Safepay Checkout for WooCommerce

session-destroysession() from the failure path in processpayment(). Premature session destruction was causing genuine session expiry errors on retry attempts. WooCommerce now manages its own session lifecycle post-redirect. Fix: Removed obstart() / obendflush() from processpayment() and the webhook handler. Output buffering inside WooCommerce AJAX hooks can corrupt responses on certain hosting environments. Fix: Added iswperror() checks on all wpremotepost() and wpremoteget() calls in SafePayApiHandler. Metadata endpoint failure is now non-blocking and will not abort the checkout flow. Improvement: Added structured [Safepay] error logging across all API failure paths. Every failure now logs the HTTP status code and full response body to the WooCommerce log, making environment-specific issues diagnosable in minutes. Improvement: Changed merchantsecretkey and merchantwebhooksecret admin fields from type text to type password. API credentials are no longer visible in plain text in the WP Admin UI. Improvement: processpayment() now returns array('result' = 'failure') with a wcaddnotice() error on all failure paths instead of falling through silently. Added WooCommerce Blocks sup