invoicewp

<p><strong>Invoice Maker — Payments with Stripe</strong> helps you run invoicing inside WordPress:</p>
<ul>
<li>Create and manage invoices in wp-admin.</li>
<li>Maintain a client list and reusable line items.</li>
<li>Send invoice emails to clients.</li>
<li>Share public invoice links and PDF downloads.</li>
<li>Accept payments with Stripe Connect (payments processed by Stripe; this plugin is not affiliated with Stripe, Inc.).</li>
<li>Offer a customer portal with login and invitation-based registration.</li>
</ul>
<h4>Learn more</h4>
<ul>
<li>To make professional invoices in the cloud, use <a href="https://invoicemaker.com" rel="nofollow ugc">InvoiceMaker.com</a></li>
<li>Try our free invoice generator at <a href="https://invoicemaker.com/#invoice-generator" rel="nofollow ugc">InvoiceMaker.com/#invoice-generator</a></li>
<li>For invoice templates and resources, visit <a href="https://invoicemaker.com/templates" rel="nofollow ugc">InvoiceMaker.com/templates</a></li>
<li>For a complete guide on how to create invoices, visit <a href="https://invoicemaker.com/how-to-create-invoices" rel="nofollow ugc">InvoiceMaker.com/how-to-create-invoices</a></li>
</ul>
<h4>External services</h4>
<p>This plugin connects to third-party services. Below: what each service is, what data is sent, when requests happen, and links to terms and privacy policies.</p>
<ol>
<li><strong>Invoice Maker platform API</strong> (default base URL <code>https://api.invoicewp.com</code>; overridable with the <code>INVOICEWP_API_BASE_URL</code> constant or the <code>invoicewp_api_base_url</code> filter)</li>
</ol>
<ul>
<li><strong>What it is:</strong> A hosted HTTPS JSON API operated in connection with this plugin. It holds platform-side Stripe credentials and performs actions your WordPress site cannot do locally without those secrets.</li>
<li><strong>What it is used for:</strong> Creating Stripe Connect onboarding / account links, creating hosted Stripe Checkout sessions for invoice payments, and (only if you explicitly opt in under <strong>Invoice Maker <span aria-hidden="true" class="wp-exclude-emoji">→</span> Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Payments (Stripe) <span aria-hidden="true" class="wp-exclude-emoji">→</span> Platform API consent</strong>) sending your site’s <strong>public</strong> Stripe webhook REST URL to the platform <strong>once</strong> so it can register that endpoint with Stripe and return a webhook signing secret for this site.</li>
<li><strong>When it runs:</strong> When a site administrator uses Stripe-related actions in wp-admin (for example “Connect with Stripe”, “Continue Stripe onboarding”, opening the Express dashboard), when a customer starts the hosted Checkout flow for an invoice, and—if and only if you enable the opt-in checkbox and no webhook signing secret is stored yet—during an admin load of Invoice Maker screens to attempt automatic webhook registration.</li>
<li><strong>Data sent:</strong> Bearer-authenticated JSON requests may include your connected Stripe account ID, invoice totals and currency, invoice numbers and internal IDs, public invoice tokens, success and cancel redirect URLs, and (when the opt-in is enabled and a secret is still missing) the public REST URL of this site’s Stripe webhook endpoint. The plugin does not send visitor analytics, page-view tracking, or unrelated telemetry to this API.</li>
<li><strong>Terms of use:</strong> https://invoicewp.com/terms/</li>
<li><strong>Privacy policy:</strong> https://invoicewp.com/privacy-policy/</li>
</ul>
<ol>
<li><strong>Stripe</strong> (<code>https://stripe.com</code>)</li>
</ol>
<ul>
<li><strong>What it is:</strong> Stripe’s payment and Connect services.</li>
<li><strong>What it is used for:</strong> Payment processing, Connect Express onboarding, and hosted Checkout pages.</li>
<li><strong>When it runs:</strong> When administrators complete Connect onboarding and when payers complete checkout.</li>
<li><strong>Data sent:</strong> Data required by Stripe for those flows (including payment and account information as defined by Stripe).</li>
<li><strong>Terms:</strong> https://stripe.com/legal</li>
<li><strong>Privacy policy:</strong> https://stripe.com/privacy</li>
</ul>
<p>Stripe is a trademark of Stripe, Inc. This plugin is not endorsed by or affiliated with Stripe.</p>


