WayForPay — card payments for OpenCart 2.3, 3.x and 4.x

WayForPay for OpenCart is a payment extension that connects WayForPay acquiring to a shop on OpenCart 2.3, 3.x or 4.x. The customer pays by Visa or Mastercard on a secure WayForPay page, and everything after that is automatic: WayForPay sends a serviceUrl webhook, the module verifies the HMAC-MD5 signature and changes the order status itself. The manager doesn’t need to reconcile payments in the bank’s account against orders in the admin every morning.

How it works, step by step

1. At checkout, the customer chooses “Card payment (WayForPay)” and confirms the order.
2. The module builds a signed request and redirects the customer to a secure WayForPay payment page — your server never sees the card details.
3. WayForPay processes the payment and sends the shop a signed serviceUrl webhook.
4. The module verifies the HMAC-MD5 signature and amount — the order automatically gets the right status in OpenCart.
5. When the customer returns to the site, the status is additionally checked with a CHECK_STATUS request — an order won’t close as “paid” unless the money has genuinely gone through.
6. With Pro: the payment log shows every transaction — status, amount, masked card, orderReference — and refunds are made from there.

How much it costs

1,490 UAH — one-off purchase. The licence is perpetual: you pay once, updates and technical support are included in the price. One key covers two sites: your store and a staging copy.

Moving the shop to another domain — deactivate the licence on the old one and activate it on the new one yourself in the account.

The licence is perpetual — nothing expires or switches off. One key — two sites: your store and a staging copy; moving the shop, deactivate the licence on the old domain and activate it on the new one yourself.

One key — two sites: your store and a staging copy. Moving the shop, deactivate the licence on the old domain and activate it on the new one yourself, without contacting support.

Trial first, then payment. A fresh install is the free version: Pro doesn’t switch itself on, and nothing expires after a week. When you want to see Pro — click “Try Pro” in the module’s settings, enter your email and get a 7-day key (also sent by email). So you get to check the payment log, AUTH/SETTLE and refunds on your own shop before you buy — that’s exactly why refunds after purchase aren’t offered.

Under the hood

• A native build for OpenCart 4.x — namespaces, Twig templates, the built-in installer. For OpenCart 3.x and 2.3 — separate ports, not “conditionally compatible” code.
• The secret key is never stored in plain text in the database — it’s kept encrypted (AES-256-CBC + HMAC) with a key tied to the specific installation, so an ordinary database dump won’t expose it.
• Every webhook is verified: an HMAC-MD5 signature plus an amount check — forging a “successful payment” with an outside request won’t work.
• Soft Pro gate: without a key, only the Pro features switch off after the trial — free payment acceptance keeps running.

How to install

1. In the OpenCart admin, open Extensions → Installer and upload wayforpay.ocmod.zip. For OpenCart 3.0.x use the wayforpay-oc3-1.1.3.ocmod.zip build, for OpenCart 2.3 — wayforpay-oc2-1.1.3.ocmod.zip from the product downloads (on 2.3 the contents of the upload/ folder go to the shop root over SFTP, since that version’s stock installer only copies files via FTP).
2. Go to Extensions → Payments, find WayForPay and click “Install”.
3. Enable the module in the settings. Leave test mode on for testing — payment goes through the public test merchant, no real money is charged.
4. For live mode, enter the merchant login and secret key from the WayForPay account.
5. For Pro: paste the licence key from the email after payment — the extended features switch on with no reinstall.