Pay4All Shop - Simple order forms with TWINT & STRIPE Payment
| 开发者 | pay4all |
|---|---|
| 更新时间 | 2026年7月29日 18:00 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Pay4All Shop is a simple and lightweight order form plugin designed for small shops, wineries, caterers, takeaway restaurants, and associations.
It was intentionally created as a simpler alternative to WooCommerce: create an order form, add your products and delivery methods, assign payment methods to each delivery option, and embed the form anywhere on your website using a shortcode.
Available in French, German, Italian, and English.
All customer-facing text can be customized separately in all four supported languages: French, German, Italian, and English.
安装:
- Upload the plugin to
/wp-content/plugins/pay4all-form/or install via Plugins › Add New. - Activate the plugin from the Plugins menu.
- Open Pay4All Shop in the admin sidebar.
- Create your products, delivery methods, then a form.
- Copy the form shortcode into any page.
屏幕截图:
常见问题:
Do I need WooCommerce?
No. Pay4All Shop is standalone. It does not depend on WooCommerce in any way.
Does it support online payments?
The free version supports manual payments only (pickup, on delivery, bank transfer, TWINT instructions). Automated TWINT payments are available via Pay4All Pro.
Is the plugin GDPR-friendly?
Yes. Customer data is included in WordPress's Tools › Export / Erase Personal Data workflow.
Will my data be deleted if I uninstall?
No, unless you explicitly enable Réglages › Données › Supprimer les données lors de la désinstallation.
Does the plugin use cookies?
No HTTP cookies are set by the plugin. When the shopper ticks the « Se souvenir de mes informations pour ma prochaine commande » checkbox on the customer step, their contact fields are stored in the browser's own localStorage (client-side only, never uploaded to the server, one-year retention, scoped per form). Unticking the checkbox and clicking Suivant — or the browser's Clear site data action — wipes the entry immediately. Nothing is stored when the checkbox stays off.
How do virtual products work?
When you create a product of type Virtual, you upload one file per product. The file is stored in wp-content/uploads/p4all-virtual/, protected by an automatically generated .htaccess (deny from all). After purchase, the customer's e-mail contains a one-time download link served by the plugin endpoint (?p4all_dl={token}). The link is valid for 60 days.
How does Out of stock work?
Tick the Rupture de stock checkbox on a product. The product stays visible in the form so the customer still sees what you usually offer, but the quantity field is greyed and disabled. A red badge labels the product as out of stock. Server-side validation rejects any tampered submission that tries to order an out-of-stock item.
How does Stock management work?
Tick Manage stock on a product and enter the quantity available. From that point on:
- Each order decrements the stock by the quantity ordered (one decrement per ticket / per unit). The decrement happens as soon as the customer validates the order, regardless of the payment status.
- The order form prevents the customer from ordering more than what is left — the quantity input's max attribute is capped at the stock available, and a server-side check rejects any tampered submission.
- When the stock reaches 0, the product is automatically flagged out of stock: it stays visible but cannot be ordered.
- When an order is deleted from the admin (definitive delete, not just trashed), the stock is restored for every product still in the order. Status changes (paid, cancelled…) do NOT restore stock; only deletion does.
- If you set a Notify me when stock reaches threshold in Settings › General (under the shop address), an e-mail alert is sent to the notification address as soon as a tracked product crosses the threshold downwards after a sale.
- A Stock column in the products admin list shows the current quantity (or
—when stock management is off), highlighted in orange below the threshold and red when out of stock.
更新日志:
2.9.0
- Translations validated and shipped for French (fr_FR), German (de_DE) and Italian (it_IT). All customer-facing and admin-facing strings now resolve to the merchant's active locale via the bundled
.mofiles. No configuration change required.
- i18n refactor - source strings converted to English. Every user-facing string in the plugin code is now in English, matching the WordPress i18n convention (
msgid= English source,msgstr= translation). Roughly 1,180 gettext calls were converted from FR msgid to EN msgid. Full translation packs are bundled and validated for French (fr_FR), German (de_DE) and Italian (it_IT) under/languages/. - Config-like constants cleanup. The historic per-locale inline defaults inside
Schema::PAYMENT_DESC_DEFAULTS,Schema::CONFIRMATION_MESSAGES_DEFAULTS,Mailer::email_defaults()andMailer::abandoned_cart_email_defaults()are replaced by a single English source array feeding through gettext. The merchant per-language overrides in Settings still win over the shipped translation, so custom copy is preserved on upgrade. - No behaviour change, no configuration change, no manual action required.
