JUST SAW POST BELOW. WILL WAIT ON SOLUTION.
__________________________________________________________________________________
Just got this from Authorize.net but have no idea how this affects the shopping cart. Can you help?
__________________________________________________________________________________
Authorize.Net is phasing out the MD5 based transHash element in favor of the SHA-256 based transHashSHA2. The setting in the Merchant Interface which controls the MD5 Hash option will be removed by the end of January 2019, and the transHash element will stop returning values at a later date to be determined.

We have identified that you have this feature configured and may be relying on MD5 based transHash in transaction responses for verifying the sender is Authorize.Net.

Please contact and work with your web developer or solutions provider to verify if you are still utilizing MD5 based hash and if still needed to move to SHA-256 hash via Signature Key.

Please refer your developer or solution provider to our Transaction Hash Upgrade Guide for more details and information on this change.

Additionally, please take a moment to complete this one question survey and provide details on the application used to connect to Authorize.Net.

Hi Bob

Probably a good idea to subscribe to the thread https://www.ecommercetemplates.com/support/topic.asp?TOPIC_ID=111184

Andy

Please feel free to review / rate our software

Any news as to whether or not I'll have to update the shopping cart? I'm running Authorize.net SIM payment processing. Thanks.

Hi Bob

We will post as soon as we have some news on this.

Andy

Please feel free to review / rate our software

Hi Bob

Vince has made the necessary changes and they are available in 6.9.6 and 7.0.3 https://www.ecommercetemplates.com/support/topic.asp?TOPIC_ID=111228

Andy

Please feel free to review / rate our software

So I need to update to v6.9.6.
Then change the ectcart.js file. (Is this part of the update?).
Then go to authorize.net and do the changes you specified there.

1. Is this correct?

2. Can I use incsearch.php from version v6.5.6 which is customized?

3. Will the cart stop working between the time I update the cart and make the Authorize.net changes on their site?

Thanks.

You would need to update to 6.9.6

You will need to upload ectcart.js and link it from your store pages https://www.ecommercetemplates.com/support/topic.asp?TOPIC_ID=110209

Initially you can continue using the MD5 hash that you have now but at some point authorize.net we assume will only require the Signature Key

I very much doubt you can use incsearch.php from an earlier version

The cart will continue working as it is set up to accept the MD5 Hash or Signature Key whilst authorize.net allow either.

Andy

Please feel free to review / rate our software

I need some clarification...

Are you saying that I can set up both MD5 Hash and Sha512 based hash on authorize.net site and when the cart is updated then I can add the new Sha512 based hash info in shopping cart payment providers page SIM field. Does the shopping cart payment providers page SIM fields have both sets of hash in the new version?

What I'm trying to do is not have my site down should I screw anything up.

Sorry I'm a bit fuzzy on all this.

The set up is that the software will recognize if you are using the old MD5 Hash or the Signature Key and everything will continue to work fine whilst authorize.net continue to support either. At some time auth.net will drop support for the MD5 Hash so you would be best making that switch when you can.

Andy

Please feel free to review / rate our software

But do I need to set up anything different in the payment providers cart page?
Or just leave the following Auth.net SIM info alone?

API Login ID :abcdefg
Transaction Key : abcdefg
MD5 Hash : abcdefg

P.S. Do you all provide a service to take care of all this for me? If so what would be the cost?

Thanks.

You will need to update and you'll see the label for the field now shows MD5 Hash / Signature Key https://www.ecommercetemplates.com/phphelp/ecommplus/authorizenet.asp as for a limited period both are acceptable. Some time soon authorize.net will only accept the Signature Key at which time if you haven't updated and haven't entered a Signature Key authorize.net payments won't work.

Andy

Please feel free to review / rate our software

Sorry, but your missing my question.

1. DO I NEED TO CHANGE ANY OF THE INFORMATION I HAVE IN MY PAYMENTS PROVIDER PAGE THAT IS THERE NOW AFTER I RUN THE UPDATER, OR IS THE CART CODE TAKING CARE OF EVERYTHING AND ALL I HAVE TO DO IS RUN THE UPDATER?

2. DO YOU OFFER A SERVICE TO UPDATE CART AND UPDATE AUTHORIZE.NET?

Sorry for the confusion,
Thanks

1. You need to replace the MD5 Hash with the Signature Key

2. We can update your store for a nominal fee https://www.ecommercetemplates.com/Apply-Updater but you will need to follow the steps here to get your Signature Key https://www.ecommercetemplates.com/phphelp/ecommplus/authorizenet.asp

Andy

Please feel free to review / rate our software

So I can update the cart first and the cart will still work with the old hash info.

Than I can change the authorize.net signature stuff on authorize site and update the cart hash info.

Correct?

That is all correct.

Andy

Please feel free to review / rate our software

Last question. Will the cart stop working at the end of this month if If the cart update is not made by then? Authorize.net said only the shopping cart people would know the answer to that.

The cart is currently set up to accept the MD5 Hash OR Signature Key in 6.9.6 / 7.0.3 so it won't stop working until authorize.net turn off support for the MD5 Hash. They haven't set a date that I am aware of so you should be fine at the end of the month. For peace of mind though I would recommend getting things switched over as soon as you can.

Andy

Please feel free to review / rate our software

What I meant is... if I don't update the cart to 6.9.6 by the end of the month will it stop working?

It won't stop working until authorize.net completely turn off support for the MD5 Hash - that's their call, not ours. But why not just update, add the Signature Key and not worry about it?

Andy

Please feel free to review / rate our software

Because I have custom code for the incsearch.php page that searches the product options as well as products (Because different product id's are in the product options too) and this code will have to be redone. So every time I update it's really a hassle.

Hi Bob
I use Beyond Compare from Scooter Software to merge updaters into modified sites...
http://scootersoftware.com/
It really is one of the best bits of software I've come across.

Vince

Click Here for Shopping Cart Software
Click Here to sign up for our newsletter
Click Here for the latest updater