Wrong transactionID/sess_id/mb_amount

traxwriter · **Joined:** Fri Jul 06, 2012 1:28 pm **Posts:** 12

Hi,

Just updated to 2.0.12 due to CSRF bug however I'm not getting this issue when a customer tries to pay with paypal:

checkout_process.php line:41-transactionID=21 Wrong transactionID/sess_id/mb_amount

This occurs after payment has been successful, however becuase of this error is not credited to account.

I have attached the log from the epayment log (chnaged for security):

Code:

[28/05/2014 13:24:11]:[checkout_process.php line:38EPAYMENT : transactionID=21 - transactionKey=******** 
 -POST Var 
Array
(
    [mc_gross] => 24.20
    [protection_eligibility] => Ineligible
    [payer_id] => **********
    [tax] => 0.00
    [payment_date] => 04:24:10 May 28, 2014 PDT
    [payment_status] => Completed
    [charset] => windows-1252
    [first_name] => ******
    [mc_fee] => 1.17
    [notify_version] => 3.8
    [custom] => 
    [payer_status] => unverified
    [business] => ********@********
    [quantity] => 1
    [verify_sign] => **********
    [payer_email] => ******@*******
    [txn_id] => *******
    [payment_type] => instant
    [last_name] => *******
    [receiver_email] => *********
    [payment_fee] => 
    [receiver_id] => *********
    [txn_type] => web_accept
    [item_name] => ******
    [mc_currency] => EUR
    [item_number] => 
    [residence_country] => **
    [receipt_id] => ******
    [handling_amount] => 0.00
    [transaction_subject] => 
    [payment_gross] => 
    [shipping] => 0.00
    [ipn_track_id] => ******
)
]

[28/05/2014 13:24:11]:[checkout_process.php line:41-transactionID=21 Wrong transactionID/sess_id/mb_amount]

Thanks

israelpenny · **Joined:** Thu Nov 10, 2011 5:40 am **Posts:** 4

I´m getting the same issue. I commented out from line 40 to line 43 in checkout_process.php just for testing and the account was credited fine after the paypal payment was made.

//if (!is_int($transactionID) or !is_int($sess_id) or !is_int($mb_amount) or !is_int($transaction_id) or !is_int($card_number)){
// write_log(LOGFILE_EPAYMENT, basename(__FILE__).' line:'.__LINE__."-transactionID=$transactionID"." Wrong transactionID/sess_id/mb_amount");
//exit();
//}

But I'm not sure what should be the fix for this.

rboy22007 · **Joined:** Wed Nov 25, 2009 12:01 pm **Posts:** 90

Hi,

Im getting same the error on v2.0.13, Thus payment not getting updated on customer account.

[14/06/2014 19:35:47]:[checkout_process.php line:42-transactionID=5 : Wrong transactionID/sess_id/mb_amount]

Any solution yet?

traxwriter · **Joined:** Fri Jul 06, 2012 1:28 pm **Posts:** 12

Anybody? This is a major bug, surely someone has a fix now that doesn't include commenting out the checks?

rboy22007 · **Joined:** Wed Nov 25, 2009 12:01 pm **Posts:** 90

Hi,

There is a new a2billing 2.0.14 version release on the github. This might have the fix, i haven't tried the new version, so i can't confim.

bucasia · **Joined:** Mon Mar 02, 2009 8:56 pm **Posts:** 271

Hi Areski

I see the same issue. Recent versions of a2billing don't post PayPal transactions because of this -

if (!is_int($transactionID) or !is_int($sess_id) or !is_int($mb_amount) or !is_int($transaction_id) or !is_int($card_number)){
write_log(LOGFILE_EPAYMENT, basename(__FILE__).' line:'.__LINE__."-$trans_str : Wrong transactionID/sess_id/mb_amount");
exit();
}

Could you confirm what it's supposed to do? It seems to be checking if variables like transaction amount or transaction ID are integers, and failing if they are not? But I think they are unlikely to be integers.

It looks like this code was added around May time.

Thanks, Matt

provided by Star2Billing S.L.

Wrong transactionID/sess_id/mb_amount

Who is online