Integrate Payment Gateway

what is authorize and capturing in payment gateway

2012-08-09T22:22:00.004+05:30

What is authorize and capturing in payment gateway

Have you ever wondered exactly what happens when you hand over your credit card details online for a purchase? You may have a thorough understanding of the process flow of an online credit card transaction but what happens behind the scenes? Understanding exactly what happens when a credit card is processed online is important and that is why any merchant operating an online store should read this article.
To better explain an online credit card transaction a merchant should be aware that an online credit card transaction is actually made up of two parts: Authorization and then Capture.

What is a credit card Authorization?

A credit card authorization, as the name suggests, is an authorization for a specific amount of funds from a credit card holder. As a merchant when you process a transaction on behalf of your customer an initial credit card authorization is sent to check if the customer’s credit card is valid and that he or she has sufficient funds to complete the online transaction. Assuming the customer has sufficient funds the total amount of the online transaction is then held and deducted from the customer’s credit limit.
It is important to note that even though the funds are held and deducted from the customer’s credit limit that the funds are not automatically transferred to the merchant’s settlement account. So if the customer has been deducted the online transaction amount and they are not able to access the funds then how does the merchant retrieve the amount owed?

What is a credit card Capture?

The credit card Capture is the missing piece of the puzzle that allows a merchant to have the funds that are owed to him transferred from the customer’s account to the merchant’s account. As you can see the online transaction amount does not reach the merchant’s settlement account until the funds are captured. What is interesting is that a merchant specifies the total amount to capture from the customer’s account.
This means that if a credit card Authorization was issued for $10 from the customer’s account that the merchant could issue multiple credit card Capture requests until the $10 amount is reached. For example, the merchant may issue 5 x $2 Capture requests in order to retrieve the total online transaction amount owed.

How long does a credit card Authorization last?

This is a very good question and it would not hurt for everybody to read this section. A credit card Authorization has a specific time frame in which the merchant is able to issue a credit card Capture to retrieve their funds from the customer’s account. This time frame unfortunately is not set in stone and differs depending on the card scheme (VISA, MasterCard, American Express, JCB, Diners etc.) Generally speaking a credit card Authorization will become void after 10 days or so.
If a credit card Authorization has not been Captured by the merchant by the specific time frame specified by the particular card scheme the credit card Authorization becomes void. The funds are then no longer held from the customer’s account and are put back into the customer’s account.
Using the example above, if a credit card Authorization was issued for $10 and the merchant had not Captured these funds from the customer’s account in the specific time frame then the $10 would be credited back to the customer’s account and the $10 would be made available to the customer to spend again.

Credit card Authorization and Capture

At this point some merchants may be wondering why they have never been required to Capture funds. They simply have an online merchant facility which processes transactions and the funds are then settled to their merchant account. This is the scenario that is most common and generally speaking merchants do not have to worry about Capturing funds on their own.
Plain and simple every online credit card transaction that takes place consists of a credit card Authorization and credit card Capture. In most cases a credit card Capture is automatically sent on behalf of the merchant by the merchant’s acquiring Bank and this is why merchant’s are not required to manually run this step by themselves.

Who needs credit card Authorization and Capture?

There are specific business models that will require the ability to have control over when they issue a credit card Authorization and credit card Capture. A simple example of this would be a computer repair company that sent out employees to fix computer problems. Assuming they have a service cost of $50 this is how the process would look:

The Customer books computer repair specialist for $50
The Computer repair company issues a credit card Authorization for $50 to the customer’s credit card
The credit card Authorization is successful and therefore the Computer repair company knows that the Customer has the funds
A computer repair specialist is sent to the Customer’s house on the booking date which happens to be three days later
The computer repair specialists fixes the customer’s issue and notifies head office that the job has been completed
The computer repair company issues a credit card Capture for $50 from the customer’s credit card
The $50 is then transferred from the customer’s account to the computer repair company’s settlement account

This is a simple scenario in which the merchant can benefit from having control over when they issue a credit card Authorization and credit card Capture.

How to Integrate Payment Gateways to Websites

2012-07-02T17:22:00.000+05:30

Integrating payment gateways to your web application or websites is a very simple process

there are mainly two ways of implementing payment gateways to your application

one is by using the an API method and other is redirecting to the payment gateway site and return after the payment is completed

in API method the card details ,cvv, exp date are entered in our site and its validated and make a payment

for making API our site need to be verified by PCI , that is we are not storing the card no and its details in our database then only the PCI will certify our application.

In redirect method we will send the user to the payment gateway site and the user enters all the card details there and the payment gateway returns the transcation number and some details we have passed this method is more safe compared to an api method

in payment there are mainly two type of payment that is get paid at the time the user submits the card details (CAPTURE method)and the other method is charged after some time or days after submitting the card details (AUTHORISE method)

The CAPTURE method this method is useful for online electronics or those items those price change in mins In those condition the amount will be immediately taken from the users card

in the AUTHORISE method the money will be Authorise by the payment gateway ie the users money is taken by the payment gateway but not send to the merchants account only after a time the merchants application will communicate with the payment gateway and collect the amount this mainly for tipping deal sites (ie when a required amount of users by a items other wise the money will be send to user )

Platnosci payment gateway integration php

2012-01-31T17:35:00.001+05:30

Create a Account in Platnosci

Get these details

PlatnosciId
Authorisationkey
Platnosci signature Key1
Platnosci signature Key2
Platnosci gateway URL

Before the passing the Payment details to payment Gateway we need to store the details of what we are passing such as unique id,amount,product id like that

After inserting these datas into the database we need to redirect to a html page

Sample html page

<form name="platnosci_payment" action="https://www.platnosci.pl/paygw/ISO/NewPayment" method="post">
<input type="hidden" name="first_name" value="firstname" />
<input type="hidden" name="last_name" value="lastname" />
<input type="hidden" name="email" value="email" />
<input type="hidden" name="address" value="address" />
<input type="hidden" name="city" value="city" />
<input type="hidden" name="platno_postcode" value="postcode" />
<input type="hidden" name="platnoTotal_price" value="Total_price" />
<input type="hidden" name="pos_id" value="platno_pos_id" />
<input type="hidden" name="pos_auth_key" value="platno_pos_auth_key" />
<input type="hidden" name="session_id" value="uniqueid" />
<input type="hidden" name="amount" value="Total_price*100" />
<input type="hidden" name="desc" value="description" />
<input type="hidden" name="client_ip" value="ClientIp Address" />
<input type="hidden" name="js" value="1" />
</form>

