Installation and Integration Manual TRANZILA Secure 5



Similar documents
Configuring iplanet 6.0 Web Server For SSL and non-ssl Redirect

MAGENTO - SETUP PAYMENT PLANS

MySagePay. User Manual. Page 1 of 48

MadCap Software. Upgrading Guide. Pulse

Novell Identity Manager

AliPay International Services

BASIC CLASSWEB.LINK INSTALLATION MANUAL

A: This will depend on a number of factors. Things to consider and discuss with a member of our ANZ Merchant Services team are:

Refer to the Integration Guides for the Connect solution and the Web Service API for integration instructions and issues.

My Sage Pay User Manual

Three Step Redirect API V2.0 Patent Pending

A Reseller s Guide to Using Helm

Intell-a-Keeper Reporting System Technical Programming Guide. Tracking your Bookings without going Nuts!

SENTRY Payment Gateway

PaperCut Payment Gateway Module - PayPal Payflow Link - Quick Start Guide

TCS Payment Processing Interface 1.0

First Data Global Gateway Virtual Terminal User Manual. Version 1.0

How To Set Up The Barclaycard Epdq Cardholder Payment Interface (Cpi) On Papercut (Barclay Card) On A Microsoft Card (For A Credit Card) With A Creditcard (For An Account)

Yahoo! Merchant Solutions. Order Processing Guide

itransact Gateway Fast Start Guide

INTEGRATION PROCEDURES AND SPECIFICATIONS

MultiSite Manager. Using HTTPS and SSL Certificates

Merchant On The Move Android Professional Edition User Guide and Tutorial

Online signature API. Terms used in this document. The API in brief. Version 0.20,

E-payment. Service description

Alpha e-pay v2 Merchant User Manual (v1.9)

The DirectOne E-Commerce System

Risk Management Service Guide. Version 4.2 August 2013 Business Gateway

PaperCut Payment Gateway Module - PayPal Payflow Link - Quick Start Guide

Yandex.Widgets Quick start

Using Form Tools (admin)

Server and Direct Shared Protocols

Merchant Console User Manual

Merchant Integration Guide

WhatsUp Gold v16.2 MSP Edition Deployment Guide This guide provides information about installing and configuring WhatsUp Gold MSP Edition to central

TABLE OF CONTENTS. ipay / Magento Implementation Guide 2 Copyright 2012 Planet Payment, Inc. All Rights Reserved.

FileMaker Server 14. FileMaker Server Help

Installation & Configuration Guide Version 2.2

DEERFIELD.COM. DNS2Go Update API. DNS2Go Update API

CS412 Interactive Lab Creating a Simple Web Form

Customer Tips. Xerox Network Scanning HTTP/HTTPS Configuration using Microsoft IIS. for the user. Purpose. Background

1: 2: : 3.1: 3.2: 4: 5: & CAPTCHA

AliPay International Services

Order Processing Guide

Xerox Multifunction Devices. Verify Device Settings via the Configuration Report

Merchant One Payment Systems Integration Resources. Direct Post API Documentation June 2007

Insight Student for Chromebooks - Auto Configuration

Virtual Terminal & Online Portal

Installation and Setup Guide

Mail & Telephone Order Payments Service (WorldAccess) Guide. Version 4.3 February 2014 Business Gateway

Fortigate SSL VPN 4 With PINsafe Installation Notes

Dolphin's Automatic Credit Card Authorisation and Fund Transfer - Servebase

Further web design: HTML forms

PaperCut Payment Gateway Module Realex Realauth Redirect Quick Start Guide

Getting Started With Parallels Business Automation 4.4

The Wells Fargo Payment Gateway Business Center. User Guide

Contents. Before You Install Server Installation Configuring Print Audit Secure... 10

Authorize.Net Mobile Application

TSYS Credit Card Driver for 3700 POS

Direct Post Method (DPM) Developer Guide

HTML Forms and CONTROLS

Bitrix Site Manager ASP.NET. Installation Guide

Login with Amazon. Getting Started Guide for Websites. Version 1.0

CHAPTER 26 - SHOPPING CART

Fortigate SSL VPN 3.x With PINsafe Installation Notes

Authorize.net modules for oscommerce Online Merchant.

Merchant Integration Guide

Tenrox and Microsoft Dynamics CRM Integration Guide

How To Install An Aneka Cloud On A Windows 7 Computer (For Free)

*ROAMpay powered by ROAM

Payflow Link User s Guide

SETUP SSL IN SHAREPOINT 2013 (USING SELF-SIGNED CERTIFICATE)

An access number, dialed by a modem, that lets a computer communicate with an Internet Service Provider (ISP) or some other service provider.

