Rlink Membership Sync for XFileSharingPro with s2Member

Description

Rlink Membership Sync for XFileSharingPro with s2Member connects a WordPress membership page to a PayPal checkout hosted by an administrator-configured XFileSharingPro installation.

The plugin generates a signed, time-limited referral token before redirecting a visitor to XFileSharingPro. After a verified one-time PayPal premium purchase, an authenticated callback can create or update the WordPress user, assign the matching s2Member level, save payment metadata, and set the s2Member Automatic EOT date.

Features include:

  • PayPal as the only enabled payment gateway.
  • Verified one-time payment synchronization.
  • A configurable premium checkout shortcode.
  • Signed, time-limited referral tokens and replay protection.
  • HMAC-SHA256 callback authentication and timestamp validation.
  • HTTPS enforcement and proxy-aware SSL detection.
  • Cloudflare and CDN no-cache response headers.
  • Automatic WordPress user creation.
  • Existing-user updates and expired-membership reactivation by email.
  • XFileSharingPro Premium to s2Member Level 3 mapping.
  • XFileSharingPro Premium Pro to s2Member Level 4 mapping.
  • Configurable fallback s2Member level.
  • s2Member Paid Subscription ID, gateway, and Automatic EOT metadata.
  • Administrator account protection.
  • Optional WordPress new-user email.
  • Duplicate transaction protection.
  • File-based synchronization logging.
  • Manual single-transaction recovery in the companion XFileSharingPro connector.

Free and Pro editions

This WordPress.org edition is intended for verified one-time PayPal purchases. A separate Pro edition is available for multi-gateway checkout, recurring lifecycle synchronization, verified cancellation and refund events, diagnostics, alerts, callback monitoring, and custom gateway development.

The editions are standalone and should not be active at the same time. This plugin never activates or deactivates another plugin. When a known conflicting integration is detected, an administrator receives a dismissible notice and must decide which plugin to deactivate.

Requirements

  • WordPress 6.0 or newer.
  • PHP 7.4 or newer.
  • An active s2Member installation.
  • A licensed XFileSharingPro installation controlled by the site administrator.
  • The compatible PayPal-only connector installed on the XFileSharingPro server.
  • HTTPS on WordPress and XFileSharingPro.

External services

The plugin redirects a visitor to the XFileSharingPro URL configured by the WordPress administrator. The redirect includes a signed referral token and the requested membership plan. The configured XFileSharingPro server returns an authenticated callback containing the account and payment information needed for synchronization, such as email address, username, transaction identifiers, payment gateway, plan, and expiration details. An optional password may be received only when the administrator explicitly configures the companion connector to send it.

PayPal checkout and PayPal IPN verification are performed by the separately installed XFileSharingPro connector. This WordPress plugin does not send payment-card data to Rlink Plugins or Rlink Cloud Solutions and does not make background requests to the Rlink website. Documentation, support, and comparison links contact their destination only after an administrator clicks them.

Administrators are responsible for the terms and privacy policies that apply to their own XFileSharingPro installation, PayPal account, and membership website.

Privacy

The plugin stores its configuration in a prefixed WordPress option. Successful synchronization stores prefixed integration metadata and the required s2Member metadata on the relevant WordPress user. Operational events are written to a log under the WordPress uploads directory. The log can contain account and transaction identifiers needed for support; extended context is included only when diagnostic logging is enabled.

The plugin does not transmit telemetry or analytics to Rlink Plugins or Rlink Cloud Solutions.

Credits

Developed and maintained by Rlink Plugins and Rlink Cloud Solutions.

Third-party trademark disclaimer

This is an independent third-party integration. It is not affiliated with, sponsored by, or endorsed by XFileSharingPro, Sibsoft, s2Member, or their respective owners. Product names are used only to identify compatibility.

Installation

  1. Upload rlink-membership-sync-xfilesharingpro-s2member.zip through Plugins > Add New > Upload Plugin.
  2. Activate Rlink Membership Sync for XFileSharingPro with s2Member.
  3. Open Settings > Rlink Membership Sync.
  4. Enter the XFileSharingPro premium URL, normally https://xfs.example.com/?op=payments.
  5. Copy the Shared Secret and displayed callback endpoint to the XFileSharingPro connector configuration.
  6. Install the compatible PayPal-only connector on XFileSharingPro.
  7. Add [rlink_xs2_premium_link label="Continue to Premium Checkout"] to the WordPress membership page.
  8. Complete a controlled one-time PayPal test.

FAQ

Which payment gateway is supported?

PayPal only. The compatible connector forces one-time checkout.

Will a direct XFileSharingPro purchase create a WordPress account?

Not when referral-token enforcement is enabled. The purchase must begin through the WordPress shortcode.

Can an existing user purchase premium again?

Yes. The plugin finds the user by email, restores the mapped role, and updates the Automatic EOT date.

Does the plugin automatically deactivate another plugin?

No. It displays a capability-gated, dismissible warning when a known conflicting integration is active. The administrator must manually resolve the conflict.

Does the plugin send telemetry?

No. It does not send usage tracking or telemetry.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“Rlink Membership Sync for XFileSharingPro with s2Member” is open source software. The following people have contributed to this plugin.

Contributors

Changelog

2.2.0

  • Renamed the plugin, slug, package, text domain, and administration identity.
  • Added the RlinkPlugins\MembershipSync namespace and unique rlink_xs2_ identifiers.
  • Added safe migration from the previous settings option and compatibility fallbacks for existing metadata and referral tokens.
  • Replaced automatic plugin deactivation with a capability-gated, dismissible conflict notice.
  • Moved HMAC callback authentication into the REST permission callback.
  • Removed unauthenticated transient and log writes from the public checkout-start endpoint.
  • Improved input handling, output escaping, logging sanitization, and WordPress.org disclosures.