Post a form from code and send the user "there"

Tom Ruby

Working on some asp.net credit card processing code. Scary, eh? I'm actually more of an SQL server guy than an asp.net guy.

The processing company says to just put this html on the page and let the user click the button:

https://I'mnotgoingtoshowyouthis.com" method ="POST">

http://aredactedurlIllhide" />

This brings up the form where the user enters their credit card info and the transaction takes place and the money goes to the account and everybody's happy.

This has me shaking in my boots! Somebody could just view source, copy/paste this into any editor and do all sorts of mischief. I asked the company, and their response was "You can use our sample code that I provided using PHP with Java Script. Otherwise you can develop it however you would like if you do not want to use our sample php code."

So, can I have .net code actually submit this form and send the user there to enter his info so I never expose all the gory details?

4 Replies

Know the answer? Post it — somebody with the same question will find it here.

Upendra Pratap Shahi11y ago
Sure , you will try this. This may helped you.

Kindly mark the answer as accepted answer if helped.
0
Tom Ruby11y ago
I think I like this.

You put the the "form" in the PostData string that you encode into the bytearray that you write to the datastream which gets posted. Then you write the reply to the response that gets sent to the user's browser and when he submits the form it gets posted to the processor as if the user had the original form and clicked the button?

Rats, I have to get out of here in an hour. I'll try it this afternoon.

Thanks,
Tom
0
Upendra Pratap Shahi11y ago
Create a asp button

<asp: button ID="btnSubmit" runat="server" OnClick="button_click"

Text="Pay With credit Card" />

In Code behind

Protected void button_click(..)

{

var request = (HttpWebRequest)WebRequest.Create("https://Imnotgoingtoshowyouthis.com");

request.Method = "POST";

// Create POST data and convert it to a byte array.

string postData = "This is a test that posts this string to a Web server.";

byte[] byteArray = Encoding.UTF8.GetBytes (postData);

// Set the ContentType property of the WebRequest.

request.ContentType = "application/x-www-form-urlencoded";

// Set the ContentLength property of the WebRequest.

request.ContentLength = byteArray.Length;

// Get the request stream.

Stream dataStream = request.GetRequestStream ();

// Write the data to the request stream.

dataStream.Write (byteArray, 0, byteArray.Length);

// Close the Stream object.

dataStream.Close ();

var response = (HttpWebResponse)request.GetResponse();

var responseString = newStreamReader(response.GetResponseStream()).ReadToEnd();

//Returns TURE if the Status code == 200

bool result = response.StatusCode == HttpStatusCode.OK;

// Also read the response from responseString

responseString.Close();

response.Close ();

}
0
Manas Mohapatra11y ago
Hi Tom,

Although you are achieving your goal still you are looking for better security to your application. Great thinking !!

Yes, you can implement HttpWebRequest class to send your data to server.
How to implement: Remove form action action code- only form id, runat atrribute. Then add a server side button like your "Pay With credit Card". Then fillup the form and click on button process data in server side. Make a request to your pay site and submit data. You might change some parts(method type, content type...) in your code what your customer site require data...

Please find sample code below:

Create a asp button
Text="Pay With credit Card" />

In Code behind
Protected void button_click(..)
{
   var request = (HttpWebRequest)WebRequest.Create("https://Imnotgoingtoshowyouthis.com");
   request.Method = "POST";

   // Create POST data and convert it to a byte array.
   string postData = "This is a test that posts this string to a Web server.";
   byte[] byteArray = Encoding.UTF8.GetBytes (postData);
   // Set the ContentType property of the WebRequest.
   request.ContentType = "application/x-www-form-urlencoded";
   // Set the ContentLength property of the WebRequest.
   request.ContentLength = byteArray.Length;

   // Get the request stream.
   Stream dataStream = request.GetRequestStream ();
   // Write the data to the request stream.
   dataStream.Write (byteArray, 0, byteArray.Length);
   // Close the Stream object.
   dataStream.Close ();

   var response = (HttpWebResponse)request.GetResponse();
   var responseString = new StreamReader(response.GetResponseStream()).ReadToEnd();
   //Returns TURE if the Status code == 200
   bool result = response.StatusCode == HttpStatusCode.OK;

   // Also read the response from responseString
   responseString.Close();
   response.Close ();
}
0