I know this is a rather old thread, but I found it while trying to wrap my head around what the heck XML is all about (have not yet made progress) but I did find that the code above apparently has some errors (missing slashes and semicolons and stuff like that) the following DOES actually run when I renamed it wtf.php and uploaded it to the web host I use: when I call it up using IE, it appears to be trying to log in to some site to make a purchase or payment or something....in that it is apparently full of fake data it does not actually appear to succeed at the task)
<HTML>
<HEAD>
<META NAME="GENERATOR" Content="Textpad :)">
</HEAD>
<BODY>
<?php
$storeID = "<?xml version=\"1.0\" ?>
<Safe>
<LogRefNr>8049</LogRefNr>
<Merchant>
<SafeKey>{XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}</SafeKey>
</Merchant>
<Transactions>
<MerchantReference> SafeShop_Pro_3/4/2002 3:29:20 PM </MerchantReference>
<TransactionAmount>3200</TransactionAmount>
<TransactionType>IA_Auth</TransactionType>
<SafePayRefNr>00010859</SafePayRefNr>
<TransactionResult>Successful</TransactionResult>
<TransactionErrorResponse/>
<LiveTransaction>False</LiveTransaction>
<HTMLOutput>
<script language=\"JavaScript\">SSiCanWindow = window.open('http://ican.safeshop.co.za/payment.asp ?SourceName=My Website &MerchantId=0000000000&Amount=61.91 &OrderID=00000000 &ReturnURL=https://secure.safeshop.co.za/Checkout/Checkout_IA_Complete.asp ?strOrderNo=00148847', 'icanwindow', 'top=10,left=10,height=650,width=750, ?location=no, scrollbars=yes,menubar=no,toolbar=no, directories=no,resizable=yes') </script> <input type=hidden name=order value=000000></HTMLOutput>
</Transactions>
<RedirectURL>[url]http://www.mywebsite.co.za[/url]</RedirectURL>
</Safe>";
?>
<form name="form1" action="https://secure.safeshop.co.za/s2s/SafePay.asp" method="post">
<input type="hidden" value="<?php echo $storeID ?>" name="storeID">
</form>
</BODY>
</HTML>
<SCRIPT LANGUAGE=javascript>
<!--
form1.submit();
//-->
</SCRIPT>