addFunction('procesaNotificacionSIS'); $server->handle(); } } function procesaNotificacionSIS($XML) { global $tpvConfirmSoap; $db = $tpvConfirmSoap->app->getSysConn(); $status = 'OK'; $requestString = $XML; // Processes the request try { $xml = new SimpleXMLElement($requestString); $params =(array) $xml->{'Request'}; if (!(isset($params['Ds_Amount']) && isset($params['Ds_Order']) && isset($params['Ds_MerchantCode']) && isset($params['Ds_Currency']) && isset($params['Ds_Response']))) throw new Exception('Missing required parameters'); // Checks the signature $start = strpos($requestString, ''); $shaString = substr($requestString, $start, $end - $start + 10); $key = $db->getValue( 'SELECT secretKey FROM tpvMerchant WHERE id = #' ,[$params['Ds_MerchantCode']] ); if (sha1($shaString.$key) != $xml->{'Signature'}) throw new Exception('Invalid signature'); // Confirms the transaction Tpv::confirm($db, $params); } catch (Exception $e) { $status = 'KO'; } // Generates the response $responseString = file_get_contents(__DIR__ .'/soap-reply.xml'); $xml = new SimpleXMLElement($responseString); $response = $xml->{'Response'}; $response->{'Ds_Response_Merchant'} = $status; $xml->{'Signature'} = sha1($response->asXML().$key); return $xml->asXML(); /* // Another way to generate the response $xmlResponse = ' '. $status .' '; $xmlMessage = ' '. $xmlResponse .' '. sha1($xmlResponse.$key) .' '; return $xmlMessage; */}