Credit Card Validation

[batmike]

Most of the errors I get are the wrong billing address as well. I would imagine this is fairly common, especially with processors being quite picky (which is good!). I think it would be a helpful feature and cut down on some of the errors that are passed through to the merchant side.

[keats76]

Ok, I implemented it as well (just went live) and there is a problem ...

I receive the following error when submitting the order from the onepagecheckout:

Sys.WebForms.PageRequestManagerServerErrorException: An unknown error occurred while processing the request on the server. The status code returned from the server was: 500

The order is recorded, and authorized, but the user gets the above pop up (javascript alert like pop up), and then they are stuck on the order page in "processing" status. If they click the "processing" button again, they are forwarded to the my account page (where they see their order).

The order is not charged twice, but this is not a good workflow and I need to find a fix asap.

Any help would be appreciated!

Oh yeah, I'm using the SkipJack payment gateway.

[keats76]

I think the error might be of my own doing, but I need to test it more ...

I added some code to the checkout method on the onepagecheckout.

--
int quoteId = (int)HttpContext.Current.Session["CurrentQuote"];
if (quoteId > 0)
{
Quote thisQuote = new Quote(quoteId);
thisQuote.OrderId = e.OrderId;
thisQuote.AddStatus(QuoteStatus.STATUS_ORDERED);
thisQuote.Save();
HttpContext.Current.Session.Remove("CurrentQuote");
}
--

Do you think it might be related to the session manipulation???? They (Microsoft) don't make it easy to track down.

Thanks,
Mike

[keats76]

Rookie mistake (putting it nicely

I was trying to cast a null session variable to an int ... please ignore the above posts.

On a lighter note, I was presented with a few graceful error messages when my SkipJack test account failed to process the transactions. Once I corrected the SkipJack ids the transactions went through fine.

Thanks Logan!

[AbleMods]

int quoteId = (int)HttpContext.Current.Session["CurrentQuote"];
if (quoteId > 0)

Yeah you have to test for null with any session variable in case the session variable doesn't exist, isn't passed to the page etc.

I've chased that one many a times....

[ajasko]

The patch still does not verify the billing address along with the credit card, giving us pretty much the exact same problem as before. The cart will accept valid credit cards with incorrect billing addresses, which really makes them invalid credit cards. The cart should reject the order, give the error from the gateway (address-card mismatch), and then take the customer to the billing address page to enter the correct one (or give them some sort of option to change the billing address on the same page to change the credit card). This is standard procedure for most shopping carts.

AbleCommerce claims that this lack of validation will help the merchant to flag more orders. On the contrary, it just creates more hassle for both the customer and the merchant. Usually when there is an address mismatch, either the customer has entered the wrong shipping address for their card, or they misspelled the address. Either way, I have found that the response of almost all customers (including myself) when they get this problem (card rejected due to address mismatch) is not to leave the site but simply to check and type in the correct billing address. 90% of the time the problem is one of these two issues. When the problem is with their card itself, most merchants would rather have the customer fix their card with the bank before processing an order, or call us. However the first issue (typing in the wrong address) is far more common.

Also, not validating the address creates a security problem, opening up the window to fraud. I think that with good reason no shopping cart I know of does not accept orders without validating the credit card and the address. It is also much less of a pain for the customer to be able to correct their order info on the front end than for a phone call to correct it later. They also wonder why their order was accepted if the cart did not validate their card "Why did I not get a message, I thought that the card went through; why do I have to change the info?" I have gotten these responses many times when I was using a cart that was not working properly in the past. In the end, full validation saves the customer and the merchant a lot of hassle and security issues.

Andrew Jasko
http://telephonesystemsforbusiness.com

[Logan Rhodehamel]

Andrew, I responded to you here: viewtopic.php?f=42&t=7242

I am locking this thread so that we can continue the discussion in a single place. The thread linked above is sticky, so it will always appear at the top of the forum.