In Transition Movie Hosting

[chris]

This is a ticket to track time and tasks related to setting up hosting for intransitionmovie.org / intransitionmovie.com.

[chris]

A request for an additional IP address for intransitionmovie.org / intransitionmovie.com has been submitted to our partner organisation in Iceland. I have access to the DNS via gandi.net so there won't be a problem sorting that out.

[chris]

The hosting account has been set up and an IP address allocated, Laura should have the SFTP / phpmyadmin info for uploading the site.

The site is available on this domain name:

​http://transmovie.host-a.ecodis.net/

And it's IP address:

​http://93.95.227.143/

For the SSL cert it either needs Laura to order it via gandi.net and then I can sort it all out or I could order it and then pass the bill onto the Transition Network -- Laura which way should we do this?

I'm able to do the DNS switch when it's ready to be made live.

[laura]

Hi Chris,
thanks for getting the wheels in motion for this.
Possibly we're upto a couple of days away from launch (whilst they sort out something to do with ordering dvds from Transition US as well), but will keep you in the loop.
Which suits you best re ssl certificate?

[chris]

I have just remembered that the certs are free for the first year, I'll set it in motion. It's the .org rather than the .com that we are going to use right?

[chris]

However the free option doesn't seem to be available for the intransitionmovie.org domain, I don't know why, I have raised a ticket with gandi.net about this.

[laura]

Replying to chris:

intransitionmovie.com is the one they are using.

[chris]

Thanks, I have added that to the gandi ticket.

[chris]

Gandi have enabled option to get the free 1 year cert for both domains, I will get it for the .com.

The process of getting a cert involves clicking through an email sent to admin@…, so I have switched both intransitionmovie.org and intransitionmovie.com and transitionmovie.org to use a different zone file, this has been (partially) documented on the wiki:DomainNames page (this page needs some more updates relating to these changes).

Currently the Transition Movie zone files contains:

@ 3600 IN MX 0 mx.webarch.net.
@ 10800 IN A 81.95.52.88
www 10800 IN CNAME redirects.transitionnetwork.org.

When we want to make the new site live it will need changing to:

@ 3600 IN MX 0 mx.webarch.net.
@ 10800 IN A 93.95.227.143
www 10800 IN A 93.95.227.143

The Webarchitects mail servers have been configured to accept email for the domains and an alias has been created so I can click through the email that will be sent when the CSR is submitted.

The CSR is ready to be submitted but we need to wait for the DNS updates to come through before the email address will work and it can be submitted.

[chris]

The DNS is updated, the admin@ email address has been tested and the CSR has been submitted to Gandi.net, I think Ben might get a email he needs to click through as well as he is the owner of the domain.

[chris]

No email has come through to admin@… and I have raiused a ticket with gandi.net about this.

[laura]

Just spotted it now, and clicking on the link
(apols have had email off for a short while to focus on code!)

[chris]

Replying to chris:

No email has come through to admin@…

It's now come through, the SSL cert should be available to be installed tonight (it isn't yet), so the new hosting account is almost ready to be used!

I'm happy to do the DNS switch when you are ready for it to be done, in the meantime the new site can be accessed via ​http://transmovie.host-a.ecodis.net/

[laura]

Thanks Chris, Great to have this all in place and ready to go... think likely to be early next week now (not Monday as I'll be vebmastering in the office) as I'm just awaiting to hear about the last decisions needed re dvd ordering needs so I can finish setting up the shop bit fully.

[chris]

The cert is now installed, it's all ready for the site to be uploaded and then a DNS switch when we want it to go live:

​https://transmovie.host-a.ecodis.net/

If you need a hand with ensuring that the bits of the site that need to be HTTPS have redirects in place let me know.

[laura]

Hi Chris, Just a quick message to let you know that am aiming to transfer from my demo server tomorrow pm, once had done the final browser and bug fixes and a few other little bits on the site. Will let you know when it's there, or if I have any problems. We won't be setting up any special intransitionmovie email addresses, but can foward anything to webproject@tn... or my email as needed.

[laura]

Am happy for the dns switch to happen.

