Merchandillo Bridge for WooCommerce WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA

Standalone WooCommerce plugin that syncs order changes to the Merchandillo platform.

What It Does

• Adds a plugin settings page in Settings > Merchandillo Sync
• Stores Merchandillo credentials (API base URL, API key, API secret)
• Watches WooCommerce order lifecycle events:
  • new order created
  • order updated
  • order status changed
• Queues syncs asynchronously via WP-Cron and sends order payloads to:
  • POST /api/woocommerce/orders
• Never blocks checkout: failures are logged, not thrown

Architecture

The plugin is split into focused classes under includes/:

• class-merchandillo-woocommerce-bridge.php: thin integration layer that registers hooks
• class-merchandillo-service-locator.php: lazy dependency wiring
• class-merchandillo-settings*.php: settings storage/sanitization and settings tab rendering
• class-merchandillo-order-*.php: sync flow and order payload construction
• class-merchandillo-log-*.php: log discovery, filtering, export formatting, and rendering
• class-merchandillo-admin-page.php: page-level admin orchestration (tabs, actions, asset enqueue)
• contracts/: interfaces for core services

Local Development Environment

This repository includes a full local WordPress + WooCommerce stack with this plugin mounted and enabled.

Prerequisites

• Docker Desktop (or Docker Engine with Compose)

Start Environment

./scripts/dev-up.sh

This script will:

1. Start MariaDB + WordPress containers
2. Install WordPress (first run)
3. Install and activate WooCommerce
4. Activate this plugin
5. Seed sample products and sample orders

Default URL and credentials:

• URL: http://localhost:8088
• Admin user: admin
• Admin password: admin123!

Stop Environment

./scripts/dev-down.sh

Configure Merchandillo Credentials

Go to:

• WordPress Admin > Settings > Merchandillo Sync

Set:

• API Base URL (example: https://data.merchandillo.com)
• API Key
• API Secret
• Language (English or Greek)

The selected language is stored in plugin settings and reused automatically on future visits.

Logs

You can inspect logs directly in:

• Settings > Merchandillo Sync > Logs
• The plugin remembers your last selected tab (Settings or Logs)
• Filter by file, level, and text
• Show the latest 100 lines quickly
• Export filtered logs
• Clear plugin log files when needed

Connection Test

If API Base URL, API Key, and API Secret are set, a Test API Connection button appears in:

• Settings > Merchandillo Sync > Settings

The test sends an authenticated test request and reports the result in an admin notice.

If you prefer WooCommerce's native log viewer, check:

• WooCommerce > Status > Logs
• Select log source: merchandillo-woocommerce-bridge

API Contract

The plugin currently sends one order per request to:

• POST {API_BASE_URL}/api/woocommerce/orders

Headers:

• X-API-Key: <api_key>
• X-API-Secret: <api_secret>

The payload includes customer details, addresses, totals, status, and line items.

Unit Tests

Install dev dependencies and run tests:

composer install
composer test

Run coverage (via phpdbg):

phpdbg -qrr vendor/phpunit/phpunit/phpunit --configuration phpunit.xml.dist --coverage-text