Why register for free on WebRadiance? |
Why register for free on WebRadiance? |
![]() |
Welcome to WebRadiance forums! WebRadiance is a place for discussion and help on a large range of web design and development related topics such as HTML, CSS, ASP & .NET, PHP and SEO. It is provided for free, without ads and is a friendly place for beginners and professionals alike. By joining us today you can take part in our rapidly growing community. Registering enables you to:
|
![]() ![]() |
Oct 24 2008, 06:53 AM
Post
#1
|
|
|
W.R. Corporal Group: Members Posts: 167 Joined: 24-March 08 Member No.: 883 |
We want to build a PHP online system where customers can reserve rooms and pay for them online. After payment is accepted, the status of the room needs to change from "vacant" to "booked".
The essential problem is how to build a secure site that recognizes when a payment has been successfully processed by the shopping cart. We already have a merchant account. Could someone give advice on how to go about this problem? |
|
|
|
Oct 24 2008, 02:42 PM
Post
#2
|
|
![]() Codesmith Group: Administrators Posts: 946 Joined: 4-April 06 From: San Diego Member No.: 3 |
You're combining two kinds of systems, a scheduling app and ecommerce. There are apps like that out there, for example http://www.phpshoppy.com/products/hotel-reservation-system/ (found via google) or you can make one from scratch.
|
|
|
|
Oct 24 2008, 03:27 PM
Post
#3
|
|
![]() the owner3r Group: Administrators Posts: 1,531 Joined: 4-April 06 From: North Wales, UK Member No.: 4 |
And when you do payment processing (you can either store the details just before processing in a database).
Or more preferably all payment providers i have ever worked with, send you a query string back if payment was successful and allow a custom checkout page of some sort (so when the payment is done, a query string containing all the order information is then sent to that specific page to add to the database.) -------------------- |
|
|
|
Oct 25 2008, 01:32 AM
Post
#4
|
|
|
W.R. Corporal Group: Members Posts: 167 Joined: 24-March 08 Member No.: 883 |
And when you do payment processing (you can either store the details just before processing in a database). Or more preferably all payment providers i have ever worked with, send you a query string back if payment was successful and allow a custom checkout page of some sort (so when the payment is done, a query string containing all the order information is then sent to that specific page to add to the database.) It is probably a newbie question but how is it possible to process a query string from another web site (the payment provider). Are there any security implications inherent in this? |
|
|
|
Oct 25 2008, 04:30 AM
Post
#5
|
|
![]() the owner3r Group: Administrators Posts: 1,531 Joined: 4-April 06 From: North Wales, UK Member No.: 4 |
Well when you send the information to the processor (the amount, address, orderid etc) this is then posted again from the processor to your checkout page. Allowing you to store the details of the order. This is how websites store the orders
As for security flaws, well no real sensitive information is sent. Its just for your record keeping. Any kind of card details etc is all done on their side you dont see any of it. -------------------- |
|
|
|
![]() ![]() |
|
Lo-Fi Version | Time is now: 8th January 2009 - 09:49 AM |