Аккаунт в General iT
Войдите или создайте аккаунт для управления услугами в личном кабинете.
Страны не найдены. Попробуйте другое название или код.
MODULE FOR 1C-BITRIX
TriIncom LLC
The Express Payments module for the E-POS system simplifies payment acceptance integration. Connecting the module expands payment options for goods and services: customers can make payments directly on the website, via internet banking, SMS banking, mobile banking, as well as at bank service points and post offices.
The Express Payments module for the E-POS system simplifies payment acceptance integration. Connecting the module expands payment options for goods and services: customers can make payments directly on the website, via internet banking, SMS banking, mobile banking, as well as at bank service points and post offices.
For the “Service "Express Payments": E-POS” module, General iT can perform installation, configuration and a functional check in your project.
UPDATE HISTORY
- XSS: normalize notification values (Amount, Payer, AccountNo, Status) before writing to payment fields. The Payer field is escaped using htmlspecialcharsbx(), and the Amount field is converted to a number using number_format().
- Auth Bypass: notification signature verification is now mandatory (fail-closed). The signature is always checked, regardless of settings. The secure default is EPOS_IS_USE_SIGNATURE_FROM_NOTIFICATION = Y.
- An administrator warning has been added when signature verification is disabled.
- All accesses to notification data now use isset()/?? with type casting (eliminates PHP warnings in PHP 8).
- Logging of all accepted and rejected notifications.
- Notification address substitution: the HTTP_HOST fallback has been removed when forming the default notification address; the host is taken only from server_name, the protocol is always HTTPS, and if server_name is empty, no address is set.
- XSS: normalization of notification values (Amount, Payer, AccountNo, Status) before writing to payment fields. Payer is escaped via htmlspecialcharsbx(), Amount is converted to a number via number_format().
- Auth Bypass: notification signature verification is now mandatory (fail-closed). The signature is always verified regardless of settings. Secure default EPOS_IS_USE_SIGNATURE_FROM_NOTIFICATION = Y.
- Warning added for administrators when signature verification is disabled.
- All accesses to notification data now use isset()/?? with type hinting (eliminates PHP 8 warnings).
- Logging of all accepted and rejected notifications.
- Enhanced payment notification verification.
- Improved security for generating return and notification URLs.
- Fixed data escaping in payment form templates and error pages.
- Enhanced error logging.
USER EXPERIENCE
How does this solution work in a real project? Share your experience and help others choose.
There are no reviews of this solution on git.ru yet. Tell us what worked well and what could be improved.
Verified purchaseAdd a key if you wish. A verified review gets a badge, priority placement and more rating weight.
Open to every clientJust sign in to your account. A key is optional; all reviews are moderated.
YOUR PROJECT INFRASTRUCTURE
FROM THE SAME DEVELOPER
TriIncom LLC
The Express Payments module provides integration with the ERIP system (AIS 'Raschet') for payment processing. Connecting the service expands payment options for goods and services: customers can make transactions directly on the website, via internet banking, SMS banking, and mobile banking applications, as well as at bank branches and post offices.
The Express Payments module enables acceptance of payments via bank cards (Visa, MasterCard, Maestro, BELKART) and installment cards, including Halva. Integration expands payment options for goods and services: customers can complete transactions directly on the website, through internet banking, SMS banking, mobile banking applications, at bank service points, and in post offices.
MORE FOR YOUR WEBSITE
The Sotbit Smart Filter SEO module is designed to increase online store traffic. The tool operates by generating numerous unique pages for smart filters.
SDEK integration module for 1C-Bitrix. SDEK is one of Russia's largest logistics companies, providing courier delivery and operating a network of pickup points. The module connects the online store with the SDEK personal account, offering the following capabilities: Providing customers with delivery options: courier, pickup point, or postmat.
The module is designed for the «1C-Bitrix: Site Management» platform and enables importing infoblock elements, including products, from Excel files. It also supports data loading into Highload blocks.
BEFORE YOU ORDER