Alfred,
while that is true in most cases, Authorize.net (the gateway Caroline is using) has a pretty useless test mode.
It will validate all authorize requests and fail all other requests. And if I'm not mistaken you need to have an account with them before you can test your code.
All in all, not a viable option for Caroline's intent.
/Bart
