=== Planet Pay payments ===
Contributors: planetpaypayment
Tags: payment, woocommerce, blik, apple pay, google pay
Requires at least: 5.0
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 5.4.4
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Planet Pay payment gateway for WooCommerce. Supports Card, BLIK, Google Pay, Apple Pay and Pay-By-Link.

== Description ==

**Planet Pay** integrates WooCommerce with the Planet Pay payment gateway.

Supports card payments, BLIK, Google Pay, Apple Pay, and Pay-By-Link (Transfer Online).
Works with both classic and block WooCommerce checkout.

= Payment methods =

* **Card** — redirect to Planet Pay paywall
* **BLIK Zero** — customer enters the 6-digit code directly on the checkout page (inline, with polling)
* **BLIK Standard** — redirect to Planet Pay gateway
* **Apple Pay Express** — one-tap payment directly on checkout
* **Apple Pay Paywall** — redirect to Planet Pay gateway
* **Google Pay** — redirect to Planet Pay paywall
* **Pay-By-Link (Transfer Online)** — redirect to Planet Pay paywall

= Features =

* Full support for WooCommerce block checkout
* Refund flow with dedicated order statuses (Requested / Approved / Rejected)
* Email notifications for merchants and customers on refund events
* Built-in API connection test (production and sandbox)
* Payment method synchronization from Planet Pay gateway
* Apple Pay domain verification
* Payment retry for expired orders
* Pay-again email links

== Installation ==

1. Download the plugin ZIP file.
2. In WordPress admin go to Plugins > Add New > Upload Plugin.
3. Upload the ZIP and click Install Now.
4. Activate the plugin in Plugins > Installed Plugins.
5. Go to WooCommerce > Settings > Payments > Planet Pay and configure your credentials.

== Frequently Asked Questions ==

= What WooCommerce versions are supported? =

WooCommerce 6.5 or higher.

= What PHP version is required? =

PHP 7.4+ with extensions: ext-curl, ext-json, ext-sodium.

= Does the plugin support the WooCommerce block checkout? =

Yes — the plugin fully supports both classic and block checkout.

= What payment methods are available? =

Card, BLIK (zero and standard mode), Google Pay, Apple Pay (express and paywall mode), and Pay-By-Link (Transfer Online).

= How do refunds work? =

Refunds are processed via the Planet Pay gateway. After requesting a refund the order status changes to Refund Requested. Planet Pay processes it asynchronously and updates the status to Refund Approved or Refund Rejected. Email notifications are sent automatically.

== External services ==

This plugin communicates with the **PlanetPay API** to process online payments.

* **Sandbox URL:** `https://api.sandbox.planetpay.pl/v1/ecommerce`
* **Production URL:** `https://api.planetpay.pl/v1/ecommerce`
* **Terms of Service:** [PlanetPay Terms](https://planetpay.pl/storage/app/uploads/public/646/f72/100/646f721008fb6967147831.pdf)

Data sent to the API includes: order ID, transaction amount, customer data, merchant credentials, BLIK code (for BLIK zero payments), Apple Pay token (for Apple Pay express), and refund details.

Data is sent when: initiating a payment, checking payment status (BLIK polling), requesting a refund, and receiving asynchronous notifications.

== Security ==

Security bugs can be reported via the **Patchstack Vulnerability Disclosure Program**.

[Report a vulnerability](https://patchstack.com/database/vdp/ffe38ea1-8bbd-46da-b008-5412592495d2)

== Changelog ==

= 5.4.4 =
* Security: Restrict BLIK payment AJAX endpoint to authenticated users only
* Security: Sanitize checkout data with a denylist to prevent order takeover
* Security: Use server-side shipping rates in Block Checkout
* Security: Replace PHP session with WooCommerce session for pending order tracking

= 5.4.3 =
* Fix: Unknown payment method label on payment retry

== License ==

GPLv2 or later — https://www.gnu.org/licenses/gpl-2.0.html