Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Warning

An alert is issued by the GIE CB on a vulnerability actively exploited and affecting e-commerce stores using prestashop software.

This vulnerability allows remote commands to be executed on the server, so it is considered critical. In case of compromise, it is possible for fraudsters to bypass the security measures put in place by the various PATs (tokenization, payment pages in an iframe, etc.). According to specialized press reports, attacks detected so far reveal that fraudsters seek in particular to capture customers' payment data.

Here are the checks and actions to be carried out by acceptors to secure their Prestashop e-commerce platform:

  1. In the first place, it is necessary to check whether the site has been compromised or not. The presence of a blm.php file at the root of the site, or the presence of POST calls to a blm.php file in the server logs are a priori a reliable marker to detect that the attack has taken place.
  2. If the site has been compromised, it is recommended that a third-party audit be conducted without delay to determine the depth of compromise and remove any malicious code.

Once the checks are done, PrestaShop versions between 1.6.0.10 and 1.7.8.6 should be updated to version 1.7.8.7 and then maintained by applying the published updates.

Some recommended links:

  1. Major Security Vulnerability on PrestaShop Websites | PrestaShop Developers’ blog
  2. A Major Security Flaw has been Discovered on PrestaShop! (July 2022) (leptidigital.fr)

The latest update of all Prestashop modules (PS 1.6.1.24 and PS 1.7.5/ 1.7.6) is now available since February 08, 2024 and it is mandatory.

It includes evolutions and alerts on the status of orders in the back office of the CMS. Updates to Prestashop modules will now be free on the website of our partner We+ https://shop.quadra-informatique.fr/1-accueil



Tip
titleversion upgrades

We strive to bring the best quality to our modules and we invite you to use the latest version to benefit from it.


CMS versionsModule version
1.6.1.241.4.0
1.7.5 / 1.7.61.4.0
1.7.7 to 8.1.X1.5.2

Latest changelogs :

18/06/2024  : Updates and fixes have been made to the versions of the PrestaShop modules ( PS 1.6.1.24 and PS 1.7.5/ 1.7.6 and 1.7.7 to 8.1.X ) for Axepta BNP Paribas.



Table of Contents
maxLevel3

Introduction

AXEPTA BNP Paribas allows you to accept payments using different payment methods.

Table of Contents
maxLevel3

Introduction

AXEPTA BNP Paribas allows you to accept payments using different payment methods. Each of them offers different possibilities, through an e-commerce platform, such as:

  • Standard payment

  • One click payment

  • Recurring payment.

Prerequisites

PHP versions required on each module:

Image RemovedImage Added

The plugin supports the following versions : 1.6.1.24 / 1.7.5 / 1.7.6 / 1.7.7/ 1.7.8 / 8.01.1X

Installation of the plugin

The installation of the plugin requires the following steps :

  1. Go to the "Modules" tab of the backoffice of your shop (left side of the screen) > "Module catalogues", click on "install plugin" then upload the zip file containing the plugin.

Image Modified

Image Modified

2. On the "Module Manager" tab (from the same menu), type "Axepta" in the search bar and find the "Axepta BNP Paribas " plugin.


3. Click on « Configure » button to start. This configuration screen allows you to configure the generic parameters of the shop, especially if it's a "multi-shops".

You can also update the xml flow if other payment methods are added to your BNP Paribas contract.

Then, click on Configurer your plugin Axepta BNP Paribas” to configure your payment methods (details on the next section).

Image Modified

4. Once installed, you can always uninstall/disable/remove a plugin.

Image Modified

Global configuration of the plugin

To create a new configuration, click on the "+" in the top right corner:

Image Modified

Then, fill the data provided by BNP Paribas in the following fields and choose to activate or not your account then click on "save".

Image Modified

Then indicate on which shop(s) the plugin should be applied :

Image Modified

The configuration of your first MID now appears in the global list :

Image Modified

You can now choose the different payment methods to activate on your shop by clicking on the "Update" button. The associated tab will appear.

The payment methods displayed are those corresponding to your activation key.

The payment methods in grey correspond to those that are not part of your offer. You have the possibility to visualize the complete offer in order to see everything that the Axepta module proposes.

Some payment methods may appear in frey if the country or countries in which the payment method is authorized are not activated in your backoffice. To activate the countries, you have to go to the "International" tab > "Geographical zones" and activate the desired countries by clicking on the small red cross :


You will have to go through the menu "Modules" > "Axepta payment configuration" to go back to the payment methods configuration :

Image Modified

Click on "Update" and go to the bottom of the screen to continue configuration your account's options.

Image Modified

Front Label:

This represents the field you want to customize for your customers to pay. Example : "Pay with AXEPTA BNP Paribas"

Currency :

The currency indicated is the currency of your activation key. This data cannot be modified, it is only shown as an indication for the management of the account.

