Vger

Okay, your site is not generating the order hash value, as in (example): <input type="hidden" name="OrderHash" value="abCdEf+hiJkLmnop+rtsUVWxx="> Vger

Once you've arrived on the checkout_confirmation page use View Source and look at the code in that page. You should see what is being passed to HSBC, along with a session id. Recently we installed a javascript drop down menu on one site and that broke the insertion of the session id into the code being sent to HSBC. Vger

Do you have 'Force Cookie Use' set to true in Configuration --> Sessions in your osCommerce admin panel? If so, set it to false. For HSBC e-Secure to work you must pass them a session id generated by your site. If you do not then they (HSBC) will generate a session id which gets passed back to your site, is not recognised by your site (because it did not generate it), and that results in errors. Vger

There's no need to alter any of the files provided by HSBC (the ones that go into the CGI-Bin), which is where I think that reference comes from. Vger

Okay, I now understand what you are referring to. With regard to the Address Format in the database and within Admin --> Countries, whilst various formats can be selected in Admin --> Countries (the database is just the reference point for those), the actual order in which they appear on the Create Account page has always been hardcoded into that page. If, before installing this contribution, you had selected a different address format in Admin --> Countries the way it is displayed on that page would not have changed. I have gone back through all of the files now, and the only page on which the ordering of the Post Code after the City has been done is create_account.php. No other files have been affected at all, including the database changes - these start at the new sort order of 6 up to 11. The seperating comma has always been there on english language versions of osCommerce. I'm sorry, but all I can suggest further, if you are unhappy with the order of display and the seperating comma, is to revert to the standard Create Account features. Vger

Perhaps you can explain a little more where it is that you are seeing this. I don't know what you are referring to when you talk about 'display order 5 in admin'. Where exactly is it that you are seeing the entry displayed in this way. If I know that and can replicate it then I may be able to offer a solution. Vger

No, not a bug and you didn't do anything wrong. Most people have posted on the forum asking how to place the postcode after the city, and this contribution was written that way. All that you have to do to reorder it is to move this section of code in create_account.php above the similar entry for the city. <?php if (ACCOUNT_POSTCODE == 'true') { ?> <?php echo tep_draw_separator('pixel_trans.gif', '100%', '10'); ?> <table border="0" width="100%" cellspacing="1" cellpadding="2" class="infoBox"> <tr class="infoBoxContents"> <td><table border="0" cellspacing="2" cellpadding="2"> <tr> <td class="main" width="15%"><?php echo ENTRY_POST_CODE; ?></td> <td class="main" width="85%"><?php echo tep_draw_input_field('postcode') . ' ' . (tep_not_null(ENTRY_POST_CODE_TEXT) ? '<span class="inputRequirement">' . ENTRY_POST_CODE_TEXT . '</span>': ''); ?></td> </tr></table> </td> </tr> </table> <?php } ?> and if you want to do the same on the admin side then move this piece of code in customers.php <?php if (ACCOUNT_POSTCODE == 'true') { ?> <tr> <td class="main"><?php echo ENTRY_POST_CODE; ?></td> <td class="main"> <?php if ($error == true) { if ($entry_post_code_error == true) { echo tep_draw_input_field('entry_postcode', $cInfo->entry_postcode, 'maxlength="8"') . ' ' . ENTRY_POST_CODE_ERROR; } else { echo $cInfo->entry_postcode . tep_draw_hidden_field('entry_postcode'); } } else { echo tep_draw_input_field('entry_postcode', $cInfo->entry_postcode, 'maxlength="8"', true); } ?></td> </tr> <?php } ?> Hope that explains things. Vger

Thanks for pointing that out James. I will upload an amended file as soon as I get a mo'. I was working on a modified version of osCommerce with all the left and right columns removed, so had to go back and put them in for this upload of files. I obviously messed up on this one file. Vger

The new Custom Create Account contribution is primarily intended for those who have no need to collect all of the information currently required by the Create Account process. I have added to those details which can be turned off by default under Customers Details, which are Gender, Date of Birth, Company, Suburb and State. You can now also turn off: Street Address City Postcode/ZIP Newsletter Telephone The Fax entry has been removed completely. At its minimum customers would only have to fill in their First and Last Names, E-mail Address and Password to create their account and process through Checkout. This is ideal for sites that only offer virtual downloads. These features are not only turned off on the Creat Account Page, but also in the customers details in Admin. The only drawback to the use of this contribution is if you sign up customers without collecting their address details (Street Address, City, Postcode/ZIP) and then later change your mind and re-enable them. This will give you an 'html special characters' warning during the checkout process - because it is now expecting to find those details listed. I haven't yet found a workaround/solution to this problem. Other than that I think that this module does what a lot of webmasters have been asking for. The contribution is located here: http://www.oscommerce.com/community/contri...ns,3179/page,12 Rhea (Vger)

