PHP Vulnerability Responses by Company

Sipay Elektronik Para ve Ödeme Hizmetleri A.Ş.

Global cloud / infrastructure
Aliases / services
Sipay (Türkiye) / Sipay Elektronik Para ve Ödeme Hizmetleri A.Ş. / Sipay
Official website
https://sipay.com.tr/
Sources identifying the operating company

Turkish payments company, distinct from namesake services in Spain and elsewhere.

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Sipay Payments API

Response status
Not listed
Response information checked
2026-10-28

Current re-audit: Official sources searched; no response found · Research date: 2026-10-28

The official SDK requires PHP7.4+ with curl/json/openssl and explicitly warns that the package remains in development. Configure merchant credentials and the API endpoint.

Scope: Verified material concerns customer-side PHP integration. Provider-platform PHP2Shell impact, non-impact and patch deployment remain unconfirmed. PHP compatibility requirements do not prove remediation.

What users should do

Validate the integration against the test API and merchant settings. When required, send the cardholder IP rather than the server IP, and confirm PHP security updates with the runtime administrator.

Official service URL

Source URLs

  1. Official PHP integration and operation documentationhttps://github.com/sipay-tr/sipay-php-sdkService and operation documentation
  2. Official provider and operator informationhttps://sipay.com.tr/Service and operation documentation
Related official sources
  1. Official PHP integration and operation documentationOfficial information directory
  2. Official provider and operator informationOfficial information directory

Comments