https and frames

CC gateway problem

[will1480]

I want to create a CC transaction gateway, but dont want to deal with SSL certificates, can i simply create a framed page with the middle fram being a https page? Will this affect the security of the page? Any direction would be helpful

[Corey Bryant]

Yes - depending on the way that people have their browsers set up, they will get a warning. If you have three fames - thus 4 pages - and only one of them is secured - most people consider that that is not secure and rightfully so. The secure icon should not display on the lower right hand corner as well. The SSL certs are only about $20 a year. Consider that or see if your hosting company provides a shared SSL.

-Corey

[will1480]

i know i can get a certificate, but I do not understand how to actually set up a transaction. Right now i host with a server that does not offer merchant accounts. Does this mean that I have no way of staying within my domain to recieve creditcard transactions? OR would the best way (given my host situation and me already having paid for 1 year) be to get https setup and do frames to with the middle frame being a cc gateway? I am very novice at this online payment.

Thanks for the help.

[Corey Bryant]

No - you can get a merchant account from anyone. To process them on your site - you need an SSL. Most hosting companies offer a shared SSL which will suffice or you can get your own SSL - and they are only about $20 a year.

As far as setting up a transaction on your secure site, most payment gateways offer an API. It requires a little programming on your part.

You do not want to do frames. And you can always change hosting companies - request a refund. They are not providing you with all the services that you desire / need to properly run your web hosting business.

-Corey

[will1480]

Thanks for the input. I still trying to figure all this out still. I dont see how the flow works.

my CC form on https page --> post to CC processing outside my domain, another https page --> CC gateway processes transaction outside my domain --> CC posts good/bad transaction variables to https PHP page within my domain --> I send them to a http page with good/bad message

is that the flow?