Ecommerce - use server code for hidden values in html form
I am trying to find out how to implement a donation form on a website using a virtual merchant. The html code from the developer guide looks like this:
<form action="https://www.myvirtualmerchant.com/VirtualMerchant/process.do" method="POST">
Your Total: $5.00 <br/>
<input type="hidden" name="ssl_amount" value="5.00"><br/>
<input type="hidden" name="ssl_merchant_id" value="my_virtualmerchant_ID">
<input type="hidden" name="ssl_pin" value="my_PIN">
<input type="hidden" name="ssl_transaction_type" value="ccsale">
<input type="hidden" name="ssl_show_form" value="false">
Credit Card Number: <input type="text" name="ssl_card_number"> <br/>
Expiration Date (MMYY): <input type="text" name="ssl_exp_date" size="4"> <br/>
<br/>
<input type="submit" value="Continue">
</form>
I have this in the html file and it works great, but they assume the merchant data (input type values = "hidden") should be in the server side codex. I was looking at cURL, but it was quite a bit for me and I spent a couple of hours trying to find some guide or some sample code on how to do this. Any suggestions or help is appreciated. Thank you!
a source to share
I have worked with this gateway several times and they require you to enter the url that will be given access to the message on your system. Even if someone tried to use the information in your hidden fields, they shouldn't have posted anything in it as they won't be posted in an approved location. If they could, the gateway would be in serious trouble. The user information contained in the form is not the same information required to administer the gateway settings and has very limited access to get started.
Like you, I was uncomfortable at first. I came across the same suggestion in their documentation, but they didn't provide any examples and didn't find a good way to do it in the schedule / budget for the project. After talking with my client, they agreed that this is acceptable and we have been doing this since launch.
In my case I used a form similar to yours reading values from my ecommerce system for 3 different sites, the oldest of which has been running for almost 2 years without any problems.
After using them several times, I can say that their system works as advertised and our customers are happy with their service.
a source to share
Call a virtual merchant and have them send you sample code for server side hidden values. We just had the same problem and TRUST ME, you don't want your credentials to be publicly exposed - a group of people started using our credentials to verify stolen credit cards. Reference counting is trivial.
a source to share