Domain Central Reseller Billing 4.2

Network Merchants Inc (NMI) Integration Resources. Direct Post API Documentation April 2010

JOSSO 2.4. Internet Information Server (IIS) Tutorial

Setting Up SSL on IIS6 for MEGA Advisor

Volume PLANETAUTHORIZE PAYMENT GATEWAY. vtiger CRM Payment Module. User Guide

Policy Guide Access Manager 3.1 SP5 January 2013

Converge. System Administration Guide. Revision Date: November 2015

MiGS Virtual Payment Client Integration Guide. July 2011 Software version: MR 27

WEBROOT ARCHIVING SERVICE. Getting Started Guide North America. The best security in an unsecured world. TM

MERCHANT INTEGRATION GUIDE. Version 2.8

Version 1.0 January Xerox Phaser 3635MFP Extensible Interface Platform

Ease-E-Club Client Management Software by Computerease

Working Folder Linkage Setup Guide

PayWithIt for Android Devices User Guide Version 1.0.0

Unleash the Power of e-learning

PaperCut Payment Gateway Module PayPal Website Payments Standard Quick Start Guide

McAfee SMC Installation Guide 5.7. Security Management Center

ABB solar inverters. User s manual ABB Remote monitoring portal

Secure Data Transfer

User Guide Veezi Loyalty. Vista Entertainment Solutions

Merchant Plug-In. Specification. Version SIX Payment Services

Administrator Guide. v 11

Klarna Magento module

Transcription:

Installation and Integration Manual TRANZILA Secure 5 Last update: July 14, 2008 Copyright 2003 InterSpace Ltd., All Rights Reserved Contents 19 Yad Harutzim St. POB 8723 New Industrial Zone, Netanya, Israel Tel:972-73-2224444 Fax:972-73-2224440

1. WELCOME TO TRANZILA CREDIT CARD PROCESSING SERVICE 3 SYSTEM REQUIREMENTS 3 2. FIRST ADMINISTRATIVE STEPS FACING THE CC COMPANIES 4 BECOMING A CERTIFIED MERCHANT 4 WHAT IS AN "UN-SIGNED CARD TYPE OF TRANSACTION"? 5 GOING "LIVE", MOVING TO PRODUCTION TERMINAL 5 3. WORKING WITH TRANZILA 6 INTRODUCTION 6 SETUP ON THE MERCHANT CONTROL PANEL 6 COMMUNICATING WITH TRANZILA 7 COORDINATING TRANZILA WITH THE NAMES OF FIELDS IN THE FORM 7 TRANZILA RESPONSES 8 APPLICATION TO APPLICATION RESPONSES 9 REMOTE CREDITING OPTION 10 REMOTE FORCING OPTION 10 REMOTE VERIFICATION OPTION 10 4. THE MERCHANT CONTROL PANEL 12 ADMINISTRATING AND MONITORING YOUR ON-LINE MERCHANT ACTIVITIES 12 ACCESSING YOUR MERCHANT CONTROL PANEL 12 SEARCHING TRANSACTIONS 13 EXPORTING DATA FROM TRANZILA 13 MANUAL TRANSACTIONS AND THE VIRTUAL TERMINAL 14 VERIFYING A TRANSACTION 14 FORCING A TRANSACTION 15 DAILY REPORT 15 STATISTICS 16 CREDITING 16 TRANSACTION CANCELLATION 16 MULTI-MERCHANT AND MULTI-SITE OPTIONS 17 THE MULTI-MERCHANTS OPTION 17 MULTI-SITE 17 5. ADDITIONAL SETTINGS AND OPTIONS 18 ADDITIONAL SETTING IN CONFIG 1 18 E-MAIL ADDRESS 18 PROCESSING TIME 18 PAGE HEADERS 18 THRESHOLD FOR DOUBLE-CLICKS 18 RETENTION TIME FOR FULL CC NUMBERS 18 DEFAULT LANGUAGE 18 ACCOUNT INFORMATION 18 ADDITIONAL CURRENCIES PROCESSING 19 2

