Introduction

In cases where you prefer not to use a hosted payment page, you can submit the required customer data directly from your own form to Fiserv, but be aware that if you store or process sensitive cardholder data within your own application, you must ensure that your system components are compliant with the Data Security Standard of the Payment Card Industry (PCI DSS).

You create the payment form and display it within your website or app. When your customer has entered the card details and presses the "continue" button, the customer's device sends the payment information directly to the Gateway.

Using Direct POST allows you to have full control over the look and feel of the form where your customers enter their card details for payment while simultaneously avoiding the need to store sensitive card data within your systems.

📘

It is important that you check if JavaScript is activated in your customer’s browser. If necessary, inform your customer that JavaScript needs to be activated for the payment process.

Hosted Payment Page

After your customers have decided on their payment method, you present a corresponding HTML-page with a form to enter the payment data as well as hidden parameters containing additional transaction information. In addition to any mandatory fields, your form must contain the following fields (some of which can be hidden) to use the Direct Post option:

Credit / Debit Card Details

SEPA Direct Debit

You can also add Billing and Shipping information into your request.

Validity Checks
Prior to the authorization request for transactions, the Gateway performs the payment methods’ specific validation checks.

For Credit/Debit Card or SEPA Direct Debit transactions the following checks are performed:

• Expiry date of the cards must be in the future
• Card security codes must contain 3 or 4 digits
• Structure of the card number must be correct
• Name of the account holder for SEPA Direct Debit transactions must be submitted
• IBAN for SEPA Direct Debit transactions must be correct and contain up to 34 digits

If an IBAN belongs to one of the following countries: Andorra, Switzerland, United Kingdom (incl. Jersey, Guernsey, Isle of Man), Gibraltar, Iceland, Liechtenstein, Monaco, Norway, San Marino, Vatican City, then the account holder’s address details must be submitted.

Once the submitted data is invalid, the Gateway would usually send a corresponding data entry page to the customer. However, using the silent post feature, you can transmit an additional parameter along with transaction data: ‘full_bypass=true’. In this case, you get the result of the validity check back in the transaction response and can display your own error page.

Sample Code for the HTML Form

<form method="post" action="https://test.ipg-online.com/connect/gateway/processing">

<!-- Hidden fields to be prefilled by the merchant -->   
   <input type="hidden" name="full_bypass" value="true">
   <input type="hidden" name="txntype" value="sale">
   <input type="hidden" name="paymentMethod" value="V">
   <input type="hidden" name="timezone" value="Europe/Berlin">
   <input type="hidden" name="txndatetime" value="<?php echo getDateTime() ?>">
   <input type="hidden" name="hash_algorithm" value="HMACSHA256">
   <input type="hidden" name="hashExtended" value="<?php echo createExtendedHash( "13.00","978" ) ?>">
   <input type="hidden" name="storename" value="10123456789">
   <input type="hidden" name="chargetotal" value="13.00">
   <input type="hidden" name="currency" value="978">
   <input type="hidden" name="language" value="en_US">

<!-- Fields to be entered by the cardholder -->
 <div>
   <!-- credit card number: e.g. 4111111111111111 -->
   <label for="cardnumber">Card Number:</label>
   <input type="text" name="cardnumber" id="cardnumber">
 </div>

 <div>
   <!-- expiration month of the card: e.g. 07 -->   
   <label for="expmonth">Expiration Month:</label>
   <input type="text" name="expmonth" id="expmonth">
 </div>

 <div>
   <!-- expiration year of the card: e.g. 2024 -->
   <label for="expyear">Expiration Year:</label>
   <input type="text" name="expyear" id="expyear">
 </div>

 <div>
   <!-- card security code (CVV/CVC): e.g. 123 -->
   <label for="cvm">Security Code:</label>
   <input type="text" name="cvm" id="cvm">
 </div>

 <div>
   <input type="submit" value="Submit">Pay now</input>
 </div>

</form>