Worldpay Service Update

Hi,

We've just had a message through from Worldpay regarding a change for the Business Gateway in relation to Worldpay moving from Bank of Scotland.

Please can anyone let us know if this will effect Opencart with Worldpay in any way? Please find email below:

In 2013 we will be making some updates to the WorldPay Business Gateway. This is an important part of our separation from the Royal Bank of Scotland, following the recent acquisition of WorldPay by Advent International and Bain Capital.

How will this affect me?

As part of the updates, you will need to make some changes to your systems to continue to communicate with the WorldPay Business Gateway service if:

• You receive callbacks from us and have firewalls with IP based restrictions in place. (Note that callbacks refer to our payment response feature, where we confirm the success or failure of payments processed on your website.)

• You use IP addresses (rather than domain names) to submit http requests to our gateway.

• You control your own Domain Name Service (DNS).

If you have technical staff or a third party web designer that looks after your website or shopping cart software, we recommend that you ask them to review the information below and, if required, make any changes.
What changes will I need to make?

• If you receive callbacks from us and have IP based restrictions in place, you will need to update your firewalls. Please click here for detailed guidance on how you can do this right away.

• If you use IP addresses to submit http requests to our gateway, then you'll need to change to using our domain-name-based URLs to connect to us as we'll be changing these addresses.

• Whilst we expect this to be unlikely, if you control your own DNS and need further information from us, please contact us by emailing mailto:mailto:support@worldpay.com.

• We strongly recommend that any required changes are made by 30 April 2013, in order to ensure that you continue to receive our services.


Thanks!
Tom

I use Worldpay and have not received this yet. Just mentioning it in case the email is a scam.

It doesn't appear to be a scam
http://www.worldpay.com/support/bg/inde ... te-dec2012

Never received any notification of this but perhaps they only contact users of certain account types. WIll sit tight until it stops working

I received the same email and checked on here, I think this should be ok as Worldpay seems to carry out the transaction via a merchant code rather than via any DNS settings.

When installing originally installing Worldpay in opencart, the only fields required were the merchant number and you are given a response address. I may be wrong unless there's something else going on the way that it communicates with each other.

Im gonna sit tight with the guy with the last post

I've just been forwarded that email by a client. What it refers to is the URL that the worldpay module uses to comunicate to the worldpay servers. It would seem that some ecommerce software has been using an IP address to send payment details to worldpay, rather than a URL, meaning that the IP address will be wrong when they move data center as described in the email.

Opencart uses the URL rather than an IP and this appears to be the correct in later releases of OC although older versions (such as 1.5 like my client is using) seem to be configured to use "https://select.worldpay.com/wcc/purchase". According to the email and as per newer versions of OC, this should be set to 'https://secure.worldpay.com/wcc/purchase'.

The URL is located in this file: catalog > controller > payment > worldpay.php

Newer versions of opencart also include the testing server URL so depending on whether it's using the correct URLs, they may both need changing as per the email.

So worldpay say:

1. If you use IP addresses instead of domain names to submit: http, XML or Remote Administration requests to WorldPay, please switch your connection to use domain-name-based URLs instead:

If you use HTML form posts:

Test environment:
https://secure-test.worldpay.com/wcc/purchase

Production environment:
https://secure.worldpay.com/wcc/purchase



Having had a look in: catalog > controller > payment > worldpay.php

the URL's are as follows...

$this->data['action'] = 'https://secure.worldpay.com/wcc/purchase';
}else{
$this->data['action'] = 'https://secure-test.worldpay.com/wcc/purchase';
}

....so i assume i don't need to do anything

Yeah thats right - presumably your using a more recent version of OC.

I am using an older version of opencart.
When i tried using this new url in my old payment.php
$this->data['action'] = 'https://secure.worldpay.com/wcc/purchase';
}else{
$this->data['action'] = 'https://secure-test.worldpay.com/wcc/purchase';
}
its giving me error.
should i replace a new payment.php from the new version of opencart?

Replacing the whole file is probably not a good idea.

If your version of OC currently only has one URL in payment.php, just replace it with 'https://secure.worldpay.com/wcc/purchase' - rather than the whole if/else statement.