Worldnet paymnet solution issues

  • Posts: 107
  • Thank you received: 1
10 years 7 months ago #153331

Hi,

I struggle with the configuration of my payment Worldnet plugin. I requested a test account with them, tested the connection & transactions and it worked fine, then I switched to live environment and it didn't work at all. I'm trying to understand the engine behind the plugin, until now I used a payment solution hosted page where everything was taken care of the payment gateway, now it looks like the payment is processed on my side, or is it based on iFrame? If it's processed by my site, do I need a SSL? Is it secure?

When I tested the payment it didn't work plus my card verification didn't work neither, I purposely made a mistake in the cart details but the payment was yet accepted. Didn't go through but the was no error and the order was created? Any ideas?

Thanks,
Kashka


-- url of the page with the problem -- : hammocks.ie/hammocksUAT/

Please Log in or Create an account to join the conversation.

  • Posts: 12953
  • Thank you received: 1778
10 years 7 months ago #153429

Hello Kashka,

then I switched to live environment and it didn't work at all

Can you give me more information about the issue that you are having through some screenshots for example ?
Thanks.

Please Log in or Create an account to join the conversation.

  • Posts: 107
  • Thank you received: 1
10 years 7 months ago #153467

Hi Mohamed,

Please see attached the screen shot of my plugin payment page,
see attached the checkout payment page, I entered my real card details without my real name and the paymnent was still accepted. The order was created, see the screen grab, but no payment went through to Worldnet.
Please help!
Can you as well answer my question from the original post, how the plugin works, is it an iFrame, how secure it is and if I need SSL?
Do I need to add URL do Live host somewhere in the settings?
Thanks,
Kaska

Attachments:

Please Log in or Create an account to join the conversation.

  • Posts: 82868
  • Thank you received: 13375
  • MODERATOR
10 years 7 months ago #153591

Hi,

I reviewed the plugin and there is a typo in the code which prevents you from using the non sandbox mode.
Change the second line:
$curlUrl = ' testpayments.worldnettps.com/merchant/xmlpayment ';

to:
$curlUrl = ' payments.worldnettps.com/merchant/xmlpayment ';

And it should be working correctly.

As the WorldNetTPS payment plugin uses the API where the credit card details are entered on the checkout of your website, a SSL certificate setup on your website is highly recommended.

Please Log in or Create an account to join the conversation.

  • Posts: 107
  • Thank you received: 1
10 years 6 months ago #153679

Hi,

That worked, thanks, I advice to make changes to your plugin to spare other ppl trouble.
Unfortunately the validation doesn't work, I have both Card validation code and Credit card owner options enabled but they don't do the job, basically I entered dummy text instead of credit card owner and the payment was accepted, so neither owner validation nor card validation worked.
I really need to put the site up and the payment issues are the only ones that delay me, please help

Thanks,
Kashka

Please Log in or Create an account to join the conversation.

  • Posts: 107
  • Thank you received: 1
10 years 6 months ago #153681

Hi,

Other test showed that if I make a mistake in the payment details there is no validation, payment is confirmed, order created but the payment won't go through, it's not great all all. Is there a way that instead of using plugin to direct to payment page hosted by Worldnet?

Thanks,
Kashka

Please Log in or Create an account to join the conversation.

  • Posts: 82868
  • Thank you received: 13375
  • MODERATOR
10 years 6 months ago #153694

Hi,

That change will of course be in the next version of HikaShop.

If the order is created it means that the payment gateway returned a responsecode with the value A which means that the payment has been accepted by the payment gateway.

If the payment gateway didn't accept the payment but still sent back a "A" responsecode then there is a problem with the payment gateway as it should not be doing that and in that case I would recommend to contact the payment gateway support for help.

The payment plugin we developed for WorldNetTPS only supports the XML integration and not the Hosted Payment page. To support the Hosted Payment page integration, it would basically require to develop a new payment plugin as the mechanism is quite different. It's not just two, three lines of code that you can change in the plugin.

Please Log in or Create an account to join the conversation.

  • Posts: 107
  • Thank you received: 1
10 years 6 months ago #153762

Hi Nicolas,

When is the next version of Hikashop due to be released?
Thanks for the explanation, it makes more sens now, the payment we are talking about shows in Worldnet with D for declined so what would happen if Worldnet sends "D" response, how Hikashop reacts after submitting the payment?
I will contact Worldnet and let you know.

Thanks,
Kashka

Please Log in or Create an account to join the conversation.