Please note that you need to make sure that the currency is enabled beforehand in the Prestashop backoffice. To do this, go to "International" > "Location" > "Currencies" > and click on "Add a new currency":

Image Modified

For example:

Image Modified

Rendering mode :

The display of the payment page is possible in 2 ways with the plugin:

  • Redirection => External redirection of the user to the payment page

  • iFrame => Displaying the payment page on the shop in an iFrame

3DSecure and exemption management :

The3DSecureisstillactivatedonyourstore,youcanneverthelessactivatethe"Exemptionrequest"optionwhichwillallowyoutorequestanauthenticationexemptionforthecardholderduringasimplepaymentonyourmerchantsite.

Toenableexemptionrequests,pleaseselect"Yes"inthe"Exemptionrequest"boxtodisablepleaseselect"No"

Image Modified

Ifyouwishtoactivateexemptionrequestsyoumustthenfillinthe"Amount"boxwhichcorrespondstothemaximumamountthatwilltriggeranexemptionrequest.Abovethisamount,theexemptionrequestwillnotbetriggered.

Image Modified

Attention :Pleasenotethattheuseof3DSecureauthenticationprotectsthemerchantagainstthereasonforunpaid invoices "holderdispute".Intheeventofarequestforexemptionfromauthenticationbythemerchant,thelatterlosesthistransferofresponsibilityinthemajorityofcases (Formoredetails: Liability shift and 3DS Matrix - Documentation Axepta BNP Paribas - Axepta).Thisisarequestforexemption,thisdoesnotmeanthatitwillbegrantedsystematicallybytheissuerofthecardholder'scard.ExemptionrequestsonlyworkwithtransactionspaidinEuro.


Known error:   Since switching to 3DSV2, it is imperative to send the parameter "BillingAddress" to Axepta to make a payment. 

This parameter contains the following data:

- City
- Country
- Billing Address 1
- Postal Code

These fields are mandatory for the module to function properly and must be present in the payment form:

Image Modified

Oneclick payment :

This option allows you to activate the oneclick payment via registration of the payment method by the user in his customer account.

Subscription :

This option allows you to activate the subscription payment on the shop.

Capture method :

This option allows you to choose the payment capture method:

  • Automatic => The capture will be done automatically in the night.

  • Manual => After a defined time, you can choose just after choosing this option the delay before the capture (Delay in hours before capture (integer between 1 and 696)).

Logs :

This option allows you to activate the logs in particular to send data back to the support in case of issue.


Your account is now configured.


You can configure as many accounts as your BNP Paribas contract allows. To add an account, you must go to "Axepta payment configuration" and do the same operations. The list of accounts will be updated with each new registration.

Rendered for the Payment

The render of the checkout page

Image Modified

Payment methods are displayed on a framework for 6 proposals. Additional payment methods can be accessed by selecting "More payment options", which only appears if necessary. The "One-click" option is activated here to offer the registration of the card of the user.

Rendered from the

The rendering of a redirected payment page

in redirection

Image Modified

Rendered From the

The rendering of  an iFrame payment page

in iFrame

Image Removed

Image Added

Payment modes configuration

One-off payment

To activate the different payment methods, you must go to the "Payments" tab > "Preferences" > and check "BNP Paribas Axepta" for all the currencies you would like to configure and then click on "Save" :

Image Modified

Still in "Payment" > "Preferences", you can also restrict the payment method to some specific currencies.

Image Modified

One-click payment

This functionnality allows your customers to save their payment methods data so that they can pay faster the next time.

To enable this functionnality, you only need to make sure that you checked the « Oneclick payment » button in your account's options ( "Modules" > "Configuration paiements Axepta" > "Modifier" the MID you would like to configure)

Image Modified


The customer will be able to manage the saved cards in his account view by clicking on “One click cards” :

Image Modified

The list of saved cards will be displayed and the customer will be able to delete one or many card just by clicking on the "delete" button.

Image Modified

Subscriptions

Enable subscriptions

To enable this functionnality, you only need to make sure that you checked the « subscription payment » button in your account's options ( "Modules" > "Configuration paiements Axepta" > "Modifier" the MID you would like to configure)

Configuration

When the subscription functionality is enabled, it's possible to configure items to pay by subscription.

To configure items, you need to go to "Catalogue" > "Produits" > search by name of the item that you would like to pay by subscription.

To pay for a subscription product, it is mandatory to have a customer account. For guest mode customers who have a subscription product in their cart, the creation of a customer account is requested before making the payment.

On the product sheet (when you click on a product's name), go to the On the product sheet (when you click on a product's name), go to the "plugins" tab and click on "Configure" :

Image Modified

You can configure an item by adding the following information:

  • Type : indicates if the item will be paid by subscription or standard payment.

