How do I resolve a WooCommerce / Joomla ITN issue?

How do I resolve a WooCommerce / Joomla ITN issue?

When attempting a transaction, and the ITNs seem not to be going through to your application, go to https://developers.payfast.co.za/docs#ports-ips and unblock / whitelist the IPs and ports listed. 


Should the issue persist, please check your cPGuard Web Application Firewall (WAF) and disable the following two options on the WAF integration settings:

  • RBL Protection

  • WEBSHELL Protection

Once this has been disabled, please attempt your transaction again, your ITNs should be going through.


The reason for the aforementioned workaround is due to the cPanel update on their cPGuard application having been set to view incoming ITNs from WooCommerce (& Joomla) as brute force phishing attacks. This is due to a pattern coming from PayFast for your ITN. 

As this is the case, disabling the pattern blocker on your cPGuard will allow ITNs to push through and thus complete your transaction.

Please note: This is a workaround and we are endeavouring to find a complete solution for this issue.


    • Related Articles

    • Why am I not receiving the ITN callback?

      Below are some of the reasons why you are either not receiving your ITN callback or it appears as if you're not receiving the ITN callback: You're ITN page is unreachable The URL specified by your notify_url variable could be unreachable. To test ...
    • Where is my 'base Joomla folder'?

      This is the root of your Joomla installation. Where this is, depends on what system you are using and where you are hosting. The easiest way to find this though would be to look for the Joomla directory structure. The base (or root) Joomla folder ...
    • Why are there no WooCommerce subscriptions showing on PayFast?

      To see your WooCommerce Subscriptions on PayFast, you will find them under Reports > Customer Saved Cards on your Payfast dashboard. WooCommerce Subscriptions do not make use of PayFast’s Subscriptions, but rather uses our tokenization feature, in ...
    • Do I need to set the ITN url on my account?

      When using the one of our payment modules, the ITN url is set automatically and you do not need to set it on your account manually.
    • What causes the ITN security check errors?

      Invalid signature This would be caused by the incorrect use of the passphrase, or the incorrect order of variables in the string that is MD5 hashed to generate the signature. Although this signature is generated in the same way as the signature on ...