GPWebPay is a PHP library for online payments via GPWebPay service
If you are using Nette framework, you may want Pixidos/GPWebPay Nette extension instead.
<?phpnamespaceFoo\Bar;
useGranam\GpWebPay\Settings;
useGranam\GpWebPay\DigestSigner;
useGranam\GpWebPay\CardPayResponse;
useGranam\GpWebPay\Codes\CurrencyCodes;
useAlcohol\ISO4217asIsoCurrencies;
useGranam\GpWebPay\CardPayRequestValues;
useGranam\GpWebPay\CardPayRequest;
useGranam\GpWebPay\Exceptions\GpWebPayErrorByCustomerResponse;
useGranam\GpWebPay\Exceptions\GpWebPayErrorResponse;
useGranam\GpWebPay\Exceptions\ResponseDigestCanNotBeVerified;
useGranam\GpWebPay\Exceptions\ExceptionasGpWebPayException;
// SET UP$settings = Settings::createForProduction(
__DIR__ . '/foo/bar/your_private_key_downloaded_from_gp_web_pay.pem',
'TopSecretPasswordForPrivateKey',
__DIR__ . '/foo/bar/gp_web_pay_server_public_key_also_downloaded_from_gp_web_pay.pem',
'123456789'// your 'merchant number' given to you by GP WebPay
null // without explicit URL for response the current will be used - INCLUDING query string
);
$digestSigner = newDigestSigner($settings);
// RESPONSEif (count($_POST) > 0) {
try {
$response = CardPayResponse::createFromArray($_POST, $settings, $digestSigner);
} catch (GpWebPayErrorByCustomerResponse$gpWebPayErrorByCustomerResponse) {
// some pretty error box for customer information about HIS mistake (for example "an invalid card number")/** * WARNING: do not rely blindly on this detection - for example if YOU (developer) are sending * card number in a hidden field, because the customer provided it to its account before and * does not need to enter it again, but the card number has been refused by GP WebPay, * you will show to the customer confusing message about an invalid card number, * although he does not enter it. * For full list of auto-detected customer mistakes @see GpWebPayErrorByCustomerResponse::isErrorCausedByCustomer */echo$gpWebPayErrorByCustomerResponse->getLocalizedMessage();
} catch (GpWebPayErrorResponse$gpWebPayErrorResponse) {
/* GP WebPay refuses request by YOUR (developer) mistake (for example "a duplicate order number") * - show an apology to the customer and log this, solve this */
} catch (ResponseDigestCanNotBeVerified$responseDigestCanNotBeVerified) {
/* values in response have been changed(!), * show an apology (or a warning?) to the customer and probably log this for an evidence */
} catch (GpWebPayException$gpWebPayException) { // EVERY exception share this interface/* some generic error like "processing error on GP WebPay server", * show an apology to the customer and log this, solve this (or just try again later, it happens) */
}
/** * it is OK, lets process $response->getParametersForDigest(); * @see \Granam\GpWebPay\CardPayResponse::getParametersForDigest */
} else { // REQUEST$currencyCodes = newCurrencyCodes(newIsoCurrencies());
try {
$cardPayRequestValues = CardPayRequestValues::createFromArray($_POST, $currencyCodes);
$cardPayRequest = newCardPayRequest($cardPayRequestValues, $settings, $digestSigner);
} catch (GpWebPayException$exception) {
/* show an apology to the customer * (for example "we are sorry, our payment gateway is temporarily unavailable") and log it, solve it */exit(); // exit in the middle of a script is not a good idea - this is just a fast-and-dirty example
} ?>
<html>
<body>
<!-- some pretty recapitulation of the order -->
<form method="post" action="<?=$cardPayRequest->getRequestUrl() ?>">
<?phpforeach ($cardPayRequestas$name => $value) {
?><input type="hidden" name="<?=$name?>" value="<?=$value?>"
<?php } ?>
<input type="submit" value="Confirm order">
</form>
</body>
</html>
<?php } ?>Almost all possible error cases covers clearly by many of exceptions, but some are so nasty that they can not be covered:
- after sending a request to GP WebPay you see just a logo and HTTP response code is 401
- probably the URL for response you provided to GP WebPay in URL parameter is not valid in the point of view of GP
WebPay
- ensure that URL exists and there is NO redirection, like https://www.github.com to https://github.com/ with trailing slash (don't believe your eyes in a browser address bar, the trailing slash is often hidden there)
- probably the URL for response you provided to GP WebPay in URL parameter is not valid in the point of view of GP
WebPay
For tests against testing payment gateway you can use payment card
- Card number:
4056070000000008 - Card validity:
12/2020 - CVC2:
200 - 3D Secure password:
password
composer require granam/gpwebpayThis library originates from Pixidos/GPWebPay, which has same functionality, but can be used only as a Nette framework extension. All credits belong to the original author Ondra Votava from Pixidos.
Nevertheless, I am grateful to him for sharing that library publicly. Please more of such people!