Welcome to the TRANZILA Credit Card Processing Service General We would like to thank you for choosing TRANZILA as your Credit Card processing service. The following installation manual should guide you through the integration of your website and the TRANZILA interface. TRANZILA was designed to assure easy integration from virtually any application or work station on the Internet. However, should you encounter any difficulties in the process of interfacing your application with TRANZILA or should you have any other questions regarding the implementation of our service, please contact our support team at: http://sos.interspace.net or by phone to 972-73-2224444. System Requirements TRANZILA works using the ASP model (Application Service Provider). In other words, the application runs on remote servers and therefore can easily integrate with all operating systems and programming languages. Information is transferred in HTTPS or a secure socket can be opened on a specific port, improving security significantly. There are no installations of a DLL s or any other component needed on your website or at any other computer. We also require that your "checkout form" will be protected by SSL. 3

Administrative Steps Becoming a Certified Merchant TRANZILA's merchants have to be an acknowledged and approved Internet merchants by the local credit card companies. The credit card companies will issue the merchant account only after reviewing and approving the on-line business history, its ownership and its nature. The credit card companies will most likely require the merchant to be a registered local business entity or a local registered association owning a local bank account. When contacting the credit card companies, don't forget to mention that you are a TRANZILA customer. This will guarantee to smooth the technical aspects of the merchant approval processes. TRANZILA's staff will gladly help you establish the initial contact with the credit card companies. To contact the credit Card companies (Acquirer) directly, please call: Leumi Card: +972-3-6177766 Visa CAL: +972-3-5723647 IsraCard: +972-3-6895420 Special Things to remember when contacting the Credit Card Companies: Unless you're a "virtual terminal" merchant using only credit cards reader, please make sure that your merchant account supports "un-signed" card type of transaction. When opening the account you should specify to the credit card companies the options you may want to use according to your needs like - charge in USD, installments and credit options, verification option (J5), and "stars and points" option. In order to save time, we recommend that while the administrative process takes place you will build the technical interface of your website to a test terminal on TRANZILA. Please note: The test terminal randomly simulates transactions successes and failures regardless of the Credit card actual validity. 4

What is an "un-signed" card type of transaction? An "un-signed" card type of transaction is a general term used for transactions in which the card holder was not present at the point of sale or/and didn t present a CC card, for example, transactions that where made over the telephone or on the internet. Going "Live", moving to production terminal After receiving the merchant account number, sent it to Tranzila and got an approval from the credit companies, please fill in the attached "move to production terminal form" and fax it to 972-73-2224444. Please see Form at App. A We will take care of the administrative work from this point on. This process may take up to 4 working days. Caution! Going live means that your transactions are real! 5

Working with TRANZILA How does it Work? General Explanation To be able to submit a transaction to the Tranzila system, you will need to create a secure (https) request to the TRANZILA server from your form or application, through which the details of the transaction are passed. You will be able to set on your Merchant Control Panel settings (as described on section 4) a list of individual variables and URLs for the successful or failed transactions. TRANZILA will complete the transaction and return an answer to either the success or the failure URL that you specified. Every merchant has on-line access to view transaction details on the designated Merchant Control Panel. This information is encrypted over the Internet and password protected. Introduction Communicating with TRANZILA is done in two areas: 1. Set-up on the Merchant Control Panel. 2. Trough an Interface to the transaction server. Setup on the Merchant Control Panel First, you will need to access your Merchant Control Panel and configure your TRANZILA account to be compatible with your system. (For information on accessing your Merchant Control Panel, please refer to page 9.) 1. In you Merchant Control Panel go to Settings > Config1 Choose and set the method your web form or application will communicate with TRANZILA. If you choose to communicate with TRANZILA by 'browser redirect', you will specify the URL of your form on your website as the referrer URL. If you choose the other methods you will specify the IP number or Subnet of your server. Transactions will not be allowed from any other URL, IP or Subnet. In case you chose browser redirection, you also need to specify where to direct the browser in case the transaction succeeds or fails. 6

