Alright you’ve seen me write about Ubercart, the open source shopping cart for Drupal many times before. And I have been using Ubercart for various different projects with much success. But until recently, I never had the change in a project to use Ubercart with integration to an Authorize.net merchant account. I was very surprised how easy this was. Here is exactly what happened.
1) Since my client’s website was being hosted on Bluehost which also ranks in the top 3 for their ecommerce web hosting services reviewed and listed by web hosting search, I had my client purchase a secure certificate from Bluehost. Because he purchased it from Bluehost, their techs setup the SSL and did all the work without me having to do really anything.
2) Configured the Authorize.net API by providing Ubercart with my cient’s Authorize.net user id and password. To do this you need to activate the Authorize.net module and the Credit Card module.
3) Setup a directory outside of my docroot for my credit card encryption key to be stored. When setting up your Authorize.net module you will be notified to do this.
4) Went through all the Ubercart settings just to make sure that everything was setup exactly how I wanted it.
5) Downloaded and installed the Secure Pages module for Drupal. This module allows you to specify specific url’s within your site that you want to be under an HTTPS instead of just the regular HTTP.
6) Under the Secure Pages settings, I set the following url’s to be under an HTTPS with my newly setup Bluehost SSL…
user
user/*
user/*/edit
admin
admin/*
cart/checkout
cart/checkout/review
cart/checkout/payment_details/*
cart/checkout/complete
That’s It! Done! And Everything Works Great! That’s all I had to do and it worked perfectly. I have never had this quick of results when setting up an SSL and hooking into the Authorize.net API. Despite the many shopping carts that claim how easy this is supposed to be, Ubercart provided in my own experience by far the easiest solution.
Heine
September 20, 2008
Drupal does not automatically set the secure flag for cookies, so it is vital to do so in the webserver configuration. This of course breaks mixed HTTP/HTTPS sessions (see also http://heine.familiedeelstra.com/security-theater-dail-ssl-for-login).
Ryan
September 20, 2008
Glad it was easy for you! Also, as of the 1.4 release, I have re-written the Auth.Net module to be a little more solid and easier to setup. There were some elements of the AIM API that just weren’t being utilized before. It now also supports ARB, though I haven’t had the chance to test it in a live setting. : )
Ryan
September 20, 2008
I don’t suppose you’d be kind enough to fix the URL in my above post and delete this comment? How embarrassing… ; P
admin
September 20, 2008
gotcha covered ryan
chooch
September 23, 2008
Your article makes it sound as easy as pie, I have had much luck with ubercart and paypal/linkpoint , but haven’t had to use it with authorize.net yet.
I see on in the ubercart.org > contributions there are 2 modules:
+ Authorize.net (SIM) payment method
+ Authorize.net Advanced (CIM)
Which module did you use? (Also which version? if necessary…)
Or is there another authorize.net module that I am not seeing?
Thanks!
chooch
September 23, 2008
After looking through the ubercart payment modules list, I see there is an Authorize.net module packaged with ubercart core…
Disregard that last comment
Thanks again for the article!
Steve Bab
October 5, 2009
I agree — UC made this a piece of cake over other carts. Great work Ryan and team (and congratulations on your new daughter!)
Steve Babbitt
Steve Dossett
January 16, 2010
Hey Chase: just wanted to say thanks – this helped me out!
Cheers.
Steve
Robert Moran
February 25, 2011
How did you get the key directory permissions to work. I have UC totally running save that the damn key directory will not allow UC to connect to it. 775 is the permission set but UC still will not connect. I have everything else running but without this, nada. SSL is working and Authorize net is ready to go.