RAR Woo Stock & Order

Mobile-first WooCommerce stock manager and staff order entry app (PWA) for teams that work mainly from their phones.

⬇️ Download

• Install: WordPress → Plugins → Add New → Upload Plugin
• Upgrade: choose Replace current with uploaded

⚠️ Don't use GitHub's green Code → Download ZIP button to install the plugin. That archive contains the whole repository, so WordPress would install it as a second, broken plugin. Always use a link above. It contains the correct rar-woo-stock-order/ plugin folder.

Install / Upgrade

1. Back up the whole site first (Hostinger → Backups, or a backup plugin).
2. Download the ZIP from the link above.
3. WordPress Admin → Plugins → Add New → Upload Plugin → choose the ZIP → Install Now.
   • If an older version is installed, choose Replace current with uploaded.
4. Activate the plugin.
5. If you use LiteSpeed Cache: LiteSpeed Cache → Toolbox → Purge All.
6. Open WooCommerce → Stock & Order → Security & Health and fix anything red, then review Settings.
7. Add staff in WooCommerce → Stock & Order → Staff → Add staff (they get a set-password link). Never let staff sign up themselves. Print the QR code poster so staff can install the app.

📱 Installing the app on a phone

• If the app was installed before v1.2.1: delete the old icon from the home screen, open /staff/ in the browser and install it again. This gives you the new icon and the fixes.
• Long-press the app icon for the Create Order and Stock Manager shortcuts (Android).
• The site must be on HTTPS, otherwise the phone won't install the app.

What's new in v1.4.1: cleaner slip & short WhatsApp message

• Product photos on the sales slip; shop address in the footer (never cut off).
• WhatsApp message is short by default — items and quantities, total pcs, payment and status (prices are on the slip). Switch to Detailed in Settings → Branding & slip.

v1.4.0: the Control Center

WooCommerce → Stock & Order is now a responsive, tabbed control panel:

Also new: an admin-bar menu, a Dashboard widget, a Staff column on the orders list, a "Staff app" box on orders, a stock history box on products, and a printable QR poster for installing the app. Tests: tests/smoke.php 102 checks. See CHANGELOG.md.

Earlier in v1.3.0: concurrency, security, staff accounts

Tests (v1.3.0): 72 checks, HPOS on and off. Full details in RELEASE_NOTES.md.

Earlier in v1.2.2: order and report hardening

Earlier in v1.2.1: phone app fixes

Full details: CHANGELOG.md · RELEASE_NOTES.md

Repository structure

RAR-Woo-Stock-Order-Pro/
├── README.md                          ← this page
├── .github/workflows/validate.yml    ← automated checks (CI)
├── dist/
│   ├── rar-woo-stock-order.zip        ← latest installable plugin
│   └── rar-woo-stock-order-v1.4.1.zip ← this version
├── rar-woo-stock-order.php            ← plugin source code
├── includes/
├── assets/ (css, js, icons)
├── CHANGELOG.md
├── RELEASE_NOTES.md
├── readme.txt
└── tests/smoke.php                    ← runtime tests (102 checks)

What this plugin is for

RAR Woo Stock & Order intentionally focuses on two staff workflows:

1. Stock Manager — quickly search products and update stock from a phone.
2. Create Order — create real WooCommerce orders for Facebook, Instagram, phone or chat sales.

Product creation, full product editing and deletion stay in the normal WooCommerce → Products screens for Administrator / Shop Manager users. This avoids duplicating WooCommerce catalog management inside the staff app.

Staff App

Default URL:

https://your-store.com/staff/

The app is private, capability-protected and marked noindex,nofollow,noarchive.

Dashboard

• Live date and time in the store timezone: Friday । Sep 25, 2026 । 01:49:02 pm
• Colourful, clickable cards with Today / 7 days / This month:
  • Today's Orders · Today's Sales · Completed Orders · Returned / Cancelled (each with a comparison to the previous period)
• Stock cards:
  • All Stock — every product, highlighted green (above the low level), orange (1 to the low level) and red (0). View only.
  • Available / Live Stock — green and orange products, quantities editable in place.
  • Out of Stock — red products only, quantities editable in place.
• 7-day sales chart, "Needs attention" list and recent orders

Stock Manager

• Product name / SKU search, category filter, sort, level chips
• Product image, price, level badge, last update time
• − / + / +5 / +10 quantity controls, bulk Save all with a reason (restock, count correction, damaged, return, transfer)
• Movement log of every staff change and every WooCommerce order reduction / restock
• Unmanaged products shown as Not tracked with an explicit Set stock flow
• Protected stock updates through WooCommerce CRUD and WooCommerce logs (source: rar-wso)

Create Order

• Date and order number filled automatically
• Customer Details: Name , Contact No. (+88 + 11 digits, 013–019, Bangla digits accepted), Email (optional — receives WooCommerce order emails)
• Shipping Details: Full Address , District (searchable, all 64 districts), Town / City * (searchable list for the district, free text allowed)
• Order Details: colour-coded product search (stock-out products cannot be added), items with Sl No., quantity and optional price override
• Items subtotal → Discount (amount or %) → Shipping (auto Inside / Outside Dhaka, editable) → Total → In words (lakh / crore)
• Payment method: Cash on delivery, bKash, Nagad, Cash (paid at shop) — filterable with rar_wso_payment_options
• Returning-customer lookup by phone
• Save & Share: generates a sales order slip image — Share (phone share sheet: WhatsApp, Messenger, …), WhatsApp message to the customer, download, copy image, copy text

Production protections include Bangladesh district and phone validation on client and server, available-stock validation, duplicate-order retry protection, WooCommerce-native order creation, stock reduction and emails.

