Advanced Credit Card processing Service

Advanced Credit Card processing Service An overview Version: 7.08 Date: 19.2.2007 RealCredit PO BOX 73 Cullompton EX15 2WU Contact: Bryan Holmes Tel: 087 0011 0011 2007 BCH(Bristol) Ltd. Unauthorised reproduction is prohibited This document and the original concepts and designs within it are the property of BCH(Bristol)Ltd (trading as RealCredit) unless otherwise stated in this document or subsequent contract. 2007 BCH(Bristol) Ltd Page: 1

1 Contents 1 Contents... 1 2 Introduction... 3 2.1 About this document... 3 2.2 Audience... 3 2.3 Further information and support... 3 3 Prerequisites... 4 3.1 Merchant and RealCredit accounts... 4 3.2 RealCredit for Windows... 4 3.3 Development environment... 5 3.4 Runtime environment... 5 3.5 Internet connectivity... 5 4 Setting up and testing with RealCredit for Windows... 6 4.1 Aims... 6 4.2 Installation... 6 4.3 Running RealCredit for Windows for the first time... 6 4.4 Performing a test transaction... 12 4.5 Dealing with errors... 14 5 Understanding card transactions... 16 5.1 What you need to know, and why... 16 5.2 Debits (authorisations)... 16 5.3 Refunds... 17 5.4 Card validation.... 17 5.5 Card blocking... 17 5.6 Address Verification (AV)... 17 5.7 CVV2/CVC2 Checking... 18 5.8 Referrals... 18 6 Implementation... 19 6.1 Options for Implementation... 19 6.2 Using the ActiveX Control... 19 6.3 Code example: The payment control... 20 6.4 Using the HTTP Method using VBScript ASP... 21 2007 BCH(Bristol) Ltd Page: 2

2 Introduction 2.1 About this document The RealCredit advanced payment system is a computer program that has the ability to perform secure credit and debit card transactions. The program communicates over the Internet to a central server operated by RealCredit, which in turn communicates with the acquiring banks. This document gives a roadmap and specifics for implementing the RealCredit payment system into a Windows based application, from a web application through to a billing platform. 2.2 Audience While aimed primarily at developers, this document may be of interest to the following: Those responsible for selecting a payment processing service, for which RealCredit has been identified as a potential supplier. IT managers responsible for planning, overseeing implementation and determining support resources required for the project involving the payment processing service. Developers directly involved with the implementation of the RealCredit payment components. 2.3 Further information and support For pre-sales support, general enquiries and account information, please contact RealCredit through: Tel: 087 0011 0011 Fax: 087 0011 0012 Email: info@realcredit.com Post: RealCredit PO BOX 73 Cullompton Devon EX15 2WU Telephone technical support arrangements are made with most customers once their account has been created. 2007 BCH(Bristol) Ltd Page: 3

3 Prerequisites 3.1 Merchant and RealCredit accounts Implementing and testing the RealCredit payment controls is near the end of a sequence of stages involved in making use of card processing. The primary stages are: Identify your specific requirements. Card processing is not a simple undertaking and the processes and terminology involved can be daunting to those who are new to this subject. As the list of stages here shows, several types of accounts need to be set up with various organisations and each have their own set of conditions and limitations. RealCredit can help guide you through these stages and choose a path that suits your needs. Choose an acquiring bank. The "acquiring bank" (or "acquirer") is the bank that performs the actual processing and authorisation of all major card types 1. There are a small number of these in the UK, the leading ones with which RealCredit currently have a processing arrangement are: o Barclaycard Merchant Services (BMS) o NatWest Streamline o HSBC. o Bank of Scotland In general, your choice of bank doesn't relate to where your current bank accounts are held. While not tied to them, RealCredit recommends BMS, because they provide access to the full functionality of our service, and can provide contact details as required. Get a merchant account. Once in contact with an acquirer, you need to register for a merchant account. The terms placed on these depend on the use it will be put to, such as for an Internet web site (high risk) through to point-of-sale situations where the cardholder will be present (low risk). Get a RealCredit account. Once your merchant account is set up, you can complete the process of registering for a RealCredit account. This last account is the one used throughout the implementation specifics in this document Download, install and test the software. The technical implementation stage begins at this point. Please contact RealCredit if you would like further details on any of these stages. 3.2 RealCredit for Windows RealCredit for Windows is a complete Windows application designed to mimic the functionality of the conventional desktop card processing unit seen in shops everywhere. While a product in its own right, it also offers a complete and reliable way of installing the complete set of RealCredit payment processing components with their dependencies and then provides a way to test them. To get a copy of RealCredit for Windows: Contact us and request an installation CD. 1 American Express ("AMEX") and Diners Club are special cases in this respect. 2007 BCH(Bristol) Ltd Page: 4

