http://dawngregg.com/news/2010/02/on-line-payment-mechanisms.html

最新推荐文章于 2023-10-17 19:39:34 发布
转载 最新推荐文章于 2023-10-17 19:39:34 发布 · 1.5k 阅读 · 0
文章标签：

#payment #mechanism

本文介绍了在线支付机制，包括支付网关的作用及运作流程，并对比了商户支付服务和个人支付服务的区别，帮助创业者理解如何选择合适的在线支付方案。

EntrepreneurIt

Web (and other IT) resources for entrepreneurs

BLOG HOME    DawnGregg.com    Subscribe

Monday, February 22, 2010

On-line Payment Mechanisms

Frequently online businesses want to be able to collect payments over the Internet. This is usually accomplished through some sort of Payment Gateway, which is is an e-commerce service that authorizes payments for e-businesses and online retailers. 
  • It is the equivalent of a physical POS (Point-of-sale) terminal located in most retail outlets.
  • Payment gateways encrypt sensitive information, such as credit card numbers, to ensure that information passes securely between the customer and the merchant.
Payment gateways encrypt information handled through SSL. This reduces the opportunity for fraud, and adds security to the transaction process. Gateways communicate with a variety of entities, including: 
  • The customer
  • The merchant (through their website)
  • Credit Card companies (by verifying information)
  • Internet Merchant accounts that relay order information from the gateway to the merchant's bank account.
There are hundreds of online payment gateway providers that allow you to process commercial transactions over the Web without compromising credit card numbers or other confidential information, they can be grouped into two different groups: 
  • Merchant Payment Services
  • Personal Payment Services
The advantage of using most payment gateways is that you are not responsible for storing your customer's credit card numbers.

Merchant Payment Services

Merchant Payment Gateways use specialized software on the merchant's server to provide for secure payments across the Internet.  
There are numerous Merchant Payment Gateway providers: 
  • VeriSign Payment Services
  • Authorize.net
For you to use most payments via many merchant payment services you must:  
  1. Get an Internet approved merchant account from an affiliated merchant bank. 
    • An Internet merchant account is configured to allow you to accept "card not present" transactions which are specifically designated as originating through the Internet.
  2. Select (or create) code that will be installed on your server that allows you to take payments on your website. 
    • Buy Now Buttons that send payments directly to the Merchant Payment Service
    • Select a pre built shopping cart that automatically connects your Web site to the payment gateway and to a database on your server, allowing you to accept payments immediately and write orders and other customer information to your database.
  3. Register with with the merchant payment gateway provider: The online registration guides you through the process of setting up your web page to process payments. 
How the Merchant Payment Gateway works: 
  • Step 1: The merchant submits a credit card transaction to the Merchant Payment Gateway on behalf of a customer via secure Web site connection, retail store, MOTO center or wireless device (using the buy now buttons or shopping cart provided by the merchant payment service provider).
  • Step 2: The Merchant Payment Gateway receives the secure transaction information and passes it via a secure connection to the Merchant Bank's Processor.
  • Step 3: The Merchant Bank's Processor submits the transaction to the Credit Card Network (a system of financial entities that communicate to manage the processing, clearing, and settlement of credit card transactions).
  • Step 4: The Credit Card Network routes the transaction to the Customer's Credit Card Issuing Bank.
  • Step 5: The Customer's Credit Card Issuing Bank approves or declines the transaction based on the customer's available funds and passes the transaction results back to the Credit Card Network.
  • Step 6: The Credit Card Network relays the transaction results to the Merchant Bank's Processor.
  • Step 7: The Merchant Bank's Processor relays the transaction results to the Merchant Payment Gateway.
  • Step 8: The Merchant Payment Gateway stores the transaction results and sends them to the customer and/or the merchant. This step completes the authorization process – all in about three seconds or less!
  • Step 9: The Customer's Credit Card Issuing Bank sends the appropriate funds for the transaction to the Credit Card Network, which passes the funds to the Merchant's Bank. The bank then deposits the funds into the merchant's bank account. This step is known as the settlement process and typically the transaction funds are deposited into your primary bank account within two to four business days.
Advantages:  merchant payment services is that it provides the merchant with a fully functional, externally managed payment processing system that allows:  
  • Risk Management – Sensitive data is stored in the payment service data center, never on your computer.
  • Accept a Variety of Payments – Most merchant services will allow you to accept all major credit cards, eCheck.Net (electronic checks from bank accounts), gift cards, and signature debit cards.
  • Manage Your Transactions – Most merchant services provide a Merchant Interface which will allow you to to monitor and control payments through your Web site.
  • Prevent Fraud – Many tools can help to identify suspicious transactions using fraud tools.
  • Receive Payments Quickly – Your funds are automatically deposited into your merchant bank account within days.
  • Free Help – Most services provide live technical and account support to merchants, as well as access to online documentation and user guides
  • While you have access to all transaction-critical information, VeriSign protects credit card data with the highest level of security, so you never have to worry about compromising your customer's sensitive credit card data.
Disadvantages: Setting up a merchant account generally requires you to pay set-up fees, monthly fees and per transaction fees which may not be cost effective for new ventures with small volumes or for small purchases, such as "pay per play" on-line video games: 
  • Setup Fee: $99.00
  • Monthly Gateway Fee: $20.00
  • Per-Transaction Fee: $0.10

