Support

Admin Tools

#40620 Tools causes eWay / Hikashop gateway to be non responsive

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by tampe125 on Thursday, 02 May 2024 02:22 CDT

yerg55

Please look at the bottom of this page (under Support Policy Summary) for our support policy summary, containing important information regarding our working hours and our support policy. Thank you!

yerg55
  • J! 4.4.4
  • HikaShop - Business 5.0.4 
  • AdminTools  7.5.2
  • Payment Gateway : eWay - https://www.eway.com.au/

eWay payment plugin functions as expected

Installation of Admin Tools and the payment process fails.

Customer Order Process :

  1. Customer orders products
  2. Customer sent to eWay site for completion of card details
  3. On completion the customer then clicks pay.
  4. The customer receives a 404 error

Expected action: In step 4 Customer is sent back to the site payment confirmation page

What needs to happen:

To enable the Customer to return back to site the eWay plugin included in HikaShop has to create a file ewayrapid_xx.php  in the root folder of the website.
This is carried out when the payment method is saved in the admin backend of HikaShop and the customer is returned to the payment confirmation page.

My limited understanding is that the changes made to the .htaccess blocks the creation of the ewayrapid_xx.php file.

Each order creates a new ewayrapid_xx.php file.

Looking for a solution to overcome this issue while maintaining AdminTools functionality.

Hoping this is possible

Thanks

tampe125
Akeeba Staff

Hello,

you should add that file to the exclusion list inside the Htaccess Maker, for further details please take a look at this page of the docs: https://www.akeeba.com/documentation/admin-tools-joomla/server-protection.html#determine-required-exceptions 

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

yerg55

I understand that Davide having read that

My challenge is that say ewayrapid_64.php then becomes ewayrapid_65.php is added and then additional files are added for each order which will rapidly see a new file added for each individual order.

We saw 2500 individual files created last year.

Given these files are added in the root directory this could be problematic

Can you provide some guidance in relation to creating a catchall of some form?

 

Thanks

 

tampe125
Akeeba Staff

Oh boy... that's a very complicated way to handle this type of situations... It's way better to create a single entry point and protect it, instead of creating a new file every time...

Is it possible inside the component to specify a folder that will contain those files? In this way instead of providing access to a specific file, you can simply grant access to the full folder.

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

yerg55

Am looking see if we can modify the location of the eWay file generation to /eway/ewayrapid_xx.php as a way around this situation

Will update accordingly

Thanks so much for the prompt response

tampe125
Akeeba Staff

You're welcome!

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

yerg55

OK a discovery and warning if you are using J!, Hikashop, eWay (Aussie payment gateway) and AdminTools then this is essentially a disaster

To have things functioning as required, then hacking of core code is not on for me

With 4 different code bases being updated, chasing down what needs to be hacked again to maintain the system for me is a bridge way too far.

No reflection on any of the code bases, the combination isn't a happy marriage.

 I'm testing on three other sites with different payment gateways to ascertain if it's just eWay that is the recalcitrant issue.

Davide I'll revert when I learn more

Thanks for a great product

 

tampe125
Akeeba Staff

Hello,

the real problem is eWay that is creating random files directly on the root of your Joomla installation and requires direct access to them. Honestly this is the first time I see something like that, since the whole Joomla ecosystem works because every request is directed to the index.php file, allowing for all the plugins and the framework to boot up.

As a side note, this is a bad "code smell": firing up their own framework instead of using the one already available in Joomla means that their are not using Joomla codebase, with all the securities and patches that are regularly published.

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!