Generate API Keys from the Razorpay Dashboard. You can use the Test Keys for a sandbox experience. No money will be deducted from your account when making test payments. Please use the Live Keys when going live with the application.
Razorpay enables you to create orders and link them to payments. Order creation is an essential step as it helps you associate every payment with an order, thus preventing multiple payments.
Orders and payments go hand-in-hand. Once the payment is captured, the order is marked paid.
Orders is a mandatory step if you want to automatically capture payments. Know more about payment capture.
Create a file, for example, pay.php and add the API code given below:
Here is the list of parameters for creating the order:
amountmandatory
integer The transaction amount, expressed in the currency subunit, such as paise (in case of INR). For example, for an actual amount of ₹299.35, the value of this field should be 29935.
currencymandatory
string The currency in which the transaction should be made. See the list of supported currencies. Length must be of 3 characters.
receiptoptional
string Pass the receipt id created for this order. Maximum length 40 characters.
notesoptional
json object Key-value pair used to store additional information about the entity. Maximum 15 key-value pairs, 256 characters (maximum) each. For example, "note_key": "Beam me up Scotty”.
partial_paymentoptional
boolean Indicates whether the customer can make a partial payment. Possible values:
true - The customer can make partial payments.
false (default) - The customer cannot make partial payments.
When the order is created successfully, an order_id is returned in the response. You need to store against the order defined in your system.
After payment is authorized, you need to capture it to settle the amount to your bank account as per the settlement schedule. Payments that are not captured are auto-refunded after a fixed time.
Auto-capture payments (recommended) Authorized payments can be automatically captured. You can auto-capture all payments using global settings on the Razorpay Dashboard.
Watch Out!
Payment capture settings work only if you have integrated with Orders API in your server side. Know more about the Orders API.
Manually capture payments Each authorized payment can also be captured individually. You can manually capture payments:
Add the checkout options in your project. This is done in two steps:
Create a file, for example, manual.php in you folder and add the following code:
Copy<button id="rzp-button1">Pay with Razorpay</button>
<scriptsrc="https://checkout.razorpay.com/v1/checkout.js"></script>
<form name='razorpayform' action="verify.php" method="POST">
<input type="hidden" name="razorpay_payment_id" id="razorpay_payment_id">
<input type="hidden" name="razorpay_signature" id="razorpay_signature" >
</form>
<script>
// Checkout details as a json
var options = <?php echo $json?>;
/**
* The entire list of checkout fields is available at
* https://docs.razorpay.com/docs/checkout-form#checkout-fields
*/
options.handler = function (response){
document.getElementById('razorpay_payment_id').value = response.razorpay_payment_id;
document.getElementById('razorpay_signature').value = response.razorpay_signature;
document.razorpayform.submit();
};
// Boolean whether to show image inside a white frame. (default: true)
options.theme.image_padding = false;
var rzp = new Razorpay(options);
document.getElementById('rzp-button1').onclick = function(e){
rzp.open();
e.preventDefault();
}
</script>
Add the checkout parameters given below in the pay.php file.
string API Key ID generated from the Razorpay Dashboard.
amountmandatory
integer The amount to be paid by the customer in currency subunits. For example, if the amount is ₹100, enter 10000.
currencymandatory
string The currency in which the payment should be made by the customer. See the list of supported currencies.
namemandatory
string The business name shown on the Checkout form.
descriptionoptional
string Description of the purchase item shown on the Checkout form. Must start with an alphanumeric character.
imageoptional
string Link to an image (usually your business logo) shown on the Checkout form. Can also be a base64 string, if loading the image from a network is not desirable.
object You can prefill the following details at Checkout.
nameoptional
string Cardholder's name to be pre-filled if customer is to make card payments on Checkout.
emailoptional
string Email address of the customer.
contactoptional
string Phone number of the customer. The expected format of the phone number is + {country code}{phone number}. If the country code is not specified, 91 will be used as the default value. This is particularly important while prefilling contact of customers with phone numbers issued outside India. Examples:
+14155552671 (a valid non-Indian number)
+919977665544 (a valid Indian number). If 9977665544 is entered, +91 is added to it as +919977665544.
