PHP Vulnerability Responses by Company

PayHere (Private) Limited

海外決済・API
Aliases / services
PayHere (Private) Limited / PayHere Sri Lanka / PayHere (Sri Lanka)
Official website
https://www.payhere.lk/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

PayHere Checkout API for PHP

Response status
Not listed
Response information checked
2026-10-28

Current re-audit: Official sources searched; no response found · Research date: 2026-10-28

Checkout API documents PHP hashing, domain-specific merchant secrets and server-callback checksums.

Scope: Official merchant-side PHP integration documentation was reviewed. Cloud-side PHP use and PHP2Shell or either CVE fixes remain unconfirmed.

What users should do

Obtain approval and a secret for the integration domain; test callback checksum validation in sandbox rather than relying on redirects.

Official service URL

Source URLs

  1. Checkout APIhttps://support.payhere.lk/api-%26-mobile-sdk/checkout-api.IService and operation documentation
Related official sources
  1. Checkout APIOfficial information directory
  2. Terms & ConditionsOfficial information directory

Comments