Website Payment Acceptance

We offer two types of billing: invoices created by the merchant and invoices created by the BPay system.

In the first case, the invoice is created by the merchant using the API described below and the pay.bpay.md platform. In the second case, the invoice is created by BPay on the website or the payment terminal.

The interaction mechanism described below will provide you with the ability to issue an invoice to the user for payment with the amount you specify. The user will either be redirected to the payment service page, where they can pay the invoice in a convenient way, or you will receive a link (URL) of this invoice that you can send to the user via e-mail or generate a QR code.

To initiate a payment through a one-time payment form, you just need to send the user to a special URL and indicate a set of mandatory parameters.

The CheckAccount functionality is used in the second method of invoice generation, where BPay automatically creates the invoice for the customer. This allows verifying the existence of an account with the merchant before the invoice is generated, ensuring the correctness of the data entered by the client.

At the Check Account stage, the BPay system will make a request to the merchant system in the following format:

{
    "merchantid": "test_merchant",
    "comand": "check",
    "order_id": "123456789",
    "amount": 10000,
    "valute": 498,
    "params": {
        "customer_name": "John Doe",
        "phone_number": "069123456",
        "email": "john.doe@example.com"
    }
}

After receiving the request, you must respond in the corresponding JSON format:

» Format: JSON

{
 'code' => 100,
 'text' => "success"
}

On your site, you must place a form that will contain two fields. The data field contains xml or json (depending on the format you use) with information, and the key field will contain the signature of this data.

 <form method="POST" action="https://pay.bpay.md/merchant">
 <input type="hidden" name="data" value="">
 <input type="hidden" name="key" value="">
 <input type="submit" value="Submit" >
 </form>

Clicking the Submit button will redirect the user to the payment form of the BPay.md system. After making the payment, the user will be returned to the page of your site specified in success_url. Within 15 seconds, the payment service will send a notification regarding the payment received in the mode specified by you.

It is necessary to form an array encoded in JSON, which in turn is encoded in base64.

$json = [
 'uuid' => '9fdf75e2-858c-4ed4-98bd-7035168542d0',
 'merchantid' => 'test_merchant',
 'amount' => 10,
 'order_id' => 9876,
 'description' => 'Integration request',
 'lang' => 'en',
 'method' => 'bpay',
 'success_url' => 'https://bpay.md/success',
 'fail_url' => 'https://bpay.md/fail',
 'callback_url' => 'https://bpay.md/callback',
 'valute' => 498,
 'dtime' => date('Y-m-d H:i:s'),
 'getUrl' => '1',
 'params' => [
 'type_of_payer' => 'main',
 'info' => 'test information',
 'invoice' => [
 [
 'id' => 156,
 'name' => 'mobile phone',
 'model' => 'iphone 8+',
 'sum' => 800
 ],
 [
 'id' => 556,
 'name' => 'TV Philips',
 'model' => 'K223AA2200',
 'sum' => 300
 ]
 ]
 ]
];
$data = base64_encode(json_encode($json));

For additional security of your payments, we perform a mandatory digital signature verification when creating a payment. The presence of a signature guarantees protection against substitution of the transmitted values (for example, changing the payment amount or the order number).

» Format: JSON

The signature is formed by combining the JSON data with the secret key that is issued during store registration. Then, you need to generate a hash using the sha256 algorithm.

$secretKey = 'secretKey';
$key = hash('sha256', base64_encode(json_encode($json)) . $secretKey)

<?php

$secretKey="123456"; // signature obtained during merchant registration
 
$json = [
 'uuid' => '9fdf75e2-858c-4ed4-98bd-7035168542d0',
 'merchantid' => 'test_merchant',
 'amount' => 10,
 'order_id' => 9876,
 'description' => 'Payment description',
 'lang' => 'en',
 'success_url' => 'https://bpay.md/success',
 'fail_url' => 'https://bpay.md/success/fail',
 'callback_url' => 'https://bpay.md/success/callback',
 'currency' => 498,
 'dtime' => date('Y-m-d H:i:s'),
 'getUrl' => '1',
 'params' => [
 'type_of_payer' => 'main',
 'info' => 'test information',
 'invoice' => [
 [
 'id' => 156,
 'name' => 'mobile phone',
 'model' => 'iphone 8+',
 'sum' => 800
 ],
 [
 'id' => 556,
 'name' => 'TV Philips',
 'model' => 'K223AA2200',
 'sum' => 300
 ]
 ]
 ]
];

// encrypt data and sign them
$data = base64_encode(json_encode($json));
$key = hash('sha256', $data . $secretKey);
?>

 <form method="POST" action="https://pay.bpay.md/merchant">
 <input type="hidden" name="data" value="<? echo $data; ?>">
 <input type="hidden" name="key" value="<? echo $sign; ?>">
 <input type="submit" value="Transfer" >
 </form>

Clicking the Submit button will redirect the payer to the payment form of the BPay.md system. After the payment is successfully completed, the user will be returned to the page of your site specified in success_url. In 15 seconds, the merchant will receive a notification regarding the payment received.