08-26-2026, 01:01 PM
(This post was last modified: Today, 10:03 AM by Sir-Vigu.
Edit Reason: Versioned Vault repair and scoped test evidence — 21 October 2026
)
Verification record: DFV-AUDIT-20261021
Repair wave 2 — DF Payment Gateway (MyBB) 1.5.0
21 October 2026 · Sir-Vigu · Repaired candidate — provider acceptance pending
Repaired from recovered 1.4 source; remains on public download hold. This is a versioned repair/rebuild, not a recovered original archive. No production activation was performed.
![[Image: df-paygate-mybb.webp]](https://data-forums.com/images/vault-repair-wave2/df-paygate-mybb.webp)
Actual isolated MyBB test capture. Sample data; not a production install or a real payment/broadcast claim.
What changed
Requirements
MyBB 1.8.40 tested; PHP 8.1+ intended (runtime tests on 8.4.26); MySQL/MariaDB; modern browser. Custom themes, external authentication, mail and provider integrations require their own staging checks.
Installation and upgrade
Back up first. Upload inc/ and jscripts/ into the MyBB root. Back up orders and users first. Deactivate the old plugin; upload files; activate 1.5.0 to add target_gid. Legacy pending orders without a target snapshot do not auto-grant and require manual reconciliation. Do not uninstall to upgrade; it deletes order history.
Settings
Existing dfpay_* settings remain. Choose a custom non-staff group ID above 7. Start in sandbox; configure your own App ID and Secret. Whole currency units only.
Usage
Test evidence
23 deterministic PHP checks plus 10 real HTTP checks with a local API/SDK fixture cover owner checks, exact amount/currency, signed/unsigned webhooks, underpayment, client tampering, secret omission, legacy hold and idempotence. No actual provider was contacted.
The eight-release wave passed 117 scoped assertions across PHP/MyBB, browser, HTTP and lifecycle checks. Some tests used a combined plugin context; this is not a universal compatibility certificate or an independent security audit.
Limitations / breaking changes
23 PHP/provider-fixture and 10 HTTP checks passed, but NO real Cashfree sandbox transaction, real SDK checkout, webhook delivery or live charge was tested. API version remains the inherited 2022-09-01 contract and needs provider acceptance. The public Vault download remains withheld. The ZIP in the owner bundle is a candidate, not a financial sign-off.
Deactivate / uninstall
Deactivate preserves orders. Uninstall permanently drops dfpay_orders and configuration. Never do this while reconciling paid orders.
Changelog
1.5.0 — 21 October 2026: Repaired from recovered 1.4 source; remains on public download hold. Full source, README, upgrade notes, changelog, test-scope note and licence included in the ZIP.
Public download remains withheld. Checkout/confirmation tests used local deterministic provider fixtures. Do not treat this as Cashfree sandbox or financial acceptance.
Support / licence
Reply below or PM Sir-Vigu (uid 1) with versions and a minimal reproduction. Never publish credentials or private member data. GPL-3.0-or-later; existing attribution retained.
Full verification register
Original release notes
💳 DF Payment Gateway (MyBB) v1.0
Cashfree autopilot checkout - sell memberships & products on your MyBB board
🔧 What it is
The exact payment engine that powers the DF Gold autopilot on data-forums.com, productized for your board. Members pay via Cashfree (UPI, cards, netbanking); the gateway confirms PAID server-side; your chosen usergroup is granted automatically with a welcome PM. Zero manual work, zero core edits.
✨ Features
inc/plugins/dfpaygate.php + README.txt
⚙️ Requirements
Product name, price, currency, Cashfree App ID + Secret, environment (sandbox/production), usergroup to grant, welcome PM toggle.
🎮 How to use
Members tap 'Pay securely', complete the Cashfree checkout, and land back activated. You watch sales in the admin order list.
🧹 Uninstall
Admin CP -> Plugins -> Deactivate / Uninstall.
🤝 Support
Questions or a custom tweak? Reply in this thread or PM Sir-Vigu.
A Data-Forums premium release - free for vault-unlocked members, instant for DF Gold. data-forums.com
Repair wave 2 — DF Payment Gateway (MyBB) 1.5.0
21 October 2026 · Sir-Vigu · Repaired candidate — provider acceptance pending
Repaired from recovered 1.4 source; remains on public download hold. This is a versioned repair/rebuild, not a recovered original archive. No production activation was performed.
Actual isolated MyBB test capture. Sample data; not a production install or a real payment/broadcast claim.
What changed
- Normal MyBB loading now registers handlers and loads the order helpers.
- Order creation uses unpredictable IDs, CSRF checks and server-configured prices.
- Confirmation checks local ownership, exact stored amount/currency/order ID and server-fetched PAID state.
- Custom non-staff grant groups only; target group is snapshotted on order creation.
- Authenticated raw-body Cashfree webhook HMAC, bounded timestamp window and idempotent order/grant state.
