CartModules: NewebPay (藍新金流) Payment Gateway

Accept payments from Taiwan customers via NewebPay MPG

Integrate NewebPay (藍新金流), one of Taiwan's most popular payment gateways, into your CS-Cart or Multi-Vendor store. Accept payments via credit cards, ATM transfers, convenience store payments, WebATM, and other local Taiwan payment methods — all through NewebPay's secure MPG (Multi Payment Gateway) hosted payment page.

Security: All payment data is encrypted with AES-256-CBC and verified with SHA256 hashing. No card data touches your server (PCI SAQ A compliant).

Supported Payment Methods

Key Features

• Full NewebPay MPG 2.0 API integration with encrypted form POST redirect
• AES-256-CBC encryption on all trade data for maximum security
• SHA256 TradeSha verification on all outbound and inbound requests
• Server-to-server callback (NotifyURL) for reliable payment confirmation
• Browser redirect callback (ReturnURL) for seamless customer experience
• Idempotent callback processing — safe against duplicate notifications
• Live / Sandbox toggle for easy development and testing
• Configurable order status mapping for approved and failed payments
• Unique MerchantOrderNo generation to support payment retries
• Traditional Chinese (zh_TW) language pack included
• Compatible with CS-Cart and Multi-Vendor (ROOT, ULTIMATE editions)
• PCI SAQ A compliant — no card data touches your server
• Clean, well-documented code following CS-Cart addon conventions

Requirements

• CS-Cart or Multi-Vendor 4.x
• PHP 7.1 or higher with OpenSSL extension
• Active NewebPay merchant account (https://www.newebpay.com/)
• TWD currency configured in your store

Installation

1. Upload the addon zip via the CS-Cart admin panel (Addons > Manage addons > Upload)
2. Activate "CartModules: NewebPay Payment Gateway"
3. Go to Administration > Payment methods
4. Add a new payment method and select "NewebPay Payment Gateway" as the processor
5. Enter your Merchant ID, Hash Key, and Hash IV from the NewebPay merchant portal
6. Set the payment mode to "Test" for sandbox testing, then switch to "Live" when ready

Configuration

Country & Currency

NewebPay operates exclusively in Taiwan and processes payments in TWD (New Taiwan Dollar). Amounts are sent as positive integers with no decimal places.

How It Works

1. Customer places an order and selects NewebPay at checkout
2. The addon encrypts the trade parameters using AES-256-CBC and generates a SHA256 hash
3. An auto-submit form redirects the customer to NewebPay's secure MPG payment page
4. Customer selects their preferred payment method and completes payment
5. NewebPay sends an encrypted server-to-server callback to confirm the payment result
6. The addon decrypts and verifies the response, then updates the CS-Cart order status
7. Customer is redirected back to the store's order confirmation page

Security Highlights

• AES-256-CBC encryption — all trade data is encrypted before transmission
• SHA256 hash verification — TradeSha ensures data integrity on every callback
• PCI SAQ A compliant — customers enter card details on NewebPay's hosted page
• Idempotent callbacks — duplicate notifications do not re-process completed orders
• Sensitive data protection — Hash Key, Hash IV, and card data are stripped from logs
• SSL verification — all HTTP requests enforce SSL peer verification