Re: How would I do a paypal type redirect using RPG CGI?

["Raul A. Jager W." <raul@xxxxxxxxxx>]

When you redirect the client to the insecure server you can either send
him to a different page or have a parameter telling "accepted or not"

But, that can be facked very easily.

Do you have a "transaction number"? or can you create one? in that case,
put the transaction number in a file, with info for the iss and create a
CGI that accepts the tranasction number and returns the result.  The iss
then can read that page when the client is redirected to it.

Raúl
_________________________________________________________________
Mike Cunningham wrote:
> We run an IIS web server for public access and an iSeries web server for secure things. We have an IIS based application that needs to get credit card information but want that to be collected by an  iSeries application (we have existing iSeries based credit card processes using Curbstone). Very much like a paypal process. The IIS form collects all the necessary information except the credit card info, redirects the user to the iSeries app and passes amount and name and a few other things. iSeries app asks for credit card info, validates it, encrypts it, etc, etc and then needs to return to the "calling" application and pass back if the credit card part was valid or not. (Doesn't really have to do this but the group that controls the IIS side of our organization wants to know and show the user a second confirmation (or rejection) page.