RE: [cobalt-users] shop assistant encrypt script problems

["Liam DelaHunty" <mail@xxxxxxxxxxxxxxxxx>]

Sorry this won't solve your problem, and may give you more !

Are you sure you want to be emailing out the data even if it is encrypted.
As was once mentioned in a post on the PHP_UK list.

"I'd be wary about trying this anyway; SMTP Email is not meant to be a
secure transmission medium. There is no guarantee of delivery. Failed
delivery can cause the original message to be forwarded to each postmaster
in the route....It also increases the opportunity to damage the data."

So perhaps you'd be better encrypting the data, and storing it in a DB, and
emailing the client to say, "Hey, someone wants to give you money - please
log in..!"

Kind regards,
Liam


-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Neil D. James
Sent: 17 October 2001 19:08
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: [cobalt-users] shop assistant encrypt script problems


Hi y'all,

I'm trying to move a shopping cart system (shop@assistant) from a standard
hosting solution (where it works fine) onto our new RAQ4 and I'm having
problems with the script that encrypts the customers card details.

The checkout procedure launches an encryption script on a secure server,
via a new browser window, which collects the customer card details and then
uses PGP to send them as an encrypted email.

The collection part works, and the data is encoded and mailed, however the
customer is then supposed to get a new page saying: 'thanks for your order,
click here to continue.. etc'.

Instead all I get is the standard Cobalt Internal Server Error page.

The web server logs give me this:

malformed header from script. Bad header=Pretty Good Privacy(tm) Versio:
/usr/cgiwrap/cgiwrap

It looks to me as if it might be a permissions problem in the jump from PGP
to the rest of the script and is being stopped by cgiwrap, but hey, I'm the
novice here :)

The script sends the collected data through PGP like this:

open PGP, "| $pgpe $pgpargs | mail -s 'Encrypted transaction' $destname";

[ lots of print statements ]

close PGP;

then outputs some standard html.

Tech support blame the script, the shopping cart vendor blames the cgiwrap
and everyone else is blaming me ;(

I'll be most grateful for any help as this has been going on for some time
now:
I've got very little hair left already and this isn't helping.
Cheers,

Neil
__
      _
 |\ ||_ | \    Neil James
 | \||_ |_/    ned@xxxxxxx

http://www.iom.org

Morses law:
      "There's always time for one more pint"

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users