VirtueMart Forum

VirtueMart 2 + 3 + 4 => Plugins: Payment, Shipment and others => Topic started by: tomphillipspcs on April 30, 2016, 16:18:35 PM

Title: security for worlpay plugin
Post by: tomphillipspcs on April 30, 2016, 16:18:35 PM
We have had an instance of "card testing" los of 1p transactions were placed - seemingly bypassing the cart system

any ideas how to prevent this?

I have changed minimum transaction amount to £10   (do I just enter 10  or does it have to be £10.00 ?)

any other ideas?
Title: Re: security for worlpay plugin
Post by: Studio 42 on May 01, 2016, 18:11:51 PM
Value use your default shop currency and not have to be filled.
So 10 is right
If you have a problem with a payment plugin, check with the plugin developper.
Title: Re: security for worlpay plugin
Post by: tomphillipspcs on May 02, 2016, 11:44:41 AM
even though I have changed the setting of minimum payment to 10 there are still transcations for 1p being attempted
Title: Re: security for worlpay plugin
Post by: tomphillipspcs on May 02, 2016, 11:54:51 AM
I thought the plugin was developed by hikashop?

Any further ideas? it appears they are bypassing the shop and using the payment system direct?
Title: Re: security for worlpay plugin
Post by: Studio 42 on May 02, 2016, 12:50:50 PM
See here : http://extensions.virtuemart.net/payments/worldpay-html-redirect-detail or
http://extensions.virtuemart.net/payments/worldpay-payments-detail and ask question
Or use the developper Email.
You can wait 2 weeks here, if noone check your message.
Title: Re: security for worlpay plugin
Post by: ssc3 on May 03, 2016, 11:48:37 AM
To stop the price from been changed after the order has been made and ensure the order is generated
by your site, enable the MD5 signature in the Worldpay Plugin.

To enable.
Login in your Virtuemart Setup
Set enable MD5 encryption to Yes
Then create an MD5 secret word and save.
This should be a string of 20 to 30 characters, containing both lower and uppercase letters, numbers or punctuation.
Save this.

Login in your Worldpay administration page
Enter the MD5 secret word. This must exactly match the one in your Virtuemart plugin setup.
Either set the signature field to
instId:amount:currency:cartId
or leave it blank. If left blank it will use the values sent by the plugin.
Save the changes you have made, then test.

If you are using the WorldPay plugin from
http://extensions.virtuemart.net/payments/worldpay-html-redirect-detail
use the "Ask a question" link, if you need any further help.
Title: Re: security for worlpay plugin
Post by: tomphillipspcs on May 03, 2016, 11:59:48 AM
Great thanks - I will try this