內容簡介
Codlino 是一款專為 WooCommerce 設計的現金交貨訂單表單外掛，允許用戶輕鬆創建和管理訂單表單，並提供多種自訂選項，提升顧客的購物體驗。
【主要功能】
• 支援最多 30 個自訂欄位
• 直觀的拖放排序功能
• 內建的感謝頁面選項
• 兼容多種語言與字型
• 防止重複電話/IP 註冊
• 自訂顏色與樣式選擇
外掛標籤
開發者團隊
② 後台搜尋「Codlino – COD Order Forms for WooCommerce」→ 直接安裝（推薦）
原文外掛簡介
New in 0.7.0: manage and delete forms, drag to reorder fields, increment/decrement
quantity with on-screen arrows, preload products before searching, toggle the COD
badge, maintain a site-wide phone/IP blacklist, and enable a built-in premium
thank-you page separately for each form.
Arabic dashboard, multiple independently configured forms, Elementor shortcode
[codlino_form id=”123″], RTL layout and responsive styling. Each form orders a published simple or variable WooCommerce product, with an
optional quantity selector. Orders use WooCommerce CRUD APIs,
COD, on-hold status, stock handling and the standard receipt page; HPOS declared.
Start a new form with no fixed fields and create up to 30 fields: text, textarea,
email, phone, number or select. Use a small required checkbox under each field. Choose optional
price display and colors for the box, fields, field borders, button and button text.
Fields are visible in WooCommerce order details. Optional role mapping populates
customer name, city, phone, address and email. Legacy fixed fields migrate to
editable/deletable fields without changing existing form IDs.
Three ready-made styles (Classic, Express, Premium) apply their palette and layout
without replacing fields. Select Arabic/Latin fonts, button text size, vertical
padding, width, gap above the button and optional gentle shake animation.
Remote selected fonts load from Google Fonts; Janna must be loaded by your site.
Reduced-motion preferences disable animation. Optional Moroccan mobile format
validation accepts 06/07 and 212/+212/00212 international formats on the server.
Optional phone/IP duplicate blocking lasts 24 hours after an accepted order,
with editable messages. Optional HTTPS JSON webhooks run asynchronously with
up to three attempts. Webhook failure never cancels an accepted WooCommerce order.
Powered by Taha Belmezrar.
Operational details
One product per form; optional quantity (1–100 maximum, subject to stock).
Variable products support up to 200 variations. Configure attributes, prices,
stock and variation images in WooCommerce. Choose buttons, colors, images or
select lists per attribute in Codlino. Prices displayed are per unit.
No coupons, shipping-zone pricing or upsells.
Assign a field role to map it to customer details; unmapped fields are metadata.
Email role populates billing email; WooCommerce handles notifications. One field
per role is allowed. Publishing requires at least one field. The builder uses JavaScript.
Store country is used. No state/postcode mapping; verify tax rules for this model.
Delivery line costs zero. On-hold orders are unpaid.
Site font is the default. Janna is local; Cairo, Tajawal, Noto Sans Arabic, Inter,
Poppins and Open Sans use Google Fonts only when selected (internet required).
Duplicate protection counts accepted Codlino submissions where protection was
enabled, across protected forms on this site. Historical orders and orders from
other checkout flows are not scanned. Cancellation does not remove the 24h block.
Phone protection makes phone required. It normalizes common country-code formats;
Moroccan validation is a separate optional switch; it checks syntax, not ownership
or whether a number is allocated/active. A mapped phone is required for either switch.
IP means public network address: several customers may share one IP. REMOTE_ADDR
is used; trusted proxies require the codlino_client_ip filter configured by an admin.
Generic webhooks require direct HTTPS JSON endpoints returning 2xx without redirects.
Google Sheets mode includes an Arabic setup guide, generated Apps Script receiver,
copy button and admin-only test. It follows only Google content redirects via GET
and verifies a matching JSON write acknowledgment. Each form uses a private token.
Tests add a dummy Sheet row, never a WooCommerce order. WP-Cron runs real delivery/retries.
A guard table is created on upgrade. Expired blocks stop blocking by timestamp,
even before daily cleanup. WP-Cron also retires temporary request records.
Request retry protection lasts 48 hours. AJAX refreshes nonce/request IDs for
cached pages. Without JavaScript, exclude form pages from full-page caching.
Deactivation/removal preserves forms, orders and configuration.
