{"id":20742683,"url":"https://github.com/itinerisltd/wc-worldpay","last_synced_at":"2026-02-10T02:34:59.085Z","repository":{"id":56994279,"uuid":"149111361","full_name":"ItinerisLtd/wc-worldpay","owner":"ItinerisLtd","description":"WorldPay integration for WooCommerce","archived":false,"fork":false,"pushed_at":"2023-01-23T20:54:56.000Z","size":27,"stargazers_count":2,"open_issues_count":0,"forks_count":0,"subscribers_count":9,"default_branch":"master","last_synced_at":"2025-04-24T05:15:51.909Z","etag":null,"topics":["woocommerce-payment","wordpress","wordpress-plugin","worldpay"],"latest_commit_sha":null,"homepage":null,"language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ItinerisLtd.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2018-09-17T10:55:08.000Z","updated_at":"2023-11-16T23:39:09.000Z","dependencies_parsed_at":"2023-02-13T03:05:40.907Z","dependency_job_id":null,"html_url":"https://github.com/ItinerisLtd/wc-worldpay","commit_stats":null,"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ItinerisLtd%2Fwc-worldpay","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ItinerisLtd%2Fwc-worldpay/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ItinerisLtd%2Fwc-worldpay/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ItinerisLtd%2Fwc-worldpay/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ItinerisLtd","download_url":"https://codeload.github.com/ItinerisLtd/wc-worldpay/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":250566511,"owners_count":21451234,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["woocommerce-payment","wordpress","wordpress-plugin","worldpay"],"created_at":"2024-11-17T07:07:03.131Z","updated_at":"2026-02-10T02:34:59.049Z","avatar_url":"https://github.com/ItinerisLtd.png","language":"PHP","funding_links":[],"categories":[],"sub_categories":[],"readme":"# wc-worldpay\n\n[![Packagist Version](https://img.shields.io/packagist/v/itinerisltd/wc-worldpay.svg)](https://packagist.org/packages/itinerisltd/wc-worldpay)\n[![PHP from Packagist](https://img.shields.io/packagist/php-v/itinerisltd/wc-worldpay.svg)](https://packagist.org/packages/itinerisltd/wc-worldpay)\n[![Packagist Downloads](https://img.shields.io/packagist/dt/itinerisltd/wc-worldpay.svg)](https://packagist.org/packages/itinerisltd/wc-worldpay)\n[![GitHub License](https://img.shields.io/github/license/itinerisltd/wc-worldpay.svg)](https://github.com/ItinerisLtd/wc-worldpay/blob/master/LICENSE)\n[![Hire Itineris](https://img.shields.io/badge/Hire-Itineris-ff69b4.svg)](https://www.itineris.co.uk/contact/)\n\n\nWorldPay integration for WooCommerce.\n\n\u003c!-- START doctoc generated TOC please keep comment here to allow auto update --\u003e\n\u003c!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE --\u003e\n\n\n- [Minimum Requirements](#minimum-requirements)\n- [Installation](#installation)\n- [Setup](#setup)\n- [Security Concerns about WorldPay HTML API](#security-concerns-about-worldpay-html-api)\n- [Not Issue](#not-issue)\n- [Features](#features)\n- [Not Supported / Not Implemented](#not-supported--not-implemented)\n- [Best Practices](#best-practices)\n  - [HTTPS Everywhere](#https-everywhere)\n  - [Payment Status](#payment-status)\n- [Test Sandbox](#test-sandbox)\n- [FAQ](#faq)\n  - [Is `support.worldpay.com` secure?](#is-supportworldpaycom-secure)\n  - [Will you add support for older PHP versions?](#will-you-add-support-for-older-php-versions)\n  - [It looks awesome. Where can I find some more goodies like this?](#it-looks-awesome-where-can-i-find-some-more-goodies-like-this)\n  - [This plugin isn't on wp.org. Where can I give a ⭐️⭐️⭐️⭐️⭐️ review?](#this-plugin-isnt-on-wporg-where-can-i-give-a-%EF%B8%8F%EF%B8%8F%EF%B8%8F%EF%B8%8F%EF%B8%8F-review)\n- [Coding](#coding)\n  - [Required Reading List](#required-reading-list)\n  - [Testing](#testing)\n- [Feedback](#feedback)\n- [Security](#security)\n- [Change log](#change-log)\n- [Credits](#credits)\n- [License](#license)\n\n\u003c!-- END doctoc generated TOC please keep comment here to allow auto update --\u003e\n\n## Minimum Requirements\n\n- PHP v7.2\n- php-curl\n- WordPress v4.9.8\n- WooCommerce v3.4.5\n\n## Installation\n\n```bash\n$ composer require itinerisltd/wc-worldpay\n```\n\n## Setup\n\n[Payment response(redirection)](http://support.worldpay.com/support/kb/bg/htmlredirect/htmlredirect.htm#rhtml/Telling_your_shopper_about.htm#_Payment_Response_messages) and [Enhancing security with MD5](http://support.worldpay.com/support/kb/bg/htmlredirect/htmlredirect.htm#rhtml/Enhancing_security_with_MD5.htm%3FTocPath%3D_____10) are mandatory.\n\nOn WorldPay's [integration setup page](http://support.worldpay.com/support/kb/bg/customisingadvanced/custa6011.html):\n\n1. Enable **Enable the Shopper Response**\n1. Enter `\u003cwpdisplay item=MC_callback\u003e` as **Payment Response URL**\n1. Enable **Payment Response enabled?