X-Cart forums - X-Payments v1.0.6 released

X-Cart forums (https://forum.x-cart.com/index.php)

- X-Payments issues & questions (https://forum.x-cart.com/forumdisplay.php?f=50)

- - X-Payments v1.0.6 released (https://forum.x-cart.com/showthread.php?t=66093)

Re: X-Payments v1.0.6 released

Does anyone else has this problem with x-payment? I'm running XC v4.5.5 and XP v1.0.6 using iframe to accept payments. So here is the issue.... everytime I add a product and go to checkout page (tried OPC and FLC) enter my personal details and then go back to home page or product page I'm getting "X-Payment Started" status in orders page.

Can someone help or direct me to right direction to solve this?

Re: X-Payments v1.0.6 released

Quote:

Originally Posted by ambal

Jeremy,

> In XP 1.0.5 and xcart 4.5.4, it does send the 4-digits back to the admin, but in
> an encrypted string that is only visible in the payment gateway log. like this:

We researched this issue and I fear a small customization is needed to have the last 4 digits displayed in an email template. This fell out of my sight for some reason otherwise I would have it implemented in our latest release.

Developers suggest using something like this in your email template:

Code:

{$order.details|text_decrypt|preg_macth:"/last 4 card numbers: ([0-9]{4})/"}

Alex,

This does not work. It appends /"} -- no numbers. Tried this with XP 1.0.5 and 1.0.6
Also corrected the code: text_decrypt|preg_macth - to text_decrypt|preg_match

Not having the last-4 digits on the invoice is not doing our customers any favors. There is obviously no security risk and no PCI compliance issues with the last-4 and card type.

ALso in 4.5.4 - $order.details is empty on order_invoice.tpl and /order.php?orderid=xxxxxx

Is there another way to get this encrypted data from XP?

Try again, please?
Thanks,
J

Re: X-Payments v1.0.6 released

Sorry, Jeremy. I am not the best person to advise on coding :oops:

I hope someone else will suggest the solution.

Re: X-Payments v1.0.6 released

Quote:

Originally Posted by ambal

Sorry, Jeremy. I am not the best person to advise on coding :oops:

I hope someone else will suggest the solution.

The solution is for X-Payments to not obfuscate or encrypt the credit card type and last 4 digits, and pass these variables back to XPC, right? :-)

It is agreed that this data does not break PCI compliance, so there is no reason it shouldn't be shared from XP, right? I hope this is on your list of things to fix?

Thx
J