|
|
These programs are protected by copyright and may not be resold or distributed. Please see the copyright notice for more information on your end user license for this program. What's In This Document: Use this as a reference for the settings in mofpay.conf. Settings are listed and explained in the order they appear in the mofpay.conf configuration file. We've also included a How Do I list for some of the frequently asked questions about settings. For beginners information on how to work with Perl configuration files, see Docs : AboutConfigurations.html. Important: SSL required The MOFcart Back End processing script handles all the operations for collecting Billing information like credit card number, checking account numbers, etc. Security Warning: These operations should be installed under SSL (Secure Sockets Layers) if you are collecting sensitive information on the forms. SSL is provided by your server, not MOF. Ask your hosting provider the details on how to run cgi scripts under the SSL they provide. We recommend that you use a hosting provider that is capable of providing SSL on the same server as your virtual web space. We recommend against using remote SSL services, since you will not be able to use a couple of MOF's features if the Front End is on one server and the Back End is across the globe on a separate server. Most shared SSL is on the same server as your main web space, where the hosting provider uses virtual mapping to your web site space and files. You'll need to contact them or consult their help pages on how they intend for you to map via SSL to your web space. They will provide you with the URL path to invoke the SSL and run your scripts and web pages through the SSL.
Major sections in the mofpay.conf configuration file
Note: The Formatting settings are in the Docs > Formatting.html
Use: Allows you to switch between troubleshooting messages for installation feedback and customer friendly error messages when ready to go live 0 Troubleshooting mode only, messages are not customer friendly. If you are running in ?test mode set ERRORMODE to zero for troubleshooting tips and info. Security Warning: you must always set ERRORMODE to 1 or 2 when ready to go live, else those operating the cart from the web can see all your troubleshooting information when they get an error. 1 Return a Generic customer friendly error message for all errors. 2 Redirect all Error messages to a custom page as defined in the $ErrMsgRedirect URL $ERRORMODE = [0/1/2];
Use: Allows you to define exact domains to submit data to the cart, preventing anyone from submitting bogus data. Security Warning: You must have this setting enabled and operating correctly to prevent any tampering with the cart. The MOF back end accepts POST only data by default, but you must enable @ALLOWED_DOMAINS, usually the same as in mof.conf, to prevent any off site posting to the back end. Provides a list of valid domains that have permission to interact with the cart A page from anywhere can submit INPUT data to your cart SSL Note: Under some SSL installations, the cgi reffering_url is not present in the environment when mof.cgi is called from a process in mofpay.cgi. It is not present at the server level of the cgi process, and therefore you will get a Domain Not Allowed message if attempting to use the "Edit Cart" option from the Billing information screen. Disable both of these buttons in mofpay.conf so they do not allow a post back to the cart while on the Billing information page
$menu_viewcart_top = 0;
Use: Settings necessary for MOF's back end file operations. Where are the two main scripts located ? Where is the MOF Front End cart script ? SSL Note: if the back end is running under SSL, then put in the complete HTTP URL for the programfile setting. This terminates the SSL session, and insures that front end cart operations are loaded under normal HTTP protocol again. If you don't do this the front end cart will end up running under the SSL connection, and triggering all sort of "page insecure" messages from the browser. Where is the MOF Back End Payment processing script ? Lockfiles Important: Disable file locking under NT/Winxx. It only works with Unix/Linux. File locking prevents any problems when MOF uses common data files, like the invoice number sequence, and especially the ASCII database storage, and ARES, etc. So, you should always enable it when on UNIX/Linux servers. The simple file name will do. Place the file along side the mofpay.cgi script On NT/Winxx you may need the full path Note: you can change the invoice numbering by editing the mofnumber.dat file. Just put in the starting number. If you are using ARES, or saving database information, then avoid resetting the invoice number.