methodoptional
string Pre-selection of the payment method for the customer. Will only work if contact and email are also pre-filled. Possible values
card
netbanking
wallet
emi
upi
notesoptional
object Set of key-value pairs that can be used to store additional information about the payment. It can hold a maximum of 15 key-value pairs, each 256 characters long (maximum).
theme
object Thematic options to modify the appearance of Checkout.
hide_topbaroptional
boolean Used to display or hide the top bar on the Checkout form. This bar shows the selected payment method, phone number and gives the customer the option to navigate back to the start of the Checkout form. Possible values are:
true: Hides the top bar
false (default): Displays the top bar.
coloroptional
string Enter your brand colour's HEX code to alter the appearance of Checkout form.
backdrop_coloroptional
string Enter a HEX code to change the Checkout's backdrop colour.
modal
object Options to handle the Checkout modal.
backdropcloseoptional
boolean Indicates whether clicking the translucent blank space outside the Checkout form should close the form. Possible values are:
true: Closes the form when your customer clicks outside the checkout form.
false (default): Does not close the form when customer clicks outside the checkout form.
escapeoptional
boolean Indicates whether pressing the escape key should close the Checkout form. Possible values are:
true (default): Closes the form when the customer presses the escape key.
false: Does not close the form when the customer presses the escape key.
handlebackoptional
boolean Determines whether Checkout must behave similar to the browser when back button is pressed. Possible values:
true (default): Checkout behaves similarly to the browser. That is, when the browser's back button is pressed, the Checkout also simulates a back press. This happens as long as the Checkout modal is open.
false: Checkout does not simulate a back press when browser's back button is pressed.
confirm_closeoptional
boolean Determines whether a confirmation dialog box should be shown when customers attempt to close Checkout. Possible values:
true: Confirmation dialog box is shown.
false (default): Confirmation dialog box is not shown.
ondismissoptional
function Used to track the status of Checkout. You can pass a modal object with ondismiss: function(){} as options. This function is called when the modal is closed by the user.
animationoptional
boolean Show an animation before loading of Checkout.
true(default): Animation appears.
false: Animation does not appear.
subscription_idoptional
string If you are accepting recurring payments using Razorpay Checkout, you should pass the relevant subscription_id to the Checkout. Know more about Subscriptions on Checkout.
subscription_card_changeoptional
boolean Permit or restrict customer from changing the card linked to the subscription. You can also do this from the hosted page. Possible values:
true: Allow the customer to change the card from Checkout.
false (default): Do not allow the customer to change the card from Checkout.
false (default): You are not accepting recurring payments.
callback_urloptional
string Customers will be redirected to this URL on successful payment. Ensure that the domain of the Callback URL is whitelisted.
redirectoptional
boolean Determines whether to post a response to the event handler post payment completion or redirect to Callback URL. callback_url must be passed while using this parameter. Possible values:
true: Customer is redirected to the specified callback URL in case of payment failure.
false (default): Customer is shown the Checkout popup to retry the payment.
integer Sets a timeout on Checkout, in seconds. After the specified time limit, customer will not be able to use Checkout.
remember_customeroptional
boolean Determines whether to allow saving of cards. Can also be configured via the Razorpay Dashboard. Possible values:
true: Enables card saving feature.
false (default): Disables card saving feature.
readonly
object Marks fields as read-only.
contactoptional
boolean Used to set the contact field as readonly. Possible values:
- true: Customer will not be able to edit this field.
- false (default): Customer will be able to edit this field.
emailoptional
boolean Used to set the email field as readonly. Possible values:
- true: Customer will not be able to edit this field.
- false (default): Customer will be able to edit this field.
nameoptional
boolean Used to set the name field as readonly. Possible values:
- true: Customer will not be able to edit this field.
