Revoker for WooCommerce
| 开发者 | kommers |
|---|---|
| 更新时间 | 2026年6月22日 18:10 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Revoker for WooCommerce adds a withdrawal button to your WooCommerce store, designed to help you implement the customer's right of withdrawal in accordance with EU Directive 2023/2673. Customers can revoke orders directly from their account area.
Why Revoker?
Starting in 2026, online merchants in the EU are required to provide consumers with an easy way to exercise their right of withdrawal. Revoker implements this requirement elegantly and user-friendly.
Key Features
- Withdrawal Button – Automatically appears on the order details page in customer accounts
- Two-Step Process – Button → Confirmation page prevents accidental withdrawals
- Deadline Calculation – Automatic calculation of remaining withdrawal period
- Partial Withdrawal – Customers can withdraw individual items from an order
- Guest Support – Withdrawal without customer account via order number + email
- Email Notifications – Automatic confirmation to customer and shop admin
- Withdrawal Log – Complete overview of all withdrawals in the backend
- Product Exceptions – Exclude categories, individual products, or digital downloads
- Customizable – Button text, style, and withdrawal period individually configurable
- PDF Confirmation – Generate PDF documents for withdrawal confirmations
- Gutenberg Block – Add withdrawal policy information easily to any page
- EU Directive 2023/2673
- Consumer Rights Directive 2011/83/EU
- GDPR compliant
- Dashboard & Statistics – Withdrawal rates, trends, top products
- Automatic Refunds – Integration with WooCommerce Refunds
- Notifications – Slack, Microsoft Teams, Custom Webhooks
- REST API – Complete API for external integrations
- Rules Engine – Advanced exception rules (geo, price, time, etc.)
- UI Builder – Visual editor for button and modal
- Return Labels – Integration with DHL, DPD, GLS
- Accounting Export – DATEV, lexoffice, sevDesk export
- Fraud Detection – Protect against abuse
- Multilingual – 6 languages included
安装:
Automatic Installation
- Go to Plugins → Add New in your WordPress admin
- Search for "Revoker for WooCommerce"
- Click Install Now and then Activate
- Download the plugin as a ZIP file
- Go to Plugins → Add New → Upload Plugin
- Select the ZIP file and click Install Now
- Activate the plugin
- Go to WooCommerce → Withdrawal Button
- Configure the withdrawal period (default: 14 days)
- Customize button text and style as desired
- Optional: Exclude specific categories or products
常见问题:
Is the plugin GDPR compliant?
Yes. The plugin only stores data necessary for the withdrawal process and respects all data protection requirements. Withdrawal data is stored together with the order.
Does the plugin work with my theme?
Revoker is designed to work with all WooCommerce-compatible themes. The button automatically adapts to your theme's styling.
Can I customize the withdrawal period?
Yes. Under WooCommerce → Withdrawal Button → Settings you can set the period between 7 and 365 days. The EU standard is 14 days.
Can guests also withdraw?
Yes. Using the shortcode [revoker_withdrawal_search] guests can find their order by order number and email address and submit a withdrawal.
Which products can I exclude from withdrawal?
You can exclude:
- Complete categories
- Individual products
- All digital/downloadable products
Are emails sent automatically?
Yes. For each withdrawal, a confirmation is automatically sent to the customer. Optionally, the shop admin can also be notified.
Is the plugin compatible with HPOS?
Yes. Revoker fully supports WooCommerce's High-Performance Order Storage (HPOS) feature.
Which order status is set after a withdrawal?
By default the order is moved to a dedicated "Withdrawal requested" status so you can track and filter withdrawals in the orders list. Under WooCommerce → Withdrawal Button → Order status after withdrawal you can change this to any WooCommerce order status (for example "On hold") so it fits your internal order workflow.
In which languages is the plugin available?
The plugin is developed with full internationalization support and includes translations for:
- German (de_DE)
- English (en_US)
- French (fr_FR)
- Italian (it_IT)
- Spanish (es_ES)
- Dutch (nl_NL)
- Polish (pl_PL)
How do I add the withdrawal policy to a page?
You can use the Gutenberg block "Withdrawal Policy" or the shortcode [revoker_withdrawal_policy] to display the legally required withdrawal information on any page.
Can I translate the custom texts per language (Polylang)?