Use: Provides a way for MOF to empty a customer's cart items once checkout is complete and final Order confirmation screen is displayed. Important: If you are running the MOF back end under SSL, then you cannot use a remote SSL service or this feature will not work. This feature requires that the MOF back end be able to connect and write to original scratch files created by the MOF front end script. We recommend that you use a hosting provider that is capable of providing SSL on the same server as your virtual web space. 0 disable this feature How It Works When checkout is finalized, MOF will delete the just purchased items from the customer's cart file. If the customer happens to quickly return to the store to purchase more items, they will be able to start over. If you disable this feature, or have remote SSL where it cannot work, then when the customer returns to the store, the items just purchased are still in the cart. Not too professional looking. If you are having trouble making this feature work, try these tips:
Use: This is an ASCII flatfile data logging PlugIn that stores all of MOF's output data to four flatfiles. It is a MOFcart companion program, available in the MOFcart developer's area for anyone licensed at the developer's level. Caution: you cannot enable this function without first installing the PlugIn utility, else MOF will give you an error message. The documentation for this PlugIn explains how to make the settings in mofpay.conf 1 enable ascii flatfile dB storage Name of PlugIn Where are the ASCII dB data files This will always be an absolute path and not a URL $MOFINVOICES = '/path/to/datafiles/MOFINVOICES.DAT';
Use:
This is an alternative to emailing the scrambled cc numbers. This plugin
and instructions are available for Free Download at the MOF support area
online: Caution: you cannot enable this function without first installing the PlugIn utility, else MOF will give you an error message. 1
enable ascii flatfile dB storage Name
of PlugIn Where
is the data file ?
Use: This is a MySQL data logging PlugIn that stores all of MOF's output data to a MySQL database. It is a MOFcart companion program, available in the MOFcart developer's area for anyone licensed at the developer's level. Caution: you cannot enable this function without first installing the PlugIn utility, else MOF will give you an error message. The documentation for this PlugIn explains how to make the settings in mofpay.conf 1 enable MySQL dB storage Name of PlugIn Define database connectivity settings: Name, User, Pswd Note: there is no host setting. The PlugIn assumes you are running a MySQL Daemon on the same server as your web site Security Warning: *Do not* use a non password protected database. There is more information about that in the PlugIns documentation. Also, make sure the mofpay.conf is completely secure from web access, since it will contain the user : pswd. For more information on this security issue see: Docs > SecurityIssues.html
Use: ARES v2.4 (Affiliate Referral Earnings System) is a powerful companion affiliate program that runs exclusively with MOF. It is a fully automated, web based, two tier system that provides purchase tracking for affiliate earnings, representative earnings, customer discounts, real time sign-up, web based Admin, web based account management for affiliates, and more. It is an exclusive MOFcart companion program, available in the MOFcart developer's area for anyone licensed at the developer's level. The best way to see it in operation is to sign up as an affiliate with MerchantPal.com services, where all MOFcart products are distributed. That will give you a tour of the system, and if you decide to actually use your affiliate links, you can earn real money. You won't be able to access the Admin control panel, but you can view a complete set of the ARES v2.4 documentation here, which may give you an idea of how the Admin works The ARES v2.4 installation docs explain how to make these settings in mofpay.conf Note: the file paths and names should be identical to the settings in the ARES v2.4 configurations $activityfile_path = '/path/to/activitylog.dat'; How to compute earnings 0 compute using GROSS amount, before any SH & I $use_NETAMT = 0;
Use: Settings necessary for MOF's file operations. These templates allow you to custom design the look and feel of all the cart screens. For help on creating your own templates see: Docs > Formatting.html MOF uses nine templates to present the various cart screens that you see in traveling through the cart: viewing the cart, validation messages, error messages, shipping info, order summary, billing info, order confirmation, invoice copy. The templates are standard HTML web pages, with a special insertion marker embedded as an HTML comment. Where are the 3 templates for the Back End cart screens ? Note: UNIX/Linux the path opens with forward slash and ends with the filename.html Template for the Billing information screen Template for the Order confirmation screen or Thank you for your order screen SSL Note : if you are using SSL (HTTPS) protocol for the Back End then all of the objects (images) embedded within the Billing information and Order confirmation templates need to be referenced via the HTTPS protocol, else you will get the message "non secure items loading." The surest way is to just use the full HTTPS URL in the image location. Template for the saved Web copy of invoice page Security warning: See warnings in Formatting.html if saving web copies of invoices Note: The Web copy template is used to save a copy of the final invoice to the ../invoices/ directory on your web site. It is an identical copy of the Order confirmation, however, all sensitive information has been deleted from it, like credit card numbers, checking account numbers, etc. It does not need to be stored in the HTTPS SSL location. If you do not enable this feature, then you do no need this template. What is the Insertion Marker to look for ? $insertion_marker = '<!--MOF-INPUT-AREA-->';
Use: Some various settings for formatting date, time, currency, weight, delimiter Note: These settings should be identical to the ones in mof.conf GMT offset time in seconds: Formatting the date-time line What to do with that long Order ID number ? What currency symbol to use ? What weight symbol to use ? What delimiter to use for product input field separation What eMail address is listed on ERRORMODE 2 messages ?
