CartModules: Tpay Payment Gateway
Integrate Tpay, Poland's leading online payment gateway, directly into your CS-Cart or Multi-Vendor store. This addon provides a secure hosted payment page flow so your customers can pay using popular Polish payment methods including bank transfers, BLIK, credit cards, and digital wallets.
Key Features
- Hosted Payment Page — Customers are redirected to Tpay's secure payment page, keeping your store PCI SAQ A compliant with no direct card handling.
- OAuth2 Authentication — Connects to Tpay's modern Open API using industry-standard OAuth2 Bearer token authentication.
- Server-to-Server Notifications — Reliable order status updates via Tpay's callback system, even if the customer closes their browser.
- MD5 Checksum Verification — Every notification is cryptographically verified to prevent tampering and ensure data integrity.
- Sandbox Mode — Test the full payment flow using Tpay's sandbox environment before going live.
- PLN and EUR Support — Accept payments in Polish Zloty and Euro.
- Configurable Status Mapping — Map Tpay payment outcomes to your preferred CS-Cart order statuses.
- Idempotent Processing — Duplicate notifications are handled safely without re-processing orders.
- Secure Logging — All API interactions are logged with sensitive credentials automatically stripped.
- Clean Uninstall — Removes all database entries on uninstallation with no residual data.
How It Works
- Customer selects Tpay at checkout and places the order.
- The addon authenticates with Tpay and creates a transaction via the API.
- Customer is redirected to Tpay's hosted payment page to complete payment.
- Tpay sends a server-to-server notification to your store confirming the payment result.
- The order status is updated automatically and the customer sees the confirmation page.
Configuration
| Setting | Description |
| Payment Mode | Switch between Test (Sandbox) and Live (Production) environments. |
| Client ID | Your Tpay API Client ID from the Tpay merchant panel. |
| Client Secret | Your Tpay API Client Secret (stored securely, displayed as password field). |
| Security Code | Used for MD5 verification of server notifications. Found in your Tpay panel under notification settings. |
| Status Mapping | Choose which CS-Cart order status to assign for completed and failed payments. |
Requirements
- CS-Cart 4.x (Ultimate or Multi-Vendor edition)
- PHP 7.1 or later
- Active Tpay merchant account (tpay.com)
- SSL certificate installed on your store
Installation
- Go to Add-ons > Manage add-ons, click Manual installation, and upload the addon zip
- Activate the addon and enter the license key
- Create a new payment method under Administration > Payment methods.
- Select Tpay Payment Gateway as the processor and enter your credentials.
- Save, activate, and start accepting payments.
Compatibility
| Platform | Supported |
| CS-Cart Ultimate | Yes |
| CS-Cart Multi-Vendor | Yes |
| PHP 7.1+ | Yes |
| PHP 8.x | Yes |