The UK's longest established independent ISP
Support - SMS System

Customers with websites needing some secure mechanism for getting back credit card details securely can use the Secure Message Retrieval System which can be integrated simply into any web form. The first step is to contact our customer support department, who, for a small fee, will give you a username and password which allows you to pick up your messages securely.

Your SMS webspace will be hosted at:
https://www.secure.zetnet.co.uk/sms/<userid>

Setting up the form on your website

The following HTML code should be used at the top of the secure form, replacing the fields in italics with your own details:

<form method="post" action="https://www.secure.zetnet.co.uk/cgi-bin/messages/send">
<input type="hidden" name="encryptFor" value="username">
<input type="hidden" name="keyfield" value="name">
<input type="hidden" name="redirect" value="/securedirectory/thankyoupage.html">
<input type="hidden" name="required" value="name,from">
<input type="hidden" name="recipient" value="name@domain.com">
<input type="hidden" name="sort" value="order:details,name,from">

  • The form's ACTION should always stay the same.
  • The value of the encryptFor field should be the username assigned to the client for use with the SMRS.
  • The keyfield field specifies the field whose contents should be displayed along with the date, when the list of messages is displayed, and obviously should be one which is included later in the form.
  • The thankyouPage field, which can also be named redirect specifies which URL to redirect to after the form has been submitted. Normally this should be on the same webserver as the SMRS (ie. secure.charis.co.uk) to avoid insecure page errors. If this is omitted, a list of the fields supplied will be displayed, along with the Zetet logo.
  • The required field contains a comma-separated list of fields which must be filled in. If these fields are empty, then an error-page is generated.
  • If the recipient field is used, then an email to the specified email address will be sent, warning the recipient that there is a message waiting to be read. No sensitive data will be sent via unencrypted email.
  • Do not include the line for the msgformat field until you have read the section "Customising how order appear" below.
  • The sort field can take three values:
    i) Empty. If the field is blank or omitted altogether, then the fields are returned in the order in which they appeared on the form.
    ii) alphabetic If set, then the fields are sorted alphabetically, without regard to case.
    iii) order:field1,field2,… If order: is used as a prefix, then the order of the comma-separated list of fields following it is used. Note that any fields on the form which aren't included here will not be displayed in the results.

Retrieving orders placed through your website.
Information about orders placed through your site can be retrieved from:

https://www.secure.zetnet.co.uk/cgi-bin/messages

Customising how orders appear

By using the msgformat field, you can take control of how the HTML returned in the message system when viewing messages actually appears, missing out the standard field list altogether. DO NOT USE THIS FIELD UNLESS YOU NEED IT!

Simply set msgformat to whatever HTML you want (but missing out quotation marks!) and put field names in square brackets. See the example below. You don't need the sort field either with this option.

<input type="hidden" name="msgformat" value="
<ul>
<li>Name: [name]
<li>From: [from]
</ul>
">

Generating Order Receipt Emails

The Secure Message System can be configured to send out order receipts to it's customers by using HTML code similar to the following inside the form:

<input type="hidden" name="emailfield" value="email">
<input type="hidden" name="receipt_body" value="
Your order, detailed below, has been received:

Your Name: [Name]
Item: [Item]
Quantity: [Quantity]
Total: [Total]

Thank you for your order

">
<input type="hidden" name="receipt_from" value="customerservice@yourdomain.com">
<input type="hidden" name="receipt_subject" value="Your Order Details">

  • The emailfield field tells the receipt which field on the form contains the email address the receipt should be send to - this should be the field name on the form you used to obtain the user's email address
  • The receipt_body field is very similar to the msg_format field above, and provides the format for the main body of the email. Any of the fields sent to the secure message system can be specified by putting them in square brackets (as above).
  • The receipt_from field sets the email address the receipt email will come from
  • The receipt_subject field sets the subject of the receipt email
  • If you want to set the content-type for your receipt, eg. to send a message in HTML format, you would use the receipt_content-type field as follows:

    < input type="hidden" name="reciept_content-type" value="text/html; charset=iso-8859-1">

 
 
 
 

Contact our support department:
0870 748 2368 or support@zetnet.net


Copyright Zetnet Ltd 2007. All rights reserved.