Digital signature verification

Digital signature verification is performed after the request is received. We highly recommend to implement an additional verification on the merchant's side.

Digital signature verification

$secret_key = 'SecretKey'; // merchant's secret key
$dataSet = json_decode($response, TRUE);
$sign = $dataSet["sign"];
unset($dataSet["sign"]);
ksort($dataSet, SORT_STRING);
array_push($dataSet, $secret_key);
$signString = implode(":", $dataSet);
$calc_sign = base64_encode(md5($signString, true));

if ($sign != $calc_sign) {
    // Sign error
    echo ("Sign error");
} else {
    echo "Sign Ok";
}