I have a demo up for integrating Authorize.netâ€™s new Direct Post Method gateway; itâ€™s actually rather easy once you overcome the errors in their documentation. And yes, the x_login hidden field is visible in a view source, but itâ€™s useless without other keys and it would be visible in any form in live use anyway. Several hashes are generated and compared; without the keys for these hashes that one value wonâ€™t mean anything.
Thanks for sharing!!
It took a while, but Iâ€™ve finally got it using a custom input form. Iâ€™ll do a proper writeup of the integration as soon as the site Iâ€™m doing this for is finished.
As long as itâ€™s not getting hammered too hard (so far only two or three submissions a day) Iâ€™ll leave it live to my sandbox developerâ€™s account. If it starts getting a heavier load Iâ€™ll have to just do emulations and show screenshots. Iâ€™ll also display samples of the emails received.
Unfortunately the archive of this old Evo-based demo, now on sottwell.pogwatch.com, is broken. I'll try to get a new one up on sottwell.com this week.
Sorry, I don't have that any more.