Or download the file (it's about 38MB) from: http://www2.realcredit.com/download/setuprc4win7.1.5.zip Download the latest version and save it as a file on your computer. You will need to install this on both your development machine and the final service machine. Details on setting up and configuring RealCredit for windows are covered in a following section. 3.3 Development environment There are two principle options for implementation. The recommended option is to make use of an ActiveX component. To make use of this, you will need an "ActiveX hosting environment", the most well known being Visual Basic although most Windows development environments support ActiveX nowadays. The examples throughout this document involve Visual Basic. If you are unfamiliar with ActiveX, please refer to Microsoft documentation. If your environment does not support ActiveX or you are running your service in a hosted environment that disallows the installation of third party software then you can also perform a credit card transaction over the Internet using a HTTP request. Please note that if you are using this method then you can skip section 4 (Setting up and testing with RealCredit for Windows) although you may wish to read this to familiarise yourself with some of the concepts involved. 3.4 Runtime environment Installing RealCredit for Windows on the machine that the final service will run on will ensure that all of the relevant components and their dependencies are correctly installed and configured on that machine. If using any of RealCredit's alternative processing services (as described later), configuration using RealCredit for Windows is essential. 3.5 Internet connectivity The ActiveX control communicates to RealCredit's central server over the Internet. If you have a firewall, you may need to configure it to allow outbound TCP connections to the following servers on ports 9000, 9001 and 9008. ccserver1.realcredit.com ccserver2.realcredit.com ccserver3.realcredit.com (subject to change - obtain current IP addresses from RealCredit) The IP address that these DNS addresses point to may change from time to time - RealCredit will always attempt to notify customers of such changes well in advance. If you are using the HTTP Interface as described in section 3.3 then you will need to be able to make a secure HTTP request to https://www.realcredit-secure.com/ 2007 BCH(Bristol) Ltd Page: 5

4 Setting up and testing with RealCredit for Windows 4.1 Aims By installing and testing your RealCredit account using RealCredit for Windows, you will ensure the following aspects of the service are functioning: Your installation of the ActiveX control Your RealCredit account username and password Your Internet connection to the RealCredit server The configuration of your account on the RealCredit server The setup of your merchant account at the bank. By successfully testing all of these features, you will then be able to start making use of the ActiveX control with confidence that it will operate correctly. 4.2 Installation RealCredit for Windows follows the standard Windows installation procedure. Once you have downloaded the install file from the RealCredit web site, simply run it and follow the on-screen instructions. 4.3 Running RealCredit for Windows for the first time When you first run RealCredit for Windows, it will inform you that it needs to be configured and display the "Accounts" dialogue. Figure 1 - The accounts dialogue on RealCredit for Windows 2007 BCH(Bristol) Ltd Page: 6

You will need to enter the Licence Key provided by RealCredit in order to use RealCredit for Windows. A Licence Key is required for each machine on which RealCredit for Windows is installed. RealCredit will have provided the Licence key to you, along with your RealCredit for Windows username and password, in a letter or other correspondence. To set up an account, click "Add". You will see the account details window, as shown below. Figure 2 - The account details window Account details The account name, in the top box, is merely a name for your own reference and can be anything at all. This username and password pair are the "full" versions, each involving about 10 characters. You might also have been given shorter usernames and passwords for web site access - these will not work here. Processing service The password is case sensitive. It will often contain capital and small letters - you must type it in exactly as presented. 2007 BCH(Bristol) Ltd Page: 7

