Description

DevDome Affiliate Manager keeps your Amazon affiliate links correctly tagged, healthy, and converting, automatically.

Link Setup: Store an affiliate tag per Amazon store (22 marketplaces). Apply a tag sitewide or by post/page/category rules (priority: post/page > category > sitewide). On the front end, Amazon links in your content get the right ?tag=, plus rel="nofollow sponsored" and an optional new tab. A [devdaffi_button] shortcode renders a styled, auto-tagged button from an ASIN or custom URL.

Click redirect (/go): All Amazon clicks route through a /go endpoint that expands shortlinks, enforces an Amazon-only allowlist (no open redirect), applies the correct tag, and records the click. Unique-visitor counts use a temporary pseudonymous fingerprint (a hash of the visitor’s IP address and browser user agent, kept for 30 minutes); the raw IP address and user agent are not stored by the click statistics.

Keyword Auto-Linker: Automatically turn chosen keywords in your content into tagged Amazon links, with per-rule limits, match types, and skip rules (headings, code, existing links, etc.).

Link Radar (Scanner + Monitor): Scans your content (and WooCommerce external products) for Amazon ASINs, then checks each for Live / Out-of-Stock / 404 status on a schedule.

Smart dead-link recovery: When a product is out of stock or its page is gone (404), redirect the click to a relevant live product (built from the product title/metadata) or to the Amazon search page (chosen per status). Includes a one-click bulk Replace ASIN tool.

Geo-localization (OneLink alternative): Detect a visitor’s country and send them to their local Amazon store with your tag for that store, only where you have a tag (commission stays safe). Cross-region ASIN is validated; dead ASINs fall back to the local search page.

WooCommerce: Optionally rewrite external/affiliate product buttons to route through /go with your tag.

Click Protection: Block known bots from triggering affiliate links (built-in bot list, no external service needed), with selectable redirect methods.

Mobile App Opener: Optionally open Amazon links in the Amazon app on mobile (Android intent; iOS “Open in Safari” helper inside in-app browsers).

DevDome Affiliate Manager is an independent project. Amazon, Amazon Associates and OneLink are trademarks of Amazon.com, Inc. or its affiliates; this plugin is not endorsed by, sponsored by, or otherwise affiliated with Amazon.

External services

This plugin talks to the DevDome server at https://api.devdome.com for the features that need data a plugin cannot ship (a geo-IP database, an Amazon status checker). API keys stay on the server; you never paste one.

Link Radar status checks, https://api.devdome.com/amazon-404-oos-checker

/check-batch sends the Amazon ASINs found by your link scan, with each one’s Amazon domain, to classify them as live / out of stock / 404. It runs when you press Check Now, and on the Link Radar schedule only while automatic re-scans are enabled; a fresh install that has never scanned makes no request.

/search sends a product keyword (built from the product’s title or metadata) to find a live replacement product. It is used by the bulk Replace ASIN tool and, when you enable per-status dead-link recovery, at click time. No visitor data is in either request.

Both are part of the hosted Link Radar service and require a connected DevDome account. Creating the account costs nothing: each request carries this site’s domain and secret token so the service can meter usage. The free plan includes 500 checks + searches per month per account; paid plans raise the limit (20,000 / 50,000 / 100,000, see devdome.com/pricing). The plugin shows your live usage meter on its settings screen. When the site is not connected or the monthly limit is reached, the service answers with an error and the plugin simply leaves link statuses unchanged, so nothing on your site breaks.

Geo-localization, https://api.devdome.com/geo-resolve

Off by default. When you enable it, each /go click sends the visitor’s IP address and the destination ASIN/domain, plus this site’s domain and secret token, so the server can pick the visitor’s local Amazon store from the stores you have a tag for. The IP is used for the country lookup only and cached briefly. Enable this feature only if you want visitor IPs used for country detection. Geo store-routing is part of the hosted DevDome service and is free with a connected DevDome account; without one, visitors simply keep the original link.

DevDome account, https://api.devdome.com/plugin/account, /plugin/disconnect and https://analytics.devdome.com/api/plugin/connect/*

Made by the shared DevDome library bundled with every plugin in the suite, and never before you have acted: until you press a Connect button, save an Account ID or complete a connection, no account request is made. The account check is a GET carrying this site’s domain and its secret token, answered with the Account ID and account email address the token belongs to. Disconnect is a POST with the same two fields, sent only when you press Disconnect. Pressing Connect registers a short-lived connect request (/api/plugin/connect/start, a POST with the site domain and token) and, after you authorize on devdome.com, the plugin collects the resulting Account ID server-to-server (/api/plugin/connect/claim, same fields plus the request handle); the Account ID and token never travel in your browser’s URL. https://devdome.com/connect/ is a link you click, not a request the plugin makes: your browser goes there to sign in and comes back.

Amazon

At click time the /go endpoint expands Amazon shortlinks (amzn.to, a.co, …) by requesting them server-side from Amazon, so the final product URL can be validated and tagged. The result is cached for 12 hours. Only the shortlink URL is requested; no visitor data is sent to Amazon by the plugin.

This service is provided by Amazon.com, Inc.: Conditions of Use, Privacy Notice.

