Accepting payments using Eway -

-

I have to use as a payment gateway but after facing the problem it is to face the problem.

Do not want to touch credit card details at any time, due to the requirements of PCI do not accumulate through my site and neither to move, let me send the user to the gateway hosted page Redirects the users provide all the details there and pay the payment to the page I specified for confirming the result on the gateway - call pay_done.php.

Now, in payment_done.php, I do not know to confirm that the confirmation payment has returned from the gateway itself or someone posted it on my page and because of its fake confirmation of my page confirmation Can be paid, but can not be paid at all.

Now pay_do.php I need to ask the e-if I got this confirmation (with some specific transaction ID) from them and if so, the amount is correct etc. Eva will return to me right / wrong and then I can be sure that the correct amount has been paid.

The problem now is that eve permits to query for this, only 100 times in one day.

I suppose now to run out of ideas and help in looking for the harder what options have I left? It seems unbelievable that there is no way to work without falling into PCI compliance issues, even use the Payment Gateway hosted page. Thanks in advance for any help.

The answer is two times.

You verify that this post came from EVA server, if the request came from elsewhere, you do not allow the request. This is the main form of your security.

If anyone on your site wants to hook your site, then implement it:

Before sending the user for payment, make a long hush. You can use a session variable to keep it

Pass the hash by using the eWayoption1 parameter.

When E.A. answers back the answer, check the eWayoption1 value to verify that it matches the current user payment hash.

You have to delete the session variable as soon as you have validated it even if the hash is wrong, then invalidate the session variable and start them.

In the middle of the hash, and confirming the posting IP address, you should be very safe.


Comments

Post a Comment

Popular posts from this blog

c# - sqlDecimal to decimal clr stored procedure Unable to cast object of type 'System.Data.SqlTypes.SqlDecimal' to type 'System.IConvertible' -

-
I'm new to this I'm writing a clr. stored procedure that can be used to get values ​​used in a calculation Call for another stored procedure for Gives an archived methodology int (I think SqlInt32? Value of the table's value is int) which is then necessary to convert to decimal. Here I have the code: Public static integral mood (SQL MDMMYLUE, escalistering AMY type, out of SQLDCM Result) {aResult = 0; Try {SqlConnection conn = New SqlConnection ("Reference Connection = True"); SqlCommand cmd = New SqlCommand ("sp_GetType", conn); Cmd.Parameters.AddWithValue ("@ myValueType", aMyValueType); Cmd.CommandType = CommandType.StoredProcedure; Conn.Open (); Object type = CMD. Exclamation Asser (); Conn.Close (); Decimal type FORCalculation = Convert. ToDecimal (type); Decimal value = convert toDecimal (aMyValue); // ** calculation calc = new calculation (); Decimal result = calorie.docalulation (typefarculation, value); I get an exception...
Read more

Calling GetGUIThreadInfo from Outlook VBA -

-
I need to find the active window'm writing a VBA macro in MS Outlook, which is a specific process. The goal of this is to get the active window / document name even if its original application has more than one document interface. User processor with GetCurrentThreadId is active, I am using GetGUIThreadInfo to get .dll. Here is the correct code: private type RECT as as Left LongPtr top LongPtr right LongPtr down LongPtr termination of private type GUITHREADINFO cbSize as LongPtr flags LongPtr hwndActive LongPtr hwndFocus LongPtr hwndCapture LongPtr as as as as as reset as LongPtr rcCaret as LongPtr hwndCreate as LongPtr hwndMoveSize as HwndMenuOwner end of Private Equity PtrSafe function GetWindowThreadProcessId Lib "user32" (_BVV hnw LongPtr as LongPtr Nig Mr. announced as PtrSafe function GetGUIThreadInfo Lib "user32" _ (ByVal dwthreadid as LongPtr, _ lpguithreadinfo as GUITHREADINFO) LongPtr Sub MyFunction () as dim strWindowTitle string = space as s...
Read more

Obfuscating Python code? -

-
I'm looking for a way to hide my Python source code. print "Hello World!" How can I encode this example so that it is not human-readable? I have been asked to use Base 64 but I'm not sure how. itemprop = "text"> It is limited only, first level ambiguous resolution, but has built-in: byte-code in Python Is a compiler for: dragon-o-m py_compile & lt; Your program.py & gt; creates a .pyo file with a byte-code, and where the docstrings are removed, etc. You can rename .pyo with the .py extension, and python & lt; Your program.py & gt; runs as your program, but it does not have your source code. PS : If your program blur modules like this, you need to rename them with the .pyc suffix (I Not sure it will not break a day), or you can work with .pyo and run them with python -o ... .pyo ( Import should work). This will allow dragon to search your modules (otherwise, Python looks for the .py module).
Read more