-----------------------------------------------------------------
After the Success full payment we will be returned to the success url

we need to validate the return parameters to check whether the payment was success or failure

checking success/failure payment

     $statusMap=array(
           '1'=>'new',
           '2'=>'cancelled',
           '3'=>'rejected',
           '4'=>'started',
           '5'=>'awaiting collection',
           '7'=>'payment rejected, funds have been transferred by a client after the transaction was cancelled, or funds
        could not be returned automatically; such situations will be monitored and explained by the Platnosci team',
           '99'=>'Accepted',
           '888'=>'incorrect status - we ask user to contact us'
       );
    //$response Contains all the responses send to success url
    //$purchaseAmount amount of the Purchased Item
        $time = time();
        $unique_id = $response['session_id'];
        $sign_key = $platnosci_sign_key;
        $platno_id = $platnosci_id;
        $gateway_url = $gateway_url;
        $signature = md5($platno_id.$unique_id.$time.$sign_key);

        $Params=array('pos_id' => $platno_id,
                    'session_id' => $unique_id,
                    'ts' => $time,
                    'sig' => $signature );

    function checkStatus($Params,$gateway_url){

        $client = new Zend_Http_Client();
        $client->setUri($gateway_url.'/ISO/Payment/get/xml');
        $client->setParameterPost($Params);
        $response = $client->request('POST');
        $responseBody = $response->getBody();
        $result=array();
        try{
            $xml = new SimpleXMLElement($responseBody);
            $result['status']=$xml->trans->status;
            $result['trans_id']=$xml->trans->id;
            $result['amount']=$xml->trans->amount;

        }catch (Exception $e)
        {
            $result['status']="";
            $result['trans_id']="";
            $result['amount']="";
        }
        return $result;
    }
    $result = $this->checkStatus($Params,$gateway_url);

    $tranns_amount=($result['amount']/100);

    if( $result['status'] == 99 && $tranns_amount ==$purchaseAmount) {
        // Payment is Success
    }else{
        //Payment Failed
        echo $statusMap[$result['status']];die;
    }

Dibs gateway integration php rediect and api

2012-01-27T12:49:00.000+05:30

Integrating DIBS payment Gateway(Redirect method and API method)

Redirect method

Integrating DIBS payment Gateway is Simple ,You need to create a test account in dibs and with those details we can integrate dibs in your application

Integrating via redirect method or server post method

After the saving the buy details just save those in your Database and after that redirect to the below form page with filled details and need to submit

Below is the example of sample dibs form

</form>

After the Successfull Payment user will be redirected to our website(accepturl)

$Merchant = "123456";

$MD5 = "qJuH6vjXHLSDB*%€&/hbnkjlBHGhjJKJ";

$test ="yes";

if($_GET['status']=='ACCEPTED'){

$paid = DIBSCapt($Merchant,$_GET['amount'], $_GET['transaction'],$_GET['orderid'],$MD5,$test)

if ($paid==true){Payment Captured}else{Payment Failed;}

}

---------------------------------------------------------------------------

API Method

For API or webservice Way of Payment Integration

Just need to call two functions for capturing the Payment

First need to authorise the Payment by calling

$trancaction = DIBSAuth($Merchant,$Amount,$Currency,$CardNo, $ExpMon,$ExpYear,$CVC,$OrderID,$postype="ssl", $MD5="",$test="no");

$paid = DIBSCapt($Merchant,$amount,$trancaction['transaction'], $trancaction['orderid'],$MD5,$test)

if ($paid==true){Payment Captured}else{Payment Failed;}

---------------------------------------------------------------------------

CODE Include this functions

//!A function for asking DIBS for authorisation of a creditcard payment

function DIBSAuth($Merchant,$Amount,$Currency,$CardNo,$ExpMon, $ExpYear,$CVC,$OrderID,$postype="ssl",$MD5="",$test="no") {

//Set up post-variable string

$postvars = "merchant=".parmchk($Merchant);

$postvars .= "&orderid=".parmchk($OrderID);

$postvars .= "&currency=".parmchk($Currency);

$postvars .= "&amount=".parmchk($Amount);

//Check if MD5key check is used and add if it is

if ( count($MD5) == 2 ) {

$md5Key = md5($MD5['K2'].md5($MD5['K1'].$postvars));

$postvars .= "&md5key=".$md5Key;

}

$postvars .= "&cardno=".parmchk($CardNo);

$postvars .= "&expmon=".parmchk($ExpMon);

$postvars .= "&expyear=".parmchk($ExpYear);

$postvars .= "&cvc=".parmchk($CVC);

$postvars .= "&textreply=yes";

$postvars .= "&postype=".parmchk($postype);

//Add testvar if "yes"

if ( $test == "yes" ) {

$postvars .= "&test=yes";

}

//Send post request

$response = http_post('payment.architrade.com','/cgi-ssl/auth.cgi', $postvars );

//Deal with reponse

$response = explode("&",$response);

$N = count($response);

if ( $N < 2 ) { //Response is an error

$AuthInfo = false;

} else { //Response is good (does not mean that authorisation was granted)

$AuthInfo = array(); //Define output array

while ( $N-- > 0 ) {

$A = explode("=",$response[$N]);

$AuthInfo[$A[0]] = $A[1];

}

//Check that the returned MD5 key is correct

if ( $AuthInfo['authkey'] <> "" ) {

$vars = "transact=".$AuthInfo['transact']."&amount=".$Amount."&currency=".$Currency;

$Control = md5($MD5['K2'].md5($MD5['K1'].$vars));

if ( $Control <> $AuthInfo['authkey'] ) {

$AuthInfo = array();

$AuthInfo['result'] = "MD5key authorisation failed";

}

return $AuthInfo;

}

//!A function for asking DIBS for capturing an already authorised creditcard payment

function DIBSCapt($Merchant,$Amount,$Transact,$OrderID,$MD5,$test="no") {

//Set up post-variable string

$postvars = "merchant=".parmchk($Merchant);

$postvars .= "&orderid=".parmchk($OrderID);

$postvars .= "&transact=".parmchk($Transact);

$postvars .= "&amount=".parmchk($Amount);

//Check if MD5key check is used and add if it is

if ( count($MD5) == 2 ) {

$md5Key = md5($MD5['K2'].md5($MD5['K1'].$postvars));

$postvars .= "&md5key=".$md5Key;

}

$postvars .= "&textreply=yes";

$postvars .= "&force=true";

//Add testvar if "yes"

if ( $test == "yes" ) {

$postvars .= "&test=yes";

}

//Send post request

$response = http_post('payment.architrade.com','/cgi-bin/capture.cgi', $postvars );

//Deal with reponse

$response = explode("&",$response);

$N = count($response);

if ( $N == 1 ) {

$CaptInfo['result'] = $response[0];

} else {

if ( $N < 2 ) { //Response is an error

$CaptInfo = false;

} else { //Response is good (does not mean that the capture was successfull)

$CaptInfo = array(); //Define output array

while ( $N-- > 0 ) {

$A = explode("=",$response[$N]);

$CaptInfo[$A[0]] = $A[1];

}

return $CaptInfo;