Optionally, you can also specify whether to include variables in the return string and choose whether to include the full CC number, the last 4 digits of CC number or to omit CC number on the return string. 2. In your Merchant Control Panel go to Settings > Config2 Match and set the field names of your form and applications with the required or optional fields on TRANZILA. Whether the "required fields" in Section-2 are truly required, is depending on your arrangement and setup with the credit company. (CVV, Israeli ID, Payments and stars may only be mandatory for some merchants) See additional setup option in config-1 page 13. Communicating with TRANZILA The ONLY set up you need to do on your website is to redirect the form submission to the TRANZILA system. In order to send the details of the credit card and the other relevant information you want to be saved on the TRANZILA system, you must create a FORM in HTML that sends the action and the information using post to: https://secure5.tranzila.com/cgi-bin/tranzila31.cgi <FORM Action=https://secure5.tranzila.com/cgi-bin/tranzila31.cgi method=post> Under the command ACTION you need to add the following line of code so Tranzila can identify the merchant correctly: For example: <Input type="hidden" name="supplier" value="your_account_id"> Please change the your_account_id with the terminal name given to you for TRANZILA, all the other variables should be as written above. Coordinating TRANZILA with the Names of Variables in the Form In order for TRANZILA to coordinate with your checkout form on your site, TRANZILA needs to know the names of the variable as they appear on your form. For example, if on the form there appears First Name, then you need the following line of code: <INPUT TYPE="TEXT" size="18 NAME="First_Name value=""> 7

You need to enter the TRANZILA Merchant Control Panel - click on the link for Settings and then choose Config-2. On this page you can define all the variables that may exist on your form. The page is divided into 3 parts. Section 1: Automatic fields: are for internal use, the fields here are being added automatically to the form. These fields purpose is to display technical information on the order list, such as the IP address from which the transaction was sent, time of transaction and date, the transaction approval number, etc. You can change the "display" names and the way they will be showed on your control panel screens. Section 2: Required fields: here appear the fields required in order to perform a transaction such as, the transaction amount, the credit card number, expiration date, etc. Section 3: User Defined Fields: are for all the fields that could help administrate the transaction, such as the name of the credit card holder, address, phones, or any other administrative data that you choose to include in the form. TRANZILA Responses TRANZILA responds with 3 group type of variables. Group 1: the variables that are being generated as a result of the transaction. Some of these variables will be sent back with the response to the URS you defined. Index : defines the log index number of the transaction in the database ConfirmationCode : the authorization number of the transaction as obtained by the system from the credit companies. Response : the response code as it was obtained from the credit companies. A deal that was accepted and executed will return a value of 000 as a response. A deal that failed will return a code that will describe the reason of the failure.(you can find a table that describes all the possible error codes in "Config-2" as a link near the Response field) Caution!!! Do not use or send variables that are used by TRANZILA including authnr, index, submit, Response, ConfirmationCode, supplier 8

Group 2: All variables sent to TRANZILA defined in config-2. All these variables are being logged and can be viewed on the Control Panel. Group 3: all the variables that were sent to Tranzila by your site but were not defined in the control panel, will be ignored by the system and won't be logged by Tranzila. After the execution of the transaction, all the variables that where sent by your form will return back to a URL in your website. In case of a successful transaction, a new Authorization number variable from the credit card companies, will be added to the string of returning variables. In case the transaction failed, an Error Code, from the credit card Error will be added. The following may also be configured on your Merchant Control Panel: Settings > Config 1 You can choose to receive back only an approved or rejected transaction. You can also choose here weather you receive back all the variables, plus the last four digits of the credit card numbers, Omit Credit card number or Include full CC number. Application to Application Responses You may choose to set the system to work in this mode in config-1. In the two available setup options, requests are done from a specific IP or network. You may choose to respond to a User Agent object including http headers. In this options responses from TRANZILA are pure https with content type header. Alternatively you may choose to respond with a string to a socket. Here the responses from TRANZILA are the sane as above but without content type header. This option is usually used by JAVA applications. In both cases, you will need to specify the IP address or the Subnet of the machine. If the application is based on multiple servers within the same network, IP can be set to support the Subnet in /<prefix length> format. (For example: 192.192.192.0 to 192.192.192.7 will be accepted by TRANZILA by entering 192.192.192.0/29. 9

Remote Crediting Option You will need to establish with Tranzila if you wish your account to support the crediting options, you may execute credit transaction. These credit type of transactions can be against previous approved transactions and they are limited to the sum of the specific transaction that you want to credit. For executing remote credit transaction you must send these fields: 1. The authorization number received of the original transaction, sent with authnr variable 2. The full credit card number 3. The Transaction mode tranmode need to be identified a credit transaction by placing "C" (Capital) followed by the index number as received of the original debit transaction. (Please note that for each transaction, the system respond with the index transaction number with the variable "index" ) tranmode=c123456 & ccno=4444333322221111 & authnr=0711111 Remote Forcing Option In order to execute a remote "force" transaction you need to send the following fields: >input type="hidden" name="task" value="doforce < " >input type="hidden" name="tranmode" value="f < " >INPUT TYPE="TEXT" size="18" NAME="authnr" value="1234567 < " Caution! You need to refer to the transaction's original authnr. Remote Verification Option In order to execute a remote "Verify" transaction you need to send the following fields: >input type="hidden" name="task" value="doverify < " >input type="hidden" name="tranmode" value="v < " CVV2 transaction verification (Credit Card Verification Value) The CVV2 verification is a method to increase the reliability of the online transactions. This variable is a 3 to 4 digit number that appears on the back of the card near the signature or in some cards on the front side of the card printed after the last 4 digits of the CC number. 10

