Wanted: SagePay Server Payment Module

[PrestaNewbie75]

Hi,

I'm looking for someone to build a payment module for SagePay Server - we're after something that integrates more nicely than SagePay Form, but without the PCI hassles of SagePay Direct.

Please reply with a quote.

thanks

Chris

[Iamcaptain]

Why is the SagePay not nice? It does exactly what it needs to do? I'm confused.

[radders]

Form requires the customer to visit the Sagepay site for payment to take place. You also have to handle refunds via the Sagepay site.
With server everything happens in the backgound using an iframe (if you choose the 'Low' profile which unfortunately cannot handle Paypal transactions). If well implemented it would be a great solution.

[Iamcaptain]

I understand that and i also want to integrate the payment system into my site, but as a starting business, aren't the costs significantly higher by going that path? and what about pci-dss compliance, wouldn't that mean even MORE spending?

[radders]

I think you are muddling it up with 'Direct'.
'Server' is the middle way. Most of the benefits of 'Direct' without the cost. It requires more work to integrate but as there is less need for PCI compliance and it is recommended to use for downloads.
It can run in a iframe so the customer stays on your site. Mostly this s used if you have your own server but afaik it can be also used on shared servers providing that your webhost anables all the necessary services.

[Iamcaptain]

what are the necessary services? I'm at the point of applying for the merchant account and gateway, so with the whole pci compliance issue, it's complicated a decision which i thought was more straight forward. Ideally i want the customers to put their details on my site, and i thought all i needed for that was ssl certificate, gateway and a merchant account. =/

[radders]

Good question. afik it is just that your server supports cURL.

For PCI compliance, with 'server' you would be hosting card information on Sagepay servers so no audit, just a self assessment only (From £72 per year through Sage - Not really sure why self-assessment should cost anything though.)

[PrestaNewbie75]

Yep.

I'm not sure why more carts don't support the server module - they usually have form and direct only. Form takes you away from your checkout process and direct requires PCI compliance.

Reading through forums and blogs, there seems to be a misconception about the direct integration in that many site owners and developers assume that because they are not storing the card info in their own DB then they are not required to comply. However, the PCI regs state that as well as storage of cardholder data, they also apply to anyone who 'transmits' such data. As of today many small merchants using the direct method may find themselves non-compliant and at risk.

Presentation from SagePay here:

From a UK perspective, the SagePay server/iframe model presents small and medium merchants with a neatly integrated payment solution that doesn't require a high degree of compliance. In payment module terms it's a killer app and one that I'm sure many people will be after when they realise the implications of the direct route. I'd happily pay for the module, and I'm sure there are more of us out there.

[radders]

Do keep us in the picture. I'd be happy to contribute some £ to help get this done.

[christopherdarling]

I would be willing to contribute some £ for this Payment Gateway too.

Here is a link to the SagePay Server Integration kit, which may help

http://www.sagepay.com/developers/downloads/integration_kits/server/PHP_Kit.zip

[Iamcaptain]

Any updates on the subject mate?

[Dave Sniper]

uhm it looks like Prestashop is missing one of the most important payment gateway in UK. I've integrated Sagepay on various of e-commerce system but not on Prestashop. It would be nice and fun to work on this.

will keep posted.

[radders]

Yes Oscommerce and Magento recently got Sagepay approved modules for 'Server'. Seems to be the best solution for integration with Sagepay.

[tomerg3]

I would be willing to contribute some £ for this Payment Gateway too.

Here is a link to the SagePay Server Integration kit, which may help

http://www.sagepay.com/developers/downloads/integration_kits/server/PHP_Kit.zip

This seems like a complete solution with storing info in a local database.
Is that what you are looking for, or just a simple form which will send the cc information to sagepay and put the order in if the transaction is approved?

[christopherdarling]

Personally I'm looking for SagePay Server the whole package. IFRAME form for payment. Backend integration for refunds etc.

I imagine alot of that code can be re-used to aid development of this module

[fiscme]

I am really keen for this as well and would happily contribute for a fully integrated iframe sage pay module.

I might be wrong but perhaps it wouldn't actually be that difficult to adapt it from the current sage pay module which is form integration.

[thehandlestudio]

Are there any updates on anyone working on this module?

Regards,

Mark

[tomerg3]

Are there any updates on anyone working on this module?

Regards,

Mark

I am looking into it, I will update this thread with my progress....

If anyone is willing to help me with testing, please PM me.

[geba]

not really....iframe or CURL w/ Post should do the trick. I would be happy to code it and release it...
but I'm kind of busy....any coder want to split the work down the middle for the sake of opensource?

