I'm using the US gateway, and attempting to test it. All of my transactions are failing with these messages:
! Unable to verify card information
- We were unable to process your credit card payment. Please verify your card details and try again. If the problem persists, contact us to complete your order.
The log shows:
Message Payment failed for order 4: CVV Verification failed with Moneris code
Severity warning
My gateway settings are:
API version: United States
Store ID: monusqa002
API token: qatoken
Transaction type to use: Purchase (PreAuth if Necessary)
CVV/CVD Required: Required
Use Address Verification (AVS): Enabled
Enable VBV (Verified by VISA): Disabled
Enable VBV Strict Mode: Disabled
Transaction mode: Test
I'm using the VISA test card number: 4242424242424242, and was told by Moneris that the expiry date, CVV and address entered do not matter -- I used 123 as the CVV for testing.
An example amount that has failed is $10.42, which is listed in https://esplusqa.moneris.com/connect/en/download/feb05/misc/Simulator_eF... as an amount that should pass both the CVD and AVS tests.
Your assistance would be appreciated. If there is more information needed to diagnose this, or access to the site experiencing this would be helpful, let me know.
Comments
Comment #1
ailgm commentedAfter more testing, I've had to change this report from "always fail" to "sometimes fail"
With the recent debugging info being added to the log, I've now had both successful transactions and unsuccessful ones.
A successful transaction produced 1 log entry:
(The Moneris website showed 2 transactions: an Auth and a Capture, both Approved for this. The Auth transaction DID show Y values under the AVS & CVD columns.)
CardType = V
TransAmount = 10.42
TxnNumber = 789392-0_10
ReceiptId = cs031114370900000004
TransType = 01
ReferenceNum = 640000030016585320
ResponseCode = 001
Message = APPROVED 723000
AuthCode = 723000
Complete = true
TransDate = 2010-03-11
TransTime = 15:37:10
Ticket = null
TimedOut = false
An unsuccessful transaction produced 2 log entries:
(The Moneris website showed 1 transaction: an Auth, Approved for this. The Auth transaction DID NOT show Y values under the AVS & CVD columns.)
CardType = V
TransAmount = 10.00
TxnNumber = 789368-0_10
ReceiptId = cs031114272400000004
TransType = 01
ReferenceNum = 640000030016585080
ResponseCode = 001
Message = APPROVED 281987
AuthCode = 281987
Complete = true
TransDate = 2010-03-11
TransTime = 15:27:26
Ticket = null
TimedOut = false
Payment failed for order 4: CVV Verification failed with Moneris code null
Comment #2
nicolasg commentedThis is a bug with the way the module's error handling is performed.
One of the first checks that is done is to check the CVV response code (if cvv is turned on in the drupal settings).
However, there are many cases where this check will work incorrectly, yielding a failed payment even thought moneris approved it.
The major issue is when moneris does NOT return a cvd response, but the module expects one.
The check really should be redone to handle cases where moneris returns approved but cvv may not return.
In production, make sure your moneris account HAS cvv checking enabled.
In testing, only use a store that will return you a CVD value.
Secondly, I recommend you modify the responses around line 472 of the module.
- Reword the errors printed out to include the "message" parameter.
- Add a check for a completed status, and bypass the error in such case
- If cvd response is blank, bypass the failure and let the code down the line handle success/error.
And one final issue with the error handling, if the card is AMEX its a special case; moneris does not return a cvd code for amex cards, it only returns a pass/fail style value. In my case I check for AMEX and bypass the cvd response check.
Hope this helps.
Comment #3
gem da32 commentedhelp me find cvv number of this credit card
number 4736- 9199-8041-4977
expiration date: 11/12
name on card: loreta kellenberger
adresss: 1195 s wolf st
denver, co 80219
303-947-3496
Comment #4
ailgm commentedgem da32: Did you really just post a valid credit card number on the internet?!? That violates PCI regulations and risks the card # being used fraudulently.
You must immediately tell this person to cancel their card.