2) *100 . "</Amount>
			</NewOrder>

It wasn't enough to // block them out of the code. Keep in mind I deleted CardSecValInd (and not the similar CardSecVal) because, at least for now, I'm not verifying the extra 3-4 digits on any card. Assuming you will want to verify it, that part of the code needs to be in for Visa and Discover.

Cheers,

R

It seems they are right. In this module's code you can see (line 412):

. ( ( $_POST['cc_type'] == 'MasterCard' ) || ( $_POST['cc_type'] == 'Visa' ) ? '
  <CardSecValInd>' . ( ( $_POST['cc_cvv'] != '' )? 1 : 9 ) . '</CardSecValInd>' : '') . "
```According to :
<http://download.chasepaymentech.com/portal/server.pt/gateway/PTARGS_0_226_1595_0_0_18/Orbital_Gateway_XML_Specification.pdf>

CardSecValInd is "Supported by Visa and Discover only".  So the MasterCard in the code should be changed to Discover.  

As for the other values she said I needed to remove, the XML specification document titles of those values actually include Bill Me Later as below:
"Bill Me Later Cardholder Destination Address Zip Code".  So I suppose she's right again.  I've removed them and will submit the test again and hopefully 6-7 days later I'll be in business.

giftmeister... // commenting would work if that was php. In that section it is XML so commenting does work just fine as long as it is the proper commenting syntax.

As originally stated when I provided this contrib... it was set up for how MY STORE was using it. Of course you have to modify it to suit your own situation. I don't use purchase cards or discover cards for example.

And the AVS works just fine for my MC transactions

s_mack. I personally am very appreciative of your work, it's saved me and many others tons of time. The things that Orbital is referring to are very small issues that actually don't effect much. They are just extra data they aren't expecting. I applaud you for actually taking the time to turn a project for your store into something that everyone can use. :clap:

I know I have a number of custom projects that I should have turned into contributions, but can never seem to "find the time" ...which is of course a very poor excuse.

Thank You!