Parse Help

Hi all
well I will try to explain the best I can
1...I have a php script with msql
2....A user comes to the site and reg with user name and password
3....they log in with username and password
4....Now if they want to view certain parts of the site they will pay
5...they click a on a pay icon and a pay page page comes up
6....In this pay page I have put in fields that puts in their email automatic
then select box for type of payment etc

6...Now what I cannot find out how to do is this
7.. In side this form I want to put in their user name and password that they logged in with
BUT not have it shown in that pay page

8 when they have clicked the other things on that form and click pay I want it to send to a php script then from that upto the CCBIll site sign in form and parse in the user name
and password etc

Also When it as passed it to the php script How could I test that script to see if as passed it in all ok

I have done loads of search's with google but could not find any info on this or a script

Please can anyone point me in the right direction

Many Thanks

hope@hope.com a écrit le 26/02/2004 :
> Hi all
Hi

> well I will try to explain the best I can
> 1...I have a php script with msql
> 2....A user comes to the site and reg with user name and password
> 3....they log in with username and password
> 4....Now if they want to view certain parts of the site they will pay
> 5...they click a on a pay icon and a pay page page comes up
> 6....In this pay page I have put in fields that puts in their email automatic
> then select box for type of payment etc
>
> 6...Now what I cannot find out how to do is this
That's second step 6. Conception error :) Moreover this has nothing to
do as a step.

> 7.. In side this form I want to put in their user name and password that they
> logged in with BUT not have it shown in that pay page
That's not a good idea to put the password in the page. Transmit the
username if you want to but not the couple username/password. If you
need to check back, crypt this with md5() and check back.
Use <input type='hidden' name='' value=''> to put it in the page
without displaying it (but the info is still VERY VERY easy to recover
as it's in the HTML source code.

> 8 when they have clicked the other things on that form and click pay I want
> it to send to a php script then from that upto the CCBIll site sign in form
> and parse in the user name and password etc
See above about the password stuff.

> Also When it as passed it to the php script How could I test that script to
> see if as passed it in all ok
Check returned values...

> I have done loads of search's with google but could not find any info on this
> or a script
Check again Google...

> Please can anyone point me in the right direction
Study and study and study before you put your website online.
Considering your knowledge, playing with money is not a funny game.
Reading your question I'm not confident in your website security thus
won't pay anything.

> Many Thanks
You're welcome

Hi jedi121

Thank you for the info

Please see below


On Fri, 27 Feb 2004 01:28:01 +0100, Jedi121 <jedi121news@free.fr.Removethis> wrote:

>hope@hope.com a écrit le 26/02/2004 :
>> Hi all
>Hi
>
>> well I will try to explain the best I can
>> 1...I have a php script with msql
>> 2....A user comes to the site and reg with user name and password
>> 3....they log in with username and password
>> 4....Now if they want to view certain parts of the site they will pay
>> 5...they click a on a pay icon and a pay page page comes up
>> 6....In this pay page I have put in fields that puts in their email automatic
>> then select box for type of payment etc
>>
>> 6...Now what I cannot find out how to do is this
>That's second step 6. Conception error :)

Well yes typo error
====================================
> Moreover this has nothing to do as a step.

Yes I know
========================
>> 7.. In side this form I want to put in their user name and password that they
>> logged in with BUT not have it shown in that pay page


>That's not a good idea to put the password in the page. Transmit the
>username if you want to but not the couple username/password. If you
>need to check back, crypt this with md5() and check back.

Yes I know, I did not explain this well at all, after looking at it
What I should have said is, after they have logged in and filled in the other things on the form then this is sent to a php script

This script them looks at the log info IE user name and password and send it from that

SO hence NO password is on that form

This is from CCBill info on parsing information to there sign up form

That is the part that I cannot find out how to do IE find user name and password from the log from the user. then put it in the php script to send to CCBill
along with the other information that they have put in the form.
=========================================
>Use <input type='hidden' name='' value=''> to put it in the page
>without displaying it (but the info is still VERY VERY easy to recover
>as it's in the HTML source code.

Yes I agree with you BUT as I said that statement was WRONG Sorry about that
=========================================
>> 8 when they have clicked the other things on that form and click pay I want
>> it to send to a php script then from that upto the CCBIll site sign in form
>> and parse in the user name and password etc
>See above about the password stuff.
>
>> Also When it as passed it to the php script How could I test that script to
>> see if as passed it in all ok
>Check returned values..

I presume you mean to search the php site for that
========================.

>> I have done loads of search's with google but could not find any info on this
>> or a script
>Check again Google...

All very well saying that BUT could you not give some example
======================
>> Please can anyone point me in the right direction
>Study and study and study before you put your website online.
>Considering your knowledge, playing with money is not a funny game.
>Reading your question I'm not confident in your website security thus
>won't pay anything.

How do you know how the security of my site is?

Many thanks