I have a form on my site that submits a transaction to Virtual Merchant. Three of the parameters need to be hidden because they are account information. I have tried various approaches.

1) server-side include with the three parameters, but they still show if you look at the page source.

2) calling an intermediate lasso page that combines the parameters from the form with the three parameters and does a URL redirect. Unfortunately this is the equivalent of a "Get" so the parameters are in the address bar.

3) making a lasso page with an ] [Include_URL: 'https://www.myvirtualmerchant.com/VirtualMerchant/process.do',
-POSTParams=(Variable: 'POST_Params')] as described in the Language Guide. I changed the "action=process.do: to go to the VirtualMerchant process.do) The problem with this solution is that the customers are actually entering their credit card information on my site and not the Virtual Merchant site. So I trade the problem of exposing the three parameters for another problem. My employer does not want me to taking in credit card information on our servers.

Does anyone have a solution using Lasso so I can hide these parameters and avoid taking credit card information from my web page?

Thanks,

Liz

------------------------
Liz Quigg
Fermilab
MS 226, Box 500
Batavia, IL 60510
630 840-2631
liz@fnal.gov<mailto:liz@fnal.gov>



#############################################################
This message is sent to you because you are subscribed to
the mailing list Lasso
Lasso@lists.lassosoft.com
To unsubscribe, E-mail to: <Lasso-unsubscribe@lists.lassosoft.com>
Send administrative queries to <Lasso-request@lists.lassosoft.com>