}

//!Function for sending a 'within-php' post-request and receive the response-body as a string

function http_post($host, $path, $data, $auth="") {

$sock = fsockopen("ssl://".$host, 443, $errno, $errstr, 30);

if (!$sock) die("$errstr ($errno)\n");

fwrite($sock, "POST ".$path." HTTP/1.0\r\n");

fwrite($sock, "Host: ".$host."\r\n");

fwrite($sock, "Content-type: application/x-www-form-urlencoded\r\n");

fwrite($sock, "Content-length: " . strlen($data) . "\r\n");

fwrite($sock, "User-Agent: PHP-DIBS (Kaka Consult) v1.0 \r\n");

//If basic authentication is required (e.g. payinfo.cgi, changestatus.cgi and refund.cgi)

if ( is_array($auth) ) {

fwrite($sock, "Authorization: Basic ".base64_encode($auth['username'].":".$auth['password'])."\r\n");

}

fwrite($sock, "Accept: */*\r\n");

fwrite($sock, "\r\n");

fwrite($sock, $data."\r\n");

fwrite($sock, "\r\n");

//Take out the header first

$headers = "";

while ( $str = trim(fgets($sock, 4096)) ) {

$headers .= "$str\n";

}

//Then collect the body and prepare for returning

$body = "";

while ( !feof($sock) ) {

$body .= fgets($sock, 4096);

}

fclose($sock);

return $body;

}

//!Function for checking that the parameters do not contain any &, which may corrupt message to DIBS

function parmchk($in) {

return str_replace("&","",$in);

}

Securepay Direct Post Integration php

2012-01-23T14:12:00.002+05:30

Securepay Direct Post Integration

Setup an Account in Securepay

Get Securepay merchant Id

After submitting the payment details validate all the details if found valid store the values in a temp table except card no ,cvc, exp date of card

After saving the details, we need a form posting to redirect to the Securepay Payment gateway for that we create a sample php page with form variables and submit the form using a javascript

The form sample php page

<?php

$EPS_MERCHANTID = "ABC0010";

$transctionPwd = "testpwd";//(Supplied By Securepay)

$EPS_TXNTYPE = "0";

$EPS_REFERENCEID =rand(8500,58966565);

$EPS_AMOUNT ="1.25";

$EPS_TIMESTAMP = date("YmdHis");

$fingerprint = sha1($signature);

// for live Payments

</form>

After the successful Transaction

we will be redirected to the result url with a some aditional variables as post

the Post values contains

summarycode

    1 = Approved
    2 = Declined by the bank
    3 = Declined for any other reason

refid

the value of EPS_REFERENCEID

txnid

The bank transaction ID.

fingerprint

$fingerprintnew = sha1($sig);
if (fingerprint == $fingerprintnew)
then no fraud happened

Worldpay direct xml integration php

2012-01-16T15:22:00.000+05:30

Worldpay Direct XML

submit orders with payment details
send a modification for the order
perform an inquiry to request the payment status of the order
When setting up the HTTP(s) connection over which you will send XML orders, remember to use a valid login and password.

<amount value="1982" currencyCode="EUR" exponent="2"/>

Exponent is the number of decimals available in the currency.

Also note that currency code is always in capitals.

<order orderCode="T0211010">

Ordercode should be different for every payment

<countryCode>GB</countryCode>

The countryCode element is used in XML orders/communications,

it is an upper-case two-letter 'ISO 3166' standard country code

Worldpay-direct-xml

require_once 'HTTP/Request.php';

$xml='<?xml version="1.0"? encoding="UTF-8"?>

<!DOCTYPE paymentService PUBLIC "-//WorldPay//DTD WorldPay PaymentService v1//EN""http://dtd.worldpay.com/paymentService_v1.dtd">

<description>20 Tulip Bulbs from MYMERCHANT Webshops</description>

<VISA-SSL>

</expiryDate>

<cardHolderName>Akhilraj</cardHolderName>

<street>47A Queensbridge Rd</street>

</address>

</cardAddress>

</VISA-SSL>

</paymentDetails>

<shopperEmailAddress>dfgdf@gmail.com</shopperEmailAddress>

<acceptHeader>'.$_SERVER['HTTP_ACCEPT'].'</acceptHeader>

<userAgentHeader>'.$_SERVER['HTTP_USER_AGENT'].'</userAgentHeader>

</browser>

</shopper>

</order>

</submit>

</paymentService>';

$posturl='https://MERCHANTID:PASSWORD@secure-test.wp3.rbsworldpay.com/jsp/merchant/xml/paymentService.jsp'; // for testing worldpay MERCHANTID in capitals

//$posturl='https://secure.wp3.rbsworldpay.com/jsp/merchant/xml/paymentService.jsp' //for worldpay production

$req = new HTTP_Request($posturl);

$req->setMethod(HTTP_REQUEST_METHOD_POST);

$req->addHeader('Connection', 'keep-alive');

$req->addRawPostData($xml);

$req->sendRequest();

$req->getResponseBody();

echo nl2br(htmlentities($req->getResponseBody()));

Response for successful Payment

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE paymentService PUBLIC "-//WorldPay//DTD WorldPay PaymentService v1//EN" "http://dtd.worldpay.com/paymentService_v1.dtd">

<reply>

<lastEvent>AUTHORISED</lastEvent>

</balance> <cardNumber>4444********1111</cardNumber>

</payment>

</orderStatus>

</reply>

</paymentService>

For Unsuccessful Payment

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE paymentService PUBLIC "-//WorldPay//DTD WorldPay PaymentService v1//EN""http://dtd.worldpay.com/paymentService_v1.dtd">

<reply>

<lastEvent>REFUSED</lastEvent>

</payment>

</orderStatus>

</reply>

</paymentService>

<lastEvent>AUTHORISED</lastEvent>

The payment status is specified by the lastEvent element.

<ISO8583ReturnCode code="5" description="REFUSED"/>

The element ISO8583ReturnCode shows the refusal response code from the acquirer and a mapped description from WorldPay.

