Kous Cash on Delivery Filter helps store owners prevent repeat Cash on Delivery problems.<\/p>\n\n
Main features:<\/p>\n\n
4477*<\/code>.<\/li>\n- Block by privacy-preserving SHA-256 device fingerprint.<\/li>\n
- Store IP addresses for investigation and correlation without blocking by IP alone.<\/li>\n
- Hide or restore Cash on Delivery instantly during checkout with AJAX.<\/li>\n
- Add a customer's email, phone, IP address, and available device fingerprint from the WooCommerce order screen.<\/li>\n
- Save the device fingerprint to new WooCommerce orders.<\/li>\n
- Import and export blocklist entries as CSV.<\/li>\n
- Export, clear, or delete individual attempt-history records.<\/li>\n
- Search email and phone blocklists.<\/li>\n
- Compatible with WooCommerce High-Performance Order Storage (HPOS).<\/li>\n<\/ul>\n\n
International phone handling<\/h4>\n\n
Phone values are normalized without country-specific assumptions. Formatting characters are removed, and the international 00<\/code> access prefix is normalized so that +44...<\/code> and 0044...<\/code> match.<\/p>\n\nTo prevent accidental partial blocking:<\/p>\n\n
\n- Exact phone entries must contain 6 to 15 digits.<\/li>\n
- Wildcard phone entries must contain 4 to 15 digits.<\/li>\n
- Phone matching is exact unless an administrator explicitly adds a wildcard.<\/li>\n
- Substring matching is never used.<\/li>\n<\/ul>\n\n
IP address safety<\/h4>\n\n
IP addresses are stored for reference, export, and investigation. An IP address never removes Cash on Delivery by itself. This avoids false positives on mobile networks, carrier-grade NAT, offices, hotels, and shared connections.<\/p>\n\n
Device fingerprints<\/h4>\n\n
The plugin creates a browser\/device signal and stores only its SHA-256 hash. New WooCommerce orders save the hash as order metadata when checkout provides it. Blocking an order can then add the saved device hash to the blocklist.<\/p>\n\n
A device fingerprint is a probabilistic browser signal, not a guaranteed unique hardware identifier. Browser changes, privacy settings, or different browsers may produce a different hash.<\/p>\n\n
Privacy<\/h3>\n\n
Depending on configuration and use, this plugin can store:<\/p>\n\n
\n- Customer email addresses.<\/li>\n
- Customer phone numbers.<\/li>\n
- IP addresses.<\/li>\n
- Hashed browser\/device fingerprints.<\/li>\n
- User-agent strings in attempt history.<\/li>\n<\/ul>\n\n
Store owners are responsible for providing appropriate privacy notices, determining a lawful basis, defining retention periods, and responding to data-subject requests under applicable laws.<\/p>\n\n\n
\n- Upload the plugin ZIP through Plugins > Add New > Upload Plugin<\/strong>.<\/li>\n
- Activate Kous Cash on Delivery Filter<\/strong>.<\/li>\n
- Open WooCommerce > Kous Cash on Delivery Filter<\/strong>.<\/li>\n
- Add entries manually, import a CSV, or use the button on a WooCommerce order.<\/li>\n<\/ol>\n\n\n
\nCan an IP address block a customer by itself?<\/h3><\/dt>\nNo. IP addresses are stored only for reference and correlation.<\/p><\/dd>\n
Why are very short phone entries rejected?<\/h3><\/dt>\nTo prevent partial values entered during typing, such as 697<\/code>, from becoming broad blocking rules. Exact international entries require 6-15 digits.<\/p><\/dd>\nDoes the plugin support international numbers?<\/h3><\/dt>\nYes. It does not remove or assume a specific country code. +<\/code> formatting and the 00<\/code> international prefix are normalized.<\/p><\/dd>\nDoes it support HPOS?<\/h3><\/dt>\nYes. Order access and metadata use WooCommerce CRUD APIs, and HPOS compatibility is declared.<\/p><\/dd>\n
Are device details stored in plain text?<\/h3><\/dt>\nNo. The browser signal is converted to a SHA-256 hash before storage.<\/p><\/dd>\n\n<\/dl>\n\n\n
1.1.5<\/h4>\n\n\n- Replaced query-string admin notices with secure per-user transients.<\/li>\n
- Documented WooCommerce checkout nonce verification for static analysis.<\/li>\n
- Scoped uninstall variables inside a uniquely prefixed function.<\/li>\n
- No blocking or checkout behavior changes.<\/li>\n<\/ul>\n\n
1.1.4<\/h4>\n\n\n- Removed the unnecessary manual text-domain loader.<\/li>\n
- Improved checkout input sanitization without changing matching behavior.<\/li>\n
- Added safe prepared identifier placeholders to custom-table queries.<\/li>\n
- Prefixed uninstall variables to follow WordPress coding standards.<\/li>\n<\/ul>\n\n
1.1.3<\/h4>\n\n\n- Added checkout nonce validation and completed the security review fixes requested by the WordPress.org Plugin Review Team.<\/li>\n<\/ul>\n\n
1.1.2<\/h4>\n\n\n- Added explicit WooCommerce checkout nonce validation before processing checkout POST data that can write logs or update the device blocklist.<\/li>\n
- Removed raw checkout POST reads from order creation and payment-gateway filtering; these paths now use normalized WooCommerce session\/customer data.<\/li>\n
- Removed database migration work from normal admin page rendering.<\/li>\n<\/ul>\n\n
1.1.1<\/h4>\n\n\n- Replaced direct CSV file handles with WordPress filesystem access.<\/li>\n
- Replaced timezone-sensitive date() calls with gmdate().<\/li>\n
- Updated CSV export generation without direct fopen()\/fclose() calls.<\/li>\n<\/ul>\n\n
1.1.0<\/h4>\n\n\n- Added international-safe phone normalization and validation.<\/li>\n
- Prevented storage and matching of clearly incomplete phone values.<\/li>\n
- Removed substring phone matching.<\/li>\n
- Changed IP addresses to reference-only data that cannot block by themselves.<\/li>\n
- Added reliable device fingerprint persistence through WooCommerce checkout sessions and order metadata.<\/li>\n
- Added device blocking from the WooCommerce order screen when a saved fingerprint is available.<\/li>\n
- Added individual attempt-history deletion.<\/li>\n
- Added device-copy controls in attempt history.<\/li>\n
- Moved admin JavaScript and CSS to properly enqueued asset files.<\/li>\n
- Declared WooCommerce HPOS compatibility.<\/li>\n
- Updated documentation and privacy information.<\/li>\n<\/ul>\n\n
1.0.0<\/h4>\n\n\n- Initial release.<\/li>\n<\/ul>","raw_excerpt":"Restrict WooCommerce Cash on Delivery using email, international phone numbers, device fingerprints, and reference-only IP data.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/336721","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=336721"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/kouskouris"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=336721"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=336721"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=336721"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=336721"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=336721"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=336721"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}