WooCommerce
WordPressWordPress 6.x · WooCommerce 8–9 (HPOS)
Callback path
Modules
Accept crypto on your CMS — no code
Drop-in payment modules for 22 platforms. Install, paste your API key and secret, and your store accepts 50 coins. Every module uses the same hosted checkout and the same HMAC-signed webhook — the money path is identical to the API.
22ready modules
11Stable
11Beta
0%to accept
download
Modules
Free, MIT-licensed, and identical on the money path — every module uses the same hosted checkout and the same signed webhook.
stable
OpenCart 3.x
Online storesOpenCart 3.0.x
Callback path
OpenCart 2.x
Online storesOpenCart 2.3.x
Callback path
PrestaShop 1.7 / 8
Online storesPrestaShop 1.7.6+ · 8.x
Callback path
PrestaShop 1.6
Online storesPrestaShop 1.6.x
Callback path
Magento 2
Online storesMagento 2.4.x Open Source
Callback path
WHMCS
Billing, courses & communitiesWHMCS 7.10 – 8.x
Callback path
Easy Digital Downloads
WordPressWordPress 6.x · EDD 3.x
Callback path
Joomla + VirtueMart
JoomlaJoomla 4/5 · VirtueMart 4.x
Callback pathListed in the README inside the ZIP
Joomla + JoomShopping
JoomlaJoomla 4/5 · JoomShopping 5.x
Callback pathListed in the README inside the ZIP
MODX + Shopkeeper
Other CMSMODX Revolution 2.8+ · Shopkeeper 3.x
Callback pathListed in the README inside the ZIP
Moodle
Billing, courses & communitiesMoodle 4.x (paygw)
Callback pathListed in the README inside the ZIP
Invision Community
Billing, courses & communitiesIPS 4.7 · Commerce
Callback pathListed in the README inside the ZIP
Shop-Script / Webasyst
Online storesShop-Script 8–9
Callback path
DataLife Engine
Other CMSDLE 14+ · Billing
Callback pathListed in the README inside the ZIP
UMI.CMS
Other CMSUMI.CMS 2.9+ · emarket
Callback pathListed in the README inside the ZIP
Download ZIP15 KB
NetCat
Other CMSNetCat 5.6+
Callback pathListed in the README inside the ZIP
Download ZIP12 KB
Simpla CMS
Online storesSimpla 2.3+
Callback pathListed in the README inside the ZIP
Download ZIP11 KB
VamShop
Online storesVamShop 2.x
Callback pathListed in the README inside the ZIP
Download ZIP11 KB
PHPShop
Online storesPHPShop 4.x
Callback pathListed in the README inside the ZIP
Download ZIP16 KB
ShopOS
Online storesShopOS 2.5.x
Callback pathListed in the README inside the ZIP
Download ZIP16 KB
Amiro.CMS
Other CMSAmiro.CMS 7.x
Callback pathListed in the README inside the ZIP
Download ZIP22 KB
Nothing matches. The API and the PHP SDK work with any platform.
Additional platforms · beta
These follow each platform's documented conventions and ship with the same verified webhook logic, but the CMS itself has thin public API docs — smoke-test on a staging install before going live. Each README lists exactly what to confirm.
For custom sites
One-file PHP SDK
No plugin for your stack? Drop one PHP file into any site: create an invoice, redirect to the hosted checkout, verify the signed webhook. Node.js and Python SDKs work the same way.
how it works
Three steps, once
- 01
1. Install the module
Upload it the way your CMS expects — a WordPress plugin, an OpenCart extension, a PrestaShop module. Each ZIP ships a README with the exact steps.
- 02
2. Paste your keys
Create a free account, copy the
api_keyandapi_secretinto the module settings, and set your callback URL in the Payora dashboard. - 03
3. Take payments
The buyer picks a coin on the hosted checkout. Payora confirms on-chain, then fires a signed webhook and your order flips to paid — automatically.
what every module does
The same money-safety, everywhere
- Signed webhooks — every callback is verified with HMAC-SHA256 in constant time before an order is touched.
- Replay-proof — stale timestamps are rejected and a repeated event can never credit an order twice.
- Webhook is the truth — a buyer who closes the tab still gets their order paid.
- Nothing secret in your shop — the module holds no key and no card data. It creates an invoice, redirects the payer, and verifies a signed webhook.
// what the module does on every callback
$raw = file_get_contents('php://input'); // raw, before parsing
$expected = hash_hmac('sha256', $ts . '.' . $raw, $secret);
if (!hash_equals($expected, $sig)) { http_response_code(401); exit; }
// only now is the order marked paid — idempotentlyFAQ
Frequently asked questions
Straight answers, including the uncomfortable ones: custody, fees and what happens when something goes wrong.
Help centreWhich CMS platforms does Payora support?
Payora ships free modules for WooCommerce, OpenCart 2 and 3, PrestaShop 1.6/1.7/8, Magento 2, WHMCS, Easy Digital Downloads, Joomla (VirtueMart and JoomShopping), Moodle, MODX, Invision Community, Shop-Script, DataLife Engine, UMI.CMS, NetCat, Simpla, VamShop, PHPShop, ShopOS and Amiro. If your platform is not listed, the plain REST API and the one-file PHP SDK work from any stack.
Do the modules cost anything?
No. The modules are free and so is accepting payments — Payora charges 0% on the accept side. You only pay the on-chain network fee; a platform fee applies only when money moves out: 1.5% on payouts, transfers and withdrawals on the Free plan (0.75% on Pro, 0.5% on Business), plus the network fee of the coin being sent. The minimum withdrawal is the equivalent of $50.
How does an order get marked paid?
Payora confirms the payment on-chain and then sends your site an HMAC-SHA256 signed webhook. The module verifies that signature in constant time, checks the timestamp, and only then flips the order to paid — idempotently, so a retried event never double-credits. The webhook, not the buyer returning to your site, is the source of truth.
Does the module touch my keys or my money?
No. The module only creates an invoice, redirects the payer to the hosted checkout, and verifies the signed webhook that comes back — it holds no key and no card data. The payment itself is received by Payora and credited to your balance, which you withdraw to your own wallet.
What PHP version do the modules need?
PHP 7.4 or newer, including PHP 8.3. The modules and the bundled SDK deliberately avoid PHP 8-only syntax so they run on typical shared shop hosting.
Don't see your CMS?
A single dependency-free PHP SDK: create invoices, redirect to the hosted checkout, and verify signed webhooks. REST is available for any language.
What this page answers
- crypto payment gateway API
- REST API for crypto invoices
- webhook signature verification
- crypto payment integration guide
- PHP SDK for crypto payments
- how to create an invoice by API
- sandbox for crypto payments
- CMS modules for a crypto checkout
- idempotency in payment webhooks
- testing a crypto checkout
- developer documentation for payments
- reference for CMS payment modules
