-----BEGIN PGP SIGNED MESSAGE-----

hi thomas,

a few points that could lead to confusion for people just getting started with the
e-gold SCI...

1. the passphrase string that is included in the V2_HASH check is the MD5 hash of
   the alternate passphrase - not the passphrase itself. i.e. there are a bunch of
   components that make up the string that is then MD5'd to compute the V2_HASH. one
   of those components is the MD5 hash of the alternate passphrase for the payee's 
e-gold
   account.

2. all the fields are submitted to the STATUS_URL cgi parameter by e-gold. a subset of 
those
   fields are submitted by the customers browser returning from the e-gold site after 
making
   payment to your PAYMENT_URL page. it is not intended that you do anything 
significant on
   the PAYMENT_URL page - just say thank you or similar. the V2_HASH is *not* 
submitted to the
   PAYMENT_URL page. the customer may not even click the continue button to get to 
your PAYMENT_URL
   page - but the e-gold server will make a post to your STATUS_URL after the payment 
is made.

jay w.
[EMAIL PROTECTED]
-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.4

iQEVAwUBPeBYHMyM0YPqVE7FAQEW0gf/eovKsIioxcEyCbMgLnDJ+6VC37y3jtNx
yYXK4nwOTREft6HAOkguAnmHt6zIu1vFetZTd1fQZBbKdoHSQIH7Y04Wcair9Zut
xrroG62yNmkcLESJsxHhlm2SWKMobmqBAEvWKdj94HdZ9O9AccuPVoc+gbSMabCW
jcXaFgW7wGx9pieqwM4Rv44nofb4N5xi32qkcSbiftFmQCqQ1lnAzJQek2E6tUJl
qNt/+VfN5edmACAYz3znhC0xQREmd3pTTawpbBnTjbk2mShSZK7Hf/GiEs5SzAJL
wI8wzRqWfjBuvSz2a3K57AyDwPke8Y1gV5z7Y+4CWe3Cc3+ZSG+pRg==
=tZFi
-----END PGP SIGNATURE-----


[EMAIL PROTECTED] wrote:
> Hi!  Just want to say good service.  Im developing an Egold payment system
...


---
You are currently subscribed to e-gold-tech as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

Safe web surfing tip: Get in the habit of checking the SSL key/padlock icon in your 
browser and address/location bar *before* submitting sensitive information like your 
e-gold passphrase.

Reply via email to