Title: DevDome Affiliate Manager
Author: DevDome
Published: <strong>August 20, 2026</strong>
Last modified: August 20, 2026

---

Search plugins

![](https://ps.w.org/devdome-affiliate-manager/assets/banner-772x250.png?rev=3656665)

![](https://ps.w.org/devdome-affiliate-manager/assets/icon-256x256.png?rev=3656665)

# DevDome Affiliate Manager

 By [DevDome](https://profiles.wordpress.org/devdome/)

[Download](https://downloads.wordpress.org/plugin/devdome-affiliate-manager.1.0.1.zip)

 * [Details](https://wordpress.org/plugins/devdome-affiliate-manager/#description)
 * [Reviews](https://wordpress.org/plugins/devdome-affiliate-manager/#reviews)
 *  [Installation](https://wordpress.org/plugins/devdome-affiliate-manager/#installation)
 * [Development](https://wordpress.org/plugins/devdome-affiliate-manager/#developers)

 [Support](https://wordpress.org/support/plugin/devdome-affiliate-manager/)

## Description

DevDome Affiliate Manager keeps your Amazon affiliate links correctly tagged, healthy,
and converting, automatically.

**Link Setup**: Store an affiliate tag per Amazon store (22 marketplaces). Apply
a tag sitewide or by post/page/category rules (priority: post/page > category > 
sitewide). On the front end, Amazon links in your content get the right `?tag=`,
plus `rel="nofollow sponsored"` and an optional new tab. A `[devdaffi_button]` shortcode
renders a styled, auto-tagged button from an ASIN or custom URL.

**Click redirect (/go)**: All Amazon clicks route through a `/go` endpoint that 
expands shortlinks, enforces an Amazon-only allowlist (no open redirect), applies
the correct tag, and records the click. Unique-visitor counts use a temporary pseudonymous
fingerprint (a hash of the visitor’s IP address and browser user agent, kept for
30 minutes); the raw IP address and user agent are not stored by the click statistics.

**Keyword Auto-Linker**: Automatically turn chosen keywords in your content into
tagged Amazon links, with per-rule limits, match types, and skip rules (headings,
code, existing links, etc.).

**Link Radar (Scanner + Monitor)**: Scans your content (and WooCommerce external
products) for Amazon ASINs, then checks each for **Live / Out-of-Stock / 404** status
on a schedule.

**Smart dead-link recovery**: When a product is out of stock or its page is gone(
404), redirect the click to a relevant live product (built from the product title/
metadata) or to the Amazon search page (chosen per status). Includes a one-click
bulk **Replace ASIN** tool.

**Geo-localization (OneLink alternative)**: Detect a visitor’s country and send 
them to their local Amazon store with your tag for that store, only where you have
a tag (commission stays safe). Cross-region ASIN is validated; dead ASINs fall back
to the local search page.

**WooCommerce**: Optionally rewrite external/affiliate product buttons to route 
through `/go` with your tag.

**Click Protection**: Block known bots from triggering affiliate links (built-in
bot list, no external service needed), with selectable redirect methods.

**Mobile App Opener**: Optionally open Amazon links in the Amazon app on mobile (
Android intent; iOS “Open in Safari” helper inside in-app browsers).

DevDome Affiliate Manager is an independent project. Amazon, Amazon Associates and
OneLink are trademarks of Amazon.com, Inc. or its affiliates; this plugin is not
endorsed by, sponsored by, or otherwise affiliated with Amazon.

### External services

This plugin talks to the DevDome server at **https://api.devdome.com** for the features
that need data a plugin cannot ship (a geo-IP database, an Amazon status checker).
API keys stay on the server; you never paste one.

Terms of service: https://devdome.com/terms-of-service
 Privacy policy: https://
devdome.com/privacy-policy

#### Link Radar status checks, https://api.devdome.com/amazon-404-oos-checker

**/check-batch** sends the Amazon **ASINs** found by your link scan, with each one’s
Amazon domain, to classify them as live / out of stock / 404. It runs when you press
Check Now, and on the Link Radar schedule only while automatic re-scans are enabled;
a fresh install that has never scanned makes no request.

**/search** sends a product **keyword** (built from the product’s title or metadata)
to find a live replacement product. It is used by the bulk Replace ASIN tool and,
when you enable per-status dead-link recovery, at click time. No visitor data is
in either request.

Both are part of the hosted Link Radar service and require a **connected DevDome
account**. Creating the account costs nothing: each request carries this site’s 
domain and secret token so the service can meter usage. The free plan includes **
500 checks + searches per month** per account; paid plans raise the limit (20,000/
50,000 / 100,000, see devdome.com/pricing). The plugin shows your live usage meter
on its settings screen. When the site is not connected or the monthly limit is reached,
the service answers with an error and the plugin simply leaves link statuses unchanged,
so nothing on your site breaks.

