Bug in Website Payments Pro for Zen Cart 1.3.9 to 1.5.0
- Posted by Support
- 24 July 2012
Thanks to NUMINIX for the following report regarding a Bug in Website Payments Pro for Zen Cart 1.3.9 to 1.5.0.
If you use PayPal Website Payments Pro (WPP) for Zen Cart version 1.3.9 up to version 1.5.0, you may be suffering from a bug where some error messages, particularly processor declines, are not displaying to your customers in the checkout. This results in the customer being directed back into the checkout without indication if their payment was processed or not.
The bug is related to code in the WPP module. Fortunately, there is an easy fix. If you go to ADMIN->MODULES->PAYMENT->PAYPAL WEBSITE PAYMENTS PRO and set the option DEBUG MODE to anything other than "OFF", all error messages will start to display in the checkout.
If you are curious, Zen Cart has been notified here (http://www.zen-cart.com/showthread.php?198451-PayPal-WPP-Processor-Decline-Fails-to-Show-Error-Message) by NUMINIX for you to follow along should you find yourself affected by this bug. You should likely test your checkout and enable NUMINIX's fix in the interim. I will attest that the omission of many error type messages is in fact omitted from Zen Cart for PCI/DSS and security concerns. Basically, if you are a hacker and can trigger a reason why a card fails, then you can obviously continue to try until you "guess" or "figure out" the remaining data you need to use the stolen card.