Each page and help document on 2CO site has different description how to calculate MD5 hash to check orders “genuinity” – some even has more than 1 scheme. But none of them work.
I already used these combinations of POST variables and secret word for INS queries:
word + $_POST['vendor_id'] + $_POST['order_number'] + $_POST['total']
word + $_POST['vendor_id'] + $_POST['sale_id'] + $_POST['invoice_usd_amount']
word + $_POST['vendor_id'] + $_POST['sale_id'] + $_POST['invoice_list_amount']
$_POST['sale_id'] + $_POST['vendor_id'] + $_POST['invoice_id '] + word
For the Christ’s sake (or whomever you worship to) – which POST parameters to use?! Also could you please check all documents and remove combinations which aren’t working?
6 Comments »
+0
-0
Their are 2 different methods listed in our MD5 hash article because we offer the MD5 hash for both the initial passback to your approved url and on INS posts. From looking at the parameters you are using it looks like you are calculating the MD5 hash for INS posts. The MD5 hash that is sent with INS posts is a hash of sale_id + vendor_id + invoice_id + secret word in the md5_hash parameter.
+0
-0
Seen that instruction. Doesn’t work with test orders sent within vendor panel: hashes differ.
+0
-0
Just found orders being sent for/from imaginable vendor account – surely secret word is different for that “guy”. Nice.
+0
-0
The MD5 hash cannot be tested using INS test posts as the same test data is sent on every post. To test the MD5 hash you will need to place a live order under $5 and then cancel the order before it deposits.
+0
-0
Can you provide 1007 (INS test vendor account) secret word?
So it will be very easy to check hash integrity without sensless transactions.
+0
-0
The information sent by the INS tester in your account is always the same and the MD5 hash is not actually computed based on the parameters that are returned. If you would like to accurately test your INS script please use the Instant Notification Simulator at developers.2checkout.com to simulate your accounts INS posts.