Where is the plugin’s documentation?
Since version 6.0.0 , the plugin displays its own documentation in the admin screens. Just go to the Wallets Admin Docs menu, where you’ll find the documentation for the plugin, and for any plugin extensions you have installed.
Developers can study the PHPdocumentor pages at: https://wallets-phpdoc.dashed-slug.net/
How secure is it?
When users issue transactions, these can require verification via an email link by the user. Additionally, you can require that an admin also verifies each transaction. (See “Confirmations” in the documentation).
Of course, the plugin is only as secure as your WordPress installation is.
You should take extra time to secure your WordPress installation, because it will have access to your hot wallets. At a minimum you should do the following:
- Install a security plugin such as Wordfence .
- Read the Codex resources on Hardening WordPress .
- If you are connecting to an RPC API on a different machine than that of your WordPress server over an untrusted network, tunnel your connection via ssh or stunnel . See here .
Some more ideas: – Add a user auditing tool such as Simple History . – Add a CAPTCHA plugin to your login pages. – Only keep up to a small percentage of the funds in your hot wallet (See Cold Storage in the documentation).
I am installing a bitcoin full node on my server. How can I run it as a service so that it is always running?
This will depend on the Linux distribution on your server.
To setup bitcoin core as a service on systemd I used this guide .
Here is my /etc/systemd/system/bitcoin.service file:
[Unit] Description=Bitcoin wallet service After=network.target StartLimitBurst=5 StartLimitIntervalSec=10 [Service] Type=simple Restart=always RestartSec=1 User=alexg ExecStart=/usr/local/bin/bitcoind [Install] WantedBy=multi-user.target
You will need to edit the user name to match yours, and possibly the path to your bitcoind binary.
Follow the article to set the service to run automatically on system restart. You should never have to enter the bitcoin command directly in the shell. Always let the system start it automatically as a service.
After that, you must check with your hosting provider (the provider who supplies the server for your bitcoin daemon) to see if there are any firewalls, blocking incoming communication with TCP port 8332 . Also check any local firewalls that you may be running, such as ufw .
Can I control which users have a wallet?
Yes, simply assign the has_wallets capability to the appropriate users or user roles. You should also assign more capabilities, such as list_wallet_transactions , send_funds_to_user , and withdraw_funds_from_wallet .
You can control the capabilities per user role by navigating to: Settings → Bitcoin and Altcoin Wallets → Capabilities .
Can I use the plugin to create an investment / interest paying site?
Yes, you can use the premium Airdrop extension to perform recurring airdrops . These can effectively be paid out in the form of an interest on the user’s wallet.
Can I use the plugin to create a WooCommerce store that accepts cryptocurrencies?
Yes, you can use the premium WooCommerce Cryptocurrency Payment Gateway extension . With it, users can use their on-site balance to checkout their shopping carts.
Can I use the plugin to create a crypto faucet?
Yes, you can use the premium Faucet extension to let users earn crypto by solving CAPTCHAs.
Can I use the plugin to create a crypto exchange?
Yes, you can use the premium Exchange extension to create market pairs. However the markets are local only, which means that no liquidity is imported from other exchanges. Read the disclaimers.
Can I use the plugin to do a token sale?
No, this plugin is not suitable for token sales.
However, you could, of course, setup markets using the Exchange extension , and set a large limit sell order with your admin account. This will allow users to buy your shillcoin. You can even disable buying or selling separately.
Can I use the plugin to accept tips for articles?
Yes, you can use the premium Tip the author extension . This lets you attach a tipping UI to posts/articles. You can control where the tipping UI is shown, by post type, category, tags, or even author. Only authors with the receive_tip capability can receive tips, and only users with the tip_the_author capability can send tips.
Can I use the plugin to create a paywall?
Not yet. However, a premium extension to let you do just that is currently in development.
How can I change the plugin’s code?
The plugin and its extensions are yours to edit. You are free to hack them as much as you like. However, you are generally discouraged from doing so, for the following reasons:
- I cannot provide support to modified versions of the plugin. Editing the code can have unintended consequences.