The choice of processing service is an advanced feature offered to RealCredit clients under special circumstances. Unless you've been told otherwise, choose the "RealCredit primary processing service". The Key (if provided) box is a secret encryption key required for use with some services. As with the URL, if your service requires the use of a key it will have been provided to you. The key is case sensitive and must be typed exactly as presented. Auto-blocking The Auto-blocking section gives you the choice of using the RealCredit Block Checking technology. Block checking is a facility by which people attempting to use Credit Cards fraudulently through our services can be detected and barred. If you chose to automatically check if a card is blocked then, before a transaction is processed, RealCredit for Windows will check the RealCredit database to see if the card has been blocked as a result of attempted fraudulent transactions. If a card is blocked you will be notified when you try to validate or perform a transaction on that card. If you feel that a card has been wrongly blocked you have the option to unblock the card. Alternatively, you can turn off automatic block checking to ignore it. You can choose to record declined transactions to help us monitor card misuse. Two options are available. 1. Record them such that after three declined transactions a card is blocked. This is the standard option and is achieved by ticking the Log declined transactions to Realcredit box 2. For added security, you can chose to block a card immediately following a declined transaction by checking the Block on decline box. However, it is recommended that this only be selected in situations where a card validation has been conducted before the authorisation as otherwise you could end up blocking cards because the user has entered an invalid expiry date. Accepted card types Here you can select which card types you wish to accept. 2007 BCH(Bristol) Ltd Page: 8

Figure 3 - The 701 service details screen Entry Mode Select here whether your users will be keying the card details in, or swiping them with either a standard card, or an Integrated Circuit Card reader. Cardholder Present Check this box if the cardholder is present when you are doing the transaction. E-commerce Check this box if you are performing ecommerce transactions. System Type Select your system type from the list supplied. If you are unsure what category your system fits into please contact RealCredit for confirmation before submitting transactions. Check CVV2 if supplied Check this box if you wish to perform CVV2 checks and you have agreed this in advance with RealCredit. Transactions will be declined if the CVV2 check fails. 2007 BCH(Bristol) Ltd Page: 9

Address Verification Check the box if you wish to perform address verification on the first line of a customer s address and postal code. The sensitivities listed correspond to matching either the postal code or the address or both. Transactions will be declined if the address check does not match or exceed your desired sensitivity. Alternative Credit Servers Add here the alternative credit servers supplied by RealCredit for processing your transactions. If your primary credit server is offline for some reason then one of the others will be used. Encryption Type Select the form of encryption you will be using. Warning - Do not select None if you will be submitting transactions over the Internet. If in doubt please contact RealCredit for details. Validate Amount If you will be performing transactions from within an automated system, you may wish to check a customer has enough credit to pay for a service, prior to them accessing the service but without immediately debiting them this amount. This is further described under Card Validation below. If you wish to do this you can enter the amount you wish to be checked for in this case. If this is not filled in then a penny will be used for these transactions. 2007 BCH(Bristol) Ltd Page: 10

Figure 4 - The Currencies selector Supported Currencies Use this screen to add Currencies in which you wish to transact. Please note that transacting in currencies other than Sterling will require a special merchant account with your merchant Bank. Please contact RealCredit in advance before attempting to transact in a currency other than Sterling. 2007 BCH(Bristol) Ltd Page: 11

Figure 5 Advanced Options Request Broker Options These options can be changed if you have a slow or unreliable Internet connection to increase your chance of a successful transaction. Please discuss any changes with RealCredit before proceeding. Servers These should be populated automatically depending on the processing service you have selected. If there is not at least one server in the list contact Realcredit for details. 4.4 Performing a test transaction For this operation, you will need a real (valid) debit or credit card. We advise that you use a credit card for testing, because there is a fixed cost (around 45p) per transaction on debit (Switch and Delta) cards, as opposed to a percentage charge on the amount transacted. RealCredit for Window's main screen is shown below. 2007 BCH(Bristol) Ltd Page: 12

Figure 4 - The main window of RealCredit for Windows Enter in the details of your credit card as requested into the boxes provided. In the amount box, we suggest you start with values of 10p (type in as "0.10") and add 1p for each test transaction so that you can differentiate them 2. Now you can test the following things: To begin with, use Check numbers locally to ensure you have typed a valid credit card number. This is a simple arithmetical calculation based on the checksum of the card. Next, use Validate card with bank and RC to perform a test authorisation (more on what this involves later) on that card. If all goes well, you should get a "Success" message. Otherwise, see the following section on error messages. This requires an Internet connection to communicate with RealCredit. The main test is to use the Debit feature to take an amount from the card. Again, an Internet connection is required. Once you have debited an amount, you can then try to Refund. RealCredit only offer the refund facility to selected customers and a password (based on the account details 2 Transactions of 1p will be ignored by the system for technical reasons. 2007 BCH(Bristol) Ltd Page: 13

you should already have) is required. A refund, like a debit, can be for any amount greater than 1p. If all of these transactions work, you have a working credit card processing system on your computer. You should see the transactions (debits and refunds) appear on your monthly credit card bill. There are further options available from the main screen by clicking on the text Show Extra Options at the top right of the window. Figure 5 - The extended options view of RealCredit for Windows Unblock Card \ Block Card These allow you to block\unblock specific card numbers from using the system. Enter Auth Code This allows you to enter an authorisation code for a transaction which resulted in a referral. For more on referrals see section 5.8 below. 4.5 Dealing with errors RealCredit for Windows will only report success if it has received such a message from the RealCredit server, which will in turn be reporting a successful transaction with the bank. Therefore, if RealCredit for Windows says transactions have gone through, they have done. 2007 BCH(Bristol) Ltd Page: 14

