PHP Vulnerability Responses by Company

喬睿科技股份有限公司

海外決済・API
Aliases / services
Cherri Tech Inc / 喬睿科技股份有限公司 / TapPay / 日本チェリー株式会社 / TapPay (Cherri Tech)
Official website
https://www.tappaysdk.com/
Sources identifying the operating company

Provider in the cited Taiwan terms; distinct from Cherri Co., Ltd. in Japan.

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

TapPay merchant backend API with PHP examples

Response status
Not listed
Response information checked
2026-10-28

Current re-audit: Official sources searched; no response found · Research date: 2026-10-28

Official documentation and PHP examples keep the partner key server-side and call backend APIs using HTTPS POST and x-api-key.

Scope: Official merchant-side PHP integration was reviewed. Cloud-side PHP use and fixes for PHP2Shell or either CVE remain unconfirmed.

What users should do

Configure portal merchant credentials and outbound IP, test in sandbox and confirm transaction state through Record API after redirects/notifications.

Official service URL

Source URLs

  1. TapPay Backend APIshttps://docs.tappaysdk.com/tutorial/zh/back.htmlService and operation documentation
  2. TapPay official backend PHP examplehttps://github.com/TapPay/tappay-payment-integration-skill/blob/main/tappay-payment-integration/references/00-setup.mdService and operation documentation
Related official sources
  1. TapPay Backend APIsOfficial information directory
  2. TapPay official backend PHP exampleOfficial information directory
  3. TapPay service termsOfficial information directory
  4. TapPay company informationOfficial information directory

Comments