2. If you require integration that require senangPay’s payment form, please refer to Open API documentation.

B. Basic Info

To start, we will need the information as below. These can be retrieve from senangPay dashboard.

1. Go to Menu > Settings > Profile

2. Refer to Shopping Cart Integration Link section. Get your Merchant ID and Secret Key information.

3. Then you will need to fill in the return URL. This is the URL where senangPay will redirect the buyer after the payment has been processed.

4. Next, you need to fill the Callback URL. Callback URL is used as alternative notification to merchant shopping cart in case there is a breakdown in transaction flow.

C. What parameters to send to senangPay

Below are the details of the elements in the table . This is the credit card expiry month/row_column]

D. How to send the parameters to senangPay

1. The parameters can be send either using GET or POST method.

2. The URL is:

https://app.senangpay.my/payment/merchant-hosted/

followed by your merchant id

3. Example:

https://app.senangpay.my/payment/merchant-hosted/14222653788472

E.  What parameters will you receive from senangPay

Below are the details of the elements in the table.

F. How senangPay send the parameters to merchant’s shopping cart

1. The parameters will be send using GET method.

2. The parameters are sent to URL as configured in the return URL Refer to Info required section

G. How to generate the secure Hash

1. The secure hash is generated by using md5 on a string consisting of (according to sequence):

• • Secret Key
  • Detail
  • Amount
  • Order ID
  • Name
  • Email
  • Phone Number
  • Credit Card Name
  • Credit Card Number
  • Credit Card Expiry Month
  • Credit Card Expiry Year
  • Credit Card CCV

2. For example, if the values for the parameters are as below:

$detail = 'Shopping_cart_id_30';
$amount = '25.50';
$order_id = '56';
$name = 'abu';
$email = 'abu@gmail.com';
$phone = '0123456789';
$cc_name = 'abu';
$cc_number = '5111111111111118';
$cc_expiry_month = '05';
$cc_expiry_year = '25';
$cc_ccv = '100';

$string_to_hash = 
$secret_key.$detail.$amount.$order_id.$name.$email.$phone.$cc_name.$cc_number.$cc_expiry_month.$cc_expiry_year.$cc_ccv; 

$hash = md5($string_to_hash); 

?> 

which will generate hash values as :

• 231c95adb35f409d7ff9601c0a4bfcd0

H. How to verify if the secure hash is correct

1. Merchant will need to generate the secure hash and compare the secure hash that was received from senangPay.

2. For example, if the parameters received from senangPay are as below:

3. Verify respond if you using md5 :

$status_id = '1';
$order_id = '56';
$transaction_id = '14363538840';
$msg = 'Payment_was_successful';

$string_to_hash = $secret_key.$status_id.$order_id.$transaction_id.$msg;

    $hash = md5($string_to_hash);
?>

which will generate hash value as :

• 49197d877cb4fa7bd770134506b7fb0a

4.  Verify respond if you using sha256 :

$status_id = '1';
$order_id = '56';
$transaction_id = '14363538840';
$msg = 'Payment_was_successful';

$string_to_hash = $secret_key.$status_id.$order_id.$transaction_id.$msg;

    $hash = hash_hmac(‘sha256’,$string_to_hash,$secret_key);
?>

which will generate hash value as : 

• 5d1b62649fd73ece981e6b6236f3f3789322400f6c1844815fe5347051ce8ba1

5. Now you need to compare the hash value that you have generated with the hash value sent from senangPay. If the value does not match, then data may have been tempered.