CartModules: Cellulant (Tingg) Payment Gateway for CS-Cart

Accept payments from 35+ African countries through Cellulant Tingg — Africa's leading payment gateway. Support mobile money (M-Pesa, MTN Mobile Money, Airtel Money), Visa/Mastercard, and bank transfers with a single integration.

Key Features

• Pan-African Coverage — Kenya, Nigeria, Ghana, Tanzania, Uganda, South Africa, Senegal, Ivory Coast, Cameroon, Rwanda, and 25+ more countries.
• Multiple Payment Methods — Mobile money, debit/credit cards (Visa, Mastercard), bank transfers, and local payment methods all through one gateway.
• Multi-Currency Support — KES, NGN, GHS, TZS, UGX, ZAR, XOF, XAF, USD, and more.
• Tingg Checkout (Redirect) — Customers are redirected to the secure Tingg Checkout page. No card data touches your server (PCI SAQ A compliant).
• Webhook Notifications — Server-to-server callbacks ensure reliable order status updates even if the customer closes their browser.
• Idempotent Callbacks — Duplicate webhook notifications are safely ignored. Orders are never processed twice.
• OAuth2 Authentication — Secure Bearer token authentication using the industry-standard client_credentials grant.
• Sandbox/UAT Support — Test your integration in Tingg's sandbox environment before going live.
• Configurable Status Mapping — Map Tingg payment outcomes (success, pending, failed) to any CS-Cart order status.
• Secure by Design — SSL verification on all API calls, parameterized database queries, sensitive data stripped from logs.

Supported Payment Methods

How It Works

1. Customer selects Cellulant/Tingg at checkout and clicks "Place Order".
2. Your store creates a secure checkout request via the Tingg API (OAuth2 Bearer token).
3. Customer is redirected to the Tingg Checkout page where they choose their preferred payment method.
4. Customer completes payment (mobile money prompt, card form, or bank transfer).
5. Tingg sends a server-to-server webhook to confirm the payment.
6. Customer is redirected back to your store's order confirmation page.

Configuration

After installation, create a new payment method and configure:

• Payment Mode — Switch between Test (Sandbox/UAT) and Live (Production).
• API Key — From your Tingg merchant portal.
• Client ID — OAuth2 Client ID from your Tingg merchant portal.
• Client Secret — OAuth2 Client Secret from your Tingg merchant portal.
• Service Code — Assigned by Tingg to your merchant account.
• Currency — KES, NGN, GHS, TZS, UGX, ZAR, XOF, XAF, or USD.
• Country Code — Your primary operating country (KE, NG, GH, TZ, UG, ZA, etc.).
• Order Status Mapping — Map success, pending, and failed outcomes to CS-Cart statuses.

Requirements

• CS-Cart 4.x (Ultimate or Multi-Vendor)
• PHP 7.1 or higher
• SSL certificate (HTTPS required)
• Cellulant Tingg merchant account — Sign up at tingg.africa

Security

• All API communication over TLS with SSL peer verification enabled.
• OAuth2 Bearer token authentication (client_credentials grant).
• No card data touches your server — Tingg Checkout redirect flow (PCI SAQ A).
• Sensitive credentials (API keys, secrets, tokens) are stripped from all payment logs.
• Parameterized database queries prevent SQL injection.
• All user input is type-cast or sanitized before use.
• Idempotent webhook processing prevents duplicate order updates.

Compatibility

• CS-Cart 4.10.x, 4.11.x, 4.12.x, 4.13.x, 4.14.x, 4.15.x, 4.16.x, 4.17.x, 4.18.x
• Multi-Vendor editions supported
• Ultimate editions supported