Integration Guide

PayPal Payments Pro Integration Guide April 2012 21
Introducing Direct Payment
User Interface Recommendations for Direct Payment Checkout
2
– AVS response code
– CSC response code
– PayPal transaction ID
– Error codes and messages (if any)
– Correlation ID (unique identifier for the API call)
5. If the operation is successful, you send the buyer to an order confirmation page.
The Ack code determines whether the operation is a success.
– If successful, you should display a message on the order confirmation page.
– Otherwise, you should show the buyer information related to the error. You should also
provide an opportunity to pay using a different payment method.
User Interface Recommendations for Direct Payment Checkout
Your checkout pages must collect all the information you need to create the
DoDirectPayment request. The request information can be collected by your site’s checkout
pages.
The following recommendations help process requests correctly and make it easier for buyers
to provide necessary information:
IMPORTANT: You are responsible for processing card industry (PCI) compliance for
protecting cardholder data. For example, storing the Card Security Code
(CSC) violates PCI compliance. For more information about PCI compliance,
see
PCI Security Standards Council.
 Provide a drop-down menu for the state or province fields for addresses in countries that
use them. For U.S. addresses, the state must be a valid 2-letter abbreviation for the state,
military location, or U.S. territory. For Canada, the province must be a valid 2-letter
province abbreviation. For the UK, do not use a drop-down menu; however, you may need
to provide a value for the state in your DoDirectPayment request.
 Ensure buyers can enter the correct number of digits for the Card Security Code (CSC).
The value is 3 digits for Visa, MasterCard, and Discover. The value is 4 digits for
American Express.
 Show information on the checkout page that shows where to find the CSC code on the card
and provide a brief explanation of its purpose.
 Configure timeout settings to allow for the fact that the DoDirectPayment API operation
might take as long as 60 seconds to complete, even though completion in less than 3
seconds is typical. Consider displaying a “processing transaction” message to the buyer
and disabling the Pay button until the transaction finishes.
 Use the optional Invoice ID field to prevent duplicate charges. PayPal ensures that an
Invoice ID is used only once per account. Duplicate requests with the same Invoice ID
result in an error and a failed transaction.