really ;) I am also quite curious. The site I asked about appears to work
now, with a full page of what to click if you are running aol, what settings
to change for netscape, etc. Speaking of 1998.

On Tue, Jul 14, 2009 at 7:30 AM, Michael Grant <[email protected]> wrote:

>
> Is it clear text or can you at least submit and encryption key for the post
> back data?
> What data do they return on post back?
>
> This has me very intrested (read: violently ill)
>
> On Tue, Jul 14, 2009 at 12:19 AM, Judah McAuley <[email protected]
> >wrote:
>
> >
> > I was just recently implementing subscriptions (recurring payments)
> > with Authorize.net
> >
> > First off, you can't test them in Test Mode. Which seems to defeat the
> > purpose of Test Mode, but whatever. I'll run a couple of $0.01
> > transactions on my card for testing.
> >
> > Authorize.net has a setup where you give them a URL to post all of the
> > subsequent transaction information to. So you initially set up the
> > subscription, make sure it is good, then every month they try running
> > the card, then post back to your URL and tell you if it succeeded or
> > not.
> >
> > Cool, not too difficult, right? Well, we tested it and the first 5
> > post backs we got generated HTTP 500 errors in IIS. Nothing logged on
> > our side. Well, crap. So we we pull all the real code and decide to
> > just do logging code, log whatever they send us. Obviously we
> > misunderstood their API docs and are binding to something incorrectly.
> >
> > Then...nothing. Authorize.net stops doing post backs to us. We submit
> > more test subscriptions and get...nothing. Get ahold of them to find
> > out what's up and they research the matter.
> >
> > They come back and tell us that the problem is that they don't support
> > doing post backs to https. They don't support sending financial
> > information over ssl. Really. And those 5 post backs they did to our
> > https address that generated the 500 error code? No clue. According to
> > them, it should never have worked even that much. And, oh yeah, maybe
> > they shouldn't let us submit a url that they claim they can't do a
> > post to. They have not a single clue as to why it tried 5 times then
> > stopped trying.
> >
> > Fuckin brilliant
> >
> > On Mon, Jul 13, 2009 at 7:56 PM, Michael Grant<[email protected]> wrote:
> > >
> > > The only reason I can come up with is that the web department in
> question
> > is
> > > full of donkeys. No SSL is _so_ 1998. Seriously, whoever implemented a
> > site
> > > like that should be shot. Or at the very least maimed.
> >
> >
>
> 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Want to reach the ColdFusion community with something they want? Let them know 
on the House of Fusion mailing lists
Archive: 
http://www.houseoffusion.com/groups/cf-community/message.cfm/messageid:300077
Subscription: http://www.houseoffusion.com/groups/cf-community/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.5

Reply via email to