Integrate Saman Gateway for EDD
| 开发者 | mohammadr3z |
|---|---|
| 更新时间 | 2026年8月17日 04:37 |
| PHP版本: | 7.2 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Saman Gateway (SEP / Shaparak) online payment gateway for Easy Digital Downloads.
Features include:
- Secure payment processing via Saman Payment (SEP)
- Automatic user redirection to bank gateway
- Transaction verification and amount validation
- Automatic transaction reversal on amount mismatch
- Protection against duplicate payments
- Support for both Iranian Rial and Toman
- Compatible with Easy Digital Downloads 2.x and 3.x
安装:
- Install the plugin from Plugins → Add New → Upload Plugin in your WordPress dashboard.
- Go to Downloads → Settings → Payments → Saman (SEP) and enter your terminal number.
- Enable the Saman (SEP) payment gateway under Payment Gateways.
- Register your store server IP address with Saman Bank. This is required for token generation and transaction verification.
常见问题:
Does this plugin require a Saman SEP merchant account?
Yes. You need an active Saman Bank terminal and must register your server IP address with the payment provider.
Does the plugin support Toman?
Yes. The plugin supports both Iranian Rial and Toman.
Which versions of Easy Digital Downloads are supported?
The plugin is designed to work with Easy Digital Downloads 2.x and 3.x.
Does the plugin process payments through a third-party service?
Yes. The plugin connects to the Saman Electronic Payment (SEP / Shaparak) gateway API to request payment tokens, redirect customers to the secure bank portal, verify transactions, and perform automatic reversals when necessary. Please see the "External services" section for full details on data transmissions, terms of service, and privacy policies.
更新日志:
1.2.1
- Improvement: Enhanced customer mobile number resolution with extensible filter hooks (
edd_saman_sep_phone_post_fieldsandedd_saman_sep_phone_order_meta_keys). - Compatibility: Added support for standard EDD checkout phone fields and Digits order metadata alongside JetOTP.
- Documentation: Disclosed external Saman Electronic Payment (SEP / Shaparak) services, data transmission details, terms of service, and privacy policy links in compliance with WordPress.org guidelines.
- Improvement: Replaced inline style and script tags in gateway redirection with standard WordPress enqueue and print functions.
- Simplified and condensed gateway settings descriptions for improved usability.
- Fixed a race condition in the reversal processing lock by replacing add_option() with a direct INSERT IGNORE query, following the locking pattern used by WP_Upgrader::create_lock().
- Removed unused code, including the SEND_TOKEN_URL constant, EDD_SAMAN_SEP_URL constant, translation file loading, transaction token metadata, and the edd_saman_sep_res_num filter.
- Fixed an inconsistent plugin version number in the plugin header.
- Removed the strict transaction ownership validation setting from the admin panel.
- Transaction ownership is now checked only when the bank returns the purchase reference number.
- Added the edd_saman_sep_strict_res_num filter to allow developers to disable this validation when necessary.
- Fixed a critical issue where a successful payment could be incorrectly marked as failed and reversed when the VerifyTransaction service did not return the purchase reference number.
- Added the edd_saman_sep_verify_res_num_keys filter and logging of TransactionDetail keys to assist with troubleshooting.
- Removed the "Allow GET callback" setting. Only POST callbacks are accepted by default.
- Added the edd_saman_sep_allow_get_callback filter for developers who need to enable GET callbacks.
- Security: Required the ResNum returned by VerifyTransaction to match the purchase reference associated with the order, preventing completion of an order using a digital receipt belonging to another order.
- Security: Replaced md5(purchase_key + time) with random_bytes() for generating ResNum values.
- Security: Replaced the get/set transient locking mechanism with an atomic processing lock to prevent race conditions.
- Security: Added IP-based rate limiting to the payment callback endpoint.
- Security: Rejected GET callback requests unless the GetMethod option is explicitly enabled.
- Security: Masked email addresses, customer names, card numbers, and restricted log fields to an allowlist.
- Improvement: Escaped the redirect URL output in the payment form and added gateway nonce validation.
- Initial release for Saman Bank payment gateway.