0 AUTHORISED
85 REJECTED BY CARD ISSUER
2 REFERRED
91 CREDITCARD ISSUER TEMPORARILY NOT REACHABLE
4 HOLD CARD
97 SECURITY BREACH
5 REFUSED
3 INVALID ACCEPTOR
8 APPROVE AFTER IDENTIFICATION

12 INVALID TRANSACTION
13 INVALID AMOUNT
14 INVALID ACCOUNT
15 INVALID CARD ISSUER
19 REPEAT OF LAST TRANSACTION
17 ANNULATION BY CLIENT
20 ACQUIRER ERROR
28 ACCESS DENIED
21 REVERSAL NOT PROCESSED, MISSING AUTHORISATION
29 IMPOSSIBLE REFERENCE NUMBER
24 UPDATE OF FILE IMPOSSIBLE
33 CARD EXPIRED
25 REFERENCE NUMBER CANNOT BE FOUND
34 FRAUD SUSPICION

26 DUPLICATE REFERENCE NUMBER
38 SECURITY CODE EXPIRED
27 ERROR IN REFERENCE NUMBER FIELD
41 LOST CARD
30 FORMAT ERROR
43 STOLEN CARD, PICK UP
31 UNKNOWN ACQUIRER ACCOUNT CODE
51 LIMIT EXCEEDED
40 REQUESTED FUNCTION NOT SUPPORTED
55 INVALID SECURITY CODE
58 TRANSACTION NOT PERMITTED
56 UNKNOWN CARD
64 AMOUNT HIGHER THAN PREVIOUS TRANSACTION AMOUNT

57 ILLEGAL TRANSACTION
68 TRANSACTION TIMED OUT
62 RESTRICTED CARD
80 AMOUNT NO LONGER AVAILABLE, AUTHORISATION EXPIRED
63 SECURITY RULES VIOLATED
92 CREDITCARD TYPE NOT PROCESSED BY ACQUIRER
75 SECURITY CODE INVALID
94 DUPLICATE REQUEST

76 CARD BLOCKED

CCAvenue payment integration php

2012-01-07T23:05:00.000+05:30

Integrating CCavenue payment gateway is simple
We need a merchant id and working for implementing payment gateway
These two details will be given by CCavenue
They use a redirect model for payment
ie the user will be rediected to there site for making the payment

Before for sending the details to CCavenue we need to save the details so that we can verify the details after the payment

we need to generate a signature(checksum) that is it contain some details like amount, orderid, working key, merchantid and rediecturl

On the buy page on submitting we need a serverside validation of the details the user have entered and after that the user details need to be stored in our DB after the payment is successfully completed

After entering all the details we need to redirect to another page it contain a form and the CCavenue form variables which are in hidden and we need to auto submit after loading the page

----------------------Page content--------------------------------------

<?php

$Merchant_Id = "your_merchantid";//

$Amount = "amount";

$Order_Id ="orderid";//unique Id that should be passed to payment gateway

$WorkingKey = "working_key";//Given to merchant by ccavenue

$Redirect_Url ="sucessurl";

$Checksum = getCheckSum($Merchant_Id,$Amount,$Order_Id ,$Redirect_Url,$WorkingKey); // Validate All value

//creating a signature using the given details for security reasons

function getchecksum($MerchantId,$Amount,$OrderId ,$URL,$WorkingKey)

{

$str ="$MerchantId|$OrderId|$Amount|$URL|$WorkingKey";

$adler = 1;

$adler = adler32($adler,$str);

return $adler;

}

//functions

function adler32($adler , $str)

{

$BASE = 65521 ;

$s1 = $adler & 0xffff ;

$s2 = ($adler >> 16) & 0xffff;

for($i = 0 ; $i < strlen($str) ; $i++)

{

$s1 = ($s1 + Ord($str[$i])) % $BASE ;

$s2 = ($s2 + $s1) % $BASE ;

}

return leftshift($s2 , 16) + $s1;

}

//leftshift function

function leftshift($str , $num)

{

$str = DecBin($str);

for( $i = 0 ; $i < (64 - strlen($str)) ; $i++)

$str = "0".$str ;

for($i = 0 ; $i < $num ; $i++)

{

$str = $str."0";

$str = substr($str , 1 ) ;

}

return cdec($str) ;

}

//cdec function

function cdec($num)

{

for ($n = 0 ; $n < strlen($num) ; $n++)

{

$temp = $num[$n] ;

$dec = $dec + $temp*pow(2 , strlen($num) - $n - 1);

}

return $dec;

}

</form>

------------------End of page content--------------------------------------

After the successful payment,CCavenue will redirect to our successurl with the some details as post url/get url

there are mainly 3 auth_status are there they are
Y successfully authorised by gateway
N Unsuccessful transaction
B not authenicated at this pont of time

we need to verify the payment gateway details send by CCavenue is tampered or not for that we have to use the Verify checksum function

--------------------------------------------------------------------------------------------

//Verify the the checksum

function verifychecksum($MerchantId,$OrderId,$Amount,$AuthDesc,$CheckSum,$WorkingKey)

{

$str = "$MerchantId|$OrderId|$Amount|$AuthDesc|$WorkingKey";

$adler = 1;

$adler = adler32($adler,$str);

if($adler == $CheckSum)

return "true" ;

else

return "false" ;

}

//functions

function adler32($adler , $str)

{

$BASE = 65521 ;

$s1 = $adler & 0xffff ;

$s2 = ($adler >> 16) & 0xffff;

for($i = 0 ; $i < strlen($str) ; $i++)

{

$s1 = ($s1 + Ord($str[$i])) % $BASE ;

$s2 = ($s2 + $s1) % $BASE ;

}

return leftshift($s2 , 16) + $s1;

}

//leftshift function

function leftshift($str , $num)

{

$str = DecBin($str);

for( $i = 0 ; $i < (64 - strlen($str)) ; $i++)

$str = "0".$str ;

for($i = 0 ; $i < $num ; $i++)

{

$str = $str."0";

$str = substr($str , 1 ) ;

}

return cdec($str) ;

}

//cdec function

function cdec($num)

{

for ($n = 0 ; $n < strlen($num) ; $n++)

{

$temp = $num[$n] ;

$dec = $dec + $temp*pow(2 , strlen($num) - $n - 1);

}

return $dec;

}

---------------------------------------------------------------------------------

we need to pass the details into it, if it returns true than the details are ok and payment was successfull redirect to success page
if it returns false then the details are tampered while sending to our application and something wrong has occured and redirect to failed /unsuccessful page

Moneybookers Payment Gateway integration php

2012-01-06T11:44:00.001+05:30

We need to create two accounts on Moneybookers, one for the Merchant and other for the Buyer.
We need to send the request to Moneybookers to convert these accounts into test accounts (for testing purpose).
After getting the test account,we can start using it for mayking payments
There are mainly two ways to implement Moneybookers in our application

Implementing Moneybookers in our site.
Sending the user to Moneybookers website.

we here demonstrate uses first method

The Payment needs to Take place in two Pages in the First Page We need to get all the details of the user and enter it into the DB for our Validation Purposes
After the successful Validation of the first Page We need to rediect to another Page contain an iframe loading the page and we need to fill the in that page and we need to auto submit that page and the balance details like adding card details etc will be done inside the iframe and will be redirected

In that Page we Need to Populate a Form with the details and Make the Form Variables Hidden so that users may not see the feild details and in the Page Just Write "Rediecting to Payment Gateway"

The details of second page looks like

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"

"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<head>

</head>

<body>

<h2 align="center">Redirecting to payment Gateway </h2>

</div>

</form>

</div>

document.Moneybookers.submit();

