How to Implement
Alternative Payment Methods
Some alternativate payment methods like Paypal do not allow for redirection to their website within an
iFrame. Adyen can automatically break out of the iFrame in these cases as long as the following skin option is
enabled:
Skins > [skin code] > Skin Options > Break out of frame
Security Considerations
There are various security considerations to take into account when using iFrames.
Using HTTPS (SSL)
The most important one is that while all Adyen pages use HTTPS your site may not. In that case, although the
payment details are still transferred securely, the consumer might not be aware of this fact and might hesitate
to finish the transaction. Therefore we advise you to use HTTPS also on the enclosing page so that the user
sees a padlock, https URL and certificate information.
Loading the Adyen Hosted Payment Pages in the iFrame
When using an iFrame which is pointing directly to the Adyen Hosted Payment Pages various browsers might
raise security warnings. This can be circumvented by first pointing the iFrame (src) to your own domain. When
the user presses a button on your page inside the iFrame resulting in a redirect to the Adyen Hosted Payment
Pages it will be labeled as secure by the browsers.
Using Cookies
Because Adyen's payment page is running in an iFrame within your site Adyen's cookies are considered third-
party cookies. It is possible that the client browser has disabled these.
In that case one of the following Adyen errors can be displayed:
Unfortunately we were unable to process this request. Perhaps your browser does not accept cookies or
the previous page was a saved or cached copy?
- or -
It appears you are performing multiple payments simultaneously. Please complete the other payment
first. If you are sure that there is no other payment session currently open, you may need to restart the
browser before attempting another payment.
At time of writing most browsers have third-party cookies turned on by default. IE 7 has them turned off by
default and needs a P3P-header to honour third-party cookies, which is provided in the Adyen page headers
(Header: P3P: policyref="/w3c/policy.xml", CP="NOI DSP COR CURa ADMa DEVa OUR NOR BUS FIN STA" ).
Safari raises a security warning because of third-party cookies that are loaded on the Adyen HPP.
Copyright © Adyen B.V. 2011 5