- Classement des paiements.
- Variable-product bug fix : options (variations + single-mode add-ons) now render as checkboxes with JS-enforced mutual exclusion - the customer can click their picked option again to unselect it. Uncheck is blocked when the group is marked « required » (no way to end up with zero selection). Fixed internal
input[type="radio"]:checkedselectors left stale that were preventing the price + summary recompute after the switch to checkboxes. - UI : « - » separator between the label and the price in both the variation dropdowns AND the variation buttons (« Grande - CHF 50.- »). Add-on button padding lowered to
0 15px(was8px 12px). Labels forced to 12px inside the plugin wrapper to beat Elementor kits that raise every<label>to 16px globally.
- UX : the running Total row and the « Suivant » button on step 1 (products) are now pinned to the bottom of the viewport while the shopper scrolls the product list. Especially useful on catalogues with many products - the shopper can pick a couple of items at the top of the list and validate the step without scrolling to the very bottom first. The pinned bar releases seamlessly (no border / no shadow) once the shopper reaches the natural end of the list, so short forms are unaffected.
- New VAT (TVA) support. A dedicated « TVA » settings tab lets the merchant turn VAT on globally, define a default rate (defaults to 8.1 % - the current Swiss standard rate) and see every custom rate at a glance. When VAT is on, all prices displayed on the order form are treated as tax-inclusive (TTC) and the summary + confirmation e-mails render a « incl. VAT X% » breakdown grouped by rate.
- Per-item VAT rate overrides. Products, individual variations, add-on options and delivery methods can each carry their own VAT rate override via a click-to-edit badge next to their price - useful for shops mixing food (2.6 %) and non-food (8.1 %), or a delivery fee taxed differently from the goods.
- Custom rates table on the TVA tab. Every custom rate currently in use across products, variations, options and delivery modes is listed with per-category usage counts (e.g. « 3 produits, 1 option ») and an inline « Remplacer » button to bulk-replace all occurrences of a rate with a new one - handy when a statutory rate changes.
- Dashboard step for VAT setup added to the onboarding checklist.
- Full FR / EN / DE / IT translations for every new UI string.
- New Grid column count for the product picker. When the merchant picks the « Grille » layout, a new dropdown lets them choose 1 / 2 / 3 / 4 columns (default 2). Smartphones always drop to 1 column regardless of the pick, so the mobile experience stays readable without a per-form tweak.
- Enhancement : product thumbnails on the order form now request the WordPress
medium_largesize (768 px wide, aspect ratio preserved) instead ofmedium(300 × 300). Retina and larger cards render crisper ; the standardsrcsetstill picks a smaller size on tighter viewports so bandwidth stays under control.
- New Multi-variable products. Products can now expose multiple variation groups (for example « Bottle size » + « Vintage year »), with per-group required / optional flag, per-group stock management, per-variation price delta and per-variation description. Groups carry a customer-facing « Title » AND a short admin-facing « Label » — the latter is what shows up in orders, invoices, admin lists and the variation-stock matrix header.
- New Product options (add-ons). Each product can offer optional extras grouped in named add-on groups (single-choice or multi-choice, with or without an inline text field per option). Each add-on carries its own price, optional per-quantity multiplier and optional required customer message. Add-ons appear on the order form, on the summary, in emails and on the admin order screen.
- New Delivery hours & locations management. Global settings screen for per-weekday opening hours (multiple slots per day, per-day « Closed » toggle), an ordering-lead-hours threshold, a slot granularity (15 / 30 / 60 min), a holidays / vacation date range picker with tag UI, and a delivery-postal-codes allow-list. Delivery methods can opt in to slot booking : the order form then shows a per-mode calendar that grays out closed days / holidays / dates before the lead time, plus a time-slot dropdown filtered by the day's opening hours. The customer's NPA (via the new « Postal code / NPA » field type) is checked against the allow-list — non-covered addresses see the delivery mode disabled with a « Nous ne livrons pas à cette adresse » notice.
- Full FR / EN / DE / IT translations for every new UI string introduced by the three features above.
- The bottom « Publier / Mettre à jour » button on the form editor now shows the correct label depending on the post status (« Publier » while the form is still a draft, « Mettre à jour » once it's live) — matching WordPress core's own publish metabox behaviour.
