Page 1 of 1

Looking for an expert PHP/MySQL programmer

Posted: Wed Jul 07, 2004 12:44 pm
by voltrader
We're having problems integrating a merchant payment gateway to our site; specifically, we lose our user's session when going from the unencrypted url to the ssl-url. The user is logged-out and is required to log-in again at the billing stage, which makes for a poor experience.

The bulk of our site was originally outsourced offshore, and the php code is not well remarked. There are roughly 100 pages to our site, but only about 8-10 related to billing, including the header which calls all the "includes" files.

An expert php coder may be able to identify the problem quickly.

Please inbox me with a quote and your credentials.

Posted: Wed Jul 07, 2004 1:46 pm
by magicrobotmonkey
Do you have a DB back end? This sort of thing may be very extensive as I don't belive that sessions will go cross-url.

Posted: Wed Jul 07, 2004 2:11 pm
by voltrader
Yes, we are using a MySQL db

Posted: Wed Jul 07, 2004 4:01 pm
by Weirdan
Perhaps I know what causing that problem. You can pm me or email @ weirdan@gmail.com

Posted: Wed Jul 07, 2004 5:37 pm
by qads
yup, its a cross url problem, I noticed it when i was makeing a shopping cart for a client about a year ago.

Assumeing you have user accounts, and user is loged in.

whoever you hire, all s/he needs to do is to get the user id, and a random string, insert both into mysql table, pass the string to payment gateway in successful/failure page urls, and when it gets back to one of the these pages, use the random string, check db to make sure that the user was indeed from this site, and log him/her back in.

thats about it, but make sure the random string is VERY random, better yet, encrypt the string aswell.

good luck

Posted: Wed Jul 07, 2004 5:46 pm
by Weirdan
there's simpler solution I'm trying to sell to voltrader :lol:

Posted: Wed Jul 07, 2004 6:47 pm
by qads
lol, simpler eh? care to share? msg me if you dont wanna go public with it :P.

Posted: Wed Jul 07, 2004 6:50 pm
by Weirdan
voltrader has paid in full without any delay.

2quads I'll pm you tomorrow... Now I'm going to fall asleep *yawn* ;)

Posted: Wed Jul 07, 2004 6:53 pm
by qads
Weirdan wrote:2quads
u like to add extra letters to my name? lol...and good luck, and dont say best man won, cos i never "bid" for it in the first place :P.

No secret

Posted: Wed Jul 07, 2004 7:05 pm
by voltrader
No msg