Non-Secure Ödeme

YİNELENEN TALEP

TARIM TALEP

function generateHashKey($total, $installment, $currency_code, $merchant_key, $invoice_id, $app_secret)
{
    $data = $total . '|' . $installment . '|' . $currency_code . '|' . $merchant_key . '|' . $invoice_id;

    $iv = substr(sha1(mt_rand()), 0, 16);
    $password = sha1($app_secret);

    $salt = substr(sha1(mt_rand()), 0, 4);
    $saltWithPassword = hash('sha256', $password . $salt);

    $encrypted = openssl_encrypt("$data", 'aes-256-cbc', "$saltWithPassword", null, $iv);

    $msg_encrypted_bundle = "$iv:$salt:$encrypted";
    $msg_encrypted_bundle = str_replace('/', '__', $msg_encrypted_bundle);

    return $msg_encrypted_bundle;
}

 public static string GenerateHashKey(string total,string installment,string currency_code,string merchant_key,string invoice_id,string app_secret){
                var data = total + '|'+installment+'|'+currency_code+'|'+merchant_key+'|'+invoice_id;
                var sha1 = new SHA1Managed();
                Random rnd = new Random();
                var iv = sha1.ComputeHash(Encoding.UTF8.GetBytes(rnd.ToString()));
                var password = sha1.ComputeHash(Encoding.UTF8.GetBytes(app_secret)).ToString();
                rnd = new Random();
                var shaSalt = sha1.ComputeHash(Encoding.UTF8.GetBytes(rnd.ToString())).ToString();
                var salt = shaSalt.Substring(0, 4);

                var sha256 = new SHA256Managed();
                var saltWithPassword = sha256.ComputeHash(Encoding.UTF8.GetBytes(password+salt));
                //var encrypted = EncryptString(data,saltWithPassword,iv);
                var encrypted = "asdasdasd";
                var msg_encrypted_bundle = iv + ":" + salt + ":" + encrypted;
                msg_encrypted_bundle = msg_encrypted_bundle.Replace("/","__");
                return msg_encrypted_bundle;
            }

                public static string EncryptString(string plainText, byte[] key, byte[] iv){
                    Aes encryptor = Aes.Create();
                    encryptor.Mode = CipherMode.CBC;
                    encryptor.Key = key;
                    encryptor.IV = iv;
                    MemoryStream memoryStream = new MemoryStream();
                        ICryptoTransform aesEncryptor = encryptor.CreateEncryptor();
                        CryptoStream cryptoStream = new CryptoStream(memoryStream, aesEncryptor, CryptoStreamMode.Write);
                        byte[] plainBytes = Encoding.ASCII.GetBytes(plainText);
                        cryptoStream.Write(plainBytes, 0, plainBytes.Length);
                        cryptoStream.FlushFinalBlock();
                        byte[] cipherBytes = memoryStream.ToArray();
                        memoryStream.Close();
                        cryptoStream.Close();
                        string cipherText = Convert.ToBase64String(cipherBytes, 0, cipherBytes.Length);
                        return cipherText;
                }

function generateHashKey(total , installment , currency_code , merchant_key , invoice_id , app_secret) {
    var data = total + "|" + installment + "|" + currency_code + "|" + merchant_key + "|" + invoice_id;

    var randNumIv = Math.floor(Math.random() * (99999999999999999 - 10000000000000000) + 10000000000000000);
    var hashNumIv = sha1(randNumIv);
    hashNumIv = hashNumIv.create();
    var iv = hashNumIv.slice(0,16);

    var hashPass = sha1(app_secret);
    hashPass = hashPass.create();
    var password = hashPass.hex();

    var randNumSalt = Math.floor(Math.random() * (99999999999999999 - 10000000000000000) + 10000000000000000);
    var hashNumSalt = sha1(randNumIv);
    hashNumSalt = hashNumSalt.create();
    var salt = hashNumSalt.hex();

    var strPassSalt = password + salt;
    var hashStr = sha1(strPassSalt);
    strPassSalt.create();
    var saltWithPassword = strPassSalt.hex();

    var encrypted = "";

    var msg_encrypted_bundle = iv + ":" + salt + ":" + encrypted;
    msg_encrypted_bundle = msg_encrypted_bundle.replaceAll("/" , "_");