To be able to perform this verification you must contact the credit companies and include in the contract that they will check this variable, the credit companies should.שב "א deal with the technical part of defining this option in the terminal at In the Tranzila system the variable that you send is the relevant field is CVV The answer will be received as CVV-status. Possible answers: 0 The variable wasn t entered 1 The variable is correct 2 The variable is incorrect 3 The variable wasn t processed Possible error codes 059,058 The variable wasn t typed 066 The variable is not correct (the numbers that were typed are not a legitimate number). In case that the CVV wasn't accepted you can send: 0 The place of business choose not to enter the variable 2 The CVV on the card is not legible. 9 CVV code is not present on the card. 11

THE MERCHANT CONTROL PANEL Administrating and Monitoring Your On-line Merchant Activities Accessing your Merchant Control Panel You can access your Merchant Control Panel with a standard web browser to view the transaction information and configure your settings at: https://secure5.tranzila.com After entering your user and password (that were provided to you by TRANZILA) the transactions screen should appear This screen allows for a fast browsing into a pre-configured views and transaction summaries. A security feature allows you to limit the access to the control panel to a specific IP or VLAN. In case you want to setup this feature please contact - support. Transactions search screen Multi-merchants with child terminal will see a different screen allowing them to search terminals according to several categories. When login in, the transaction screen will appear for the child terminal users. Transactions UI Unique colours representation of the various transaction type. You may choose the fields you want to display on this transactions list screen at Settings > Config-3 12

Searching Transactions The search option allows the merchant to seek and view transactions by various categories, including date, order number, reference number, credit card type, or any other available parameter that was defined. To enter the search option: Transactions > Search Exporting data from TRANZILA TRANZILA allows you to export the transaction reports. After defining the scope and parameters of the report, you may choose to generate the report and export it to an Excel sheet. This report could then be imported and embedded on to billing applications or to be stored on your computers for archiving purposes (executed via the search option). 13

Manual Transactions and the Virtual Terminal You may initiate and execute transactions manually, by directly inputting it in your merchant control panel. These transactions will appear like any other transaction in your control panel. To input your transactions manually: Main Menu > Virtual Terminal. You may also choose to use your Virtual Terminal as your POS device, by connecting a swipe (magnetic card reader) to your key board. These types of transactions are coded in a special way that indicate to the CC companies that these are regular transaction (not an Internet transaction). For inquiries about renting a swipe, please contact sales@tranzila.com - or at phone 073-2224444 In your settings, you may choose the type of virtual terminal interface, which should reflect the number of additional fields you want to save in the database Compact: Minimal fields for a transaction Medium: Minimal fields for a transaction with payments Full: All fields, including user fields Verifying a Transaction Verification Transaction (j5) is a type of transactions that provide preliminary verification for a later charge. This type of transactions are common at hotels for example, where during the reservation process the credit cards intactness is being checked for a later charge, at checkout. Please note that with the Verification Transaction, the card owner is not actually being charged, however, his credit line is being committed for about 4 days from the transaction! 14

Forcing a Transaction Some transactions are being rejected due to credit limits, these transactions may later be charged by receiving Authorization number by phone through the credit cards companies. These Authorization numbers could then be inputted manually and the transactions could be forced. Forcing a transaction is also the correct way to charge a Verification Transaction (j5). It should be done by clicking on the "force this transaction" button and by inputting the Authorization numbers. Daily Report The daily report is an automatic report of all the transactions, generated by the credit card companies. The report is generated in Hebrew only and it divides the transactions by their credit card type. This report will also be generated and sent daily by e mail. The reports summarize all the activity since the previous report. Each report gets unique daily reference number 15

