Sorry to do this to you all - I've tried submitting this question to
miva support but have not received a response (from over a week ago) -
I've not used Miva shopping cart before, so I'm sorry if I am missing
something completely obvious...
Extract from the email I sent to the support ppl's...
----------
I would like to develop a payment module for MM: v4.22 using payment
gateway here in New Zealand - I've looked through the documentation and
have one major concern. The Internet payment gateway I'm developing the
module for provides a secure payments page for accepting credit card
details. The query string that I must submit to it requires the query
string to be submitted with MD5 Hash component to ensure the integrity
of the GET request.
The problem with this is that the hash is created from *all* of the
fields that get submitted - I cannot see from your documentation that it
is possible for me to get my hands on the complete query string (to
create the hash from) that will submitted to the payment gateway. So my
question is - Am I able to refresh to a custom page of my own on your
server? The script would take all the submitted vars, create a hash
string from them, and then submit the request to the payment gateway.
The alternative would be hosting the script that creates the hash code
somewhere else, but this will require a secure server for a single page,
and one of the things that attracted my client to Miva shopping cart was
that that was already and would also circumvent this security feature of
the payment gateway.
Its possible I may have the wrong idea about how the payment process
works in Miva - any pointers will be welcome.
-----------
Thanks for your time.
Cheers,
Gareth