Skip to content

M2.3.2 - Node <payment><payflow_advanced><user> is declared twice in Paypal module so it still use MCrypt #23880

@Linek

Description

@Linek

Preconditions

  1. Magento 2.3.2 Open Source & Enterprise

Steps to reproduce

  1. Flush cache
  2. Add breakpoint in \Magento\Framework\Encryption\Encryptor::decrypt in line 437 (can be var_dump or die method). Just to make sure it won't go inside, as this is not supported method
  3. Run the homepage

Expected result

  1. Website should run correctly without going inside of unsupported method

Actual result

  1. Website is stopping (die) on breakpoint because unsupported crypt is used

The reason is probably that in config.php for Magento_Paypal we have node twice under <payflow_advanced> node.

<payflow_advanced>
        <model>Magento\Paypal\Model\Payflowadvanced</model>
        <payment_action>Authorization</payment_action>
        <verbosity>HIGH</verbosity>
            <user backend_model="Magento\Config\Model\Config\Backend\Encrypted" />
        <pwd backend_model="Magento\Config\Model\Config\Backend\Encrypted" />
        <group>paypal</group>
        <title>Credit Card</title>
        <partner>PayPal</partner>
        <vendor>PayPal</vendor>
            <user>PayPal</user>
        <csc_required>1</csc_required>
        <csc_editable>1</csc_editable>
        <url_method>GET</url_method>
        <email_confirmation>0</email_confirmation>
        <verify_peer>1</verify_peer>
        <transaction_url_test_mode>https://pilot-payflowpro.paypal.com</transaction_url_test_mode>
        <transaction_url>https://payflowpro.paypal.com</transaction_url>
        <cgi_url_test_mode>https://pilot-payflowlink.paypal.com</cgi_url_test_mode>
        <cgi_url>https://payflowlink.paypal.com</cgi_url>
</payflow_advanced>

And it tries to decrypt "PayPal" value.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions