VibeFox Peach Payments for OpenCart

Overview

VibeFox Peach Payments Pay Gateway adds card payments through the Peach Payments COPYandPAY form to OpenCart 3 and OpenCart 4. At the last checkout step the customer clicks Confirm Order and goes to a payment page of your store, where the card details are entered in the Peach Payments form. Card data never touches your server. OpenCart creates the order before the payment, but the order gets a status only after Peach Payments confirms the payment, so unpaid attempts stay missing orders.

It suits stores in South Africa, Kenya and Mauritius that sell in ZAR, KES or MUR and have a Peach Payments account with the Card API. The extension takes one-time card payments only. It has no card form on the checkout step itself, no saved cards, no subscriptions, no pre-authorisation and capture, no refunds from OpenCart (refunds are made in the Peach Payments dashboard) and no EFT, BNPL, QR or other non-card methods.

Key features

Peach Payments card form: Visa, Mastercard, American Express and Diners Club, as selected in the settings. The form script is loaded with a Subresource Integrity hash, and the form follows the customer's language when Peach Payments supports it.

Paid only when Peach Payments confirms: the order status is set after a server-side status request when the customer returns, or after an encrypted Peach Payments webhook. OpenCart then sends its usual order e-mails.

Encrypted webhooks: webhooks are decrypted with your AES-256-GCM key, so only Peach Payments can change your orders. Payments are confirmed even when the customer closes the browser.

Amount and currency check: a payment that does not match the order goes to a review status with a note. Payments flagged by Peach Payments for manual review get a note too.

No double processing: the return and the webhook never apply a payment twice, and a cart is never paid twice, even though OpenCart 3 creates a new order each time the confirm step is shown and OpenCart 4 updates one order of the checkout.

Test and live modes: separate Entity IDs, access tokens and webhook keys. A payment is always checked in the mode it was started in.

Dashboard refunds in the notes: refunds, reversals and chargebacks made in Peach Payments are added to the order notes by the webhook.

Your own order statuses and a Peach Payments tab on the order page: choose the OpenCart status for a paid order, an awaiting payment, a payment on review and a failed payment. Geo zone, minimum order total and an optional log without card data, keys or customer data.

Requirements

OpenCart 3.0.x (tested on 3.0.5.0) or OpenCart 4.0.2 and later (tested on 4.1.0.3), PHP 8.0 or later with the OpenSSL extension. One download has the packages for both versions. A ZAR, KES or MUR currency in your store. A Peach Payments account with the Card API Entity ID and Access Token (test and live), and a webhook decryption key from Peach Payments. The store must be reachable from the internet for webhooks. A VibeFox license key from vibefox.net (one key per domain).