I have a demo up for integrating Authorize.net’s new Direct Post Method gateway; it’s actually rather easy once you overcome the errors in their documentation. And yes, the x_login hidden field is visible in a view source, but it’s useless without other keys and it would be visible in any form in live use anyway. Several hashes are generated and compared; without the keys for these hashes that one value won’t mean anything.
Thanks for sharing!!
It took a while, but I’ve finally got it using a custom input form. I’ll do a proper writeup of the integration as soon as the site I’m doing this for is finished.
As long as it’s not getting hammered too hard (so far only two or three submissions a day) I’ll leave it live to my sandbox developer’s account. If it starts getting a heavier load I’ll have to just do emulations and show screenshots. I’ll also display samples of the emails received.
Unfortunately the archive of this old Evo-based demo, now on sottwell.pogwatch.com, is broken. I'll try to get a new one up on sottwell.com this week.
Sorry, I don't have that any more.