Use: How to handle zero amount orders, fractions, sub total display. These settings should be the same as in mof.conf How to format the extra user input ? Print a flag to identify taxable items ? Allow Fractions Note: When enabled, this setting will always trigger a sub total line for each item in the cart, so that computations will be correct. The product's original price as set in the input is always assumed to be one unit. Hence, apples input price is $ 0.35 (per pound), then someone can enter 0.5 of that item and the correct sub total will compute, purchasing 1/2 pound of apples. List the Main Item in the sub total lines ? Note: You may want to disable this if using HTML [pseudo tags] in the Item Field input. Otherwise, the HTML will show up in the sub total line, as in src images, etc. Zero based invoice bypass These settings tell MOF to prevent asking the customer for payment method, billing information, or receipt to information if the total invoice = $ 0.00. No payment is required, so you may not want to ask for it. This allows the validation to be bypassed as well. 1 Bypass Payment Method section is $ 0.00 total 1 Bypass billing/receipt name, addr, etc if $ 0.00 total Note: if you want to bypass the Billing info screen completely for a $ 0.00 total invoice, then enable the $zp_passthrough setting in mof.conf. Otherwise, the customer will initially stop on the Billing information screen, and MOF will display any input configured, like the comments box, or cyber permission checkboxes.
Use: Sends the order notice to the merchant via email Security warning: if you are taking credit card or checking account numbers over the web, then you must enable the number scrambling. You also need the MOF cart back end set up under SSL. Also, make sure the mofpay.conf is completely secure from web access, since it will contain the secret codes. For help on securing the conf files see: Docs > SecurityIssues.html Note: credit card numbers will not appear in the email notice until at least one of the scrambling codes below have been enabled. Test cc number: VISA 4321 5678 9876 4321 If you're trying to test the cc number, you either must disable the cc validation or use a test number that passes the validation algorithms Troubleshooting: if you are having problems getting the mail to send, then you may need to go into the actual mail PlugIn file and change the internal definitions. NT installations will need to do this for sure. See: Docs > Troubleshooting.html 0 do not send merchant notice Name of mail PlugIn Define email addresses to send notices to, may use multiple addresses Important: Make sure and use single quotes only when defining email addresses because the @ will trigger an error if double quotes are used to identify the string. What return address to show on emails Plain text business name for subject line and body, and URL Number scrambling Set your secret code(s), numeric values only, between 1 - 4 digits Transpose the first 4 digits in the cc number Transpose the second 4 digits in the cc number Transpose the checking account number This is a way of scrambling the cc number as it goes out in the mail. The first code will be subtracted from the first 4 digits in the real cc number. The second code will be subtracted from the second 4 digits in the real cc number. The checking account code will be subtracted from the overall checking account number. We provided two codes to scramble both the first and second sets of four digit numbers because Discover cards use only one universal set of four digit numbers ( 6011 ). If you don't take Discover cards, then using only the first set of four digits is safe. You could also opt to scramble only the second set of four digits, and not the first. Important: Do not use the same number for both settings, especially if you are taking Discover cards. Finding the answer to the first would then yield the correct answer to the second. Obtaining the correct cc number The scrambled number that appears in the Merchant mail will have your secret code(s) subtracted from the real sets. To obtain the correct number, add your secret code(s) back into the first 4 digits, and second 4 digits, respectfully.
