Steps to integrate Razorpay Payment Gateway with PHP SDK.
Follow the steps given below to integrate Razorpay Payment Gateway with your PHP website. The integration process is explained using the PHP sample app, which contains the following files:
File Name
Purpose
pay.php
Contains the Checkout parameters.
manual.php
Contains the Checkout Code.
config.php
Contains the API Keys.
verify.php
Contains the payment signature verification codes.
You can install Razorpay using a composer command. Run the below command on your Composer: Unzip the SDK file and include the Razorpay.php file in your project.
Here is the list of parameters for creating an order:
amountmandatory
integer The transaction amount, expressed in the currency subunit, such as paise (in case of INR). For example, for an actual amount of ₹299.35, the value of this field should be 29935.
currencymandatory
string The currency in which the transaction should be made. See the list of supported currencies. Length must be of 3 characters.
receiptoptional
string Pass receipt id for this order. Maximum length 40 characters.
notesoptional
json object Key-value pair used to store additional information about the entity. Maximum 15 key-value pairs, 256 characters (maximum) each. For example, "note_key": "Beam me up Scotty”.
partial_paymentoptional
boolean Indicates whether the customer can make a partial payment. Possible values:
true: The customer can make partial payments.
false (default): The customer cannot make partial payments.
When the order is created successfully, an order_id is returned in the response. You need to store against the order defined in your system.
Add the Razorpay Checkout options in your project. For example, if you are using HTML for your frontend, create a page called pay.html and add the Pay button on your web page using the checkout code, Handler Function or Callback URL.
string API Key ID generated from the Razorpay Dashboard.
amountmandatory
integer The amount to be paid by the customer in currency subunits. For example, if the amount is ₹100, enter 10000.
currencymandatory
string The currency in which the payment should be made by the customer. See the list of supported currencies.
namemandatory
string The business name shown on the Checkout form.
descriptionoptional
string Description of the purchase item shown on the Checkout form. Must start with an alphanumeric character.
imageoptional
string Link to an image (usually your business logo) shown on the Checkout form. Can also be a base64 string, if loading the image from a network is not desirable.
object You can prefill the following details at Checkout.
nameoptional
string Cardholder's name to be pre-filled if customer is to make card payments on Checkout.
emailoptional
string Email address of the customer.
contactoptional
string Phone number of the customer. The expected format of the phone number is + {country code}{phone number}. If the country code is not specified, 91 will be used as the default value. This is particularly important while prefilling contact of customers with phone numbers issued outside India. Examples:
+14155552671 (a valid non-Indian number)
+919977665544 (a valid Indian number). If 9977665544 is entered, +91 is added to it as +919977665544.
methodoptional
string Pre-selection of the payment method for the customer. Will only work if contact and email are also pre-filled. Possible values
card
netbanking
wallet
emi
upi
notesoptional
object Set of key-value pairs that can be used to store additional information about the payment. It can hold a maximum of 15 key-value pairs, each 256 characters long (maximum).
theme
object Thematic options to modify the appearance of Checkout.
hide_topbaroptional
boolean Used to display or hide the top bar on the Checkout form. This bar shows the selected payment method, phone number and gives the customer the option to navigate back to the start of the Checkout form. Possible values are:
true: Hides the top bar
false (default): Displays the top bar.
coloroptional
string Enter your brand colour's HEX code to alter the appearance of Checkout form.
backdrop_coloroptional
string Enter a HEX code to change the Checkout's backdrop colour.
modal
object Options to handle the Checkout modal.
backdropcloseoptional
boolean Indicates whether clicking the translucent blank space outside the Checkout form should close the form. Possible values are:
true: Closes the form when your customer clicks outside the checkout form.
false (default): Does not close the form when customer clicks outside the checkout form.
escapeoptional
boolean Indicates whether pressing the escape key should close the Checkout form. Possible values are:
true (default): Closes the form when the customer presses the escape key.
false: Does not close the form when the customer presses the escape key.
handlebackoptional
boolean Determines whether Checkout must behave similar to the browser when back button is pressed. Possible values:
true (default): Checkout behaves similarly to the browser. That is, when the browser's back button is pressed, the Checkout also simulates a back press. This happens as long as the Checkout modal is open.
false: Checkout does not simulate a back press when browser's back button is pressed.
confirm_closeoptional
boolean Determines whether a confirmation dialog box should be shown when customers attempt to close Checkout. Possible values:
true: Confirmation dialog box is shown.
false (default): Confirmation dialog box is not shown.
ondismissoptional
function Used to track the status of Checkout. You can pass a modal object with ondismiss: function(){} as options. This function is called when the modal is closed by the user.
animationoptional
boolean Show an animation before loading of Checkout.
true(default): Animation appears.
false: Animation does not appear.
subscription_idoptional
string If you are accepting recurring payments using Razorpay Checkout, you should pass the relevant subscription_id to the Checkout. Know more about Subscriptions on Checkout.
subscription_card_changeoptional
boolean Permit or restrict customer from changing the card linked to the subscription. You can also do this from the hosted page. Possible values:
true: Allow the customer to change the card from Checkout.
false (default): Do not allow the customer to change the card from Checkout.
false (default): You are not accepting recurring payments.
callback_urloptional
string Customers will be redirected to this URL on successful payment. Ensure that the domain of the Callback URL is whitelisted.
redirectoptional
boolean Determines whether to post a response to the event handler post payment completion or redirect to Callback URL. callback_url must be passed while using this parameter. Possible values:
true: Customer is redirected to the specified callback URL in case of payment failure.
false (default): Customer is shown the Checkout popup to retry the payment.
integer Sets a timeout on Checkout, in seconds. After the specified time limit, customer will not be able to use Checkout.
remember_customeroptional
boolean Determines whether to allow saving of cards. Can also be configured via the Razorpay Dashboard. Possible values:
true: Enables card saving feature.
false (default): Disables card saving feature.
readonly
object Marks fields as read-only.
contactoptional
boolean Used to set the contact field as readonly. Possible values:
- true: Customer will not be able to edit this field.