#### Geo-localization, https://api.devdome.com/geo-resolve

Off by default. When you enable it, each `/go` click sends the **visitor’s IP address**
and the destination ASIN/domain, plus this site’s domain and secret token, so the
server can pick the visitor’s local Amazon store from the stores you have a tag 
for. The IP is used for the country lookup only and cached briefly. Enable this 
feature only if you want visitor IPs used for country detection. Geo store-routing
is part of the hosted DevDome service and is **free with a connected DevDome account**;
without one, visitors simply keep the original link.

#### DevDome account, https://api.devdome.com/plugin/account, /plugin/disconnect and https://analytics.devdome.com/api/plugin/connect/*

Made by the shared DevDome library bundled with every plugin in the suite, and never
before you have acted: until you press a Connect button, save an Account ID or complete
a connection, no account request is made. The account check is a GET carrying this
site’s domain and its secret token, answered with the Account ID and account email
address the token belongs to. Disconnect is a POST with the same two fields, sent
only when you press Disconnect. Pressing Connect registers a short-lived connect
request (`/api/plugin/connect/start`, a POST with the site domain and token) and,
after you authorize on devdome.com, the plugin collects the resulting Account ID
server-to-server (`/api/plugin/connect/claim`, same fields plus the request handle);
the Account ID and token never travel in your browser’s URL. `https://devdome.com/
connect/` is a link you click, not a request the plugin makes: your browser goes
there to sign in and comes back.

#### Amazon

At click time the `/go` endpoint expands Amazon shortlinks (amzn.to, a.co, …) by
requesting them server-side from Amazon, so the final product URL can be validated
and tagged. The result is cached for 12 hours. Only the shortlink URL is requested;
no visitor data is sent to Amazon by the plugin.

This service is provided by Amazon.com, Inc.: [Conditions of Use](https://www.amazon.com/gp/help/customer/display.html?nodeId=GLSBYFE9MGKKQXXM),
[Privacy Notice](https://www.amazon.com/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ).

#### Not contacted on this WordPress.org build

The bundled shared library also references endpoints this build never calls: the`
https://api.devdome.com/bot-protection/` signature feeds (Click Protection here 
uses the plugin’s built-in bot list; no feed is fetched and no feed cron is scheduled)
and `https://api.devdome.com/plugin-updates/` (self-hosted updates, disabled here;
updates come only from WordPress.org).

#### Never sent, in any request

 * Passwords and password hashes.
 * Visitor form input, names or email addresses.
 * Post, page, comment or any other WordPress content: the link scanner runs locally,
   and only the extracted ASINs leave the site.

### Source & build

All PHP and JavaScript in this plugin ship human-readable. The admin screen bundle(`
assets/admin/index.js` / `index.css`) is compiled with Vite from the JSX source 
included in this plugin at `admin-ui-src/src/`, and is deliberately built without
minification, so the shipped file is the readable, running code. The stylesheet 
is likewise unminified.

To rebuild the bundle from source: `cd admin-ui-src`, then `npm install` and `npm
run build`. The build writes `index.js` and `index.css` into `assets/admin/`. The
bundle inlines its npm dependencies, whose exact versions are pinned in `admin-ui-
src/package-lock.json`: [React](https://github.com/facebook/react) and [ReactDOM](https://github.com/facebook/react)(
MIT), and [Lucide React](https://github.com/lucide-icons/lucide) (ISC); react-dom’s
production build contains pre-compressed code from the upstream npm package.

## Installation

 1. Upload the plugin ZIP via Plugins  Add New  Upload Plugin, or copy the folder to`
    wp-content/plugins/`.
 2. Activate it.
 3. Go to the DevDome Affiliate Manager admin page, add your Amazon affiliate tag(s),
    and configure the features you want.

## FAQ

### Do I need an account or an API key?

No. Everything works without a DevDome account; the shared services run on the DevDome
backend and need no key on your side.

### Does geo-localization need every regional Amazon tag?

It only redirects to stores you’ve added a tag for. Visitors from other countries
keep the original link, so you never lose a commission.

### What happens when a product is discontinued?

The monitor flags it, and (if enabled) clicks are redirected to a live replacement
product or the Amazon search page instead of a dead page.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“DevDome Affiliate Manager” is open source software. The following people have contributed
to this plugin.

