基于2Checkout实现网站余额充值及最低充值金额设置技术问询

Hey there! Let’s walk through exactly how to set up 2Checkout for your balance recharge system, since you’re dealing with service-based charges (not physical products) and need that $10 minimum rule enforced. Here’s a step-by-step breakdown:

The easiest way to implement this is using 2Checkout’s Hosted Payment Page—it handles all payment security and checkout flow, so you don’t have to build that from scratch. Below is a sample HTML form that triggers the recharge process:

<form action="https://www.2checkout.com/checkout/purchase" method="post">
  <!-- Required 2Checkout parameters -->
  <input type="hidden" name="sid" value="YOUR_SELLER_ID"> <!-- Replace with your actual 2Checkout seller ID -->
  <input type="hidden" name="mode" value="2CO">
  <input type="hidden" name="li_0_name" value="Account Balance Recharge">
  <input type="hidden" name="li_0_price" value="10.00"> <!-- Enforces minimum $10 recharge -->
  <input type="hidden" name="li_0_quantity" value="1">
  <input type="hidden" name="custom" value="user_id=test"> <!-- Pass your user's unique ID here -->
  
  <!-- Optional customization -->
  <input type="hidden" name="currency_code" value="USD">
  <input type="hidden" name="return_url" value="https://yourwebsite.com/recharge-success"> <!-- Post-payment success page -->
  <input type="hidden" name="cancel_url" value="https://yourwebsite.com/recharge-cancel"> <!-- Page if user cancels payment -->
  
  <!-- Recharge button -->
  <button type="submit">Recharge $10.00</button>
</form>

Key Notes on This Form: #

• sid: Your unique 2Checkout seller ID (find this in your 2Checkout dashboard).
• custom: This parameter lets you pass your user’s ID (e.g., test) so your backend knows which account to credit after payment.
• li_0_price: Setting this to 10.00 ensures the minimum recharge amount is enforced at the checkout level.

Never rely solely on frontend validation—users can tamper with HTML/JS. Here’s how to lock this down:

Frontend (If You Allow Custom Recharge Amounts)

If you want to let users enter amounts higher than $10 (e.g., $20, $50), add input validation to block values below $10:

const amountInput = document.getElementById('rechargeAmount');
const rechargeBtn = document.getElementById('rechargeBtn');

amountInput.addEventListener('input', () => {
  const amount = parseFloat(amountInput.value);
  if (!isNaN(amount) && amount >= 10.00) {
    rechargeBtn.disabled = false;
    // Update the hidden price field with the valid amount
    document.querySelector('input[name="li_0_price"]').value = amount.toFixed(2);
  } else {
    rechargeBtn.disabled = true;
    alert('Minimum recharge amount is $10.00');
  }
});

Backend (Critical for Security)

When 2Checkout sends you an Instant Payment Notification (IPN) after a successful payment, validate that the amount is at least $10 before updating the user’s balance. This is non-negotiable—frontend checks can be bypassed.

Let’s walk through how user "test" (with $0 balance) would recharge and use the calculator:

1. "test" logs into your site, sees their $0.00 balance, and knows they need $1.50 to use the calculator.
2. They click the "Recharge $10.00" button (or enter a custom amount ≥$10 if you allow it), which redirects them to 2Checkout’s secure payment page.
3. They complete payment using their preferred method (credit card, PayPal, etc.).
4. After successful payment, 2Checkout redirects them back to your return_url, and sends an IPN to your backend server.
5. Your backend verifies the IPN (using 2Checkout’s MD5 hash validation) and checks that the payment amount is ≥$10.
6. You add the full recharge amount (e.g., $10) to "test"'s balance—their balance now becomes $10.00.
7. When "test" uses the calculator, your system deducts $1.50 from their balance, leaving $8.50, and grants access to the service.

Here’s a simplified backend script to process 2Checkout’s IPN and update the user’s balance securely:

<?php
// Replace with your 2Checkout credentials
$secretWord = 'YOUR_SECRET_WORD';
$sellerId = 'YOUR_SELLER_ID';

// Retrieve IPN data
$orderNumber = $_POST['order_number'];
$totalAmount = $_POST['total'];
$customData = $_POST['custom']; // Contains user_id=test
$md5Hash = $_POST['md5_hash'];

// Calculate expected MD5 hash to verify payment authenticity
$expectedHash = strtoupper(md5($orderNumber . $sellerId . $totalAmount . $secretWord));

if ($md5Hash === $expectedHash && floatval($totalAmount) >= 10.00) {
  // Extract user ID from custom parameter
  parse_str($customData, $userData);
  $userId = $userData['user_id'];
  
  // Update user balance in your database (example SQL)
  // $pdo->exec("UPDATE users SET balance = balance + $totalAmount WHERE id = '$userId'");
  
  echo 'OK'; // 2Checkout expects this response to confirm receipt
} else {
  // Log invalid payment attempts for debugging
  error_log('Invalid IPN received: ' . print_r($_POST, true));
  echo 'ERROR';
}
?>

This script ensures that only valid, minimum-$10 payments are credited to user accounts.

内容的提问来源于stack exchange，提问作者Paul R