-----BEGIN PGP SIGNED MESSAGE----- hi kane, there are a couple of things you can do... 1. check to see if the post to you is coming from something in the 63.240.230.x range of IPs. currently this is where e-gold is located. (at some future distant time this might change.) 2. make sure to verify the V2_HASH field that is presented to you. this field can only be generated by someone that knows your merchant passphrase (it acts as a shared secret). 3. to perform a final check, assign each SCI payment you make a unique PAYMENT_ID on the input side. then use the e-gold history automation interface to query the recipient account for the existence of such a payment. if all 3 of those things match, you can be assured that you have truly been paid. jay w. [EMAIL PROTECTED] > how to confirm the cgi file after status_url is e-gold ? > > <input type="hidden" name="STATUS_URL" > value="http://mysite.com/cgi-bin/cofirm.cgi";> > > can a cgi command check that e-gold is the site running confirm.cgi > ? -----BEGIN PGP SIGNATURE----- Version: PGP 7.0.4 iQEVAwUBO3GlpsyM0YPqVE7FAQEs8gf/ceAEHsuL1gTbKQJ8gRo10g+ySmI3x6Go H37FYrG0JZ4yg92ViPSW8ZfvwLwJo6+LhTJOuc+qjOD2FY8XKwLTAa/TXsacmH01 s+1WcVKdyxPk1SxjqlCEC4bC0zTsNrXvNH/hb0HSxDB4GNYQYIlrEIl21CZ2TgQb ErEe2egyoX9dfGgkmImcSYjVnQRzPr42nduxc35794M4jU4/oH76HL7oceonsWo6 8UcC0jU/nCDl+7Cn5NVlOlmtdVumVn5Rg6xbuVlHuF7xI2rGeqWKvim1l6ga22ej PrEIPHB8HqqOsXzeRH73bNtBKpsdTiTpe6xP7WU5WJNvcOFJTuifUA== =pq2h -----END PGP SIGNATURE----- --- You are currently subscribed to e-gold-tech as: archive@jab.org To unsubscribe send a blank email to [EMAIL PROTECTED]
