Customers with websites needing some secure mechanism for
getting back credit card details securely can use the Secure Message Retrieval
System which can be integrated simply into any web form. The first step
is to contact our customer support department, who, for a small fee, will
give you a username and password which allows you to pick up your messages
securely.
Your SMS webspace will be hosted at:
https://www.secure.zetnet.co.uk/sms/<userid>
Setting up the form on your website
The following HTML code should be used at the top of
the secure form, replacing the fields in italics with your own details:
<form method="post" action="https://www.secure.zetnet.co.uk/cgi-bin/messages/send">
<input type="hidden" name="encryptFor" value="username">
<input type="hidden" name="keyfield" value="name">
<input type="hidden" name="redirect" value="/securedirectory/thankyoupage.html">
<input type="hidden" name="required" value="name,from">
<input type="hidden" name="recipient" value="name@domain.com">
<input type="hidden" name="sort" value="order:details,name,from">
- The form's ACTION should always stay the same.
- The value of the encryptFor field should be the
username assigned to the client for use with the SMRS.
- The keyfield field specifies the field whose contents
should be displayed along with the date, when the list of messages is
displayed, and obviously should be one which is included later in the
form.
- The thankyouPage field, which can also be named
redirect specifies which URL to redirect to after the form has been
submitted. Normally this should be on the same webserver as the SMRS
(ie. secure.charis.co.uk) to avoid insecure page errors. If this is
omitted, a list of the fields supplied will be displayed, along with
the Zetet logo.
- The required field contains a comma-separated list
of fields which must be filled in. If these fields are empty, then an
error-page is generated.
- If the recipient field is used, then an email to
the specified email address will be sent, warning the recipient that
there is a message waiting to be read. No sensitive data will be sent
via unencrypted email.
- Do not include the line for the msgformat field
until you have read the section "Customising how order appear"
below.
- The sort field can take three values:
i) Empty. If the field is blank or omitted altogether, then the fields
are returned in the order in which they appeared on the form.
ii) alphabetic If set, then the fields are sorted alphabetically, without
regard to case.
iii) order:field1,field2,… If order: is used as a prefix, then
the order of the comma-separated list of fields following it is used.
Note that any fields on the form which aren't included here will not
be displayed in the results.
Retrieving orders placed through
your website.
Information about orders placed through your site can be retrieved from:
https://www.secure.zetnet.co.uk/cgi-bin/messages
Customising how orders appear
By using the msgformat field, you can take control of how the HTML returned
in the message system when viewing messages actually appears, missing
out the standard field list altogether. DO NOT USE THIS FIELD
UNLESS YOU NEED IT!
Simply set msgformat to whatever HTML you want
(but missing out quotation marks!) and put field names in square brackets.
See the example below. You don't need the sort field either with this
option.
<input type="hidden" name="msgformat"
value="
<ul>
<li>Name: [name]
<li>From: [from]
</ul>
">
Generating Order Receipt Emails
The Secure Message System can be configured to send out order receipts
to it's customers by using HTML code similar to the following inside the
form:
<input type="hidden" name="emailfield"
value="email">
<input type="hidden" name="receipt_body" value="
Your order, detailed below, has been received:
Your Name: [Name]
Item: [Item]
Quantity: [Quantity]
Total: [Total]
Thank you for your order
">
<input type="hidden" name="receipt_from" value="customerservice@yourdomain.com">
<input type="hidden" name="receipt_subject" value="Your
Order Details">
- The emailfield field tells the receipt which field
on the form contains the email address the receipt should be send to
- this should be the field name on the form you used to obtain the user's
email address
- The receipt_body field is very similar to the msg_format
field above, and provides the format for the main body of the email.
Any of the fields sent to the secure message system can be specified
by putting them in square brackets (as above).
- The receipt_from field sets the email address the
receipt email will come from
- The receipt_subject field sets the subject of the
receipt email
- If you want to set the content-type for your
receipt, eg. to send a message in HTML format, you would use the receipt_content-type
field as follows:
< input type="hidden" name="reciept_content-type"
value="text/html; charset=iso-8859-1">
|