Infrastructure

It's possible to show the amount set on the donation page itself, but iirc
this can be changed later for PayPal. For concardis it should be possible
to show the actual donation amount.
Am 28.02.2014 13:28 schrieb "The Document Foundation Redmine" <
generic@redmine.documentfoundation.org>:

Thanks for the fast reaction! I'll have a look next week - please leave
the ticket open until then, so we can talk about the implementation :)

We only can print such a page if we can ensure that the donor cannot change the output

Anyone who's not a technology imbecile can change the text on a website displayed on his/her computer, so don't quite get that....

But that aside: We can only guarantee what we pass on to concardis - as that's using the computed hash, however we can not currently display the amount (this would require storing it in the session or a cookie) - however concardis supports passing some of the parameters back to the accept/decline,... URLs (see "9.2.3.1 Parameter der Rückmeldung" on page 31 in the concardis docu), but currently this is disabled/we make no use of that.

The amounts in our database are created by an asynchronous, direct reply from concardis' server to us (Post-Sale-URL), and thus are not usable for showing a feedback form.

Anyone who's not a technology imbecile can change the text on a website displayed on his/her computer, so don't quite get that....

Well, yes, I maybe was a bit unclear ;-)
Of course anyone can fake a website, but we need to ensure at least that the original page that gets printed out cannot be faked too easily. In other words: If we know that someone can enter 1.000 € and later on change it to 1 € without any tricks, and the page still shows 1.000 €, we cannot print such a page.

But that aside: We can only guarantee what we pass on to concardis - as that's using the computed hash, however we can not currently display the amount (this would require storing it in the session or a cookie) - however concardis supports passing some of the parameters back to the accept/decline,... URLs (see "9.2.3.1 Parameter der Rückmeldung" on page 31 in the concardis docu), but currently this is disabled/we make no use of that.

The amounts in our database are created by an asynchronous, direct reply from concardis' server to us (Post-Sale-URL), and thus are not usable for showing a feedback form.

Ah, okay, thanks!
Then I propose the following: If you find a way to get direct feedback usable for a donation thank you page, we add that. If that is not possible, we close this task - I personally would feel uncomfortable printing possibly wrong pages.

Adding Thorsten. Thorsten, feel free to object if you think I'm a bit too strict here :)

An addendum which might be a nice workaround:
ConCardis supports e-mailing out confirmations via e-mail, and PayPal should do so automatically.

So let me rephrase my above proposal:
If we can in-time create a confirmation page that has proper data and is not subject to easy manipulation, then let's make it so. (tm)
Otherwise, we ask for the e-mail address optionally for BitPay. Cloph, if the above doesn't work out, can you have a look at how to get ConCardis send an e-mail confirmation in case an e-mail address is provided? This might serve the same purpose, but be much safer in the end.

Seems to be a bit more complicated than thought in first place, Cloph is working on that. No real urgency.