[chris]

DNS updated, it should have propagated by 3am.

[laura]

Thanks Chris!

[laura]

8am, and still not propagated yet here in Devon. (intransitionmovie.com still goes to tn.org movie page)...but I am aware that others could be seeing the holding page!

Will check again later.
Just for info - Currently have a very simple index.html holding page, which once site is propagated and I have had a quick login and check is all okay with the Wordpress install and db changes, I'll rename that to old_index so the Wordpress site will be officially live thereafter. Am out and about a little this morning until I get to the TN office mid morning to do this.

Re SSL -
I presume all is set up. There are only 3 pages on the site that are set force ssl, for the shopping cart (checkout, success etc type pages, though all payments are handled on the paypal website.), then unforce ssl when leaving those pages.

[chris]

Replying to laura:

8am, and still not propagated yet here in Devon. (intransitionmovie.com still goes to tn.org movie page)...

I suspect that you haven't restarted your web browser? Firefox has a domain name cache and I'm not aware of a method of clearing it apart from a Firefox restart.

I have double checked, the TTL is set to 3 hours and it is pointing to the right IP address.

dig +short intransitionmovie.com
93.95.227.143

[laura]

Hi Chris
Just back from meetings. I see why it wasn't working... I was typing in www.intransitionmovie.com - without the www. worked for the holding page, but not the wordpress site underneath. Does this need fixing in your dns records, or should I just adjust the site url settings via phpmyadmin? (really need the www part)
Laura

[chris]

Oops, really sorry, my mistake, it's fixed now.

[laura]

Thanks Chris!

[chris]

Just a thought: We could add a piwik web bug to track usage of the movie site if this info would be of use?

[laura]

The info could be quite useful indeed.
btw, will be adding a credits page which will include the webhosts and more tomorrow (ran out of time today!).

[chris]

Replying to laura:

The info could be quite useful indeed.

OK, 3 ways of doing it, first the simply way, add this code to the footer (this is adapted from the piwik suggested code to make it https only):

<!-- Piwik -->
<script type="text/javascript">
document.write(unescape("%3Cscript src='https://stats.transitionnetwork.org/piwik.js' type='text/javascript'%3E%3C/script%3E"));
</script><script type="text/javascript">
try {
var piwikTracker = Piwik.getTracker("https://stats.transitionnetwork.org/piwik.php", 2);
piwikTracker.trackPageView();
piwikTracker.enableLinkTracking();
} catch( err ) {}
</script><noscript><p><img src="https://stats.transitionnetwork.org/piwik.php?idsite=2" style="border:0" alt="" /></p></noscript>
<!-- End Piwik Tracking Code -->

Or use one of the two plugins:

• ​https://wordpress.org/extend/plugins/wp-piwik/
• ​https://wordpress.org/extend/plugins/piwik-analytics/

If you use a plugin the site id is 2 and the piwik url is ​https://stats.transitionnetwork.org/

btw, will be adding a credits page which will include the webhosts and more tomorrow (ran out of time today!).

Cool :-)

[laura]

Will add piwik the simple way, the plugin is fairly good, as provides stats in the dashboard, but prop not needed!

Quick q re IPN...
We're using paypal standard, and payments are going through and customers return to the site. What's supposed to happen is Paypal marks purchase as processed which appears in our admin on the site.
Looking at the paypal logs in the plugin files, it's sending out but not receiving back.

Just tried to add the IPN url to the paypal account and retry sending back, but didn't manage it, so turned off for the moment to debug further incase causes issues with new orders working.

Quick q -
is fsockopen?
or could the server firewall is blocking the request?

One other bit, I'm also using bad behavior on the site too, and will just take a quick check to see if there are any settings in the plugin in admin that need tweaking that could be stopping the ipn back to the site.

Thanks for any advice you have!

[chris]

Replying to laura:

Quick q -
is fsockopen?