- Fix : clicking the bottom save button no longer triggers the browser's « Les modifications que vous avez apportées ne seront peut-être pas enregistrées » warning. The button now delegates to WordPress's own
#publishcontrol, so the full save pipeline (beforeunload cleanup, autosave lock, post-save redirect + notice) runs as expected.
- Fix : the Age Verification companion plugin is now correctly detected under its current slug (
pay4all-age-verification). Previously the stalepay4all-agereference caused the greyed teaser + « Install from WordPress » button to keep showing on the product editor and the Add-ons page even when the plugin was already installed and active. - Rename : the Add-ons card labeled « Pay4All Age » is now « Pay4All Age Verification » to match the actual plugin name.
- New WordPress dashboard widget « Pay4All SHOP ». Adds monthly / yearly / lifetime order counts + revenue, plus a backlog block (new orders to process, orders in preparation, active products, published forms) to the main /wp-admin dashboard. Every tile is clickable and jumps to the matching admin screen. Values reuse the same aggregation as the plugin's own dashboard so the two views cannot drift.
- New Shortcode video tutorial. A short MP4 walkthrough is now reachable from three places : the Help page (section 2, step 4), the Forms list (next to Copier in the Shortcode column), and the Shortcode metabox on the form edit screen. Opens in a lightweight in-page modal (native , no external service).
- New Click-to-copy on the Shortcode metabox input : clicking the field copies the shortcode to the clipboard and flashes a green « Copié ! » badge for confirmation. « Copier » button behaviour on the list is unchanged.
- Fix : the Comments admin menu no longer shows a stray red « 0 » badge when Pay4All Shop is active. The plugin's own menu-badge CSS was leaking onto WordPress core's
.awaiting-modelement and overriding the.count-0 { display:none }rule — badges are now scoped to a dedicated.p4all-shop-badgeclass. - Fix : Commentaires site-wide counters now correctly subtract our custom
p4all_order_notecomment_type (previously the filter existed but did nothing). Cached via the object cache with automatic invalidation on note create / delete / status change.
- Security — CSV formula injection blocked. Order fields written by anonymous visitors (name, address, comment, product titles) are now prefixed with an apostrophe when they start with
=,+,-,@, TAB or CR before being written to the CSV export, so Excel / LibreOffice never evaluate them as formulas (CWE-1236). Real XLSX export was already safe (inline strings) and is unchanged. - Security — rate-limit on public form submission. The
p4all_form_submitendpoint (formerly unmetered beyond a honeypot + 3s minimum-time trap) is now capped at 5 valid POSTs per minute per IP + form via a transient counter. Blocks scripted mail-bombing of the merchant's SMTP without breaking the honest UX (filterp4all_form_submit_rate_maxto override). - Security — anti-spam timestamp is now mandatory. Previously, a missing / zero
p4all_tssilently bypassed the minimum-time check ; the field is now required (the same JS that renders the form always sets it) so bots can no longer skip the wait entirely. - Security — hardened client IP detection.
META_CLIENT_IPnow defaults toREMOTE_ADDRand only acceptsHTTP_CF_CONNECTING_IPwhen Cloudflare'sCF-RAYsignature is present, preventing trivial WAN-side spoofing that used to let a visitor forge the IP recorded on their order. Non-Cloudflare proxies can be trusted via the newp4all_form_trust_forwarded_forfilter. - Packaging : leftover
languages/pay4all-form-en_US.po.bakremoved.
- New Bank transfer payment method with a per-language description block. The merchant edits the IBAN / BIC / beneficiary in Réglages › Paiement under each language accordion — the input is a multi-line textarea with a fake-data placeholder so an empty field at least shows the expected shape at checkout. The description is rendered with
white-space:pre-wrapat checkout (so the IBAN / BIC / beneficiary stay on their own lines) AND injected into the customer confirmation e-mail in the language the customer used to place the order (resolved via the_p4all_langmeta persisted at submission time). - Internal :
Mailer::payment_instructions()now takes an explicit$langargument and delegates toSchema::payment_description($method, $lang)for every method — so any future manual method inherits the same per-language override chain (per-lang → primary-lang → localised default → FR default). - Translations : « Virement bancaire » label already shipped in the 2.1.0 batch — de : « Banküberweisung », it : « Bonifico bancario », en : « Bank transfer ». The multi-line default templates live in
Schema::PAYMENT_DESC_DEFAULTS['bank_transfer']as per-language constants.
