Plugin Documentation

License Activation

A valid license key is required to use PRO features and receive automatic updates.

How to Activate

1. Go to Advanced Order Tracker PRO → License in your WordPress admin.
2. Enter your license key in the License Key field.
3. Click Activate License.
4. The page will show an Active badge confirming activation.

License Notes

• Single Store license: 1 domain activation.
• Business license: up to 3 domain activations.
• Agency license: up to 15 domain activations.
• If you move your store to a new domain, deactivate the old license first from the License page.

System Requirements

Advanced Order Tracker PRO requires the following server and plugin environment.

Minimum Requirements

• WordPress 5.8+
• WooCommerce 6.0+ (HPOS/Custom Order Tables compatible)
• PHP 7.4+ (PHP 8.x recommended)
• MySQL 5.7+ or MariaDB 10.3+
• Active SSL certificate (HTTPS) — required for webhook and OTP security

Recommended

• PHP 8.1 or 8.2
• WooCommerce with HPOS enabled
• WordPress Cron working properly (for status sync)

Courier Setup Overview

Go to Advanced Order Tracker PRO → Courier Setup → Courier to configure your active courier.

Steps

1. Select your active courier provider from the dropdown (SteadFast, Pathao, REDX, Paperfly, or Manual).
2. Click the provider name in the sidebar to enter credentials.
3. Use the Test Connection button to verify API credentials.
4. Save settings.
5. Configure auto-sync interval and auto shipment creation options.

All API keys and tokens are stored encrypted in the database.

SteadFast Courier Setup

Go to Courier Setup → SteadFast.

Required Credentials

• API Key (from SteadFast merchant panel)
• Secret Key

Features with SteadFast

• Create shipment from WooCommerce order
• Bulk send multiple orders
• Auto status sync with WooCommerce order status mapping
• Balance check from plugin settings
• Customer fraud/delivery history check via SteadFast history endpoint
• Webhook support for real-time status updates

Pathao Courier Setup

Go to Courier Setup → Pathao.

Required Credentials

• Client ID
• Client Secret
• Environment: Live or Sandbox

Setup Steps

1. Enter Client ID and Client Secret from your Pathao merchant panel.
2. Select Live environment for production.
3. Click Fetch Token to generate access token.
4. Fetch Merchant Info and select your store.
5. Configure Webhook Callback URL and Secret.
6. Test connection.

REDX Courier Setup

Go to Courier Setup → REDX.

Required Credentials

• API Bearer Token
• REDX Store ID

Setup Steps

1. Enter your REDX Bearer Token from the REDX merchant dashboard.
2. Enter your Store ID.
3. Click Fetch Stores to select your store.
4. Add Webhook Secret if using REDX webhooks.
5. Test connection.

Paperfly Courier Setup

Go to Courier Setup → Paperfly.

Required Credentials

• API Token / Key
• Username + Password / Secret
• Merchant Code

Endpoints Configured Automatically

• Create order endpoint
• Tracking endpoint
• Smart Check / customer history endpoint

Elementor Tracking Widget

Advanced Order Tracker PRO includes an Elementor Tracking Widget, so you can create a branded tracking page without copying shortcodes manually.

How to Use

1. Go to WordPress Dashboard → Pages → Add New.
2. Click Edit with Elementor.
3. Select the Advanced Order Tracker PRO Tracking Widget widget.
4. Customize tracking layout, color, text, and button style.
5. Click Publish. Customers can now use the branded tracking page to check order status.

What Customers Can See

• Order status timeline
• Courier information
• Live delivery status update
• Secure tracking link
• Customer-friendly Bangla/English message

Secure Tracking URLs

When sending tracking links via WhatsApp/SMS, the plugin uses secure random token URLs:

Order IDs are never exposed in public URLs. Tokens are stored per order as _aotp_tracking_token. The tracking endpoint also validates WooCommerce order key where required.

Fraud Control Settings

Go to Fraud & Verification → Fraud Control.

