Connecting to a 3rd party CC processing site using sensiteve info'

[rajkemb]

Hi All,

I need to connect to a 3rd party CC processing site. To connect to this site I need to pass a few 'credentials' along with the form so that my site-users are directed to the payment-form page. The only way I cud do this is pass these credential values as a hidden values along with the form.

Can anybody please tell me a way to pass these credential values using server side code so that my users cannot actually see these 'connection-credentials'. Btw the page I'm talkin abt uses a 2-step form with CGI as the server side scripting language to process the form input values.

Any help in resolving this issue would be greatly appreciated. Thanks in advance!

<Sorry, no personal URLs.
See Terms of Service [webmasterworld.com]>

[edited by: tedster at 5:41 am (utc) on Feb. 23, 2005]

[incrediBILL]

I never transfer control to the payment service or expose the contents in hidden form fields.

I use a direct SSL POST from the server to their server passing the data securely, and process the result code it any. Most out-of-the-box ecommerce products will do this for you, you might want to consider using a more secure solution.

[rajkemb]

Thank you so much. I'm actually new to this. So how does SSL POST work?I was actually thinking of some server side script (probably in CGI) that can achieve this same functionality i.e. push the connection parameters without the user getting a chance to view them in the source page.

[incrediBILL]

Yes, a server site script is exactly what I meant.

You open an SSL socket to the payment processor and mimic POSTing a secure form.

But why re-invent the wheel?

A bunch of solutions do it already and most of them are inexpensive or free even, you can probably download a PERL cart and just extract the payment gateway portion.

[tolachi]

curl is your friend. It is not to hard to program something custom in php.