Hutko — card payments for OpenCart 2.3, 3.x and 4.x

Hutko for OpenCart is a payment module that accepts Visa and Mastercard payments through Hutko acquiring in shops on OpenCart 3.x and 4.x. Card entry happens on a secure Hutko page, and the result is returned to the shop as a signed server callback: the module verifies the SHA1 signature and sets the correct order status itself. Paid and unpaid orders are separated automatically, with no manual reconciliation against the Hutko account.

The basic version is free. Download it from the official OpenCart marketplace: opencart.com/…/extension_id=48757. The Pro key adds a payment log with status reconciliation, two-step preauth/capture payment and full and partial refunds (reverse) right from the admin.

What the admin gets

How it works, step by step

1. At checkout, the customer chooses “Card payment (Hutko)” and confirms the order.
2. The module builds a signed request and sends the customer to a secure Hutko payment page.
3. Hutko processes the payment and sends the shop a server callback with an SHA1 signature.
4. The module verifies the signature — and the order gets the right OpenCart status without the manager’s involvement.
5. On the customer’s return, the status is additionally reconciled, so an order becomes “paid” only after the money has actually gone through.
6. With Pro: a blocked preauth amount is captured when you move the order to a completed status, and refunds are done from the payment log.

How much it costs

1,490 UAH — one-off purchase. The licence is perpetual: you pay once, updates and technical support are included in the price. One key covers one domain and its subdomains.

Moving the shop to another domain — deactivate the licence on the old one and activate it on the new one yourself in the account.

The licence is perpetual — nothing expires or switches off. One key — one domain; moving the shop, deactivate the licence on the old domain and activate it on the new one yourself.

One key — one domain. Moving the shop, deactivate the licence on the old domain and activate it on the new one yourself, without contacting support.

Trial first, then payment. A fresh install is a plain free version: nothing Pro switches itself on. When you want to see Pro in action, click “Try Pro” in the module’s settings and enter your email — a 7-day key arrives straight in the modal and is also sent by email. The payment log, preauth/capture and refunds can be tested on your own shop before you buy. That’s exactly why refunds after purchase aren’t offered — you see the module at work before you pay.

Technical requirements

• OpenCart 4.0.2 – 4.1.x (native build), OpenCart 3.0.2 – 3.0.5.0 or OpenCart 2.3.0.x — separate builds
• PHP 8.0+ for OpenCart 4, 7.x for OpenCart 3, 5.6–7.x for OpenCart 2.3
• Merchant ID and secret key from the Hutko account — needed only for live mode

Under the hood

• Native code for OpenCart 4 — namespaces, Twig, the built-in installer; a separate port is built for OpenCart 3, not one archive “for all versions”.
• The secret key is stored obfuscated, tied to the installation — a database dump won’t expose the key in the clear.
• A callback without a valid SHA1 signature is rejected — an order’s status can’t be changed by an outside request.
• Soft Pro gate: Pro fields are always visible, but greyed out without a key — it’s immediately clear what the licence unlocks. Once the trial ends, only updates and new features stop — Pro features keep working, and free payment acceptance never stops.

How to install

1. Extensions → Installer: upload hutko.ocmod.zip. For OpenCart 3.0.x take hutko-oc3.ocmod.zip, for OpenCart 2.3 — hutko-oc2.ocmod.zip from the product downloads.
2. OpenCart 2.3: the built-in Installer in this version only copies files via FTP, so the contents of the upload/ folder from the archive are uploaded to the shop root using a file manager or SFTP — the core is not overwritten in the process.
3. In Extensions → Payment, find Hutko and click “Install”, then open its settings.
4. Enable the module and leave test mode on for the first check — payment goes through a public test merchant.
5. For live payments, turn off test mode and enter the Merchant ID and secret key from the Hutko account.
6. For Pro: enter the licence key from the email after purchase — the log and extended features appear instantly, with no reinstall.

Version history

1.1.0 (OpenCart 2.3) — 7 August 2026

A build for OpenCart 2.3.0.x: the same Free/Pro model and click-to-start trial, payment log, two-step payment and refunds. Payment goes through Hutko’s JSON API with a server redirect. Fixed relative to the newer builds: a duplicate “payment received” entry in the order history; the payment amount is now taken in the order’s currency (rather than the settlement currency) — otherwise comparing it to the order total produced a false “underpayment”; refunds now validate the amount — an empty field means a full refund, and a negative number or one larger than the remaining balance is now rejected (previously “-500” refunded the whole amount), partial refunds are tracked cumulatively.

1.1.0 — 2 August 2026

Rebuilt the Free/Pro model: a fresh install no longer turns Pro on by itself — the 7-day trial is only issued by clicking “Try Pro” and arrives as a key in the modal and by email. The licence is checked on the CatCode server with a daily cache and a 14-day grace period, so the site being unreachable doesn’t switch Pro off for paying customers. Pro fields are now always visible, but greyed out without a key. Fixed: a callback with an understated amount no longer blocks a later, correct payment from being recorded — previously such an order stayed “awaiting payment” forever.

1.0.2 — 23 July 2026

Fixed a conflict at checkout on OpenCart 4.0.2.x: the geo-zone check no longer loads a catalog model missing in this version and no longer blocks choosing a payment or shipping method.

1.0.0 — July 2026

First public release: card payment via a secure Hutko page, a server callback with SHA1 signature verification, status reconciliation on return, test mode on a public merchant, request logging; Pro — a payment log with RRN and masked card, preauth/capture, reverse refunds. Builds for OpenCart 4.0.2–4.1.x and 3.0.2–3.0.5.0.