  • Periodicity : indicated the type of subscription (monthly or daily)

  • Interval occurrence : Number of times that the payment will be proceeded. If this value is not filled, the occurrence is unlimited.

  • Recurring amount : Indicated the amount of the item in subscription, so this value can be different from the initial price of the item. This value represents the value that will be withdrawn in the future transactions.

Image Modified

Subscriptions management

In the tab "orders" > "Axepta list of subscriptions", you can visualize the list of orders related to subscriptions and find the following informations for every order :

● Order ID

● Product

● Reference

● Customer ID

● Amount

● Subscription status

● Date of the next payment

Image Modified

Available actions in this section are:

● Enable a subscription

● Disable a subscription

● Check détails about an order

● Check details about the customer

Image Modified

Subscriptions management (user view)

The customer can manage his subscriptions in his user account by clicking on the specific box "My payments by subscription"

Image Modified

The customer can disable or enable again a subscription directly by clicking on the "disable/enable" button

Image Modified

The subscription statut is updated automatically in the backoffice.

Image Modified

Transactions management

A list of paid orders using the different payment methods is available in the section : “Orders" > "AXEPTA list of transactions”. You will find the list of all orders with the following informations : 

  • ID

● Order's reference

● Trigramme

● Pay ID

● Response code

● Amount

● Brand

● Payment type

● Transaction's date

● Transaction's type (payment, cancellation, refund, recurring for subscription)

● Status (success, failure, authorization..)

Image Modified

When you select an order,  you get more information about the payment (delivery address, customer's information, refund/cancellation options... )

Refund / cancellation

To make a refund, you need, first, to select on which shop the order was made (top right side of the screen).

Image Modified

Then, choose the order you would like to refund (in the details of the transaction,) and click on “Remboursement partiel” in the tab "order" to create a voucher. 

Image Modified

You will be redirect to the tab "product" on the same page.

Choose an amount for the refund (total or partial) as long as the amount doesn't exceed the total amount of the initial transaction.

Then, click on “Remboursement partiel” :

Image Modified

Once the amount saved, and still in the details of an order, you will be able to :

- Select the transaction you would like to refund

- Select the voucher

- Click on "refund".

Image Modified

The product appears in the details of the order as "refunded"

Image Modified

When an order is fully refunded, you can update the status of this order by clicking on "refunded" > "update status" on the top of screen.

Image Modified

Description of payment methods

Payment methodsCountriesCurrenciesAMEXAllAllCB/VISA/MastercardAllAllCetelem 3XFR

EUR

Cetelem 4XFREURCetelem Presto FREURMastercard/VISAAllAllPaypalAllAllSofort KlarnaDE, AT, BE, IT, ES, NL, CH, PLEURAlipayCNAUD, CAD, EUR, GBP, HKD, NZD, SGD, USDBancontactBEEURBoleto BancárioBRUSDeNetsSGSGDEPSATEURGiropayDEEURiDealNLEURMultibancoPTEURMyBankES,GR, ITEURMyClear FPXMYMYRPaysafecard

AAT, AU, BE, BG, CA, CH, CY,

CZ, DE, DK, ES, FI, FR, GB,

GE, GI, HR, HU, IE, IT, LI, LT,

LU, MT, MX, NL, NO, NZ, PE,

PL, PT, RO, SE, SI, SK, UY

AUD, CAD, CHF, EUR, GBP,

NOK, PLN, RON, SEK, USD

POLiAUAUDPrzelewy24PLEUR, PLNRHB BankMYMYRSEPA Direct debit

AT, BE, BG, CH, CY, CZ, DE,

DK, EE, ES, FI, FR, GB, GR,

HR, HU, IE, IS, IT, LI, LT, LU,

LV, MC, MT, NL, NO, PL, PT,

RO, SE, SI, SK, SM

EURTrustPayCZCZKTrustPaySKEUR
Table Filter
fixedCols
totalrow,,,,,
hidelabelsfalse
ddSeparator;‚;‚;‚;‚;
sparkNameSparkline
hidePaneFiltration panel
limitHeight
sparklinefalse
default,,,,
isFirstTimeEnterfalse
cell-width250,250,250,250,250
hideColumnsfalse
totalRowName
totalColName
disabledfalse
enabledInEditorfalse
globalFilterfalse
id1712238806845_735944331
iconfilter
order0,1,2,3,4
hideControlsfalse
inversefalse,false,false,false,false
numbering
datefilter
columnNom,Catégorie,Région d'émission,Pays,Devises
sortNom ⇧
totalcol
disableSavefalse
rowsPerPage
separatorPoint (.)
labelsNom‚Catégorie‚Région d'émission‚Pays‚Devises
thousandSeparator
ignoreFirstNrows
ddOperatorOR,OR,OR,OR,OR
userfilter
datepatternd M yy
numberfilter
heightValue
updateSelectOptionstrue
worklog365|5|8|y w d h m|y w d h m
isORAND
showNRowsifNotFiltered


