CardChek Uz — Hujjatlarsiz va 0% Komissiyali Avto-To'lov Platformasi

Nega Aynan CardChek?

To'lov qabul qilishning zamonaviy standarti

Eski agregatorlarning 3-4% komissiyasi va behuda byurokratiyasidan butunlay qutuling.

📄

0 ta Hujjat

Pasport, soliq guvohnomasi yoki firma (YaTT/MChJ) ochish umuman shart emas. Oddiy jismoniy shaxs kartangiz orqali 2 daqiqada boshlang.

💸

0% Komissiya

Har tranzaksiyadan foiz ushlab qolinmaydi. Xaridordan tushgan har bir so'm 100% o'zingizning kartangizda qoladi.

⚡

1 Soniyada Tasdiqlash

Uzcard SMS xabarnomasi kelishi bilan real-vaqtda o'qiladi va Webhook orqali botingiz yoki saytingizdagi buyurtma darhol faollashadi.

🛡️

Qoldiq Balansi Bilan

Har bir to'lov kelganda bot sizga tushgan summani va kartangizda qancha pul qolganini real-vaqtda chiroyli qilib yuboradi.

Qadam-baqadam

Barchasi 4 ta oddiy qadamda

1

Botga Kiring

@CardChekbot ga kirib, o'zbek raqamingiz orqali 5 soniyada xavfsiz ro'yxatdan o'ting.

2

Kassa Ochish

Kassa nomini va 16 ta raqamli kartangizni kiriting. Kassa avto-to'lov bilan faollashgach, maxsus emailingiz beriladi.

3

1 Bosishda Tasdiqlash

Uzcarddan kelgan tasdiqlash xatini botimiz sizga tugma qilib yuboradi. Ustiga bosishingiz bilan karta ulanadi!

4

API Keyni Ulash

Shop ID va Secret Key-ni nusxalab, tayyor namunaviy kodlarimiz orqali botingiz yoki saytingizga ulang.

Developer Documentation

Dasturlash Tillari Uchun Rasmiy Kodlar

Barcha so'rovlar https://cardchek.uz orqali amalga oshiriladi.

import aiohttp
import hashlib
import hmac

SHOP_ID = "SHOP_84920"
SECRET_KEY = "sk_live_98a7f6d5e4c3b2a1"
API_URL = "https://cardchek.uz/v1/invoice/create"

async def create_payment(order_id: str, amount: int):
    # 1. HMAC-SHA256 xavfsizlik imzosini yaratish
    sign_string = f"{SHOP_ID}:{order_id}:{amount}"
    signature = hmac.new(
        SECRET_KEY.encode(), sign_string.encode(), hashlib.sha256
    ).hexdigest()

    payload = {
        "shop_id": SHOP_ID,
        "order_id": order_id,
        "amount": amount, # Masalan: 10000
        "signature": signature
    }

    async with aiohttp.ClientSession() as session:
        async with session.post(API_URL, json=payload) as resp:
            data = await resp.json()
            # Qaytadigan javob:
            # {
            #   "status": "success",
            #   "payment_id": "INV_99812",
            #   "card_number": "8600 1204 **** 9239",
            #   "payable_amount": 10001,  <-- Kolliziya bo'lsa 10001
            #   "checkout_url": "https://cardchek.uz/checkout/INV_99812",
            #   "expires_in": 300         <-- 5 daqiqa (soniyalarda)
            # }
            return data

<?php
// CardChek.uz Webhook qabul qiluvchi webhook.php fayli
$secret_key = "sk_live_98a7f6d5e4c3b2a1";

$input = file_get_contents("php://input");
$data = json_decode($input, true);

// 1. Kriptografik imzoni tekshirish
$expected_sign = hash_hmac(
    'sha256', 
    $data['shop_id'] . ':' . $data['order_id'] . ':' . $data['original_amount'] . ':' . $data['status'], 
    $secret_key
);

if (!hash_equals($expected_sign, $data['signature'])) {
    http_response_code(403);
    die("Invalid Signature");
}

// 2. To'lov tasdiqlanganda buyurtmani faollashtirish
if ($data['status'] === 'paid') {
    $order_id = $data['order_id'];
    $amount = $data['original_amount'];     // 10 000
    $paid_amount = $data['payable_amount']; // 10 001
    
    // Foydalanuvchi balansini to'ldirish kodi...
    
    http_response_code(200);
    echo json_encode(["ok" => true]);
}

const express = require('express');
const crypto = require('crypto');
const axios = require('axios');
const app = express();
app.use(express.json());

const SHOP_ID = "SHOP_84920";
const SECRET_KEY = "sk_live_98a7f6d5e4c3b2a1";

// 1. To'lov yaratish
async function createInvoice(orderId, amount) {
    const signString = `${SHOP_ID}:${orderId}:${amount}`;
    const signature = crypto.createHmac('sha256', SECRET_KEY).update(signString).digest('hex');

    const res = await axios.post('https://cardchek.uz/v1/invoice/create', {
        shop_id: SHOP_ID,
        order_id: orderId,
        amount: amount,
        signature: signature
    });
    return res.data;
}

// 2. Webhook qabul qilish
app.post('/webhook', (req, res) => {
    const { shop_id, order_id, original_amount, status, signature } = req.body;
    const expected = crypto.createHmac('sha256', SECRET_KEY)
                           .update(`${shop_id}:${order_id}:${original_amount}:${status}`)
                           .digest('hex');

    if (expected !== signature) return res.status(403).send("Forbidden");
    if (status === 'paid') {
        console.log(`✅ To'lov qabul qilindi: #${order_id}`);
        return res.json({ ok: true });
    }
});

app.listen(3000, () => console.log('CardChek server running on port 3000'));

package main

import (
	"crypto/hmac"
	"crypto/sha256"
	"encoding/hex"
	"fmt"
)

// CardChek.uz Webhook tekshiruvi
func verifyCardChekSignature(shopID, orderID string, amount int, status, signature, secretKey string) bool {
	msg := fmt.Sprintf("%s:%s:%d:%s", shopID, orderID, amount, status)
	h := hmac.New(sha256.New, []byte(secretKey))
	h.Write([]byte(msg))
	expected := hex.EncodeToString(h.Sum(nil))
	return hmac.Equal([]byte(expected), []byte(signature))
}

import 'package:http/http.dart' as http;
import 'package:crypto/crypto.dart';
import 'dart:convert';

Future<void> createCardChekPayment(String orderId, int amount) async {
  const shopId = "SHOP_84920";
  const secretKey = "sk_live_98a7f6d5e4c3b2a1";
  
  final signStr = "$shopId:$orderId:$amount";
  final signature = Hmac(sha256, utf8.encode(secretKey))
      .convert(utf8.encode(signStr)).toString();

  final res = await http.post(
    Uri.parse("https://cardchek.uz/v1/invoice/create"),
    headers: {"Content-Type": "application/json"},
    body: jsonEncode({
      "shop_id": shopId,
      "order_id": orderId,
      "amount": amount,
      "signature": signature
    }),
  );
  print("Response: ${res.body}");
}

2 daqiqada sayt yoki botingizga Avto-To'lov ulang!