{"id":39067,"date":"2015-09-22T23:17:21","date_gmt":"2015-09-22T23:17:21","guid":{"rendered":"https:\/\/wordpress.org\/plugins-wp\/sagepay-form-gateway-for-woocommerce\/"},"modified":"2026-03-22T10:02:10","modified_gmt":"2026-03-22T10:02:10","slug":"sagepay-form-gateway-for-woocommerce","status":"publish","type":"plugin","link":"https:\/\/fa.wordpress.org\/plugins\/sagepay-form-gateway-for-woocommerce\/","author":8520520,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"1.4.7","stable_tag":"1.4.7","tested":"6.9.4","requires":"4.5","requires_php":"","requires_plugins":null,"header_name":"SagePay Form Gateway for WooCommerce","header_author":"PatSaTECH","header_description":"","assets_banners_color":"e9e9e9","last_updated":"2026-03-22 10:02:10","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"http:\/\/www.patsatech.com\/","header_author_uri":"http:\/\/www.patsatech.com","rating":1,"author_block_rating":0,"active_installs":90,"downloads":5973,"num_ratings":2,"support_threads":1,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","changelog"],"tags":{"1.0.0":{"tag":"1.0.0","author":"patsatech","date":"2015-10-27 19:14:21"},"1.4.0":{"tag":"1.4.0","author":"patsatech","date":"2016-08-06 14:36:53"},"1.4.1":{"tag":"1.4.1","author":"patsatech","date":"2016-12-24 11:20:25"},"1.4.2":{"tag":"1.4.2","author":"patsatech","date":"2017-09-15 19:28:50"},"1.4.3":{"tag":"1.4.3","author":"patsatech","date":"2017-12-21 14:58:34"},"1.4.4":{"tag":"1.4.4","author":"patsatech","date":"2018-10-30 12:09:21"},"1.4.5":{"tag":"1.4.5","author":"patsatech","date":"2019-09-18 07:45:01"},"1.4.7":{"tag":"1.4.7","author":"patsatech","date":"2026-03-22 10:02:10"}},"upgrade_notice":{"1.4.7":"<p>Recommended: use the new Opayo sandbox\/live register URLs and VPSProtocol 4.00. If you must keep sagepay.com endpoints temporarily, use <code>woocommerce_sagepayform_register_url<\/code>. Plugin headers now list WordPress 6.9 and WooCommerce 10.6 as tested \u2014 verify checkout on your environment after updating.<\/p>"},"ratings":{"1":"2","2":0,"3":0,"4":0,"5":0},"assets_icons":[],"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":1468922,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":1468922,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0","1.4.0","1.4.1","1.4.2","1.4.3","1.4.4","1.4.5","1.4.7"],"block_files":[],"assets_screenshots":[],"screenshots":[],"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[282,258306,6593,144146,286],"plugin_category":[45],"plugin_contributors":[85964],"plugin_business_model":[],"class_list":["post-39067","plugin","type-plugin","status-publish","hentry","plugin_tags-ecommerce","plugin_tags-opayo","plugin_tags-payment-gateway","plugin_tags-sage-pay","plugin_tags-woocommerce","plugin_category-ecommerce","plugin_contributors-patsatech","plugin_committers-patsatech"],"banners":{"banner":"https:\/\/ps.w.org\/sagepay-form-gateway-for-woocommerce\/assets\/banner-772x250.png?rev=1468922","banner_2x":"https:\/\/ps.w.org\/sagepay-form-gateway-for-woocommerce\/assets\/banner-1544x500.png?rev=1468922","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/s.w.org\/plugins\/geopattern-icon\/sagepay-form-gateway-for-woocommerce_e9e9e9.svg","icon_2x":false,"generated":true},"screenshots":[],"raw_content":"<!--section=description-->\n<p>This plugin adds a WooCommerce payment gateway for Opayo Form integration (Sage Pay Form \/ Elavon hosted form). Customers pay on Opayo\u2019s secure page, so your site does not collect or store card numbers, which reduces PCI scope compared with on-site card fields.<\/p>\n\n<p>How it works:<\/p>\n\n<ul>\n<li>At checkout, the shopper is redirected to Opayo with an encrypted payload (Crypt) built from the order.<\/li>\n<li>After payment, Opayo sends the customer back to your site; the plugin decrypts the response, checks the order and amount, and completes the order when the payment is successful.<\/li>\n<li>Supports classic checkout and registers with WooCommerce Blocks checkout when the block checkout is enabled.<\/li>\n<\/ul>\n\n<p>Requirements:<\/p>\n\n<ul>\n<li>WordPress and WooCommerce (see readme headers for tested versions).<\/li>\n<li>An Opayo account with Form integration and credentials from MyOpayo (Vendor name, Encryption password).<\/li>\n<li>HTTPS is strongly recommended for checkout and payment return URLs.<\/li>\n<\/ul>\n\n<p>Notes:<\/p>\n\n<ul>\n<li>Uses Elavon\u2019s current Form register hosts (<code>sandbox.opayo.eu.elavon.com<\/code> \/ <code>live.opayo.eu.elavon.com<\/code>) and VPSProtocol 4.00. Override the register URL with the <code>woocommerce_sagepayform_register_url<\/code> filter if your account requires a different endpoint.<\/li>\n<li>Override the return\/notify URL with <code>woocommerce_sagepayform_notify_url<\/code> if needed.<\/li>\n<\/ul>\n\n<p>Use Elavon \/ Opayo\u2019s official documentation for account setup, test cards, and regional rules.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Install and activate WooCommerce.