Hi all,
I admit that I did post this question on the thread of another but haven't gotten any responses so I'm creating a new post in an attempt to get some answers. From what I can tell, several people are having the same problem so if someone could offer insite, it would be much appreciated!
I'm wondering if this issue had any resolution to it? I've looked all over the board and have seen this same issue but can't find a resolution to it. I'm experiencing the same problem. I have Paypal Website Payment Pro and pay for Virtual Terminal (which works fine on my other site), I've put in the correct API username, password and signature, the store is live and not in test mode and I still get Security Header Not Valid error when trying to process a credit card.
Did anyone find a resolution? I thought upgrading to version 1.4.9.1 would fix the matter but it didn't. Paypal and the API system is working on my other site (not running Opencart) but for some reason with my Opencart site it is not. If anyone can shed light on this, I'd be sooo grateful.
Thanks in advance,
Wende
http://www.creativesolutionscompany.com
Clean install of 1.4.9.1 with only one correctly working mod - Global Options. Still get the same error with or without the mod.
Last edited by i2Paq on Thu Oct 28, 2010 3:06 am, edited 2 times in total.
Reason: Topic moved
Reason: Topic moved
Opencart 1.4.9.1
Global Options Mod
So I'm still looking for anything that might fix this error. I've looked through the forums and have seen this error several times but with no real solution. So in looking at how my other site is set up (doesn't use Opencart) I noticed something that might help us toward a solution. This is kind of long-winded because I'm trying to offer as much info as possible because I really, really need a fix for this. Here are the two options available from Paypal for API access:
Option 1 - Grant API permissions to a third party to use certain PayPal APIs on your behalf.
Option 2 - Request API credentials to create your own API username and password. (certificate option)
With my other site, my shopping cart system offers the option of using a api certificate OR api credentials. On that site I'm using a Paypal API Certificate which only calls for a username and password. However I have to download the certificate from Paypal and upload it into my site at a specific location for the script to reference. On this site, I've had no payment issues for over 3 years.
Opencart doesn't offer the option of using a api certificate or api signature, only signature. From working with past shopping carts and referring to Paypal info - the username needs to come from the third party cart (which in this case is Opencart). Here are the instructions they provide when using the api signature route:
Third-party API Instructions
1. Contact your shopping cart or solution provider for your API account username. Then enter it in the API account username box.
2. Select the API access categories to which you want to grant permission. The categories include the following APIs:
•DirectPayment
•DoDirectPayment
•ExpressCheckout
•SetExpressCheckout
•GetExpressCheckoutDetails
•DoExpressCheckoutPayment
•Reporting and Backoffice APIs
•RefundTransaction
•GetTransactionDetails
•TransactionSearch
•Authorization and Settlement APIs
•DoCapture
•DoAuthorization
•DoReauthorization
•DoVoid
•Other APIs or Permissions
•MassPay
•Encrypted Website Payments
•BillAgreementUpdate
•BillUser
3. Click Save to enable your third-party shopping cart.
So my questions are:
1. Can I use a api certificate on one site and a signature api on another? My guess is no.
2. Should Opencart supply their third party cart integration api username for this to work? Did I miss this somewhere in the documentation?
I do recall using another cart a long time ago that I had to user their api cart integration username like: info_api1.their name.com. I know that I've entered everything in correctly on my end but I still get the error whether I'm using my template or the default, whether there are any mods or not, whether I disable other payment modules or not etc. It's got to have something to do with either the username or the fact that you may not be able to use both a certificate and third-party access simultaneously?
I'm pretty frustrated at this point because I love Opencart and had planned to switch all of my sites over to it. I can't imagine have to switch carts just because of this problem but I need to be able to process customer's cards and it's holding back a marketing campaign that was set to go out weeks ago. Any info at all might help and I've already got 2 requests in to tech support over the last week but haven't heard back yet.
~M
http://www.creativesolutionscompany.com
Option 1 - Grant API permissions to a third party to use certain PayPal APIs on your behalf.
Option 2 - Request API credentials to create your own API username and password. (certificate option)
With my other site, my shopping cart system offers the option of using a api certificate OR api credentials. On that site I'm using a Paypal API Certificate which only calls for a username and password. However I have to download the certificate from Paypal and upload it into my site at a specific location for the script to reference. On this site, I've had no payment issues for over 3 years.
Opencart doesn't offer the option of using a api certificate or api signature, only signature. From working with past shopping carts and referring to Paypal info - the username needs to come from the third party cart (which in this case is Opencart). Here are the instructions they provide when using the api signature route:
Third-party API Instructions
1. Contact your shopping cart or solution provider for your API account username. Then enter it in the API account username box.
2. Select the API access categories to which you want to grant permission. The categories include the following APIs:
•DirectPayment
•DoDirectPayment
•ExpressCheckout
•SetExpressCheckout
•GetExpressCheckoutDetails
•DoExpressCheckoutPayment
•Reporting and Backoffice APIs
•RefundTransaction
•GetTransactionDetails
•TransactionSearch
•Authorization and Settlement APIs
•DoCapture
•DoAuthorization
•DoReauthorization
•DoVoid
•Other APIs or Permissions
•MassPay
•Encrypted Website Payments
•BillAgreementUpdate
•BillUser
3. Click Save to enable your third-party shopping cart.
So my questions are:
1. Can I use a api certificate on one site and a signature api on another? My guess is no.
2. Should Opencart supply their third party cart integration api username for this to work? Did I miss this somewhere in the documentation?