Personal Payment Services

PayPal, Amazon Payments & Google Payments enables any individual or business with an email address to securely, easily and quickly send and receive payments online. 
Personal payment services cater to small businesses that do not want to set-up their own online payment mechanisms.
Personal payment services cater has a number of options that allows users to quickly set-up online payment mechanisms on their Web sites: 
  • Request Money  just enter the recipient's email address and the amount you are requesting. The recipient gets an email and instructions on how to pay you using PayPal at www.paypal.com.
  • Buy Now Buttons Buy Now Buttons or Pay now buttons are a low-cost way for you to accept credit card and bank account payments, and can be fully integrated with your website in a few easy steps.
  • Subscriptions allows you to set-up subscriptions for recurring payments from customers.
On PayPal:
  • When a buyer clicks the Buy Now button, he will be taken to a secure PayPal payment page, where he can log in to an existing PayPal account or sign up for a new one, and quickly complete the purchase.


 
If you dynamically generate portions of your site, you can populate your Buy Now buttons dynamically and save time by updating the variables with information from your database. To use the button above for a different item, you would only need to edit two variables: item_name, and amount.


PayPal Shopping Cart: When you use PayPal's free Shopping Cart on your website, your customers can purchase multiple items with a single payment, browse your entire selection, and view a consolidated list of all their items before purchasing. The PayPal Shopping Cart is a low-cost way for you to accept credit card and bank account payments, and can be fully integrated with your website in a few easy steps.


 
When a buyer clicks the "Add to Cart" button, a new window will appear listing the contents of the buyer's PayPal Shopping Cart, including the item just added. To make the purchase, the buyer clicks "Checkout" from this window. 


Personal payment services charge fees based on the type of account you set-up and how much you sell.  Currently the fees for PayPal, Amazon Payments and Google Checkout are the same and are paid per transaction:
  
  Premier/Business Account
Open an AccountFree
Send MoneyFree
Withdraw FundsFree for US bank accounts
Add FundsFree
Receive Funds2.2% + $0.30 USD to 
2.9% + $0.30 USD
Multiple Currency TransactionsExchange rate includes a 2.5% fee*

Advantages: The advantages of personal payment services is that they are lower cost for small payment volumes and they are very easy to set up.

Disadvantages: The customer completes the transaction on the payment service website - which can look less professional than having your own integrated payment mechanism.
Whatever payment service you choose, it is your responsibility as an Internet merchant to use a reputable payment service that will handle credit card information with care, minimizing the likelihood that information for your customers will be lost, stolen or misused in any way.

