<script type="text/javascript">
    function checkoutReturn(json){
        if( json.back_url != null && json.collection_id != null  ){
            var url = json.back_url + '?id='+json.collection_id
            window.top.location = url;
            console.log('collection_id: '+json.collection_id);
            console.log('preference_id: '+json.preference_id);
        }
        else{
            console.log('Ventana de mercado pago cerrada');
        }
    }
</script>

<a href="https://www.mercadopago.com/checkout/pay?pref_id=<?php echo $d['identificador_de_la_preferencia']; ?>" name="MP-Checkout" class="btn btn_pagar_con_opcion" mp-mode="modal" onreturn="checkoutReturn">&nbsp;</a>

$mp = new MP("XXXXX", "XXXXX");
$productos = array();
$redireccionamientos = new stdClass();
$redireccionamientos->success = "https://www.mysite.com/caja/terminar/MercadoPagoSuccess.php";
$redireccionamientos->failure = "https://www.mysite.com/caja/terminar/MercadoPagoFailure.php";
$redireccionamientos->pending = "https://www.mysite.com/caja/terminar/MercadoPagoPending.php";
foreach( $_SESSION['carrito']['productos'] as $producto ){
    $producto_datos = Modelos_Productos::obtenerProducto(SISTEMA_TIENDA_PAIS, SISTEMA_ID_TIENDA, $producto['id']);
    $fila = new stdClass();
    $fila->id           =   $producto['id'];
    $fila->title        =   $producto['nombre'];
    if( !empty( $producto_datos['descripcion'] ) ){
        $fila->description  =   util_eliminar_html(util_preparar_var($producto_datos['descripcion'],'html_limpio'));
    }
    $fila->quantity     =   $producto['cantidad'];
    $fila->unit_price   =   5; //$producto['precio_venta'];
    $fila->currency_id  =   "MXN";
    //$fila->picture_url  =   "http://imgs.cdn.com/?tp=p&id=".$producto['id']."&t=340x260";
    array_push($productos, $fila);
}

$player = new stdClass();
$player->name = $_SESSION['cliente']['nombre'];
$player->surname = $_SESSION['cliente']['nombre_completo'];
$player->email = $_SESSION['cliente']['email'];
$exclusiones_tipos_pago = array();
$payment_methods = new stdClass();
//array_push( $exclusiones_tipos_pago, array("id"=>"debit_card") );
//array_push( $exclusiones_tipos_pago, array("id"=>"credit_card") );
array_push( $exclusiones_tipos_pago, array("id"=>"ticket") );
array_push( $exclusiones_tipos_pago, array("id"=>"atm") );
$payment_methods->excluded_payment_types = $exclusiones_tipos_pago;
$datos = array (
    "items" => $productos,
    "payer"=> $player,
    "payment_methods" => $payment_methods
);
$resultado = $mp->create_preference($datos);

Name: json
Version: 1.8.6
CVE: CVE-2020-10663
GHSA: GHSA-jphg-qwrw-7w9g
Criticality: High
URL: https://www.ruby-lang.org/en/news/2020/03/19/json-dos-cve-2020-10663/
Title: json Gem for Ruby Unsafe Object Creation Vulnerability (additional fix)
Solution: upgrade to '>= 2.3.0'

WARNING:  open-ended dependency on json (>= 1.4.6) is not recommended
  if json is semantically versioned, use:
    add_runtime_dependency 'json', '~> 1.4', '>= 1.4.6'
WARNING:  open-ended dependency on faraday (>= 0.9.0) is not recommended
  if faraday is semantically versioned, use:
    add_runtime_dependency 'faraday', '~> 0.9', '>= 0.9.0'
WARNING:  open-ended dependency on pry (>= 0, development) is not recommended
  if pry is semantically versioned, use:
    add_development_dependency 'pry', '~> 0'
WARNING:  open-ended dependency on rake (>= 0, development) is not recommended
  if rake is semantically versioned, use:
    add_development_dependency 'rake', '~> 0'
WARNING:  open-ended dependency on byebug (>= 0, development) is not recommended
  if byebug is semantically versioned, use:
    add_development_dependency 'byebug', '~> 0'
WARNING:  open-ended dependency on test-unit (>= 0, development) is not recommended
  if test-unit is semantically versioned, use:
    add_development_dependency 'test-unit', '~> 0'
WARNING:  open-ended dependency on vcr (>= 0, development) is not recommended
  if vcr is semantically versioned, use:
    add_development_dependency 'vcr', '~> 0'
WARNING:  open-ended dependency on webmock (>= 0, development) is not recommended
  if webmock is semantically versioned, use:
    add_development_dependency 'webmock', '~> 0'