In reporting their receipt number back to them, can I omit the last
sequence? Just curious. Also, is there a way for them to retrieve
their from the official GlobalGiving website after the fact? I think
this would be better than maintaining a receipt database on my app's
end, and it would also give my user some assurance that GlobalGiving
does indeed have a record of their contribution which can be tracked.
Perhaps an API call to look up a donation by receipt number and
another identifier too.
Thanks,
Mark
--
You received this message because you are subscribed to the Google Groups "GlobalGiving API" group.
To post to this group, send email to globalgi...@googlegroups.com.
To unsubscribe from this group, send email to globalgiving-a...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/globalgiving-api?hl=en.
I hope that makes sense (even if it doesn't). The reason for this is/
was privacy concerns - and has been in place prior to the API being
created. The logic was, that if someone already has an account and
purposefully chooses NOT to login while donating then they must have a
reason for not wanting the donation to show up.
We (GlobalGiving) is now re-thinking this, so that any donation made
on the same email address can/will be shown in donation history no
matter what the timing of events (between creating account and making
donation), however it has to go through the proverbial "red-tape".
On your other question about an API call to retrieve a receipt, via an
api call, this is another privacy/security issue, since anyone with an
api key could then theoretically pull in ALL receipts from
globalgiving just by using a sequential number generator. People's
donation history is protected by their login on globalgiving.org.
I hope this helps! and love to hear your thoughts.
Steve
On Feb 5, 7:40 pm, Mark Silverberg <m...@marksilver.net> wrote:
> Thanks. I'm not seeing gift card receipts from the API in my api-test.globalgiving.org history however. Also, any way to look up by receipt # because my app will not ask users for credentials, and sometimes not even their email.
>
> Mark Silverberg
> m...@marksilver.nethttp://marksilver.net/
> (512) 826 - 7004
>
> On Feb 5, 2010, at 7:32 PM, Kevin Conroy wrote:
>
>
>
> > Hi Mark,
> > The receipt number in our database is the number sequence that comes after the R. The id of the giving cart that generated that receipt comes after GC. We include both so that if there was some kind of error in generating the receipt that we know which giving cart it is. The string after CB denotes which property/site created it, and "cb01" is our default (very long story - just go with it).
>
> > If you provide R###### that will be sufficient to find the receipt in our database.
>
> > Also, if the user logs into their account on GlobalGiving, they will see their receipt. If the first donation that they made was through the API, then just need to create an account with the same email address and they will see their donation.
>
> > Hope that helps.
>
> > THanks,
> > Kevin
> > Kevin Conroy
> > E-mail: kevincon...@gmail.com
>
> > On Fri, Feb 5, 2010 at 4:58 PM, Mark Silverberg <m...@marksilver.net> wrote:
> > I'm looking to make my user's interaction with GlobalGiving as easy
> > and pleasant as possible. All my receipt numbers have been in the
> > following format (consistent with the API examples):
> > R######-GC######-CBcb01
>
> > In reporting their receipt number back to them, can I omit the last
> > sequence? Just curious. Also, is there a way for them to retrieve
> > their from the official GlobalGiving website after the fact? I think
> > this would be better than maintaining a receipt database on my app's
> > end, and it would also give my user some assurance that GlobalGiving
> > does indeed have a record of their contribution which can be tracked.
> > Perhaps an API call to look up a donation by receipt number and
> > another identifier too.
>
> > Thanks,
>
> > Mark
>
> > --
> > You received this message because you are subscribed to the Google Groups "GlobalGiving API" group.
> > To post to this group, send email to globalgi...@googlegroups.com.
> > To unsubscribe from this group, send email to globalgiving-a...@googlegroups.com.
> > For more options, visit this group athttp://groups.google.com/group/globalgiving-api?hl=en.
I understand the rationale however let me reiterate that I have been
using my personal globalgiving account (on production and api-test) to
connect with the API and make test donations with gift cards. I use
the same email inside the donate POST yet they do not show up in my
donation history (I made the account prior to ever donating with that
email). Anyways, maybe I'm doing something wrong or it's an anomoly
since I'm only testing checkouts on the api-test server.
Regarding the API call, I personally think it's ample security if the
person has the Receipt (and maybe even check out #), as well as their
email address and/or the original payment method information (last 4
of the CC# or gift card #). This isn't a big deal to me, I just think
it would be convenient.
Best,