Web Order Interface Web Site Requirements

From FloristWiki

Contents 1 General Requirements 2 Field Requirements 2.1 Special Instruction Tags for Preauthorized Credit Cards 3 Other Formatting Considerations 4 Encryption

This section will help you understand how to program your Web site so FTD Mercury can retrieve Web orders from your e-commerce email address. Give this information to your Web site designer before you set up the Web Order Interface.

General Requirements

• E-commerce Web site with SMTP capability and symmetric encryption capability.
• A working Internet connection.
• An outgoing SMTP server. You can use FTD’s mail server or your own. This should be set up in Mercury Administration on the MailServer screen.
• An email address for e-commerce Web orders. The account must be accessible via POP3 or IMAP protocols from the Internet. If your ISP has any IP restrictions on which addresses are allowed to communicate with the mail server, then WOI will be unable to pick up these email messages.
• A separate email address for error reporting. It is recommended that this address use the same incoming mail server as your e-commerce email address (for example, if your email address for Web orders is orders@email.com, it is recommended that your Web site for error reporting is errors@email.com). You do not have to use this email address for error reporting only (it can be used for personal use as well).

Field Requirements

The following table lists the requirements for fields on your Web site. Information about the contents of each column is provided below:

• Web Site Field—This column lists the fields that FTD Mercury is able to interpret on your Web site.
• Requirements for Field—This column lists the standards that your field must follow (if any) so that FTD Mercury can properly interpret the information. If no standards are listed, then there are no requirements for this field (the text will be copied into FTD Mercury “as is”).
• Number of Characters—This column lists the maximum number of characters that FTD Mercury can use to obtain information. You may decide to allow your customers to enter more characters than what is listed here; however any number of characters that is greater than what is listed here will be lost.

Additional Information Goes in Order Notes 1000 Bill Address1 100 Bill Address2 100 Bill City 30 Bill Country USA or CND for example 3 Bill Fax Area Code 3 Bill Fax Number Prefix plus phone number, or remaining phone number values 20 Bill Fax Prefix Can be left blank 3 Bill Name This field should list the person that is PLACING the order 50 Bill Phone Area Code 3 Bill Phone Extension Must be SEPARATE field from Phone Number 4 Bill Phone Number Prefix plus phone number, or remaining phone number values 20 Bill Phone Prefix Can be left blank 3 Bill Phone2 Area Code 3 Bill Phone2 Extension Must be SEPARATE field from Phone Number 4 Bill Phone2 Number Prefix plus phone number, or remaining phone number values 20 Bill Phone2 Prefix Can be left blank 3 Bill State 2-digit abbreviation 2 Bill Zip Code 10 Business Name Populates the company name for the recipient on the order. 50 Card Message 600 CC Cardholder (Not Required.) This field should list the same name that is on the CREDIT CARD. If payment is to be applied to a house account, provide house account number. 30 CC Company Credit card company that the number applies to (VISA, DISCOVER, etc.). If payment is to be applied to a house account, supply “INHOUSE” 10 CC CVV Code Credit card security code (on back of card) 10 CC Expiration (Month) 2-digit number 2 CC Expiration (Year) 2- or 4-digit year 4 CC Number Credit card number. If payment is to be applied to a house account, provide house account number. 20 Delivery (Day) 2-digit number 2 Delivery (Month) 2-digit number 2 Delivery (Year) 2- or 4-digit year 4 Delivery Charge Can include the decimal or dollar sign 8 Delivery Instructions 250 Discount Amount Can include the decimal or dollar sign 8 E-mail Address 50 Occasion Code 0 = None 1 = Sympathy 2 = Illness 3 = Birthday 4 = Business Gifts 5 = Holiday 6 = Maternity 7 = Anniversary 8 = Other 2 Product AmountX Where X is the line item number of the product 8 Product CodeX Where X is the line item number of the product 10 Product DescriptionX Where X is the line item number of the product 350 Product QtyX Where X is the line item number of the product 4 Recipient Address1 100 Recipient Address2 100 Recipient City 30 Recipient Country Code USA or CND for example 3 Recipient Name 100 Recipient Phone Area Code 3 Recipient Phone Extension Must be SEPARATE field from Phone Number 4 Recipient Phone Number Prefix plus phone number, or remaining phone number values 20 Recipient Phone Prefix Can be left blank 3 Recipient Phone2 Area Code 3 Recipient Phone2 Extension (Must be SEPARATE field from Phone Number) 6 Recipient Phone2 Number Prefix plus phone number, or remaining phone number values 10 Recipient Phone2 Prefix Can be left blank 3 Recipient State 2-digit abbreviation 2 Recipient Zip Code 10 Relay Charge Can include the decimal or dollar sign 8 Retrans Charge Can include the decimal or dollar sign 8 Service Charge Can include the decimal or dollar sign 8 Tax Amount Can include the decimal or dollar sign 8 Total Order Amount Total order amount should be the total of all products, fees, and taxes minus any discounts. Can include the decimal or dollar sign

