Authorize.net ERROR (14) REFERRER, RELAY RESPONSE

Authorize.net released a security update and was to automatically add your event website url to a White List.

 

We've had some clients report that this automatic addition did not take place so we are asking you to confirm this setting on your Authorize.net account(s).  If the setting is not in place, it will prevent payments.

 

In a nutshell, you need to ensure the URLs:

 

https://www.eventsquid.com

https://www.eventsquid.com/Payment-authNetRelay.cfm

are on the list of "Response/Receipt URLs" within Authorize.net

 

For exact steps, see their article How do I add or delete Relay or Response URLs?

 

Below is the alert from Authorize.net

 

 

 

Hosted Payment Form – Relay Response White List Enhancement

 

Dear Authorize.Net Developer:

 

Authorize.Net is enhancing security with our hosted payment form (Server Integration Method (SIM) or Direct Post Method (DPM)) with Relay Response and white listing what url(s) can be used with this integration method.

 

On 08/15/2019 we plan on enhancing the white listing for Relay Response and requiring the Relay Response url(s) to be listed and if not reject the request withResponse Code 14 and prevent the payment form from loading successfully. This is to enhance security for both merchants and customers. As a part of this change we will be changing the check of the full url to just the domain is matching with any Relay Response url(s) passed in the API call. To help with this Authorize.Net will be adding domains we see used on merchants for the month of June 2019 to their accounts settings to help prevent any issues with this update.

 

For updates on the timing of this change please check the Authorize.Net Status page for updates and subscribe there for furtheremail notifications. Updates will also be postedin the Merchant and Partner Interface, Support Center , andDeveloper Community.

 

To prevent any impact with the coming change merchants will need to add any Relay Response url(s) or domain(s) their solution/integration uses to the Merchant Interface and Relay/Receipt Urls settings. For steps on this process please see the support article: SIM Relay Response Basics & Whitelisting and How do I add or delete Relay or Response URLs?

 

Thank you for your attention to this matter and for being an Authorize.Net developer.

 

Sincerely,

Authorize.Net