Anyone wanna be God for the day? E-commerce Solution
| From: | JB | Date: | Tue, 12 Dec 2000 15:55:50 +0000 |
| Subject: | Anyone wanna be God for the day? E-commerce Solution | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-29975@lists.php.net to get a copy of this message | ||
Ok,
I've inquired about this problem in a couple different threads and have found some new info,
hopefully someone will be able to help me put together the pieces. I haven't been able to get
any clear cut answers though, so I figure anyone who can help solve this will get to be the PHP God
for the day, maybe two. =P
If anyone here has setup an e-commcerce script to handle real time credit card processing info you
probably know how to do this, and I may be going about it wrong.
The process:
1. User fills out a form with Name, Credit Card number, Exp. Date, etc.
2. The form data is passed to a local PHP script where it takes the variables and adds variables
that need to remain secret for obvious reasons. These include the account number, account password,
and other required information for the authorization script (by iBill).
3. This information must then be POSTED (no, GET is not supported, if you GET the transaction will
be denied, erroring 'GET is not supported') to the transaction script ---> https://secure.ibill.com/cgi-win/ccard/tpcard.exe
4. The iBill script replies with a string basically either saying the purchase was authorized or
denied.
5. The script takes the string iBill replies with and continues based on what the string told us
about the transaction.
My first and foremost problem lies within the fact I have yet to find any way to POST information to
a remote script from PHP. Say I get my variables from the user and add my variables, how in the heck
do I POST those variables to the iBill script out of PHP? Can PHP even open a connection and send
POST data? You would think this would be a common function.
Second, obviously I need to PHP to get the response, which of course will be encrpted with SSL.
So I need something like:
$returned_string = ' w3m-ssl -dump $post_function_return' ;
(as recommended by Joe Stump)
If I can get the data POSTed to a remote script and can take the string in SSL and get it into plain
text everything else will be a sinch.
So, anyone have any crazy ideas on this? How have you guys/gals setup your scripts to work with the
authorization company's software? Authorize.net, ccnow, ibill, they all pretty much use the
same concept for authorizing CCs, so I'm open to suggestions. Some people have mentioned to
look into $HTTP_POST_VARS[], but have no idea how to send it. I am thinking the solution lies in
$HTTP_POST_VARS and Header( ......).
Thank you much.