You do not need Stripe to sell a level. If you sell through a marketplace, switch it on and every sale, rebill, refund and cancellation reaches this plugin on its own.
Three steps:
- Paste the key. On the Integrations tab, switch on the marketplace you sell through and paste its secret key. JVZoo: My Account, then JVZIPN Secret Key. Warrior Plus: Vendors, Settings, then IPN Security Key. ClickBank: Account Settings, My Site, Advanced Tools, then Secret Key. PayPal needs no key at all.
- Copy your notification URL into the product on the marketplace. It is the JVZIPN URL on JVZoo, the Notification URL on Warrior Plus, the Instant Notification URL on ClickBank using version 6 or later, and notify_url on PayPal.
- Map the product. Under What Each Product Delivers, enter the product code exactly as it appears on the marketplace and tick the levels a buyer receives. A bundle is simply a product with several levels ticked.
One Warrior Plus trap worth avoiding:
Use the Notification URL field only. If you also fill in Key Generation with the same address, every sale arrives twice.
What happens on each event:
- Sale: the account is found by email or created. A set your password email goes out, never a password in plain text. The levels are granted, the order is recorded, and level actions, AI Mailer and WP Sync all fire
- Rebill: a level with expires after N days is extended by N days from its current end date, a cancelled member is reactivated, and the renewal is recorded
- Refund or chargeback: your rule for that product decides. Cancel access, which is the default, remove the levels, or keep access. A negative refund row is recorded, and the original sale is never edited
- Cancel rebill: your rule again. Keep access until the paid period ends, which is the default and works through the level's expiry, or cancel immediately
- Uncancel: access goes back on
- A failed payment, or a test ping: logged, and nothing changes
Why a forged notification cannot grant access:
Every notification is verified the way the marketplace itself documents. JVZoo cverify, Warrior Plus MD5 or security key, ClickBank AES decryption, PayPal postback. One that fails verification is logged and ignored.
Three more things that protect you:
- The same transaction arriving twice is recognised as a duplicate. Nothing is emailed or granted a second time
- A notification for a product you have not mapped yet is logged as unmapped rather than thrown away. Map it, then click Process Again on the row, and the buyer gets their access
- If no key is saved yet, the marketplace is told to retry, so a sale that lands in the middle of your setup is not lost