How to Set Up WebMoney for XFile Ultra

WebMoney uses the Merchant Interface (SCI) for one-time payments. You can accept WMZ (USD) and/or WMT (USDT). Each purse has its own secret key.

Premium plugin required

WebMoney needs the WebMoney Payment premium plugin.

1. Buy WebMoney Payment on xfileultra.com

2. Refresh the license under Admin → Settings → Main → Site identity

3. Until licensed, the WebMoney section stays locked

Where to find it

Admin → Settings → Payment → WebMoney

1. Turn Enable WebMoney checkout on

2. Set Merchant name

3. Enable WMZ and/or WMT, paste each purse + secret

4. Configure Merchant URLs in WebMoney (Result / Success / Fail)

5. Optional: Payment simulator (LMI_SIM_MODE) for dry runs

6. Save settings and test

Enable for reseller (optional): shows this gateway on reseller balance top-up checkout. Member Premium upgrade and member balance top-up use the main Enable toggle only. Reseller enable needs the Reseller System premium plugin.

Fields in XFile Ultra

Field	Setting key	Notes
Enable	`webmoney_checkout_enabled`	Master checkout
Enable for reseller	`webmoney_checkout_reseller_enabled`	Reseller top-up
Merchant name	`webmoney_merchant_name`	Shown in Merchant flow
Accept WMZ (USD)	`webmoney_wmz_enabled`	Toggle
WMZ purse	`webmoney_wmz_purse`	`Z` + 12 digits
WMZ secret key	`webmoney_wmz_secret_key`	From Merchant for that purse
Accept WMT (USDT)	`webmoney_wmt_enabled`	Toggle
WMT purse	`webmoney_wmt_purse`	`T` + 12 digits
WMT secret key	`webmoney_wmt_secret_key`	From Merchant for that purse
Payment simulator	`webmoney_test_mode`	Sends `LMI_SIM_MODE`

Env overrides for secrets: WEBMONEY_WMZ_SECRET_KEY, WEBMONEY_WMT_SECRET_KEY.

Merchant URLs (critical)

The Result URL is WebMoney’s payment notification endpoint (equivalent to a webhook). It must be configured correctly or the site will not mark the order paid.

Required notification path: Result URL → /api/webhooks/webmoney

Required Merchant settings / permissions:

Enable Allow URLs transmitted in the form
Signature type SHA256
Purse secret key matching the purse you enable (WMZ and/or WMT)

In WebMoney Merchant Interface settings for your purse(s):

1. Enable Allow URLs transmitted in the form

2. Set signature type to SHA256

3. Use these URLs (also shown in admin under Merchant URLs):

Role	URL
Result URL (required notification)	`https://YOUR-DOMAIN/api/webhooks/webmoney`
Success URL	`https://YOUR-DOMAIN/api/checkout/webmoney/success`
Fail URL	`https://YOUR-DOMAIN/api/checkout/webmoney/fail`

Result URL behavior:

Handles prerequest + payment notification
Must respond plain YES to prerequest
Verifies LMI_HASH with your purse secret

Official: Web Merchant Interface

Step 1 — Merchant purses and secrets

1. Open WebMoney Merchant for the purse you will accept (WMZ and/or WMT)

2. Note the purse number (Z… / T…)

3. Set / copy the secret key used for SCI signatures

4. Configure Test vs Work mode in Merchant as appropriate for your account

Step 2 — URLs and SHA256

1. Enable Allow URLs transmitted in the form

2. Signature = SHA256

3. Set Result / Success / Fail URLs to the table above (HTTPS required)

Step 3 — Paste into XFile Ultra

1. Admin → Settings → Payment → WebMoney

2. Enable master checkout

3. Enable WMZ and/or WMT with matching purse + secret

4. Optional: turn Payment simulator on for simulated success (LMI_SIM_MODE) — this is separate from Merchant purse Test/Work mode

5. Save and run a small payment

Common problems

Prerequest / hash errors

Wrong secret, signature not SHA256, or Result URL not reachable over HTTPS.

Only one purse works

Other purse toggle off or wrong secret for that purse.

Section locked

Buy WebMoney Payment on xfileultra.com and refresh the license.

Simulator vs Merchant test mode

webmoney_test_mode only adds LMI_SIM_MODE. Merchant still has its own Test/Work setting.