Labels: payments, website tips

0 Comments:

Post a Comment

 

2019加密市场金融借贷领域研究报告（英文版） | TokenInsight
TokenInsight的博客
06-26 1万+
数字资产行业在2018下半年开始经历“寒冬”后终于在2019年一季度出现回暖态势。主流加密通证在一季度增幅超过20%，交易活跃度与市场参与人数环比显著提升。在市场结束一段...
Networked Graphics: Building Networked Games and Virtual Environments (Anthony Steed / Manuel Fradin...
weixin_34221276的博客
03-16 7788
PART I GROUNDWORK CHAPTER 1 Introduction CHAPTER 2 One on One (101) CHAPTER 3 Overview of the Internet CHAPTER 4 More Than Two PART II FOUNDATIONS CHAPTER 5 Issues in Networking Graphics CHAPTE...
Hypertext Transfer Protocol -- HTTP/1.1
weixin_33749131的博客
06-12 1309
2019独角兽企业重金招聘Python工程师标准>>> ...
【无标题】virtual law footnote
热门推荐
weixin_42786150的博客
02-15 3万+
Statutes and Regulations Communications Decency Act, 47 U.S.C. § 230(c)(1), (e)(2) (2010) Digital Millennium Copyright Act, 17 U.S.C. § 1201(a)(1)-(2), (b)(1) (2006) In re Implementation of Section 6002(b) of the Omnibus Budget Reconciliation Act of 199
chromium 54 chrome 各个版本发布功能列表(109-128)
一朵花开的时间
10-17 8185
chrome 各个版本发布功能列表(109-119)
GNU/Linux-libre from source code (Loongson2F very good!!!)
junmuzi的专栏
04-20 3888
原文网址：http://christophe.jarry.ouvaton.org/gnu-linux/gllfsc/gllfsc-loongson2f-1.0.html GNU/Linux-libre from source code Short Contents GNU/Linux-libre from source code for Loongson 2F1 In
《Developing and maintaining clients’ trust through institutional mechanisms in online...》中英文对比文献翻译
weixin_44521350的博客
04-22 3645
《Developing and maintaining clients’ trust through institutional mechanisms in online service markets for digital entrepreneurs: A process model》中英文对比翻译 引用：Dua W, Mao J Y. Developing and maintaining c...
CysberSecurity Law-2023 Spring
xjw_985的博客
06-04 2万+
Recital 25: Applicable to Controllers Due to International Law.比如领事馆, where an EU MS’s laws apply outside the EU。For example health emergency, and employee collapse at work(工伤).Provisions(条款) inserted in。
.NET Apache Spark做基于商品推荐系统如此简单
inet_ygssoftware的博客
11-05 7258
.NET大数据终于上线了，花业余时间来帮把自己做推荐系统使用的算法分享一波
Http1.1_1
gulanga5的博客
02-20 936
http1.1
http://www.w3.org/TR/html4/loose.dtd
01-02
HTML 4 includes mechanisms for style sheets, scripting, embedding objects, improved support for right to left and mixed direction text, and enhancements to forms for improved accessibility for ...
