Askari Bank Automated Payment Gateway for WHMCS – Instant SMS (8870) & Email Auto-Verification

# ⚡ Askari Bank Automated WHMCS Payment Gateway & Real-Time Auto-Verification Module

Are you tired of manually verifying bank payment screenshots, matching transaction IDs (TIDs), and marking WHMCS invoices paid by hand?

The **Askari Bank WHMCS Payment Module** is an enterprise-grade, fully automated bank payment solution. It seamlessly bridges your **Askari Bank account** directly with **WHMCS** using your existing Android phone and MacroDroid automation. When a customer transfers funds via Askari Mobile App, Internet Banking, 1Link 1Bill, or ATM, your WHMCS invoice is marked **PAID automatically in seconds**!

No expensive third-party payment aggregator fees. No merchant approvals. 100% direct bank-to-bank transactions with zero commissions.

---

### 🌟 Key Highlights & Why Choose This Module

- 🚀 **100% Automated Invoice Marking:** Instant credit matching via official SMS (Mask **8870** / **Askari Bank**) and bank credit alert emails (**alerts@askaribank.com.pk**).
- 🔒 **Tamper-Proof HMAC-SHA256 Pay Portal:** Dedicated spotless checkout page (`pay.php`) with cryptographic invoice token security.
- 📱 **Clean & Modern Checkout UX:** Replaces cluttered default WHMCS invoice boxes with a crisp, brand-matched Royal Blue "Continue to Pay ➔" button.
- 💱 **Multi-Currency Auto-Conversion:** Accept orders in USD, EUR, GBP, AED, SAR, etc., with automatic real-time conversion to PKR.
- 🛡️ **Built-in Fraud Defense:** Strict duplicate TID prevention, transaction collision detection, and anti-tamper validation.
- 📊 **Complete Addon Manager & Audit Log:** Search, filter, approve, reject, paginate, and bulk-delete transaction logs with 1 click.
- ⚡ **Live Webhook Simulator:** Built-in testing console to simulate 200 OK pings, 8870 SMS, and bank email alerts without transferring real money.

---

## 🚀 Core Features Breakdown

### 1. 📲 Automated SMS & Email Notification Processing
- **Askari Bank 8870 SMS Mask Support:** Native regex parser captures Trans ID (TID), exact paid amount, and date/time directly from official bank SMS alerts.
- **Bank Alert Email Reader:** MacroDroid integration captures Gmail or Outlook notifications from `alerts@askaribank.com.pk` instantly.
- **Background App Push Notifications:** Built-in parser ready for Askari Mobile App push alerts.
- **Fail-Safe Webhook Endpoint:** HMAC secret-key protected webhook URL with high-concurrency database locking.

### 2. 💳 Dedicated & Responsive Payment Portal (`pay.php`)
- **Spotless Invoice Design:** Seamless customer experience with zero clutter, zero duplicate amounts, and full mobile optimization.
- **Account Details Display:** Beautifully renders Askari Bank Account Title, Account Number, and IBAN with 1-click copy buttons.
- **Sender Details Capture:** Optional fields for customer to input their Sender Account Name and Sender Account Number for effortless reconciliation.
- **Instant TID Verification:** Customers submit their 6–12 digit TID for instant matching against incoming bank alerts.

### 3. 🛡️ Advanced Security & Fraud Protection
- **HMAC-SHA256 Token Protection:** Guarantees invoice amounts and parameters cannot be modified via browser inspect elements or URL manipulation.
- **Duplicate TID Shield:** Prevents multiple customers or fraudulent users from claiming the same bank transaction.
- **Replay Attack Prevention:** Invoices already marked as "Paid" are permanently locked from double credit.
- **CSRF Protected Administration:** Every admin action (approval, rejection, bulk deletion) is secured by nonce tokens.

### 4. 🎛️ Askari Bank Admin Manager (WHMCS Addon)
- **Live Transaction Ledger:** Filter by *Paid*, *Pending*, *Unmatched*, *Mismatch*, or *Rejected*.
- **Native SQL Pagination:** Lightning-fast page loads (10, 25, 50, 100 records per page) with zero server overhead.
- **Bulk Select & Delete:** Select individual or entire pages of logs to clean and delete records directly from database.
- **Automated Purge Tool:** 1-Click cleanup of records older than 30, 60, 90 days or cleared transactions.
- **Synchronized Secret Key Manager:** Update and sync your webhook secret key across the gateway, callback webhook, and pay portal from a single field.
- **Live Simulator Console:** Test your webhook connectivity live with 1-click interactive simulation buttons.

---

## 📋 System Requirements

- **WHMCS:** v7.x, v8.x, v8.11+ (Latest WHMCS Supported)
- **PHP Version:** PHP 7.4, 8.1, 8.2, 8.3
- **PHP Extensions:** cURL, OpenSSL, JSON, PDO
- **Automation Device:** Any Android Phone with registered Askari Bank SIM card & MacroDroid app (free/pro).

---

## 📦 What’s Included in the Download Package?

1. `modules/gateways/askaribank.php` *(Main WHMCS Payment Gateway)*
2. `modules/gateways/askaribank/` *(Payment Portal, Assets, Helpers & Verification SDK)*
3. `modules/gateways/callback/askaribank.php` *(High-speed Webhook Listener)*
4. `modules/addons/askaribank/` *(Askari Bank Management Addon & Webhook Simulator)*
5. Comprehensive Step-by-Step Installation & MacroDroid Setup Documentation.