</script>

</body>

</html>

After the successfull payment the details will be posted to the url in the 'status_url' ,

In the Post url the details that are send are

$statusofPayment = $_POST['status'];

$userName = $_POST['username'];/*Custom field*/

$userId = $_POST['user_id'];/*Custom field*/

$transactionAmount = $_POST['amount'];/*Amount that is taken from user after the transaction*/

$paymentType = $_POST['payment_type'];

$transaction_id = $_POST['mb_transaction_id'];/*Moneybookers transaction id*/

we need to check the stautus of Payment to verify that the payment was successfull or not

if $_POST['status'] == ‘2’ Processed transaction is processed

if $_POST['status'] == ‘0’ Pending customers pays via the pending bank transfer option

if $_POST['status'] == ‘-1’ Cancelled cancelled manually by the sender

if $_POST['status'] == ‘-3’ Chargeback receive chargebacks

Depending on the status redirect to success / failed Urls

Przelewy-payment-gateway-integration php

2011-12-27T18:00:00.000+05:30

INTEGRATE PRZELEWY PAYMENT GATEWAY

-------------------------------------

1. Create account in Przelewy payment gateway

2. Get p24_id_sprzedawcy

3. Przelewy uses redirect model for payment

ie redirecting to the merchant site for making payment

4. so before proceeding the payment we need to save the buy details such as

uniqueid, quantity, price, product details, etc...

5. After saving these details render a html with the details and make it auto submit or

make the user to submit once more with the details already entered

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

<?php

$actionUrl = "https://secure.przelewy24.pl/index.php";

$p24_id_sprzedawcy = 58952;//p24_id_sprzedawcy

$prz_postdata = array("lastname" => $paymentdata['lastname'],

"p24_session_id" => $unique_id,// should be unique in every payment

"p24_id_sprzedawcy" => $p24_id_sprzedawcy, //merchant id

"p24_kwota" => $amount,//pass amount as it is 10.30

"p24_comment" => "Deal no:".$dealdetails['DealId']."source:".$dealdetails['test'],

"p24_klient" => $paymentdata['firstname'],// name of user

"p24_adres" => $paymentdata['address'],//address of user

"p24_kod" => $paymentdata['postcode'],//post code of user

"p24_miasto" => $paymentdata['city'],// city details

"p24_kraj" => "PL",//country

"p24_email" => $paymentdata['email'],//email of user

"p24_language" => "pl",//language

"p24_return_url_ok" => "BASEURL/success", // success return url

"p24_return_url_error" => "BASEURL/error",// error return url

"actionUrl"=>$actionUrl);

<form name="przelewy24payment" action="<?php echo $this->prz_postdata['actionUrl'];?>" onload="submit();" method="post">

<input type="hidden" name="p24_session_id" value="<?php echo $this->prz_postdata['p24_session_id']?>" />

<input type="hidden" name="p24_id_sprzedawcy" value="<?php echo $this->prz_postdata['p24_id_sprzedawcy']?>" />

<input type="hidden" name="p24_kwota" value="<?php echo $this->prz_postdata['p24_kwota']*100?>" />

<input type="hidden" name="p24_opis" value="<?php echo $this->prz_postdata['p24_comment']?>" />

<input type="hidden" name="p24_klient" value="<?php echo $this->prz_postdata['p24_klient']?>" />

<input type="hidden" name="p24_adres" value="<?php echo $this->prz_postdata['p24_adres']?>" />

<input type="hidden" name="p24_kod" value="<?php echo $this->prz_postdata['p24_kod']?>" />

<input type="hidden" name="p24_miasto" value="<?php echo $this->prz_postdata['p24_miasto']?>" />

<input type="hidden" name="p24_kraj" value="<?php echo $this->prz_postdata['p24_kraj']?>" />

<input type="hidden" name="p24_email" value="<?php echo $this->prz_postdata['p24_email']?>" />

<input type="hidden" name="p24_language" value="<?php echo $this->prz_postdata['p24_language']?>" />

<input type="hidden" name="p24_return_url_ok" value="<?php echo $this->prz_postdata['p24_return_url_ok']?>" />

<input type="hidden" name="p24_return_url_error" value="<?php echo $this->prz_postdata['p24_return_url_error']?>" />

</form>

document.przelewy24payment.submit();

</script>

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

6. After the successfull Completion of Payment Przelewy will return the details of the payment via url

7. we get orderid ,session id and price of the product

8. the next step is to verify is that the confirmed purchase is a manupulated one or not

9. ie any data send to the payment gateway is changed by the user or not

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

<?php

NOTE: No testing option

class Przelewy {

var $przdata = array();

var $submiturl;

var $trxstaturl;

var $trx_result = array();

var $comments = array();

function Przelewy()

{

$this->submiturl = 'https://secure.przelewy24.pl/index.php';

$this->trxstaturl = "https://secure.przelewy24.pl/transakcja.php";

}

/**

* Verify transaction

function p24_weryfikuj($p24_id_sprzedawcy, $p24_session_id, $p24_order_id,$p24_kwota="")

{

$P = array(); $RET = array();

$url = "https://secure.przelewy24.pl/transakcja.php";

$P[] = "p24_id_sprzedawcy=".$p24_id_sprzedawcy;

$P[] = "p24_session_id=".$p24_session_id;

$P[] = "p24_order_id=".$p24_order_id;

$P[] = "p24_kwota=".$p24_kwota;

$user_agent = "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)";

$ch = curl_init();

curl_setopt($ch, CURLOPT_POST,1);

if(count($P)) curl_setopt($ch, CURLOPT_POSTFIELDS,join("&",$P));

curl_setopt($ch, CURLOPT_URL,$url);

curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);

curl_setopt($ch, CURLOPT_USERAGENT, $user_agent);

if(count($H)) curl_setopt ($ch, CURLOPT_HTTPHEADER, $H);

curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);

curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);

$result=curl_exec ($ch);

curl_close ($ch);

$T = explode(chr(13).chr(10),$result);

foreach($T as $line){

$line = ereg_replace("[\n\r]","",$line);

if($line != "RESULT" and !$res) continue;

if($res)$RET[] = $line;

else $res = true;

}

return $RET;

}

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++

$p24_session_id = $resp_data["p24_session_id"];

$p24_order_id = $resp_data["p24_order_id"];

$p24_id_sprzedawcy = $p24_id_sprzedawcy; // this id should be from our Temp DB

$p24_kwota = $userpaymentdetails->amount*100; // this detail should be from our temp DB

$paymentObject = new Przelewy();

$verifydata = $paymentObject->p24_weryfikuj($p24_id_sprzedawcy, $p24_session_id, $p24_order_id,$p24_kwota="");

if($verifydata[0] == "TRUE") {

// the Payment was successfull and get the details of the product with

// the unique id update the DB of purchase accordingly

}else{

// the Payment was Failure and redirect to error Page and track the retyrned details for later verification

