Re: hidden form fields or server side code

["Bradley V. Stone" <bvstone@xxxxxxxxxxxx>]

Yes, what you're looking for is something that Scott's HTTPAPT or my GETURI
(www.bvstools.com/geturi.html) utility can do.  Basically a web service
mimiking an HTTP POST.

I use GETURI with a couple clients for credit card posting.  Works great.

As long as Net.Data can call a simple CL or RPG program during processing,
it should be fairly painless.

Bradley V. Stone
BVSTools - www.bvstools.com
eRPG SDK - www.erpgsdk.com

> -----Original Message-----
> From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]On
> Behalf Of Raul A. Jager W.
> Sent: Saturday, March 22, 2008 10:14 AM
> To: Web Enabling the AS400 / iSeries
> Subject: Re: [WEB400] hidden form fields or server side code
>
>
> Maibe you can write a small proram in the iSeries that receives the post
> from your shopping cart, adds the lgo on info, and forward to the bank.
> I do something similar, but instead of NetData I use RPG. To re post I
> use HTTPAPI, I don't remember if NetData has something similar.  Try
> using "refresh" or javascript "location".
>
> Larry Kleinman wrote:
>
> > We are using Net.Data to develop an e-commerce website and have hit the
> > following problem:
> >
> > The "buy" button on the shopping cart page links to a secure site (HTTPS)
> > provided by our bank that asks for credit card info, then charges the
> > customer and credits our account.  The bank software requires
> that we pass
> > it our log on info (user and password provided by them) and their manual
> > shows examples of putting this into a hidden form field in HTML and then
> > POSTing it to the bank's site.  The problem is that this info is
> visible to
> > anyone who displays the source of the shopping cart page in
> their browser.
> > The bank's manual says:
> >
> >   "Although our simple examples in the document show this as a
> method for
> >   passing data to Virtual Merchant, we do not recommend this for your
> >   production Website. All sensitive merchant data, including transaction
> >   amount and your Virtual Merchant credentials, should be
> placed in server
> >   side code, rather than of just hidden value fields on an HTML form"
> >
> > How do I do that?
> >
> > Larry Kleinman
> > Kleinman Associates, Inc.
> > 212-949-6469
> > 203-255-4100
>
> --
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.