VibeFox Redsys for OpenCart

Overview

VibeFox Redsys Gateway adds card payments through Redsys, the virtual POS of Spanish banks (Servired / Sermepa), to OpenCart 3 and OpenCart 4. At the last checkout step the customer clicks Confirm Order and is sent to the secure Redsys payment page of your bank, pays by card with 3-D Secure, by Bizum or by another method your bank has enabled for the terminal, and comes back to your store. Card data never touches your site. OpenCart creates the order before the payment, but the order gets a status only after the signed Redsys notification, so unpaid attempts stay missing orders.

It suits stores in Spain whose bank provides a Redsys terminal. The extension takes one-time payments, authorised and captured at once. It has no card form on your own site (InSite or iframe), no saved cards or one-click payments, no subscriptions and no pre-authorisation with later capture.

Key features

Redsys payment page: a signed payment form (HMAC SHA-256) for the order total in the order currency, with the right decimals for every currency, in the customer's language when Redsys offers it.

Paid only when Redsys confirms: only the signed server notification sets the order status, after the amount and currency were compared with the order. The notification URL is sent with every payment, so there is nothing to copy into the Redsys panel.

Safe for real money: a test payment never pays an order in live mode, and a payment that differs from the order total waits for your review with a note.

No double processing: repeated notifications are applied once. Each attempt gets a new Redsys order number, and a second payment for the same cart never changes the order; a note asks you to refund it.

Refunds from the order page: full and partial refunds in the VibeFox Redsys Gateway tab of the order through the Redsys REST API, in the environment and currency of the payment. A full refund sets the Refunded status.

Test and live environments: separate secret keys for the Redsys test environment (SIS-T) and the real one. The public Redsys test data is shown on the settings page.

Your own order statuses: after payment choose Processing, Completed or On hold (review), and map each one, as well as Refunded, to an OpenCart status.

OpenCart conditions: geo zone, minimum order total and sort order. A log that always records errors, without keys, signatures or card data.

Requirements

OpenCart 3.0.x (tested on 3.0.5.0) or OpenCart 4.0.2 and later (tested on 4.1.0.3), PHP 8.0 or later. One download has the packages for both versions. A Redsys terminal from your bank with the merchant code (FUC), terminal number and SHA-256 secret keys, with the online notification (HTTP) active. A VibeFox license key from vibefox.net (one key per domain).