This is the key section of php.ini:

;;;;;;;;;;;;;;;;;;
; Fopen wrappers ;
;;;;;;;;;;;;;;;;;;

; Whether to allow the treatment of URLs (like http:// or ftp://) as files.
; http://php.net/allow-url-fopen
allow_url_fopen = On

; Whether to allow include/require to open URLs (like http:// or ftp://) as files.
; http://php.net/allow-url-include
allow_url_include = Off

; Define the anonymous ftp password (your email address). PHP's default setting
; for this is empty.
; http://php.net/from
;from="john@doe.com"

; Define the User-Agent string. PHP's default setting for this is empty.
; http://php.net/user-agent
;user_agent="PHP"

; Default timeout for socket based streams (seconds)
; http://php.net/default-socket-timeout
default_socket_timeout = 60

; If your scripts have to deal with files from Macintosh systems,
; or you are running on a Mac and need to deal with files from
; unix or win32 systems, setting this flag will cause PHP to
; automatically detect the EOL character in those files so that
; fgets() and file() will work regardless of the source of the file.
; http://php.net/auto-detect-line-endings
;auto_detect_line_endings = Off

Does allow_url_include need to be on?

or could the server firewall is blocking the request?

No, there isn't one at the moment.

One other bit, I'm also using bad behavior on the site too, and will just take a quick check to see if there are any settings in the plugin in admin that need tweaking that could be stopping the ipn back to the site.

There is nothing in the apache logs about these problems, but I have changed the logging level to debug -- you could try it again and we could see if anything gets logged?

[chris]

Replying to chris:

; Whether to allow include/require to open URLs (like http:// or ftp://) as files.
; http://php.net/allow-url-include
allow_url_include = Off

The above seems to be the problem, I have switched it On and restarted apache -- can you test it now?

[laura]

Hi Chris
Thanks for looking into this.

For the past orders, in the plugins paypal logs (/ wp-content/plugins/woocommerce/logs/paypal.txt )for each order so far (all processed and fine!) they read similar to this one obv with a diff order number for each - but should have two further lines under each like below to say the ipn response is working. (then the plugin fires off an email to us and the customer to say order has been made, and changes the status of the sale into Processing from pending) (note - the payment has worked all okay already, and customer sees the 'thank you message on screen; but it just doesn't do the adminy bit in the backend!)

03-08-2012 @ 14:22:40 - Generating payment form for order #550. Notify URL: ​https://www.intransitionmovie.com/?paypalListener=paypal_standard_IPN
(missing bit of log that should be appearing ...)

03-08-2012 @ 14:22:40 - Checking IPN response is valid...
03-08-2012 @ 14:22:40 - Received valid response from PayPal?

What I'm going to do in a moment is to test is make 2 orders on the site (hope Jo lets me cancel and refund them!), one without the paypal account ipn settings turned on,

and if nothing extra appears in the logs referring to those 2 extra lines, I'll do a 2nd order after turning on the ipn bit in the paypal account settings to test. Seems from the forums and bits re the plugin, some activate the ipn bit in their paypal settings and others don't.

Orders are coming through tho, and tried a good few plugins for testing, and the woo one is rather nice and easy for site admins to manage their orders. am quite impressed for a W'dpress plugin, as usually use proper ecommerce frameworks for e-activity like this!

I'll let you know once I place the orders.

[laura]

First try -
did paypal transaction - should auto return to the movie site, but when trying with link from paypal page to return to the site... got -
Error 403

We're sorry, but we could not fulfill your request for /order-received/?order=551&key=order_4f58eb98e8ebb on this server.

You do not have permission to access this server. Data may not be posted from offsite forms.

Your technical support key is: 522e-2bbd-cd36-1abb

You can use this key to fix this problem yourself.

Which links to - ​http://ioerror.us/bb2-support-key?key=522e-2bbd-cd36-1abb (bad behavior) now blocking due to the changes from earlier!
If you are unable to fix the problem yourself, please contact laurawhitehead at transitionnetwork.org and be sure to provide the technical support key shown above.

[laura]

deactivated bad behaviour...
will try again!
Payment worked though

[laura]

After a couple more goes... seems to be working with the auto sending of confirmed orders now via ipn bits.
Thanks

[chris]

Great it's all working, closing this ticket now.