From 02b9dd97f4230daed10d79fe0ecf3504ff2bba40 Mon Sep 17 00:00:00 2001 From: Clement Date: Tue, 8 Nov 2016 11:18:26 +0800 Subject: [PATCH] Updated readme --- README.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/README.md b/README.md index 05015df..9e03642 100644 --- a/README.md +++ b/README.md @@ -195,6 +195,14 @@ This plugin provides an integrated MOLPay payment module that contains a wrapper 4) After the user done the paying at the 7-Eleven counter, they can close and exit MOLPay XDK by clicking the “Close” button again. +## XDK built-in checksum validator caveats + + All XDK come with a built-in checksum validator to validate all incoming checksums and return the validation result through the "mp_secured_verified" parameter. However, this mechanism will fail and always return false if merchants are implementing the private secret key (which the latter is highly recommended and prefereable.) If you would choose to implement the private secret key, you may ignore the "mp_secured_verified" and send the checksum back to your server for validation. + +## Private Secret Key checksum validation formula + + chksum = MD5(mp_merchant_ID + results.msgType + results.txn_ID + results.amount + results.status_code + merchant_private_secret_key) + ## Support Submit issue to this repository or email to our support@molpay.com