Boxcoin – Crypto Payment Script

✨ Key Features

• Multi-Chain Adapters: Pluggable support for popular networks/tokens (e.g., BTC, ETH/ERC-20, BNB/BEP-20, TRON/TRC-20, and more via drivers).
• Invoices & QR Codes: Create payment requests with amount, memo, expiry window, and auto-generated QR.
• Live Status & Confirmations: Track mempool, required confirmations, “paid / confirmed / overpaid / expired” states.
• Exchange-Rate Locking: Optional fiat quoting (USD/EUR etc.) with refresh windows and drift tolerance.
• Webhooks & Callbacks: Signed callbacks for status changes; retry policies; secret rotation.
• Wallet Modes: Non-custodial (xpub/derivation) or hot-wallet via node/provider; cold-storage friendly workflows.
• Address Management: HD derivation (gap limit), unique deposit addresses per invoice/customer.
• Refunds & Disputes: Refund addresses collection, partial refunds, and audit notes.
• Merchant Dashboard: Orders, addresses, payouts log, webhook history, and CSV exports.
• Developer API: REST endpoints for invoices, rates, and webhooks; API keys with scopes and rate limits.
• Compliance Helpers: Notes fields for order provenance, address allow/deny lists, optional IP geo-rules.
• Internationalization: Multi-language UI, multi-currency pricing, RTL-ready templates.
• SEO & UX: Clean URLs, structured metadata hooks, responsive invoice pages for mobile checkouts.
• Extensible: Event bus, service container, and driver interface for coins, rate oracles, nodes, and SMS/email.

⚙️ Technical Stack

• Backend: PHP 8.x (Laravel-style routing, middleware, queues, policies)
• Frontend: Blade/Twig templates (or headless JSON for SPA)
• Database: MySQL/MariaDB (InnoDB, UTF-8MB4)
• Cache & Queue: Redis for sessions, jobs, and rate-limit counters
• Node/Provider Options: Self-hosted nodes or third-party RPC providers (configurable per network)
• Server Requirements: Nginx/Apache; PHP extensions: pdo_mysql, mbstring, openssl, json, xml, ctype, curl, zip
• Build Tools: Composer, Node.js (Vite/Mix) for assets; optional Supervisor for workers

🧩 Installation Guide

1. Provision Server: Create a UTF-8MB4 database; enable PHP extensions; install Composer & Node.js.
2. Deploy Code: Upload files → run composer install --no-dev.
3. Environment: Copy .env.example → .env; set APP_URL, DB, cache/queue, mail, and per-network node/RPC URLs.
4. Key & Storage: php artisan key:generate and php artisan storage:link.
5. Migrate & Seed: php artisan migrate --seed to create tables, roles, sample coins, and demo rates.
6. Rates & Workers: Configure rate oracle (env); start workers php artisan queue:work; add cron for schedule:run.
7. Webhooks: Add your callback URL and secret; verify signature logic on your app.
8. Go Live: Point domain to public/, enable HTTPS + HSTS/CSP, and test invoices end-to-end on testnets first.

📦 Deliverables

• Full PHP source (gateway core, invoice engine, drivers API)
• Admin/Merchant templates (invoices, orders, webhooks, exports)
• SQL migrations & seeders (coins, rates, roles)
• REST API docs & Postman collection (sample)
• Sample .env.example with provider placeholders
• Quick-start and developer notes (security, scaling, drivers)

📱 Supported Platforms

• Web Admin & Checkout: Chrome, Firefox, Safari, Edge (latest)
• Server OS: Ubuntu/Debian/CentOS recommended; Windows Server compatible
• Mobile: Responsive invoice pages for iOS/Android wallets & dApps browsers

🧠 Notes

• License: Distributed under the GPL for lawful study, modification, and redistribution per GPL terms.
• Customization Tips: Keep network logic in driver classes; isolate rate oracles; expose confirmation rules and expiry windows in admin settings.
• Security: Run over HTTPS; rotate API keys; enable webhook signatures; consider watch-only/xpub where possible; limit hot-wallet balances; back up seeds securely.
• Compliance: Merchants are responsible for local KYC/AML/tax obligations, sanctions screening, and consumer disclosures.
• Performance: Use Redis, OPcache, and pagination; offload chain polling to queues; prefer WebSocket providers where available.
• SEO Assurance: Clean URLs, meta tags, OG/Twitter cards, structured data hooks for public donation/checkout pages; fast LCP/CLS for better conversions.

👨‍💻 Original Developer Credit

We acknowledge the original developer and marketplace publisher as the authoritative source for Boxcoin’s concept and roadmap.
For provenance and official updates, please consult the original listing on
CodeCanyon (or the developer’s official site).

🔒 Disclaimer

This is a GPL redistribution for education, testing, and compliant use under the GPL. We are not the original authors and do not claim endorsement or affiliation.
All trademarks and brand names belong to their respective owners. Before commercial deployment, verify third-party dependency licenses, follow marketplace terms, and perform thorough security and compliance reviews.