Example:
Note: It's okay for customers to enter hyphens, etc into the cc number. The validation routine will check out the number, if it passes validation, then it is okay to transpose. The full transposed cc number that appears in the merchant mail notice is formatted with spaces between the sets of four digits, regardless of how the original number was entered by the customer. Obtaining the correct checking account number This code number is subtracted from the overall checking account number, so you can make it any number you want. It is not limited to the first 4 digits. Add the checking code back into the number received in mail for the correct checking account number.
Use: Sends an Order confirmation via email to the customer Troubleshooting: if you are having problems getting the mail to send, then you may need to go into the actual mail PlugIn file and change the internal definitions. NT installations will need to do this for sure. See: Docs > Troubleshooting.html 0 off, 1 on name of PlugIn Include the user : pswd to print in the customer mail if you pswd protect the ../invoices/ directory with a general password. Business information that prints in various places in the customer mail Note: If you set a fax number and enable mailing or faxing as a payment method, then MOF assumes your are allowing faxing. Setting fax to "" (null) tells MOF to forget the fax part, you don't have one. Note: MOF will select the customer email address to mail order confirmation in this order. If no customer email address is found, no customer mail will be sent.
Use: Allows you to save a complete copy of the Order confirmation as web page Security warning: See warnings in Formatting.html if saving web copies of invoices The Web copy template is used to save a copy of the final invoice to the ../invoices/ directory on your web site. It is an identical copy of the Order confirmation, however, all sensitive information has been deleted from it, like credit card numbers, checking account numbers, etc. It does not need to be stored in the HTTPS SSL location. 0 off, 1 on name of PlugIn 1 List the Web copy URL in the Order confirmation as a link Define the absolute path to the ../invoices/ directory, this is not a URL NT/Winxx example: Define the base URL to the ../invoices/ directory Fix for some shared SSL problems SSL Note: This is a feature fix if you are saving web copies of invoices but find that you are unable to access, delete, or edit any of the invoice files that MOF is creating. For Unix-Linux servers only, enable this switch, and when MOF creates the invoice files they will be created with shared permissions, so that you will be able to access them under your normal uid (user ID).
Use: Allows you to set which fields are displayed and required for Billing name, address, etc., on the Billing information screen Important: the required fields should match required fields for shipping destination fields, if possible. This will minimize confusion with the shortcut feature. Note: the shortcut feature will fill any empty billing information fields with corresponding shipping destination information. The customer may use the shortcut and fill in any of the billing information fields. New data can be entered into the billing info fields at any time, and previous data will be replaced when submitted. For help with Perl syntax for this setting, see: Docs > AboutConfigurations.html. Syntax: How It Works:
Example: %billing_info_fields = ( This defines that two fields will display. The First Name Field requires at least 2 characters entered, and the Middle Name Field is not required. No other fields will display. Master List: Billing information fields
You can have up to 15 fields for Billing information.
Use: Allows you to use an alternate set of fields for Whom to send receipt to, on the Billing information screen For help with Perl syntax for this setting, see: Docs > AboutConfigurations.html. Syntax: How It Works:
Example: %receipt_info_fields = ( This defines that two fields will display. The First Name Field requires at least 2 characters entered, and the Middle Name Field is not required. No other fields will display. Master List: Receipt To information fields
You can have up to 15 fields for Receipt To information.
