RE: Bank Of America CC processing

2003-10-02 Thread Matt Robertson
Stan wrote: Can you show an example of how you would use cfheader or cfhttp? cfhttpparam type=CGI name=http_referer value=https://foohbar.com I was given a way to do it with cfheader (here, I think) but I've lost the thing now.Deleted the file I originally tested it on :-(.Not sure how

RE: Bank Of America CC processing

2003-10-01 Thread McGill, Eric
Ryan, Maybe BoA just needs to explicitly allow the IP or domain of the server posting the transactions? Eric -Original Message- IOC_reject_description=The site that originated the order request is not authorized to POST transactions. But according to all the setting I can find I do have

RE: Bank Of America CC processing

2003-10-01 Thread Matt Robertson
You need to put your web site into the validated referers list.They check the referer value and bounce anything not coming from a recognized location (as if the referer is a valid way of determining this). If that still doesn't work and they are refusing a listed poster, you've hit a bug in their

RE: Bank Of America CC processing

2003-10-01 Thread Ryan Roskilly
I have tried both the domain name and the IP address. What is your fix? -Original Message- From: Matt Robertson [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 01, 2003 2:04 PM To: CF-Talk Subject: RE: Bank Of America CC processing You need to put your web site into the validated

RE: Bank Of America CC processing

2003-10-01 Thread Stacy Young
That's very likely...that's how our payment gateways work. Either that or they just haven't enabled the account yet. Stace _ From: McGill, Eric [mailto:[EMAIL PROTECTED] Sent: October 1, 2003 2:01 PM To: CF-Talk Subject: RE: Bank Of America CC processing Ryan, Maybe BoA just

RE: Bank Of America CC processing

2003-10-01 Thread Barney Boisvert
There isn't really a good way to do it.HTTP_REFERER is the only way to get the data, but many browsers let you turn off sending that header, and I remember seeing one that actually let you provide your own, though I don't know what it was. barneyb -Original Message- From: Stan Winchester

RE: Bank Of America CC processing

2003-10-01 Thread Matt Robertson
Stan wrote: What's the best practise for validating a referrer other than from Bank Of America? You mean validating referrers in general?As far as I know referrers can be fairly easily faked, so authentication using just that isn't something you can do and expect it to mean much.CF can do it