Difference between revisions of "2CheckOut"

From WHMCS Documentation

(Secret Word)
(Secret Word)
Line 49: Line 49:
<div class="docs-alert-info">
<div class="docs-alert-info">
<span class="title">Note</span><br />
<span class="title">Note</span><br />
The secret word should contain letters a-z only.
The secret word is case-sensitive and should contain letters a-z only.

Revision as of 15:52, 5 November 2019

Supported Features

Type One Time Recurring Refunds Reversals
3rd Party Yes Yes Yes



Begin by activating the payment gateway under Setup > Payments > Payment Gateways and choose 2CheckOut from the All Payment Gateways tab.

Once activated, you can then enter the configuration details explained below.

2CO Configuration


2CO Notifications Setup

To setup the callback process for 2CheckOut to automatically mark invoices paid, you will need to login to your 2CheckOut account and click the Integrations tab:

Direct Return

In order to return clients back to your WHMCS installation after a successful payment you can configure Direct Return within the 2CheckOut control panel:

Checkout Style

Two checkout styles are made available as part of 2CheckOut configuration:

  • Inline Checkout - Inline Checkout is an iframe payment option which displays a secure payment form as an overlay when your client is making payment. This allows for payment to be taken from a client without them leaving your site. WHMCS recommends this checkout style when using 2CheckOut.
  • Standard Checkout - Standard Checkout will redirect a client to the 2CheckOut site to make payment before they are redirected back to your site.

API Username/Password

2CO API User Setup

If you wish to be able to use the inline, recurring billing and automatic refunds functionality within WHMCS, then you must setup a 2CheckOut API user and enter the details in these fields.

To setup an API user, you will need to first login to your 2CheckOut account and go to Settings > Manage User Access > View Roles > Add Role and ensure enable Manage api access is ticked. You then need to go to Settings > Manage User Access > View Users > Add User and create a new user, assigning it to the role just created. Finally, enter the username & password that you just created into the appropriate API username and API password fields inside WHMCS.

Secret Word

The secret word is case-sensitive and should contain letters a-z only.

For Security, a secret word is set inside your 2CheckOut account, this must be entered into WHMCS for notifications and client redirects to be successful:

  • In your 2Checkout Account Navigate to "Integrations"
  • Copy the INS Secret Word displayed or generate a new one
  • Paste the INS Secret Word into the Secret Word field of the 2CheckOut configuration within the WHMCS administration.

Recurring Billing

This option allows you to choose the options your clients have to pay when viewing an invoice, or going through the checkout process. A recurring payment with 2CheckOut is automatically sent when due without the need for the client to login and pay again. No card details are saved in WHMCS when using 2CheckOut.

Offer Recurring & One Time Payments

Allow the choice to your clients by providing both Recurring and One Time Billing options.

Offer Recurring Only

Only provide a recurring button to your clients. The button will only appear when there is a recurring item on the invoice, and when the invoice is not overdue.

Offer One Time Only

Only provide the option for One Time payments to your clients. No automatic recurring payments will be received.

Skip 2CO Fraud Check

Ticking this option will prevent 2Checkout from performing their fraud checks on payments. It can result in faster processing of payments, but may potentially increase your exposure to fraudulent orders and charge-backs.

Should a payment that has been recorded in WHMCS later be determined to be fraudulent, manual action would be required to reverse the payment recorded in WHMCS and suspend any services as appropriate.

Convert To For Processing

This option will only appear in a multi-currency installation. If using the Standard Checkout option, It is very important that this be set to the value of the currency your 2Checkout account is held in.

For example, if your 2Checkout account is held in USD, then the "Convert To For Processing" setting must also be set to USD. If this is not set properly, your payments may fail.

Error Messages

Demo Mode

In order to use demo mode, the "Demo Setting" in your 2CheckOut account should be set to "Parameter" under Account > Site Management. Demo mode can then be enabled by ticking the checkbox in WHMCS under Setup > Payments > Payment Gateways.

Please note that when using demo mode, all callbacks from 2CheckOut will fail with the error MD5 Hash Failure if a secret word is specified. This is done intentionally by 2Checkout to protect those who sell digital goods from fraudulent purchases through their demo mode.

In Demo Mode, valid credit card data must be submitted in order to properly perform the request. Credit cards will not be charged during this process.

MD5 Hash Failure

An MD5 Hash Failure error under Billing > Gateway Log indicates that the Secret Word in Setup > Payments > Payment Gateways does not match the Secret Word in the 2CheckOut control panel. Double check your entry is exactly right, and check for any invisible trailing spaces if so.

Authentication failed

This error in the Gateway Log indicates that either the secret word, API username, or API password are incorrect. These may be reconfigured at Setup > Payments > Payment Gateways. For further information on this configuration see above.

Server Modules
cPanel/WHM - DirectAdmin - Plesk - Helm 3 - Helm 4 - Ensim - InterWorx - WebsitePanel - Cloudmin - VePortal
Lxadmin - Virtualmin Pro - XPanel - HyperVM - FluidVM - SolusVM - Cloudmin - WHMSonic - VPS.Net
CentovaCast - SCPanel - MediaCP - GameCP - TCAdmin - Reseller Central - Auto Release - Heart Internet

Registrar Modules
Enom - ResellerClub - Nominet - OpenSRS - ResellOne - OnlineNIC - PlanetDomain - Affordable Domains
TPP Wholesale - TPPInternet - Stargate - Namecheap - NetEarthOne - Bizcn - InternetBS - GMO Internet
12Register - Registercom - DotDNS - WebNIC - Dot.TK - HexoNet - Realtime Register - Registereu
RRPProxy - ResellerCamp - TransIP - Heart Internet - IPMirror - NetRegistry - OVH - VentraIP Wholesale
Email - 101Domain

Fraud Modules
MaxMind - VariLogiX FraudCall - Telesign

Gateway Modules
2CheckOut - AsiaPay - Auth.net Echeck - Authorize.net - Authorize.net CIM - Bank Transfer
BluePay - BluePay Echeck - BluePay Remote - Boleto - CashU - CC Avenue - ChronoPay
Direct Debit - EMatters - E-Path - eProcessingNetwork
eWAY Tokens - F2B - Finansbank - GarantiBank - Gate2Shop - LinkPoint
Inpay - IP.Pay - Kuveytturk - Modulo Moip - Mail In Payment
Merchant Partners - Merchant Warrior - IDEALMollie - Moneris - Moneris Vault
Skrill 1-Tap - SlimPay - NaviGate - NETbilling - Netregistry Pay - NoChex
Offline Credit Card - Optimal Payments - PagSeguro - Payflow Pro - Pay Junction
Paymate AU and NZ - Payment Express - PayPal - PayPal Express Checkout - PayPal Payments Pro
PayPoint.net (SecPay) - Payson - Planet Authorize - SagePay - ProtX VSP Form - PSIGate
Quantum Gateway - Quantum Vault - SagePay - SagePay Tokens - SecPay - SecurePay - SecurePay AU
Secure Trading - TrustCommerce - USA ePay - WorldPay - WorldPay Invisible