- InnoDB order-row locks protect repeated confirmations. Provider secrets remain server-side.
Requirements
MyBB 1.8.40 tested; PHP 8.1+ intended (runtime tests on 8.4.26); MySQL/MariaDB; modern browser. Custom themes, external authentication, mail and provider integrations require their own staging checks.
Installation and upgrade
Back up first. Upload inc/ and jscripts/ into the MyBB root. Back up orders and users first. Deactivate the old plugin; upload files; activate 1.5.0 to add target_gid. Legacy pending orders without a target snapshot do not auto-grant and require manual reconciliation. Do not uninstall to upgrade; it deletes order history.
Settings
Existing dfpay_* settings remain. Choose a custom non-staff group ID above 7. Start in sandbox; configure your own App ID and Secret. Whole currency units only.
Usage
Code:
Checkout: misc.php?action=df_pay. Return: misc.php?action=df_pay_return. Webhook: misc.php?action=df_pay_notify. Signature verification follows the raw timestamp+body HMAC format documented by Cashfree.Test evidence
23 deterministic PHP checks plus 10 real HTTP checks with a local API/SDK fixture cover owner checks, exact amount/currency, signed/unsigned webhooks, underpayment, client tampering, secret omission, legacy hold and idempotence. No actual provider was contacted.
The eight-release wave passed 117 scoped assertions across PHP/MyBB, browser, HTTP and lifecycle checks. Some tests used a combined plugin context; this is not a universal compatibility certificate or an independent security audit.
Limitations / breaking changes
23 PHP/provider-fixture and 10 HTTP checks passed, but NO real Cashfree sandbox transaction, real SDK checkout, webhook delivery or live charge was tested. API version remains the inherited 2022-09-01 contract and needs provider acceptance. The public Vault download remains withheld. The ZIP in the owner bundle is a candidate, not a financial sign-off.
Deactivate / uninstall
Deactivate preserves orders. Uninstall permanently drops dfpay_orders and configuration. Never do this while reconciling paid orders.
Changelog
1.5.0 — 21 October 2026: Repaired from recovered 1.4 source; remains on public download hold. Full source, README, upgrade notes, changelog, test-scope note and licence included in the ZIP.
Public download remains withheld. Checkout/confirmation tests used local deterministic provider fixtures. Do not treat this as Cashfree sandbox or financial acceptance.
Support / licence
Reply below or PM Sir-Vigu (uid 1) with versions and a minimal reproduction. Never publish credentials or private member data. GPL-3.0-or-later; existing attribution retained.
Full verification register
Original release notes
💳 DF Payment Gateway (MyBB) v1.0
Cashfree autopilot checkout - sell memberships & products on your MyBB board
🔧 What it is
The exact payment engine that powers the DF Gold autopilot on data-forums.com, productized for your board. Members pay via Cashfree (UPI, cards, netbanking); the gateway confirms PAID server-side; your chosen usergroup is granted automatically with a welcome PM. Zero manual work, zero core edits.
✨ Features
- Hosted Cashfree checkout with sandbox + production modes
- Server-side PAID verification (unforgeable) + webhook safety net - buyers activate even if they close the tab
- Auto usergroup grant + optional welcome PM
- Orders table + built-in admin order list
- Dark, mobile-friendly, theme-independent checkout page at misc.php?action=df_pay
- Configurable product name, price, currency, target group
- Zero core edits; install & activate like any plugin
inc/plugins/dfpaygate.php + README.txt
⚙️ Requirements
- MyBB 1.8.x, PHP 7.4+
- A free Cashfree merchant account (App ID + Secret)
- Download the zip from the DF Vault (button below).
- Upload inc/plugins/dfpaygate.php to your inc/plugins/ folder.
- Admin CP -> Plugins -> DF Payment Gateway -> Install & Activate.
- Admin CP -> Settings -> DF Payment Gateway: set product, price, currency, Cashfree keys, environment, target group, PM on/off.
- Link members to misc.php?action=df_pay - done.
Product name, price, currency, Cashfree App ID + Secret, environment (sandbox/production), usergroup to grant, welcome PM toggle.
🎮 How to use
Members tap 'Pay securely', complete the Cashfree checkout, and land back activated. You watch sales in the admin order list.
🧹 Uninstall
Admin CP -> Plugins -> Deactivate / Uninstall.
🤝 Support
Questions or a custom tweak? Reply in this thread or PM Sir-Vigu.
A Data-Forums premium release - free for vault-unlocked members, instant for DF Gold. data-forums.com
👍 Like0❤️ Love0😂 Haha0🔥 Fire0👏 Clap0⚡ 0
Sir-Vigu
Founder, Data-Forums.com
Connecting data professionals, ideas, and innovation.
Founder, Data-Forums.com
Connecting data professionals, ideas, and innovation.
