/**
  * create the connection class and add order info
  * 
  * @param Mage_Sales_Model_Order_Item $order
  * @param string $security key for information
  */
 public function createPaymentFromOrder($order, $security = null)
 {
     // check if security key is given
     if ($security === null) {
         // get existing security key
         $security = $order->getPayment()->getAdditionalInformation('sofort_secret');
         // generate new one
         if (empty($security)) {
             $security = $this->getSecurityKey();
         }
     }
     // create new object
     $sObj = new SofortLib_Multipay(Mage::getStoreConfig('payment/sofort/configkey'));
     $sObj->setVersion(self::MODULE_VERSION);
     // set type
     $sObj->setSofortrechnung();
     // basic information
     $sObj->addUserVariable($order->getRealOrderId());
     $sObj->setEmailCustomer($order->getCustomerEmail());
     $sObj->setSofortrechnungCustomerId($order->getCustomerId());
     $sObj->setSofortrechnungOrderId($order->getRealOrderId());
     // add order number and shop name
     $reason1 = Mage::helper('pnsofortueberweisung')->__('Order No.: ') . $order->getRealOrderId();
     $reason1 = preg_replace('#[^a-zA-Z0-9+-\\.,]#', ' ', $reason1);
     $reason2 = Mage::getStoreConfig('general/store_information/name');
     $reason2 = preg_replace('#[^a-zA-Z0-9+-\\.,]#', ' ', $reason2);
     $sObj->setReason($reason1, $reason2);
     // set amount
     $amount = number_format($order->getGrandTotal(), 2, '.', '');
     $sObj->setAmount($amount, $order->getOrderCurrencyCode());
     // setup urls
     $success_url = Mage::getUrl('pnsofortueberweisung/sofort/return', array('orderId' => $order->getRealOrderId(), '_secure' => true));
     $cancel_url = Mage::getUrl('pnsofortueberweisung/sofort/error', array('orderId' => $order->getRealOrderId()));
     $notification_url = Mage::getUrl('pnsofortueberweisung/sofort/notification', array('orderId' => $order->getRealOrderId(), 'secret' => $security));
     $sObj->setSuccessUrl($success_url);
     $sObj->setAbortUrl($cancel_url);
     $sObj->setNotificationUrl($notification_url);
     // items, shipping, discount
     $this->_appendItems($order, $sObj);
     // invoice address
     $address = $order->getBillingAddress();
     $sObj->setSofortrechnungInvoiceAddress($this->_getFirstname($address), $this->_getLastname($address), $this->_getStreet($address), $this->_getNumber($address), $this->_getPostcode($address), $this->_getCity($address), $this->_getSalutation($address), $this->_getCountry($address), $this->_getNameAdditive($address), $this->_getStreetAdditive($address), $this->_getCompany($address));
     // shipping address
     $address = $order->getShippingAddress();
     $sObj->setSofortrechnungShippingAddress($this->_getFirstname($address), $this->_getLastname($address), $this->_getStreet($address), $this->_getNumber($address), $this->_getPostcode($address), $this->_getCity($address), $this->_getSalutation($address), $this->_getCountry($address), $this->_getNameAdditive($address), $this->_getStreetAdditive($address), $this->_getCompany($address));
     return $sObj;
 }