Please look at the bottom of this page (under Support Policy Summary) for our support policy summary, containing important information regarding our working hours and our support policy. Thank you!
Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Latest post by tampe125 on Thursday, 02 May 2024 02:22 CDT
Please look at the bottom of this page (under Support Policy Summary) for our support policy summary, containing important information regarding our working hours and our support policy. Thank you!
eWay payment plugin functions as expected
Installation of Admin Tools and the payment process fails.
Customer Order Process :
Expected action: In step 4 Customer is sent back to the site payment confirmation page
What needs to happen:
To enable the Customer to return back to site the eWay plugin included in HikaShop has to create a file ewayrapid_xx.php in the root folder of the website.
This is carried out when the payment method is saved in the admin backend of HikaShop and the customer is returned to the payment confirmation page.
My limited understanding is that the changes made to the .htaccess blocks the creation of the ewayrapid_xx.php file.
Each order creates a new ewayrapid_xx.php file.
Looking for a solution to overcome this issue while maintaining AdminTools functionality.
Hoping this is possible
Thanks
Hello,
you should add that file to the exclusion list inside the Htaccess Maker, for further details please take a look at this page of the docs: https://www.akeeba.com/documentation/admin-tools-joomla/server-protection.html#determine-required-exceptions
Davide Tampellini
Developer and Support Staff
🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
I understand that Davide having read that
My challenge is that say ewayrapid_64.php then becomes ewayrapid_65.php is added and then additional files are added for each order which will rapidly see a new file added for each individual order.
We saw 2500 individual files created last year.
Given these files are added in the root directory this could be problematic
Can you provide some guidance in relation to creating a catchall of some form?
Thanks
Oh boy... that's a very complicated way to handle this type of situations... It's way better to create a single entry point and protect it, instead of creating a new file every time...
Is it possible inside the component to specify a folder that will contain those files? In this way instead of providing access to a specific file, you can simply grant access to the full folder.
Davide Tampellini
Developer and Support Staff
🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Am looking see if we can modify the location of the eWay file generation to /eway/ewayrapid_xx.php as a way around this situation
Will update accordingly
Thanks so much for the prompt response
You're welcome!
Davide Tampellini
Developer and Support Staff
🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
OK a discovery and warning if you are using J!, Hikashop, eWay (Aussie payment gateway) and AdminTools then this is essentially a disaster
To have things functioning as required, then hacking of core code is not on for me
With 4 different code bases being updated, chasing down what needs to be hacked again to maintain the system for me is a bridge way too far.
No reflection on any of the code bases, the combination isn't a happy marriage.
I'm testing on three other sites with different payment gateways to ascertain if it's just eWay that is the recalcitrant issue.
Davide I'll revert when I learn more
Thanks for a great product
Hello,
the real problem is eWay that is creating random files directly on the root of your Joomla installation and requires direct access to them. Honestly this is the first time I see something like that, since the whole Joomla ecosystem works because every request is directed to the index.php file, allowing for all the plugins and the framework to boot up.
As a side note, this is a bad "code smell": firing up their own framework instead of using the one already available in Joomla means that their are not using Joomla codebase, with all the securities and patches that are regularly published.
Davide Tampellini
Developer and Support Staff
🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.
Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!