Yes. Revoker's built-in interface texts are already translated for the bundled languages and follow your site language automatically — there is nothing to set up for those. For the texts you customize under WooCommerce → Withdrawal Button (the button labels, the withdrawal reasons, the "next steps" and the custom box text), Revoker registers them with Polylang, so they show up under Languages → String translations. There you can enter a translation for each language. Note: a customizable field only appears there once you have actually entered a value for it — if you leave a field empty, Revoker automatically uses its own translated default for the visitor's language, so there is nothing to translate. If you also want to edit the bundled interface translations themselves, you can use a tool such as the free Loco Translate plugin.
更新日志:
1.0.22
- Fixed: On WordPress 6.7+, the guest withdrawal overview, success message and confirmation email could still appear in the wrong language. The AJAX locale helper unloaded the translations and relied on load_plugin_textdomain() to reload them, but since WordPress 6.7 that call only registers translations for just-in-time loading — so after the unload they fell back to English. The helper now relies on switch_to_locale() on WordPress 6.1+ and only reloads manually on older versions.
- Added: "Order status after withdrawal" setting (WooCommerce → Withdrawal Button) — choose which order status an order is moved to when a customer submits a withdrawal. Default is the custom "Withdrawal requested" status; pick a standard WooCommerce status (e.g. "On hold") if you prefer it to follow your existing order workflow.
- Removed: The "Legal text updates / automatic updates for regulatory changes" Pro feature was advertised in the upsell and readmes although it is not active. The claim has been removed so the plugin no longer promises a feature it does not currently provide.
- Changed: Removed unsubstantiated legal claims from the Pro feature overview and the plugin description (e.g. "lawyer reviewed", "legally compliant texts/translations"). The wording now describes what the plugin does without asserting that the texts are legally vetted. Revoker provides withdrawal/return text templates and does not constitute legal advice — please have your texts reviewed by your own legal counsel.
- Fixed: In the guest withdrawal flow (the [revoker_withdrawal_search] form), the order overview, the success message and the confirmation email could appear untranslated (in the site's default language) on multilingual sites — while the search form itself was translated. These parts are rendered via AJAX, where WordPress loses the front-end/multilingual language and falls back to the admin or default language. The plugin now carries the storefront language into the AJAX request and switches to it before rendering and sending the email.
- Added: Polish (pl_PL) translation — the plugin is now fully translated into Polish (front-end, emails and admin).
- Added: Polylang support for the customizable texts. The button labels, withdrawal reasons, "next steps" and custom box text you set under WooCommerce → Withdrawal Button now appear under Languages → String translations, so you can translate them per language. Fields left empty keep using the plugin's built-in per-language defaults.
- Fixed: After a withdrawal, the order could stay on its previous status (e.g. "Completed") instead of moving to "Withdrawal requested". WooCommerce's update_status() silently swallows errors during a status transition; the plugin now verifies the transition took effect, re-applies it directly if it did not, and logs the reason when WP_DEBUG is on — so merchants get a reliable status-based way to track pending withdrawals.
- Fixed: The "Documentation" link in the settings footer pointed to a URL that returned an error. It now links to the plugin page at https://kommers.io/plugins/revoker.
- Added: A "To my orders" link toggle — hide the link shown after a withdrawal. Useful for shops that mostly handle guest withdrawals, where the link only leads to the (empty) account/login page.
- Improved: Withdrawal admin notifications now add an order note recording exactly which address(es) the notification was sent to, and log a clear message (plus an order note) when wp_mail fails — so a notification dropped by the mail server/SMTP is no longer silently invisible.
- Improved: Translations updated and completed for German, French, Italian, Spanish and Dutch.
- Fixed: The configurable button/label texts (withdrawal, confirm, cancel) were stored as English defaults, so they stayed English on non-English sites. They now fall back to a translatable default that follows the site language (until the merchant sets a custom value).
- Improved: Translations updated and completed for German, French, Italian, Spanish and Dutch — all current strings are now translated.
- Tested up to WordPress 7.0.
- Security: the guest withdrawal search is now rate-limited per IP (default 10 attempts / 5 minutes, filterable) to prevent brute-forcing order number + email combinations.
- Fixed: On the guest withdrawal search form, a failed search (wrong details or network error) reset the button label to a hardcoded German string ("Bestellung suchen") on non-German sites. The button now restores its original, localized label.
