Stripe Payment Gateway for OpenCart 3.x & 4.x+ — Version 2.1

A single, professionally-built payment extension that supports both legacy 3.x stores and modern 4.x+ installations. The module uses hosted Checkout Sessions to keep you PCI-light: card data is processed by the payment provider and never touches your server. Webhook-based order synchronization ensures reliable status updates and refund handling.

Core Capabilities

Hosted Checkout Sessions (secure, PCI / SCA compliant)

Test / Live mode toggle for safe staging and production rollout

Full admin control: publishable key, secret key, webhook secret, order statuses (success / failed / pending / refunded), geo zone, minimum total, sort order, debug logging

Secure checkout: no card data stored or processed by your server

Webhook processing for payment lifecycle events: checkout.session.completed, payment_intent.succeeded, payment_intent.payment_failed, charge.refunded

Logs to stripe.log for troubleshooting

Correct currency handling including zero-decimal currencies

Bundled official SDK with admin “Repair SDK” button for easy maintenance

How it Works (high level)

Customer → hosted Checkout Session (redirect) → payment processed by provider → provider sends webhook → order updated automatically in store → customer returned to store.

Key Features (bulleted list)

Hosted Checkout Sessions (PCI & SCA / 3DS compliant)

Test & Live modes (switch in admin)

Webhook-based status updates (secure signature verification)

Refund handling via webhook (charge.refunded)

Zero-decimal currency support (JPY, KRW, etc.)

Debug logging to system/storage/logs/stripe.log

Geo zone and minimum order total controls

Bundled SDK + “Repair Stripe SDK” admin button

No core file edits — OCMOD/extension-compatible

Benefits (for store owners)

Reduce PCI scope — card data never passes your server

Comply with SCA/3DS where required, lowering chargebacks and fraud risk

Reliable, automatic order status updates via webhooks

Test safely in sandbox before switching to live mode

Simplified refunds and reconciliation when using the provider dashboard

Clear debug logs make support and troubleshooting fast

One extension covers both 3.x stores and 4.x+ installations (separate docs)

Requirements

Compatibility: OpenCart 3.x and 4.x+ (explicitly includes OpenCart 4.x+)

PHP: 7.4+ for 3.x installs; 8.1+ for 4.x+ installs

SSL (HTTPS) — required for checkout & webhooks

A provider account (API keys)

Public HTTPS URL for webhooks (localhost requires Stripe CLI or a secure tunnel such as ngrok)

Webhook note: webhooks require a public HTTPS endpoint. If developing locally, forward webhooks with Stripe CLI or ngrok.