-----BEGIN PGP SIGNED MESSAGE----- hi gustavs,
The PAYMENT_URL only lets the viewer see the page/URL the customer will be directed to upon e-gold payment completion. Normally one would use a CGI/ASP type page at that URL to respond to the customer. That page will only provide goods to the customer if it was also aware of an authentic notification directly from the e-gold system. That notification is directed to the STATUS_URL input value. The notification message includes a V2_HASH field that can be checked for validity - you could also pull up the transaction by unique PAYMENT_ID in the payee's e-gold account history. The PAYMENT_URL, upon waiting for a signal (possibly in the form of a file or database update) from the STATUS_URL CGI, could then provide the customer with a temporary URL to access their digital goods, or would possibly email the goods to the customer. If you are unable to host CGIs at your web host, you can't fully automate secure delivery of digital goods. You can still make it a little tricky to get directly to your digital goods using an obfuscation method demonstrated at: http://www.e-gold.com/samplestore/samplestore.html If you'd like coding help with the e-gold SCI notification and it's V2_HASH verification, you can email [EMAIL PROTECTED], or post on the e-gold tech discussion mail list available starting from a link on this page: http://www.e-gold.com/unsecure/lists.html regards, jay w. [EMAIL PROTECTED] > PAYMENT_URL in the source code reveals everything!!! > > Can anybody tell me an easy & reliable way to automatically verify e-gold > payments? Example: Selling access to the file > > Thank You -----BEGIN PGP SIGNATURE----- Version: PGP 7.0.4 iQEVAwUBPAaWo8yM0YPqVE7FAQFqpgf+LL6LGFV/3RAsg8awXBHp1uW8Sfv+cgfL qpC3S6m5D/Y+tKn047pqoJAr8E5WewuX8dONUUxsrFlRBJcbU4IYxEHi2nLTM72D V7CCpxB/LNoHHCGK8s+oRXifA1h0w9VsI0wq0yj0V5+staFBbkVjmIlCVtKicNZv URIw78v0dReB3UgpN0dKlFOXpHBgN/muG8CgnHWpzlY1qN22pDjyT9Pjeva8GqVd 68Jmqzd00Ad90pvqDApJKETRvqdQ60e/QzFKAKel84iwMUX8ngxEcEZhm3qjiDtl RWjKYaLNrBtZKx7/K/GUWMc6uDTWJ8AaeZqdauXCEMJihaIP0S5XKA== =OcZA -----END PGP SIGNATURE----- --- You are currently subscribed to e-gold-list as: archive@jab.org To unsubscribe send a blank email to [EMAIL PROTECTED] http://www.e-gold.com/stats.html lets you observe the e-gold system's activity now!