- If you do any modifications to the code, any subsequent update will overwrite your changes. Therefore, it is not recommended to simply fire away your favorite editor and hack away themes or plugins.
Whenever possible, use an existing hook ( action or filter ) to modify the behavior of the plugin. Then, add your code to a child theme, or in separate plugin file. Any PHP file with the right headers is a valid plugin file.
If you can’t find a hook that allows you to do the modifications you need, contact me to discuss about your need. I may be able to add a hook to the next patch of the plugin.
Why is my CSS not being applied to the UI elements?
This is usually due to the plugin’s CSS rules hiding your own rules. Don’t just spam !important , instead take the time to study CSS rule specificity . If you are unsure how to apply a particular rule on the plugin’s UIs, you can contact me.
How can I change something in the UI elements?
There are several ways to do this, depending on what type of change you want to apply. Please check the documentation under Frontend and Shortcodes → Modifying the UI appearance .
How can I perform transactions from my PHP code?
There are two ways to do this:
- 01You can create DSWallets\Transaction objects, populate all the fields, then save the obects to the DB. For details, check the documentation under: Developer reference → Working with custom post type objects , and the PHPDocumentor page for the Transaction class for example code.
- 02You can use the Legacy PHP-API. This is compatible with previous versions of the plugin.
How can I perform transactions from the JavaScript frontend?
There are two ways to do this:
- 03You can use the WP-REST API . Consult the documentation under: Developer reference → Wallet APIs → WP-REST-API .
How can I change the wallet backing a particular currency?
It is possible that, for a particular cryptocurrency you may want to replace the wallet backing it with another wallet. For example, you may be offering Bitcoin via the CoinPayments service, and want to start using a Bitcoin core full node wallet. Or you may be using Bitcoin core, and you want to move to a new wallet.dat file.
This has become a lot easier with versions 6.0.0 and later, because Currencies and Wallets are now decoupled:
- 04Create the new Wallet with the built-in Bitcoin adapter for full nodes. Connect to your new full node wallet.
- 05Edit your Currency , in this case, Bitcoin . Set the Wallet to your new full node wallet entry, and Update the Currency.
- 06Transfer the hot wallet balance from one wallet to the other. Transfer all the funds to an address generated by new Hot Wallet . The address must NOT be a deposit address assigned to a user. For example, you can use the deposit address shown in the Cold Storage tool for your new wallet.
- 07Delete all the old deposit addresses for that currency. This will force the plugin to generate new deposit addresses from the newly connected wallet.
- 08Inform your users that they must no longer use the old deposit addresses, if they have them saved somewhere.
If unsure about this process, please contact me.
How does the plugin work in multisite installations?
How it works depends on whether the plugin (and its extensions) are network-activated or not. In network-activated setups, users have one balance ber currency, across all sites the network. If the plugin is NOT network-activated, users have a different balance on each site on the network, and each site can have different currencies and wallets.
Note that the plugin and its extensions MUST either all be network activated, OR all must be activated on individual blogs. Do not mix-and-match network-activated and non-network-activated wallets plugins.
Consult the documentation section Multisite for more information.
How to handle a hack/cyberattack?
While the latest WordPress version is often secure, the same cannot be said about all the WordPress plugins out there. Every day new security vulnerabilities are found involving WordPress plugins. Since WordPress is such a popular software platform, it gets a lot of attention from hackers.
Take an immediate backup of the site, and the server it runs on, if possible. This will preserve any traces that the hackers may have left behind. Funds theft is a crime and you can report it to the police, just like any other hack.
It’s best if you are prepared beforehand: Keep the software on the site updated regularly. Take the time to harden your server and WordPress installation. Try to use only reputable plugins on your site and keep them updated. Use a security plugin.
Finally, only keep a small percentage of the user balances on the hot wallet, utilizing the Cold storage feature to transfer the remaining funds to offline wallets. That way, in case WordPress is compromised, you don’t lose all your users’ funds! Please take wallet management seriously. There is no software that will automatically do opsec for you. Have a plan on how to act in case of theft.
If you think you have discovered a security vulnerability in this plugin, please let me know over email (not on a public forum).
How can I become a premium member and get access to the app extensions?
Paying members can download the available A