- false (default): Customer will be able to edit this field.
send_sms_hashoptional
boolean Used to auto-read OTP for cards and net banking pages. Applicable from Android SDK version 1.5.9 and above. Possible values:
true: OTP is auto-read.
false (default): OTP is not auto-read.
allow_rotationoptional
boolean Used to rotate payment page as per screen orientation. Applicable from Android SDK version 1.6.4 and above. Possible values:
true: Payment page can be rotated.
false (default): Payment page cannot be rotated.
retryoptional
object Parameters that enable retry of payment on the checkout.
enabled
boolean Determines whether the customers can retry payments on the checkout. Possible values:
true (default): Enables customers to retry payments.
false: Disables customers from retrying the payment.
max_count
integer The number of times the customer can retry the payment. Recommended to set this to 4. Having a larger number here can cause loops to occur.
configoptional
object Parameters that enable configuration of checkout display language.
display
object Child parameter that enables configuration of checkout display language.
language
string The language in which checkout should be displayed. Possible values:
This is a mandatory step that allows you to confirm the authenticity of the details returned to the checkout for successful payments.
To verify the razorpay_signature returned to you by the checkout:
Create a signature in your server using the following attributes:
order_id - Retrieve the order_id from your server. Do not use the razorpay_order_id returned by checkout.
razorpay_payment_id - Returned by checkout.
key_secret - Available in your server. The key_secret that was generated from the Razorpay Dashboard.
Use the SHA256 algorithm, the razorpay_payment_id and the order_id to construct a HMAC hex digest as shown below:
Copygenerated_signature = hmac_sha256(order_id + "|" + razorpay_payment_id, secret);
if (generated_signature == razorpay_signature) {
payment is successful
}
If the signature you generate on your server matches the razorpay_signature returned to you by the checkout, the payment received is from an authentic source.
Copyrequire('razorpay-php/Razorpay.php');
useRazorpay\Api\Api;
useRazorpay\Api\Errors\SignatureVerificationError;
$success = true;
$error = "Payment Failed";
if (empty($_POST['razorpay_payment_id']) === false)
{
$api = new Api($keyId, $keySecret);
try
{
// Please note that the razorpay order ID must// come from a trusted source (session here, but// could be database or something else)$attributes = array(
'razorpay_order_id' => $_SESSION['razorpay_order_id'],
'razorpay_payment_id' => $_POST['razorpay_payment_id'],
'razorpay_signature' => $_POST['razorpay_signature']
);
$api->utility->verifyPaymentSignature($attributes);
}
catch(SignatureVerificationError $e)
{
$success = false;
$error = 'Razorpay Error : ' . $e->getMessage();
}
}
if ($success === true)
{
$html = "<p>Your payment was successful</p>
<p>Payment ID: {$_POST['razorpay_payment_id']}</p>";
}
else
{
$html = "<p>Your payment failed</p>
<p>{$error}</p>";
}
echo$html;
If you are accepting international payments, you can use Razorpay's Address Verification System (AVS). AVS verifies if a customer's billing address (postal code and the billing street address) matches the billing address on file with the card issuer. Based on the response from the issuer, Razorpay will accept or cancel the transaction. This helps in the prevention of fraud in international payments.
After the integration is complete, you need to test the integration to ensure that it is working as expected. You can make a test transaction using the test cards, verify the payment status from the Razorpay Dashboard, APIs or subscribe to related Webhook events to take appropriate actions at your end. After testing the integration in test mode, you can start accepting payments from your customers in real-time.
You can make test payments using any of the payment methods available at the checkout. No money is deducted from the customer's account as this is a simulated transaction. In the checkout code, ensure that you have entered the API keys generated in the test mode.
You can use any of the test cards to make transactions in the test mode. Use any valid expiration date in the future and any random CVV to create a successful payment.
You can subscribe to a Webhook event that is generated when a certain event happens in our server. When one of those events is triggered, Razorpay sends the Webhook payload to the configured URL.
Given below is the webhook signature verification sample code.
Copy// PHP SDK: https://github.com/razorpay/razorpay-phpuseRazorpay\Api\Api;
$api = new Api("[YOUR_KEY_ID]", "[YOUR_KEY_SECRET]");
$api->utility->verifyWebhookSignature($webhookBody, $webhookSignature, $webhookSecret);
// $webhookBody should be raw webhook request body
Once you have tested the end-to-end flow of funds in test mode and are confident that the integration is working as expected, switch to the live mode to accept payments from customers. However, make sure that you swap the test API keys with the live keys.