PayPal PayFlow Pro Upgrade

[ozEworks]

PayPal made the following annoucement to users on 13 May 2009:

 

We’ve upgraded our Payflow gateway service with new security features to make payment processing even safer.

 

On September 1, 2009, we’ll stop supporting your current integration. To continue processing payments after that date, you’ll need to update your Payflow integration.

 

For a detailed explanation of what’s changing and step-by-step instructions on what to do, go to https://www.paypal.com/gatewayupdate.

 

Please make plans to get this critical update done right away. The update will give you more security and you won’t have to worry about your payment service being interrupted in September.

 

If you have questions, contact our support team at [email protected] or 1-866-877-4891, ext. 168.

 

 

Their link for 3rd party solutions says

 

We’ve added new security features to our Payflow gateway service that will make your payment processing even safer. Because of these new features, you must update the Payflow code that’s integrated into your web site. All merchants should update to Payflow Pro Software Development Kit (SDK) version 4.3 or higher, or use our direct HTTPS Interface

 

 

Does anyone know anything about the implications of this?

[JimbobobHacker2]

It means that the old payflowpro module will stop functioning on September 1, 2009. Here is a link to a module that uses the new API. I have not yet had time to audit it for security issues. http://addons.oscommerce.com/info/6244

 

-Ben

[ozEworks]

That one's last update is 26 Oct 2008? It works for this new requirements what it is?

[desl504]

Has anyone confirmed that the v0.3 release complies with the changes that are coming up for Payflow?

[ozEworks]

Not as far as I know

[badarac]

Just out of curiosity, what are you merchants who will be affected by this change planning to do? I hate the idea of moving to a hosting company with integrated shopping cart support just because there's no support for my payment solution. Is everybody just hoping somebody will fix this?

[aarongriffin]

The NEW payflow_pro_v0.3 is NOT current enough for paypal to work. I am looking for a solution as well.

 

There are code examples on the paypal update site. I've also considered reverse-engine3ering the zencart payment module.

 

My BIG quesiton is this - is OSCOMMERCE still a viable ecom platform? It seems to have few updates

[aarongriffin]

wow - I misspoke. The upgrade DOES seem to work with the new gateway. Sorry for my confusing the matter!

[dynamoeffects]

I have received several emails regarding this today, so maybe this will answer the common question:

 

I haven't had time to review the new API, however I did look at the code examples provided by PayPal and I can't find any incompatibilities with version 0.3 of the module. Look at their example vs what is sent by that module and, unless I missed something, you'll probably come to the same conclusion.

 

Their SDK is changing, but it doesn't look like the raw request format, which is what my PayPal Payflow Pro module uses, is any different than what is posted here: http://www.pdncommunity.com/pdn/board/mess...;thread.id=1008

 

aarongriffin, if you can specify which incompatibilities you're seeing, I'll see about updating the module.

[gauravmathur.sdsu]

I have received several emails regarding this today, so maybe this will answer the common question:

 

I haven't had time to review the new API, however I did look at the code examples provided by PayPal and I can't find any incompatibilities with version 0.3 of the module. Look at their example vs what is sent by that module and, unless I missed something, you'll probably come to the same conclusion.

 

Their SDK is changing, but it doesn't look like the raw request format, which is what my PayPal Payflow Pro module uses, is any different than what is posted here: http://www.pdncommunity.com/pdn/board/mess...;thread.id=1008

 

aarongriffin, if you can specify which incompatibilities you're seeing, I'll see about updating the module.

 

 

I just had 1 query, After upgrading to v0.3, is there any way that we can test whether it is compatible with new paypal upgrade coming in effect from Sept 1.

i mean any way to test the compatibility of v0.3?

[timwickstrom]

I just had 1 query, After upgrading to v0.3, is there any way that we can test whether it is compatible with new paypal upgrade coming in effect from Sept 1.

i mean any way to test the compatibility of v0.3?

 

I'd also like to know if there is any way to test the PayFlow Pro v0.3 module's compatibility with PayPal's update coming September 1st.

 

Thanks.

[dynamoeffects]

REGARDING THE SEPTEMBER 1 CHANGE

 

This module will still be functional, there is no need to update it. The only change they are implementing is the means of transmitting the data to their servers. The way this module sends a request and parses the response DOES NOT need to be updated and will continue to be functional.

 

The error you may experience will be a -31 "The certificate chain did not validate, no local certificate found" error generated by cURL. If that happens, you need to contact your web host's support staff and request that the root certificates located in the third post at the following link be installed on your server: http://paypaldeveloper.com/pdn/board/messa...;thread.id=6309

 

If there is a way to update the module to make that process easier, I will. However most of the larger hosts are aware of the update and are already prepared, so there is a very good chance you won't even notice the transition.

[garpo]

This mean i don't have to upgrade anything on my oscommerce instalation ???

I have this version os payflowpro

/*

$Id: payflowpro.php,v 1.1 2003/05/03 $

 

osCommerce, Open Source E-Commerce Solutions

http://www.oscommerce.com

 

Copyright © 2002 osCommerce

Some changes and fixes by Alonso Acuña [email protected]

 

Released under the GNU General Public License

*/

 

 

thanks!

[ozEworks]

We are now getting duplicate orders.

 

First order has no payment method or shipping and missing Country.

 

Second has payment and shipping.

 

Since the order is only created on checkout success, we cannot work out how 2 (sometimes 3) orders are getting created.

 

Anyone else seen this?

Edited September 3, 2009 by FlyingKites