Shopinext for WooCommerce

Description

Shopinext for WooCommerce provides a seamless, secure payment experience for your online store. Redirect customers to Shopinext’s PCI-DSS compliant Hosted Payment Page (HPP) to process credit and debit card transactions.

Key Features:

  • Hosted Payment Page (HPP) — Customers are securely redirected to Shopinext’s checkout page, eliminating the need to handle sensitive card data on your server.
  • 3D Secure Support — Full 3D Secure authentication support for enhanced transaction security.
  • Multi-Currency — Accept payments in TRY, USD, EUR and GBP.
  • Multi-Language — Checkout page available in Turkish, English and German.
  • Sandbox Mode — Test your integration with a dedicated sandbox environment before going live.
  • Comprehensive Admin Dashboard — Includes diagnostic logs, system status checks, and payment statistics directly in your WordPress admin.
  • Preflight Checks — Built-in connectivity and configuration verification to ensure your store is ready to accept payments.
  • Automatic Log Management — Diagnostic logs with configurable retention (7–60 days) and automatic cleanup.
  • Debug Logging — Optional detailed logging with automatic PII masking for safe troubleshooting.
  • HPOS Compatible — Fully compatible with WooCommerce High-Performance Order Storage.
  • Brand Logo Control — Choose which card network logos (Visa, MasterCard, Amex, Discover, JCB, UnionPay, Troy) to display at checkout.
  • Webhook Security — SHA-256 hash verification, idempotency protection, and monotonic status enforcement for reliable payment notifications.

Supported Card Networks:

  • Visa
  • MasterCard
  • American Express
  • Discover
  • JCB
  • UnionPay
  • Troy

Third-Party Service

This plugin connects to the Shopinext Payment API to process payments. When a customer places an order, the following data is transmitted to Shopinext servers:

  • Order details: amount, currency, item descriptions
  • Customer information: name, email address, phone number, billing/shipping address
  • Optional: identity number (TC Kimlik No), if enabled in plugin settings

API Endpoints:

  • Live: https://api.shopinext.com
  • Sandbox: https://api.dev.shopinext.com
  • Hosted Payment Page: https://checkout.shopinext.com / https://checkout.dev.shopinext.com

No credit card data is collected or stored by this plugin. All card data is entered directly on Shopinext’s PCI-DSS compliant Hosted Payment Page.

This plugin also connects to ipify (https://api.ipify.org and https://api6.ipify.org) to detect your server’s outbound IPv4 and IPv6 addresses. This information is displayed on the admin Status page to help you configure Shopinext’s IP whitelist. No personal or customer data is sent to ipify — only a simple HTTP request is made and the server’s IP address is returned. Results are cached locally for 24 hours.

Captures d’écrans

  • Payment gateway settings — General configuration with branded header.
  • Payment gateway settings — API credentials and environment setup.
  • Payment gateway settings — Checkout customization and card network logos.
  • Payment statistics — Success rate overview with daily breakdown chart.
  • Payment statistics — Hourly heatmap and transaction details.
  • System status — API connection test and preflight checks.
  • System status — Server environment and SSL diagnostics.
  • System status — Webhook configuration and reachability test.
  • System status — Support report and integration tools.
  • Diagnostic logs — Filterable log viewer with search and pagination.

Installation

  1. Upload the shopinext-gateway folder to the /wp-content/plugins/ directory, or install through the WordPress plugin screen.
  2. Activate the plugin through the ‘Plugins’ screen in WordPress.
  3. Navigate to WooCommerce Settings Payments Shopinext to configure your API credentials.
  4. Enter your Client ID and Client Secret from your Shopinext merchant account.
  5. Use the Verify API Connection button to confirm your credentials are working.
  6. Toggle Test Mode off when you are ready to accept live payments.

Sandbox Testing

A separate Sandbox account is required for test transactions. Live API keys are not valid in test mode. To request a Sandbox account, contact support@shopinext.com.

FAQ

What do I need to use this plugin?

You need a Shopinext merchant account. Visit shopinext.com to sign up or contact support@shopinext.com for more information.

