WorldPay Callback

essexboy

Has anyone out there had any success intergrating worldpay callback into their website?

I tried the following but it went straight to the std resultY.html pages, and i had callbak enabled & callback reaponse also...

// failed
if ($transStatus == 'C')
{
echo"failed!";
}

// successful
if ($transStatus == 'Y')
{
echo"$transStatus";
echo"$address";
echo"$M_magname";
echo"$M_deliveryAddress";
}

regards
oli

sarahk

good choice of bank, we've had no problems with them.

We did have alot of fun and games getting started and I have nothing but praise for their guy in Singapore who provided fantastic support.

I'd start by trying to echo out the expected response variables and see just what is returned.

I suspect that it's not hitting your page at all. Check the path that it's following. When we went live it couldn't use secure pages ([url]https://[/url]) for the callback and it took ages to work that out.

Do you want to post your callback path (from admin.worldpay.com) and i'll see how it compares to ours.

essexboy

when u say it took ages via http, what does that mean? why should an http/https mak a differeence? its only a script and you arent passin any cc details from server2server?

sarahk

it took ages to find out why it wasn't working, runs quickly though.

why the difference - who would know. I think they parse the url and add [url]http://[/url] onto the front.

essexboy

i'll get 2 the point, why wasnt it working?

i trieed to echo out the response variables, and the path to the callllback script is fine...?

sarahk

One of the things I had problems with was anticipating the call which was being fed through and I had my M_ variables not quite right feeding into worldpay.

I saved a form from their site, changed it to a "get" and used it to reconstruct a url for testing and looked at what was being sent and from there it was easy.

sarahk

Just reviewing my worldpay stuff

I have a file called test.html which is a very bland form simulating the inputs that I get back with some defaults. This allows me to add diff data and see how it get's handled. I can't give it to you because it would open me up to hacking. Sorry.

but really, all I have in my php is

if ($transStatus == "C") {
  $status   = "Sale not accepted by Payment Agency";
}
else {

You might like to try it with double quotes instead of singles. Not sure what diff it would make in this situation but ...

essexboy

nice response, give the stuff a go my self 2morrow, when im more coherent...

oli

essexboy

Here goes...

I tested the callback function using their example that uses formmail.pl, this worked.
Installed formmail onto our server, this callback didnt work (i checked formmail worked)
It seems its not reaching our website whatsoever and just calling up the default result pages

strange

essexboy

http://www.xxxxx.co.uk/callback.php

it didnt run, even without any custom variables. Am i missing something?

does WP need some response whatever happens to enable the callback, if it doesnt get that response it defaults to resultY.html? BTW i do have use callback reponse checked...

sarahk

I reckon you should email their support guys and get them to have a look at it. There's something not set up quite right.

This is totally doable!

good luck

essexboy

it has something to do with our shared hosting acc setupo with oneandone.co.uk as i tried on one of our hstrocket accounts and it worked fine...

thanx sarahk for your help

oli

essexboy

callback works great sarah, allthough im having problems finding the option for MD5 encryption in my CMS...

Have you tried also an IP adderss check with

$ip = getenv ("REMOTE_ADDR");

to match against the worldpay ip's listed in their doc's?

I have and they done match ! Do you recommend using this IP check as security?

oli

Ah:

Unfortunately the MD5 secret box has not yet been added to the WorldPay customer management system. If you can let us know the secret that you would like to have set we can arrange to have it set up for you.

and a greater IP address range since the docs were written

sarahk

Aaaah, I haven't done th IP checking and I know it makes my site a bit more hackable. I should look into that. Should be simple to do? Maybe we can share code...?

essexboy

Something like;

IP RANGE = AAA.BBB.CCC.DDD

$ip = getenv ("REMOTE_ADDR");
$ips = explode(".", $ip);
for ($i = 0; $i < count($ips); $i++)
{
if ($ips[0] == 'AAA') {$domain1 = 1;}
if ($ips[1] == 'BBB') {$domain2 = 1;}
if ($ips[2] == 'CCC' || $ips[2] == 'CCC') {$domain3 = 1;}
if ( ($ips[3] >= 'DDD') && ($ips[3] <= 'DDD') ) {$domain4 = 1;}
}
if ($domain1 && $domain2 && $domain3 && $domain4) {
execute a successful callback
} else {
stop the script
}