For existing Cardsave accounts only. Cardsave no longer accepts new merchants. This plugin is for merchants who already have working Cardsave credentials.
No Cardsave account? Get the Worldpay plugin instead if you need a new account.

Keep Your Cardsave Account Running on J2Commerce 6

This plugin keeps your Cardsave account taking payments on Joomla 6, with a hosted payment page or an on-site card form, HMAC-signed requests, server-verified results and card data removed from logs.

What the Plugin Does

Choose the hosted payment page or an on-site card form. Every result is verified on your server, and card data is removed from logs.

Hosted Payment Page
Your customers leave your site, enter card details on a Cardsave-hosted page, and come back paid. Your server never sees the card data. Cardsave handles 3D Secure checks on its own page.
Direct On-Site Card Form
Card details are collected in your checkout with no redirect: cardholder name, card number, expiry, start date, issue number and CVV.
Server-Pull Result Verification
After a hosted payment, Cardsave sends the result to your server, and the plugin rejects any result whose hash does not match.
Three-State Order Status Mapping
Paid, declined, and 3DS-pending each route to whichever J2Commerce order status your workflow uses. 3D Secure pending orders wait until authentication completes, and each status change runs the usual order history, emails and download access.
PAN and CVV Log Scrubbing
Card numbers are masked to the last four digits and CVV values are replaced entirely before any debug log entry touches disk. Turn debug logging off in production and nothing sensitive is written at all.
Admin Error Email Alerts
When the gateway returns an error, such as a hash mismatch or a failed callback, the plugin emails your administrator group with masked transaction details.
Surcharge Support
Add a named surcharge as a percentage, a flat amount or both, with a tax class. It appears as a line on the order total and is included in the amount charged.
Geozone Restriction
Show Cardsave only to customers in countries your merchant account covers. Customers outside the geo zone do not see it as a payment option.
Bootstrap 5 and UIkit Templates
Full template sets for both Bootstrap 5 and UIkit 3. Switch between them in one setting, or add a custom subtemplate folder and the plugin uses it.

Choose Hosted or On-Site Checkout

In hosted mode your server never handles card data, which keeps your PCI scope at SAQ-A. Direct mode keeps the card form on your own checkout with no redirect. Switch between them in the plugin settings.

Hosted mode: SAQ-A tier, Cardsave-hosted card form, server-pull result validation
Direct mode: inline card form on your checkout, no redirect, HMAC-signed submission
Both modes: HMAC-SHA1 transaction signing, 3DS-aware status routing, configurable order outcomes
Switch modes in one setting without re-entering credentials

Verified Results and Masked Logs

Cardsave confirms each result directly to your server instead of through a URL parameter. Each result carries a hash computed with your pre-shared key, and any mismatch is rejected. In debug logs, card numbers are masked to the last four digits and CVV values are removed.

HMAC-SHA1 hash on every transaction, with HMAC-MD5 also supported
Server-pull callback: Cardsave confirms results to your server directly
Card number fields masked to last four in all log output
CVV and issue number replaced entirely — not logged at all

Move to Worldpay When You Are Ready

When you are ready to move off your Cardsave credentials, switch to the J2Commerce Worldpay plugin. Your orders and customer records stay in your store whichever payment plugin you use.

All order data, customer records, and transaction history stay in your database
Moving to Worldpay is a plugin change, with no data export
J2Commerce Worldpay plugin for your Worldpay account

Don't have a Cardsave account?

Cardsave no longer accepts new merchants. If you need a new account, use Worldpay instead. Get the J2Commerce Worldpay plugin

Keep Your Checkout Running Through the Upgrade

Install the plugin, enter your Cardsave credentials and test the checkout. Switch to the Worldpay plugin whenever you are ready.

Hosted Payment Page or Direct Card Form
Three-State Order Status Mapping
Surcharge Support

Use Cases

The UK Retailer Eight Years Into the Same Merchant Account

You have had a Cardsave account for years and are upgrading to Joomla 6. Install the plugin, re-enter your three credentials and keep taking payments, then plan a move to Worldpay later.

The B2B Uniform Supplier With a Legacy Account

A B2B supplier takes smaller orders by card through Cardsave. The on-site card form works as before after the Joomla upgrade, so finance does not change anything this year.

The Digital Goods Merchant Routing 3DS Carefully

A digital goods store maps 3D Secure pending payments to their own order status, so downloads are only granted after the bank confirms the payment.

The Agency on a Multi-Site Maintenance Contract

An agency maintains several client stores that use Cardsave. They install the plugin on each one, enter the existing credentials and test checkout as part of the Joomla upgrade.

Plan Your Worldpay Move on Your Schedule

Your Cardsave account keeps working on J2Commerce 6 while you plan a move to Worldpay with testing and a set cutover date. The Worldpay plugin is ready when you are.

Languages

Translated into 20 languages.

Arabic Unitag ar-AA
Chinese, Traditional zh-TW
Danish da-DK
Dutch nl-NL
English (United Kingdom) en-GB
English (United States) en-US
Finnish fi-FI
French fr-FR
German de-DE
Greek el-GR
Hebrew he-IL
Italian it-IT
Japanese ja-JP
Norwegian Bokmål nb-NO
Polish pl-PL
Portuguese, Portugal pt-PT
Russian ru-RU
Spanish es-ES
Swedish sv-SE
Turkish tr-TR

Reviews

Customer Rating

No reviews yet

Every review comes from a licensed customer and appears exactly as written.

Write a Review

Payment Methods

CardSave

For merchants who still hold working Cardsave credentials, this plugin keeps hosted or direct Cardsave payments running on Joomla 6.

Billing Option

1 Year $39.00 2 Years ~~Regular price $78.00~~ $69.00

$39.00

Every year

Item added to cart. Checkout

View Wishlist

Renews automatically when each subscription period ends. Cancel anytime in My Account.
Updates, downloads and support for the length of the license
Your plugin keeps working if you cancel renewal, and every version you downloaded stays yours
A step-by-step user guide for every setting, linked below

Joomla: Joomla 4Joomla 5Joomla 6
J2Commerce: J2Store 4J2Commerce 6

Documentation

User Guide (Version 4) User Guide (Version 6)

Search

Keep Your Cardsave Account Running on J2Commerce 6

What the Plugin Does

Hosted Payment Page

Direct On-Site Card Form

Server-Pull Result Verification

Three-State Order Status Mapping

PAN and CVV Log Scrubbing

Admin Error Email Alerts

Surcharge Support

Geozone Restriction

Bootstrap 5 and UIkit Templates