Home > Offices > Information Technology Services > About ITS | Account eCommerce Policy

ELECTRONIC COMMERCE POLICY

If your Smith department, office, or group wishes to:

• Allow the public to use an interactive on-line form hosted on a Smith web server to order a product or service, or register for a class or event,
  
  AND
  
  
• Allow users to pay for that product, service, or registration using a credit card,

You MUST follow the process described in this document. Following this process ensures that the privacy and security of users' financial data is protected, and the security of the Smith network is maintained.

When the process described below is followed correctly, all credit card information will be sent directly to CyberSource, an electronic-payment processing company, and will never be captured or stored on a Smith server.


Part 1. Department & developer responsibilities
Part 2. ITS responsibilities

Part 1. Department & Developer Responsibilities

All of the following steps (except #6) can be done before ITS connects the form to CyberSource. The more testing that can be done beforehand, the faster the implementation process will go.

1. Obtain a vendor ID number (v-number) from the Controller's Office.

2. Design all web pages and any required code or calculation scripts, including:

• Forms for gathering information
• Javascript/PHP code for calculating fees, discounts, etc.
• Javascript/PHP code to accommodate registration of participants qualifying for free events
• PHP code for email receipt or confirmation
• Tracking numbers or other unique identifiers to embed in forms
• Confirmation pages
• Thank-you pages

3. Add all required Cybersource fields, keeping field names exactly as written:

• Credit Card Type
• Card Number
• Exp. Month
• Exp. Year
• Billing First Name
• Billing Last Name
• Billing Email
• Billing Street
• Billing City
• Billing State
• Billing Zip Code
• Billing Country
  

To view the required PHP code that must be used to generate the credit card data fields correctly, click here.

Click here to see a sample form that incorporates the required credit card data fields, generated from the required PHP code. (The credit card part of this form would work properly only after ITS added the CyberSource connections.)

4. If needed, obtain a Groupwise email alias from ITS, so you can have all forms submitted to this alias and keep them separate from your regular emails. Contact the User Support Center at x4487 with your request.

5. Test to confirm that your form works as intended, input fields send the correct data, email receipts work as expected, and confirmation/thank-you pages function properly.

6. After ITS connects the form to CyberSource, test the form with test credit card information, and then test it "live" with a real connection and a real credit card.

Back to top>

Part 2. ITS Responsibilities

After steps 1 through 5 above are completed, ITS staff will:

• Connect your web forms to CyberSource.
  
  
• Test credit card workflow and confirm that all fields send and return correctly.
  
  
• Make the form live after all testing is complete.