內容簡介
BMPF Payment Infrastructure 是由 Bold Mark Creative 開發的模組化 WordPress 付款基礎設施，與 PayFast 整合以處理付款。免費版提供可靠的付款基礎，適合需要透過 PayFast 接受發票付款或捐款的網站。
【主要功能】
• 支援 PayFast 沙盒與實際環境
• 生成 PayFast 付款請求與簽名
• 安全的付款重定向
• 交易狀態處理與確認
• 獨立的 BMPF 交易資料庫表
• 可重複使用的付款配置
外掛標籤
開發者團隊
原文外掛簡介
BMPF Payment Infrastructure (BMPF) is a modular WordPress payment foundation developed by Bold Mark Creative that integrates with PayFast for payment processing.
The Free Edition provides a reliable payment foundation for WordPress websites that need to accept invoice payments or donations through PayFast.
BMPF handles the payment infrastructure so website owners and developers do not need to implement PayFast transaction handling, signatures, ITN processing and transaction tracking themselves.
Features
PayFast Sandbox and Live environment support
Merchant ID, Merchant Key and Passphrase settings
PayFast payment request generation
PayFast signature generation
Secure payment redirects
PayFast ITN REST endpoint
ITN signature validation
PayFast notification source validation
Payment amount validation
Server-side PayFast transaction confirmation
Payment status handling
Dedicated BMPF transaction database table
Transaction creation and retrieval
Transaction verification and status updates
Transaction administration
BMPF dashboard
Public BMPF integration API
Standalone invoice payments
Decimal invoice amounts
Invoice or Payment Reference field
Standalone donations
Suggested donation amount buttons
Custom donation amounts
Reusable payment configurations
Enable/disable payment configurations
Payment shortcodes
Optional per-integration Pay Button Colour
External Services
BMPF communicates with PayFast, a third-party payment service, to process payments and verify payment notifications.
When a payment is created, BMPF sends the payment request data required by PayFast, including the merchant identifier, payment amount, payment description, customer return URLs and the BMPF transaction reference. PayFast processes the payment on its own service.
PayFast sends an Instant Transaction Notification (ITN) to the BMPF endpoint configured for the site. BMPF validates the notification and performs a server-side confirmation request to PayFast before updating the transaction status.
For more information about PayFast’s services, terms and privacy practices, see:
PayFast General Terms & Conditions: https://payfast.io/legal/general-terms-conditions/
PayFast Privacy Policy: https://payfast.io/privacy-policy/
Invoice Payments
BMPF can provide a standalone invoice payment experience using the [bmpf_payment] shortcode.
The customer enters an invoice or payment reference and the amount to be paid. BMPF validates the request, creates the PayFast transaction and redirects the customer to PayFast.
Example:
[bmpf_payment id="invoice-default"]
Invoice references support letters, numbers and common reference characters including periods, underscores, slashes and hyphens.
Donations
BMPF can provide a standalone donation payment experience using the same reusable payment shortcode system.
Suggested donation amounts can be configured alongside a custom donation amount.
Example:
[bmpf_payment id="donation-default"]
Payment Flow
The standard BMPF payment lifecycle is:
A website requests a payment through BMPF.
BMPF validates the payment request.
BMPF creates a pending transaction.
BMPF generates the PayFast payment request and signature.
The customer is redirected to PayFast.
PayFast processes the payment.
PayFast sends an ITN notification to BMPF.
BMPF validates the notification.
BMPF locates the original transaction.
BMPF validates the payment amount.
BMPF confirms the transaction directly with PayFast.
BMPF updates the transaction according to the verified PayFast status.
Transaction Protection
BMPF maintains its own transaction record for each payment attempt.
Verified transactions are protected against being treated as new active payments for the same payment reference.
Pending transactions are handled separately from completed transactions so that payment state can be tracked safely.
Existing transaction records are retained for administration and audit purposes.
Payment Configuration
BMPF provides reusable payment configurations for standalone payment experiences.
Each configuration can define:
Configuration name
Configuration key
Description
Payment type
Minimum amount
Maximum amount
PayFast payment name
Suggested donation amounts where applicable
Optional Pay Button Colour
Enabled or disabled status
Configurations can be managed from the WordPress administration area.
Public Integration API
BMPF includes a public integration API that allows other Bold Mark Creative systems and custom WordPress development to request payments through the central BMPF payment infrastructure.
This keeps PayFast handling, transaction creation, verification and payment state in one reusable payment layer.
Current Status
The Free Edition currently provides the core payment foundation for invoice payments and donations.
The PayFast Sandbox payment lifecycle has been successfully tested, including payment creation, redirect, ITN receipt, notification validation, amount validation, server-side confirmation and transaction verification.
Standalone invoice payments and donations have also been implemented and tested, including decimal payment amounts and configurable donation amounts.
The plugin is intended to provide a stable foundation for future payment integrations while keeping the core payment engine reusable and independent.
Development Roadmap
PayFast payment infrastructure — COMPLETE
Signature generation — COMPLETE
PayFast redirect — COMPLETE
ITN validation — COMPLETE
Server-side payment verification — COMPLETE
Transaction system — COMPLETE
Transaction administration — COMPLETE
BMPF dashboard — COMPLETE
Public integration API — COMPLETE
Standalone invoice payments — COMPLETE
Standalone donations — COMPLETE
Payment configuration system — COMPLETE
Free Edition 0.1.2 — COMPLETE
Additional payment integrations — FUTURE
Architecture
BMPF is designed as a reusable payment infrastructure layer.
The core architecture consists of:
BMPF
|
+– Payment Engine
+– PayFast Signature Handling
+– ITN Verification
+– Transaction System
+– Admin Dashboard
+– Integration API
|
+– Standalone Payment Experiences
+– Future Integrations
The payment engine remains responsible for PayFast communication and payment state, while individual payment experiences provide the customer-facing payment context.
Security
BMPF validates payment requests server-side and does not rely solely on browser-side payment information.
PayFast ITN notifications are validated before transactions are updated.
Payment amounts are checked against the original transaction before a payment can be marked as verified.
Administrative actions use WordPress capability checks and nonces.
Requirements
WordPress 6.0 or later
PHP 7.4 or later
A PayFast merchant account
Author
Bold Mark Creative