Contributors

 *   [ DevDome ](https://profiles.wordpress.org/devdome/)

[Translate “DevDome Affiliate Manager” into your language.](https://translate.wordpress.org/projects/wp-plugins/devdome-affiliate-manager)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/devdome-affiliate-manager/),
check out the [SVN repository](https://plugins.svn.wordpress.org/devdome-affiliate-manager/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/devdome-affiliate-manager/)
by [RSS](https://plugins.trac.wordpress.org/log/devdome-affiliate-manager/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.0.1

 * The two redirect pages emit their scripts via `wp_print_inline_script_tag()`.
 * The admin bundle’s JSX/Vite source is included at `admin-ui-src/`; build steps
   are in the Source & build section.
 * The External services section links Amazon’s Conditions of Use and Privacy Notice.

#### 1.0.0

 * WordPress.org release. Every identifier the plugin owns now uses its own `devdaffi_`
   prefix (options, tables, cron hooks, REST namespace, script handles, shortcode—
   the button shortcode is now `[devdaffi_button]`). Self-hosted upgrades migrate
   stored settings, click stats and the link index automatically, and the old button
   shortcode keeps working via an alias.
 * Click Protection now has a built-in bot list, so it works with no external service
   or feed.
 * Link Radar’s scheduled auto-scan is off by default; run a scan or enable the 
   schedule to start link monitoring.
 * Removed the robots.txt writer and unused legacy settings; `/go` redirects now
   always send an `X-Robots-Tag: noindex, nofollow` header, the standard behavior
   for a redirect endpoint.
 * The admin bundle ships unminified.

#### 0.5.4

 * Expanded External services disclosure.

#### 0.5.3

 * Readme copy polish.

#### 0.5.2

 * WordPress.org build support: the self-hosted suite updater is excluded from this
   package (updates come from WordPress.org only), the shared bot-list feed and 
   the suite dashboard’s one-click installs are disabled in WordPress.org builds,
   the bundled devdome-core library was updated, uninstall now removes the remaining
   plugin options, transients and scheduled events, and the External services disclosure
   was extended.

#### 0.5.1

 * Click attribution privacy: outbound hops now carry an opaque token instead of
   the site hostname in the URL; the token is resolved server-side. (Version numbering:
   0.4.9 is followed by 0.5.1. No version segment goes above 9.)

#### 0.4.9

 * Fixed: in DevDome Analytics, a `/go` button click is now attributed to the page
   it was clicked from instead of appearing as a separate page.

#### 0.4.8

 * Click reports to DevDome Analytics now declare the link type explicitly, so click
   classification keeps working even if the `/go` slug is ever renamed.

#### 0.4.7

 * Fixed: the mobile App Opener bridge page now sends the same no-referrer policy
   as every other redirect path.

#### 0.4.6

 * `/go` redirects now send a `Referrer-Policy: no-referrer` header so the redirecting
   page is not exposed to the destination.

#### 0.4.5

 * Fixed: WooCommerce generated buttons now use the Amazon store you selected instead
   of always amazon.com.
 * Fixed: a link scan that fails part-way no longer wipes the link index; the previous
   index is kept until a full scan completes.
 * Fixed: the keyword auto-linker keeps the original text when a regex limit is 
   hit instead of blanking the content.

#### 0.4.4

 * Split into a public edition and an in-house edition; controls that are not part
   of the public plugin were removed from this build.

#### 0.3.8

 * WordPress.org readiness pass: security and escaping review, Plugin Check fixes.

#### 0.3.0

 * Button Link: choose the Amazon marketplace for generated links via Edit / Regenerate,
   with an option to omit the affiliate tag.
 * Custom button links now support an {ASIN} placeholder that is filled with the
   product’s ASIN at render time.

#### 0.2.0

 * Per-status dead-link routing (replacement product / search page) for Out-of-Stock
   and 404.
 * WooCommerce external-button rewrite; bulk Replace ASIN tool.
 * Geo-localization, click protection, mobile app opener, link monitor.

## Meta

 *  Version **1.0.1**
 *  Last updated **18 hours ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.0 or higher **
 *  Tested up to **7.0.4**
 *  PHP version ** 7.4 or higher **
 * Tags
 * [affiliate](https://wordpress.org/plugins/tags/affiliate/)[affiliate links](https://wordpress.org/plugins/tags/affiliate-links/)
   [amazon](https://wordpress.org/plugins/tags/amazon/)[redirect](https://wordpress.org/plugins/tags/redirect/)
   [woocommerce](https://wordpress.org/plugins/tags/woocommerce/)
 *  [Advanced View](https://wordpress.org/plugins/devdome-affiliate-manager/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/devdome-affiliate-manager/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/devdome-affiliate-manager/reviews/)

## Contributors

 *   [ DevDome ](https://profiles.wordpress.org/devdome/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/devdome-affiliate-manager/)