e-Path Payment Gateway (Australia) New v5 2008 Release

Hi all,

For those who are using the e-Path manual payment gateway (e-path.com.au) ...

If you've been caught out like me with the new version 5 release of the e-Path gateway, e-Path themselves are now providing updated Zen Cart/e-Path payment modules upon request.

The new e-Path v5 modules allow to input your individual gateway com code within the admin during set up (where it really should have been in the first place in my opinion).

I should mention that for me I needed to disable e-Path from the admin, upload new modules, then enable e-Path again from within admin. They don't mention this in their new modules documentation.

They are also providing a statement of declaration of PCI DSS compliance relating to individual gateways which come with a copy of the main PCI DSS compliance confirmation report from McAfee. Neat idea considering all the latest hum-drum over PCI stuff.

Cheers

Hi there, Can you guide me how to integrate e-Path with my zen cart.

Also can you give me all files that are needed for integration.

Thanks,

Hi miss_u987,

Each e-Path gateway has their own gateway URL. I believe e-Path hard code your unique URL into the modules.

e-Path provides the modules free, just email them identifying your gateway ID and you'll get them sent to you ready to go.

Cheers

Seriously think twice about using e-Path, have been waiting almost 2 months now for my gateway to be activated, let alone get my hands on a Zen module. Communication from these guys is appaling at best, all in all very unprofessional, can't help but wonder what would happen from my customers point of view, how would I even know if my customers weren't even able to get access to the payment module. Would love to be able to provide an alternative, but who? Perfect opportunity going...
:frusty:

Hey, thanks for the heads up about e-path. We will be giving them a big miss now.

Many of our customers Zen Carts were using the Ceon manual payment module with disaster results. Without a dedicated server, dedicated hardware firewall and without full PCI compliance certification from an independant auditor it is illegal to use the Ceon manual payment module. Two of my clients got caught and as their developer I've only just managed to squirm my way out of some major legal trouble by the skin of my teeth, but I had to get rid of the Ceon manual payment choice immediatly on all my customers Zen Carts.

This PCI stuff is really stuffing me amd my customers off big time now. Total bummer about epath, that one looked like the answer.

Thanks heaps for the heads up about them.

Will

I'm sure someone out there is using e-Path without dramas - would be a good "balancer" to hear from a successful user. The credit card compliance issue (as well as keeping current with legislation) is a serious matter though, I think the temptation for many small business owners to adopt the "she'll be right" approach is going to bear rather severe implications. Something I'm finding difficult is getting third party / client reference's to suitable gateways, this makes it even harder to find a compatible gateway solution. Starting the process over with another manual gateway (not to venture off topic, but "e-gateway") so fingers crossed.

I have already looked at egateway but have had them ruled out by the powers that be. You can't do it manually and capture the CVV according to Visa. This is about illegal as it gets. I have had this confirmed by Master Card and also my own merchant account bank.

According to the rules as I've been told, the CVV can never (and should never) be in your posession to enter in to a merchant account offline when a card not present payment is made because this means the CVV has been captured, recorded and stored temporarily - 110% illegal under PCI.

After what me and two of my customers have just been through ain't no way am I going to be responsible for suggesting anything illegal again in my life!

Will

Just been told one of my customers has already signed up for e-path yesterday against my advice.

It will be interesting to see what happens now. I'll give feedback.

Will

Hi Ubique17,

What happened to us with e-path turned out majorly different to you but it still took six days to get going.

They followed up with calling my customer by phone for security checks then the gateway was delivered after I sent them some info on the cart. I had them do the integration I mean may as well if its free.

After it was done I got a call from a guy called Shane, who is one of their integrators to follow up to make sure I was OK with their work cause I am the developer. Nice, I have never got a call from Pay Pal, Google Checkout or any other payment gateway in my life so their stocks went up big time.

After checking it out fully I really like e-path. It is a simple and basic sort of service that doesn't do anything special except collect and encrypt cc details to the max via a PCI compliant system for later offline processing.

I only have two small gripes. Their security is a bit over the top and unnecessary for my liking, you have to enter three key passes to get in to the admin and the third key pass is not emailed by e-path, they rang this through and gave it to my customer over the phone, all a bit much, why not just email it?:huh: The other one is if my customer looses key 2 or 3 e-path can't decrypt the cc details collected in their gateway because they don't keep key passes to gateway accounts. This might be great for security but it will cost my customer $55.00 to get another gateway system created if they loose their key passes. Why don't they just keep all customers key passes in the event of them getting lost?:huh:

All in all it is exactly what I was madly hunting for and it will be getting all of my zen cart customers using manual offline cc processing out of a huge bind with all this PCI rubbish.

Put me down as a tick for e-path. :clap:

willtech:

Hi Ubique17,

I have already looked at egateway but have had them ruled out by the powers that be. You can't do it manually and capture the CVV according to Visa. This is about illegal as it gets. I have had this confirmed by Master Card and also my own merchant account bank.

All in all it is exactly what I was madly hunting for and it will be getting all of my zen cart customers using manual offline cc processing out of a huge bind with all this PCI rubbish.

Put me down as a tick for e-path. :clap:

Doesnt e-path fall under the same problem of collecting cvv and is thus not allowed by visa?
I dont understand why you approve of e-path? or is it just that they atleast are pcicompliant?

I have 7 zen-cart sites running and the problem appears on all. Six are live sites and one a test site.

