SSLCommerz

The SSLCommerz plugin sends the client to one hosted SSLCommerz page where they can pay with a card, mobile banking or internet banking of Bangladesh. It is free and suits Bangladeshi shops that want many ways to pay behind one merchant account. The currency is the invoice's currency (the plugin sends it to SSLCommerz; use BDT unless your merchant account allows others). The common parts of all gateways are in Payment gateways.

Switching it on

1. Open Setup → Payment Gateways, tab All Payment Gateways, press Activate on SSLCommerz.
2. Enter the Store ID and Store password, save.
3. In the SSLCommerz merchant panel set the IPN address (below).
4. Test with the sandbox store first.

Settings

Without a store ID and password the invoice shows SSLCommerz is not set up yet: the store ID or password is missing.

What SSLCommerz needs from you

• A merchant account with a store. Live and sandbox stores have different IDs and passwords.
• The IPN address entered in the merchant panel under IPN Settings. SSLCommerz calls it in the background when a payment changes state, which covers the client who closes the browser before coming back. The success, failure and cancel return addresses are sent with each payment, so you do not set them.
• If SSLCommerz asks you to register your server's IP address for the validation call, give it your host's outgoing IP address.
• HTTPS on your site and the PHP curl extension.

How a payment goes

1. The client presses Pay ... with SSLCommerz on an unpaid invoice. AIOBilling creates a session with the amount due, a unique transaction ID that starts with the invoice number, the client's name, e-mail, address, city, postcode, country and phone from the client record (missing pieces are filled with neutral values), and the invoice number as a reference.
2. The client is sent to the SSLCommerz page and pays.
3. SSLCommerz sends the browser back to the callback address and calls the IPN. Both carry a val_id.
4. The plugin validates the val_id with SSLCommerz. The status must be VALID or VALIDATED; the invoice is found from the reference; the currency must equal the invoice currency; the amount is taken from SSLCommerz.
5. The bank transaction ID becomes the transaction on the invoice, the fee is worked out as the amount minus the store amount, and the invoice is marked paid. A payment seen twice is recorded once.
6. A payment that SSLCommerz marks as risky is not recorded. The plugin holds it, writes held for review in the log, and puts a notice in your admin bell: SSLCommerz payment held, with the invoice and the val_id. Check it in the SSLCommerz panel, and if it is good, record it by hand with Add Payment.

A return with the status failed, cancelled, unattempted or expired shows the client a warning and records nothing.

Refunds

There is no refund call. Refund in the SSLCommerz panel and record it on the invoice's Refund tab with Offline refund (record only).

Testing in the sandbox

1. Create a sandbox store at SSLCommerz and enter its store ID and password.
2. Switch Test mode on.
3. Pay a small invoice from the client area with SSLCommerz's sandbox card or wallet details.
4. The invoice should turn Paid and the Gateway Log should show paid.
5. Enter the live store and switch Test mode off.

Troubleshooting

Look in Billing → Gateway Log (filter SSLCommerz) and Utilities → Module Log.

If the IPN seems not to arrive, check the address in the merchant panel (it must be exactly the one shown here) and that your site does not block outside callers. More in Troubleshooting.