The converse is true in the vast majority of cases also - if an error is reported then no transaction has taken place and no money has changed hands, so it is safe to retry. The only known exception is in the case of a network failure when sending back the final acknowledgement. If you encounter errors during setting up of RealCredit for Windows, you might find the following common errors and their resolutions helpful. However, problems to do with the configuration of your merchant account and other such issues generally tend to start on the RealCredit server and so your next move would be to phone RealCredit and ask for technical support. As with any technical support situation, you can help yourself by providing the support engineer with clear and accurate information about what you were trying to do when an error occurred. The engineer will ask you to try to repeat the transaction while on the phone, which will enable detailed logging to be recorded. The most common errors during set-up are: "Error importing public key". This is RealCredit for Windows' way of saying "Incorrect RealCredit account number or password". "Transaction Failed. Last sys error=64". This is what happens if the bank hasn't set your account up properly. Contact RealCredit in the first instance, and we may ask you to contact the bank to resolve the issue. Errors 68 and 69 have also been encountered when the merchant account is mis-configured for other reasons. "General network error". This happens when a firewall gets in the way of the request. Check your network configuration and ensure that any suitable provisions that need to be made on any firewall software are correct. If you are using the RealCredit card processing service in your own software, you can now proceed to implement and test your software with the ActiveX controls which were installed with RealCredit for Windows. 2007 BCH(Bristol) Ltd Page: 15

5 Understanding card transactions 5.1 What you need to know, and why The nature of card processing is to electronically move money from one account to another. Because real money is involved, there are many small details and checks that need to be performed. RealCredit has done the vast majority of the work for you, including the security measures for encrypting card data for transmission over the Internet and through to the bank, validating card details and so on. However, there are additional issues that relate to the way the bank treats your transactions over which RealCredit has no control. This short sections aims to help you understand the issues involved so that you can be ready for them and try to reduce them. Of course, there are further details not covered here, and RealCredit staff can offer further advice if required. 5.2 Debits (authorisations) When you want to debit a card, you put the card details and your RealCredit account details into the ActiveX component and it sends them to RealCredit, which in turn sends them to the bank. The bank then, in general, performs a series of tests to determine whether the card is valid and in credit, and replies with a success or failure message. If you receive this success message, then as far as you are concerned, the transaction is complete. What has actually happened is that the bank has authorised that transaction. Some time around 1am the following morning, RealCredit will automatically submit to the bank a file containing all of the days authorisations, and that is when the transaction actually takes place. It says above that the bank "in general" performs a series of tests. It is known to organisations like RealCredit - and a few malicious cardholders - that there are times of the day when the bank is too busy or otherwise unable to perform all of the tests and just authorises the amount anyway. The way this affects you is that such a cardholder (who might attempt to use his card many times before a chance transaction goes through) is likely to acquire the goods or services without having the funds to pay for them. This leads onto the next issue, that of "charge-backs". If you run a web site that takes credit cards and you accept a perfectly valid transaction, for example in return for a software download, you don't have much to confirm that the correct cardholder was using the card. If the cardholder then contacts their card agency and says that the transaction was not made by them and was fraudulent, the transaction will nearly always be charged-back, meaning that you lose the money. Lastly, the banks monitor transactions on each card and look out for "unusual activity". In such cases, for example if the card usage pattern is altered significantly, the bank will request that you (under the assumption that you are operating a conventional desktop card processing device) phone a call centre and answer some questions to authenticate the card and the cardholder. Because of the automated nature of our software, such requests are bypassed and the transaction retried. If you manage to put through a significant amount of "unusual activity" (such as large number of small test transactions), three successive authorisations may result in such a request to call the call centre and thus fail. 2007 BCH(Bristol) Ltd Page: 16

