Privacy and security essentials
Intermediate guide · about 15 minutes · Site administrator, Developer / integrator.
At a glance
Audience: Site administrator, Developer / integrator. Difficulty: intermediate. Time: about 15 minutes.
Steps
1. Keep payments in WooCommerce
Never collect cards outside WooCommerce gateways.
2. Use Tools → Export/Erase personal data
Plugin hooks support WordPress privacy tools; financial rows may be anonymized.
3. Review public bid display
Public names are aliased/filtered. Do not expose emails or IPs in public templates.
4. Control uninstall data
Leave remove_data_on_uninstall false unless you intentionally want tables deleted on uninstall.
Security highlights
- Capability + ownership checks on REST and forms
- Nonces for CSRF; capabilities for authorization
- Prepared SQL; hashed invite tokens
- Rate limits on bidding, auth, applications, uploads
- No eval / unsafe unserialize / raw card storage