Scribd
Upload
6 views3 pages

Sample

This PHP script is designed for processing payments using the Dragonpay gateway. It includes form handling for transaction details such as transaction ID, amount, description, and email, along with input validation and sanitization. The script generates a payment URL based on the provided parameters and the selected environment (test or live).

Uploaded by

Morse Code
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
6 views3 pages

Sample

This PHP script is designed for processing payments using the Dragonpay gateway. It includes form handling for transaction details such as transaction ID, amount, description, and email, along with input validation and sanitization. The script generates a payment URL based on the provided parameters and the selected environment (test or live).

Uploaded by

Morse Code
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 3

<?

php

/**
* Do not forget to set these to your Account credentials.
* It would be better to store these as an admin setting.
**/
define('MERCHANT_ID', '');
define('MERCHANT_PASSWORD', '');

define('ENV_TEST', 0);
define('ENV_LIVE', 1);

$environment = ENV_TEST;

?>

<?php

$errors = array();
$is_link = false;

$parameters = array(
'merchantid' => MERCHANT_ID,
'txnid' => '000001',
'amount' => 100,
'ccy' => 'PHP',
'description' => 'My order description.',
'email' => '[email protected]',
);

$fields = array(
'txnid' => array(
'label' => 'Transaction ID',
'type' => 'text',
'attributes' => array(),
'filter' => FILTER_SANITIZE_STRING,
'filter_flags' => array(FILTER_FLAG_STRIP_LOW),
),
'amount' => array(
'label' => 'Amount',
'type' => 'number',
'attributes' => array('step="0.01"'),
'filter' => FILTER_SANITIZE_NUMBER_FLOAT,
'filter_flags' => array(FILTER_FLAG_ALLOW_THOUSAND,
FILTER_FLAG_ALLOW_FRACTION),
),
'description' => array(
'label' => 'Description',
'type' => 'text',
'attributes' => array(),
'filter' => FILTER_SANITIZE_STRING,
'filter_flags' => array(FILTER_FLAG_STRIP_LOW),
),
'email' => array(
'label' => 'Email',
'type' => 'email',
'attributes' => array(),
'filter' => FILTER_SANITIZE_EMAIL,
'filter_flags' => array(),
),
);

if (isset($_POST['submit'])) {
// Check for set values.
foreach ($fields as $key => $value) {
// Sanitize user input. However:
// NOTE: this is a sample, user's SHOULD NOT be inputting these values.
if (isset($_POST[$key])) {
$parameters[$key] = filter_input(INPUT_POST, $key, $value['filter'],
array_reduce($value['filter_flags'], function ($a, $b) { return $a
| $b; }, 0));
}
}

// Validate values.
// Example, amount validation.
// Do not rely on browser validation as the client can manually send
// invalid values, or be using old browsers.
if (!is_numeric($parameters['amount'])) {
$errors[] = 'Amount should be a number.';
}
else if ($parameters['amount'] <= 0) {
$errors[] = 'Amount should be greater than 0.';
}

if (empty($errors)) {
// Transform amount to correct format. (2 decimal places,
// decimal separated by period, no thousands separator)
$parameters['amount'] = number_format($parameters['amount'], 2, '.',
'');
// Unset later from parameter after digest.
$parameters['key'] = MERCHANT_PASSWORD;
$digest_string = implode(':', $parameters);
unset($parameters['key']);
// NOTE: To check for invalid digest errors,
// uncomment this to see the digest string generated for computation.
// var_dump($digest_string); $is_link = true;
$parameters['digest'] = sha1($digest_string);
$url = 'https://gw.dragonpay.ph/Pay.aspx?';
if ($environment == ENV_TEST) {
$url = 'http://test.dragonpay.ph/Pay.aspx?';
}

$url .= http_build_query($parameters, '', '&');

if ($is_link) {
echo '<br><a href="' . $url . '">' . $url . '</a>';
}
else {
header("Location: $url");
}
}
}
?>
<!DOCTYPE html>
<html>
<head>
<style>
label {width: 130px; float: left;}
input {width: 250px;}
</style>
</head>
<body>

<?php if (!empty($errors)): ?>


<div class="errors">
<div class="error">
<?php echo implode('</div><div class="error">', $errors); ?>
</div>
</div>
<?php endif; ?>
<div class="form">
<form method="post">
<?php foreach ($fields as $key => $value): ?>
<div class="input">
<span class="label"><label for="<?php echo $key; ?>">
<?php echo $value['label']; ?>:</label></span>
<input type="<?php echo $value['type']; ?>"
<?php echo implode(' ', $value['attributes']); ?>
name="<?php echo $key; ?>" value="<?php echo $parameters[$key]; ?>">
</div>
<?php endforeach; ?>
<input type="submit" name="submit" value="Pay Now">
</form>
</div>
</body>
</html>

You might also like