Skip to content

1.8 - 2026-10-27

Latest

Choose a tag to compare

@andrewlimaza andrewlimaza released this 27 Oct 13:22
  • SECURITY: The ITN debug log now uses a random file name, and the logs folder is blocked from web access on Apache and LiteSpeed servers. #116 (@andrewlimaza)
  • SECURITY: The ITN log is no longer output in the response to PayFast. It's still written to the log file or emailed when debugging is on. #115 (@andrewlimaza)
  • ENHANCEMENT: Added an admin notice when PayFast is the active gateway and no PassPhrase is set. #117 (@andrewlimaza)
  • BUG FIX: Fixed an issue where paid orders could stay in token status if the ITN validation request to PayFast failed. The site now responds with a 503 so PayFast re-sends the ITN. #114 (@terminalstate)