This document describes how to interface a shopping cart system to RoutePay. This interface uses standard HTML forms to provide a simple way for sellers to integrate RoutePay as a method of payment for their merchandise or services.

This guide also includes examples of HTML form for interfacing to the RoutePay® payment system. This form is functionally equivalent to one that merchants will need to provide within their shopping cart check-out system to interface to the RoutePay® payment system. Finally, you will also find an example of the form and the parameters that the IPN system posts back to the seller's server.

This documentation is made short and direct, enabling anyone, even those who are not experienced developers to easily copy and paste and edit form details and be up and running in no time. RoutePay also provides a form generation system, making the process of accepting payments for your goods using RoutePay even easier.

To quickly use the form generation system, follow the following steps:

1. Login to your RoutePay account.
2. Click on "Merchant Tools"
3. Click on "Generate Form "
4. Enter all the required fields and optional fields of your choice.
5. Select the image for your payment button and click on "Create Form "
6. Copy and paste the generated form to your site and you are ready to accept payments through SCI.

After you have successfully generated your form, you will find details similar to the form shown below. For the payment button to work, you must create a form using the POST method and all the parameters you send should use hidden fields.

RoutePay server listens to SCI requests through: https://www.routepay.com/sci.asp so the form action should be set to that url.

The Most Basic Form, showing only the required fields:

  <form action="https://www.routepay.com/sci.asp" method="POST">
    <input type=hidden name="rp_acc_merchant" value="RB000001" />
    <input type=hidden name="amount" value="20.99" />
    <input type=hidden name="currency" value="USD" />
  <input type=image name="paybutton" src="http://routepay.com/paybtn/P1.gif" />
  </form

Parameters List

Sample Form showing the required fields and 4 additional fields:

<form action="https://www.routepay.com/sci.asp" method="POST">
<input type=hidden name="rp_acc_merchant" value="RB000001" />
<input type=hidden name="rp_amount" value="20.99" />
<input type=hidden name="rp_currency" value="USD" />
<input type=hidden name="rp_merchant_ref" value="15465" />
<input type=hidden name="rp_memo" value="Payment for TV" />
<!-- Addition of custom fields each containing a value-->
<input type=hidden name="rp_custom1" value="Customer 15465" />
<input type=hidden name="rp_custom2" value="Invoice No. 49 " />
<input type=image name="paybutton" src="http://routepay.com/paybtn/P1.gif" />
</form>

Replace RB000001 with your RoutePay Account ID

The sample form above is another simple form with rp_merchant_ref, rp_memo added and rp_custom1 and rp_custom2 supplied with values. If there is no need for additional fields, simply remove the lines indicated in red.

The form action is set to https://www.routepay.com/sci.asp
That is where RoutePay listens to sci requests. The form method is set to POST.

Explanation of the form:

• The first hidden field is rp_acc_merchant. The value of it should be your Account ID.
  
  
• The second hidden field is rp_amount. The value of it should be the total amount you expect to receive.
  
  
• The third hidden field is rp_currency. This is the currency to use for the payment. The value of it should be either USD or EUR.
  
  
• The forth hidden field is rp_merchant_ref. This is not required, but if included, the value of it could be your invoice number or other reference.
  
  
• The fifth hidden field is rp_memo. This too is not required, but if included, the value of it could be any comments.
  
  
  
• The sixth hidden field is rp_custom1. You can use the value of it to store any information you want RoutePay to send back during transaction. RoutePay does not process data stored there. It simply post it back to the Merchant's server
  
  
• The seventh hidden field is rp_custom2. You can use the value of it to store any information you want RoutePay to send back during transaction.
  
  
• The last item there is the image. The src refers to where RoutePay Buy Now button is located.

Parameters Sent Back By RoutePay to the url indicated in rp_ipn_url field by Merchant

If you indicated rp_ipn_url and added a url in its value, the following parameters will be sent back to this url using the POST method. Below are all the parameters explained:

How the string is generated:

The value of selected fields are concatenated with a colon ( : ) used to seperate each value from the other. Your account Alternate Password is also included in the concatenation. The string derieved from the concatenation is then HASH using Sha256 formula and stored in rp_hash. The same string is hash again using MD5 formula and stored in rp_MD5.

Fields used for the concatenation are:

rp_acc_merchant
rp_acc_buyer
rp_amount
rp_currency
rp_merchant_ref
rp_batch
Your Account Alternate Password

Let's assume your Account Alternate Password is: MickyGoesToHollyWood7854
Let's assume the above selected fields have the following values

rp_acc_merchant = RB000001
rp_acc_buyer = RB000002
rp_amount = 20.99
rp_currency = USD
rp_merchant_ref =15465
rp_batch = 1023011
Your Account Alternate Password = MickyGoesToHollyWood7854

The concatenation will be done as follows:

That value will be stored in the rp_hash and sent together with the other form values to the url specified in the rp_ipn_url by the Merchant

Note that ( : ) is added in the string. Also note that if the rp_merchant_ref is empty, an empty space will be added.

To get the value stored in rp_MD5. The same concatenation is done.

To verify the authenticity of the data received from RoutePay, perform the following:

1. Concatenate the value in the fields rp_acc_merchant, rp_acc_buyer, rp_amount, rp_currency, rp_merchant_ref, rp_batch, and your Account Alternate Password. Ensure to seperate each value with colon.
   
   
2. Now Hash your concatenation string using Sha256.
   
   
3. Compare the value of your HASH string with the value stored in the rp_hash field you received. If they are not the same, do not trust the information received. You may implement your own checks to ensure the payment was truely made into your account.
   
   
4. You may decide to verify using the value in rp_MD5. If you wish to verify using the value in rp_MD5, ensure to hash your value using MD5.

RoutePay uses two different hash algorithms (Sha256 and MD5) so as to give the merchant the opportunity to verify data received from RoutePay in any of the algorithm they are more familiar with. If you are verifying the authenticity of the data received from RoutePay using Sha256, then compare your value with the value stored in rp_hash. If you are verifying using MD5, then compare your value with the value stored in rp_MD5

Buttons