ddverifactu

ddverifactu is a WooCommerce invoice management plugin designed to generate PDF invoices for orders and make them available to customers in a secure way.

The plugin creates invoice records, assigns invoice numbers by series and year, generates PDF documents, and adds a dedicated “My invoices” section inside the WooCommerce customer account area.

For better protection of invoice files, generated PDFs are stored in the WordPress uploads directory using an encrypted file format. Customers do not access the physical PDF file directly. Instead, invoices are delivered through a controlled download endpoint that validates the logged-in user, the related WooCommerce order, and the invoice permissions before serving the decrypted PDF.

Main features:

• Generate invoice records for WooCommerce orders.
• Assign invoice numbers by series and year.
• Generate PDF invoices from WooCommerce order data.
• Store invoice files inside wp-content/uploads/facturas.
• Encrypt stored PDF files to reduce the risk of direct file exposure.
• Add a “My invoices” section to the WooCommerce customer account.
• Allow customers to download only invoices linked to their own orders.
• Allow store managers and administrators to download invoices from the order admin area.
• Add a custom WooCommerce order status for generated invoices.
• Create protected upload directories with basic access-control files where supported by the server.

Security and privacy

Invoices may contain personal, billing, tax, and order information. For this reason, ddverifactu does not expose direct public links to invoice PDF files.

Generated invoices are stored as encrypted files and are only decrypted when an authorized user requests a valid download. The download process checks authentication, invoice token, order ownership, and WooCommerce management capabilities before serving the file.

Depending on the server configuration, additional web server rules may be recommended to block direct access to the invoice storage directory. This is especially relevant on Nginx-based environments, where .htaccess files are not processed.

Requirements

• WordPress.
• WooCommerce.
• PHP with OpenSSL support.
• A server environment that allows writing to the WordPress uploads directory.
• Permalinks enabled for the customer account endpoint.

Important note

This plugin generates and stores invoice files. Site owners are responsible for verifying that invoice format, numbering, tax information, legal texts, and fiscal requirements comply with the regulations applicable to their business.