[thehandlestudio]

any more news on this module?

Regards,

Mark.

[tomerg3]

Since no one PMed me about helping with testing, it went down on my priority list....

[thehandlestudio]

I only know the very basics of any coding so if I could help in testing in anyway I will, Just let me know what I can do.

Regards,

Mark.

[radders]

Didn't realise you had anything available to test.

[tomerg3]

I didn't, but I started investigating how to do it, and they really don't have a good support system, so I need someone with an actual account there to help me test the code I'm writing.

I took the lack of reply as lack of interest so I moved on...

I'm currently on vacation until the weekend, I'll have something ready for testing by the end of next week.

[thehandlestudio]

Happy holidays and will look forward to seeing this module.

Regards,

Mark.

[radders]

Yes that's understandable. There is interest but something of a chicken and egg situation.

We are looking to upgrade from Form to Server but have certain issues with it like the absence of Paypal support in the iframe version. Perhaps not a major issue if the Prestashop Paypal module worked well. Someone else said it was the iframe version they required. Also I'm not sure how the refund system within Prestashop and a future admin order editor would play with it. Mainly it is for this reason that personally I have not pushed things along.

This is certainly on my wishlist. Other things holding me back from converting from osCommerce include lack of an order editor, international addressing, attribute handling suitable for clothing (with no default), proper order export, but I am hopeful that in 6 month's time it might all be in place.

[sanjeeve]

Hi Tom, Just saw the post and I would like to help on this! Let me know. Thanks

Sanj

[tomerg3]

I am looking for someone with a Sagepay account to help me test, please PM or contact me on skype (tomerg3).

There will be a discounted price for the person who helps me with testing.

[tomerg3]

I am about 90% done with the development, I really need a Sagepay account to test the layout of the form in the iframe.

I will give a 33% discount on this module to the first person that can provide me with an account to test on.

[symbolismretail]

hi


can offer sage pay account for testing if needed

[fiscme]

tomerg3

Its possible to sign up to sagepay as a pure testing version,

https://support.sagepay.com/apply/RequestSimAccount.aspx

This (at least in the 'form' version) works exactly like the live version, the only difference is using the subdomain 'test' not 'live' in any URLs.

Hope this helps

[tomerg3]

I already have a Simulator account, but it shows you extra steps, and doesn't show you some real steps that the Test or Live system would.
Also, I'm not sure if the Refund feature can be tested with it.

[fiscme]

Oh OK, well in that case i cant help then..

I did find the support pretty good when i rang them, perhaps they will be able to help directly?

[tomerg3]

Yup, I got quick response from them too, unfortunately they do not offer test accounts, only simulator

I should have this sorted out soon, since someone I know is waiting for their account's approval, but if you have an account with them, I'd still like the help.

[alexthecheese]

Hi there

Just to let you know that I would be interested in this also my friend.

[Meromanche]

Am I missing something? I believe there is already a protx (old name for sagepay) module.

[radders]

Yes you are missing something.

Of all the Sagepay methods, 'Server' is perhaps the best.
More sophisticated than 'Form', it allows you to take card payments directly on your site without transferring them and yet avoids the stringent PCIDSS requirements of 'Direct'

[tomerg3]

This module is ready for testing, it's using the 'Server' method, and also hooks up for refunds.

As I states before, I still need an actual Sagepay account to test it with, so far I have only been contacted by one person, who is still waiting to get his sagepay account approved...

[alexthecheese]

Let us know how you get on tomerg3. We'll be setting up soon and will be going for Sagepay, so we can be the guinea pigs if you have no joy by the time we're up.

BTW, I'm going to PM you. If you could drop me an email once you have confirmed that this is working, then that would be really helpful.

Cheers.

[PrestaNewbie75]

Hi Tomer,

Any update on your testing? I hadn't realised this thread had advanced so much - I stopped receiving updates.

Chris

[tomerg3]

I am still waiting for 1 person with a Sagepay account so i can test this module properly.

Seems odd that no one has an account, or just dont wish to help

[thehandlestudio]

I'm still in the process of setting up my account with sagepay, what a right pain in the rear end it has been, I will let you know if I ever get this ready tomerg.

Maybe could you release the module for some people to test and then update it later ?

Regards,

Mark.

[tomerg3]

I'm still in the process of setting up my account with sagepay, what a right pain in the rear end it has been, I will let you know if I ever get this ready tomerg.

Maybe could you release the module for some people to test and then update it later ?

Regards,

Mark.

