In today’s era online and digital payment transaction is very common. This is a good gift IT technology since it is making our life easy and many other things, but day by day we are going dependent on Bank’s app and Payment Gateways. Here it comes into our life to solve our dependency on a single bank network.

What is payment gateways?

Basically, the payment gateway is precompiled work developed by third parties who takes care of securing TLS layer and other important parameter in order satisfy PCI compliance, payment gateway mainly developed for eCommerce entrepreneurs and developers in order to make ease to integrate digital payment transaction via multiple methods like NTES, RTGS, IMPS, CARD, UPI etc to increase online marketplace.

ICICI Bank also has created a payment gateway for us which is easzypay. It is based on a plug and plays principle. They provide us a URL and based on that we transfer our user on Eazypay website.

How to secure our Eazypay payment url

For general purpose, I am explaining the encryption process in PHP since it very common nowadays in web development

PHP code to encrypt each payload parameter as follows

function aes128Encrypt($str,$key)
 { $block = mcrypt_get_block_size('rijndael_128', 'ecb');
  $pad = $block - (strlen($str) % $block); 
  $str .= str_repeat(chr($pad), $pad); 
  return base64_encode(mcrypt_encrypt(MCRYPT_RIJNDAEL_128, $key, $str, MCRYPT_MODE_ECB)); 
 }

Where $key is your AES KEY which your ICICI Bank will provide to you and $str is the string which you want to encrypt. Many times developer thinks that their job is just user to payment gateway’s site and they are done but my this is not the ethics way doing this. We need to take the user to new experience our user(customer) must have the right to know why the transaction has failed. below is extra work done from my site.

