Support » Plugin: PDF Invoices & Packing Slips for WooCommerce » Invoice link for customers (wp-admin/admin-ajax.php)

  • Resolved Erik Geurts

    (@erikgeurtsplatformiqcom)


    We have protected the wp-admin folder of our site/store so that only specific IP addresses are allowed for managing the site and store, for security reasons.

    However, it turns out that the link to enable customers to download their invoices is /wp-admin/admin-ajax.php?action=generate_wpo_wcpdf&document_type=invoice&order_ids=xxxxx&my-account&_wpnonce=xxxxxxxxxxx

    So this results in customers to be unable to download their invoices. Everything else in the My Account area works perfectly.

    Any hints on an extra entry in the .htaccess to allow public access to wp-admin/admin-ajax.php?action=generate_wpo_wcpdf only?

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Contributor Ewout

    (@pomegranate)

    Although the name admin-ajax suggests differently, it is used for various other frontend (customer facing) processes. If you allow access to the admin-ajax.php file that should restore functionality.

    Thread Starter Erik Geurts

    (@erikgeurtsplatformiqcom)

    Thanks for the quick feedback. How do I allow access to that one file while still blocking access to everything else in wp-admin? I realize this is not a product specific question, more an Apache question…

    Plugin Contributor Ewout

    (@pomegranate)

    I think this is what you need: https://stackoverflow.com/a/51221134/1446634

    Thread Starter Erik Geurts

    (@erikgeurtsplatformiqcom)

    Thanks, that helped a lot!

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Invoice link for customers (wp-admin/admin-ajax.php)’ is closed to new replies.