WordPress Plugin

Overview#

The SabPaisa Dynamic Status Plugin is a lightweight WordPress plugin that drops a SabPaisa pay button onto any page via a shortcode and renders a branded payment success / failure screen — without requiring WooCommerce. It signs the request server-side (via WordPress AJAX), creates a hosted-checkout session, and redirects the customer to SabPaisa.

Prerequisites#

Step 1 — Install the Plugin#

Step 2 — Enter Your Credentials#

Go to Settings → SabPaisa in the WordPress admin and fill in:

Step 3 — Add the Pay Button#

Place this shortcode on any page or post to render the Pay with SabPaisa card with a Proceed to Checkout button:

1[sabpaisa_payment]

When clicked, the button calls WordPress AJAX (admin-ajax.php), which signs and posts to POST /api/v2/payments server-side and redirects the browser to the returned checkoutUrl.

1// The plugin builds the checksum server-side (in admin-ajax) before
2// calling POST /api/v2/payments — you never compute this yourself.
3$checksum = hash_hmac(
4    'sha256',
5    $merchantId . '|' . $merchantTxnId . '|' . $amount . '|INR|' . $timestamp,
6    $secretKey            // sec_… (never the legacy hmac_api_key)
7);

Step 4 — Payment Response Page#

After checkout, SabPaisa redirects the customer to /payment-response (auto-created on activation). That page renders the result via:

1[sabpaisa_payment_response]

It reads status, transaction_id, and merchant_txn_id from the return URL and shows a branded success or failure card.

Payment Flow#

Security & Production#

• •Confirm payment server-side before fulfilling — use a webhook receiver or the Transaction Enquiry API. The redirect status is a hint, not proof.
• •Keep TLS verification enabled on outbound API calls in production — never disable SSL verification.
• •Use the sec_… Secret Key; never expose it in the page or in client-side code.
• •Use HTTPS for your site URL — SabPaisa rejects non-HTTPS return URLs.
• •Use a unique merchantTxnId per attempt, and keep staging and production credentials separate.
• •For real, variable-amount carts, prefer the WooCommerce plugin or a PHP SDK integration.

Troubleshooting#

For more common issues, see the Troubleshooting guide.