MFPro Anonymous Digital Sales

External services

This plugin connects to one external service, NOWPayments (https://nowpayments.io), to create and check cryptocurrency payments. Nothing is sent until you enter your API key in Settings.

• What for: creating an invoice or payment for an order, listing the cryptocurrencies your account accepts, reading minimum amounts, and checking the status of a payment (also from a WP-Cron job every 5 minutes while an order is waiting for payment).
• What is sent: your NOWPayments API key (as a request header), the order number, the price in USD, a short order description, the return address of your site and, if enabled, the address of your webhook. The buyer chooses the cryptocurrency and pays on the NOWPayments page; the plugin never sees wallet keys.
• When: when a buyer creates an order, when the buy dialog loads the list of coins and minimum amounts, when an order status is checked, and from the background job while orders are pending.
• Incoming data: NOWPayments calls a webhook address of your site with the payment status. The call is verified with an HMAC signature using your IPN secret.
• Service: https://nowpayments.io. Terms of service: https://nowpayments.io/doc/fd-tos.pdf. Privacy policy: https://nowpayments.io/doc/fd-privacy-policy.pdf.

Privacy

• Buyers: the plugin stores the order number, an encrypted receipt token, the offer, a snapshot of the purchased files, the price and the payment id. It does not store names or e-mail addresses. For rate limiting, a short-lived counter keyed by a hash of the IP address is kept in WordPress transients. The buyer’s browser keeps the order number and receipt token in its local storage so the order can be found again; the buyer can clear it at any time.
• Debug log (off by default): when switched on, it can contain order numbers, payment ids, IP addresses of throttled requests and short excerpts of the payment provider’s answers. Secrets are masked.
• Site owner: the API key, the IPN secret and the resource passwords are stored encrypted in the database. Define ANONYMOUS_SALES_ENCRYPTION_KEY in wp-config.php to keep the encryption key outside the database.

Source code

The full, human-readable source of this plugin is public: https://github.com/mjfutera/mfpro-anonymous-digital-sales. It is the same code as in the package. The release package is built from it with node bin/build.mjs .

Third party libraries

• FPDF 1.86 by Olivier Plathey (http://www.fpdf.org), used to build the PDF access sheet. FPDF is released under a permissive license with no usage restrictions.