Loss of session details after completing credit card payment

[hoarder]

Hi,

 

(Even though you may not be using eWay could you please read the problem as you may have a suggestion as to its resolution)

 

I have tried to implement credit card payment via shared SSL using the eWay payment gateway. The problem seems to be that when the payment processing scripts have completed and they are returning to the non-SSL scripts they lose their session context so that they automatically reprompt for the user to login.

 

If I don't use SSL the scripts seem to work, however I will not implement credit card processing without SSL.

 

Does anybody have any suggestions on how to resolve this?

 

Thankyou

[kagg]

Hello,

 

It appears that returning after the transaction, your session times out. You may try increasing the session time in /catalog/includes/functions/sessions.php

 

Thanks

Kagg

[hoarder]

Hi Kagg,

 

I have increased the time without any change to the problem :( . For reference I am using:

 

Operation System Linux

Apache Version 1.3.27 (Unix)

Kernel Version 2.4.20-13.8

Perl Version 5.008

PHP Version 4.3.1

MySQL Version 3.23.56

CURL Information libcurl/7.10.5 OpenSSL/0.9.6b zlib/1.1.4

 

and

 

xml

XML Support active

XML Namespace Support active

EXPAT Version 1.95.2

 

Any other possible suggestions?

 

Regards

 

Paul

[matthendrix]

Any other possible suggestions?

Yep, this worked for me, as it collects the query string, just replace the entire eway_confirm.php with this code.

 

<?

 

require('includes/application_top.php');

 

if($ewayTrxnStatus == "True")

{

header("Location: ".FILENAME_CHECKOUT_PROCESS."?".$_SERVER["QUERY_STRING"]);

exit();

}

 

else

{

header("Location: ".FILENAME_CHECKOUT_PAYMENT."?".$_SERVER["QUERY_STRING"]);

exit();

}

 

?>

 

:D

www.b-scene.com.au

[Guest]

Yep, this worked for me, as it collects the query string, just replace the entire eway_confirm.php with this code.

 

Thanks!

 

I was searching for a solution for hours.

P.

[axy_almighty]

The session is neither timing out... nor is it getting lost, etc. if you provide the session ID at this stage the process will continue normally.

 

I finished dealing with exactly the same probem just an hour ago !

 

Well, what you need to do is to store the session ID in the database along with some unique identification. The most probable for a payment process will be the order id.

 

This order id might also be the only thing the bank / payment gateway passes bak to your site at predifined URLs (OK.HTM / NOK.HTM).

 

(if you can give the return URLs dynamically then you just have to append the query string containing the session ID.)

 

Otherwise, you will have to lookup your table for a session ID matching the order id and restore the session ID using tep_session_id(<session_id>);

 

All the Best. Do write for more help.

 

Axy

[phear]

Yep, this worked for me, as it collects the query string, just replace the entire eway_confirm.php with this code.

 

<?

 

require('includes/application_top.php');

 

if($ewayTrxnStatus == "True")

{

header("Location: ".FILENAME_CHECKOUT_PROCESS."?".$_SERVER["QUERY_STRING"]);

exit();

}

 

else

{

header("Location: ".FILENAME_CHECKOUT_PAYMENT."?".$_SERVER["QUERY_STRING"]);

exit();

}

 

?>

 

:D

www.b-scene.com.au

<{POST_SNAPBACK}>

 

 

my hero!! thx for the help