}

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Payex payment gateway integration php

2011-12-27T14:26:00.000+05:30

INTEGRATE PAYEX PAYMENT GATEWAY

-----------------------------------

1. Payex use SOAP for communication

2. Get a test account of Payex

3. We require Payex AccountNumber and Payex Encryptionkey

4. there are two methods of payments are supported by payex

(a).AUTHORISED

(b).CAPTURED

5.we can implement Payex Payment Gateway in our Application

++++++++++++++++++++++++++++++++++++++++++++++++++++++++

<?php

/**

* test urls : https://test-external.payex.com/pxorder/pxorder.asmx?wsdl

* https://test-confined.payex.com/PxConfined/pxorder.asmx?wsdl

* Type: VISA

* Card number: 4925000000000004

* CVC: 123

* Expire date: 12/12

class PayEx

{

public $priceArgList = ''; // No CPA, VISA,

public $currency;

public $vat =0; // Vat

public $orderID = "60"; // Local order id

public $description = ''; // Product description

public $clientIPAddress = '';

public $clientIdentifier = '';

public $additionalValues = '';//'DOCUMENTID=

public $externalID = '';

public $view = 'CC'; // Payment method PayEx

public $agreementRef = '';

public $cancelUrl = '';

public $config = '';

private $respons;

private $orderRef;

var $account_no;

var $encrypted_key; // Qwefgdfgdfgre5464564WpH

var $uniqueId;

var $PxOrderWSDL = "https://test-external.payex.com/pxorder/pxorder.asmx?wsdl";

var $PxConfinedWSDL = "https://test-confined.payex.com/PxConfined/pxorder.asmx?wsdl";

function PayEX() {

$this->account_no = 45667854781;

$this->encrypted_key = Qwefgdfgdfgre5464564WpH;

$this->testmode = 1;

if($this->testmode == 1){

$this->PxOrderWSDL = "https://test-external.payex.com/pxorder/pxorder.asmx?wsdl";

$this->PxConfinedWSDL = "https://test-confined.payex.com/PxConfined/pxorder.asmx?wsdl";

}

else{

$this->PxOrderWSDL = "https://external.payex.com/pxorder/pxorder.asmx?wsdl";

$this->PxConfinedWSDL = "https://confined.payex.com/PxConfined/pxorder.asmx?wsdl";

}

/**

* Set payment configuration

* @param $apiConfig

function setPaymentInfo($apiConfig){

$this->description = $apiConfig['description'];

$this->currency = $apiConfig['currency'];

$this->uniqueId = $apiConfig['uniqueId'];

}

/**

* Proccess the payment details

* @param array $data

* @param string $paymentStatus : AUTHORIZATION or SALE

function process($data,$paymentStatus){

switch($paymentStatus) {

case S:

$data['pxmerchant_account_no'] = $this->account_no;

$data['pxmerchant_encpt_key'] = $this->encrypted_key;

$data['description'] = $this->description;

$data['currency_details'] = $this->currency;

$data['purchaseOperation'] = 'AUTHORIZATION';

$this->TwoPhaseTransaction($data);

}

/**

* Initialisation of data to be passed to payment gateway

* @param array $data

* @return array $paramas

function initialization($data)

{

//$_server won't work if run from console.

$this->clientIPAddress = $_SERVER['REMOTE_ADDR'];

$this->clientIdentifier = "USERAGENT=".$_SERVER['HTTP_USER_AGENT'];

//Not sure why we need to do this - for large amounts we need to preserver the decimals (not as 1.2E6)

//So converting it to string;

$amtasStr = $data['totalPaymentValue'] . '';

$res = $amtasStr * 100;

$params = array

(

'accountNumber' => $this->account_no,

'purchaseOperation' => $data['purchaseOperation'],

'price' => sprintf("%s",$res),

'priceArgList' => $this->priceArgList,

'currency' => 'NOK',

'vat' => '0',

'orderID' => $this->uniqueId,

'productNumber' => $AdBase,// A ten digit no that needs to passed to payment gateway

'description' => substr($data['description'],0,158),

'clientIPAddress' => $this->clientIPAddress,

'clientIdentifier' => $this->clientIdentifier,

'additionalValues' => $this->additionalValues,

'externalID' => $this->externalID,

'returnUrl' => 'BASEURL/success/', // for testing

'view' => $this->view,

'agreementRef' => $this->agreementRef,

'cancelUrl' => BASEURL/error/',// for testing

'clientLanguage' => 'nb-NO'

);

return $params;

}

/**

* Start payment processing

* @param array $data

function TwoPhaseTransaction($data)

{

$params = $this->initialization($data);

$result = $this->initialize7($params);

$status = $this->checkStatus($result);

// if code & description & errorCode is OK, redirect the user

if($status['code'] == "OK" && $status['errorCode'] == "OK" && $status['description'] == "OK")

{

$_SESSION['payexOrderRef'] = $status['orderRef'];

header('Location: '.$status['redirectUrl']);

exit;

}else {

foreach($status as $error => $value)

{

echo "$error , $value "."\n";

}

/**

* Inistailising soap client and post data

* @param $params

* @return $respons xml response data

public function initialize7($params)

{

$PayEx = new SoapClient($this->PxOrderWSDL,array("trace" => 1, "exceptions" => 0));

//create the hash

$hash = $this->createHash(trim(implode("", $params)));

//append the hash to the parameters

$params['hash'] = $hash;

try{

//defining which initialize version to run, this one is 7.

$respons = $PayEx->Initialize7($params);

}catch (SoapFault $error){

echo "Error: {$error->faultstring}";

}

return $respons->{'Initialize7Result'};

}

/**

* Parse XML data to array

* @param XML $xml

* @return array $status

public function checkStatus($xml) {

$returnXml = new SimpleXMLElement($xml);

$code = strtoupper($returnXml->status->code);

$errorCode = strtoupper($returnXml->status->errorCode);

$description = strtoupper($returnXml->status->description);

$orderRef = strtoupper($returnXml->orderRef);

$authenticationRequired = strtoupper($returnXml->authenticationRequired);

return $status = array(

'code'=>$code,

'errorCode'=>$errorCode,

'description'=>$description,

'redirectUrl'=>$returnXml->redirectUrl,

'orderRef'=>$orderRef,

'authenticationRequired'=>$authenticationRequired);

}

/**

* Create hash value for passign it to the payex

* @param $params : data to be posted

* @return hash value

public function createHash($params) {

$params = $params.$this->encrypted_key;

return md5($params);

}

/**

* On response from Payex

* @param $orderRef : payment ref id from payex

* @return array : transaction process result

function Completeorder($orderRef)

{

//$orderRef = $orderRef; //'24713cacaf4c47709ff352e8a44efb38';