Python-kafka集群搭建PythonAPI调用Producer和Consumer
08-12
- 开启SASL认证，设置`security.inter.broker.protocol=SASL_PLAINTEXT`和`sasl.enabled.mechanisms=PLAIN`。 - 配置SASL认证的用户和密码，这通常涉及Jaas配置文件，确保Jaas配置文件路径正确。 ### 3. 配置...
基于C#与MySQL的高分课程设计：人事工资管理系统完整源码与数据库
12-05
本资源提供了一套采用C#编程语言结合MySQL数据库技术构建的企业人力资源与薪酬管理软件解决方案。该方案包含完整的程序源代码及配套的结构化数据存储文件，专为满足高等院校计算机相关专业课程设计或毕业设计的高标准要求而准备，其设计目标旨在获得不低于九十五分的优异评价。 整套材料经过系统化整合与严格测试，确保了各功能模块的完整性与可执行性。用户获取后无需进行额外的环境配置或代码调整，即可直接部署并启动运行。系统架构严谨，实现了对企业员工信息档案、考勤记录、绩效评估及薪资核算等核心业务流程的数字化管理，显著提升了相关事务的处理效率与准确性。 该软件工程实践案例不仅展示了C#在Windows桌面应用开发中的实际应用，也体现了MySQL在中小型数据管理场景下的稳定表现，适合作为学习现代软件开发流程与数据库设计原理的参考范例。 资源来源于网络分享，仅用于学习交流使用，请勿用于商业，如有侵权请联系我删除！
产品碳足迹软件，全球前10强生产商排名及市场份额（by QYResearch）.pdf
12-05
产品碳足迹软件，全球前10强生产商排名及市场份额（by QYResearch）.pdf
深入浅出Core Data开发
12-05
本书系统讲解了Core Data在iOS开发中的应用，涵盖数据建模、增删改查、迁移与版本控制等核心技术。通过构建真实项目，读者可掌握高效数据管理的最佳实践，理解NSManagedObject、NSFetchRequest及NSFetchedResultsController等关键类的工作机制。书中还融合了iCloud同步、多设备通信与高级UI设计，帮助开发者打造高性能、易维护的移动应用。适合具备基础iOS知识的进阶开发者阅读。
Rails测试实战指南
12-05
本书系统讲解Rails应用中的自动化测试实践，涵盖单元测试、功能测试、集成测试与验收测试。通过真实案例深入探讨Test::Unit、Shoulda、RSpec、Cucumber等主流测试框架的使用技巧，并介绍测试数据管理、模拟对象、覆盖率分析及遗留系统测试等关键主题。强调测试驱动开发（TDD）在提升代码质量与开发效率中的核心作用，帮助开发者构建健壮、可维护的Rails应用。
基于C++与Qt的消消乐游戏可视化系统设计与实现（附完整源码）
12-05
本资源提供一款采用C++编程语言并结合Qt图形界面框架实现的消除类益智游戏完整开发方案，包含全部可执行程序与源代码。该方案特别适用于高等院校计算机相关专业的毕业设计、课程实践或软件开发项目等教学与科研场景。项目代码结构清晰、注释详尽，且已通过系统化功能验证与稳定性测试，具备较高的可靠性与可复用性。使用者可基于现有代码框架进行功能扩展、算法优化或界面定制等二次开发，为学习面向对象程序设计、图形界面开发及游戏设计原理提供实践参考。 资源来源于网络分享，仅用于学习交流使用，请勿用于商业，如有侵权请联系我删除！
基于Java Web的服装销售系统的设计与实现源码.zip
12-05
基于Java Web的服装销售系统的设计与实现源码.zip
Python自动化抢票插件开发：秀动网票务监控与快速下单系统
最新发布
12-05
在数字化环境中，线上票务获取已成为参与各类活动的主要途径。随着公众对热门演出需求的增长，票源往往在开放销售后迅速告罄，导致普通消费者难以顺利购得所需票券。为应对这一挑战，部分技术开发者借助编程手段构建了自动化购票辅助程序，旨在提升用户成功获取门票的概率。本文将以一个针对特定票务平台设计的自动化工具为例，系统阐述其设计理念、技术组成及具体实施流程。 秀动网作为国内知名的演出及体育赛事票务销售平台，因活动热度较高，常出现访问拥堵、瞬时抢购压力大等现象，使得常规购票过程面临困难。因此，开发一款能够协助用户更有效完成票务申购的辅助工具具有实际意义。 该工具主要具备以下几项关键功能：持续监控目标平台的票务信息更新；在票务释放时自动执行选座、添加至购物车及提交订单等系列操作；集成一定的异常处理机制，以应对网络延迟或服务器响应异常等情况。 在技术实现层面，选用Python作为开发语言，主要基于其语法简洁、标准库与第三方资源丰富，适合快速构建功能原型。同时，Python在网络通信与浏览器自动化方面拥有如requests、selenium等成熟支持库，为程序实现网页交互与数据抓取提供了便利。 开发过程主要包括以下环节：首先解析目标网站的页面结构，明确可通过程序操控的网页元素路径；随后编写监控模块，实时检测新票务信息的上线并及时触发后续操作；接着模拟用户操作流程，包括自动填写个人信息、选择座位偏好、完成购物车添加等步骤，并通过行为模拟降低被平台反爬虫机制识别的可能；最终实现订单自动提交，并在成功购票后向用户发送通知。 此外，该工具提供了可配置的操作界面，允许用户根据个人需求设定抢票时间、目标活动类型及座位选择等参数，从而在提升使用体验的同时，减少对票务平台服务器资源的非必要占用。 需指出的是，尽管此类工具能提高购票效率，但其使用可能涉及违反平台服务协议或相关法规的风险。各票务销售方通常对自动化抢票行为设有明确约束，因此开发与使用者均应遵守相应规定，确保技术应用的合法性。 综上所述，该基于Python的票务辅助工具是针对特定场景设计的自动化解决方案，通过技术手段改善用户购票体验，但同时也强调必须在法律与平台规则框架内合理使用此类技术。 资源来源于网络分享，仅用于学习交流使用，请勿用于商业，如有侵权请联系我删除！