External services and privacy
Codlino does not phone home to its author and has no analytics or licensing
connection. A merchant can use the form and create orders with all external
integrations disabled. The default font uses the site’s own styles.
Google Fonts (optional)
Selecting Cairo, Tajawal, Noto Sans Arabic, Inter, Poppins or Open Sans loads a
stylesheet from fonts.googleapis.com and font files from fonts.gstatic.com.
Requests happen in the admin preview and visitors’ browsers where that font is
used. Google receives the browser IP address and normal HTTP request information.
Choose the site font or locally supplied Janna to avoid these Google requests.
Service: https://fonts.google.com/
Terms: https://policies.google.com/terms
Privacy: https://policies.google.com/privacy
Google Apps Script and Google Sheets (optional)
The merchant configures and deploys the bundled receiver using their own Google
account and spreadsheet. Enabling the integration sends accepted order data
from the WordPress server to the configured script.google.com/macros/s/…/exec
endpoint. New orders export only the selected business fields: Name, Phone, City, Date,
Time, Product (including quantity), IP, Device, OS, Browser, Landing URL,
UTM Source and UTM Medium. Status, Address and Notes stay blank for manual entry.
The visible sheet has exactly 16 columns in this order; a hidden _CodlinoEvents
tab prevents duplicate deliveries. Transport event/order identifiers authenticate
and identify delivery. Device/OS/browser are best-effort user-agent classifications;
landing URL and UTM fields are supplied by the browser and are not verified.
Queued pre-0.7.1 orders retain their original payload format. A private per-form receiver token authenticates the
POST. Google may serve its response at script.googleusercontent.com/macros/echo;
Codlino reads it by GET without forwarding the POST body or token. Google also
receives the server IP address and normal HTTP request information. Clicking
Test sends synthetic sample data and creates a test row, with no WooCommerce
order. Real delivery and retries run through WP-Cron.
Service: https://developers.google.com/apps-script
Terms: https://policies.google.com/terms
Privacy: https://policies.google.com/privacy
Merchant-configured generic webhooks (optional)
Enabling a webhook sends the same order payload, without the Sheets token, to
the merchant’s own HTTPS endpoint. Clicking Test sends synthetic sample data.
The endpoint provider’s terms/privacy policy apply; merchants must review them
and disclose relevant processing to shoppers before enabling their integration.
Local storage
Orders and customer details are stored in WooCommerce. Form settings, webhook
endpoints and receiver tokens are stored in the WordPress database. Order
metadata keeps submitted form fields, selected attributes and delivery state;
enabled delivery stores its endpoint, selected columns, available selected tracking
values and token with the order for retries. No visitor tracking values are
saved to order metadata when the integration is disabled. Landing URLs may
contain query parameters; disclose this processing in your store privacy policy.
Duplicate phone/IP guards use salted HMAC identifiers with 24-hour expiry;
request records expire after 48 hours. Orders retain the WooCommerce customer
IP and submitted details subject to the merchant’s WooCommerce retention policy.
Deactivation/removal preserves settings, forms and orders. Merchants manage
WooCommerce customer-data retention and any external spreadsheet/webhook copies.
Extension points
codlino_validate_submission($error, $fields, $form_id)
codlino_order_created($order, $form_id)
codlino_client_ip($ip)
Order metadata retains _codflow_form_id, _codflow_full_name, _codflow_request_id,
_codflow_fields and optional webhook delivery metadata for upgrade compatibility.
Third-party resources
Tajawal by Boutros International, copyright 2018. SIL Open Font License 1.1.
Source: https://github.com/google/fonts/tree/main/ofl/tajawal
License: assets/fonts/tajawal/OFL.txt
The dashboard uses bundled local fonts; no external font request is made.
PixelYourSite compatibility
Requires active PixelYourSite Free with Meta Pixel and WooCommerce InitiateCheckout/Purchase enabled.
Reference API inspected in PixelYourSite Free 11.4.2.1. Older versions require a live verification.
No second pixel is initialized. PixelYourSite controls consent, status exclusions, values and CAPI.
Order-received URLs use the WooCommerce secret key. COD Purchase represents order placement.
The browser repeat guard covers the same tab session; it is not a global exactly-once guarantee.
Do not configure a second custom Purchase for this form. Verify consent, reload and real order
value in Meta Test Events before relying on ad reports. No real Meta delivery was tested locally.