    return msg_encrypted_bundle;
}

<form target="_top" action="https://test.paybull.com/ccpayment/api/paySmart3D" method="post" id="three_d_form">
    <input type="hidden" name="cc_holder_name" value="John Dao"/>
    <input type="hidden" name="cc_no" value="4508034508034509"/>
    <input type="hidden" name="expiry_month" value="12"/>
    <input type="hidden" name="expiry_year" value="26"/>
    <input type="hidden" name="cvv" value="000"/>
    <input type="hidden" name="currency_code" value="TRY"/>
    <input type="hidden" name="installments_number" value="1"/>
    <input type="hidden" name="invoice_id" value="PAYBULL-INVOICE-1"/>
    <input type="hidden" name="invoice_description" value="INVOICE TEST DESCRIPTION"/>
    <input type="hidden" name="name" value="John"/>
    <input type="hidden" name="surname" value="Dao"/>
    <input type="hidden" name="total" value="10.00"/>
    <input type="hidden" name="merchant_key" value="$2y$10$w/ODdbTmfubcbUCUq/ia3OoJFMUmkM1UVNBiIQIuLfUlPmaLUT1he"/>
    <input type="hidden" name="cancel_url" value="FAIL URL"/>
    <input type="hidden" name="return_url" value="SUCCES URL"/>
    <input type="hidden" name="hash_key" value="32d54deec44e1d10:b45b:FCi9MQ...."/>
    <input type="hidden" name="items" value='[{"name":"URUN","price":10.00,"quantity":1,"description":"ACIKLAMA"}]'/>
    <input type="submit" value="Öde" />
</form>

Array
(
    [order_no] => 167879639814398
    [order_id] => 167879639814398
    [invoice_id] => 1678796401PAYBULL
    [status_code] => 100
    [status_description] => Payment Successfully Completed
    [credit_card_no] => 540667****5403
    [transaction_type] => Auth
    [payment_status] => 1 // Tamamlandı
    [payment_method] => 1
    [error_code] => 100
    [error] => Payment Successfully Completed
    [auth_code] => 262818
    [merchant_commission] => 0
    [user_commission] => 0
    [merchant_commission_percentage] => 0
    [merchant_commission_fixed] => 0
    [installment] => 1
    [amount] => 10
    [hash_key] => 6781df462c7582b9:b645:3ExMA6uvr6y3h3L7MXjhGFLSpPVP8ox2bx__tqx8__shp2MlEQLOkfo9Y0ceHySRVX
    [md_status] => 1
    [original_bank_error_code] => 
    [original_bank_error_description] => 
)

Array
(
    [order_no] => 167879630753329
    [order_id] => 167879630753329
    [invoice_id] => 1678796307PAYBULL
    [status_code] => 41
    [status_description] => N-status/Challenge authentication via ACS: https://emvacs.bkm.com.tr/acs/creq
    [credit_card_no] => 540667****5403
    [transaction_type] => Auth
    [payment_status] => 0 // Başarısız
    [payment_method] => 1
    [error_code] => 41
    [error] => N-status/Challenge authentication via ACS: https://emvacs.bkm.com.tr/acs/creq
    [auth_code] =>
    [merchant_commission] => 0
    [user_commission] => 0
    [merchant_commission_percentage] => 0
    [merchant_commission_fixed] => 0
    [installment] => 1
    [amount] => 10
    [hash_key] => 166d91df38bcd714:720e:HMFSjSLvbicqoHJUu1p+wDZ8oqBSR3YsTjqa2q3nW8dHqePOYhH78yypXOO0Oe5l
    [md_status] => 0
    [original_bank_error_code] => 99
    [original_bank_error_description] => Authentication failed
)

Array
(
    [order_no] => 
    [order_id] => 
    [invoice_id] => 1678797131PAYBULL
    [status_code] => 68
    [status_description] => Invalid hash key
    [credit_card_no] => 
    [transaction_type] => Auth
    [payment_status] => 0
    [payment_method] => 1
    [error_code] => 68
    [error] => Invalid hash key
    [auth_code] => 
    [hash_key] => f37135dd8bc6ebca:4042:8lWRu9cq4cDTVGN0HrclX+Uz+x78LxrIWdsHWX16CvI=
)