Statistics The control panel provides you with a statistics utility, which allows you to graphically view your commerce activities. Screen shots examples: Reports sorted by months Crediting TRANZILA provides an Add- On option for crediting back a charge. We recommend crediting a transaction through the control panel, although a remote crediting is supported (by sending an additional variable with the transaction). The credit option requires a onetime setup fee of $50 US (correct for the date 15.06.08 for more info please contact the sales team +972-73-222-4444) The credit amount is limited to the debit charge of the specific transaction you wish to credit. Since TRANZILA saves only the last 4 digits of the credit card number, the merchant will need to input the rest of the credit card number manually. Transaction Cancellation The crediting "add-on" feature supports also the transaction cancellation option. You can cancel the transaction only through the control panel. When viewing the transaction's details you will have "Cancel This Transaction" button, clicking on this and approving will cancel the transaction. Please note: transaction can only be canceled if it wasn't processed by the daily batch. Canceled transactions will be marked with Mode = D and will have a "see through" color. 16

Multi-merchant and Multi-site Options TRANZILA supports merchants that operate in a multi-activity environment. The system was designed to allow central and dispersed control and reporting for merchants. The Multi-Merchants Option This option was designed for businesses, organizations or TRANZILA's dealers that control only a few terminals. A central control panel allows control over a few terminals, where each one has its own merchant account at the credit card company. This control panel provides central reporting and administration while insuring privacy and security. To run transaction per specific supplier: set var supplier = supplierid In order to simplify the configuration, we suggest that supplier = domain name (i.e.. Supplier = emulator1.com) For each supplier you can enter user/password for that specific supplier and view only his transactions and setup configurations on the back office You may also enter each account with the master user/password and view all transactions or select and view a specific supplier. In order to add new suppliers you need to request and get new supplier ID from Credit Company, then send us supplier ID for Tranzila setup. Please be aware that for any new supplier you can ask the CC for the specific company name that will show up on the Issuer monthly reports to the card holder (descriptor). Multi-Site This feature is unique to TRANZILA and it allows a central control panel for merchants with diverse activities, operations, multi location or sites. Each of the merchant's activities, sites, sales organization or division can get its own control panel, while the merchant's "headquarter" receives a bird's eye view of the overall sub-accounts (child terminals). 17

Other Settings Additional Setting in Config 1 E-mail Address The e mail that will receive daily e-mail reports. You can enter multiple addresses separated by comma (,). Processing Time The time of the day when to process the transactions and send the daily reports. This "batch" action may be executed by you manually at any time through the "Manual" >"Batch" option. Page Headers You may choose to remove the default header to the back office and use a blank header. Threshold for double-clicks Avoid charging twice in cases were two identical form submissions are received from the same IP within the threshold, then only the first one will be processed. To disable this feature set the threshold to 0. Retention time for full CC numbers When a transaction requires contacting the credit company, (response code 003), the complete credit card number is kept in the database, in order to facilitate a "forced transaction" on approval by the credit company. For security reasons, this number must be removed from the database as soon as possible. You can select for how long the number will be kept (0 to 4 days). After that period, only the last 4 digits of the credit card number will remain in the database. Default Language You may choose the default language for the control panel that will appear after login in. Account Information Please verify that your account information that appears on the control panel is updated. 18

Additional Currencies processing Transactions in currencies other then US Dollars and Israeli Shekel use special authorization and settlement protocol. These transactions should be sent to tranzila36a.cgi You will need to choose one of the following currencies or contact the support team if you need to use other currencies. 1 - Shekel 2 US Dollar 3 - GBP 5 - Hong Kong Dollar 6 - JPY 7 EUR This action will create 2 transactions automatically : 1. A verification transaction 2. A forced transaction. 19

Tranzila verified The 'tranzila verified' system verifies in real time the identity of the web site and the identity of the owners and generates a seal by using innovative technology, this seal serves as an electronic certification that cant be forged. The Tranzila verified system allows the surfers to confirm that they are in a genuine web site that uses the services of TRANZILA - a known defrayment system and they can use "Tranzila verified" to confirm the identity of the dealer. This system grants another layer of security and credibility while they type their private details or their CC info. You can watch a demonstration of the Tranzila verified seal at: http://www.tranzila.com/verified.htm. The Tranzila verified application was developed to supply a response to surfers that recoil from online purchasing because they don t want to become a victim of an online fraud. Tranzila verified was designed to protect customers by ensuring that appropriate levels of cardholder information security are maintained. The Tranzila verified seal displayed on your site generated dynamically in real time, this factor makes it virtually impossible to copy or to forge it. The seal will also display the server time and date. The Tranzila Verified seal will be generated by us to be displayed when ever the customer enters your site it will show the site's details, the merchant's details, the date and the time that the info was verified. Displaying the seal as an image is not possible as the seal is generated in real time and provides a link that will generate a page where the merchant's details will be displayed in addition to the approval of the credit companies that provide services to this site. Tranzila verified is the first system in Israel that enables the verification of the identity of merchants. The Tranzila verified option is already integrated in the administrative system of TRANZILA. This system was developed for your benefit and at this stage it can be integrated and used in your site with no extra charge. To plant a Hebrew seal you will have to insert the following code in a chosen location. <!-- Tranzila Verified START --> <script language="javascript" type="text/javascript" src="https://secure5.tranzila.com/verified//tranzila.js?lng=heb"></script> <!-- Tranzila Verified END --> To plant an English seal you will have to insert the following code in a chosen location. <!-- Tranzila Verified START --> <script language="javascript" type="text/javascript" src="https://secure5.tranzila.com/verified//tranzila.js?lng=eng"></script> <!-- Tranzila Verified END --> 20