Thanks for the offer, but if it is really urgent for anyone, than they would probably contact me to help test it.

I do not release untested modules, especially not payment modules.

[ruaridhc]

Hi, I was wondering if there was any progress with the SagePay Direct module? And any idea what sort of price it might be?

I've been reading the forum for days trying to figure out if I can get Prestashop to do all the things I need for my new site - the payment module seems the only stumbling block. Might Paypal be a solution in the meantime? I'm just worried that it might not look great if customers are taken to Paypal's site when they try to buy from me.

Thanks

[radders]

Whilst you are waiting for the Sagepay 'Server' module why not use the Sagepay 'Form' module?
If you have already a Sagepay account then you could perhaps arrange testing of the module. From my own point of view unfortunately there are still a few crucial things I need Prestashop to do before I can switch to it but there has been no progress on these in the last six months.

[tomerg3]

I came very close, a member here shared his test account with me, but the account was not an admin, so i couldn't add my server's IP address to it, and I have not heard back from them yet.

Trust me, i wanna finish this module already, but I can't seem to get proper help...

[ruaridhc]

Hi tomerg3, I just rang Sagepay, and asked about the possibility of setting up a testing account - they said that setting up a simulator account should be all you need. I understand that you've already done this but that you had certain issues that you felt wouldn't be dealt with in a simulator account? If you could list those in a way that I could explain to SagePay, I'd be more than happy to phone them up again and see if I can make some headway.

Afterall, it's really in SagePay's interest for Prestashop users to be able to use there system. So I'd be hopefull that they'd be willing to cooperate.

Thanks

[tomerg3]

Hi,

With a simulator account, you cannot see how the real page is going to appear on the server, and you cannot test for refunds / returns.

I was contacted by two very kind members here, and was able to get a live account to test with.

I hope to have a this module ready by the end of the weekend, I'm just doing some final testing (making sure refunds (full and partial) are working fine.

I'll keep you updated.

[ruaridhc]

That's great news! :cheese:

[radders]

Will this work for downloadable products (where there is no delivery address)?

[tomerg3]

I don't see why not.

[tomerg3]

The long wait is over....

http://www.prestashop.com/forums/viewthread/44996/

I have tested this module thoroughly, however, like with any payment module, it is highly recommended that you run a few test transactions on the live system to make sure there are no problems I overlooked.

If you find a bug, please let me know and I will fix it ASAP.

Thanks for the wait.

[radders]

Thank you for making this module Tomer. It looks very good!

I have one question. I understood from the Sagepay site that you have the choice of either using the normal payment pages and transferring the customer to Sagepay to make the payment or using the low profile payment page in an iframe. If you use the second solution then the customer will not be asked to choose the type of card they are using.

Did you find a third way?

[tomerg3]

It is using the server method http://www.sagepay.com/developers/integration_manual/server_introduction.asp
but in an iframe (which is the way they recommend doing it)

[thehandlestudio]

Hi Tomerg3, This is fantastic news as soon as I set up my account with them I will be purchasing this module.

Does this module work with all verisons of PS? If not which ones does it work with?

Regards,

Mark.

[tomerg3]

I have tested this one on 1.2, but other payment modules I made were compatible with 1.1 and 1.0.
Payment modules have very little interaction with the core prestashop, so I don't think there will be an issue with it

[tomerg3]

Thank you for making this module Tomer. It looks very good!

I have one question. I understood from the Sagepay site that you have the choice of either using the normal payment pages and transferring the customer to Sagepay to make the payment or using the low profile payment page in an iframe. If you use the second solution then the customer will not be asked to choose the type of card they are using.

Did you find a third way?

I was using the default Sagepay Profile variable (which was set to “Normal)”, that was showing unnecessary screens (card selection and summary).

I have changed it to “Low”, so now the only page that gets displayed it the one where the user needs to enter their card details, once they hit submit, they are taken to the prestashop order confirmation page.

[ruaridhc]

I was wondering if I can install and use this module on a shared hosting package, or are there files that would require me to have my own dedicated server? Any installation outside of my Prestashop folder? I read somewhere that some service providers aren't keen on installing additional software on a shared package when only one customer is using it?

Thanks

[tomerg3]

There are no files to install anywhere except the modules folder.

The only requirement is to have a static IP address, since sagepay requires you to add your server's ip address in you sagepay account (for security reasons).

I have a shared host, with a dedixated ip, and an SSL certificate and had no problems.

[radders]

I think the only extra software required is cURL but that package is standard on most decent webhosts. The installation of the sagepay server module is like any other Prestashop module.