Which currencies are supported?

Shopinext currently supports TRY (Turkish Lira), USD (US Dollar), EUR (Euro) and GBP (British Pound).

Is this plugin compatible with WooCommerce Checkout Blocks?

Yes. This plugin supports both Classic Checkout and WooCommerce Checkout Blocks. Payment processing via Shopinext’s Hosted Payment Page works seamlessly in both modes.

Does this plugin store credit card data?

No. All payment processing happens on Shopinext’s PCI-DSS compliant Hosted Payment Page. No card data ever touches your server.

How do I check if my store is ready for payments?

Navigate to WooCommerce Shopinext Status in your admin panel. The built-in preflight check will verify SSL, API connectivity, authentication, webhook reachability and more.

Where can I view payment logs?

Navigate to WooCommerce Shopinext Logs to view detailed diagnostic logs for all payment events, webhooks and API calls.

Avis

Il n’y a aucun avis pour cette extension.

Contributeurs/contributrices & développeurs/développeuses

« Shopinext for WooCommerce » est un logiciel libre. Les personnes suivantes ont contribué à cette extension.

Contributeurs

“Shopinext for WooCommerce” a été traduit dans 2 locales. Remerciez l’équipe de traduction pour ses contributions.

Traduisez « Shopinext for WooCommerce » dans votre langue.

Le développement vous intéresse ?

Parcourir le code, consulter le SVN dépôt, ou s’inscrire au journal de développement par RSS.

Journal des modifications

3.2.2

  • Improved: Payment statistics now calculate success rate from real payment outcomes only (excludes expired sessions and technical errors).
  • Improved: Consistent admin page headers across all pages (Settings, Statistics, Status, Logs).
  • Improved: All admin pages now display environment badge (Sandbox/Live) with pulse animation.
  • Improved: Log page title simplified from « Shopinext V3 — API Logs » to « Shopinext Logs ».
  • Improved: Updated translations for Turkish, English and German.

