Processing Credit Card Payments with RS Form Pro

Home

Blog

Joomla

Written by Jase Clamp Friday, 26 August 2011 14:20

Joomla

RS Forms is a great component. It lets you build forms on your website by adding the fields you want. There are a number of default layouts for the form but what I like is that you can do your own layout for the form by moving {tags} around in HTML and putting the fields where you want them. you can also add attributes to fields for JavaScript actions and CSS styling. This is the first of two new tutorials I'm doing for RS Form. I have done previous tutorials that you can find here. .

How to setup RS Forms Pro for Authorize.net payments

1. SSL in place

The first thing you have to do is get yourself an SSL certificate and make sure that is configured. Then you have to make sure that when you send people to the form, that the link is HTTPS. It is possible to PHP code in the form to sense this and automatically redirect but we have not bothered with this.

2. Build the form

You need to create your form and add at least the minimum required billing fields. You can ask for much more information however. Your minimum fields should be:

First Name
Last Name
Amount
Card Type (pull down)
Expiration (text, tell them to enter mm/yy format)
Credit Card Number
Billing steet
City
State
Zip

You may also want to ask for their email address, phone number, company name etc.Take note of what you NAME each field as you'll need to incorporate the field names into the credit card processing script.

3. Add the credit card processing scripts

In RS Form, go to the tab called "scripts".

To the "Script called on form display" add:

 
if(isset($_SESSION['failed_transaction']) && isset($_SESSION['failed_transaction_count'])  && $_SESSION['failed_transaction_count'] == 0){
echo ''.$_SESSION['failed_transaction'].'';
$_SESSION['failed_transaction_count'] = $_SESSION['failed_transaction_count'] +1;
}

This is the script that will check to see if the form has already been submitted and if it's being returned with a credit card processing error. If so this script assumes an attempt has already been made and shows the error to the user.

To the "Script called on form process" add:

 
if(!empty($_POST['form']['ccnum']) && !empty($_POST['form']['ccexp']) && !empty($_POST['form']['amount']) && !empty($_POST['form']['fname']) && !empty($_POST['form']['lname']) && !empty($_POST['form']['address']) && !empty($_POST['form']['state']) &&  !empty($_POST['form']['zip'])){

$post_url = "https://secure.authorize.net/gateway/transact.dll";
$post_values = array(
	
	// the API Login ID and Transaction Key must be replaced with 
        //valid values

	"x_login"		=> "YOURVALUEHERE",
	"x_tran_key"		=> "YOURVALUEHERE",

	"x_version"		=> "3.1",
	"x_delim_data"		=> "TRUE",
	"x_delim_char"		=> "|",
	"x_relay_response"	=> "FALSE",

	"x_type"		=> "AUTH_CAPTURE",
	"x_method"		=> "CC",
	"x_card_num"		=> $_POST['form']['ccnum'],
	"x_exp_date"		=> $_POST['form']['ccexp'],

	"x_amount"		=> str_replace( array('$',',') ,
                                   '' , $_POST['form']['amount']),
	"x_description"		=> "Inv num:".$_POST['form']['invoicenum'],

	"x_first_name"		=> $_POST['form']['fname'],
	"x_last_name"		=> $_POST['form']['lname'],
	"x_address"		=> $_POST['form']['address'],
	"x_state"		=> $_POST['form']['state'],
	"x_zip"			=> $_POST['form']['zip']
	
);
$post_string = "";
foreach( $post_values as $key => $value )
	{ $post_string .= "$key=" . urlencode( $value ) . "&"; }
$post_string = rtrim( $post_string, "& " );

$request = curl_init($post_url); // initiate curl object curl_setopt($request, CURLOPT_HEADER, 0); /
curl_setopt($request, CURLOPT_RETURNTRANSFER, 1); 
curl_setopt($request, CURLOPT_POSTFIELDS, $post_string); 
curl_setopt($request, CURLOPT_SSL_VERIFYPEER, FALSE); 
$post_response = curl_exec($request); 
curl_close ($request); // close curl object


$response_array = explode($post_values["x_delim_char"],$post_response);


/*echo "<OL>\n";
foreach ($response_array as $value)
{
	echo "<LI>" . $value . " </LI>\n";
	$i++;
}
echo "</OL>\n";*/

}else{
echo'<script type="text/javascript"> alert("Please fill in mandatory fields!");
</script>';
}

This script does all the heavy lifting. You have to edit this script a lot. Every where it says $_POST['form']['whatever'] - you have to change it to what you used for that actual field when you built the form. So if you NAMED your "amount" field "amt" then you should put that in the code.Pay attention to the part at the beginning, it is checking for your required fields. You need to set those to what your required fields actually are.

To the "Script called after form has been processed" add:

if($response_array[0] != '1'){
$error = $response_array[3];
$msg = str_replace('(TESTMODE)','',$error);
jimport( 'joomla.application.component.controller' );
 global $mainframe;
if(isset($_SESSION['failed_transaction'])) unset($_SESSION['failed_transaction']);
if(isset($_SESSION['failed_transaction_count'])) unset($_SESSION['failed_transaction_count']);

$_SESSION['failed_transaction_count'] =0;
$_SESSION['failed_transaction'] = 'Transaction failed! Error: '.$msg;
$redirecturl = JRoute::_('index.php?option=com_rsform&formId=5&Itemid=99999');
$mainframe -> redirect($redirecturl,'error');
return;
}else{
//lets wipe ANY ccnum that hasn't been wiped! 
$db =& JFactory::getDBO();
$query = "update `jos_rsform_submission_values` set `FieldValue` = concat('***&#**&#***-',substr(`FieldValue`,13)) where `FieldName` = 'ccnum' and `FieldValue` NOT LIKE '%****%' ";
$db->setQuery($query);
$result = $db->query();
}

This is the post processing script. If the card ran successfully it allows the form data to save to the database. If it did not it will redirect to reload the form with the credit card error message so the user can try again.

You need to especially note where it says "formId=X" this is where you set what your formId is or else it will not redirect back to the correct form. At the end of the script it wipes the CC number so you're not saving it in your database. Look at where it says where 'FieldName' = '??' you have to change it to what you called your credit card number field. Its important to do this step. It will wipe all field submissions from all forms with that feild name.

4. Test and tweak

Don't forget to edit your user and admin emails. You have to manually include the fields in the email that you want to send. I've provided instructions here to build this form from scratch but if you want to take a shot at just installing my backup version into your RS Form, I've provided the file here. Be warned however, if your version of RS Form does not match, this may not work.

zip rsform_authorize_payment.zip