Zen Cart SIM Mixed Content (secure/non-secure) Relay Response Declined Cards

[Kevin5590]

Hello, I recently set up my Zen Cart website (www.rcplanebuilder.com) with Authorize.net SIM integration using the out of the box ZC SIM module.

The problem I am having is when the Credit Card is declined on the relay response and returns to my site I am getting a mixed content (secure/non-secure) error in both Chrome and IE (haven't tried FF). The browser is blocking my CSS and JS links because they are HTTP so my page is un-styled. This is of course because the URL is still on the secure authorize.net site. When the card is approved it works great. The CSS and JS includes are generated by Zen Cart and are relative URL's but the base url is defined so they become absolute. Any Ideas?

FIY, I switched from using PayPal for Credit Card processing. I do not have SSL configured on the site and would prefer not have that added expense hence using SIM.

Thanks.

[RaynorC1emen7]

when is approved, did it return to your site or stay at authorize.net? Why is it different than declined?

[Kevin5590]

That's a good question. I'm pretty certain that it was returning to my site, but I'll check again when I get home to confirm. I'm not sure why it would just fail on decline, I am thinking that authorize.net handles declines differently? It seems that they serve my final page from their server on the declined cards and populate the decline message.

[RaynorC1emen7]

Since your relay response page get call in both approved and declined transaction, It could be that when it approved it is redirect to another page, but not when it is declined?

[Kevin5590]

I tested again with a valid card and the approval is redirected back to my site and Zencart indicates a success. A message screen comes up on the authorize.net site indicating that it is redirecting back to rcplanebuilder.com. 

Looking at the header information when the card is declined it looks like it is posting back to /gateway/transact.dll.

POST /gateway/transact.dll HTTP/1.1

Request URL: https://secure.authorize.net/gateway/transact.dll

Request Method: POST

Status Code: 200 OK

Anyone ran into this and/or know of a way around it? I thought the Sim configuration was supposed to support non-ssl sites. 

[RaynorC1emen7]

So it is not getting to the relay response page? then where the mixed content coming from?

[Kevin5590]

It is getting to the relay page, which redirects back to my payments page on declined cards.. however, my payments page is being served up by the authorize.net secure site. Here is an example of one of the content errors in chrome:

[blocked] The page at https://secure.authorize.net/gateway/transact.dll ran insecure content from http://www.mysite.com/includes/templates/freetemplate1/css/stylesheet.css.

I need to find a way to have it redirect back to the http payments page on my domain.

[RaynorC1emen7]

If it got to the relay page. On an approved transactions it did a redirect from that relay page to the page that the customer see. Just need to do the same for a declined transaction. Check the relay page and see what logic is doing on the backend.