I will not list all the domains but https://www.rocknrollshirtshop.com is one of the live sites and the test site if anyone wants to run a test is https://www.rocknrollshirtshop.biz.

The problem I am encountering is the Epath payment is intermittently (somewhere around 1 out of 5 orders) not completing so I receive the payment information from epath
but the order does not complete in zen cart and the items remain in the customers shopping cart with no order, confirmation of epath payment or heads up email sent.

The problem can be duplicated (and this may be the cause) by not returning to the site when the payment is complete. Epath is slow returning the customer (approximately 25 seconds with a please wait screen) so there is a lot of time for the customer to bail out.

I have talked to Epath and they blame the cart for the problem saying they completed their part since I received the payment email.

PayPal and check are also available payment methods and PayPal never shows this problem.

The sites are on a dedicated Ubuntu 12.04 server on the peer1 network and I have had the server checked it does not appear to be dropping connection.

The sites are all close to the same configuration. From the standard install I add

Google Merchant Center Mod 1.13.0
Ultimate SEO 2.212
Configure RCS has just been added but problem was there before
Sitemap XML 3.2.12
Easy Populate 4
USPS 7/28/13 (on some sites)
UPS (on some sites)

I have not found any errors in the log folder that would match when the problem occurs, and I have not seen anything in the systems logs.

Has anyone seen anything similar?

Hi Websmith,

It was me who attempted the first ZC/e-Path plugin many years ago which did not work very well. DrByte came to help and we got it working. I think he again helped to update the code in the latest version. e-Path and ZC work fine for me. I have three ZC's each with e-Path. I have never experienced the 25 seconds you talk about. With me it is more like four to five seconds before my website displays after e-Path but my web site hosting is pretty fast, no delays.

I went to your site to check it out but you don't have a ssl cert. This could be a problem because e-Path returns people and some info via post to your site. Firefox will interrupt the flow (agrrrr) of moving info via post from a secure site to a non-secure site by way of a warning about possibly not being safe. Some people might just shut their browser down in mid flight out of fear something is wrong so ZC doesn't see the people back. I don't think ZC will record the order if they don't get the people back. Getting a ssl cert is a good idea anyway cause nobody will get any interruptions then.

DrByte will know more than me about how the plug in works but it is very basic. Every person ZC accepts back from your gateway is closed off as if the payment was completed successfully as long as ZC gets the person back I think. It they don't come back then I don't think you would ever know except e-Path would still be doing its thing independent of whether your ZC is working or not.

Can you post your two e-Path plug in files and I will have a look at them by comparing them to mine.

J.

I would like to add the following information.

The sites do have ssl on the admin side (self-signed) and the test site rocknrollshirtshop.biz has ssl (self-signed) on both admin and store sides for testing purposes.

One of the pluses for E-Path was no requirement for SSL or PCI compliance at the site level. This is stated in their FAQ but they do have a disclaimer that SSL would be a better choice.

To provide commercial ssl on the sites requires I change over from the name DNS currently used to Unique IP's and individual certs since I was told by E-Path that the name dns and SAN certs which will handle multiple domains with name DNS was not acceptable.

The previous server we had was a constant battle to keep the PCI compliance established and an added cost for SSL. With this not being required using E-Path was a strong reason for choosing them.

Because there is no card information or any reason for the site to have SSL.

Is there a way to make the return URL be just HTTP: instead of HTTPS: in the code?

If I can find a way E-Path still provides the best fit for the way I am required to process cards (due to pre-orders) and follow the Mastercard/Visa requirements and I would like to continue processing through them.

Hey websmith.

Stick to one message thread buddy. Your problem is being discussed in much more depth on the other thread you created here:

http://www.zen-cart.com/showthread.php?215950-Sudden-Epath-Gateway-Problem

It only confuses things if you add the same comment to two different threads.

we use it here https://premiersalon.com.au. No problems for the last two years

websmith:

I have 7 zen-cart sites running and the problem appears on all. Six are live sites and one a test site.

I will not list all the domains but https://www.rocknrollshirtshop.com is one of the live sites and the test site if anyone wants to run a test is https://www.rocknrollshirtshop.biz.

The problem I am encountering is the Epath payment is intermittently (somewhere around 1 out of 5 orders) not completing so I receive the payment information from epath
but the order does not complete in zen cart and the items remain in the customers shopping cart with no order, confirmation of epath payment or heads up email sent.

The problem can be duplicated (and this may be the cause) by not returning to the site when the payment is complete. Epath is slow returning the customer (approximately 25 seconds with a please wait screen) so there is a lot of time for the customer to bail out.

I have talked to Epath and they blame the cart for the problem saying they completed their part since I received the payment email.

PayPal and check are also available payment methods and PayPal never shows this problem.

The sites are on a dedicated Ubuntu 12.04 server on the peer1 network and I have had the server checked it does not appear to be dropping connection.

The sites are all close to the same configuration. From the standard install I add

Google Merchant Center Mod 1.13.0
Ultimate SEO 2.212
Configure RCS has just been added but problem was there before
Sitemap XML 3.2.12
Easy Populate 4
USPS 7/28/13 (on some sites)
UPS (on some sites)

I have not found any errors in the log folder that would match when the problem occurs, and I have not seen anything in the systems logs.

Has anyone seen anything similar?

I have the same problem using e-path credit card orders. Some orders received and some not. Why?