1. Secure Online Payment Presented by Tom Hun Web Developer

2. Objectives Convenience Convenience Centralization Centralization PCI (Payment Card Industry) Compliance PCI (Payment Card Industry) Compliance Follow Security Practice Follow Security Practice

3. Technology Tools ASP.NET ASP.NET VeriSign’s PayFlow Pro API (Application Programming Interface) VeriSign’s PayFlow Pro API (Application Programming Interface) MS SQL Database MS SQL Database SSL Encryption SSL Encryption

4. Payment Flow Secure Payment Page Web Form 1Web Form 2 Confirm payment PayFlow Pro API

5. Design Secure Payment Payment DB Secure Payment Page IP Return URL (varchar) Takes GUID as request query string and checks against the database Other Payment data GUID (uniqueidentifier type auto-generated by default in db) DateTime (varchar)

6. Design Web Forms Tuition Payment GUID (uniqueidentifier type, null by default) DateTime (varchar) IP (varchar) Tuition Payment Confirmation page Takes GUID as request query string Other Tuition Data Tuition DB

7. Design Payment DB Tuition DB Tuition Payment Credit Card Payment Page IP DateTime GUID (auto generated) IP DateTime Go To Pay Return URLOther Tuition Data Other Payment data Redirects to Credit Card page by passing GUID

8. Design Credit Card Payment Page Submit Payment PayFlow Pro API Submit Credit Card Info. Returns payment result

9. Design Credit Card Payment Page Payment DB Update and retrieve data Tuition Payment Confirmation Page If unsuccessful, display error message If successful, get returns URL string and redirect here Check and get payment result Tuition DB Update GUID and other Data Email confirmation Retrieve Data