don't need end-php
merchandId and mechandKey are retreived from ini file
added validateSha1 method
improved validateSha1
add .php to ini file to prevent reading through webserve