PayHamyon API Hujjatlari

PayHamyon REST API dasturchilarga o'zlarining Telegram botlari, veb-saytlari va dasturiy ta'minotlariga milliy HUMO (9860) hamda HUMO Visa (4067) to'lovlarini avtomatlashtirilgan tarzda ulash imkonini beradi.

Bazaviy URL Manzili

Barcha API so'rovlari quyidagi xavfsiz HTTPS domeniga yuborilishi shart:

Autentifikatsiya

Har bir so'rovni xavfsiz aniqlash uchun quyidagi ikki parametr talab qilinadi:

POST /api/payment/create

Yangi to'lov buyurtmasini shakllantiradi. Tizim asosiy summaga kichik unikal farq (offset) qo'shib, mijoz to'lashi lozim bo'lgan aniq pay_amount ni va to'lov tokenini qaytaradi.

So'rov Parametrlari (Body JSON)

Muvaffaqiyatli Javob (200 OK)

{
  "status": true,
  "payment_id": 982,
  "token": "3oKTCZPEOT",
  "amount": 50000,
  "pay_amount": 50130,
  "card_number": "9860 3501 8492 4821",
  "card_holder": "PAYHAMYON MERCHANT",
  "expire_at": "2026-10-27 15:38:59"
}

POST /api/payment/check

To'lov holatini uning tokeni yoki payment_idsi orqali tekshirish. RAM diskdagi 3 soniyalik kesh orqali haddan tashqari ko'p tekshiruvlar bazaga yuklama bermasdan bir zumda javob beradi.

So'rov Parametrlari (Body JSON)

Mumkin Bo'lgan Holatlar (payment_status)

• pending — To'lov kutilmoqda (mijoz hali o'tkazma qilmadi).
• paid — To'lov to'liq muvaffaqiyatli amalga oshirildi!
• expired — To'lov muddati tugadi (vaqtida to'lanmadi).
• cancelled — To'lov bekor qilindi.

POST /api/payment/cancel

Kutilayotgan to'lov buyurtmasini muddatidan oldin bekor qilish.

POST /api/shop/info

Kassa holatini, ulangan karta ma'lumotlarini va Telegram Userbot faolligini tekshirish.

Webhook Tizimi (Callback)

Mijoz kartangizga pul o'tkazishi bilan PayHamyon siz ko'rsatgan callback_url manziliga avtomatik POST so'rovi yuboradi.

Webhook Payload Namunasi

{
  "event": "payment.success",
  "shop_id": 126,
  "payment_id": 982,
  "token": "3oKTCZPEOT",
  "amount": 50000,
  "pay_amount": 50130,
  "status": "paid",
  "paid_at": "2026-10-27 15:25:33"
}

Tayyor PHP Webhook Qabul Qiluvchi Kodu

Ushbu kodni saytingizdagi webhook_payhamyon.php fayliga joylashtirishingiz mumkin:

<?php
// PayHamyon Webhook qabul qiluvchi
header('Content-Type: application/json');

$input = file_get_contents('php://input');
$data = json_decode($input, true);

if (!$data || !isset($data['event']) || $data['event'] !== 'payment.success') {
    http_response_code(400);
    echo json_encode(['error' => 'Noto\'g\'ri so\'rov']);
    exit;
}

$payment_id = $data['payment_id'];
$token = $data['token'];
$amount = $data['amount'];
$status = $data['status'];

if ($status === 'paid') {
    // 1. O'z ma'lumotlar bazangizda buyurtmani tasdiqlang
    // 2. Foydalanuvchi hisobiga mablag' qo'shing
    
    // Muvaffaqiyatli 200 OK javob qaytaramiz:
    http_response_code(200);
    echo json_encode(['status' => 'success', 'message' => 'To\'lov qabul qilindi']);
} else {
    http_response_code(200);
    echo json_encode(['status' => 'ignored']);
}
?>

Xatolik Kodlari va Holatlar

Xavfsizlik: Rate Limiting & Ban Qoidalari

Server barqarorligini ta'minlash maqsadida quyidagi cheklovlar avtomatik ishlaydi:

• Sekundiga maksimal 5 ta so'rov;
• Daqiqasiga maksimal 60 ta so'rov;
• Bir daqiqada 120 tadan ko'p so'rov yuborgan IP manzil avtomatik ravishda 15 daqiqaga bloklanadi (HTTP 429).

Namunaviy Kodlar (SDK)

O'z loyihangizga PayHamyon to'lov tizimini 5 daqiqada ulash uchun quyidagi tayyor kod namunalaridan foydalaning. Kerakli tilni tanlab, 1 bosishda nusxalab oling:

1. To'lov Yaratish (POST /api/payment/create)

curl -X POST https://user91.hostx.uz/api/payment/create \
  -H "Content-Type: application/json" \
  -d '{
    "shop_id": 126,
    "shop_key": "YOUR_SECRET_SHOP_KEY",
    "amount": 50000,
    "callback_url": "https://yoursite.uz/webhook.php"
  }'

<?php
$data = [
    'shop_id' => 126,
    'shop_key' => 'YOUR_SECRET_SHOP_KEY',
    'amount' => 50000,
    'callback_url' => 'https://yoursite.uz/webhook.php'
];

$ch = curl_init('https://user91.hostx.uz/api/payment/create');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($data));
curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json']);

$response = curl_exec($ch);
curl_close($ch);

$result = json_decode($response, true);
print_r($result);
?>

import requests

url = "https://user91.hostx.uz/api/payment/create"
payload = {
    "shop_id": 126,
    "shop_key": "YOUR_SECRET_SHOP_KEY",
    "amount": 50000,
    "callback_url": "https://yoursite.uz/webhook.php"
}

response = requests.post(url, json=payload)
print("Natija:", response.json())

const axios = require('axios');

async function createPayment() {
  const res = await axios.post('https://user91.hostx.uz/api/payment/create', {
    shop_id: 126,
    shop_key: 'YOUR_SECRET_SHOP_KEY',
    amount: 50000,
    callback_url: 'https://yoursite.uz/webhook.php'
  });
  console.log('To\'lov yaratildi:', res.data);
}

createPayment();

2. To'lov Holatini Tekshirish (POST /api/payment/check)

curl -X POST https://user91.hostx.uz/api/payment/check \
  -H "Content-Type: application/json" \
  -d '{
    "shop_id": 126,
    "token": "3oKTCZPEOT"
  }'

<?php
$data = ['shop_id' => 126, 'token' => '3oKTCZPEOT'];
$ch = curl_init('https://user91.hostx.uz/api/payment/check');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($data));
curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json']);
$res = json_decode(curl_exec($ch), true);
curl_close($ch);
echo "Holat: " . $res['payment_status'];
?>

import requests

res = requests.post(
    "https://user91.hostx.uz/api/payment/check",
    json={"shop_id": 126, "token": "3oKTCZPEOT"}
).json()
print("To'lov holati:", res.get("payment_status"))

const axios = require('axios');

async function checkPayment(token) {
  const res = await axios.post('https://user91.hostx.uz/api/payment/check', {
    shop_id: 126,
    token: token
  });
  console.log('Status:', res.data.payment_status);
}

checkPayment('3oKTCZPEOT');