$params = array

(

'accountNumber' => $this->account_no,

'orderRef' => $orderRef

);

// complete the transaction by passing the refid to payex

$completeResponse = $this->Complete($params);

$result = $this->ckhCompleteResp($completeResponse);

Transaction status (defined in payex_defines.php):

0=Sale, 1=Initialize, 2=Credit, 3=Authorize, 4=Cancel, 5=Failure, 6=Capture

if ($result['transactionStatus'] == '0' || $result['transactionStatus'] == '6'){

echo 'Order successfully completed.';

}else if($result['transactionStatus'] == '5'){

echo 'Order unsuccessfull';

}else {

/* status 3 is in this section */

echo "Transaction not completed.";

}

return $result;

}

/**

* complete the transaction by passing the refid to payex

* @param array $params : account no and refid

* @return xml response data

function Complete($params){

$PayEx = new SoapClient($this->PxOrderWSDL,array("trace" => 1, "exceptions" => 0));

//create the hash

$hash = $this->createHash(trim(implode("", $params)));

//append the hash to the parameters

$params['hash'] = $hash;

try{

//defining which complete

$respons = $PayEx->Complete($params);

}catch (SoapFault $error){

echo "Error: {$error->faultstring}";

}

return $respons->{'CompleteResult'};

}

function Capture($params)

{

$PayEx = new SoapClient($this->PxOrderWSDL,array("trace" => 1, "exceptions" => 0));

//create the hash

$hash = $this->createHash(trim(implode("", $params)));

//append the hash to the parameters

$params['hash'] = $hash;

try{

//defining which complete

$respons = $PayEx->Capture3($params);

}catch (SoapFault $error){

echo "Error: {$error->faultstring}";

}

return $respons->{'Capture3Result'};

}

// Authorise to credit

function intialise($params)

{

//$_server won't work if run from console.

$params = array

(

'accountNumber' => $this->account_no,

'transactionNumber' => $params['transactionNumber'],

'amount' => $params['amount']*100,

'orderId' =>$params['orderId']);

return $params;

}

/**

* Parse the xml response on payex complete transaction

* @param $params : xml data

* @return array of response data

function ckhCompleteResp($params) {

$returnXml = new SimpleXMLElement($params);

$code = strtoupper($returnXml->status->code);

$errorCode = strtoupper($returnXml->status->errorCode);

$description = strtoupper($returnXml->status->description);

$transactionStatus = strtoupper($returnXml->transactionStatus);

$transactionNumber = strtoupper($returnXml->transactionNumber);

$orderId = strtoupper($returnXml->orderId);

return $status = array(

'code'=>$code,

'errorCode'=>$errorCode,

'description'=>$description,

'transactionStatus'=>$transactionStatus,

'transactionNumber'=>$transactionNumber,

'orderId'=>$orderId);

}

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

6. On submitting the purchase details

$payconfig = array('pxmerchant_account_no' => $payexaccountnumber,

'pxmerchant_encpt_key' => $payexencryptionkey,

'productNumber' => $dealdetails["DealId"],

'orderID' => $dealdetails["DealId"],

'uniqueId' => $unique_id,

'Price' => $dealdetails["Price"],

'currency' => $payexcurrency,

'description' => utf8_encode($dealdetails["details"]));

//$paymentdata contains all the details of all purchase

//$transactionStatus = S;

$paymentObject = new PayEx();

$paymentObject->setPaymentInfo($payconfig);

$paymentStatus = $paymentObject->process($paymentdata,$transactionStatus);

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

7. Capturing of authorised payments

$paymentObject = new PayEx();

$params = array();

$params['amount'] = $transaction->TransactionAmount;

$params['accountNumber'] = $this->view->config->payment->payexaccountnumber;

$params['transactionNumber'] = $transaction->PaypalReferenceId;

$params['orderId'] = $transaction->UniqueId;

$hash = $paymentObject->intialise($params);

$response = $paymentObject->Capture($hash);

//the response will be an xml we need to parse the xml to get the response

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Worldpay payment gateway integration php

2011-12-27T12:39:00.000+05:30

INTEGRATE WORLDPAY PAYMENT GATEWAY

--------------------------------------

1.Create a test Account in World-pay

2.Get worldpay merchant Id and Installation Id

3.Before the passing the Payment details to payment Gateway we need to store

the details of what we are passing such as unique id,amount,product id like that

4.Befor making a test payment we are required to upload two files to the worldpay server

5.They are resultC.html and resultY.html

6.the content in this html are below

7.resultY.html is called after the successful payment and this page will be refreshed after 2 seconds

+++++++++++++++++++++++resultY.html+++++++++++++++++

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

<html>

<head>

<WPDISPLAY ITEM=transId>&cartId=<WPDISPLAY ITEM=cartId>&transStatus=<WPDISPLAY ITEM=transStatus>">

</head>

<body>

</body>

</html>

++++++++++++++++++++++++++++++++++++++++++++++++++++++++

8.resultC.html is called after the Failed/cancelled payment and this page will be refreshed after 2 seconds

+++++++++++++++++++++++resultC.html++++++++++++++++++++++

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

<html>

<head>

<WPDISPLAY ITEM=transId>&cartId=<WPDISPLAY ITEM=cartId>&transStatus=<WPDISPLAY ITEM=transStatus>">

</head>

<body>

</body>

</html>

+++++++++++++++++++++++++++++++++++++++++++++++++++++++

9. These two files are to be Uploaded worldpay server before the payment and never send that to production

push to production only 8 hrs before production release only

10.After saving the details just render the form and make that form auto submit

++++++++++++++++++++++++++ Auto submit form +++++++++++++

//for Test details

$worldPayUrl = "https://secure-test.wp3.rbsworldpay.com/wcc/purchase";

$paymentmode = 100;

//for Production details

$worldPayUrl = "https://secure.wp3.rbsworldpay.com/wcc/purchase";

$paymentmode = 0;

<form name="worldpaypayment" action="<?=$worldPayUrl;?>" onsubmit="return orderDisable();" onload="submit();" method="post">

</form>

document.worldpaypayment.submit();

</script>

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

11.After the successful Payment worldpay will send the details to our application

12. the details contain $resp_data[];

$transactionKey = $resp_data['transId'];//this is the transaction id that is

//send by the world pay to check in there cms for later verification

$cartId = $resp_data['cartId'];

$transStatus = $resp_data['transStatus'];

if($transStatus == "Y"){

get the details of the purchase from the DB with the $cartId(Unique id)

an update the details

}else{//transaction failed

//redirect to error page

}

Caixa Catalunya payment gateway integration php

2011-12-27T11:26:00.000+05:30

Integrate Catalunya Caixa Payment Gateway

Get a test details for setring up the Payment gateway

Get the caixacatalunya Passphrasein (Unique string that is used to create the sha1 code)

Get the caixacatalunya Merchantid (The merchant Id is the Account id)

After the buy we need to validate the user details

Before for sending the details to payment gateway we need to save the details so that we can verify the details after the payment

After entering all the details we need to redirect to another page it contain a form and the variables which are in hidden and we need to auto submit after loading the page

In the Redirect page model way of implementing the payment gateway

Creating the signature

<?php

$order = rand(1000,9999).sha1(date('ymdhis'));

$unique_id = substr($order, 0, 12);

$amount = 10.00;// orginal price of product

$CaixaCatalunya = $amount * 100;

$MERCHANTID = $caixacatalunyaMerchantid; //'1234567';

$shacode = $passPhrasein; //046hgj5h55h7j0a8f6a

$currency = '978';

$transactionType = '0';

$terminal = '1';

$urlMerchant = 'siteurl/success'; //success url

$sigFormat = $CaixaCatalunya.$unique_id.$MERCHANTID.

