| Makselahendus | Swedbank |
| Tehingu tüüp | Maksekorraldus |
| Tehingu aeg | Tue Sep 28 2021 12:47:39 GMT+0000 (UTC) |
| Selgitus | Vaheajatellimus 2109280001 30.09.2021 15:42 |
| Staatus | Teostatud |
| Valitud keel | Eesti |
| Teksti kodeering | UTF-8 |
| Makse summa | 51,00 EUR |
| Nimi | Väärtus |
|---|---|
| x-forwarded-for | 213.219.98.146 |
| x-forwarded-proto | https |
| x-forwarded-protocol | https |
| x-forwarded-ssl | on |
| host | banks.pastel.thorgate.eu |
| connection | close |
| content-length | 779 |
| cache-control | max-age=0 |
| sec-ch-ua | "Google Chrome";v="93", " Not;A Brand";v="99", "Chromium";v="93" |
| sec-ch-ua-mobile | ?0 |
| sec-ch-ua-platform | "Linux" |
| upgrade-insecure-requests | 1 |
| origin | http://127.0.0.1:8000 |
| content-type | application/x-www-form-urlencoded |
| user-agent | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36 |
| accept | text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9 |
| sec-fetch-site | cross-site |
| sec-fetch-mode | navigate |
| sec-fetch-dest | document |
| referer | http://127.0.0.1:8000/ |
| accept-encoding | gzip, deflate, br |
| accept-language | en-US,en;q=0.9 |
| x-client-remote-address | 213.219.98.146 |
VK_SERVICE=1012&VK_VERSION=008&VK_SND_ID=uid100052&VK_STAMP=12&VK_AMOUNT=51.00&VK_CURR=EUR&VK_REF=123&VK_MSG=Vaheajatellimus+2109280001+30.09.2021+15%3A42&VK_RETURN=http%3A%2F%2F127.0.0.1%3A8000%2Fen%2Forders%2Fbanks%2Fthorbanks_response%2F&VK_CANCEL=http%3A%2F%2F127.0.0.1%3A8000%2Fen%2Forders%2Fbanks%2Fthorbanks_response%2F&VK_DATETIME=2021-09-28T12%3A47%3A39%2B0000&VK_MAC=q3Dfb6RhNB7e4UH4A%2B5KLS7vz0UMoNupkz0ahcqUu1HKqo4NXrAbvr7HAKYf1Zgy9l9NdgSXe83yAolTmOyrG3OdOYmk0%2BKOcDxkKfmi0FvIJdRa2xD6hGK7gCgrMHeFFBwsUbbqygEzv687Gt%2FXvtATrz%2Fz4jpXeE62bQwGPfRECPjRNXnnFhWnrMUHj1Yh2KwJw8QY2uCRh0BlSMfskV1IAvRMuNWN6s27zH8GHWcyB%2BEKTlqtz4e%2F%2FV%2BOunTAVxWqP3wKFbUMeR%2ByU8KjT2RTd4WFwX8a4%2BBCHEZay9waNXJzfdgos6F4Pg%2FgnJxmPU0RE92b70i%2FOcdd4LRyXw%3D%3D&VK_LANG=EST&VK_ENCODING=UTF-8
| Nimi | Väärtus |
|---|---|
| VK_SERVICE | 1012 |
| VK_VERSION | 008 |
| VK_SND_ID | uid100052 |
| VK_STAMP | 12 |
| VK_AMOUNT | 51.00 |
| VK_CURR | EUR |
| VK_REF | 123 |
| VK_MSG | Vaheajatellimus 2109280001 30.09.2021 15:42 |
| VK_RETURN | http://127.0.0.1:8000/en/orders/banks/thorbanks_response/ |
| VK_CANCEL | http://127.0.0.1:8000/en/orders/banks/thorbanks_response/ |
| VK_DATETIME | 2021-09-28T12:47:39+0000 |
| VK_MAC | q3Dfb6RhNB7e4UH4A+5KLS7vz0UMoNupkz0ahcqUu1HKqo4NXrAbvr7HAKYf1Zgy9l9NdgSXe83yAolTmOyrG3OdOYmk0+KOcDxkKfmi0FvIJdRa2xD6hGK7gCgrMHeFFBwsUbbqygEzv687Gt/XvtATrz/z4jpXeE62bQwGPfRECPjRNXnnFhWnrMUHj1Yh2KwJw8QY2uCRh0BlSMfskV1IAvRMuNWN6s27zH8GHWcyB+EKTlqtz4e//V+OunTAVxWqP3wKFbUMeR+yU8KjT2RTd4WFwX8a4+BCHEZay9waNXJzfdgos6F4Pg/gnJxmPU0RE92b70i/Ocdd4LRyXw== |
