Implemented Payment plugin development
- Ruediger Schultz
-
Onderwerp Auteur
- Offline
- Berichten: 8
- Ontvangen bedankjes 0
You might remember that I tried to create my own payment plugin due to some legal restriction (utilising Digistore24.com as payment provider). I did not come around to this issue for a few months, but now found time to look at it again. I do have a path to implement this (forked from the "paylater" plugin).
However, I have two issues I cannot figure out - maybe you can direct me towards the answer:
1) (serious issue):
My plugin is named "Digistore24" and I renamed ALL occurencies to this name. The plugin does indeed work, but upon the task "payment.response" I get an erronious "processor name":
checkout/payment?task=payment.response&processor=digistore&order=xxx
instead of
checkout/payment?task=payment.response&processor=digistore24&order=xxx
This causes the plugin to fail with a debug log entry:
2025-06-24T08:23:51+00:00 ERROR xx.xxx.xxx.xxx ochsubscriptions Unauthorised access blocked to Payment Return. [digistore]
I do not find any hint, as to WHERE the "24" is stripped from the processor name. Any ideas?
2) (minor)
Is there a "trick" to include dynamic content (from my database) into the page template? Can I create my own dynamic parameters and fill them with my own database resposes?
- Ruediger Schultz
-
Onderwerp Auteur
- Offline
- Berichten: 8
- Ontvangen bedankjes 0
- Ruud van Lent
-
- Offline
- Berichten: 1707
- Ontvangen bedankjes 111
Hey Ruud,
You might remember that I tried to create my own payment plugin due to some legal restriction (utilising Digistore24.com as payment provider). I did not come around to this issue for a few months, but now found time to look at it again. I do have a path to implement this (forked from the "paylater" plugin).
However, I have two issues I cannot figure out - maybe you can direct me towards the answer:
1) (serious issue):
My plugin is named "Digistore24" and I renamed ALL occurencies to this name. The plugin does indeed work, but upon the task "payment.response" I get an erronious "processor name":
checkout/payment?task=payment.response&processor=digistore&order=xxx
instead of
checkout/payment?task=payment.response&processor=digistore24&order=xxx
This causes the plugin to fail with a debug log entry:
2025-06-24T08:23:51+00:00 ERROR xx.xxx.xxx.xxx ochsubscriptions Unauthorised access blocked to Payment Return. [digistore]
I do not find any hint, as to WHERE the "24" is stripped from the processor name. Any ideas?
Yes I have any idea

this is stripped in the ./component/com_ochsubscriptions/src/Controller/PaymentController
You need to search for:
and on the found lines (4 active), place the filter value 'word' with 'cmd' > so it should be input->get('processor', null, 'cmd')
I always filter as restrictive as possible. I will also change that on the next release (not planned yet), so your changes will not get overwritten.
note: untested

- Ruediger Schultz
-
Onderwerp Auteur
- Offline
- Berichten: 8
- Ontvangen bedankjes 0
that answer actually fits with my own (temporary) fix (done in the "response" function of that "PaymentController.php"
I really appreciate, if you eventually replace the "word" filter with "cmd" filter (NO hurry though!!!)
Have a good day!
Ruediger
Please consider this topic solved!
- Ruud van Lent
-
- Offline
- Berichten: 1707
- Ontvangen bedankjes 111

- Ruud van Lent
-
- Offline
- Berichten: 1707
- Ontvangen bedankjes 111