The right way is to redirect a customer to a payment gateway AFTER the order has been created (like the PayPal module does).