The files that need to go into the cgi-bin are contained on the HSBC CD Rom. Open it in Windows Explorer and you'll be able to navigate to them. If you just launch it as an interactive CD Rom you'll never find them. Vger

You say you have changed it from Test to Production mode - but it's not enough to do this with the contribution you also have to Telephone/Fax HSBC e-Secure and get them to change it over at their end of things. It then takes up to 24 hrs for this to be done. Did you contact them? Vger

Yes, recently someone I know had a blog site of theirs being spammed by someone with a BT broadband IP address and they had to block it to keep the spammer out - so that's what made me think of IP blocking. Vger

What can I say - just clicked on the link quoted in your reply and went straight to the site. Maybe, for some reason, the IP address of your ISP has been blocked by Jose's website. Vger

Hi, You'll need to have an ssl cert to run the HSBC module - doesn't work on an http address. Vger

Hi, I just checked Jose's site and had no problem accessing it. This link takes you to the page with the HSBC module on it: http://oscommerce.qadram.com/modules.php?n...wdownload&cid=4 Vger

I would agree with you that our previous experience of tech support from HSBC was pretty appalling, but recently when we requested assistance from them, after a working installation suddenly stopped working, they dug out the error logs and got back to us within the hour. This anabled us to identify the problem and get it fixed. Vger

You can get a Chained SSL cert for $10-12, but if you have more than two to three people at a time in the https part of your site then any additional people will get either errors or wait for ever for the page to load. There are also some special 'time limited offers' but you have to look at what the price goes up to in the following year. The best priced full ssl cert is GeoTrust Quick SSL, at just $49 a year from ev1servers.net. Vger

That's not necessarily so. If the server is of the same type then you can change hosts. For instance if the server you currently use has a Linux based operating system then the certificate will be of the Apache + Mod SSL type, and you could re-use that certificate on another Linux based server. Also check with the issuer of the certificate. Many of them now do Free Reissuance of certs, but it depends upon the company as to whether a reissuance to a different type of certificate is covered e.g. Windows to Linux. Vger

Why this search for 'free hosting deals'? You're paying out quite a bit for using the HSBC system. It would make sense simply to have access to one web hosting service that includes all of the features you need. Trying to run certain functions from one domain, other functions from another domain is a recipe for disaster. HSBC integration is work enough without making more for yourself. Vger

TestHash.e is normally run from the cgi-bin, so I'm not sure that the exec function referred to is the php_exec function. I think it's a C++ file. There is also another set of files provided by HSBC which runs everything from java (or javascript - can't remember which). HSBC do warn however that this method is slower. Vger

Yes, just looked at my digital screen, and it's telling me it's time for lunch also! Vger

Paul, most of the people who try to help out here can offer osCommerce compatible hosting for THEIR customers - but we don't do it because it is strictly against forum rules to do so. I think it's a bit rich offering to help others to install it (for a fee I presume), when you've only just got yours installed with help from others here. Are the Mice still studying us? (HHGTTG) Vger

If your site does not send a session id to HSBC then they generate one of their own and send that back to your site - which your site does not recognise, so the whole thing falls down. If you have Recreate Session set to 'true' change it to 'false' Vger

Paul - this was your original question "I am having a problem when HSBC stops a order. Apparently, there is no record of the order being made on OSC. Shouldn't an order be saved to the db before going to HSBC? And then if it's rejected, the order would be marked for rewiew or something?" That question was answered by both myself and Richard - in that your HSBC order is not pre-saved before proceeding to HSBC. Yes, it is put into a review state if an order fails, but you are not notified of that by HSBC. Richard was trying to assist you. I don't think, given your reply, that he'll be bothering to do so again. If you are worried about not knowing what was in the cart at the time a transaction is placed into review by HSBC then there's a contribution you can install that allows you to recover the cart contents. Vger

No, it's the PayPal IPN that pre-saves the order, HSBC doesn't. But if you look through this thread you'll find a solution to the problem of HSBC refusing an order because the cardholder statement address and delivery address don't match up. Actually , just found the link - here itis: http://www.oscommerce.com/forums/index.php?sho...ndpost&p=369748 and here: http://www.oscommerce.com/forums/index.php?sho...ndpost&p=369476 Vger