Confused on MD5 Hash security value

[nquinn80]

So,

I've spent the last hour digging through the documentation, but am still unclear on how this works.

Details:

- Using SIM

- In sandbox.authorize.net / test server

Under Account -> Settings -> MD5-Hash, I see that I can set a fixed value for this "hash".

However, when I grab the variable from the response ( x_MD5_Hash ),  I am seeing a different value every single time.

What values are actually being hashed together here?  I'm guessing it's somewhat similar to the fingerprint where it's like static_hash_from_settings . amount . some_other_value ???

Can anyone point me in the right place please?

[nquinn80 · Accepted solution]

Nevermind, just figured it out.

For anyone looking for the exact value:

$mytranshash = strtoupper(md5(static_value_you_set_in_settings . API_login_id . transaction_id . amount));

Had trouble finding this anywhere in the docs.