LogoNomCatégorieRégion d'émissionPaysDevises

Image Added

Alipay
WalletAPACFrance ; Italie ; Belgique ; Luxembourg ; Royaume-Uni ; Irlande ; Pays-Bas ; Espagne ; Allemagne ; Portugal ; Suisse ; Autriche ; Slovaquie ; Slovénie ; Suède ; Danemark ; Norvège ; Finlande ; Estonie ; Lituanie ; Lettonie ; GrèceAUD ; CAD ; EUR ; GBP ; HKD ; SGD ; USD

Image Added

American ExpressCarteInternationalFrance ; Italie ; Belgique ; Luxembourg ; Royaume-Uni ; Irlande ; Pays-Bas ; Espagne ; Allemagne ; Portugal ; Suisse ; Autriche ; Slovaquie ; Slovénie ; Suède ; Danemark ; Norvège ; Finlande ; Estonie ; Lituanie ; Lettonie ; GrèceEUR ; GBP ; CHF ; USD ; AUD ; CAD ; DKK ; JPY ; NOK ; PLN ; SEK

Image Added

BancontactCarteEuropeBelgiqueEUR

Image Added

CBCarteFranceFranceEUR

Image Added

Cetelem Full CBBNPLEuropeFranceEUR

Image Added

Cetelem Presto
BNPLEuropeFranceEUR

image-2023-7-11_17-35-47.pngImage Added

EPS
VirementEuropeAutricheEUR

Image Added

Finnish Online Banking
VirementEuropeFinlandeEUR

Image Added

Giropay
VirementEuropeAllemagneEUR

Image Added

IDEAL
VirementEuropePays-BasEUR

Image Added

Klarna
BNPLEuropeSuède ; Danemark ; Norvège ; FinlandeEUR ; GBP ; CHF ; DKK ; USD ; CAD ; NOK ; SEK ; PLN

Image Added

MastercardCarteInternationalFrance ; Italie ; Belgique ; Luxembourg ; Royaume-Uni ; Irlande ; Pays-Bas ; Espagne ; Allemagne ; Portugal ; Suisse ; Autriche ; Slovaquie ; Slovénie ; Suède ; Danemark ; Norvège ; Finlande ; Estonie ; Lituanie ; Lettonie ; GrèceEUR ; GBP ; CHF ; DKK ; USD ; CAD ; JPY ; NOK ; SEK ; PLN ; AUD

Image Added

Multibanco
VirementEuropePortugalEUR

Image Added

MyBank
VirementEuropeItalieEUR

Image Added

Paypal
WalletInternationalFrance ; Italie ; Belgique ; Luxembourg ; Royaume-Uni ; Irlande ; Pays-Bas ; Espagne ; Allemagne ; Portugal ; Suisse ; Autriche ; Slovaquie ; Slovénie ; Suède ; Danemark ; Norvège ; Finlande ; Estonie ; Lituanie ; Lettonie ; GrèceEUR ; GBP ; USD ; CAD

Image Added

Paysafecard
PrépayéInternationalFrance ; Italie ; Belgique ; Luxembourg ; Royaume-Uni ; Irlande ; Pays-Bas ; Espagne ; Allemagne ; Portugal ; Suisse ; Autriche ; Slovaquie ; Slovénie ; Suède ; Danemark ; Norvège ; Finlande ; Estonie ; Lituanie ; Lettonie ; GrèceAUD ; CAD ; CHF ; EUR ; GBP ; NOK ; PLN ; RON ; SEK ; USD

Image Added

Przelewy24
VirementEuropePolognePLN

Image Added

VisaCarteInternationalFrance ; Italie ; Belgique ; Luxembourg ; Royaume-Uni ; Irlande ; Pays-Bas ; Espagne ; Allemagne ; Portugal ; Suisse ; Autriche ; Slovaquie ; Slovénie ; Suède ; Danemark ; Norvège ; Finlande ; Estonie ; Lituanie ; Lettonie ; GrèceEUR ; GBP ; CHF ; DKK ; USD ; CAD ; JPY ; NOK ; SEK ; PLN ; AUD

Image Added

WeChat PayWalletAPACFrance ; Italie ; Belgique ; Luxembourg ; Royaume-Uni ; Irlande ; Pays-Bas ; Espagne ; Allemagne ; Portugal ; Suisse ; Autriche ; Slovaquie ; Slovénie ; Suède ; Danemark ; Norvège ; Finlande ; Estonie ; Lituanie ; Lettonie ; GrèceEUR ; GBP ;
WechatCNEUR, GBP,
USD