- false (default): Customer will be able to edit this field.
emailoptional
boolean Used to set the email field as readonly. Possible values:
- true: Customer will not be able to edit this field.
- false (default): Customer will be able to edit this field.
nameoptional
boolean Used to set the name field as readonly. Possible values:
- true: Customer will not be able to edit this field.
- false (default): Customer will be able to edit this field.
send_sms_hashoptional
boolean Used to auto-read OTP for cards and net banking pages. Applicable from Android SDK version 1.5.9 and above. Possible values:
true: OTP is auto-read.
false (default): OTP is not auto-read.
allow_rotationoptional
boolean Used to rotate payment page as per screen orientation. Applicable from Android SDK version 1.6.4 and above. Possible values:
true: Payment page can be rotated.
false (default): Payment page cannot be rotated.
retryoptional
object Parameters that enable retry of payment on the checkout.
enabled
boolean Determines whether the customers can retry payments on the checkout. Possible values:
true (default): Enables customers to retry payments.
false: Disables customers from retrying the payment.
max_count
integer The number of times the customer can retry the payment. Recommended to set this to 4. Having a larger number here can cause loops to occur.
configoptional
object Parameters that enable configuration of checkout display language.
display
object Child parameter that enables configuration of checkout display language.
language
string The language in which checkout should be displayed. Possible values:
en: English
ben: Bengali
hi: Hindi
mar: Marathi
guj: Gujarati
tam: Tamil
tel: Telugu
Handy Tips
The open method of Razorpay object (rzp1.open()) must be invoked by your site's JavaScript, which may or may not be a user-driven action such as a click.
Multiple payment methods are available on Razorpay Standard Checkout.
The payment methods are fixed and cannot be changed.
You can configure the order or make certain payment methods prominent. Know more about configuring payment methods. Know more about configuring payment methods.
If you used the sample code with the handler function:
On Payment Success
The customer sees your website page. The checkout returns the response object of the successful payment (razorpay_payment_id, razorpay_order_id and razorpay_signature). Collect these and send them to your server.
On Payment Failure
The customer is notified about payment failure and asked to retry the payment. Know about the error parameters.
If you used the sample code with the callback URL:
On Payment Success
Razorpay makes a POST call to the callback URL with the razorpay_payment_id, razorpay_order_id and razorpay_signature in the response object of the successful payment. Only successful authorisations are auto-submitted.
On Payment Failure
In case of failed payments, the checkout is displayed again to facilitate payment retry.
This is a mandatory step that allows you to confirm the authenticity of the details returned to the checkout for successful payments.
To verify the razorpay_signature returned to you by the checkout:
Create a signature in your server using the following attributes:
order_id - Retrieve the order_id from your server. Do not use the razorpay_order_id returned by checkout.
razorpay_payment_id - Returned by checkout.
key_secret - Available in your server. The key_secret that was generated from the Razorpay Dashboard.
Use the SHA256 algorithm, the razorpay_payment_id and the order_id to construct a HMAC hex digest as shown below:
Copygenerated_signature = hmac_sha256(order_id + "|" + razorpay_payment_id, secret);
if (generated_signature == razorpay_signature) {
payment is successful
}
If the signature you generate on your server matches the razorpay_signature returned to you by the checkout, the payment received is from an authentic source.
Copyrequire('razorpay-php/Razorpay.php');
useRazorpay\Api\Api;
useRazorpay\Api\Errors\SignatureVerificationError;
$success = true;
$error = "Payment Failed";
if (empty($_POST['razorpay_payment_id']) === false)
{
$api = new Api($keyId, $keySecret);
try
{
// Please note that the razorpay order ID must// come from a trusted source (session here, but// could be database or something else)$attributes = array(
'razorpay_order_id' => $_SESSION['razorpay_order_id'],
'razorpay_payment_id' => $_POST['razorpay_payment_id'],
'razorpay_signature' => $_POST['razorpay_signature']
);
$api->utility->verifyPaymentSignature($attributes);
}
catch(SignatureVerificationError $e)
{
$success = false;
$error = 'Razorpay Error : ' . $e->getMessage();
}
}
if ($success === true)
{
$html = "<p>Your payment was successful</p>
<p>Payment ID: {$_POST['razorpay_payment_id']}</p>";
}
else
{
$html = "<p>Your payment failed</p>
<p>{$error}</p>";
}
echo$html;
You can subscribe to a Webhook event that is generated when a certain event happens in our server. When one of those events is triggered, Razorpay sends the Webhook payload to the configured URL.
Given below is the webhook signature verification sample code.
Copy// PHP SDK: https://github.com/razorpay/razorpay-phpuseRazorpay\Api\Api;
$api = new Api("[YOUR_KEY_ID]", "[YOUR_KEY_SECRET]");
$api->utility->verifyWebhookSignature($webhookBody, $webhookSignature, $webhookSecret);
// $webhookBody should be raw webhook request body