內容簡介
Pay4All Age Verification 外掛可阻止包含年齡限制產品的訂單，直到顧客上傳有效的身份證明和自拍照。此外掛專為 Pay4All Shop 設計，確保符合年齡驗證要求。
【主要功能】
• 支援年齡限制產品的驗證流程
• QR 碼掃描以便於手機拍照
• 自動解鎖功能無需頁面刷新
• AES-256-GCM 加密確保照片安全
• 無需連接外部服務，所有操作在本地進行
外掛標籤
開發者團隊
原文外掛簡介
Pay4All Age Verification blocks any order containing age-restricted products until the customer has uploaded a valid ID (recto + verso) and/or two selfies. Photos are captured either directly on the customer’s desktop or, more commonly, through a QR code that hands off to their smartphone.
The plugin plugs into Pay4All Shop (pay4all-form). Install it alongside Pay4All Shop and it will only surface where a form contains an age-restricted product.
How it works
Merchant ticks Requires age verification on any product edit screen (Pay4All Shop product).
When a customer adds such a product to their form, a panel appears in the KYC step showing a QR code.
Customer scans the QR with their phone -> the mobile capture page opens -> they take the required photos with their phone camera.
The desktop form polls the server every 4 seconds and unlocks automatically when every required slot is filled — no page refresh needed.
On order submit, the encrypted photos are moved from the session bucket to the order-scoped bucket, and are only decrypted on demand by an admin from the order edit screen.
Security
Photos are encrypted with AES-256-GCM using a per-order (or per-user) subkey derived via HMAC-SHA256 from a master key stored in wp-content/uploads/p4all-age-secure/age.key (outside the database backup).
Ciphertexts live in a private folder guarded by .htaccess, index.php and web.config so they are never web-servable.
Admin decryption endpoint is nonce-protected and requires the edit_users capability.
Photos are auto-purged when the order (or user) is permanently deleted.
WooCommerce support
Pay4All Age Verification focuses on Pay4All Shop. The free plugin does not ship any merchant-facing WooCommerce surfaces (no checkout panel, no order metabox, no product-level « Requires age verification » checkbox, no register-form opt-in). If you run a WooCommerce shop and want the full verification flow (cross-device QR checkout panel, order edit metabox with decrypted photo lightbox, product-level checkbox with Quick Edit, My Account register-form opt-in, HPOS + Checkout Blocks compatibility), the WooCommerce integration is available in the paid add-on Pay4All Pro, distributed from pay4all.ch and not through WordPress.org.
WPML / Polylang
Multilingual-aware : when the Requires age verification flag is set on a source product, every translation is treated as age-restricted too — even if the flag hasn’t been mirrored to the translation.
Available languages
Français (fr_FR), Deutsch (de_DE), Italiano (it_IT), English (en_US).
External services
This plugin does not connect to any external service. Everything runs on the site: photo capture, encryption, storage and admin decryption are all local. No data is sent to any third-party server.
Source code
The complete, non-minified source of this plugin is bundled inside the ZIP itself. Every PHP, CSS and JavaScript file is human-readable and directly editable. No compiler, transpiler or bundler is required to work on this plugin.
