CartModules: aamarPay Payment Gateway

Accept payments from Bangladeshi customers through aamarPay — Bangladesh’s leading payment gateway supporting credit/debit cards, mobile banking (bKash, Nagad, Rocket), and internet banking.

Key Features

• Multiple Payment Methods — Accept Visa, Mastercard, bKash, Nagad, Rocket, and internet banking through a single integration.
• Hosted Payment Page — Customers are redirected to aamarPay’s secure hosted page. No card data touches your server (PCI SAQ A compliant).
• Sandbox & Live Modes — Switch between test and production environments with a single dropdown. Test thoroughly before going live.
• Server-Side Verification — Every payment callback is verified against aamarPay’s transaction check API. POST data from callbacks is never trusted blindly.
• Amount Tamper Detection — The addon verifies the paid amount matches the order total, protecting against manipulation attempts.
• Customizable Status Mapping — Map aamarPay payment outcomes (Successful, Failed, Pending) to any CS-Cart order status.
• Idempotent Callbacks — Duplicate callbacks are handled gracefully. Orders already processed are never re-processed.
• Secure by Default — SSL verification enabled on all API calls. Sensitive data (API keys, card numbers) stripped from all log entries.
• Multi-Vendor Compatible — Works with both CS-Cart and Multi-Vendor editions (ROOT and ULT:VENDOR).

Supported Payment Methods

• Visa / Mastercard (Credit & Debit)
• bKash (Mobile Banking)
• Nagad (Mobile Banking)
• Rocket (Mobile Banking)
• Internet Banking (various Bangladeshi banks)

Supported Currency

• BDT (Bangladeshi Taka)

How It Works

1. Customer selects aamarPay at checkout and places the order.
2. The addon sends order details to aamarPay’s API and receives a payment URL.
3. Customer is redirected to the aamarPay hosted payment page.
4. Customer completes payment using their preferred method (card, bKash, Nagad, etc.).
5. aamarPay redirects the customer back to your store.
6. The addon verifies the transaction server-side and updates the order status.

Requirements

• CS-Cart or Multi-Vendor 4.x
• PHP 7.1 or higher
• Active aamarPay merchant account
• SSL certificate installed on your store

Installation

1. Go to Add-ons > Manage add-ons, click Manual installation, and upload the addon zip
2. Activate the addon and enter the license key
3. Go to Administration > Payment methods and create a new payment method.
4. Select aamarPay Payment Gateway as the processor.
5. Enter your Store ID and Signature Key from the aamarPay merchant panel.
6. Choose your payment mode (Test or Live) and save.

Configuration Fields

Security

• PCI SAQ A compliant — no card data stored or processed on your server.
• All API communications over TLS with certificate verification.
• Server-side transaction verification on every callback.
• Amount integrity check to prevent payment tampering.
• Sensitive credentials masked in all log entries.
• Parameterized database queries to prevent SQL injection.
• All user input type-cast or sanitized before processing.