Special Instruction Tags for Preauthorized Credit Cards

FTD Mercury supports cards preauthorized via your Web site. When transmitting information to FTD Mercury, information is received in the special instructions for orders received from WOI. Credit card processing is not performed in FTD Mercury if an approval code is transmitted with a WOI order.

IMPORTANT: These fields also apply to Florists Online (FOL) orders.

The following tags are available for preauthorized credit cards using WOI or FOL (you must have previously provided the credit card number, type, and expiration date to use these tags):

Web Site Field	Requirements for Field	Number of Characters

Tag	Requirements/Notes	Characters
APPROVAL CODE	If this contains a value, the approval code is displayed in the Payments window for the order. The order will not be reprocessed unless the order total is changed.	1024 (AP, DECLINED, ERROR)
AVS RESPONSE	Must be either Y or N	1 (alpha)
CARD CODE	Always blank
CARD CODE RESPONSE	Always blank
CC MESSAGE	Stored in Order Notes	48
CLIENT REFERENCE ID		64 (alphanumeric)
RESPONSE CODE	AP or DC (approved or declined) or blank. NOTE: If this is blank and both Transaction ID and Client Reference ID are not blank, a query of CCAPI will be performed to receive the updated status. If this is blank and Transaction ID and Client Reference ID are blank, the order will be availble for normal credit card processing in FTD Mercury.	2 (alpha)
TRANSACTION ID	CCAPI Transaction ID# (required if approval codeexists)	9 (numeric)

Other Formatting Considerations

• Because the Web Order Interface is doing key/value parsing of the email, the email must be in plain text. HTML or rich text formatted (RTF) email cannot be handled and will cause error.
• Email messages with the given subject line that have been successfully processed will be deleted from the given email server. If the email causes an error of any kind, it will be forwarded onto the error email address configured in Mercury Administration. If the attempt to forward this email fails, the mail will be left on the email server.
• Email messages that do not have the given subject line will be forwarded to the error email address provided in Mercury Administration.
• Whether encrypted or not, everything should reside within the body of the email. If the email body is encrypted, it should be Base64 encoded (care should be taken by the Web developer to ensure correct line block length). Attachments will be ignored.
• Do not use special characters, except in the email address (for example, do not use #, $, %, ^, &, etc.).
• If you are not using the Product Description field for a product description, enter the product code in both the Product Description field and the Product Code field.
• If a field in the Web order form is unused, that field should still be included in the generated email.
• Given the above table, a valid email body would look like this:

Bill Name: Joe Customer
Bill Address1: 12345 Main Street
Bill Address2:
Bill City: Anytown
Bill State: IL
Bill Country: USA
Bill Zip Code: 60515
Bill Phone Area Code: 630
Bill Phone Prefix: 555
Bill Phone Number: 7890
Bill Phone Extension: 1028
...etc.

NOTE: There is no space between the heading and the colon, and there is a space between the colon and the relevant information.

Encryption

• Only a user-friendly password will be required for configuration by the user. This password will be used to generate both the key and initialization vector required by the encryption process.
• If the password is longer than necessary, it will be truncated to fit.
• If the password is shorter than necessary, it will be right padded with asterisks (*).
• The valid lengths that will determine truncation or padding are defined as being the maximum length allowed for each respective algorithm. Currently, those lengths are defined as follows:
• Valid key lengths:
  • DES - 8 bytes
  • RC2 - 16 bytes
  • Rijndael - 32 bytes
  • TripleDES - 24 bytes
• Valid IV lengths:
  • DES, RC2, TripleDES - 8 bytes
  • Rijndael - 16 bytes

For example, the key and IV that should be used for a password of “flower,” for example the TripleDES encryption algorithm:

Key: “flower******************”
IV: “flower**”

NOTE: Since a weak key provided to TripleDES will cause an error, the FTD Mercury encryption library will predetermine whether or not the key is weak. If the key is found to be weak, encryption will be processed via the DES algorithm, not TripleDES. This will not impact the user in any way.