- New Per-form photo size picker on the form editor (Affichage › Taille). Choose Petite (60 px), Moyenne (120 px), Grande (200 px) or Personnaliser… — the last one reveals a pixel input clamped between 20 and 1000. In List layout the value constrains the photo's width; in Grid layout its height. Implemented via two CSS custom properties (
--p4all-photo-w,--p4all-photo-h) set on the form wrapper, no inline<style>block emitted. - Documentation : previously introduced « Remember my information » checkbox on the customer step is now clearly listed under Core features (persisted in
localStoragefor 1 year, per form, no HTTP cookie).
- New « Remember my information » opt-in checkbox on the customer step. When ticked, the customer's contact fields are persisted in the browser's own
localStorage(scoped per form, retention 1 year, no HTTP cookie set) and pre-filled on the next visit. Unticking + clicking Suivant clears the memory. Ships with FR / DE / IT / EN translations. - Pay4All Age integration : the « Vérification d'âge » step now auto-skips when the current cart carries no age-restricted product. The customer no longer has to click Suivant on an empty age-check step just because the form's product catalogue happens to include an adult item they didn't add to their order. Implemented via a generic
data-p4all-skip="1"contract on any.p4all-step, so companion plugins can use the same escape hatch. - Checkbox alignment polish : the standalone « Remember me » checkbox uses the same inline-flex layout as the existing checkbox fields (defensive against themes that turn every input into
display:block, e.g. Elementor / Astra Ecommerce).
- Breaking change — five features moved to a separate Pay4All Pro plugin. The free version keeps the form builder, products, deliveries, virtual downloads, orders and e-mails; the following move out:
- Product filter widget on the public form (categories / brands / sort dropdowns).
- Categories taxonomy (
p4all_product_cat) — including per-language names and per-category quantity rules (min / max / multiple / exact). - Brands taxonomy (
p4all_product_brand) — same shape as categories. - Abandoned cart capture, recovery e-mail and admin page.
- Ticket product type (QR codes for events) — including the Billets admin page and the public
/p4all-ticket/…validation URL. - Automatic clean-up on upgrade — activating 2.0.0 once drops the
wp_p4all_ticketsandwp_p4all_abandoned_cartstables, deletes every term inp4all_product_cat/p4all_product_brand, deletes every ticket post, and un-schedules the hourlyp4all_abandoned_cart_tickcron event. Idempotent, guarded by an option so re-installs skip it. - XLSX export removed on both the orders CSV screen and the products import/export screen. CSV export is unchanged. XLSX moves to Pro.
- Product edit screen : the Billet (QR code) option is removed from the product-type dropdown. Existing tickets keep rendering as Physical until edited.
- Settings › General : Délai d'envoi du mail d'abandon de panier setting removed (no longer used).
- Help page : reworded to reflect the trimmed feature set.
- Internal : new
Domain\Languagehelper replacesDomain\Category::current_language()at every call site.
- New Content picker next to each URL field — a « 🔗 Rechercher » button opens a mini search panel that queries pages, posts, WooCommerce products, every public custom post type, and media attachments (PDFs, images, mp3…). Clicking a result drops the full URL into the input. WPML / Polylang are detected automatically: on the DE tab the search only returns DE pages, on IT only IT, etc. Media stays language-agnostic (a PDF is the same file in every locale). AJAX endpoint requires
edit_posts+ a nonce. - Full DE / IT / EN translations for the eleven new admin strings introduced by the « Learn more » link, the picker, and the photo lightbox (labels, placeholders, help text, status messages).
- Plugin Check compliance polish —
phpcs:disable/phpcs:enableblock around the$_FILESsanitisation inMetaBoxes::store_virtual_upload()(nonce is verified upstream insave()); documented ignores for WPML's publicwpml_switch_languagehook (must be invoked verbatim to trigger their language switcher) and for the intentionalsuppress_filterson the media query used by the picker (language-agnostic search is the product decision).
- New « Learn more » link per product — two new fields (URL + link label) on each language tab of the product edit screen. When the URL is set, a link is rendered under the short description in the order form and opens in a new tab. The Link label field is pre-filled with a language-specific default on every tab (FR « Découvrez en plus… », DE « Erfahren Sie mehr… », IT « Scopri di più… », EN « Learn more… ») regardless of the admin's own locale; the merchant is free to overwrite any of them. Same default kicks in on the front-end so a visitor in DE (or IT / EN) always sees the label in their language, even when the merchant left the field blank. URLs are validated at save with
esc_url_raw()(http / https / mailto / tel only,javascript:rejected). - New Product photo lightbox — clicking the product thumbnail on the first step of the form now opens the full-size photo in an overlay. Keyboard-accessible (Enter / Space to open, ESC to close), non-destructive to the form (body scroll is temporarily locked). No dependency added; pure vanilla JS.