3.2.1

  • Fixed: Fatal error on thank-you page when order cannot be loaded.
  • Fixed: Fatal error in process_payment when order ID is invalid.
  • Fixed: Thank-you page notice now only fires for Shopinext orders.
  • Fixed: CSRF protection added to IP refresh action on Status page.
  • Fixed: XSS prevention for AJAX-rendered content on Status page.
  • Fixed: HTTP connectivity check now correctly flags 4xx errors as failures.
  • Fixed: Clipboard copy buttons now show error feedback on non-HTTPS sites.
  • Improved: PHP 8.2+ compatibility — all dynamic properties declared.
  • Improved: Checkout description field now sanitized with wp_kses_post.
  • Improved: Block Checkout availability checks now match Classic Checkout (SSL + currency).
  • Improved: Read-only URL fields (webhook, success, fail) enforced server-side.
  • Improved: All statistics SQL queries use $wpdb->prepare for standards compliance.
  • Improved: Log page stats reduced from 4 queries to 1 (GROUP BY optimization).
  • Improved: Statistics page queries reduced from 10 to 4 (conditional aggregation).
  • Improved: Status page connectivity tests cached for 5 minutes via transients.
  • Improved: Brand definitions centralized in Shopinext_Config (single source of truth).
  • Improved: Added needs_setup() for WooCommerce « Finish set up » guidance.
  • Improved: Admin header title and subtitle now translatable.
  • Improved: Support report reuses cached variables instead of redundant function calls.
  • Improved: API credential fields now include descriptive tooltips.
  • Fixed: Statistics page hourly/daily charts now use WordPress timezone instead of UTC.
  • Fixed: Log page timestamps now display in WordPress timezone instead of raw UTC.
  • Fixed: Webhook responses always return OK to prevent 48-hour Shopinext retry loops.
  • Fixed: Completed orders now allow refund/partial_refund webhooks through.
  • Fixed: SNE11 (domain authorization) no longer triggers unnecessary token re-authentication.
  • Improved: Non-retryable API errors (SNE1, SNE10, SNE11, SNE13, SNE16) return immediately with clear messages.
  • Improved: All known API error codes enriched with human-readable descriptions from centralised reference.
  • Added: Collapsible API Error Code Reference table (SNE1–SNE19) on the Logs page.
  • Fixed: PII masking now falls back to substr/strlen when mbstring is unavailable.
  • Fixed: Checkout redirect URL now requires HTTPS scheme in addition to host validation.
  • Fixed: Preflight API connectivity check now correctly flags HTTP 4xx/5xx as failures.
  • Improved: API error code descriptions now translatable via WordPress i18n.
  • Improved: Turkish translations updated with all v3.2.1 strings including SNE error codes.
  • Added: « Apply » link in admin footer pointing to Shopinext registration page.
  • Fixed: Negative webhook downgrade protection now also uses WooCommerce is_paid() for older orders.
  • Fixed: Payment redirect URL now stored from API response instead of being manually constructed.
  • Fixed: Checkout server preflight check now correctly flags HTTP 4xx/5xx as failures.
  • Fixed: API error response body is now PII-masked before logging.
  • Improved: « Copy Recent Logs » output redesigned with pipe-separated fields, block layout, and 1000-char detail limit.
  • Improved: Icon alignment fixed in all admin buttons (Logs, Status pages).
  • Added: Data retention notice on Statistics page explaining shared log/stats lifecycle.
  • Fixed: Translation mismatch in connection success message (em dash vs hyphen).
  • Added: Missing customer-visible translations (Order not found, Missing required fields).
  • Security: Admin field descriptions now filtered through wp_kses_post().
  • Fixed: create_payment() return type consistency (null false).
  • Security: Added index.php to all plugin directories to prevent directory listing.
  • Improved: wc_get_orders() updated to HPOS-native meta_query syntax.
  • Improved: Order edit links in Logs page now use HPOS-aware URLs.
  • Security: Log filter form now includes nonce verification.
  • Added: 6 missing admin translation strings for Status and Preflight pages.
  • Added: Shopinext Panel link in admin footer.
  • Fixed: Processing webhook now sets order to on-hold instead of processing to prevent false payment confirmation.
  • Improved: payment_complete() now records Shopinext payment ID as WooCommerce transaction ID.
  • Added: Order-level currency validation in process_payment() for multi-currency plugin compatibility.
  • Added: Third-Party Service disclosure section in readme.txt for WordPress.org compliance.
  • Added: Plugin URI, License and License URI headers.
  • Improved: Translation hash file I/O now uses WP_Filesystem API instead of direct file functions.
  • Improved: All inline CSS/JS extracted to external files and loaded via wp_enqueue_style/wp_enqueue_script with wp_localize_script for data passing.

3.2.0

  • Added: WooCommerce Checkout Blocks payment method support.
  • Added: Configurable maximum installments setting (1–12) with domestic-only restriction notice.
  • Added: Optional identity number (TC Kimlik No) collection at checkout.
  • Added: Centralised configuration class for environment URLs and constants.
  • Added: Comprehensive uninstall routine for clean plugin removal.
  • Added: WordPress.org standard readme.txt with full metadata.
  • Added: Dual-mode error handling for both Classic and Block Checkout.
  • Fixed: API request payload type compliance (amount as float, merchant_order_id as string).
  • Improved: Code architecture and maintainability.
  • Declared: cart_checkout_blocks feature compatibility.

3.1.1

  • Added: Payment statistics dashboard with daily breakdown and heatmap.
  • Added: System status page with comprehensive health checks.
  • Improved: Admin UI with card-based layout and branded header.

3.0.2

  • Added: Diagnostic logging system with database storage.
  • Added: Automatic log retention and cleanup via WP-Cron.
  • Improved: Error handling and debug logging with PII masking.

3.0.0

  • Initial release of the v3 gateway architecture.
  • Hosted Payment Page (HPP) integration via Shopinext API.
  • Webhook handler with hash verification and idempotency.
  • Multi-currency and multi-language support.
  • HPOS compatibility declaration.