Sarkar IT Fake Order Protector
| 开发者 | sarkarit |
|---|---|
| 更新时间 | 2026年10月20日 19:47 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Sarkar IT Fake Order Protector helps merchants review and reduce unwanted orders on the WooCommerce classic checkout and Checkout Block.
- Validate Bangladeshi phone formats and normalize Bengali digits and country prefixes.
- Optionally reject repetitive or sequential number patterns. This heuristic does not verify ownership and can reject real numbers. It is disabled by default for new installations.
- Manage local phone and IP blocklists, including CSV import and export.
- Prevent repeat orders containing the same product within a configurable interval, using phone or IP matches. Shared IP addresses can affect different customers; staff should review disputed blocks.
- Offer WhatsApp support links when customers click them.
- Optionally save incomplete checkout details after the customer checks a separate consent box. Capture is disabled by default.
- View optional delivery history from configured courier providers after enabling external requests.
- Display product and security information in WooCommerce order screens with HPOS support.
- Optionally receive low-stock emails and daily dismissible admin reminders, with a paginated inventory list and product edit links. Stock Alerts are off by default and only include published products or variations managing their own stock.
安装:
- Install and activate WooCommerce.
- Upload the plugin ZIP using Plugins > Add New > Upload Plugin and activate it.
- Use WooCommerce 8.9 or newer with either the classic [woocommerce_checkout] shortcode or the WooCommerce Checkout Block. For block checkout recovery, keep its Additional information block so the optional consent checkbox can appear.
- Open Sarkar IT Protection > Settings and configure the relevant tabs.
- Before enabling checkout recovery, update your privacy policy and choose a retention period. Customer consent is required before capture.
- Before enabling courier checks, review the service terms and privacy policies, obtain credentials and explicitly enable external requests in Courier API Settings.
- For optional inventory reminders, open Sarkar IT Protection > Stock Alerts (also linked from Settings), enable the switch and save. The default threshold is 20 units or fewer; the recipient defaults to the WordPress administration email.
屏幕截图:
常见问题:
Does this support Checkout Blocks?
Yes. Phone validation, IP/phone blocklists and duplicate checks run through the Store API before payment. Block checkout has an optional recovery consent field in Additional information and uses the same local recovery dashboard. The protection also runs when browser JavaScript is bypassed. Third-party checkout blocks that bypass the WooCommerce Store API require their own integration.
Are courier services required?
No. Phone validation, blocklists and repeat order checks work locally. Courier providers may require separate paid accounts.
Does it contact customers automatically?
No. Staff can click Call and WhatsApp links in the recovery dashboard.
How are proxy IPs handled?
The default is server REMOTE_ADDR. Configure a trusted proxy on your server or use the afop_client_ip filter with trusted proxy validation. Never trust arbitrary forwarded headers.
更新日志:
1.10.0
- Refresh the plugin backend with Sarkar IT colors, modern settings tabs, accessible switches, responsive forms and clearer inventory notifications.
- Add optional Stock Alerts with an off-by-default switch, configurable threshold and email recipient.
- Add a paginated low-stock products/variations menu with current quantities, SKU and edit links.
- Add daily per-user dismissible admin notices and a guarded daily email digest.
- Use background stock-change checks and WP-Cron; include only products managing their own stock.
- Prefix the main plugin class with AFOP_ and update its singleton references.
- Clarify all external destinations, transmitted data, lookup triggers and provider terms/privacy links.
- Add the same courier disclosures beside the administrator opt-in setting.
- Remove FraudBD integration, credentials inputs and network requests.
- Replace live phone-number connection tests with a local saved-credentials check.
- Require both Steadfast credentials and reject unsupported provider identifiers.
- Point Plugin URI to the live Sarkar IT plugin information page.
- Use the plugin-specific source page as Plugin URI, separate from the Sarkar IT author website.
- Add server-side Store API protections for Checkout Blocks, including express order submissions.
- Add an optional native recovery consent checkbox and block data-store integration.
- Log and convert block orders; prevent an order retry from matching its own history.
- Ignore failed/cancelled/refunded orders for duplicate checks.
- Require WooCommerce 8.9 or newer for native additional checkout fields.
- Cache blocklist checks within each request and invalidate after changes.
- Allow blocklist management when enforcement is disabled.
- Validate write results instead of reporting failed changes as successful.
- Bound checkout recovery field lengths to avoid database truncation.
- Verify operation on a local MySQL site with HPOS enabled.
- Standardize Sarkar IT branding and GPL metadata.
- Preserve settings on other tabs when saving.
- Include local icons in place of external CSS.
- Add customer recovery consent and merchant external service opt-in.
- Bind recovery records to server sessions and limit capture requests.
- Add cleanup, privacy policy suggestions and recovery export/erase.
- Secure default IP handling, CSV cells and blocklist values.
- Escape dynamic display text and constrain Pathao hosts.
- Load modules only when WooCommerce is active and remove unsupported Blocks claims.