CartModules: ForteBank Payment Gateway
Accept online payments from customers in Kazakhstan and beyond using ForteBank's secure payment gateway. This addon integrates ForteBank's REST API directly into your CS-Cart store, providing a seamless redirect-based payment experience with robust security and reliable server-to-server callback notifications.
Key Features
HMAC-SHA256 Authentication
Every API request and callback is signed using HMAC-SHA256, ensuring tamper-proof communication between your store and ForteBank.
Redirect Payment Flow
Customers are securely redirected to ForteBank's hosted payment page. No card data touches your server (PCI SAQ A compliant).
Server-to-Server Callbacks
Reliable server-to-server notifications ensure order statuses are updated even if the customer closes their browser.
Sandbox & Live Modes
Test your integration thoroughly in sandbox mode before going live. Switch between modes with a single dropdown.
Multi-Currency Support
Primary support for KZT (Kazakhstani Tenge), with additional support for USD, EUR, and RUB.
Status Mapping
Map ForteBank payment outcomes (success, failed, pending) to your preferred CS-Cart order statuses.
Comprehensive Logging
Detailed logging of all API interactions with automatic sensitive data redaction (secret keys, signatures).
Idempotent Processing
Callbacks are processed safely -- duplicate notifications never result in duplicate order updates.
Security First: SSL verification is enforced on all HTTP calls. No card data is handled by your server. All API credentials are masked in logs. Callback signatures are verified using timing-safe comparison to prevent forgery.How It Works
- Customer selects ForteBank at checkout and places the order.
- Your store creates a signed payment session via ForteBank's API.
- Customer is redirected to ForteBank's secure payment page.
- Customer completes payment using their preferred method.
- ForteBank redirects the customer back to your store and sends a server callback.
- The addon verifies the signature, confirms payment status, and updates the order.
Installation
- Go to Add-ons > Manage add-ons, click Manual installation, and upload the addon zip
- Activate the addon and enter the license key
- Navigate to Administration > Payment methods and create a new payment method.
- Select ForteBank Payment Gateway as the processor.
- Enter your Merchant ID and Secret Key from the ForteBank portal.
- Configure the currency and order status mapping, then save.
Configuration
| Field | Description | Default |
|---|---|---|
| Payment Mode | Test (Sandbox) or Live (Production) | Live |
| Merchant ID | Your ForteBank merchant identifier | -- |
| Secret Key | HMAC-SHA256 signing key | -- |
| Currency | Transaction currency | KZT |
| Status on Success | Order status when payment succeeds | Processed (P) |
| Status on Failed | Order status when payment fails | Failed (F) |
| Status on Pending | Order status when payment is pending | Open (O) |
Requirements
- CS-Cart 4.x (Ultimate or Multi-Vendor)
- PHP 7.1 or higher
- ForteBank merchant account with API access
- Valid SSL certificate on your store domain
