pci compliance - Braintree Drop-In UI v.zero how to retrieve the payment ID with PHP / to stay PCI QSA A -
i'm new braintree , read need pci qsa compliant... there qsa type , v.zero ( drop-in ui ) seems best approach.
i followed steps in: https://developers.braintreepayments.com/start/hello-client/javascript/v2
the form have action="/checkout" (or other path...) tutorial doesn't provide needed code retrieve payment status (example paid, id of transaction).
i don't want store credit card info.
full disclosure: work developer braintree
that portion of tutorial outlines how client sends credit card information braintree servers returns payment method nonce via post parameters.
you can use payment method nonce create , inspect transactions , payment methods while remaining pci compliant. example, if have form posts /checkout
, in checkout logic:
$amount = '10.00'; /* replace amount want */ $nonce = $_post["payment_method_nonce"]; $result = braintree\transaction::sale([ 'amount' => $amount, 'paymentmethodnonce' => $nonce ]); if ($result->success){ $transaction = $result->transaction; /* inspect transaction here */ } else { /* handle errors */ }
all of detailed in next portion of tutorial can found here , if have questions can reach out braintree support.
Comments
Post a Comment