<\/li>\n<li>Install this plugin:\n\n<ul>\n<li>WordPress admin: Plugins \u2192 Add New \u2192 Upload Plugin, select the zip, Install Now, then Activate; or<\/li>\n<li>Copy the plugin folder into <code>wp-content\/plugins\/<\/code> (FTP, Git deploy, etc.), then activate under Plugins.<\/li>\n<\/ul><\/li>\n<li>Open WooCommerce \u2192 Settings \u2192 Payments, enable \u201cSagePay Form\u201d, then Manage \/ Set up.<\/li>\n<li>Enter Vendor Name, Encryption password, Vendor email, and set Mode to Test or Live to match your MyOpayo (sandbox vs live). Adjust 3-D Secure, transaction type (Payment \/ Deferred \/ Authenticate), emails, and card icons as needed.<\/li>\n<li>Save settings. Complete a test payment in Test mode using Opayo\u2019s test card details before going live.<\/li>\n<\/ol>\n\n<p>After installation:<\/p>\n\n<ul>\n<li>Use HTTPS on the storefront and ensure pretty permalinks (or your server rules) allow the WooCommerce API callback at <code>\/wc-api\/woocommerce_sagepayform<\/code>.<\/li>\n<li>For staging or extra domains, configure allowed URLs or IPs in MyOpayo so Success\/Failure redirects are accepted.<\/li>\n<\/ul>\n\n<!--section=changelog-->\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial Release<\/li>\n<\/ul>\n\n<h4>1.4.0<\/h4>\n\n<ul>\n<li>Updated to work with WooCommerce 2.6+<\/li>\n<\/ul>\n\n<h4>1.4.1<\/h4>\n\n<ul>\n<li>Updated to resolve a basket shipping calculation bug.<\/li>\n<\/ul>\n\n<h4>1.4.2<\/h4>\n\n<ul>\n<li>Updated to work with WooCommerce 3.x<\/li>\n<\/ul>\n\n<h4>1.4.3<\/h4>\n\n<ul>\n<li>Updated the tested upto for Wordpress and Woocommerce.<\/li>\n<\/ul>\n\n<h4>1.4.4<\/h4>\n\n<ul>\n<li>Updated to support the PHP version 7.0 and above.<\/li>\n<\/ul>\n\n<h4>1.4.5<\/h4>\n\n<ul>\n<li>Updated to support WooCommerce 3.7+ and Wordpress 5.2+<\/li>\n<\/ul>\n\n<h4>1.4.6<\/h4>\n\n<p>Security and reliability:\n* Return URL follows your site URL (HTTPS when configured) instead of forcing HTTP. Override with filter <code>woocommerce_sagepayform_notify_url<\/code>.\n* Callback runs only on the WooCommerce API route (<code>wc-api<\/code>), not on every <code>init<\/code> request.<\/p>\n\n<p>Payment verification:\n* Validates decrypted Opayo data before completing an order.\n* Remembers each generated VendorTxCode on the order (supports multiple pending attempts, e.g. refresh or extra tabs); regex fallback for older VendorTxCode formats.\n* Verifies amount and currency against the order; skips duplicate completion if the order is already paid.\n* Records VPSTxId via <code>payment_complete()<\/code> for the WooCommerce transaction id.\n* Safer decrypt path when <code>crypt<\/code> is missing, malformed, or invalid.<\/p>\n\n<p>Fixes and compatibility:\n* US eMailMessage: applies when billing or shipping country is US (fixes incorrect <code>get_shipping_state<\/code> usage).\n* WooCommerce Blocks: guards when the gateway is missing from the registry.\n* Blocks checkout script text domain aligned with the main plugin (<code>woo-sagepayform-patsatech<\/code>).\n* Uses <code>wc_get_order()<\/code> and a paid-status fallback when <code>wc_get_is_paid_statuses()<\/code> is unavailable.<\/p>\n\n<h4>1.4.7<\/h4>\n\n<ul>\n<li>Declares support tested through WordPress 6.9 and WooCommerce 10.6 (plugin header and readme <code>Tested up to<\/code> \/ <code>WC tested up to<\/code>).<\/li>\n<li>Elavon Opayo Form URL migration: registration POSTs target <code>opayo.eu.elavon.com<\/code> instead of legacy <code>sagepay.com<\/code> hosts; path stays <code>\/gateway\/service\/vspform-register.vsp<\/code>.<\/li>\n<li>Test mode: <code>https:\/\/sandbox.opayo.eu.elavon.com\/gateway\/service\/vspform-register.vsp<\/code> (was <code>https:\/\/test.sagepay.com\/gateway\/service\/vspform-register.vsp<\/code>).<\/li>\n<li>Live mode: <code>https:\/\/live.opayo.eu.elavon.com\/gateway\/service\/vspform-register.vsp<\/code> (was <code>https:\/\/live.sagepay.com\/gateway\/service\/vspform-register.vsp<\/code>).<\/li>\n<li>VPSProtocol raised from <code>3.00<\/code> to <code>4.00<\/code> on each Form registration request (Opayo current requirement).<\/li>\n<li>Filter <code>woocommerce_sagepayform_register_url<\/code> \u2014 override the register URL per <code>$mode<\/code> (<code>test<\/code> or <code>live<\/code>) for legacy sagepay.com URLs or account-specific endpoints during migration.<\/li>\n<\/ul>","raw_excerpt":"Accept card payments in WooCommerce using Opayo Form (hosted payment page), formerly Sage Pay Form \u2014 Elavon.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/39067","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=39067"}],"author":[{"embeddable":true,"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/patsatech"}],"wp:attachment":[{"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=39067"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=39067"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=39067"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=39067"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=39067"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=39067"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}