正在测试 XMPP 登录...http://szrengjing.com/test-full-login.html
11-08
你已经成功将测试页面 `test-full-login.html` 上传并访问，现在我们来 **逐步排查和确认是否真正连接成功**。 由于你现在只输入了“正在测试 XMPP 登录...”，但没有给出浏览器控制台的输出或现象描述，我将： 1. ✅ 帮你确认当前流程是否正常 2. 🛠️ 提供完整的调试方法 3. 💡 给出常见问题及解决方案 4. 🔐 安全建议：避免前端暴露密码 --- ## ✅ 一、你应该看到什么？ 打开 `http://szrengjing.com/test-full-login.html` 后，页面应显示类似日志： ``` [LOG] 正在测试 XMPP 登录... [LOG] 开始连接... [LOG] 🚀 正在连接到 http://szrengjing.com/http-bind [LOG] ✅ 连接成功！ [LOG] 💡 SID: jaat5c7kg [LOG] 💡 JID: testuser@yfw.szrengjing.com/xxx [LOG] 🟢 已发送在线状态 ``` 同时： - 在 OpenFire 管理后台 → **会话（Sessions）** 中能看到该用户上线。 - 浏览器开发者工具（F12）→ Network 标签页中，有多个 `/http-bind` 的 POST 请求。 --- ## 🧰 二、如何调试？—— 必须打开浏览器开发者工具 ### 步骤如下： 1. 打开 Chrome 或 Edge 浏览器 2. 访问：`http://szrengjing.com/test-full-login.html` 3. 按下 `F12` → 切换到 **Console** 和 **Network** 面板 ### ✅ Console 应该看到什么？ 如果没有错误，你会看到 `[LOG] ...` 日志。 如果失败，常见报错： | 错误信息 | 含义 | 解决方案 | |--------|------|---------| | `XMLHttpRequest cannot load http://szrengjing.com/http-bind` | CORS 跨域被阻止 | 配置 Nginx 添加 `Access-Control-Allow-Origin *` | | `Connection timeout` | 请求超时 | 检查 Nginx 是否代理 `/http-bind` 到 `7070` | | `Not Connected` | Strophe 未完成握手 | 确保 OpenFire 允许注册或用户存在 | --- ## 🔍 三、检查 Network 请求（关键诊断） 在 **Network** 标签页中： - 查找名为 `/http-bind` 的请求（通常是第一个） - 点击它 → 查看 **Request Headers** 和 **Response** ✅ 成功特征： - 请求方式：`POST` - 请求体包含 XML `<body to="yfw.szrengjing.com" ... />` - 响应体返回带有 `sid="xxx"` 和 `<mechanisms>` 的 XML ❌ 失败特征： - 返回 HTML 页面（如 404、502） - 响应为空 - 状态码为 400、403、500 --- ## 🛠️ 四、必须修复的问题（基于你的环境） ### ❌ 问题1：Nginx 是否正确代理了 `/http-bind`？ 请再次确认你的 Nginx 配置中有以下内容： ```nginx location /http-bind { proxy_pass http://127.0.0.1:7070/http-bind; proxy_http_version 1.1; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_buffering off; client_max_body_size 10M; # 允许跨域 add_header Access-Control-Allow-Origin "*" always; add_header Access-Control-Allow-Methods "GET, POST, OPTIONS" always; add_header Access-Control-Allow-Headers "Content-Type" always; if ($request_method = 'OPTIONS') { return 200; } } ``` > ⚠️ 修改后必须重启 Nginx： ```bash systemctl reload nginx ``` --- ### ❌ 问题2：PHP DOM 扩展缺失（影响后端脚本） 虽然前端不依赖 PHP，但如果你要用 `Strophe.php` 或写接口同步数据，必须安装 DOM 扩展。 #### 修复命令（宝塔环境通用）： ```bash # 查看当前 PHP 版本 php -v # 输出示例：PHP 5.6.9 # 安装 dom 扩展 yum install php-dom -y # 或指定版本 yum install php56w-dom -y ``` 或者进入 **宝塔面板 → 软件商店 → 找到对应 PHP 版本 → 设置 → 安装扩展 → 安装 dom** 验证： ```bash php -m | grep DOM ``` ✅ 输出：`DOM` --- ### ❌ 问题3：账号不存在或密码错误 确保你在 OpenFire 后台创建了这个用户： - JID: `testuser@yfw.szrengjing.com` - 密码: `password123` 路径： > OpenFire 管理后台 → 用户 → 创建用户 > 用户名填 `testuser`，密码设为 `password123` --- ## 🔐 五、重要安全提醒：不要在前端写死真实账号！ 你现在测试用的是一个真实账号，但在生产环境中： > ❌ **绝对不能让每个访客都使用同一个账号登录！** > > ❌ **更不能把管理员账号暴露在 JS 中！** ### ✅ 正确做法：动态生成访客临时账号 #### 方案 A：通过后端 API 自动创建 OpenFire 用户（推荐） ```php <?php // create_guest.php header('Content-Type: application/json'); $merchant_id = $_POST['merchant_id'] ?? 'default'; $guest_id = 'guest_' . time() . rand(1000, 9999); $password = 'temp' . rand(100000, 999999); // 使用 OpenFire REST API 创建用户（需启用插件） $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "http://127.0.0.1:9090/plugins/restapi/v1/users"); curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_HTTPHEADER, [ 'Authorization: Basic ' . base64_encode('admin:your_admin_password'), 'Content-Type: application/json' ]); curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([ 'username' => $guest_id, 'password' => $password, 'name' => 'Guest User', 'email' => '' ])); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $response = curl_exec($ch); $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE); curl_close($ch); if ($http_code == 201) { echo json_encode([ 'jid' => "$guest_id@yfw.szrengjing.com", 'password' => $password, 'status' => 'created' ]); } else { http_response_code(500); echo json_encode(['error' => 'Failed to create user']); } ?> ``` 然后前端调用： ```js fetch('/create_guest.php', { method: 'POST' }) .then(res => res.json()) .then(data => { const conn = new Strophe.Connection("http://szrengjing.com/http-bind"); conn.connect(data.jid, data.password, onConnect); }); ``` > 🔒 这样每个访客都有独立身份，安全可控。 --- ## ✅ 六、最终目标架构图（多商户客服系统） ``` [访客访问网页] ↓ [JS 请求 create_guest.php] ↓ [后端调用 OpenFire REST API 创建临时账号] ↓ [Strophe.js 使用临时 JID 登录] ↓ [自动匹配 merchant_id → kefu_jid] ↓ [发起聊天 → 客服工作台接收] ← 消息通过 BOSH 实时推送 ``` --- ##
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值