Use: Allows for external lists to populate the Country and State/Province dropboxes, and provides settings to manage the validation rules between Region and State/Province combinations. About the shortcut Important: use exact lists to the ones used in mof.conf for shipping destination state and country. If the customer used the shortcut for entering their Bill To information, and both lists do not match, then MOF may not be able to match a shortcut value correctly. MOF would not be able to return a correct selection in the list if the screen failed validation. The shortcut would still work correctly, but the country or state selected would not match the requested "shortcut" function. Important: Billing information lists should only have the first option SELECTED as the default, and the value must be "" (null). If you set SELECTED with any non (null) option, and a user selects the shortcut, the default country or state will override the shipping information country and state, which is not what you are probably looking for.What list to use for dropbox ? How to validate Region and State/Province combinations ? What countries (as listed in paycountries.txt) have corresponding State/Province listings in paystates.txt ? In our package example, the paystates.txt list has all the States and Provinces listed for United States and Canada. Similarly, the corresponding setting is: force state selection via the State/Prov dropbox for these countries
Show this message if using both Region and State/Prov input: The Country List The paycountries.txt list in MOF's package was carefully assembled to work round the globe, listing preferred Country names. It is a compilation of Amazon.com's Country List (as of 4-5-2001), USPS countries for Air Shipping and Global Priority Mail (March 2001), and the ISO Countries. The list has long names so they appear with the full country name in all printable areas. Use hyphens <option value=name-must-be-hyphenated> for spaces in the <option value> but not in the printable display text. The State-Province List The paystates.txt list in MOF's package has all US states and Canadian Provinces listed by their 2 letter ISO code. Important: <option value=""> must be left as the first or "selected" option for validation to work correctly. Rules for making your own lists
Browser Note: Here's some browser specific stuff: The Mac Internet Explorer v5+ must have first option defined exactly this way in the list file:
<option value="">Select State The Mac IE browser will read the "Select State" on the right side as the value if you do not specify (null) as a set of double quotes for this option. But be careful not to enclose any of the other <option>s in your list with quotes, else the MOF script cannot process the pattern matching it needs to do to remember what was selected.
0 disable the comments box on Billing information screen 0 disable cyber-permission on Billing information screen
Note: Cyber permission only triggers for validation for the following payment methods: The following payment methods will not trigger cyber permission validation (even if you have the feature enabled): mail or fax, PayPal, zero based invoices, and custom gateways
Use: Allows you to turn on links on the Billing information screen for extra information pop-up windows. Assign a message to display for the link, and define the url to the pop-up file. displays link for CVV/CID pop up help window displays link for paying by check pop up help window displays link for Terms/Conditions pop up window
MOF v2.4 has the following payment methods built in:
When you enable a particular method, then it appears in the drop down box for Payment Method on the Billing information screen. The Billing information screen collects all final information before a final invoice is created. When the place order button is clicked, and all information passes validation, then a final invoice is created. The Billing information screen will continue to display, with validation cues (if enabled and configured), until all required information is present in the form. When you enter the Billing information page for the first time, it is always missing at least one piece of input -- the Payment Method. That's why MOF stops on that screen instead of just skipping right past it. You can disable all the input boxes for credit card fields, online checking fields, comments, and cyber permission, and MOF will not require any of that information. But MOF will always require at least the Payment Method. For help on how to bypass the Billing information screen completely see Docs > Customizing.html Exception: if you have zero based invoices set to bypass the Billing information screen, and the total invoice = $ 0.00. Note: If you enable only one method, other than the credit card method, then MOF will not display the drop box, but a custom message stating that only one Payment Method is being accepted. If you enable the credit cart method (and at least two credit cart types) or any two methods are enabled, then the drop box will display. The drop box will display with two or more methods.
