[WordPress] 外掛分享: HDWebmobile License Key Delivery

首頁 › 外掛目錄 › HDWebmobile License Key Delivery
WordPress 外掛 HDWebmobile License Key Delivery 的封面圖片
全新外掛
安裝啟用
—
尚無評分
4 天前
最後更新
—
問題解決
WordPress 6.9+ PHP 7.4+ v1.0.0 上架:2026-10-24

外掛標籤

開發者團隊

⬇ 下載最新版 (v1.0.0) 或搜尋安裝

① 下載 ZIP → 後台「外掛 › 安裝外掛 › 上傳外掛」
② 後台搜尋「HDWebmobile License Key Delivery」→ 直接安裝(推薦)
📦 歷史版本下載

原文外掛簡介

HDWebmobile License Key Delivery turns any simple WooCommerce product into a license-key product. Add a pool of keys under the product’s own “License Keys” tab — paste them in or generate them randomly — and one is automatically assigned to each customer the moment their order is completed.
Security by design
A serious class of bug in license-key tools is a bulk key import that accepts a file upload with insufficient extension/MIME/content validation (CWE-434, Unrestricted File Upload). Even when limited to Shop Manager accounts — a role routinely handed to shop staff and third-party agencies, and deliberately less trusted than Administrator — a disguised .php file can achieve remote code execution. This plugin closes that vulnerability class by construction, not mitigation:

There is no file upload anywhere in this plugin. Bulk-adding keys is paste-a-textarea or generate-server-side only — that risky code path simply does not exist here.
Keys you paste in are stored exactly as given (with a database-level uniqueness constraint so the same key can never be issued twice); keys the plugin generates for you use PHP’s own cryptographically secure random_bytes(), never anything predictable.
The key handed to each customer is claimed with a single atomic database update, so two orders completing at the same instant can never be issued the same key.
A customer’s “License Keys” page under My Account is scoped to their own account at the database query itself — one customer can never see another’s keys.

Key Features

Turn any simple product into a license-key product from its own Product Data tab
Paste existing keys (one per line) or generate random ones on the spot
One key delivered automatically per unit purchased when the order is marked Completed
Delivered keys show on the order confirmation page, in order emails, and on the admin order screen
A “License Keys” tab under My Account lists everything a customer has purchased
If stock runs out, the order still completes normally and the admin is emailed to restock — no fake or duplicate key is ever issued

Limitations (please read before installing)

No file-upload bulk import — paste or generate only, by design (see “Why this plugin exists”)
Simple products only in this version — no variable-product support
No per-key activation limits or remote deactivation; a key is either unassigned or assigned

Enjoying this plugin?
If it helps your site, please consider leaving an honest review on WordPress.org — it helps other WordPress users find it. Found a problem or have an idea? Please open a support topic first so it can be fixed.
How to Use
1. Add keys to a product
On a simple product’s “License Keys” tab, check “Sell as license key product”, then either paste your own keys (one per line) or use “Generate Keys” to create random ones.
2. Customer buys the product
Nothing changes at checkout — it’s a normal WooCommerce purchase.
3. Key delivered automatically
Once the order is marked Completed, one key per unit purchased is claimed and shown on the order confirmation page, in the order email, and under My Account > License Keys.

延伸相關外掛

文章
Filter
Mastodon