WP Manifestindependent plugin directory
manifest / security / ipblock-woocommerce

IP Block for WooCommerce

IP Block protection for WooCommerce (ip-block.com integration). Untested at the moment — please feel free to modify. GPLv3.

by IP Block Ltd · github.com/ip-block-ltd/ipblock-woocommerce · website

★ 0stars
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/ip-block-ltd/ipblock-woocommerce/archive/refs/heads/main.zip
Readme github.com/ip-block-ltd/ipblock-woocommerce ↗

⚠️ Status: untested. This extension is provided as-is and has not been tested in production. Please feel free to fork, modify, improve, and open pull requests.

Licensed under GNU GPLv3 (see LICENSE).

IP Block for WooCommerce (WooCommerce 10.9.4)

WooCommerce plugin that screens storefront visitors against the ip-block.com service and blocks flagged IP addresses — with an extra check at checkout so a freshly-flagged IP cannot place an order.

Admin configuration

WooCommerce → Settings → IP Block

Field Purpose
Enable IP Protection Master on/off switch
Site ID Your 12-character ip-block.com site identifier
API Key Your 48-character key
API Endpoint URL Defaults to https://api.ip-block.com/v1/check
If service is unreachable Fail open (allow) or closed (block)
Decision Cache Lifetime Seconds a decision is cached; 0 = check every request
Behind a proxy / CDN Read the real IP from CF-Connecting-IP / X-Forwarded-For
When a visitor is blocked Redirect to ip-block.com, or show a local 403
Block Message Local 403 text
Allowlisted IPs One IP per line — never blocked

Install

  1. Requires WooCommerce active (declared via Requires Plugins: woocommerce).
  2. Copy the ip-block-woocommerce folder into wp-content/plugins/.
  3. Plugins → Activate "IP Block for WooCommerce".
  4. Configure under WooCommerce → Settings → IP Block and tick Enable.

How it works

  • Hooks plugins_loaded (priority 1) to stop flagged IPs before heavy work.
  • Also hooks woocommerce_checkout_process to re-check at order placement.
  • Admin, cron, WP-CLI and AJAX requests are never screened.
  • HPOS (custom order tables) compatibility is declared.
  • IPBlock_WC_Client speaks the ip-block.com API (POST /v1/check → {"action":...}).

Notes

  • Allowlist your own IP before enabling so you cannot lock yourself out of the store.
  • Settings are stored as ipblock_wc_* options (standard WooCommerce settings API).