Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Cash Payment In Malaysia #wckl

838 views

Published on

Brief technical talk about Cash Payment/Direct Debit integration with FPX, Maybank2u and RHB Now. Talk given in WebcampKL Koko Crunch 25th September 2013. https://www.facebook.com/events/540066812734190/

  • Be the first to comment

  • Be the first to like this

Cash Payment In Malaysia #wckl

  1. 1. CASH PAYMENT in MALAYSIA #wckl koko crunch WARNING: highly technical
  2. 2. @arzumy
  3. 3. SAYS
  4. 4. GROUPON
  5. 5. GROUPON ipay88 maybank2u
  6. 6. billplz
  7. 7. billplz fpx rhb now
  8. 8. FPX, MAYBANK2U & RHB NOW
  9. 9. requirements workflow features API calls why
  10. 10. WHY CASH PAYMENT
  11. 11. DISCLAIMER!
  12. 12. TECH REQUIREMENTS
  13. 13. FPX java public ip* *not really web app
  14. 14. ssl public ip* *not really, if you can convince them web app MAYBANK2U
  15. 15. public ip* *not really web app RHB NOW
  16. 16. GENERAL WORKFLOW reading drive c:
  17. 17. FPX our app fpx bank java daemon browser
  18. 18. our app maybank2u browser MAYBANK2U
  19. 19. our app rhb now browser RHB NOW
  20. 20. FEATURE: SANDBOX
  21. 21. FPX M2U RHB Y Y Y IP whitelist Office hour make sure your account manager is online
  22. 22. FEATURE: REQUERY
  23. 23. FPX M2U RHB Y Y Y beg & steal browser only N
  24. 24. FEATURE: SECURITY
  25. 25. FPX M2U RHB obscurity & trust hashed request signed xml
  26. 26. PEEK AT THE API CALLS
  27. 27. FPX message:request|message.type:AR|message.token:01| message.orderno:720136345498125710.... <?xml version="1.0" encoding="UTF- 8"? ><SELLER_FPX_REQ><MESG_TYPE>AR</MESG_TYPE><MESG_T OKEN>01</MESG_TOKEN>.... POST ?MsgToFpx=<?xml version="1.0" encoding="UTF- 8"?><SELLER_FPX_REQ><MESG_TYPE>AR</ MESG_TYPE><MESG_T OKEN>01</MESG_TOKEN>.... ...and repeat string manipulation
  28. 28. GET ?sendString=Login$111$1$125.00$1$ABC1234$$$https://XYZ/... response MAYBANK2U ?transDate=2009-11-26T18:10:36.195+08:00&status=00&transAmo... request
  29. 29. FORM POST response request RHB NOW FORM POST
  30. 30. OTHER MISC STUFF THAT I CAN THINK OF ON THE SPOT IF WE HAVE TIME
  31. 31. HELP THE COMMUNITY @arzumy

×