Is it clear text or can you at least submit and encryption key for the post back data? What data do they return on post back?
This has me very intrested (read: violently ill) On Tue, Jul 14, 2009 at 12:19 AM, Judah McAuley <[email protected]>wrote: > > I was just recently implementing subscriptions (recurring payments) > with Authorize.net > > First off, you can't test them in Test Mode. Which seems to defeat the > purpose of Test Mode, but whatever. I'll run a couple of $0.01 > transactions on my card for testing. > > Authorize.net has a setup where you give them a URL to post all of the > subsequent transaction information to. So you initially set up the > subscription, make sure it is good, then every month they try running > the card, then post back to your URL and tell you if it succeeded or > not. > > Cool, not too difficult, right? Well, we tested it and the first 5 > post backs we got generated HTTP 500 errors in IIS. Nothing logged on > our side. Well, crap. So we we pull all the real code and decide to > just do logging code, log whatever they send us. Obviously we > misunderstood their API docs and are binding to something incorrectly. > > Then...nothing. Authorize.net stops doing post backs to us. We submit > more test subscriptions and get...nothing. Get ahold of them to find > out what's up and they research the matter. > > They come back and tell us that the problem is that they don't support > doing post backs to https. They don't support sending financial > information over ssl. Really. And those 5 post backs they did to our > https address that generated the 500 error code? No clue. According to > them, it should never have worked even that much. And, oh yeah, maybe > they shouldn't let us submit a url that they claim they can't do a > post to. They have not a single clue as to why it tried 5 times then > stopped trying. > > Fuckin brilliant > > On Mon, Jul 13, 2009 at 7:56 PM, Michael Grant<[email protected]> wrote: > > > > The only reason I can come up with is that the web department in question > is > > full of donkeys. No SSL is _so_ 1998. Seriously, whoever implemented a > site > > like that should be shot. Or at the very least maimed. > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-community/message.cfm/messageid:300053 Subscription: http://www.houseoffusion.com/groups/cf-community/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.5