1. C#.NET sample bool SendIt() { //Preparing proper encoding object Encoding enc = Encoding.GetEncoding("windows-1255"); //Creating the data string while converting data into proper format //Initialization string postdata = "supplier=" + "salatim"; //Going through the rest of parameters postdata += ("&ccno=" + "4444333322221111"); postdata += ("&ccexpy=" + "09"); postdata += ("&ccexpm=" + "08"); postdata += ("&sum=" + "45.70"); //All the textual parameters should go through encoding conversion postdata += ("&first_name=" + HttpUtility.UrlEncode(" ", enc)); postdata += ("&last_name=" + HttpUtility.UrlEncode(" ' ", enc)); postdata += ("&company=" + HttpUtility.UrlEncode(" ", enc)); //Translating final data string into byte array format byte[] data = Encoding.ASCII.GetBytes(postData); // Preparing web request HttpWebRequest myrequest = (HttpWebRequest)WebRequest.Create("https://secure5.tranzila.com/cgibin/tranzila31.cgi"); myrequest.method = "POST"; myrequest.contenttype = "application/x-www-form-urlencoded"; myrequest.contentlength = data.length; Stream newstream = myrequest.getrequeststream(); // Sending the data newstream.write(data, 0, data.length); //Reading of responce and taking care of the result should be placed here. //PLACEHOLDER //Finalizing the sending process newstream.close(); } //Return result to calling code return true; 09-8850488 : 09-8850480:,, 8723.. 19 InterSpace Ltd www.datacenter.co.il www.internic.co.il www.interspace.net www.tranzila.com " 21

2. ASP.NET Sample <%@ Page Language="C#" AutoEventWireup="true" CodeBehind="Default.aspx.cs" Inherits="aspdotnetdemo._Default" ResponseEncoding="windows-1255"%> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/tr/xhtml1/dtd/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" > <head runat="server"> <title>asp.net Tranzila Demo</title> </head> <body> <FORM Action="https://secure5.tranzila.com/cgibin/tranzila31.cgi" method=post> Terminal: <INPUT TYPE="TEXT" size=18 NAME="supplier" value=""> Sum: <INPUT TYPE="TEXT" size=18 NAME="sum" value=""> Ccno: <INPUT TYPE="TEXT" size=18 NAME="ccno" value=""> Expmonth: <INPUT TYPE="TEXT" size=18 NAME="ccexpm" value=""> Expyear: <INPUT TYPE="TEXT" size=18 NAME="ccexpy" value=""><br> Company: <INPUT TYPE="TEXT" size=18 NAME="first_name" value=""> First Name: <INPUT TYPE="TEXT" size=18 NAME="last_name" value=""> Last Name: <INPUT TYPE="TEXT" size=18 NAME="company" value=""> <br> <BUTTON type="submit">submit</button> </form> </body> </html> 09-8850488 : 09-8850480:,, 8723.. 19 InterSpace Ltd www.datacenter.co.il www.internic.co.il www.interspace.net www.tranzila.com " 22