**\n1. Enter a 25-char random passphrase as **Payment Response password**\n1. Enter a 30-char random passphrase as **MD5 secret for transactions**\n1. Enter `instId:amount:currency:cartId` as **SignatureFields**\n\nThen, fill in the same information on WP admin dashboard - **WooCommerce \u003e Settings \u003e Payments \u003e WordPay**.\n\nNote that WorldPay truncate long **Payment Response password** without notices!\n\n## Security Concerns about WorldPay HTML API\n\n- Leaking **MD5 secret for transactions**\n  * Allow evil hackers to set up fake checkout pages, pretending to be the merchant\n  * WorldPay would accept these checkouts and charges the credit cards\n- Leaking **Payment Response password**\n  * Allow evil hackers to pretending to be WorldPay\n  * WordPress would accept evil hackers' payment callbacks and changes order payment statuses\n\n## Not Issue\n\nIf **Payment Response password**(also known as`callbackPW`) is incorrect, `InvalidResponseException` is throw to *stop the world*.\nCredit card holders see white screen of death in such case.\n\n## Features\n\n- [Enhancing security with MD5](http://support.worldpay.com/support/kb/bg/htmlredirect/htmlredirect.htm#rhtml/Enhancing_security_with_MD5.htm%3FTocPath%3D_____10)\n\n## Not Supported / Not Implemented\n\n- Shipping address\n- Reject according to fraud check results\n- Token payment\n- Recurring payment\n- Refund\n- Void\n\n## Best Practices\n\n### HTTPS Everywhere\n\nAlthough WorldPay accepts insecure HTTP sites, you should **always use HTTPS** to protect all communication.\n\n### Payment Status\n\nAlways double check payment status on `worldpay.com`.\n\n## Test Sandbox\n\nUse this [test credit card](http://support.worldpay.com/support/kb/bg/pdf/181450-test-transaction-f.pdf).\n\n## FAQ\n\n### Is `support.worldpay.com` secure?\n\nNo! `support.worldpay.com` does not support HTTPS.\nThis is unacceptable. Please [encourage them](https://www.worldpay.com/uk/about/contact-us) to use HTTPS everywhere.\n\n### Will you add support for older PHP versions?\n\nNever! This plugin will only works on [actively supported PHP versions](https://secure.php.net/supported-versions.php).\n\nDon't use it on **end of life** or **security fixes only** PHP versions.\n\n### It looks awesome. Where can I find some more goodies like this?\n\n- Articles on [Itineris' blog](https://www.itineris.co.uk/blog/)\n- More projects on [Itineris' GitHub profile](https://github.com/itinerisltd)\n- Follow [@itineris_ltd](https://twitter.com/itineris_ltd) and [@TangRufus](https://twitter.com/tangrufus) on Twitter\n- Hire [Itineris](https://www.itineris.co.uk/services/) to build your next awesome site\n\n### This plugin isn't on wp.org. Where can I give a ⭐️⭐️⭐️⭐️⭐️ review?\n\nThanks! Glad you like it. It's important to make my boss know somebody is using this project. Instead of giving reviews on wp.org, consider:\n\n- tweet something good with mentioning [@itineris_ltd](https://twitter.com/itineris_ltd)\n- star this Github repo\n- watch this Github repo\n- write blog posts\n- submit pull requests\n- [hire Itineris](https://www.itineris.co.uk/services/)\n\n## Coding\n\n### Required Reading List\n\nRead the followings before developing:\n\n- [WorldPay HTML API](https://www.worldpay.com/uk/support/guides/business-gateway)\n- [Omnipay: WorldPay](https://github.com/thephpleague/omnipay-worldpay)\n- [thephpleague/omnipay#255 (comment)](https://github.com/thephpleague/omnipay/issues/255#issuecomment-90509446)\n- [`Omnipay\\WorldPay\\Message\\PurchaseRequest::getData()`](https://github.com/thephpleague/omnipay-worldpay/blob/cae548cb186c134510acdf488c14650782158bc6/src/Message/PurchaseRequest.php#L141-L190)\n\n### Testing\n\n```bash\n$ composer test\n$ composer check-style\n```\n\nPull requests without tests will not be accepted!\n\n## Feedback\n\n**Please provide feedback!** We want to make this library useful in as many projects as possible.\nPlease submit an [issue](https://github.com/ItinerisLtd/wc-worldpay/issues/new) and point out what you do and don't like, or fork the project and make suggestions.\n**No issue is too small.**\n\n## Security\n\nIf you discover any security related issues, please email [hello@itineris.co.uk](mailto:hello@itineris.co.uk) instead of using the issue tracker.\n\n## Change log\n\nPlease see [CHANGELOG](./CHANGELOG.md) for more information on what has changed recently.\n\n## Credits\n\n[wc-worldpay](https://github.com/ItinerisLtd/wc-worldpay) is a [Itineris Limited](https://www.itineris.co.uk/) project created by [Tang Rufus](https://typist.tech).\n\nFull list of contributors can be found [here](https://github.com/ItinerisLtd/wc-worldpay/graphs/contributors).\n\n## License\n\n[wc-worldpay](https://github.com/ItinerisLtd/wc-worldpay) is licensed under the GPLv2 (or later) from the [Free Software Foundation](http://www.fsf.org/).\nPlease see [License File](./LICENSE) for more information.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fitinerisltd%2Fwc-worldpay","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fitinerisltd%2Fwc-worldpay","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fitinerisltd%2Fwc-worldpay/lists"}