Аккаунт в General iT
Войдите или создайте аккаунт для управления услугами в личном кабинете.
Страны не найдены. Попробуйте другое название или код.
MODULE FOR 1C-BITRIX
TriIncom LLC
The Express Payments module provides integration with the ERIP system (AIS 'Raschet') for payment processing. Connecting the service expands payment options for goods and services: customers can make transactions directly on the website, via internet banking, SMS banking, and mobile banking applications, as well as at bank branches and post offices.
The Express Payments module provides integration with the ERIP system (AIS 'Raschet') for payment processing. Connecting the service expands payment options for goods and services: customers can make transactions directly on the website, via internet banking, SMS banking, and mobile banking applications, as well as at bank branches and post offices.
General iT can install “Service "Express Payments": ERIP”, configure its settings and verify its operation in the existing project.
UPDATE HISTORY
- Fixed the error "Host header does not match the configured site host": generating an invoice no longer stops if the site is opened at an address different from the "Site URL" in the main module settings (for example, with www and without). Return addresses are still built only from the server_name setting.
- Restored payment description texts, "Paid" status, and signature error messages that were previously displayed with incorrect characters.
- Signature verification for notifications has become mandatory (fail-closed): the dependency on ERIP_IS_USE_SIGNATURE_FROM_NOTIFICATION has been removed, and the default value has been changed to Y.
- A warning for administrators has been added when signature verification is disabled.
- Normalization of notification values before writing to payment fields: Payer is escaped and limited to 255 characters, Amount is converted to a number, AccountNo to a string, and Status to an integer.
- Open Redirect: the HTTP_HOST fallback for the host has been removed; if server_name is empty, the bill issuance is interrupted, the protocol is always HTTPS, and the path is fixed.
- The buyer's e-mail and the request signature are no longer written to the debug log.
- Fixed authentication bypass in the notification handler: added data type validation, signature verification via hash_equals, amount and AccountNo comparison, and protection against duplicate payments.
- Fixed ReturnUrl/FailUrl construction: uses a trusted host from site settings instead of HTTP_HOST, with logging of host substitution.
- Fixed default notification URL construction: host is taken from server_name, with warnings to administrators about host mismatch and empty secret key when signature verification is enabled.
- Improved signature verification cryptography: signature calculation is skipped if the secret is empty, trim() on the secret key is removed, and hash_equals is used to protect against timing attacks.
- Fixed XSS vulnerabilities in checkout.php and error.php templates, and corrected params array keys.
- In case of API errors, the buyer sees a generic message while details are logged.
- Added language strings for new errors and warnings.
- Language files converted to UTF-8 encoding.
USER EXPERIENCE
How does this solution work in a real project? Share your experience and help others choose.
There are no reviews of this solution on git.ru yet. Tell us what worked well and what could be improved.
Verified purchaseAdd a key if you wish. A verified review gets a badge, priority placement and more rating weight.
Open to every clientJust sign in to your account. A key is optional; all reviews are moderated.
YOUR PROJECT INFRASTRUCTURE
FROM THE SAME DEVELOPER
TriIncom LLC
The Express Payments module for the E-POS system simplifies payment acceptance integration. Connecting the module expands payment options for goods and services: customers can make payments directly on the website, via internet banking, SMS banking, mobile banking, as well as at bank service points and post offices.
The Express Payments module enables acceptance of payments via bank cards (Visa, MasterCard, Maestro, BELKART) and installment cards, including Halva. Integration expands payment options for goods and services: customers can complete transactions directly on the website, through internet banking, SMS banking, mobile banking applications, at bank service points, and in post offices.
MORE FOR YOUR WEBSITE
The Sotbit Smart Filter SEO module is designed to increase online store traffic. The tool operates by generating numerous unique pages for smart filters.
SDEK integration module for 1C-Bitrix. SDEK is one of Russia's largest logistics companies, providing courier delivery and operating a network of pickup points. The module connects the online store with the SDEK personal account, offering the following capabilities: Providing customers with delivery options: courier, pickup point, or postmat.
The module is designed for the «1C-Bitrix: Site Management» platform and enables importing infoblock elements, including products, from Excel files. It also supports data loading into Highload blocks.
BEFORE YOU ORDER