Well, FWIW, we don't do anything different. When we receive the DPM POST from authorize.net, all we do is log the result and return this:
<html>
<head>
<noscript>
<meta http-equiv="refresh" content="0;url=<%= $url_with_token %>" />
</noscript>
</head>
<body onload="document.forms[0].submit();">
<form method="post" action="<%= $url %>">
<input type="hidden" name="token" value="<%= $token %>" />
</form>
Please wait, processing...
</body>
</html>The $url points back to the status result page on our site. There, we show either the success or error message, depending on the previously stored result.
