| 开发者 |
ImagiSol
dhruvin |
|---|---|
| 更新时间 | 2026年9月26日 20:57 |
| 捐献地址: | 去捐款 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
"I was able to install this plugin and have a file upload feature on all my products. Tested and working well! It's a great useful feature for WooCommerce. Thanks very much!" "Lovely! It works just as shown." — vincentfijianNeed Help? For support, feature requests, or customization inquiries, open a support ticket here and we'll get back to you as soon as possible. Our Other WooCommerce Plugins
Yes. File Uploads Addon is fully compatible with the modern WooCommerce Cart and Checkout block experience introduced in WooCommerce 7+.
Yes, the plugin is fully compatible with WooCommerce High-Performance Order Storage (HPOS).
The free version supports category-level control (from WooCommerce Settings) and also supports a developer filter to restrict uploads to specific product IDs: ` add_filter( 'wau_include_product_ids', 'wau_include_only_product', 10, 1 ); function wau_include_only_product( $pids ) { return array( 310, 315 ); // Add your product IDs here } ` For a no-code per-product toggle, upgrade to the Pro version.
Multiple file uploads are available in the Pro version.
Uploaded files appear directly on the WooCommerce order details screen. In the Pro version, files are also sent as email attachments with the new order notification.
For improved privacy, the plugin tries to store new customer uploads in a private folder outside the public web root. The default location is:
<parent-of-document-root>/wau-private-uploads/<site-specific-folder>/
The site-specific folder includes the site host, blog ID, and a short hash. This keeps separate WordPress installs and subdomain stores from sharing the same private upload folder.
For example, a store at shop.example.com may use a folder similar to:
/home/account/wau-private-uploads/shop-example-com-1-a1b2c3d4e5f6/
Some shared or managed hosts do not allow WordPress to create folders outside the public web root. If private storage is not available, new customer uploads are paused instead of being stored in a public web-accessible folder.
For files uploaded before this update, the plugin continues to harden the legacy folder's .htaccess and web.config protection files where supported. On Nginx, Caddy, OpenLiteSpeed, or similar servers, directory-level .htaccess files may not be honored, so your host may need to block direct web access to:
/wp-content/uploads/wau-uploads/
The plugin's secure download links will continue to serve authorized legacy files through WordPress.
On Nginx, use a precedence-safe prefix rule inside the relevant server block:
location ^~ /wp-content/uploads/wau-uploads/ { deny all; }
OpenLiteSpeed and Caddy use different configuration formats; share the displayed URL path with your host instead of copying the Nginx rule.
On Apache or LiteSpeed, the protection file can be present even when the server is configured to ignore it. While legacy files remain, test a known legacy file URL and confirm that it returns HTTP 403 or 404. The System Status page keeps this verification visible until migration is complete.
You can also review the current storage status and recommended action items from WooCommerce admin under Addon Upload Settings > System Status.
Yes. If your host provides a writable private folder outside the public web root, add the following line to your wp-config.php file:
define( 'WAU_PRIVATE_UPLOAD_DIR', '/absolute/private/path/' );
Replace /absolute/private/path/ with the path provided by your host. The plugin will create a site-specific subfolder inside that path unless the path already ends with the generated site-specific folder name.
The path must be absolute. The plugin resolves it after creation and rejects it if it points back inside the detected document root, WordPress directory, or public uploads directory. When the document root cannot be determined safely, automatic path selection is disabled and a manually configured path is required.
Existing files in wp-content/uploads/wau-uploads/ remain accessible to authorized users through the plugin's secure download handler. When private storage is available, the plugin migrates legacy files to the private folder in small batches during normal site activity.
Existing order links that already use the plugin's secure download handler continue to work. Older direct links to /wau-uploads/ are rewritten to secure download links when displayed in order metadata.
Logged-in customers are authorized through order ownership. Guest customers are authorized using the WooCommerce order key included in their generated download link. Each new upload also has its own access key.
The plugin supports JPG, PNG, GIF, and WebP image uploads. A 10 MB security ceiling is applied by default and can be adjusted by developers with the wau_max_upload_size filter. For additional file types or image size/resolution controls, see the Pro version.
Yes, full compatibility with PHP 8.2 was added in version 1.7.0.