CiviCRM Community Forums (archive)

Thanks for your responses everyone. Hugely appreciated.

@Eileen  
WorldPay do have a payment authentication method that works with CiviCRM form mode payment processing. They call it XML Direct, but they don't promote it. http://www.rbsworldpay.com/support/bg/index.php?page=development&sub=xml Without the &sub=xml in the query string you'd never know it was there - I had to ask WorldPay support directly. There's example code available too, which I'm sure can be customised for CiviCRM - http://sourceforge.net/projects/worldpay/

I tried making contact with @dougall http://forum.civicrm.org/index.php?action=profile;u=1952 by a Forum post and a direct message but haven't had any response yet. Doesn't look like he's swung by since 1 December, '09.

@michaelmcandrew
Code Sprint on payment processors sounds good, but end of March doesn't fit with my schedule unfortunately - I need to launch with WorldPay XML Direct in early March (pref. 1 March). I work in Oxford a couple of days a week, but usually Mondays and Tuesdays. Hmm.

Well, I'll get working away anyway and if I get anywhere I'll let y'all know. And if I end up tearing my hair out over handling 3-D Secure I'll come back hear crying!

Sounds good.  What kind of integration are you planning?  From within Civi on https or redirecting to an external site.  Are you going to do the dev?  Do you have any idea of the budget?

Michael

OK following from DaveJ's post, we need to move SagePay integration forward.

They have 3 options: form, server and direct. Form is very restricted and wouldn't really work in this context as you don't the callbacks you'd need for Contribute. Server involves HTTPS POST to their server and callbacks and you get some pages delivered from their site which you can customise or you can display them in an iframe so you keep your branding etc around it (haven't tested this). With Direct the user stays on your site and everything is passed to SagePay in the background - in this case you have much stricter security criteria and your server needs to be PCI checked which is an additional cost and a bit of extra hassle (have recently been through this). So it seems like the best option to use for Civi is the server one as this will work on a shared hosting environment (as long as you have proper access) and will tell Contribute what's going on.

Have some budget for this so would like to move into discussions of detailed spec, who would like to do the work, get a test environment set up etc.

Eileen, would you be interested in tackling this?

unicylcist, if that fits your bill, perhaps we can work out contributions

DaveM

I am also interested in potentially contributing towards costs of getting this done. Please keep me informed.

Hi,

Is 3D secure part of the requirement?

Hi,

I didn't wind up having enough time at the right time to help with this but talk to Dave (Circle-interactive - DaveM above) as he has progressed this.

Excellent news, and thanks for your effort on this project. The greater the number of payment options that become available, the more widely used CiviCRM will become.