5.3 Refunds RealCredit has the option to allow or disallow refunds on a given RealCredit account. If allowed, you are able to perform a refund in much the same way as you would a debit (the code is almost identical), except that the money goes the other way. The security issues relating to this - even for security within your own organisation - are clear, because anyone with your RealCredit username and account could credit their card with anything up to the balance of your bank account. RealCredit for Windows requests a password before enabling refunds. 5.4 Card validation. The "validate card with bank" option in RealCredit for Windows performs a special type of transaction. What happens is that RealCredit get the authorisation to debit the cardholder's card, but immediately reverse the transaction afterwards. We learn that the card itself is valid We learn that the card itself had credit available If block-checking is switched on (see section 4.3 above) then we learn whether or not the card has been blocked due to attempted fraudulent transactions If Address verification is being used we learn how well the customer supplied data matches that of the holder of the card If CVV2 checking is being used we learn if the customer knows the 3 or 4 digit CVV2 number from the back of the card being used This feature offers valuable information about the validity of the card, but only if used with care. Such a validation might be performed when a user first accesses a service, and a final amount debited when they have finished using the service. Repeated use of the validation transaction on a card may be considered "unusual activity" by the bank, as described above. 5.5 Card blocking The Unblock Card and Block Card buttons on the RealCredit for Windows application allow the user to directly block and unblock cards from the RealCredit service. If you discover that a card has been used fraudulently you should block it, either through RealCredit for Windows or on the RealCredit website. In addition, if you have the Log declined transactions to RealCredit option selected (see section 4.3 above) then any Validation or Debit requests that get declined will be recorded in the RealCredit database. If the same card is declined 3 times then it is assumed that fraudulent transactions are being attempted and the card is blocked. If you do not wish to use the automatic block checking options available then you can use the RealCredit rcblockcheck service to programmatically check for yourself whether or not a card is blocked and take appropriate action. You can also use the rcblockcheck service to programmatically block and unblock cards and record declined transactions. 5.6 Address Verification (AV) Address verification aims to check whether the user of the card is the legitimate owner of the card by asking them for elements of their address. The bank will check the supplied information and return whether the elements matched, or partially matched the information of the 2007 BCH(Bristol) Ltd Page: 17

cardholder. Rejecting transactions based on unmatched data may help protect against charge backs from fraudulent transactions. RealCredit allow you to pre-set the desired threshold at which you would like to reject transactions. For example, if you are happy that one element from those you supply is partially matched then you can set it to this. Alternatively, if you want to be more certain you can set the software up so that all elements you supply must be perfectly matched. Turning Address Verification on does not mean that you must supply this data each time you do a transaction, only that if it is supplied, it must match that held by the acquiring bank. You can, of course, ensure that this data is supplied through your own software. 5.7 CVV2/CVC2 Checking The CVV2 number is a three digit security code found on the back of most Credit Cards. CVV2 Checking attempts to check that the customer has possession of the card whilst they are performing the transaction. Figure 6 - Typical example of where to find the CVV2 security code The above picture shows the location of the CVV2 number on a typical VISA card. Switching CVV2 checking on does not mean that you must supply this data every time you do a transaction, only that if it is supplied, then it must match the CVV2 held by the card scheme customer record. You can, of course, ensure that this data is supplied through your own software. 5.8 Referrals A referral occurs when the card issuer or the acquiring bank is suspicious about a credit card transaction and wishes to verify that the cardholder intends to proceed with the request. If a referral occurs when you are using rc4win you will be given a phone number supplied from your bank to phone and a text box in which to enter an Authorisation code. The person at the end of the line will probably ask to speak to the cardholder and, if satisfied, will give you an authorisation code. Enter this code into the box and click OK to proceed with the transaction. If, for some reason, you cannot immediately enter the auth code you can click CANCEL and enter the auth code later by clicking on the Enter Auth Code button in the extra options section detailed in section 4.4 Performing a test transaction above. 2007 BCH(Bristol) Ltd Page: 18

6 Implementation 6.1 Options for Implementation It is anticipated that the majority of users would wish to use our ActiveX Control for submitting credit card transactions. This is by far the fastest and most efficient way to do so. However, if, for some reason, your platform does not support ActiveX, or your service is run on a shared server where installing new software is impossible you may use our HTTP Interface to submit transactions. Modules to make this easy are available for several operating systems and programming languages. Please ask for the appropriate scripts for your platform. 6.2 Using the ActiveX Control The following instructions and screenshots are from Visual Basic version 6. First open a project - either new or existing - and go to the Project menu and References You should be offered an alphabetical list of components to use. if you scroll to find "R" in the list, you should find a selection of RealCredit component names. The one you want is RealCredit transaction Controls, found in a file called RealCredit701.dll. If this component is not in the list you are offered, you may have to browse to it. You should find it in: C:\Program Files\RealCredit\RealCredit For Windows (V7)\RealCredit701.dll (the version number may change). Figure 7 - The Visual basic references list showing therealcredit701 ActiveX control as selected. 2007 BCH(Bristol) Ltd Page: 19