  • Posts: 82868
  • Thank you received: 13375
  • MODERATOR
10 years 6 months ago #153767

Hi,

If it sends back D, HikaShop will change the order status to the "invalid status" that you configured in the options of the plugin.

The next release of HikaShop will be in May, in a few weeks.

Please Log in or Create an account to join the conversation.

  • Posts: 107
  • Thank you received: 1
10 years 6 months ago #153908

Hi Nicolas,

I don't think at this stage I can use your plugin... what other payment gateways plugin uses a Hosted Payment Page instead of processing card payments which is not the most secure option?

Worlnet support advised against using your plugin because of security reason of processing and storing card details, even with good SSL...

Thanks,
Kashka

Please Log in or Create an account to join the conversation.

  • Posts: 107
  • Thank you received: 1
10 years 6 months ago #153911

Nicolas,
I am very disappointed that you release the paymnet plugins that process online payment without any warning or without educating your clients what is required to actually do it safely, like good SSL and the must important to complete PCI DSS compliance which is expensive and time consuming. I spent 2 months configuring your shopping card, styling it, populating with the product to realize that more likely I won't be able to use your solution because of payment issues, the plugin is not a solution and the hosted payment page is not an option because you don't have the connection developed.
Kashka

Please Log in or Create an account to join the conversation.

  • Posts: 82868
  • Thank you received: 13375
  • MODERATOR
10 years 6 months ago #153936

Hi,

PCI DSS compliance certification is not mandatory. Our plugin is developed as per WorldNetTPS recommendations and is secure. SSL certificate is indeed recommended with such integration.
HikaShop has more than a 100 payment plugins available. Plenty of them are compatible with payment gateways having hosted payment pages, others with the credit card form being handled on the checkout. Some propose both modes, and for some of these, we developed both integrations (like for example for authorize.net or PayPal or CardSave to name a few). We didn't develop both for WorldNetTPS as the customer who paid us for its development only wanted the XML integration.

I've added the information on the payment plugin documentation page.

Please Log in or Create an account to join the conversation.

  • Posts: 107
  • Thank you received: 1
10 years 6 months ago #153979

Hi Nicolas,

I don't agree with you on PCI DSS not being mandatory, you may have to pay very high fines if you don't comply ( www.pcicomplianceguide.org/pci-faqs-2/ ) )
To solve the issue we are thinking to use some other payment gateway, could you please advice on the solution which plugin uses hosted payment pages?

Thanks,
Kashka

Please Log in or Create an account to join the conversation.

  • Posts: 107
  • Thank you received: 1
10 years 6 months ago #154088

Nicolas,

Any chance to get the list of payment gateway where hikashop plugin uses hosted payment pages, please?

Thanks,
Kashka

Please Log in or Create an account to join the conversation.

  • Posts: 12953
  • Thank you received: 1778
10 years 6 months ago #154302

Hello Kashka,

Any chance to get the list of payment gateway where hikashop plugin uses hosted payment pages, please?

Using payment plugins like PayPal, Authorize.net, cardsave, Amazon, Postfinance, etc... will probably do the job :).
Here is the payment gateway list for more information (payment plugins section) : www.hikashop.com/support/documentation.html#hk5

Please Log in or Create an account to join the conversation.

  • Posts: 112
  • Thank you received: 3
9 years 7 months ago #197932

Hats Off To Nicolas :)

I am currently using HikaShop on three active websites that use a variety of payment plug-ins. Most of the plugins do not take the customer off the website (i.e. PayPal-like).

All three of the websites have successfully passed PCI vulnerability scans. :)

So, from my personal experience, HikaShop complies with PCI protocol.

On one of the three websites, we initial received two false positives in the scan. This site uses a lot of obscure features in HikaShop. But, the problem for me is the site did not pass the PCI vulnerabilities scan. Not good. :(

Nicolas kept telling us what was causing the false positive reading. After working with the scanning company for over a week, we finally got the site approved. Nicolas had been correct the entire time.

Throughout the entire frustrating process, Nicolas did not abandon us. He could have. It was a false positive scan by the scanning company...not HikaShop's problem. But, Nicolas worked with us to finally get the website approved. I can not be more grateful. To say that the Hikashop customer service reps I have worked with - Nicolas, Jerome and Xavier - go above and beyond is an understatement.

THANK YOU! :)

The following user(s) said Thank You: nicolas

Please Log in or Create an account to join the conversation.

Time to create page: 0.140 seconds
Powered by Kunena Forum