Tornevall Networks Toolbox for Resurs Bank Payments
Tornevall Networks Toolbox for Resurs Bank Payments is an independent developer and merchant utility plugin—not officially affiliated with or endorsed by Resurs Bank.
This is a third-party tool built to support WooCommerce implementations that use Resurs Bank Payments as a payment provider.
⚠️ DISCLAIMER: This plugin is NOT created, maintained, or supported by Resurs Bank. It is a community/independent utility.
Current toolbox features include:
- Resurs plugin status detection for common plugin file variants.
- Installed plugin file and version display in the WooCommerce toolbox tab.
- Bitbucket-based version checking from the admin interface.
- WordPress.com plugin-page link and an “Upgrade in Plugins” shortcut when a newer Resurs release is detected.
- Part Payment Widget settings with optional shortcode/manual rendering mode.
- Admin CSS/JS loaded through proper WordPress admin enqueue hooks on the toolbox tab only.
- Support for a configurable shortcode tag, defaulting to
[resurs_partpayment_widget]. - Updated bundled Swedish translations for the current plugin name and UI text.
External Services
This plugin connects to one external service:
Service: Bitbucket REST API (Atlassian)
Endpoint: https://api.bitbucket.org/2.0/repositories/resursbankplugins/resursbank-woocommerce/refs/tags
This plugin connects to the Bitbucket REST API to check the latest available tag for the Resurs Bank Payments for WooCommerce plugin. This is used to help administrators compare the installed version with the latest available upstream version.
A request is sent only when an administrator manually clicks “Check for Updates” in the toolbox settings tab.
The request sends the current site’s server IP address as part of the normal HTTPS request to the Bitbucket API. No customer or order data is sent by this feature.
Bitbucket is provided by Atlassian. Terms of Service: https://www.atlassian.com/legal/cloud-terms-of-service Privacy Policy: https://www.atlassian.com/legal/privacy-policy
Security
This plugin implements WordPress security best practices:
- Nonce Verification: All form submissions (POST requests) are protected with WordPress nonces to prevent CSRF attacks.
- Permission Checks: All admin actions require the
manage_woocommercecapability, ensuring only authorized administrators can modify settings. - Input Sanitization: All user input is properly sanitized using WordPress functions.
- AJAX Security: AJAX endpoints validate both user permissions and nonce tokens before processing data.
License
GPLv2 or later. See LICENSE file.
Author
Thomas Tornevall — www.tornevalls.se
⚠️ Disclaimer: Not endorsed by Resurs Bank.