VibeFox 2C2P for OpenCart

Overview

VibeFox 2C2P Payment adds payments through 2C2P, a payment platform for Southeast Asia and other markets, to OpenCart 3 and OpenCart 4. At the last checkout step the customer clicks Confirm Order, is sent to the 2C2P payment page and pays there with any method enabled on your 2C2P merchant account: cards, e-wallets, QR payments, internet banking or over-the-counter cash payments. Card data never touches your site. OpenCart creates the order before the payment, but the order gets a status only after 2C2P confirms the result, so unpaid attempts stay missing orders.

It suits stores in Southeast Asia that already have a 2C2P merchant account and want a simple redirect payment without a card form on their own site. The payment methods shown are set in your 2C2P account, not in the extension. The extension has no refunds from OpenCart (refund in the 2C2P merchant portal), no saved cards, no recurring payments and no card fields on your site.

Key features

2C2P payment page: uses the 2C2P Redirect API. The return and notification URLs are sent with every payment, so nothing has to be configured in the 2C2P portal.

Paid only when 2C2P confirms: 2C2P reports the result by the customer's return and by a server-to-server notification. Both are checked with the HMAC signature of the payment mode; unsigned or tampered results never change an order. OpenCart then sends its usual order e-mails.

Amount and currency check: the paid amount and currency are compared with the order. A mismatch puts the order in a review status with a note.

No double processing: repeated or simultaneous results never record a payment twice. A later failed result never downgrades a paid order, and a failed payment keeps the cart so the customer can try again.

Pending payments: cash and other delayed payments put the order in an awaiting payment status until 2C2P reports the payment.

Sandbox and live modes: separate Merchant ID and Secret Key for each mode. Redirect API 8.5 (HMAC-SHA256) or the legacy 7.0 (HMAC-SHA1) for older accounts.

Payment page language and order ID prefix: English, Thai, Japanese, Bahasa Indonesia, Burmese or Simplified Chinese; an optional prefix when several stores share one 2C2P account.

2C2P tab on the order page: the 2C2P order ID, transaction, status, channel, approval code, masked card and amount received. Your own order statuses, geo zone and minimum total. Optional log without card data or secret keys.

Requirements

OpenCart 3.0.x (tested on 3.0.5.0) or OpenCart 4.0.2 and later (tested on 4.1.0.3), PHP 8.0 or later. One download has the packages for both versions. A 2C2P merchant account with a Merchant ID and Secret Key. A checkout currency supported by the extension and enabled on your 2C2P account. A VibeFox license key from vibefox.net (one key per domain).