- Security hardening — three fixes triggered by an internal security review:
- Path traversal fix in the virtual-download endpoint (
?p4all_dl=). The customer-facing streamer now rejects any filename containing directory separators,.., or NULL bytes, and enforces arealpath()boundary check that guarantees the resolved path lives inside the private uploads folder. Protects against manipulated_p4all_virtual_downloadsmeta on stores with a compromised admin account or a SQL injection introduced by a third-party plugin. - X-Frame-Options / CSP frame-ancestors now emitted on every front-end page rendering the
[pay4all_form]shortcode. Default:SAMEORIGIN— blocks brand impersonation via cross-origin iframes and closes the per-domain-licence bypass some agencies used by iframing a licensed shop on many client sites. Configurable via a new Réglages › Général option (sameorigin/deny/off). - Virtual-product upload allowlist — merchant-configurable list of accepted file extensions (default:
pdf, mp3, mp4, m4a, epub, zip, jpg, jpeg, png, gif, svg, doc(x), xls(x), ppt(x), txt, csv, html). Blocks executable uploads (.php,.phtml,.exe,.htaccess…) BEFOREwp_handle_upload()runs. Set the option to an empty value to restore the legacy behaviour of allowing anything. The private uploads folder is now also guarded by aweb.configdeny rule for IIS hosts, in addition to the existing.htaccess. - Admin menu badge polish — the "Commandes" count badge next to Pay4All SHOP now uses the same red (
#d63638) and compact sizing as WordPress core's update available pill, and stays visible on every admin screen (previously the CSS only loaded on Pay4All Form pages, so the badge disappeared on the Dashboard). - Admin menu i18n — sub-entries Paramètres and Licences under Pay4All AGE, plus the WooCommerce entry-point label, are now localised in DE / IT / EN based on the admin locale.
- KYC tab visual polish — the accordion widget on Réglages › Protection des mineurs now matches the visual language of the Paiements tab (rounded card,
▾chevron, language pill), and the accordions honour the languages selected in Réglages › Langue (so a DE-only shop only shows the DE accordion here). - Plugin Check clean-up — nonce comments,
sanitize_text_field( wp_unslash() )on remaining$_POSTreads,esc_url()on the licence page form action,wp_delete_file()in the KYC storage purge, and Plugin Check ignore blocks documented for WPML hooks (wpml_element_trid,wpml_get_element_translations) that intentionally do not carry the plugin prefix.
- New Client-side product filtering — an optional filter bar can be enabled per form (Form editor › Affichage des produits › Afficher les filtres). Customers can narrow the product list on the first step by category, brand and sub-taxonomies, with an optional item-count next to each option. Fully client-side, no page reload.
- Multilingual category / brand labels — every category and brand can carry a customer-facing name in each activated language, plus a « Tous les… » label for filter dropdowns. Empty fields fall back to the WordPress canonical term name. Drag-and-drop reorder from the taxonomy list.
- Minimum order amount is now per-form — the Montant minimum de commande panel has moved from Réglages › Commandes to each form's edit screen (right above Affichage des produits), so different forms can have different thresholds. Includes the per-language error message (with
%sfor the amount) and live validation on the product step: the Suivant button is blocked and a red alert appears as soon as the subtotal drops below the floor. Existing global setting is honoured as fallback for forms that haven't set their own. - Compatibility with Pay4All Age plugin improved.
- New Compatible with Pay4All AGE Protection of minors (age verification) — enable per product with the Requires age verification checkbox on the product edit screen. At checkout the customer scans a QR code, opens a mobile page and captures their ID (recto + verso) and a selfie; the order cannot be validated until every required slot is present.
- Cross-device flow — the QR code embeds a short-lived session token (20 min); the desktop cart polls the server and unlocks automatically as soon as the mobile capture is complete, without asking the customer to reload.
- Encryption at rest — every photo is encrypted with AES-256-GCM using a per-order subkey derived via HMAC-SHA256 from a master key stored in
wp-content/uploads/p4all-secure/kyc.key(outside the database backup). Ciphertexts live in a private folder guarded by.htaccess+index.php+web.config. - Admin-only decrypted view — a Protection des mineurs section on the order page streams the decrypted photos through a nonce-protected admin endpoint (never served publicly, never written back to disk).
