Search found 436 matches

by jguengerich
Thu Nov 09, 2017 9:57 am
Forum: AbleCommerce GOLD
Topic: Payment & Integrated Shipper Gateway Config Data cleared
Replies: 9
Views: 6726

Re: Payment & Integrated Shipper Gateway Config Data cleared

That sounds similar to the problem a few people (including me) have run into that requires a machine key to be set in the web.config file if an encryption key is set. There is a brief mention of it on the R11 upgrade page ( http://help.ablecommerce.com/#t=upgrades%2FacGold%2FUpgrade_to_Gold_R11.htm ...
by jguengerich
Thu Oct 12, 2017 2:37 am
Forum: AbleCommerce GOLD
Topic: PCI compliance scan SQL Injection warning
Replies: 20
Views: 16368

Re: PCI compliance scan SQL Injection warning

OK, thanks Katie.
by jguengerich
Thu Oct 12, 2017 1:37 am
Forum: AbleCommerce GOLD
Topic: PCI compliance scan SQL Injection warning
Replies: 20
Views: 16368

Re: PCI compliance scan SQL Injection warning

Tried again, the link worked this time.

Can you confirm, according to the readme, the root web.config should NOT have validateRequest="false", but the admin web.config SHOULD have validateRequest="false"?
by jguengerich
Thu Oct 12, 2017 1:22 am
Forum: AbleCommerce GOLD
Topic: PCI compliance scan SQL Injection warning
Replies: 20
Views: 16368

Re: PCI compliance scan SQL Injection warning

Now I get this when I click on the R12 patch link: Cannot open database "ablecommerce_com_gold2" requested by the login. The login failed. Login failed for user 'ablecommerce_user6'. Description: An unhandled exception occurred during the execution of the current web request. Please review the stack...
by jguengerich
Wed Oct 11, 2017 9:50 am
Forum: AbleCommerce GOLD
Topic: PCI compliance scan SQL Injection warning
Replies: 20
Views: 16368

Re: PCI compliance scan SQL Injection warning

Katie,

In the R12 patch, the root directory web.config does not contain the modification described in step 1 of the instructions. I didn't check the R10 or R11 patches.
by jguengerich
Thu Oct 05, 2017 4:01 am
Forum: AbleCommerce GOLD
Topic: Authorize.Net TLS 1.2 Requirements
Replies: 26
Views: 43937

Re: Authorize.Net TLS 1.2 Requirements

If you disable TLS 1.0 and 1.1 Clients in the registry, your SQL server will have to support TLS 1.2. See Microsoft's info here: https://support.microsoft.com/en-us/help/3135244/tls-1.2-support-for-microsoft-sql-server On another thread, Katie said she would add the SQL info to the help page for TLS...
by jguengerich
Mon Oct 02, 2017 1:54 am
Forum: AbleCommerce GOLD
Topic: Authorize.Net TLS 1.2 Requirements
Replies: 26
Views: 43937

Re: Authorize.Net TLS 1.2 Requirements

I had a chance to work on my live site over the weekend. I have just TLS 1.2 in the global.asax file, and now I have only TLS 1.2 Client and Server enabled in the registry. It works fine for CyberSource, UPS, and FedEx. I used WireShark to verify that it is using TLS 1.2 for all 3. I don't remember ...
by jguengerich
Thu Sep 28, 2017 3:01 am
Forum: AbleCommerce GOLD
Topic: Authorize.Net TLS 1.2 Requirements
Replies: 26
Views: 43937

Re: Authorize.Net TLS 1.2 Requirements

This forum search blows. I specifically searched for 'authorize.net' ( http://forums.ablecommerce.com/search.php?st=0&sk=t&sd=d&keywords=%2Bauthorize++%2Bnet++&fid%5B%5D=65&start=0 and your thread doesn't even come up in the results. Thus why I posted mine. Sorry for the duplication. That's weird, ...
by jguengerich
Wed Sep 27, 2017 3:19 am
Forum: AbleCommerce GOLD
Topic: Authorize.Net TLS 1.2 Requirements
Replies: 26
Views: 43937

Re: Authorize.Net TLS 1.2 Requirements

My test environment (my test server communicating with CyberSource, UPS, and FedEx test servers) works OK with just TLS 1.2 enabled in the registry. Probably won't be able to test my production environment until this weekend.
by jguengerich
Wed Sep 27, 2017 2:52 am
Forum: AbleCommerce GOLD
Topic: Authorize.Net TLS 1.2 Requirements
Replies: 26
Views: 43937

Re: Authorize.Net TLS 1.2 Requirements

I just noticed in the registry entries I posted that TLS 1.0 client is still enabled. I thought I had disabled everything except 1.2. I guess I have some more testing to do. I will update here if I get it to work w/o TLS 1.0 client enabled.
by jguengerich
Wed Sep 27, 2017 2:40 am
Forum: AbleCommerce GOLD
Topic: Authorize.Net TLS 1.2 Requirements
Replies: 26
Views: 43937

Re: Authorize.Net TLS 1.2 Requirements

I used IIS Crypto too, but I think at some point there was something that I couldn't specify correctly in whatever version of it was current at the time. I don't remember what it was though - my lack of good notes rears it's head again :).
by jguengerich
Wed Sep 27, 2017 2:00 am
Forum: AbleCommerce GOLD
Topic: Authorize.Net TLS 1.2 Requirements
Replies: 26
Views: 43937

Re: Authorize.Net TLS 1.2 Requirements

Did you restart the server (or at least IIS) after changing global.asax? I did also mess with the cipher suites in the registry, but I'm pretty sure that was only to remove old ones that were less secure, not add anything new. Maybe I changed the order, though. Sorry, I should keep better notes :( ....
by jguengerich
Tue Sep 26, 2017 2:05 am
Forum: AbleCommerce GOLD
Topic: Authorize.Net TLS 1.2 Requirements
Replies: 26
Views: 43937

