Npcink Pay Refund adds a WordPress admin refund console for merchants who need to query and refund Alipay and WeChat Pay orders by payment order number.
The plugin is not a checkout gateway and does not create payments. It focuses on controlled refund operations after a payment has already been created by your existing payment flow.
Features:
- Query Alipay and WeChat Pay orders from the WordPress admin.
- Run full refunds for eligible paid orders.
- Restrict refund actions to administrators and selected refund operators through a dedicated capability.
- Store refund records in a custom WordPress database table.
- Keep payment secrets in a separate non-autoloaded option.
- Prevent duplicate refund submissions with order-level locking.
- Export refund records for internal review.
- Check local payment configuration before running live refund operations.
Third-party services
This plugin connects to external payment APIs only after an administrator configures the related merchant credentials and an authorized WordPress user performs a query, refund, or configuration check.
Alipay:
- Service: Alipay Open Platform / Alipay EasySDK.
- Endpoint used by the SDK: openapi.alipay.com.
- Data sent for order queries: Alipay app credentials and the payment order number entered by the operator.
- Data sent for refunds: Alipay app credentials, payment order number, refund amount, refund request number, and the refund reason entered by the operator.
- Service information: https://open.alipay.com/
WeChat Pay:
- Service: WeChat Pay API v3 through the official wechatpay/wechatpay PHP SDK.
- Endpoint used by the SDK: official WeChat Pay API v3 endpoints, including refund and transaction APIs.
- Data sent for order queries: WeChat Pay merchant credentials and the payment order number entered by the operator.
- Data sent for refunds: WeChat Pay merchant credentials, payment order number, refund number, full refund amount, and the refund reason entered by the operator.
- Service information: https://pay.weixin.qq.com/
By default, merchant private keys and public keys are stored in the site’s WordPress database options. Keep access to administrator accounts, backups, and database exports restricted.
For deployments that keep secrets outside the database, define NPCINK_PAY_REFUND_ZFB_PRIVATE_KEY, NPCINK_PAY_REFUND_ZFB_PUBLIC_KEY, NPCINK_PAY_REFUND_WX_CERT_KEY, and NPCINK_PAY_REFUND_WX_PLATFORM_PUBLIC_KEY in wp-config.php. These constants take precedence over saved option values and are never written by the settings form.