0 disable this payment method If enabled, do you want information lines to print for cc number, etc About this payment method: Provides an alternative to any online payment, so a customer can print the invoice and mail or fax in order. If you have checking and/or credit card fields enabled, then any information entered into those fields will be printed on the invoice, if the Mail or Fax Payment method is selected. This allows a customer to use those boxes to fill out their mailing or faxing form directly from the Billing information screen. If you are wanting to make mailing or faxing payment the only method available, then you cannot have any of the checking or credit card fields enabled This payment method will adjust language to "mailing payment" if there is no fax number entered under the merchant fax number setting: $merchant_fax
0 disable this payment method About this payment method: Provides a generic "on account" payment method if you need to collect special account numbers for orders. Example: we just built a site where the vendor allows special dealers purchases and bills them each quarter. When checking out, their valid Dealers number is required, so the account can be billed. Then the items are shipped. The credit card fields are used to pass through any information, like account number, etc. If using the cyber permission feature, then a Yes is required to proceed with this payment type
0 disable this payment method About this payment method: If your customers do not want to give out credit card information over your web site, then this allows them to finalize their order and signal you that they will give out cc info over the phone. If using the cyber permission feature, then a Yes is required to proceed with this payment type
Define card types When you define any of the eight cart types, then you have enabled pay by credit card as an option in the payment method dropbox Define the card types to allow in the payment method drop box Example: enable Visa and Mastercard only
Example: disable credit cards as payment method Enable validation If credit card(s) are enabled, do you want to use mod10 algorithm validation ? This is not a real time validation to determine if the number is active, only a pretty good validation to see if it passes the rules for issuing credit card numbers. What cc fields to display Syntax:
%credit_card_fields = ( For help with Perl syntax for this setting, see: Docs > AboutConfigurations.html Master list of ECML fields
You may enable any of the above field names to display in the cc info boxes for input. These are the ECML v1.0 Field Names for credit card input. Important: The ECML field name for Card_Type is not in the list above. You cannot use it for input, because it is used in the drop box to display card type. MOF reserves this name and uses it only if the Payment Method selected is a CC type. The ECML field name is: Ecom_Payment_Card_Type Master list of CC types
Important: use only the acronym we have assigned in the Master list for cc type
Enable checking fields When you enable any of the checking information fields, you have enabled Online Checking as an option in the payment method dropbox. Example: disable Online checking Syntax:
%checking_account_fields = ( Master list field of names
Note: We did find an ECML standard for checking account fields, we made our own.
0 disable this payment method Set COD charges This allows you to set a flat fee to be added as COD fees. Set it to zero (0) if you do not want to add any extra COD fees. $cod_charges = 3.95; About this payment method: This is a simplified COD option. It assumes that COD is a payment method. The feature does not attempt to solve any contradictions between shipping methods and COD as a payment method. If you have shipping computations already in the invoice, then this feature will not alter that.
This feature will place a deposit or layaway option as the first option on the Billing information screen 0 disable this payment method set minimums deposit must be minimum dollar amount deposit must be minimum percent Note: The minimum settings define a required condition for a minimum amount of deposit to be entered. If both amount and percent are enabled, the greater one is the minimum. A deposit option will not trigger if the order total is less than the minimum
Use: Allows the use of POST gateways to transaction processing services like AuthorizeNet, PayFlow, Bank America, Echo, Worldpay, etc. Skill level warning: setting up custom gateways requires that you be able to read and understand the gateway documentation, and their use of Forms, and that you be able to design their POST input form. The resulting input Form must be inserted into the mofpay.cgi program file. For specific help on understanding how to hook up to a gateway see: Custom gateway forms This will allow you to tie the MOF Order confirmation screen to a gateway POST 0 disable pass off to gateway forms how to list it in the dropbox Custom full gateway This will allow you to tie the MOF Order confirmation screen to a gateway POST, using the using cc/check information collected on the MOF Billing information screen. This is usually a gateway with seamless callback operation, where you do not use any of the gateway forms. 0 disable pass off to gateway forms
These settings allow MOF to display a link to the PayPal Web Accept feature. This is a simple web link with the information that PayPal needs to trigger the Web Accept input. MOF passes some information about Merchant name, the Merchant's PayPal ID (email login), the final amount, a return page. You can find detail information on the PayPal gateway at the paypal site. Look for the Web Accept manual. Enable PayPal 0 disable this payment method Define your PayPal settings Do not change this unless PayPal changes it Your PayPal login ID (the email address) Important: you do not need your PayPal password to use the Web Accept feature. You should not enter your PayPal password in these settings. Anyone connected with MerchantPal.com or MerchantOrderForm.com will never ask for your PayPal password. Merchant name Optional logo image Return link if paypal payment canceled What URL to return to after PayPal Use the MOF Web copy of invoice as a return URL Enable this if you want the saved Web copy of the invoice to become the return URL when the customer completes at PayPal. Make sure you have the save Web copy feature turned on to use this Disable paypal prompt for customer to include note Where is the PayPal button (HTTPS url if using SSL) Pre - Populate Billing fields at PayPal forms for non-paypal members
These programs are copyright @ MerchantOrderForm.com, MerchantPal.com 2001 |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||