pci compliance - Braintree Drop-In UI v.zero how to retrieve the payment ID with PHP / to stay PCI QSA A -


i'm new braintree , read need pci qsa compliant... there qsa type , v.zero ( drop-in ui ) seems best approach.

i followed steps in: https://developers.braintreepayments.com/start/hello-client/javascript/v2

the form have action="/checkout" (or other path...) tutorial doesn't provide needed code retrieve payment status (example paid, id of transaction).

i don't want store credit card info.

full disclosure: work developer braintree

that portion of tutorial outlines how client sends credit card information braintree servers returns payment method nonce via post parameters.

you can use payment method nonce create , inspect transactions , payment methods while remaining pci compliant. example, if have form posts /checkout, in checkout logic:

$amount = '10.00';    /* replace amount want */ $nonce = $_post["payment_method_nonce"];  $result = braintree\transaction::sale([     'amount' => $amount,     'paymentmethodnonce' => $nonce ]);  if ($result->success){     $transaction = $result->transaction;         /* inspect transaction here */ } else {     /* handle errors */ } 

all of detailed in next portion of tutorial can found here , if have questions can reach out braintree support.


Comments