| VK_LANG | EST |
| VK_ENCODING | UTF-8 |
Allkirja kontrollimiseks kasutaja sertifikaadiga kasutati järgmist stringi:
0041012003008009uid1000520021200551.00003EUR003123043Vaheajatellimus 2109280001 30.09.2021 15:42057http://127.0.0.1:8000/en/orders/banks/thorbanks_response/057http://127.0.0.1:8000/en/orders/banks/thorbanks_response/0242021-09-28T12:47:39+0000
pay.php Lae alla näiteskript sisendandmete korrektseks allkirjastamiseks
| Nimi | Väärtus |
|---|---|
| VK_SERVICE | 1111 |
| VK_VERSION | 008 |
| VK_SND_ID | HP |
| VK_REC_ID | uid100052 |
| VK_STAMP | 12 |
| VK_T_NO | 10061 |
| VK_AMOUNT | 51.00 |
| VK_CURR | EUR |
| VK_REC_ACC | |
| VK_REC_NAME | |
| VK_SND_ACC | EE152200221234567897 |
| VK_SND_NAME | Tõõger Leõpäöld |
| VK_REF | 123 |
| VK_MSG | Vaheajatellimus 2109280001 30.09.2021 15:42 |
| VK_T_DATETIME | 2021-09-28T12:47:41+0000 |
| VK_ENCODING | UTF-8 |
| VK_LANG | EST |
| VK_MAC | UBoFY2BCa0NKo2EWX8c2+A/VhJNaQgPDj6N+9QxlXk74no06VUi6epJqIX64yRtDb5o0viGsaYsJf1fKk2E62DqZMLNPAIwzAjTtBHXLjfmCB1sVgA27ycw4v6hY7rWH9ngHUQF6tGN6F84VxLeAG1f120f+J7E7F5KmNxetiNdVF5Wj7kdd5Erme3BqDrY0wGVrpTVn1NfEQTAS8Zmeav2TnomQDSB5jVlisLa2xBghjW9j20lBp6MF9HN03OagD0STJpi7gJuvPImsgbSqVQwwLlC0e+u9HGRCa+cvvv5wBGBSvTLWLA6/Hdg0zTtoHyJqGzsrcLy35x0Y5h2WkA== |
| VK_AUTO | N |
Vastuse allkirjastamiseks panga võtmega kasutati järgmist stringi:
0041111003008002HP009uid100052002120051006100551.00003EUR000000020EE152200221234567897015Tõõger Leõpäöld003123043Vaheajatellimus 2109280001 30.09.2021 15:420242021-09-28T12:47:41+0000
receive.php Lae alla näiteskript tehingu andmete allkirja kontrolliks
Juhul kui domeen viitab väljastpoolt ligipääsmatule serverile (n. localhost), siis ei olegi võimalik sellele aadressile automaatpäringuid teha. Üldjuhul ei ole see ka probleem, va. juhul kui rakendus on ehitatud selliselt, et ootab üht päringut samade andmetega vaid ühe korra. Üks hetk avalikku serverisse pannes võib see rakenduse töö katki teha, kuna siis tuleb samade andmetega päringut juba kaks korda (esiteks panga poolt automaatpäring ja seejärel kasutaja poolne päring). Kui rakendus peab õigeks vaid esimest (automaatpäring) ja lükkab tagasi teise (kasutaja poolse duplikaatpäringu), siis you're gonna have a bad time.
Alternatiiv localhost sisu lubamiseks avalikku veebi oleks kasutada localtunnel teenust või mõnd selle analoogi, kuid seda tuleb tuleb teha ülima ettevaatlikkusega - oma arvuti avamine tervele internetile ei pruugi olla väga tervislik.