Antom (Alipay+) Payment Gateway

Accept Alipay China payments inside WHMCS without third-party services or manual reconciliation. The Antom (Alipay+) gateway integrates directly with Ant Group's official Antom API to deliver QR-code checkout, automatic invoice settlement, and one-click refunds — all from the standard WHMCS admin panel.

QR-code checkout, no redirects

Customers see the Alipay QR code rendered inline on the WHMCS invoice page and pay with the Alipay app on their phone. The QR image is fetched server-side and re-served as Base64 over HTTPS so there are no mixed-content warnings, and the page works on any modern browser without extra scripts.

Bank-grade security

Every API call is signed with RSA256 (SHA256-with-RSA) and every webhook is verified with the Antom platform public key before any database write. Timestamps are validated against a 15-minute tolerance window to block replay attacks, and OpenSSL key resources are explicitly freed for PHP 7.4 compatibility. SSL certificate verification is mandatory — never disabled, even in sandbox mode.

Multi-region, multi-currency

Switch between Antom's Asia, North America, and Europe API gateways with one dropdown. Sandbox and production endpoints are toggled with a single checkbox. The module supports USD, HKD, CNY, SGD, JPY, and any other currency configured in WHMCS, with the correct minor-unit conversion (cents vs no-cents) applied automatically.

Automatic invoice processing

When a payment notification arrives, the gateway validates the signature, looks up the invoice by request ID (INV{id}T{timestamp}), guards against duplicate processing via WHMCS's checkCbTransID, and posts the payment with the correct amount and fee. No cron jobs, no manual reconciliation.

Original-path refunds

Refunds are issued from the standard WHMCS invoice page. The gateway calls Antom's /payments/refund endpoint with a unique request ID (REF{id}T{timestamp}) and processes the asynchronous refund notification with the same signature verification as payment callbacks. Partial refunds are supported.

Flexible fee management

Configure a percentage fee, a fixed fee, or both. Fees are validated to prevent division-by-zero and integer overflow, and amounts are calculated with (int)round() instead of float-to-string casts to eliminate the half-cent rounding errors that plague many gateway implementations.