PayPal Gateway - 2012 Guide de l'utilisateur télécharger pdf (Page 29)

Gateway Developer Guide and Reference 31 July 2012 29

Secure Token

Posting To the Hosted Checkout Page

2. Set CREATESECURETOKEN to the value Y to request that the Gateway server return a token.

CREATESECURETOKEN=Y

3. Set SILENTTRAN to the value TRUE to suppress the display of hosted pages.

SILENTTRAN=TRUE

Transparent Redirect Example

The following is an example of an authorization parameter string that suppresses hosted pages.

TRXTYPE=A&BILLTOSTREET=123 Main St.&BILLTOZIP=95131&AMT=24.35&INVNUM=INV123

45&PONUM=PO12345&CURRENCY=USD&CREATESECURETOKEN=Y&SECURETOKENID=9a9ea8208de

1413abc3d60c86cb1f4c5&SILENTTRAN=TRUE

The Gateway server returns a SECURETOKEN and SECURETOKENID in the response. A tag

follows the SECURETOKEN to indicate the length of the token value returned.

RESULT=0&RESPMSG=Approved&SECURETOKEN[25]=Fj+1AFUWft0+I0CUFOKh5WA==&SECURET

OKENID=9a9ea8208de1413abc3d60c86cb1f4c5

When the customer enters their sensitive data into the credit card fields on your website and

clicks Submit, the browser posts the data to the Gateway server rather than to your website.

NOTE: It is highly recommended that you add scripting to ensure the the browser posts the

sensitive data directly to the PayPal Gateway server rather than to your website.

Posting To the Hosted Checkout Page

To display the transaction information to the Gateway hosted checkout page, you perform an

HTTP form post.

1. Direct the HTTP post to the Gateway applications server at the following URL.

https://payflowlink.paypal.com

2. Send the following parameter data:

– SECURETOKEN returned in the transaction response

– SECURETOKENID

HTTP Form Post Examples

The following is an example request string that displays the transaction information to the

hosted checkout page.

1 2 ... 24 25 26 27 28 29 30 31 32 33 34 ... 229 230

Pas de commentaire

PayPal Gateway - 2012 Guide de l'utilisateur Page 29