addFunction ('procesaNotificacionSIS'); $server->handle (); } } function procesaNotificacionSIS ($XML) { global $tpvConfirmSoap; $db = $tpvConfirmSoap->app->getSysConn (); $status = 'OK'; $requestString = $XML; // Processes the request try { $xml = new SimpleXMLElement ($requestString); $params = (array) $xml->{'Request'}; if (!(isset ($params['Ds_Amount']) && isset ($params['Ds_Order']) && isset ($params['Ds_MerchantCode']) && isset ($params['Ds_Currency']) && isset ($params['Ds_Response']))) throw new Exception ('Missing required parameters'); // Checks the signature $start = strpos ($requestString, ''); $shaString = substr ($requestString, $start, $end - $start + 10); $key = $db->getValue ( 'SELECT secretKey FROM tpvMerchant WHERE id = #' ,[$params['Ds_MerchantCode']] ); if (sha1 ($shaString.$key) != $xml->{'Signature'}) throw new Exception ('Invalid signature'); // Confirms the transaction Tpv::confirm ($db, $params); } catch (Exception $e) { $status = 'KO'; } // Generates the response $responseString = file_get_contents (__DIR__ .'/soap-reply.xml'); $xml = new SimpleXMLElement ($responseString); $response = $xml->{'Response'}; $response->{'Ds_Response_Merchant'} = $status; $xml->{'Signature'} = sha1 ($response->asXML ().$key); return $xml->asXML (); /* // Another way to generate the response $xmlResponse = ' '. $status .' '; $xmlMessage = ' '. $xmlResponse .' '. sha1 ($xmlResponse.$key) .' '; return $xmlMessage; */}