- Mark all as New
- Mark all as Read
- Float this Blog to the Top
- Bookmark
- Subscribe to RSS Feed
- Invite a Friend
If you're looking for insights into the payments industry, check out Visa's blog, Visa Viewpoints.
Read more...
You have registered your domain name, built your website and have added all the products or services that you'd like to sell. Now what? Your next step is to get a merchant account and a gateway account so that you can accept online payments from your customers.
Read more...
This weekend the US will be switching to Daylight Savings Time. While this should have little impact, some merchants using SIM or DPM may experience errors related to their transaction fingerprint (RRCs 97, 98, 99 or 103.)
The transaction fingerprint depends on a timestamp expressed in POSIX Time, sometimes called UNIX Epoch Time. Simply put, it is the number of seconds since January 1, 1970, at Midnight UTC. If you take the current time in the server’s time zone and convert that to UTC, and then use that to calculate POSIX Time, that may introduce the risk of the time being miscalculated when the server switches from Standard Time to Daylight Savings Time. This will cause transaction fingerprints to fail.
To avoid this, we recommend the following:
- Take care to use whatever options are available in your scripting language of choice to use POSIX time automatically, instead of trying to convert from local time to POSIX time. Most scripting languages support POSIX timestamps.
- Make sure the Web server is using UTC, not local time.
- The operating systems on Web servers should be kept up to date. Since Daylight Savings Time is defined by law and is subject to change, servers may need to be updated to reflect changes.
- Where possible, Web servers should use the Network Time Protocol (NTP) to keep their clocks synchronized.
Tokenization is used in payment systems and payment integrations to replace sensitive credit card data in a business system so the system no longer has to be subject to PCI Compliance regulations.
- How does Tokenization work?
- Who can use Tokenization?
- How does Tokenization compare to encryption?
- How does CRE Secure work with Authorize.Net to provide complete tokenization?
What things you should know when using an Authorize.Net test account. Read on for more info.
Read more...
If you're confused about what the abbreviations CNP and CP actually mean and wonder why you should even care, read on my friend!
Read more...In the final part of this series we make some small changes to make our form ready for live websites and offer a few ideas for how you can improve the form even further. Read more...
If you haven’t already checked out the Affiliate Reseller program I would suggest you take a few minutes to see what the program has to offer.
Read more...
Certified Partner Programs have become quite common, find out why the Authorize.Net Certification Program is unique and can add a new lead source to your business.!
Read more...As we near the end of our payment form saga we continue our incremental improvements by refactoring our PHP code to make it easier to maintain. Read more...
Newcomers and veterans alike, no matter what stage in the development process you’re in, read on to find out where some of the best resources in our Developer Center are located.
Read more...
In this installment of our series we use HTML and CSS to enhance our form's appearance and increase usability even more.
Read more...
Yesterday, Visa released their Best Practices for Mobile Payment Acceptance Practices. Read on to find out more.
Read more...
We continue to improve upon the payment form we have built in the first seven parts of this series by using JavaScript to increase the usability of our form.
Read more...
When you’re designing a payment form or other application, you may find that you need to submit certain fields for your merchant that aren’t specifically supported or called out in our integration guides. Enter the Merchant-Defined Field (MDF)—an easy solution for this common need.
Read more...
In the first six parts of this series we have built a web form capable of handling online payments and have begun the process of refining and improving it. In Part 7 we continue to improve upon it by learning how to prevent bots from automating form submissions and potentially costing us big bucks.
Read more...
Mobile payments are all the talk these days, but what security hurdles need to be overcome?
Read more...
The payment form we created in the first five parts of this series is very good. But it could be better. Part 6 begins a new chapter in this series where we improve upon our payment to make it more usable, secure, and maintainable. We begin by preventing users from making duplicate form submissions by using the POST/REDIRECT/GET design pattern.
Read more...
In Part 5 of our series we are past receiving and validating data and get to the nitty gritty of processing the payment using the PHP SDK.
Read more...
Ever wondered about PCI-DSS or PA-DSS and thought “why me” or “why bother”? Read on for a little insight.
Read more...
In part 4 of our series we take the errors we captured in part 3 and display them to our users in a friendly and intuitive way.
Read more...
In the world of development, it’s easy to get confused by the differences between these two. It is not uncommon to see some companies provide you an SDK and call it an API. Read on for a brief definition of the terms as viewed by Authorize.Net.
Read more...
In part 3 of our series on handling online payments we take the data we sanitized in Part 2 and validate it to make sure it is values we expect and can work with.
Read more...
In retail merchant software (like our Credit Card Terminal app), exposing the AIM void and credit actions directly to the user is a poor choice. I'll talk about why and propose an alternative "unified" refund action, including sample code.
Read more...
Relay Response is a useful tool for customizing your own receipt page and handling transaction information. Here we’ll talk about some basic troubleshooting tips.
In part 2 of our series on handling online payments we take the form we created in part 1 and show how to properly receive and sanitize the information. Examples of how to do this with PHP is included.
Read more...
If you’ve ever been confused about the differences between test accounts and live accounts, or test mode and live mode, then check out this brief explanation of what each is and what each does.
Read more...