- Fixed: Bundled translations (German, French, Italian, Spanish, Dutch) were never loaded, so the storefront always showed English. The plugin now loads its /languages folder via load_plugin_textdomain() on init, so the front-end strings follow the site language.
- Security: the withdrawal-confirmation PDF download now requires admin rights, the logged-in order owner, or a valid order key — closing an access-control gap where guest-order PDFs (containing personal data) could be downloaded by enumerating withdrawal IDs.
- Hardening: the withdrawal log database layer now whitelists the order-by column/direction and the updatable columns, so SQL identifiers can never originate from request input.
- Hardening: client IP detection now uses REMOTE_ADDR by default and only trusts proxy/forwarding headers when explicitly enabled via the
revoker_trust_proxy_headersfilter (prevents IP spoofing in the audit log).
- Security: the guest withdrawal search now only succeeds when the order number AND email belong to the same order. The entered order number is re-checked against the resolved order (preventing a wrong number from resolving to a different order via ID coercion with custom order-number plugins), and a single generic error message no longer reveals whether an order number or email exists.
- Added: "Position in email" setting — show the withdrawal section at the bottom of the order confirmation email (below the address, now the default) or directly under the order items.
- Improved: Heading spacing in the withdrawal form, policy and model-form output is now normalized so themes with large default heading margins no longer add excessive top spacing.
- Added: Box position setting — show the withdrawal box below the billing/shipping address on the order page (now the default) or directly under the order items.
- Added: Configurable admin notification recipient(s) — choose which email address(es) receive withdrawal notifications, with comma-separated support.
- Added: Order lookup now matches custom order numbers from Sequential Order Numbers / Sequential Order Numbers Pro and similar plugins (both _order_number and _order_number_formatted), plus a revoker_find_order_by_number filter.
- Added: Show/hide toggles for the return address and the "next steps" section across the form, modal and confirmation email — useful for merchants who send a return label instead of receiving returns at their address.
- Added: Custom "next steps" text and a custom free-text block in the withdrawal box.
- Added: Withdrawal reasons are now configurable — toggle the reason selector and edit the list of reasons.
- Fixed: Withdrawal log table was never created on activation, causing "Error saving the withdrawal." for all withdrawals. The activation hook was registered too late (on
plugins_loaded) to fire during plugin activation. - Added: Self-healing database check that creates the table on existing installs affected by the activation bug, with no manual reactivation required.
- Changed: Source language switched from German to English for WordPress.org GlotPress compatibility
- Added: German (de_DE) translation file with 100% coverage
- Updated: French (fr_FR), Spanish (es_ES), Italian (it_IT), Dutch (nl_NL) translations to 100% coverage
- Improved: All translatable strings now use English as source language (msgid)
- Fixed: Database insert failure when saving withdrawals (NULL datetime handling)
- Fixed: Modal on order confirmation page now shows item checkboxes for selection
- Fixed: Modal withdrawal submission now correctly sends selected items
- Added: Dedicated return address settings (company name, address, postcode, city)
- Improved: Return address in forms, emails, and withdrawal policy uses custom settings with WooCommerce fallback
- Improved: Error logging for failed database operations when WP_DEBUG is enabled
- Fixed: Escape all $withdrawal_period variables with absint()
- Fixed: Escape all $days_remaining variables with absint()
- Fixed: Escape $deadline and $withdrawal_url in plain text emails
- Fixed: Move PDF styles to external CSS file to avoid inline tag
- Fixed: Proper escaping of date_i18n() outputs
- Fixed: Use wp_enqueue functions for scripts and styles
- Fixed: Plugin URI now points to valid URL
- Added: Requires Plugins header for WooCommerce dependency
- Removed: WordPress.org directory assets from plugin package
- Initial stable release
- Withdrawal button on order details page
- Two-step withdrawal process
- Partial withdrawal of individual items
- Guest support via order search
- Email notifications (customer & admin)
- Withdrawal log in backend
- Product and category exceptions
- Exclude digital downloads
- Customizable button style (standard, outline, text link)
- Configurable withdrawal period (7-365 days)
- PDF generation for withdrawal confirmations
- Gutenberg block for withdrawal policy
- Withdrawal reason selection
- HPOS compatibility
- Translations for 6 languages