Settings Overview

• Enable Fraud Check: Turn fraud scoring on/off.
• Risk Threshold: Score above which order is flagged/blocked.
• Phone Validation: Block invalid numbers, require Bangladesh format.
• Duplicate Window: Block same phone/email within X minutes.
• Success Rate Filter: Block customers below minimum delivery success rate.
• Blacklist/Whitelist: Manual phone number lists, CSV import/export.
• Email Block: Block disposable email domains.
• IP Block: Block specific IPs, wildcards, or CIDR ranges.
• OTP Settings: Configure OTP threshold, expiry, cooldown, and gateway.

WhatsApp Setup

Go to Customer Communication → WhatsApp.

Requirements

• Meta Business Account with WhatsApp Business API access
• Permanent Access Token
• Phone Number ID from Meta Developer Console
• Approved message templates (for template messages)

Configuration Steps

1. Enter your Meta WhatsApp Access Token.
2. Enter your Phone Number ID.
3. Enter App Secret for webhook signature verification.
4. Set template names for Shipped, Out for Delivery, Delivered messages.
5. Configure the WhatsApp Webhook URL in your Meta App settings.
6. Test by sending a test order status message.

SMS Gateway Setup

Go to Customer Communication → WhatsApp and scroll to the SMS section.

Supported SMS Gateways

• BulkSMSBD
• Twilio
• SSL Wireless

Setup

1. Select your active SMS gateway.
2. Enter the gateway API key/SID/token and sender ID.
3. Save and test with a sample message.
4. Enable SMS for specific message types: OTP, order status, COD recovery, feedback.

Social 2-Way Inbox

Social 2-Way Inbox lets you manage WhatsApp, Facebook Messenger and Instagram DM conversations from one communication workflow.

Main Features

• WhatsApp primary inbox with order-wise conversation history.
• Facebook Messenger and Instagram DM fallback for linked customers.
• Custom reply templates that fill the textarea only; they do not auto-send.
• Image attachment and paste-image support in the reply box.
• Channel-wise message logs for WhatsApp, Facebook, Instagram and SMS.

Important Meta Note

Facebook/Instagram fallback works only after the customer messages your Page/Instagram once or clicks the order update opt-in button. Promotional messages are not sent from this module.

COD Reconciliation

Go to Reports & Accounting → COD Reconciliation.

How It Works

1. Download the payment statement CSV from your courier portal (SteadFast, Pathao, REDX, etc.).
2. Upload the CSV file in the COD Reconciliation page.
3. The plugin matches courier rows with WooCommerce orders by order ID, consignment ID, or customer phone.
4. View matched rows with status: paid, missing, mismatch, or unmatched.
5. Review profit/loss per order based on CSV amount vs. WooCommerce order total.
6. Export reconciliation result as CSV.

Download Invoice

Advanced Order Tracker PRO can show a secure Download Invoice button on the WooCommerce Thank You / Order Received page.

Main Features

• Customer can download/print an HTML invoice after placing an order.
• Invoice includes order number, date, billing information, payment method, products, quantity, subtotal and total.
• Invoice access is protected by WooCommerce order key and nonce validation.
• Store owner can turn the invoice button on/off from the Fraud & Verification settings area.

Where to Configure

Go to Advanced Order Tracker PRO → Fraud & Verification → Fraud Control and use the Download Invoice toggle.

License & Auto Updates

PRO features and plugin updates are protected by the built-in license system.

Security Features

• Encrypted license key storage.
• Signed license response verification using RSA-SHA256.
• Unsigned or fake license responses are rejected by default.
• Update URLs are kept hidden from the admin UI.
• Plugin can show available updates inside the WordPress dashboard.

Important Note

The license private key stays on the license server only. It is never included inside the customer plugin ZIP.

REST API

The plugin exposes a secure REST endpoint for external app/mobile integration.

Track Order Endpoint

Request Body

Response

Returns masked customer info, order status, item summary, timeline, and latest courier update. The PRO route is protected so the free fallback route does not overwrite it. Tracking token and WooCommerce order key are used for security validation.

Webhook URLs