Integration Guide
Table Of Contents
- Website Payments Pro Hosted Solution Integration Guide
- About This Guide
- Intended Audience
- Revision History
- Documentation Feedback
- Getting Started with Website Payments Pro Hosted Solution
- Integrating Your Website Using HTML
- Customising Your PayPal Payment Page
- Integrating iFrame in Your Website
- Integrating Your Website Using API
- Testing Your Integration in Sandbox
- Order Processing
- Protecting Buttons by Using Encrypted Website Payments
- Public Key Encryption Used by Encrypted Website Payments
- Setting Up Certificates Before Using Encrypted Website Payments
- Generating Your Private Key Using OpenSSL
- Generating Your Public Certificate Using OpenSSL
- Uploading Your Public Certificate to Your PayPal Account
- Downloading the PayPal Public Certificate from the PayPal Website
- Removing Your Public Certificate
- Using Encrypted Website Payments to Protect Your Payment Buttons
- Blocking Unprotected and Non-encrypted Website Payments
- Optional API Operations
- Moving from Website Payments Standard to Hosted Solution
- Error Messages
- Currency Codes
- Index
5
Integrating Your Website Using
API
Using the Button Manager API, you can programmatically create the checkout button that
initiates the Hosted Solution checkout flow on your website. You create the checkout button
dynamically when the buyer attempts to checkout on your website. When the buyer clicks on
your checkout button, you call the BMCreateButton API operation to create a checkout
button and display it on your web page. When the buyer clicks on this checkout button, he or
she is redirected to the PayPal payment page where he or she can complete the payment. You
can use 3-D Secure functionality on the PayPal payment page.
HTML variables control the presentation of the PayPal payment pages, the information
contained on the pages, and pages to which your buyer can be returned to when leaving the
payment pages. For a list of HTML variables, refer to “HTML Variables” on page 17.
For complete information on the Button Manager API, refer to the
Button Manager API (NVP)
or
Button Manager API (SOAP).
N OTE: Using the Button Manager API, you can programmatically create the checkout button,
but not manage, edit, or delete it.
Button Hosting
For Hosted Solution, using BUTTONTYPE=PAYMENT, you can create the following kinds of
checkout buttons:
Token buttons (BUTTONCODE=TOKEN) are not stored on PayPal. They are dynamic and
initiate the Hosted Solution checkout flow. The parameters associated with this kind of
button are secure. They have a lifetime of approximately two hours, if not used.
Encrypted buttons (BUTTONCODE=ENCRYPTED) are not stored on PayPal. The
parameters associated with this kind of button are encrypted. You must update the web
pages that use an encrypted button each time the button or the associated information
changes.
Clear text buttons (BUTTONCODE=CLEARTEXT) are not stored on PayPal. The
parameters associated with this kind of button are not encrypted. They can be used
dynamically because you can change the value of a parameter anytime. However, if you
use them, recognize the risk that sensitive information can be altered or stolen.
N OTE: Hosted buttons (BUTTONCODE=HOSTED) are not supported for Hosted Solution and
will return an error if used.
For more information about Button Manager API usage, refer to “BMCreateButton API
Operation” on page 45.