Tags: shetabit/multipay
Tags
Fix: Double spending vulnerability in Sep payment driver (#323) * fix: Prevent double spending and replay attacks in Saman payment driver * Fix: Verify transaction amount in SEP payment driver * Fix: Double spending vulnerability by validating invoice transaction IDs * Fix: fail fast before calling SEP remote API to improve performance --------- Co-authored-by: Omid <omidasgari.rade@gmail.com> Co-authored-by: mahdikhanzadi <6291970+khanzadimahdi@users.noreply.github.com>
Fix: amount verification and correct transaction ID in SEP payment dr… …iver (#322) * fix: Prevent double spending and replay attacks in Saman payment driver * Fix: Verify transaction amount in SEP payment driver --------- Co-authored-by: Omid <omidasgari.rade@gmail.com> Co-authored-by: mahdikhanzadi <6291970+khanzadimahdi@users.noreply.github.com>
README.md Updated (#317) * ✨ اضافه شدن درایور پرداخت Stripe به پکیج Shetabit Multipay - درایور Stripe از پایه و بدون هیچ وابستگی اضافه شد - اتصال مستقیم به Stripe Checkout با API خام و Guzzle - بررسی وضعیت پرداخت از طریق checkout.session و بررسی فیلد payment_status - پارامتر session_id از طریق success_url به verify ارسال میشود - متد verify فقط از session_id استفاده میکند، نه payment_intent مستقیم - فایل config/payment.php برای stripe تنظیم شد و env های لازم اضافه شد - کنترلر StripePaymentController برای شروع پرداخت و بررسی نتیجه اضافه شد - کدها تست شدند و پرداخت موفق به صورت کامل شناسایی میشود --- ✨ Add Stripe payment driver to Shetabit Multipay - Stripe driver added with raw API using Guzzle (no SDK) - Connected via Stripe Checkout using checkout/sessions - Payment verified by fetching session and checking payment_status - session_id passed via success_url and used in verify() - Clean config/payment.php updated for stripe settings and .env entries - Added StripePaymentController for starting and verifying payments - Code tested and verified with real successful payments * 🎨 اصلاح استایل فایل درایور Stripe طبق PSR-12 و StyleCI * README.md updated stripe adde to check list and removed from underway
PreviousNext