Re: Anyone using Verisign's Payflow Link for payment processing?
This WebDNA talk-list message is from 2000
It keeps the original formatting.
numero = 35837
interpreted = N
texte = sure you can so this , no problem (if I understand right.) I am doing this w/ another 3rd party service simmilar to what you just described. On the other side of the transaction you can change the name of the var from 'cart' to 'OrderID' or whatever you want.Only thing that may be a problem (I dont' know how well I appreciate your situation) is that users can manipulate the URL both going and coming... I mean a user could stop the processing, change the 'total' var to '1' dollar and then hit return so the order goes on to verisign's cgi with that new total the user just hacked. And on the return the user could change the 'approved' value to success instead of failed in the URL even if the card was invalid and verisign knew it. You can surely take the hassle to synchronize verisign's db and yours (whether by hand (or other means?)) but then that defeats the purpose of using an auto online payment scheme. Maybe you can get around this by saving all values to your local db then displaying a we'll let you know the status of your order ASAP page... while in the background a webcat trigger is looking for unprocessed orders and sending them to verisign's cgi. Verisign sends it back to a private page you have update the appropriate field values... ?-JohnSteven Jarvis wrote:> My boss asked me to check out using Verisign's new Payflow Link for payment > processing instead of CyberCash. It's cheaper and maybe easier. After > struggling with incorrect templates and general frustration with WebMerchant > last week, this looks refreshing. > > The way it works is that you link to their site to process the payment info, > passing your Verisign merchant ID, card info, and amount to their page > (which you can customize), then they return a results page to the customer, > or they can return the customer to an URL on your site and pass information > to that site via an URL you specify. > > What I'm wondering is whether I can pass the [cart] value to one of their > User fields (they have 10 available), then pick it up on their return doing > a cart=[User1] sort of thing. But, I don't think I can do that now, can I, > because of the new formvariables rules? > > The reason I want to continue the cart value over is that we have a couple > of sites that need post-authorization processing for the customer. > > Any suggestions/comments? > > Thanks! > > Steve > > ------------------------------------------------ > Steven Jarvis > Web Developer > sjarvis@nwaonline.net > > Morning News of Northwest Arkansas > http://www.nwaonline.net > ------------------------------------------------ > > ------------------------------------------------------------- > This message is sent to you because you are subscribed to > the mailing list
. > To unsubscribe, E-mail to: > To switch to the DIGEST mode, E-mail to > Web Archive of this list is at: http://search.smithmicro.com/ ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/
Associated Messages, from the most recent to the oldest:
sure you can so this , no problem (if I understand right.) I am doing this w/ another 3rd party service simmilar to what you just described. On the other side of the transaction you can change the name of the var from 'cart' to 'OrderID' or whatever you want.Only thing that may be a problem (I dont' know how well I appreciate your situation) is that users can manipulate the URL both going and coming... I mean a user could stop the processing, change the 'total' var to '1' dollar and then hit return so the order goes on to verisign's cgi with that new total the user just hacked. And on the return the user could change the 'approved' value to success instead of failed in the URL even if the card was invalid and verisign knew it. You can surely take the hassle to synchronize verisign's db and yours (whether by hand (or other means?)) but then that defeats the purpose of using an auto online payment scheme. Maybe you can get around this by saving all values to your local db then displaying a we'll let you know the status of your order ASAP page... while in the background a webcat trigger is looking for unprocessed orders and sending them to verisign's cgi. Verisign sends it back to a private page you have update the appropriate field values... ?-JohnSteven Jarvis wrote:> My boss asked me to check out using Verisign's new Payflow Link for payment > processing instead of CyberCash. It's cheaper and maybe easier. After > struggling with incorrect templates and general frustration with WebMerchant > last week, this looks refreshing. > > The way it works is that you link to their site to process the payment info, > passing your Verisign merchant ID, card info, and amount to their page > (which you can customize), then they return a results page to the customer, > or they can return the customer to an URL on your site and pass information > to that site via an URL you specify. > > What I'm wondering is whether I can pass the [cart] value to one of their > User fields (they have 10 available), then pick it up on their return doing > a cart=[User1] sort of thing. But, I don't think I can do that now, can I, > because of the new formvariables rules? > > The reason I want to continue the cart value over is that we have a couple > of sites that need post-authorization processing for the customer. > > Any suggestions/comments? > > Thanks! > > Steve > > ------------------------------------------------ > Steven Jarvis > Web Developer > sjarvis@nwaonline.net > > Morning News of Northwest Arkansas > http://www.nwaonline.net > ------------------------------------------------ > > ------------------------------------------------------------- > This message is sent to you because you are subscribed to > the mailing list . > To unsubscribe, E-mail to: > To switch to the DIGEST mode, E-mail to > Web Archive of this list is at: http://search.smithmicro.com/ ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/
John Butler
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Reports of ErrorLog.txt not being written in Linux (2000)
Time since application launch (1999)
multiple search commands (1997)
Webcatalog and IIS4b2 (1997)
Date Calulation (1997)
How to search dbs across virtual hosts for same domain? (2003)
BUG in [showif] using ^ (contains) (1997)
Inventory Debit Procedure (1998)
SiteEdit NewFile.html ? (1997)
WebCat2b14MacPlugIn - [include] doesn't hide the search string (1997)
More on the email templates (1997)
Emailer (WebCat2) (1997)
WC2f3 (1997)
Signal Raised Error (1997)
Details of shipping - Totalqty calculations (1997)
Search design (1997)
Convert characters (2002)
[ListFiles] & [loop] (1998)
Network Drives (2005)
Multiple catalog databases and showcart (1997)