VibeFox HyperPay for OpenCart

Overview

VibeFox HyperPay Payment Gateway adds card payments through the HyperPay COPYandPAY widget to OpenCart 3 and OpenCart 4. After the customer clicks Confirm Order, a payment page of your store shows the HyperPay widget, and the customer pays there with VISA, Mastercard, mada, American Express, STC Pay or Apple Pay. Card data is entered only in the HyperPay widget and never touches your server. OpenCart creates the order before the payment, but the order gets a status only after HyperPay confirms the payment, so abandoned or declined payments stay missing orders.

It suits stores in Saudi Arabia, the UAE, Jordan, Bahrain, Oman, Qatar, Egypt and other MENA markets with a HyperPay merchant account. The extension has no refunds or voids from OpenCart (make them in the HyperPay dashboard), no saved cards, no subscriptions, no Apple Pay domain verification, no separate entity per brand and no buy-now-pay-later methods.

Key features

HyperPay widget: the COPYandPAY widget on the payment page, loaded with Subresource Integrity, in the customer's language when HyperPay supports it. You choose which brands it shows.

Paid only when HyperPay confirms: by a server-to-server status request when the customer returns, and by encrypted webhooks (AES-256-GCM) when the browser is closed. The return URL alone never marks an order paid. OpenCart then sends its usual order e-mails.

Checked against the order: the payment must belong to one of the order's own checkouts, and the amount and currency must match. A mismatch puts the order in a review status with a note.

No double processing: each result is applied once. Repeated webhooks or page reloads never apply a payment twice, and a cart already paid through another order is not paid again. Duplicate payments, payments after cancellation and reversals are noted on the order.

Debit or pre-authorization: charge at once, or reserve the amount and capture it later with Capture payment in the tab of the order page.

Test and live: separate Access Token, Entity ID and webhook key for each mode. Status checks, captures and webhooks always use the mode in which the checkout was created.

Your own order statuses: choose the OpenCart status for a paid, authorized, awaiting, on hold, canceled and refunded payment.

OpenCart conditions: geo zone, minimum order total and sort order. Log without card data, keys or customer data.

Requirements

OpenCart 3.0.x (tested on 3.0.5.0) or OpenCart 4.0.2 and later (tested on 4.1.0.3), PHP 8.0 or later with the OpenSSL extension. One download has the packages for both versions. A HyperPay merchant account with Access Token and Entity ID (test and live), and a payment webhook with its decryption key. A VibeFox license key from vibefox.net (one key per domain).