Not contacted on this WordPress.org build

The bundled shared library also references endpoints this build never calls: the https://api.devdome.com/bot-protection/ signature feeds (Click Protection here uses the plugin’s built-in bot list; no feed is fetched and no feed cron is scheduled) and https://api.devdome.com/plugin-updates/ (self-hosted updates, disabled here; updates come only from WordPress.org).

Never sent, in any request

Passwords and password hashes.
Visitor form input, names or email addresses.
Post, page, comment or any other WordPress content: the link scanner runs locally, and only the extracted ASINs leave the site.

Source & build

All PHP and JavaScript in this plugin ship human-readable. The admin screen bundle (assets/admin/index.js / index.css) is compiled with Vite from the JSX source included in this plugin at admin-ui-src/src/, and is deliberately built without minification, so the shipped file is the readable, running code. The stylesheet is likewise unminified.

To rebuild the bundle from source: cd admin-ui-src, then npm install and npm run build. The build writes index.js and index.css into assets/admin/. The bundle inlines its npm dependencies, whose exact versions are pinned in admin-ui-src/package-lock.json: React and ReactDOM (MIT), and Lucide React (ISC); react-dom’s production build contains pre-compressed code from the upstream npm package.

Installation

Upload the plugin ZIP via Plugins Add New Upload Plugin, or copy the folder to wp-content/plugins/.
Activate it.
Go to the DevDome Affiliate Manager admin page, add your Amazon affiliate tag(s), and configure the features you want.

FAQ

Do I need an account or an API key?: No. Everything works without a DevDome account; the shared services run on the DevDome backend and need no key on your side.
Does geo-localization need every regional Amazon tag?: It only redirects to stores you’ve added a tag for. Visitors from other countries keep the original link, so you never lose a commission.
What happens when a product is discontinued?: The monitor flags it, and (if enabled) clicks are redirected to a live replacement product or the Amazon search page instead of a dead page.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“DevDome Affiliate Manager” is open source software. The following people have contributed to this plugin.

DevDome

Translate “DevDome Affiliate Manager” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

1.0.1

The two redirect pages emit their scripts via wp_print_inline_script_tag().
The admin bundle’s JSX/Vite source is included at admin-ui-src/; build steps are in the Source & build section.
The External services section links Amazon’s Conditions of Use and Privacy Notice.

1.0.0

WordPress.org release. Every identifier the plugin owns now uses its own devdaffi_ prefix (options, tables, cron hooks, REST namespace, script handles, shortcode — the button shortcode is now [devdaffi_button]). Self-hosted upgrades migrate stored settings, click stats and the link index automatically, and the old button shortcode keeps working via an alias.
Click Protection now has a built-in bot list, so it works with no external service or feed.
Link Radar’s scheduled auto-scan is off by default; run a scan or enable the schedule to start link monitoring.
Removed the robots.txt writer and unused legacy settings; /go redirects now always send an X-Robots-Tag: noindex, nofollow header, the standard behavior for a redirect endpoint.
The admin bundle ships unminified.

0.5.4

Expanded External services disclosure.

0.5.3

Readme copy polish.

0.5.2

WordPress.org build support: the self-hosted suite updater is excluded from this package (updates come from WordPress.org only), the shared bot-list feed and the suite dashboard’s one-click installs are disabled in WordPress.org builds, the bundled devdome-core library was updated, uninstall now removes the remaining plugin options, transients and scheduled events, and the External services disclosure was extended.

0.5.1

Click attribution privacy: outbound hops now carry an opaque token instead of the site hostname in the URL; the token is resolved server-side. (Version numbering: 0.4.9 is followed by 0.5.1. No version segment goes above 9.)

0.4.9

Fixed: in DevDome Analytics, a /go button click is now attributed to the page it was clicked from instead of appearing as a separate page.

0.4.8

Click reports to DevDome Analytics now declare the link type explicitly, so click classification keeps working even if the /go slug is ever renamed.

0.4.7

Fixed: the mobile App Opener bridge page now sends the same no-referrer policy as every other redirect path.

0.4.6

/go redirects now send a Referrer-Policy: no-referrer header so the redirecting page is not exposed to the destination.

0.4.5

Fixed: WooCommerce generated buttons now use the Amazon store you selected instead of always amazon.com.
Fixed: a link scan that fails part-way no longer wipes the link index; the previous index is kept until a full scan completes.
Fixed: the keyword auto-linker keeps the original text when a regex limit is hit instead of blanking the content.

0.4.4

Split into a public edition and an in-house edition; controls that are not part of the public plugin were removed from this build.

0.3.8

WordPress.org readiness pass: security and escaping review, Plugin Check fixes.

0.3.0

Button Link: choose the Amazon marketplace for generated links via Edit / Regenerate, with an option to omit the affiliate tag.
Custom button links now support an {ASIN} placeholder that is filled with the product’s ASIN at render time.

0.2.0

Per-status dead-link routing (replacement product / search page) for Out-of-Stock and 404.
WooCommerce external-button rewrite; bulk Replace ASIN tool.
Geo-localization, click protection, mobile app opener, link monitor.