Hi,
I am trying to integrate an ASP.NET 4 website with WorldPay. The problem I am having is WorldPay does a HTTP POST to my webpage when payment is successful or not, and I then plan to complete or cancel an order in my database. The problem I have is that the code in my webpage never runs, but I can see the request in our IIS logs so I know WorldPay are doing their part.
So my question is, are there security implications I am overlooking, do I need to enable this external domain to post to my domain? I have turned ValidateRequest to false at WorldPays request.
Any suggestions would be appreciated, the page currently has been simplified, I have one line in page_load that sends me an email to say its been hit, this works if I navigate to the page, but nothing when WorldPay post to the page.
Thanks,
John
...
Go to the complete details ...