3. PHP sample <?php $host = 'secure5.tranzila.com'; // gateway host $path = '/cgi-bin/tranzila31.cgi'; // gateway uri $formdata['supplier']='salatim'; // supplier $formdata['sum']='45.70'; // total amount to process $formdata['ccno']='4444333322221111'; // credit card $formdata['ccexpm']='08'; // expiration month $formdata['ccexpy']='09'; // expiration year $formdata['company']=' '; $formdata['first_name']=' '; $formdata['last_name']=' '; $poststring = ''; code?> // formatting the request string foreach($formdata AS $key => $val) { $poststring.= $key. "=". $val. "&"; } // strip off trailing ampersand $poststring = substr($poststring, 0, -1); // init curl connection $CR = curl_init(); curl_setopt($cr, CURLOPT_URL, "https://".$host.$path); curl_setopt($cr, CURLOPT_POST, 1); curl_setopt($cr, CURLOPT_FAILONERROR, true); curl_setopt($cr, CURLOPT_POSTFIELDS, $poststring); curl_setopt($cr, CURLOPT_RETURNTRANSFER, 1); curl_setopt($cr, CURLOPT_SSL_VERIFYPEER, 0); // actual curl execution perfom $result = curl_exec( $CR ); $error = curl_error( $CR ); // on error - exit with error message if(!empty( $error )) { die($error); } curl_close( $CR ); // re-format the string into array $response =explode('&', $result); foreach($response as $key=>$value) { unset($tmparr); $tmparr=explode("=",$value); $answer[$tmparr[0]]=$tmparr[1]; } print "<pre>"; print_r($answer); // response array with string keys // the value of $answer["response"] holds the response print "</pre>"; 09-8850488 : 09-8850480:,, 8723.. 19 InterSpace Ltd www.datacenter.co.il www.internic.co.il www.interspace.net www.tranzila.com " 23

4. Sending data using redirect option. Index.html: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/tr/html4/loose.dtd"> <html> <head> <meta http-equiv="content-type" content="text/html; charset=windows-1255"> <title>tranzila Test</title> </head> <body dir="rtl"> <form action="https://secure5.tranzila.com/cgi-bin/tranzila31.cgi" method="post"> <input type="hidden" name="supplier" value="salatim"> <table align="center"> <tr> <td colspan="2" align="center"> </td> </tr> <tr> <td> </td> <td><input type="text" name="sum"></td> </tr> <tr> <td> </td> <td><input type="text" name="ccno"></td> </tr> <tr> <td> </td> <td> <select name="ccexpm"> <option value="01">01</option> <option value="02">02</option> <option value="03">03</option> <option value="04">04</option> <option value="05">05</option> <option value="06">06</option> <option value="07">07</option> <option value="08">08</option> <option value="09">09</option> <option value="10">10</option> <option value="11">11</option> <option value="12">12</option> </select> <select name="ccexpy"> <option value="07">2007</option> <option value="08">2008</option> <option value="09">2009</option> <option value="10">2010</option> <option value="11">2011</option> <option value="12">2012</option> </select> </td> </tr> <tr> <td> </td> <td><input type="text" name="first_name"></td> </tr> <tr> 09-8850488 : 09-8850480:,, 8723.. 19 InterSpace Ltd www.datacenter.co.il www.internic.co.il www.interspace.net www.tranzila.com " 24

<td> </td> <td><input type="text" name="last_name"></td> </tr> <tr> <td colspan="2" align="center"> <input type="submit" value=" "> </td> </tr> </table> </form> </body> </html> Success.html: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/tr/html4/loose.dtd"> <html> <head> <meta http-equiv="content-type" content="text/html; charset=windows-1255"> <title>tranzila Test</title> </head> <body dir="rtl" bgcolor="#ffffff" text="#090000"> <center><h1> - GREAT SUCCESS</h1></center> </body> </html> Failed.html: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/tr/html4/loose.dtd"> <html> <head> <meta http-equiv="content-type" content="text/html; charset=windows-1255"> <title>tranzila Test</title> </head> <body dir="rtl" bgcolor="#ffffff" text="#090000"> <center><h1> </h1></center> </body> </html> 09-8850488 : 09-8850480:,, 8723.. 19 InterSpace Ltd www.datacenter.co.il www.internic.co.il www.interspace.net www.tranzila.com " 25

Request for Opening an Active Terminal Please fill up the forms clearly, and fax it to: +972-9-885-0488 Do not hesitate to contact TRANZILA support should you have any question I hereby confirm my request to activate the following TRANZILA terminal. I realize that the transactions in this terminal will be processed by the credit card companies. All fields are required. Tranzila User Name: Company Name: Name of Requester: Tel: Email Address: Company Stamp & Signature: Comments: Your request is pending the approvals of all administrative parties. The request will be processed during business hours and may take up to 2 business days to be completed. You will be notified by email when your terminal is active. Thank you for your cooperation! 26