function response_code($code)
 {
     $rc=array('E000' =>'"Received Confirmation from the Bank, Yet to Settle the transaction with the Bank, Settlement Pending.', 
     'E001' =>'Unauthorized Payment Mode', 
     'E002' =>'Unauthorized Key', 
     'E003' =>'Unauthorized Packet', 
     'E004' =>'Unauthorized Merchant', 
     'E005' =>'Unauthorized Return URL', 
     'E006' =>'"Transaction Already Paid, Received Confirmation from the Bank, Yet to Settle the transaction with the Bank', 
     'E007' =>'Transaction Failed', 
     'E008' =>'Failure from Third Party due to Technical Error', 
     'E009' =>'Bill Already Expired', 
     'E0031' =>'Mandatory fields coming from merchant are empty', 
     'E0032' =>'Mandatory fields coming from database are empty', 
     'E0033' =>'Payment mode coming from merchant is empty', 
     'E0034' =>'PG Reference number coming from merchant is empty', 
     'E0035' =>'Sub merchant id coming from merchant is empty', 
     'E0036' =>'Transaction amount coming from merchant is empty', 
     'E0037' =>'Payment mode coming from merchant is other than 0 to 9', 
     'E0038' =>'Transaction amount coming from merchant is more than 9 digit length', 
     'E0039' =>'Mandatory value Email in wrong format', 
     'E00310' =>'Mandatory value mobile number in wrong format', 
     'E00311' =>'Mandatory value amount in wrong format', 
     'E00312' =>'Mandatory value Pan card in wrong format', 
     'E00313' =>'Mandatory value Date in wrong format', 
     'E00314' =>'Mandatory value String in wrong format', 
     'E00315' =>'Optional value Email in wrong format', 
     'E00316' =>'Optional value mobile number in wrong format', 
     'E00317' =>'Optional value amount in wrong format', 
     'E00318' =>'Optional value pan card number in wrong format', 
     'E00319' =>'Optional value date in wrong format', 
     'E00320' =>'Optional value string in wrong format', 
     'E00321' =>'Request packet mandatory columns is not equal to mandatory columns set in enrolment or optional columns are not equal to optional columns length set in enrolment', 
     'E00322' =>'Reference Number Blank', 
     'E00323' =>'Mandatory Columns are Blank', 
     'E00324' =>'Merchant Reference Number and Mandatory Columns are Blank', 
     'E00325' =>'Merchant Reference Number Duplicate', 
     'E00326' =>'Sub merchant id coming from merchant is non numeric', 
     'E00327' =>'Cash Challan Generated', 
     'E00328' =>'Cheque Challan Generated', 
     'E00329' =>'NEFT Challan Generated', 
     'E00330' =>'Transaction Amount and Mandatory Transaction Amount mismatch in Request URL', 
     'E00331' =>'UPI Transaction Initiated Please Accept or Reject the Transaction', 
     'E00332' =>'Challan Already Generated, Please re-initiate with unique reference number', 
     'E00333' =>'Referer value is null / invalid Referer', 
     'E00334' =>'Value of Mandatory parameter Reference No and Request Reference No are not matched', 
     'E0801' =>'FAIL', 
     'E0802' =>'User Dropped', 
     'E0803' =>'Canceled by user', 
     'E0804' =>'User Request arrived but card brand not supported', 
     'E0805' =>'Checkout page rendered Card function not supported', 
     'E0806' =>'Forwarded / Exceeds withdrawal amount limit', 
     'E0807' =>'PG Fwd Fail / Issuer Authentication Server failure', 
     'E0808' =>'Session expiry / Failed Initiate Check, Card BIN not present', 
     'E0809' =>'Reversed / Expired Card', 
     'E0810' =>'Unable to Authorize', 
     'E0811' =>'Invalid Response Code or Guide received from Issuer', 
     'E0812' =>'Do not honor', 
     'E0813' =>'Invalid transaction', 
     'E0814' =>'Not Matched with the entered amount', 
     'E0815' =>'Not sufficient funds', 
     'E0816' =>'No Match with the card number', 
     'E0817' =>'General Error', 
     'E0818' =>'Suspected fraud', 
     'E0819' =>'User Inactive', 
     'E0820' =>'ECI 1 and ECI6 Error for Debit Cards and Credit Cards', 
     'E0821' =>'ECI 7 for Debit Cards and Credit Cards', 
     'E0822' =>'System error. Could not process transaction', 
     'E0823' =>'Invalid 3D Secure values', 
     'E0824' =>'Bad Track Data', 
     'E0825' =>'Transaction not permitted to cardholder', 
     'E0826' =>'Rupay timeout from issuing bank', 
     'E0827' =>'OCEAN for Debit Cards and Credit Cards', 
     'E0828' =>'E-commerce decline', 
     'E0829' =>'This transaction is already in process or already processed', 
     'E0830' =>'Issuer or switch is inoperative', 
     'E0831' =>'Exceeds withdrawal frequency limit', 
     'E0832' =>'Restricted card', 
     'E0833' =>'Lost card', 
     'E0834' =>'Communication Error with NPCI', 
     'E0835' =>'The order already exists in the database', 
     'E0836' =>'General Error Rejected by NPCI', 
     'E0837' =>'Invalid credit card number', 
     'E0838' =>'Invalid amount', 
     'E0839' =>'Duplicate Data Posted', 
     'E0840' =>'Format error', 
     'E0841' =>'SYSTEM ERROR', 
     'E0842' =>'Invalid expiration date', 
     'E0843' =>'Session expired for this transaction', 
     'E0844' =>'FRAUD - Purchase limit exceeded', 
     'E0845' =>'Verification decline', 
     'E0846' =>'Compliance error code for issuer', 
     'E0847' =>'Caught ERROR of type:[ System.Xml.XmlException ] . strXML is not a valid XML string', 
     'E0848' =>'Incorrect personal identification number', 
     'E0849' =>'Stolen card', 
     'E0850' =>'Transaction timed out, please retry', 
     'E0851' =>'Failed in Authorize - PE', 
     'E0852' =>'Cardholder did not return from Rupay', 
     'E0853' =>'Missing Mandatory Field(s)The field card_number has exceeded the maximum length of', 
     'E0854' =>'Exception in CheckEnrollmentStatus: Data at the root level is invalid. Line 1, position 1.', 
     'E0855' =>'CAF status = 0 or 9', 
     'E0856' =>'412', 
     'E0857' =>'Allowable number of PIN tries exceeded', 
     'E0858' =>'No such issuer', 
     'E0859' =>'Invalid Data Posted', 
     'E0860' =>'PREVIOUSLY AUTHORIZED', 
     'E0861' =>'Cardholder did not return from ACS', 
     'E0862' =>'Duplicate transmission', 
     'E0863' =>'Wrong transaction state', 
     'E0864' =>'Card acceptor contact acquirer');
 return @$rc[$code];
 }

where is $code is response code when payment gateway redirect to your website back after completing payment process.

Conculsion

Eazpay is good choice as payment gateway but every payment gateway have some cons and pros as well so before choosing any payment make research on them since most of them so not provide proper support. In case of any integration assistance just feel free to reach me.

by
by