CartModules: Click (Uzbekistan) Payment Gateway

Accept payments from Uzbekistan's most popular online payment system. Click (click.uz) serves millions of users across Uzbekistan, enabling payments via bank cards, mobile wallets, and bank accounts. This addon provides a seamless, secure integration with CS-Cart using Click's SHOP-API.

Features

Click SHOP-API Integration

Full implementation of Click's prepare/complete callback protocol with MD5 signature verification on every request.

Redirect Checkout Flow

Customers are securely redirected to Click's hosted checkout page. No card data touches your server (PCI SAQ A).

Idempotent Callbacks

Duplicate callback requests are handled gracefully without re-processing orders or creating duplicate transactions.

Configurable Status Mapping

Map Click payment outcomes (confirmed, failed, pending) to any CS-Cart order status of your choice.

Test & Live Modes

Switch between sandbox and production environments with a single dropdown. Test your integration before going live.

Easy Callback URL Setup

Prepare and Complete URLs are displayed directly in the admin panel for easy copying to your Click merchant dashboard.

How It Works

1. Customer selects Click as the payment method at checkout and places the order.
2. Customer is redirected to the Click secure checkout page with order details.
3. Customer completes payment using their Click account, bank card, or mobile wallet.
4. Click sends a Prepare callback to your store to validate the transaction.
5. Click sends a Complete callback to finalize the payment and update the order status.
6. Customer is redirected back to the order confirmation page.

Configuration

Security

• MD5 signature verification with timing-safe comparison (hash_equals())
• Amount validation on every callback to prevent tampering
• Service ID verification to ensure callbacks originate from your configured service
• No card data handling — fully redirect-based (PCI SAQ A compliant)
• All database queries use parameterized placeholders
• All user input is type-cast or sanitized before use
• Sensitive data (secret keys, signatures) stripped from log entries
• BOOTSTRAP access guard on all PHP files

Requirements

Installation

1. Go to Add-ons > Manage add-ons, click Manual installation, and upload the addon zip
2. Activate the addon and enter the license key
3. Create a new payment method under Administration > Payment methods.
4. Select Click (Uzbekistan) as the processor and fill in your credentials.
5. Copy the Prepare URL and Complete URL into your Click merchant dashboard.
6. Test with a sandbox transaction, then switch to Live mode.