PayPal Pro Issue

[Noncents]

Hello all, I hope someone can shed some light on this pretty urgently.

Basically a while back I set-up a site using Actinic version 8.5.1.0.0.0.HFUA about a year and a half ago. Despite some minor issues it's been running fine using PayPal pro as the payment processor. Then recently theymoved Actinic to a different machine and everything has gone downhill from there.

Initially they couldn't perform an upload. When they tried it simply stopped after 10 seconds without any error message. After trying some suggestions I managaed to install the later version 8.5.2.0.0.0 HMVA which solved the upload problem my end, however the problem persists on their machine (they have installed the later version as well now).

Even worse though PayPal pro has stopped working out of the blue. Everything works fine but when you get to the screen before it starts communicating with PayPal it simply displays an empty grey box with no error message and won't proceed any further. My client is pretty concerned as currently they are unable to take orders so it's causing a lot of grief.

Any ideas are welcome!

Thanks in advance - Ricky

P.S - www.authentics.co.uk is the site in question

[leehack]

8.5.3 is the latest version, any confusion across versions possibly?

[Noncents]

Thanks for the reply Lee. I have now upgraded to the later version you mentioned but i'm still having the same problem. I assume the version update has caused the problem, any idea how I might tackle it?

[grantglendinnin]

Try this, taken from a Protx-issue but will address all PSP's.

The final step is to change the version number in the 'OCCUpgrade.ini' file, found in the 'OCCUpgrade' directory ('C:\Program Files\Actinic v8'). In some versions of windows the file is only displayed as 'OCCUpgrade', but you can check by looking at the properties. Open it in a text editor as you did when updating the 'OCCProtxScriptTemplate.pl' file.

At the top of this file you will see the following text:
[Version]
Number=1045 (for example)

Increment this Number by 1 (so if it was 1045 for example, you will need to change the value to 1046) and save the file.

You should now close down Actinic and open it again. When you open Actinic again, you will see a message to say your payment service providers have been updated. You should accept this change and then continue.

[Mike Hughes]

It's hard to say what the problem is so you'll probably need to get Actinic support involved or set everything up again from the start.

Your best bet though is to advise the customer to get a proper PSP set up. Paypal Pro won't be PCI compliant unless your customer's website meets certain requirements and is regularly tested by an approved company. I can tell you now though that gathering credit card details on an open page without SSL isn't going to pass muster.

Mike

[pinbrook]

Try this, taken from a Protx-issue but will address all PSP's.

The final step is to change the version number in the 'OCCUpgrade.ini' file, found in the 'OCCUpgrade' directory ('C:\Program Files\Actinic v8'). In some versions of windows the file is only displayed as 'OCCUpgrade', but you can check by looking at the properties. Open it in a text editor as you did when updating the 'OCCProtxScriptTemplate.pl' file.

At the top of this file you will see the following text:
[Version]
Number=1045 (for example)

Increment this Number by 1 (so if it was 1045 for example, you will need to change the value to 1046) and save the file.

You should now close down Actinic and open it again. When you open Actinic again, you will see a message to say your payment service providers have been updated. You should accept this change and then continue.

number incrementing is only applicable to protx

[grantglendinnin]

number incrementing is only applicable to protx

I was under the influence the number incrementing effectively forced Actinic into thinking the PSP's had been re-installed?

[Noncents]

Thanks for the flurry of replies! I have been in contact with support and realised that at some point the SSL was disabled by my client for some reason. I have now put all the settings in correct to the last point it worked and now get a new general script error:

Error: The specified shared SSL user ID is invalid or is not registered with this provider.

It was valid before so what's happened to cause this? I have replied to support as well but i'm sure it won't hurt to get the information out on here once it gets sorted as I can't seem to track down any reports of similar issues :S

[grantglendinnin]

Thanks to Forge World:

For people who get the following message when trying to enter their credit card details:

Error: The specified shared SSL user ID is invalid or is not registered with this provider.

