Re: encryption madness
This WebDNA talk-list message is from 2003
It keeps the original formatting.
numero = 47146
interpreted = N
texte = Two things...1) By using only a single URL in your purchase tag, you are getting the raw encrypted data written to the order file, as you have observed. The problem is that SOMETIMES the encrypt may result in characters that will mess up the order file formatting - like tabs or returns. Using a double-URL will prevent these problems by encoding the dangerous characters. Note that if you do double-URL the value, then you need to UNURL *INSIDE* the DECRYPT in order to get the original value back out (e.g. [decrypt seed=abc][unurl][accountnum][/unurl][/decrypt])2) If you WERE to use WebMerchant to process the transactions, WebMerchant would not be able to use the encrypted account number to pass it on to the transaction processor, because WebMerchant would not know it was encrypted or what seed it was encrypted with, and hence could not decrypt the number.- brian On Thursday, January 23, 2003, at 06:29 AM, Kimberly D. Walls wrote:> I don't understand. A couple of people have posted that it will not > work, > that you can not encrypt a credit card number going into the accountnum > field of an orderfile, but I'm doing it and it's working... I can look > at > that orderfile and see that the credit card number has been encrypted > in the > correct field, so explain to me, if you would... in what way doesn't it > work? > > Isn't it the purpose of this list to figure things out because SM > doesn't? > > Consider, yesterday, I posted numerous times about what I was doing to > secure my credit card information and had more than one reply telling > me > that it seemed to be ok. Now, today... more replies telling me to do > 10 > more things before I can rest easy. Nothing has come from SM, unless I > missed it, and I'm like everyone else on this list... very dependant > upon > this list and the people who use it. > > I'm not insisting on doing things my way, simply trying to figure > out > why there are some who say it doesn't work, yet I look at it and it > appears > to be working, so I'm telling you... that whey I use the following > code: > > [purchase cart=[cart]&accountnum=[url][encrypt > seed=abc][accountnum][/encrypt][/url] > > Then, go to the specific orderfile, I can see that the credit card > number is > encrypted. > > > > > > -----Original Message----- > From: WebCatalog Talk [mailto:WebDNA-Talk@talk.smithmicro.com]On Behalf > Of Kenneth Grome > Sent: Thursday, January 23, 2003 9:03 AM > To: WebCatalog Talk > Subject: Re: encryption madness > > >> Well, at this point in time, the orderfiles are not being processed by >> WebMerchant... so for me, in this instance, it seems to be working. > > WebMerchant has nothing to do with it, but go ahead and continue with > your way of doing it if you insist ... > > > Sincerely, > Kenneth Grome > -- Brian Fries, BrainScan Software -- http://www.brainscansoftware.com -- ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list
. To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Associated Messages, from the most recent to the oldest:
Two things...1) By using only a single URL in your purchase tag, you are getting the raw encrypted data written to the order file, as you have observed. The problem is that SOMETIMES the encrypt may result in characters that will mess up the order file formatting - like tabs or returns. Using a double-URL will prevent these problems by encoding the dangerous characters. Note that if you do double-URL the value, then you need to UNURL *INSIDE* the DECRYPT in order to get the original value back out (e.g. [decrypt seed=abc][unurl][accountnum][/unurl][/decrypt])2) If you WERE to use WebMerchant to process the transactions, WebMerchant would not be able to use the encrypted account number to pass it on to the transaction processor, because WebMerchant would not know it was encrypted or what seed it was encrypted with, and hence could not decrypt the number.- brian On Thursday, January 23, 2003, at 06:29 AM, Kimberly D. Walls wrote:> I don't understand. A couple of people have posted that it will not > work, > that you can not encrypt a credit card number going into the accountnum > field of an orderfile, but I'm doing it and it's working... I can look > at > that orderfile and see that the credit card number has been encrypted > in the > correct field, so explain to me, if you would... in what way doesn't it > work? > > Isn't it the purpose of this list to figure things out because SM > doesn't? > > Consider, yesterday, I posted numerous times about what I was doing to > secure my credit card information and had more than one reply telling > me > that it seemed to be ok. Now, today... more replies telling me to do > 10 > more things before I can rest easy. Nothing has come from SM, unless I > missed it, and I'm like everyone else on this list... very dependant > upon > this list and the people who use it. > > I'm not insisting on doing things my way, simply trying to figure > out > why there are some who say it doesn't work, yet I look at it and it > appears > to be working, so I'm telling you... that whey I use the following > code: > > [purchase cart=[cart]&accountnum=[url][encrypt > seed=abc][accountnum][/encrypt][/url] > > Then, go to the specific orderfile, I can see that the credit card > number is > encrypted. > > > > > > -----Original Message----- > From: WebCatalog Talk [mailto:WebDNA-Talk@talk.smithmicro.com]On Behalf > Of Kenneth Grome > Sent: Thursday, January 23, 2003 9:03 AM > To: WebCatalog Talk > Subject: Re: encryption madness > > >> Well, at this point in time, the orderfiles are not being processed by >> WebMerchant... so for me, in this instance, it seems to be working. > > WebMerchant has nothing to do with it, but go ahead and continue with > your way of doing it if you insist ... > > > Sincerely, > Kenneth Grome > -- Brian Fries, BrainScan Software -- http://www.brainscansoftware.com -- ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Brian Fries
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
PCS Frames (1997)
Re:E-mailer application times out (1998)
fresh eyes needed. Append won't work. (2000)
problems with 2 tags shakur (1997)
Url encoded fun (1998)
Multiple security dbs (1997)
Thanks ! (1997)
WebCat2b13MacPlugIn - More limits on [include] (1997)
Calculating multiple shipping... (1997)
creating writefile data from a nested search (1997)
SiteGuard Admin Feature ? (1997)
SKU lookup (1997)
Webcat bannersleuth Qs (2001)
How to delete all files in a folder? (2001)
[WebDNA] search command problem (2009)
.htaccess to make WebDNA serve HTML (2007)
Re2: frames & carts (1997)
Re:no template caching (1997)
WebCat2 - Getting to the browser's username/password data (1997)
Problem 2: Prefs file... (1997)