6.3 Code example: The payment control The complete API is described in the following section, but the best way to introduce the RealCredit control is by way of a code example. Using a new "Standard EXE" project, a single command button and a reference to the RealCredit.dll file, here are the beginnings of a simple test program: The principle control you will be using is: RealCredit.PaymentControl. This manages the various standard transaction types supported by RealCredit. The properties and methods of the Payment Control will be given in more detail below. Here is an example of the payment control in use: Figure 8 - Code example of RealCredit.PaymentControl Payment Control Parameters In addition to the parameters shown in figure 8 above, further parameters can be sent to RealCredit. The following is the full list of parameters that can be supplied in the order in which they should be sent. Parameter Details Username Username supplied by RealCredit Password Password supplied by RealCredit Cardnumber Credit card number Expiry Expiry date for credit card must be supplied in MMYY format. Amount Amount of the transaction in pence. If this is not supplied for a Validate type transaction the Validate Amount set up for the account as described in section 4.3 is used. CurrencyCode ISO currency code for multicurrency option. Please contact 2007 BCH(Bristol) Ltd Page: 20

RealCredit for a list of currencies in which you may transact. If left blank ( ) or not supplied this will default to 826 for Sterling. CheckIfBlocked True or False. If set to true then RealCredit will search their list of cards blocked for attempted fraudulent use before performing the transaction and fail the transaction if the card number is found. Notes Any text you wish to associate with the transaction. Start Start Date for some SWITCH\SOLO cards if required. Must be in format MMYY. Issue Issue number required for some SWITCH\SOLO cards. CVV2 CVV2 data as described in section 5.7 above. PostalCode Postcode data for Address Verification as described in section 5.6. Address First line of address for Address Verification as described in section 5.7 AppTransactionID Your transaction reference. It is recommended that this be supplied to facilitate cross-referencing of transactions should a query arise. Properties and methods of the RealCredit701.PaymentControl Property Description AuthCode Bank authorisation code for the transaction. If the bank did not authorize the transaction this will be blank. Note: Some acquirers do not give an authorisation code for refunds. CardType The card type e.g. SWITCH, MASTERCARD. This will be populated when the transaction request comes back from the server. ResponseComments Further information about the transaction result for internal use. For a message to be displayed to customers use ResponseMessage. ResponseMessage Message describing the transaction result. ReturnCode A numeric code representing the transaction result. Zero denotes success, numbers greater than zero are failures (ref Appendix 1 for list of failure return codes) and numbers less than zero are error codes. TransactionID RealCredit's transaction identifier for this transaction. It is recommended that you store this somewhere safe in your records to enable us to cross-reference transactions in the case of a query. Methods Authorize Performs an debit on the card as described in section 5.2 above Validate Checks for credit on the card as described in section 5.4 above Refund Performs a refund from your account to the card as described in section 5.3 above 6.4 Using the HTTP Method using VBScript ASP To make using the HTTP request method easy RealCredit have created an ASP server side include file containing the functions you will need clsrc701.asp. You will need the MSXML Parser installed on your web server for this to work. To include this module in your ASP page you will need to use the #include directive from within ASP. 2007 BCH(Bristol) Ltd Page: 21

The example shown includes clsrc701.asp from a folder called ssi in the same directory as your asp page. Full sample code is available from RealCredit if you wish to use this option. The properties and methods are the same as detailed above for the ActiveX control. Appendix 1 Return Codes The following is a full list of return codes (excluding error codes) which may be returned by the RealCredit Payment Controls. Return Code Name Description 0 Success The transaction worked 1 Declined The transaction was declined by the bank 2 Referral The transaction resulted in a referral by the bank. 3 Declined Keep Card The transaction was declined and the bank asked you to keep the card if possible. 4 Failed AV The transaction failed an Address Verification Check 5 Failed CVV2 The transaction failed a CVV2 check 6 Bank Error An error occurred in the bank s systems treat this as a declined transaction 7 Failed Block Check The card is blocked by the RealCredit system 2007 BCH(Bristol) Ltd Page: 22