I do recall using another cart a long time ago that I had to user their api cart integration username like: info_api1.their name.com. I know that I've entered everything in correctly on my end but I still get the error whether I'm using my template or the default, whether there are any mods or not, whether I disable other payment modules or not etc. It's got to have something to do with either the username or the fact that you may not be able to use both a certificate and third-party access simultaneously?
I'm pretty frustrated at this point because I love Opencart and had planned to switch all of my sites over to it. I can't imagine have to switch carts just because of this problem but I need to be able to process customer's cards and it's holding back a marketing campaign that was set to go out weeks ago. Any info at all might help and I've already got 2 requests in to tech support over the last week but haven't heard back yet.

http://www.creativesolutionscompany.com
Opencart 1.4.9.1
Global Options Mod
PP Pro wants
API Username
API Password
API Signature
This means in your pp account, you need to choose the "API Signature" method as opposed to the certificate
Do not use the "Option 1: Grant API Access" option in your paypal account.
You want to use "Option 2 - Request API credentials to create your own API username and password."
Then click "view signature" and copy that into the backend of the opencart module.
API Username
API Password
API Signature
This means in your pp account, you need to choose the "API Signature" method as opposed to the certificate
Do not use the "Option 1: Grant API Access" option in your paypal account.
You want to use "Option 2 - Request API credentials to create your own API username and password."
Then click "view signature" and copy that into the backend of the opencart module.
Thanks Q, I know that.
This is how I had it set up! I just didn't want to provide my api info here. I'm going to try switching my other site over to signature and see if both sites will work then. Hopefully it won't throw my other perfectly working site off too. Any further help? Or perhaps even a 1 page checkout mod that might skip whatever step is currently causing the error?

Opencart 1.4.9.1
Global Options Mod
Ok, good news! I went into my Paypal account and deleted the old credentials and requested new ones, then copy and pasted the new info into Opencart as I had before. I had to change my other site to work with the signature as well (not using Opencart) but that's appears to be ok so far. Then I purchased a test product (but not in test mode) from my main site (using Opencart) and SUCCESS!! I got emails and expected, Paypal IPN worked as expected, etc. I can't tell you how relieved I am!
So here's the only things that were changed to remedy the error:
1. Request NEW credentials from Paypal! My other Paypal credentials were working fine on my other site but were over 2 years old. Opencart MAY NEED NEW, RECENT CREDENTIALS.
2. If you have another site using PayPal Web Pro but using the certificate rather than the signature - CHANGE IT. Both/all sites MUST use the same system i.e. SIGNATURE METHOD.
Of course I'm not an expert or Opencart pro, this is just what has worked for me so I'm passing on info in case it may help someone else.
Now if I could just get some help on whatever is causing the new 1.4.9.1 version to run exxxtrrremely slow...
~M
www.creativesolutionscompany.com
So here's the only things that were changed to remedy the error:
1. Request NEW credentials from Paypal! My other Paypal credentials were working fine on my other site but were over 2 years old. Opencart MAY NEED NEW, RECENT CREDENTIALS.
2. If you have another site using PayPal Web Pro but using the certificate rather than the signature - CHANGE IT. Both/all sites MUST use the same system i.e. SIGNATURE METHOD.
Of course I'm not an expert or Opencart pro, this is just what has worked for me so I'm passing on info in case it may help someone else.
Now if I could just get some help on whatever is causing the new 1.4.9.1 version to run exxxtrrremely slow...
~M
www.creativesolutionscompany.com
Opencart 1.4.9.1
Global Options Mod
Who is online
Users browsing this forum: No registered users and 5 guests