=== SkipCash Payment Gateway ===

Tags: skipcash, woocommerce, wc, payment, gateway
Requires at least: 5.6
Tested up to: 7.0.3
Stable tag: 2.5
Requires PHP: 8.0+
Author: SkipCash
Contributors: skipcash
Author URI: https://skipcash.app
License: GPLv2
License URI: https://www.gnu.org/licenses/gpl-2.0.txt

== Description ==

SkipCash payment gateway for WooCommerce.

SkipCash is a mobile payment app that offers a convenient and enjoyable experience throughout the payments journey for both consumers and merchants. The app enables consumers to make digital payments using a proprietary QR code thereby reducing the need for cash, physical cards, and Point-Of-Sale (POS) devices. SkipCash also allows consumers to link their card securely to use it in all their transactions, monitor their spending via visual spending reports, organize their payments receipts, enable virtual account for kids & family members, and access to merchants’ vouchers & coupons.

== Installation ==

1. Under the WP admin menu, select Plugins → Add New
2. Search for WooCommerce SkipCash Payment Gateway
3. Click on Install Now, and then, click on Activate Plugin
4. Navigate to WooCommerce → Settings in the WP admin menu
5. Click on Payments in the tab menu
6. In the table, click on Manage for table row SkipCash payment gateway.
7. Enter settings and save

== Upgrade Notice ==

There are no upgrade notices yet.

== Screenshots ==

1. Example SkipCash payment button
2. Settings of SkipCash payment gateway for WooCommerce

== Changelog ==

Version 2.5
Security: removed an unauthenticated return-handler branch that allowed marking arbitrary orders as paid.
Security: removed the separate credit-card payment flow entirely. All payments go through the secure SkipCash hosted payment page; no card data is handled on the site.
Security: the API signing secret and webhook key are no longer written to log files or the log table.
Security: the payment, create-payment and return endpoints now verify that the caller owns the order and that the order is still awaiting payment.
Security: webhook signatures are compared in constant time, rejected when no webhook key is configured, bound to the payment created for the order, and ignored for orders placed through another gateway.
Security: the payment return handlers bind the transaction to the customer session and refuse to complete an order unless the paid amount matches the order total.
Security: card numbers are reduced to the last four digits before being stored in order notes or logs.
Security: verbose debug logging is now opt-in and off by default.
Security: the SkipCash Base URL is restricted to https URLs on known SkipCash hosts, checked both on save and at the point of use.
Security: successful webhooks are cross-checked against the SkipCash API so amount and currency are verified before an order is completed.
Security: a late or replayed "pending" webhook can no longer move an already paid order backwards.
Security: the create-payment endpoint is rate limited per IP.
Misc: gateway logs are pruned daily (30 days by default, filterable via skipcash_log_retention_days).
Fix: the "Stay in the same window" setting is now actually applied and configurable from the settings screen.
Fix: send the customer's real last name to SkipCash (was hard-coded).
Fix: validate that the order exists before creating a payment, and harden response/JSON handling.
Misc: direct-access guards, InnoDB/utf8mb4 log table, and removal of duplicate/dead code.

Version 2.2.0
Add HPOS support

Version 2.1.0
Updated the Author information
Tested with the lastest version of WordPress

Version 2.0.0
Add option to process payments in the same browser window, instead of opening pop-up
Fix experimental button not hiding on checkout
Fix incorrect order ID on trying to pay again after cancelled payment

Version 1.0.0
Initial version, enables SkipCash payment gateway for Woocommerce

== Frequently Asked Questions ==

*Where to configure SkipCash payment gateway for Woocommerce?*

Navigate to WooCommerce → Settings in the WP admin menu and click on Payments in the tab menu. In the table, click on Manage for table row SkipCash payment gateway.

== Donations ==

Visit https://dev.skipcash.app/ for more information.

