I am meeting a problem in a community site and cannot find any solution on my own... We are connecting the community with an external payment system (PayBox) who works like this :
- We redirect the user to the paybox website with some information (payment amount, unique order id ...)
- When the user has finished his payment, he is redirected by paybox to our community site with some information (unique order id, success or not...). This works OK but does not suffice to validate the order in salesforce, the redirection could have been tampered with by the user.
I need to memorize the order is valid from this server to server request. I constructed a visualforce page to get the request but i'm blocked by the 'No dml in visualforce constructor' rule.
Does someone have any idea how could i resolve this issue ? Thank you