I'm using the sample PHP code for ANet in which the form submits directly to: https://test.authorize.net/gateway/transact.dll
Everything works fine, but I want to perform validation on the form fields before submitting them to ANet. This is important because in the sample code, the amount the user will be charged is simply shown in the HTML which makes it easy for the client to modify the value charged. I can do client-side validation with Javascript, but this isn't a safe/ideal option either.
Basically, I would like to submit the form values to a PHP page that performs server-side validation and then submits the data to https://test.authorize.net/gateway/transact.dll. How can I accomplish this? I believe I need to use cURL, but I'm not exactly sure if that's correct or how to approach it.
Any help would be much appreciated!
Solved! Go to Solution.
06-19-2012 07:24 AM - edited 06-19-2012 07:27 AM
If you server-side validation and then submits the data, you are doing AIM not DPM anymore.
the amount the user will be charged is simply shown in the HTML which makes it easy for the client to modify the value charged.
That is what the x_fp_hash is use for.
06-19-2012 08:15 AM
If you server-side validation and then submits the data, you are doing AIM not DPM anymore.
the amount the user will be charged is simply shown in the HTML which makes it easy for the client to modify the value charged.
That is what the x_fp_hash is use for.
06-19-2012 08:15 AM