Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>Whether you want to POST data directly to the payment processor or collect the credit card information depends on your payment processor and if you want to store some of the information you collect on the credit card page (<em>don't</em> store the credit card information; store only the last four digits if you need to.)</p> <p>Posting the form directly to the payment processor is the simplest way. It probably also means that you don't even need to be PCI level 4 compliant, because none of the credit card information ever passes through your system. See here:</p> <p><a href="http://www.pcicomplianceguide.org/pcifaqs.php#2" rel="nofollow">http://www.pcicomplianceguide.org/pcifaqs.php#2</a></p> <p>On the other hand, if you want to store the billing address or the last four digits of the credit card number - or to insert this data into a receipt that you want to send by e-mail - you will need to write your own server-side code that collects the information from the credit card page and POSTs the data to the payment processor using an HttpUrlConnection. If your payment processor offers an API, you could also use that. </p> <p>In either case, you should make sure that your payment page can <em>only</em> be viewed over SSL. In a Java web application, you can use a transport-guarantee entry in web.xml to do this:</p> <pre><code> &lt;security-constraint&gt; &lt;user-data-constraint&gt; &lt;transport-guarantee&gt;CONFIDENTIAL&lt;/transport-guarantee&gt; &lt;/user-data-constraint&gt; &lt;web-resource-collection&gt; &lt;url-pattern&gt;your_payment_page.jsp&lt;/url-pattern&gt; &lt;/web-resource-collection&gt; &lt;/security-constraint&gt; </code></pre> <p>This will make sure that even if a user accesses your payment page on plain HTTP, the application server will redirect to HTTPS.</p> <p>This page (from a payment processor I've dealt with) has some more information, from a processor point of view:</p> <p><a href="http://wiki.usaepay.com/developer/transactionapi" rel="nofollow">http://wiki.usaepay.com/developer/transactionapi</a></p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    2. VO
      singulars
      1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload