JazzCash SMS Gateway for WHMCS

🇵🇰 JazzCash SMS Payment Gateway — Enterprise Edition
Built by Host Cloudy | Powered by CodeStar Licensing

The only WHMCS payment gateway module that integrates JazzCash mobile payments
with real-time SMS Transaction ID (TID) verification, advanced fraud prevention,
and a fully-featured admin management dashboard.

Perfect for Pakistani web hosting companies, WHMCS resellers, and SaaS providers
who want to accept JazzCash payments from clients — without any API dependency.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
✅ CORE PAYMENT FEATURES
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

• Clean "Continue to Pay ➔" checkout button — no clutter, fully responsive
• Dedicated pay.php payment portal with account details & TID submission form
• Sender Account Name & Sender Account Number fields for buyer accountability
• Real-time TID (Transaction ID) format validation before submission
• Duplicate TID detection — same TID cannot be used twice (prevents replay attacks)
• Amount tolerance check — verifies submitted amount matches invoice total
• Webhook callback with HMAC-SHA256 signature verification
• Automatic invoice mark-as-paid on admin approval

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
🛡️ SECURITY & FRAUD PREVENTION
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

• Fake TID rejection — validates format (T\d{8,12}) before DB insert
• Double-verification prevention — pending status locks re-verification abuse
• CSRF token validation on all admin AJAX actions
• Prepared statements throughout — zero SQL injection risk
• XSS-safe output with htmlspecialchars on all user-facing data
• Rate limiting awareness — prevents gateway from accepting unverified payments
• Webhook secret key authentication
• CodeStar Enterprise License enforcement — gateway fully locked without valid license

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📊 JAZZCASH MANAGER ADDON — ADMIN DASHBOARD
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

A stunning WHMCS addon module (separate from the gateway) with:

• Dashboard with live stats — Total Volume, Approved, Pending, Rejected counts
• Paginated transaction table (10 per page) with bulk select & delete
• One-click Approve / Reject with automatic WHMCS invoice mark-paid
• Advanced filters — by status, TRX ID, Invoice ID
• Diagnostics tab with real-time system health checks
• Payment Simulator for testing without real transactions
• CodeStar License & Updates tab — enter purchase code, verify, clear cache
• 1-Click Cloud Auto-Updater powered by CodeStar
• Silent Remote Control — vendor can push notices, maintenance mode remotely
• Webhook Secret Key generator with in-app save & sync tool

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
🔑 CODESTAR ENTERPRISE LICENSING
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

• Domain-locked activation via codestar.pk API
• Smart cache (15s dev / 600s production) — minimal API calls
• Rate-limit cooldown protection — auto backoff on throttle
• Instant revocation enforcement — suspended/revoked shows full-screen block
• Remote config: vendor can push gateway overrides, banners, maintenance mode

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
⚙️ REQUIREMENTS & COMPATIBILITY
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

• WHMCS: 7.x — 8.11+ (fully tested)
• PHP: 7.4, 8.0, 8.1, 8.2, 8.3
• MySQL / MariaDB: 5.7+
• cURL extension required
• JazzCash mobile account (no API credentials needed)

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📦 INSTALLATION (5 MINUTES)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

1. Upload extracted ZIP to your WHMCS root directory
2. Go to WHMCS Admin → Setup → Payment Gateways → Activate "JazzCash SMS"
3. Enter your JazzCash account number, name, webhook secret
4. Go to WHMCS Admin → Addons → JazzCash Manager → License tab
5. Enter your CodeStar purchase code and click "Save & Verify"
6. Done — your clients can now pay via JazzCash!

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📞 SUPPORT
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Full support via CodeStar ticket system. Extended 12-month premium support
available. 1-Click cloud updates delivered automatically through the admin panel.