$currency.$transactionType.$urlMerchant.$shacode;

$signature = sha1($sigFormat);

$actionUrl = "https://sis-t.sermepa.es:25443/sis/realizarPago"; //For test Payments

$actionUrl = "https://sis.sermepa.es/sis/realizarPago"; //For Production

$languageArray = array('es_LA'=>'1', 'en_US'=>'2', 'fr_FR'=>'7', 'nl_NL'=>'6', 'sv_SE'=>'8'); //language Codes

intermediate Page

</form>

After the Success full payment the payment gateway will redirect to successurl

The return Url will pass all the details
Get the datas in the return url
$resp_data //contains all the variables Passed via Url

Validation of Success full Payment

$shacode = $caixacatalunyaPassphrasein; //ghfghfghf123456789

$CaixaCatalunya = $resp_data['Ds_Amount'].$resp_data['Ds_Order']. $resp_data['Ds_MerchantCode'].$resp_data['Ds_Currency'].

$resp_data['Ds_Response'].$shacode;

$CaixaCatalunya = strtoupper(sha1($CaixaCatalunya));

if($resp_data['Ds_Signature'] == $CaixaCatalunya && ($resp_data['Ds_Response'] == '0000' || $resp_data['Ds_Response'] == '0001')) {

//Success

}else{//Failed

}

Ogone Payment gateway integration php

2011-12-26T21:23:00.000+05:30

Implementing ogone payment gateway and sample code

Get the test details for implementation

Get the ogone Id that is pspid

Add passphrasein and passphrase out in payment gateway console

The signature is created by arranging the passing variables(ie the variable/field that are passed to payment gateway) should be arranged in alphabetical order and crate the sha1 as shown below

They use a redirect model for payment

ie the user will be rediected to there site for making the payment

Before for sending the details to payment gateway we need to save the details so that we can verify the details after the payment

On the buy page on submitting we need a serverside validation of the details the user have entered and after that the user details need to be stored in our DB after the payment is successfully completed

After entering all the details we need to redirect to another page it contain a form and the form variables, which are in hidden and we need to auto submit after loading the page

<?php

        $PSPID = $ogonepspid; //'OGONETEST';
        $Price = $amount * 100;
        $passphrase = $passphrasein;//'TESTPHASEIN';
        $unique_id =RAND(890000,895689596);

          $Ogone_sha1 = "ACCEPTURL="BASEURL/successURL".$passphrase.
                        "AMOUNT=".$Price.$passphrase.
                        "CANCELURL="BASEURL/error".$passphrase.
                        "CN=".$data['firstname'].$passphrase.
                        "CURRENCY=EUR".$passphrase.
                        "DECLINEURL="BASEURL/error".$passphrase.
                        "EMAIL=".$data['email'].$passphrase.
                        "EXCEPTIONURL="BASEURL/error".$passphrase.
                        "LANGUAGE=en_us".$passphrase.
                        "LOGO="LOGOURL".$passphrase.
                        "OPERATION=SAL".$passphrase.
                        "ORDERID=".$unique_id.$passphrase.
                        "PSPID=".$PSPID.$passphrase;

Creating the signature

        $Ogone_sha1 = sha1($Ogone_sha1);

?>

                                             On the intermediate page

<form action="https://secure.ogone.com/ncol/test/orderstandard.asp" method="post" name="ogone">
<input name="PSPID" type="hidden" value="963852741" />
                            <input name="ORDERID" type="hidden" value="123469" />
                            <input name="AMOUNT" type="hidden" value="1000" />
                            <input name="CURRENCY" type="hidden" value="EUR" />
                            <input name="LANGUAGE" type="hidden" value="en_us" />
                            <input name="CN" type="hidden" value="FIRSTNAME" />
                            <input name="EMAIL" type="hidden" value="test@example.com" />
                            <input name="OPERATION" type="hidden" value="SAL" />
                            <input name="SHASIGN" type="hidden" value="<?php echo $Ogone_sha1;?>" />
                            <input name="LOGO" type="hidden" value="Logo to be shown on page" />

                            <input name="acceptUrl" type="hidden" value="acceptUrl" />
                            <input name="declineUrl" type="hidden" value="cancel Url" />
               <input name="exceptionUrl" type="hidden" value="exceptionUrl or Cancel url" />
                            <input name="cancelurl" type="hidden" value="cancel url" />
                            <input name="submit" type="submit" value="submit" />
</form>

After the successful payment the payment will redirect to success url

validation of success url details

<?php
$resp_data = $urldetails;             //GET[DATA] / POST[DATA];
// get the data from the payment gateway by get or by post method

$passphrase = $ogonepassphraseout;                //test phraseout

                $ogoneSha = 'ACCEPTANCE='.$resp_data['ACCEPTANCE'].$passphrase
                            .'AMOUNT='.$resp_data['amount'].$passphrase
                            .'BRAND='.$resp_data['BRAND'].$passphrase
                            .'CARDNO='.$resp_data['CARDNO'].$passphrase
                            .'CN='.$resp_data['CN'].$passphrase
                            .'CURRENCY='.$resp_data['currency'].$passphrase
                            .'ED='.$resp_data['ED'].$passphrase
                            .'IP='.$resp_data['IP'].$passphrase
                            .'NCERROR='.$resp_data['NCERROR'].$passphrase
                            .'ORDERID='.$resp_data['orderID'].$passphrase
                            .'PAYID='.$resp_data['PAYID'].$passphrase
                            .'PM='.$resp_data['PM'].$passphrase
                            .'STATUS='.$resp_data['STATUS'].$passphrase
                            .'TRXDATE='.$resp_data['TRXDATE'].$passphrase;

        $ogoneSha1 = strtoupper(sha1($ogoneSha));

if($ogoneSha1 == $resp_data['SHASIGN'] && ($resp_data['STATUS'] == '9')){
//        payment success

}else{
//       payment failed
}