Hi friends,
We get multiple requests from X-Cart Classic (4.x) users regarding
PayPal security requirements that are coming into effect soon and may impact the ability to accept payments in your store. So we’ve prepared this quick summary of the requirements and actions you should take to make sure your X-Cart supports the changes.
TLS 1.2 – Act by June 30, 2017
Affected versions: 4.2.2 - 4.6.4
Impact: Inability to accept online payments in your store.
Solution: Get detailed instructions
here. Most likely, you’ve already fixed the issue, as we announced the update back in 2014.
HTTP/1.1 Upgrade Microsite – Act by June 30, 2017
Affected versions: 4.5.4 and older
Impact: Inability to accept online payments in your store.
Solution: Get detailed instructions
here. As in the previous point, we think you’re all set here, but if you’re not sure, we can help you to find it out.
IPN Verification Postback to HTTPS Microsite – Act by June 30, 2017
Affected versions: All versions
Impact: Payment processing in your store won’t break down after the update, however, PayPal recommends to apply the patch in order to increase the security of PayPal IPN requests.
Solution: Apply the patch
paypal-https-IPN-2017-04-25_4.x.x.tgz to start accepting IPN requests from PayPal by an HTTPS secure endpoint.
Discontinue Use of GET Method for Classic APIs Microsite – Act by June 30, 2017
This requirement has no impact on your online store, so there is nothing to do about it.
Merchant API Certificate Credentials Upgrade Microsite – Act by January 1, 2018
Affected versions: All X-Cart versions, but only if it’s the API certificate that you use as PayPal authentication method.
Impact: Inability to accept online payments in your store.
Solution: Generate a new certificate following the instructions
here. Or switch to the API signature authentication method in your PayPal account and update the PayPal settings in your store back-end.
Need help? We are happy to assist. Ask your questions here or create a ticket in your
Help Desk account to request the patches application.