Shop Manager tools

Administrator and Shop Manager users (capability rar_wso_manage_orders) also see:

• Order Control — All Orders, Live Orders (running orders only, oldest first) and Total Processing, with search, status chips and status changes with Undo
• Sales & Growth — 7 / 30 / 90 days: sales, orders, average order and items sold with growth against the previous period, sales trend, orders per day, top products, payment methods, order status mix and sales channels

Roles

Woo Stock & Order Staff

Default staff capabilities:

• Access the private staff app
• Search/view products
• Update stock
• Create WooCommerce orders
• Override order-line price when the setting is enabled

The staff app does not provide product add/delete controls.

Administrator / Shop Manager

Continue to use native WooCommerce screens for:

• Add product
• Edit product
• Delete / Trash product
• Full catalog management

Settings

Open:

WooCommerce → Stock & Order → Settings (Administrators; Shop Managers can view)

Available settings:

• Enable / disable staff app
• App title
• Staff URL slug
• Default new order status
• Allow item-price override
• Staff discount limit (default 20%; covers discount + lower item rates; Shop Managers not limited)
• Shipping — Inside Dhaka / Outside Dhaka (auto-filled by district)
• Default shipping charge
• Low stock level (default 10)
• Staff order lists (view only)
• Business name and footer line on the sales slip
• Shop Managers may add / pause staff (Administrator only)
• Brand colour and logo (app header, login, slip, daily email), slip phone and address
• Payment methods on/off, extra methods, default method
• Free delivery from an amount; stock-change reasons
• Login limits (per username / per network), lock time, staff "keep me signed in" days
• Daily summary email (recipients, hour), history retention
• Admin bar menu, Dashboard widget, Staff column on the orders list

Staff accounts (no public registration)

Staff accounts are created by an Administrator in WooCommerce → Stock & Order → Staff accounts:

• Add staff — name, username, email. The person gets an email to set their own password; a one-time link (valid 24 hours) is also shown to share on WhatsApp.
• Pause / Resume — a paused account can't sign in anywhere and is signed out on every device.
• Sign out everywhere and New password link.
• Last active in app for every staff member.

Public sign-up can never create a staff account: the staff, Shop Manager, Editor and Administrator roles are blocked as the default sign-up role, and a self-registered user that somehow gets one is set back to Customer.

Integration Hooks

The plugin stays decoupled from courier, payment and workflow add-ons. Integrations can use these hooks:

• rar_wso_shipping_total
• rar_wso_payment_method
• rar_wso_payment_method_title
• rar_wso_order_created
• rar_wso_stock_updated
• rar_wso_order_status_changed
• rar_wso_live_statuses (filter)
• rar_wso_payment_options (filter)

This keeps RAR Woo Stock & Order focused while allowing other WooCommerce plugins to extend shipping, payment and order workflow behavior.

Security & Data Safety

• Per-product stock locks and fresh database reads for order creation and stock saves (no overselling, no lost updates)
• Staff login form: CSRF token, bot trap, failed-login limit (HTTP 429)
• Strict Content-Security-Policy (per-response nonce), X-Frame-Options, nosniff, Referrer-Policy, Permissions-Policy on app screens
• Staff order details limited to recent / own orders
• WordPress nonce on every AJAX request
• Capability check on every staff action
• No public inventory/order write endpoint
• WooCommerce CRUD APIs instead of direct order-table writes
• HPOS compatibility declared
• Existing WooCommerce products and orders remain the source of truth
• Authenticated /staff/ HTML, AJAX and wp-admin responses are never cached by the service worker or by page caches (LiteSpeed / Hostinger no-cache headers)
• Service worker caches only safe static app assets
• Old RAR WSO caches are removed during service-worker activation
• Uninstall preserves WooCommerce product/order data and plugin operational history

Compatibility

• WordPress 6.3+ (tested on 7.1.2)
• Tested with automated runtime tests: HPOS on and legacy order storage
• WooCommerce 8.0+ (tested on 11.1.2), HPOS supported
• PHP 7.4+
• MySQL 5.7+ / MariaDB 10+ recommended (named locks); falls back to a row lock on other databases
• Works on Hostinger shared hosting (LiteSpeed). Needs no Node.js or extra server software

Troubleshooting (phone app)

License

GPL-2.0-or-later © Ruhul Amin Revens