7of9 Posted December 10, 2003 Share Posted December 10, 2003 I was wondering if anyone had tips or suggestions for setting up authorize.net with osCommerce. I have things working but there seems to be some problems. I'd like to know what to look for in the way of problems and the best way to test things and ensure that everything is working as it should. I really don't want to risk customers' information when all can I come up with is "it seems to be working ok", I would much rather be more sure than that. I started in test mode (authorize.net and osCommerce) and everything seemed to be fine. Finally I went to live mode and figured I would test things out by buying one of my own products with my own credit card. This all seemed to work fine - I bought some products, saw them marked as "captured/pending settlement" on authorize.net, and finally after passing the trigger time they were marked as "settled successfully". The problem is though, that I found that I was able to have successful purchases even if I entered some incorrect information. I was able to put in an expiration date that doesn't match my card, and I was able to change my name slightly and it still went through. I changed some of the address and finally got a decline. I did have to put in the valid credit card though. I'm not sure how much of a problem this is but it seems like it should be far more discriminative. When setting things up I'm mostly using the defaults (in osCommerce and authorize.net). Maybe there's something else I need to set up? The set up to this point seemed to be too easy which is one of the things that has me worried. So, now I really don't know what to do, and furthermore I'm really concerned that I don't have the knowledge of what exactly to test to make sure that 1) it works as it should and 2) is safe for our customers to use. Link to comment Share on other sites More sharing options...
7of9 Posted December 10, 2003 Author Share Posted December 10, 2003 No one has any tips to offer? I have since talked with authorize.net and apparently many credit card issuers don't actually check the name or expiration date, only the card number and address so maybe things are working ok. Still, I would like to hear how others go about testing their installation to make sure that everything is secure and set up properly. Link to comment Share on other sites More sharing options...
New 
Recommended Posts
Archived
This topic is now archived and is closed to further replies.