- Yellow warning banner in the admin new-order e-mail when the order requires age verification, with a Voir la commande button that links straight to the order edit screen.
- Auto-purge — deleting an order also deletes its KYC directory. A daily cron purges session buckets older than 24 h.
- All KYC-related strings translated in FR / DE / IT / EN.
- New Timezone setting in Settings › General — surfaces the WordPress global timezone selector for admins who don't know where to find it. Defaults to Europe/Paris when not configured. Modifying it updates the standard WP
timezone_stringoption. - Dates in Pay4All Shop › Abandon panier admin page now use
get_date_from_gmt()for accurate conversion of UTC-stored timestamps to the site's configured timezone. - Renamed menu label from Abandon de panier to Abandon panier for compactness; sub-menu translated in all four languages.
- Plugin Check / WP.org compliance: escaped
$cart_idoutput in the abandoned-cart view dialog, and addedWordPress.DB.PreparedSQL.InterpolatedNotPrepared+PluginCheck.Security.DirectDB.UnescapedDBParameterignores on thewp_p4all_abandoned_cartscustom-table queries (table name built from$wpdb->prefix+ literal suffix).
- New Abandoned cart capture and recovery — when a customer fills the contact-info step (with their e-mail) and clicks Next but never validates, the cart is stored. A recovery e-mail with a one-time link is automatically sent after a configurable delay (default 10 days). Clicking the link returns the customer to the form with all their items, contact fields, delivery and payment method already pre-filled.
- New admin page Pay4All Shop › Abandon panier (above Billets) — lists every captured cart with filters (pending / e-mail sent / recovered / converted), totals, dates and a delete action.
- New setting Réglages › Général › Délai d'envoi du mail d'abandon de panier (jours) — 0 disables, default 10. Carts older than 90 days are automatically purged (GDPR).
- New e-mail template Abandoned cart recovery in Réglages › E-mails, editable per language (subject / heading / intro / outro), with
{site_name},{customer_firstname},{customer_email}and{recover_url}placeholders. - GDPR exporter and eraser hooks include abandoned-cart rows in WordPress's Tools › Export / Erase Personal Data.
- Hourly cron
p4all_abandoned_cart_ticksends due recovery e-mails and purges old rows.
- New Hide a product checkbox on the product edit screen — the product is omitted from the form entirely (no badge, no greyed-out field). Server-side rejects any tampered order containing a hidden product. Useful for archiving seasonal items without deleting them.
- Stock-related checkboxes reordered for clarity: Hide this product → Out of stock → Manage stock (+ quantity field).
- New Stock management (optional, per product) — tick Manage stock on a product to track its quantity. Stock is decremented at every order (one unit per ticket / per item), the customer cannot order more than what is left, and the product is automatically flagged out of stock when the stock hits 0.
- Stock restored on order deletion — deleting an order definitively (from trash or via the delete button) restores the stock of every product still present in that order. Status changes (paid, cancelled, etc.) do not restore stock; only deletion does.
- Low-stock e-mail alert — set Settings › General › Notify me when stock reaches (under the shop address) to a non-zero threshold; an alert is e-mailed to the notification address each time a tracked product crosses the threshold downwards after a sale.
- New Stock column in the products admin list — shows
—when stock management is off, the current quantity otherwise (orange if at or below threshold, red0 Out of stockwhen empty).
- New product type Virtual — upload one downloadable file per product, customer receives a one-time link valid 60 days, served by the plugin's protected endpoint (files stored in a private folder with deny-all
.htaccess). - New product type Ticket — one QR code per seat ordered, sent in the order email, scannable from any smartphone, with a public validation page showing green (available) or red (already used).
- New admin page Pay4All Shop › Billets — list every QR ticket, search by first/last name / city / e-mail, validate manually, export to CSV.
- Out of stock flag on every product — product stays visible, quantity field is greyed and disabled, server-side rejects tampered orders.
- Default form fields (first name, last name, e-mail, phone, address, etc.) are now pre-translated in every activated language at form creation time.
- Per-delivery payment methods — accepted payment methods are now configured per delivery method (a delivery edit screen has a Modes de paiement acceptés section), so each delivery can show its own payment choices to the customer. Forms without any delivery still use the legacy per-form payment picker.
- Initial release.