The card CVV can be included as a post variable if the URL contains 'cvv=post' and is using https:
The CVV will be sent one time only.
i.e. your url
https://yoururl.com/yourpage?cvv=post
will be sent to the the following with CVV in post data
https://yoururl.com/yourpage?cvv=post&bookid=12345678&status=new