Press the Browser back button and try again or contact your ISP.

This problem is related to Norton Internet Security preventing correct referencing from the browser.

To correct the problem :

Select custom level in the privacy control.

Untick enable browser privacy

[Mike Hughes]

Error: The specified shared SSL user ID is invalid or is not registered with this provider.

The SSL presumably isn't working which is probably why your client disabled it.

Even with SSL working you're not going to get PCI compliance without a lot of work and expense. If you're not telling your client this you're probably verging on professional negligence.

Mike

PS. I see it's actinic's shared SSL you're trying to use. Worth checking that your client paid his bills. New accounts are not available. he really should switch to a proper PSP.

[Noncents]

The issue as it happens was related to the ssl details not being updated by Actinic when the domain was changed. Actinic support emailed me and told me to ring, when I phoned they told me to email them. So it's still not solved, hopefully the reply to the email will shed some light on why i'm getting the run around.

The SSL presumably isn't working which is probably why your client disabled it.

Even with SSL working you're not going to get PCI compliance without a lot of work and expense. If you're not telling your client this you're probably verging on professional negligence.

Mike

PS. I see it's actinic's shared SSL you're trying to use. Worth checking that your client paid his bills. New accounts are not available. he really should switch to a proper PSP.

I was advised by Actinic when I originally took the site on that PayPal Pro was the best option. Why was this issue never mentioned previously? After various problems lately I think I will end up losing the client because of this and so will Actinic.

What exactly is the issue with PayPal Pro and PCI compliance? I was advised that Actinics shared SSL covered this.

[Mike Hughes]

I was advised by Actinic when I originally took the site on that PayPal Pro was the best option. Why was this issue never mentioned previously?

In my opinion Paypal Pro was probably only a temporary solution until Actinic Payments became available. In addition PCI-DSS compliance only become mandatory in the last 12 months or so and non-compliance is being clamped down on over the next few months.

Why this wasn't mentioned previously is an issue you'll have to take up with Actinic. Here on the forum it's been known about and discused for ages

What exactly is the issue with PayPal Pro and PCI compliance? I was advised that Actinics shared SSL covered this.

The problem is that Actinic shared SSL is almost certainly not PCI-DSS compliant.*

Mike

* I don't think Actinic have ever stated clearly on this. You can pretty much read into what you will from the fact that it's no longer being offered and there is no PCI compliance certificate for it.**

** I'm sure Actinic will clarify this if I'm wrong.

PS.

Actinic support emailed me and told me to ring, when I phoned they told me to email them.

Classic. I did laugh at this but I wouldn't be too happy to be on the receiving end.

[Noncents]

Thanks for getting back to me Mike,

I've only ever dealt with PSP before, this was my only brush with PayPal Pro and i've not worked on this site for nearly 18 months now so I must have missed all the stuff about this.

Actinic payments would however solve this though if they changed over? or can you recommend a better PSP? I will advise them to do this.

I note the one thing that hasn't changed since I last invested time in Actinic is the lack of communication between the support teams! The forum has always been the best resource Actinic has to offer. Thanks again for your time on this.

[Mike Hughes]

Actinic Payments would probably be my choice of the PSPs to use with Actinic. This is particularly the case with V9 where the interface is built into the software and avoids copy & pasting with mail order / telephone orders.

With V8 the choice isn't that clear cut but they're good value and quite easy to use.

They will need a merchant account to go with the PSP though. I'm not sure they'll have needed on for paypal pro.

There have been a few discussions on PSPs in the past. Most of the common ones are pretty good too. i.e. HSBC, Secpay (now Paypoint), Protx (now sage).

Mike

[pinbrook]

As far as i remember paypal pro can only be used with your own SSL cert and not with any flavour of shared SSL. But this is irrelevant due to PCI implications.

In the UK the only realistic option is PSP. As well as the ones Mike mentioned there is also RBS Worldpay, Netbanx and Secure Hosting.