Cybersource Developer Community Cybersource Developer Community

joel_54321 · 11-15-2023

Hi allI'm looking into using Accept Hosted for a client — to use Customer & Payment Profile IDs for monthly dynamic charges.I want to better understand the security risks involved. (I've got the tech chops to build the site*, it's the security I'm co...

joel_54321 · 12-08-2023

Thanks so much, @AlyKhan Yes, we'll be using HTTPS, keeping the keys off of the web server, etc. My biggest concern has been if someone were to gain access to the web server itself and then modify the PHP to output the keys (as text). I guess one big...

joel_54321 · 11-27-2023

Any other thoughts from anyone?(I'm thinking especially if someone got direct access to the web server and could change the PHP to simply output the keys…?)TIA,-Joel

joel_54321 · 11-17-2023

Thanks @marine2026 . I'm aware that the values need to be kept private, however I'm asking — in the case of some horrible breach, etc. — what would someone be able to do if they were to acquire the Login ID & Transaction Key.Anybody?TIA,-Joel

Cybersource Developer Community Cybersource Developer Community

Your latest statistics

User Activity

Accept Hosted - What could someone do if they got Login ID & Transaction Key?

Re: Accept Hosted - What could someone do if they got Login ID & Transaction Key?

Re: Accept Hosted - What could someone do if they got Login ID & Transaction Key?

Re: Accept Hosted - What could someone do if they got Login ID & Transaction Key?