Re: Authorize.Net TLS 1.2 Requirements

The more I think about it, I added that line in Global.asax before I disabled the lower versions of TLS on the server. Now that I've done that, I might not even need that line in Global.asax, because TLS 1.2 is the only option it has left based on the server configuration. Don't have time to test it...
by jguengerich
Tue Sep 26, 2017 1:57 am
Forum: AbleCommerce GOLD
Topic: Authorize.Net TLS 1.2 Requirements
Replies: 26
Views: 43937

Re: Authorize.Net TLS 1.2 Requirements

Global.asax is the only place I have it. I have recompiled the CyberSource gateway library for other reasons, but I didn't add it there and it works. Same with FedEx. Not sure how the fact that I disabled SSL / TLS < 1.2 client on the server affects this though. EDIT: In Global.asax, I put it at the...
by jguengerich
Tue Sep 26, 2017 1:33 am
Forum: AbleCommerce GOLD
Topic: Authorize.Net TLS 1.2 Requirements
Replies: 26
Views: 43937

Re: Authorize.Net TLS 1.2 Requirements

I have the same line in Global.asax as you posted, and I have completely disabled the SSL 3, TLS 1.0 and TLS 1.1 clients on my web server via the registry. UPS and FedEx quotes work fine. Can't comment on other shipping providers, those are the only ones I use. EDIT: As mentioned in another thread, ...
by jguengerich
Tue Sep 05, 2017 3:37 am
Forum: AbleCommerce GOLD
Topic: Update current users basket from Database
Replies: 1
Views: 3491

Re: Update current users basket from Database

You could create BasketItem objects and add them to the collection: user.Basket.Items.Add(new BasketItem(...)) // more adds as needed user.Basket.Save() instead of adding rows directly to the database. Then recalculate: IBasketService preCheckoutService = AbleContext.Resolve<IBasketService>(); preCh...
by jguengerich
Thu Aug 03, 2017 3:55 am
Forum: AbleCommerce GOLD
Topic: Checkout failures due to AVS cannot be resolved
Replies: 2
Views: 3806

Re: Checkout failures due to AVS cannot be resolved

I haven't tested this, but I think you would have to change Members/EditMyAddress.aspx.cs. It looks like the PayMyOrder page passes the order number to EditMyAddress so it knows to send the user back to the PayMyOrder page. This is done in the ShowAddressBook function of the EditMyAddress page. So, ...
by jguengerich
Wed Jul 19, 2017 3:34 am
Forum: AbleCommerce GOLD
Topic: Cache warning (NHibernate?)
Replies: 1
Views: 3134

Cache warning (NHibernate?)

While trying to debug a problem this morning, I discovered that my log file has occasional warnings like the one below since October of last year. A quick Google search seems to indicate it is related to NHibernate and is just an indication of a cache miss. Can anyone confirm that, or provide any mo...
by jguengerich
Wed Jul 12, 2017 1:51 am
Forum: AbleCommerce GOLD
Topic: Disable TLS 1.0
Replies: 5
Views: 6923

Re: Disable TLS 1.0

You may need to update your SQL Server installation to an SP that can utilize TLS 1.2. See here for some more info:
https://support.microsoft.com/en-us/hel ... sql-server

EDIT: changed SR to SP
by jguengerich
Wed Apr 26, 2017 10:30 am
Forum: AbleCommerce GOLD
Topic: Compliance with New Mastercard Mandate Effective May 1?
Replies: 5
Views: 7180

Re: Compliance with New Mastercard Mandate Effective May 1?

Expand "Minor Upgrades" in the left column on the help page: http://help.ablecommerce.com/ Direct links: There's a patch for R9 - R11 here: http://help.ablecommerce.com/upgrades/acgold/mastercard_and_paypal_patches.htm For R12, SR1 is here: http://help.ablecommerce.com/upgrades/acgold/service_releas...
by jguengerich
Mon Apr 24, 2017 3:19 am
Forum: AbleCommerce GOLD
Topic: Lost Encryption Key
Replies: 5
Views: 7285

Re: Lost Encryption Key

Make sure you back up your web.config (or at least the machineKey part of it) too.
by jguengerich
Mon Apr 24, 2017 2:02 am
Forum: AbleCommerce GOLD
Topic: Lost Encryption Key
Replies: 5
Views: 7285

Re: Lost Encryption Key

Might be related to whatever causes some servers to need a static machineKey set in the web.config file. Without it, the machineKey changes at each reboot, and the existing AC encryption key is no longer valid.
(viewtopic.php?f=65&t=18580)
by jguengerich
Thu Jan 26, 2017 3:50 am
Forum: AbleCommerce GOLD
Topic: Updating Shipping Dropdown from custom address field
Replies: 2
Views: 11564

Re: Updating Shipping Dropdown from custom address field

I have a similar situation. I am using R12 SR 1. Here is some of my code (probably based on code from various other pages). There's some extra stuff in there you probably don't need, for example we have a check box that the customer can choose to have the shipping charges billed to their UPS or FedE...
by jguengerich
Thu Jan 12, 2017 4:24 am
Forum: AbleCommerce GOLD
Topic: SQL Not Working
Replies: 5
Views: 7263

Re: SQL Not Working

Hey, it happens. I was trying to end my VB code lines with semicolons yesterday :).
by jguengerich
Thu Jan 12, 2017 3:29 am
Forum: AbleCommerce GOLD
Topic: SQL Not Working
Replies: 5
Views: 7263

Re: SQL Not Working

The default wildcard character for SQL is '%', not '*'. Try it with
(c.sku like 'E-51%')