Sellat Proof for WooCommerce
| 开发者 | skanthemore |
|---|---|
| 更新时间 | 2026年10月28日 18:47 |
| PHP版本: | 8.1 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- Every confirmed order, paid or on hold waiting for a bank transfer. The order number, dates, amounts, products, status and payment method, the version of your terms and privacy policy in force at checkout, and a fingerprint of the customer's email. This proof record never includes the customer's name, address, email or phone.
- Every version of your legal pages. Terms and conditions, privacy policy, returns and shipping. Each time the content of one changes, a new version is recorded with its exact text, and each order points to the version in force when it was placed.
- Free daily protection. The day's orders are grouped into one proof of your shop, anchored once a day. Each order keeps its record and its path in the day's tree. Any order you choose can also get an eIDAS qualified timestamp by hand, with its own proof, spending one of your account's seals.
- Classic checkout and the Cart and Checkout blocks.
- High-Performance Order Storage (HPOS).
- Background jobs with Action Scheduler: the checkout never waits for Sellat. If Sellat cannot be reached, orders wait and are sent later, with retries.
- A Usage screen: everything protected in the last 7, 30 or 90 days, sales covered, eIDAS seals issued and left, a chart per day, and what your plan has left.
- A Sellat box on each order, a Sellat column in the orders list, and WooCommerce → Sellat with the connection, the protection settings, the orders, the legal pages and a log of every call.
- The API key is stored encrypted. Personal data tools: the acceptance IP joins WooCommerce's export and erasure, and a suggested text is added to Settings → Privacy.
安装:
- In WordPress, go to Plugins → Add New, search for "Sellat Proof for WooCommerce", install and activate it. WooCommerce must be active.
- Go to WooCommerce → Sellat and click "Connect with Sellat". You sign in to Sellat (or create a free account), confirm, and you come back connected. If you integrate by hand, you can paste an API key instead.
- In the Protection tab, choose the legal pages the plugin should watch. Your WooCommerce terms page and your privacy policy page are chosen for you.
wp-content/uploads/sellat-proof/ and protects that folder itself: it cannot be listed, the order files have names that cannot be guessed, and the full order copies kept for custody (with the customer's name and addresses) are encrypted. On Apache and LiteSpeed (most hosting) the .htaccess the plugin writes also closes it completely.
Optional, only for nginx servers you manage: this rule closes the folder completely there too. On managed hosting, you can ask your host's support to add it.
location ~* /wp-content/uploads/sellat-proof/ { deny all; }屏幕截图:
常见问题:
Do I need a Sellat account?
Yes. The proofs are made by the Sellat service. The free account includes the daily protection of your orders, the recording of your legal pages and the eIDAS qualified timestamp by hand, paid with seal credits.
What does the eIDAS qualified timestamp cost?
It is optional. Each one uses a seal credit from your Sellat account: every account gets one free, and more are sold in packs. Nothing is spent unless you press "Add eIDAS seal" on an order and confirm. See Sellat's prices.
What if my legal pages use shortcodes, blocks or a page builder?
Sellat records each legal page as WordPress renders it for a visitor, and "Local copy" in WooCommerce → Sellat → Legal pages opens each version exactly as it was recorded. Every WordPress is different: check that what is recorded is what your customers see. A shortcode, block or plugin that changes the page for each visitor, or hides part of it, may not have been foreseen. If something does not match, write to us at help@sellat.app.
Can someone recover my customer's email from the record?
No. The record carries a fingerprint of the email, not the email. Whoever holds the record, though, can check whether a given email is the one in it: that is what lets anyone verify a proof pack, which carries the email.
What happens if Sellat is down?
Nothing at checkout: the plugin never makes the customer wait. The order is marked as waiting and is sent later, with retries, and the WooCommerce → Sellat → Log tab shows each attempt. Proofs that are already final do not need Sellat at all: your shop keeps a copy of each one and builds the proof pack from it.
What happens to my proofs if I delete the plugin?
They stay in Sellat, and by default the plugin leaves each order's link to its proof and your local copies in place. Deleting the plugin forgets the API key and the settings. To remove everything, define SELLAT_PROOF_REMOVE_ALL_DATA as true in wp-config.php before deleting it.
Does it need the PHP mbstring extension?
No. Without it, the plugin lowercases only ASCII letters when it fingerprints the customer's email, so an email with an accented letter would get a fingerprint different from the one Sellat computes; with mbstring (installed on nearly every host) they always match.
Does it work with the block checkout and with HPOS?
Yes, both.
更新日志:
- Until the shop is connected, every screen of the plugin says so, with a button to connect it: nothing is protected before that.
- Connecting is one button, "Connect with Sellat"; pasting an API key moves under "Integrating by hand?".
- Sellat's connect and sign-in pages open in your WordPress language (Spanish, English, German or French).
- First public release: daily proofs of confirmed orders, legal page versions, the eIDAS qualified timestamp by hand, proof packs (also built by the shop from its own copies of the final proofs), a Usage screen, block checkout and HPOS support.