Invoice Maker — Payments with Stripe

Create invoices, manage clients, generate PDFs, and send invoice emails from WordPress.

justinblayney

<p>Darkstar File Manager is a secure, easy-to-use plugin that creates a private document portal for each WordPress user. Perfect for accountants, lawyers, consultants, or any business that needs to securely exchange documents with clients.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Secure File Storage</strong> – Store files outside your web root for maximum security</li>
<li><strong>User Isolation</strong> – Each client can only access their own documents</li>
<li><strong>Two-Way File Sharing</strong> – Administrators can upload files for clients, and clients can upload files back</li>
<li><strong>Separate File Sections</strong> – Client view shows “Documents from Professional” and “Your Uploaded Documents” separately</li>
<li><strong>Simple Shortcode</strong> – <code>[dsfm_client_login]</code> displays login form and document manager</li>
<li><strong>File Type Validation</strong> – Configurable allowed file types (PDF, DOC, DOCX, XLS, XLSX, images, etc.)</li>
<li><strong>File Size Limits</strong> – Set maximum upload size (1-100 MB, default 50 MB)</li>
<li><strong>MIME Type Checking</strong> – Prevents malicious file uploads</li>
<li><strong>Bulk Operations</strong> – Delete multiple files at once from admin panel</li>
<li><strong>Translation Ready</strong> – Full internationalization support with Polylang integration</li>
<li><strong>Responsive Design</strong> – Works on desktop, tablet, and mobile devices</li>
</ul>
<h4>How It Works</h4>
<ol>
<li><strong>Create a Client Portal Page</strong> – Add the shortcode <code>[dsfm_client_login]</code> to any page</li>
<li><strong>Configure Settings</strong> – Set upload path (outside web root recommended), file types, and size limits</li>
<li><strong>Upload Files for Clients</strong> – Go to Users <span aria-hidden="true" class="wp-exclude-emoji">→</span> hover over user <span aria-hidden="true" class="wp-exclude-emoji">→</span> click “View Documents” to upload</li>
<li><strong>Clients Access Files</strong> – Clients log in and visit the portal page to view and upload documents</li>
</ol>
<h4>Security Features</h4>
<ul>
<li>All files served through authenticated download handler (not direct file access)</li>
<li>Path traversal protection with directory separator enforcement</li>
<li>User authentication required</li>
<li>Nonce verification on all forms and downloads</li>
<li>CSRF protection on admin file downloads</li>
<li>File type, MIME, and WordPress built-in type validation</li>
<li>ZIP bomb protection (uncompressed content limit)</li>
<li>Upload rate limiting (20 uploads per user per hour)</li>
<li>Files stored outside web root by default</li>
<li>Protective <code>.htaccess</code> and <code>index.php</code> written to upload directory on activation</li>
<li>Each user can only access their own files</li>
</ul>
<h4>Note on File Storage</h4>
<p>This plugin stores uploaded files outside the web root for security. Because of this requirement, files are moved using PHP’s <code>move_uploaded_file()</code> directly after passing validation through WordPress’s <code>wp_check_filetype_and_ext()</code>, our own MIME type check, extension allowlist, and size limits. Files cannot be stored through <code>wp_handle_upload()</code> without placing them inside the publicly accessible uploads directory, which would reduce security.</p>
<h4>Perfect For</h4>
<ul>
<li>Tax professionals sharing documents with clients</li>
<li>Lawyers exchanging contracts and legal documents</li>
<li>Consultants sharing reports</li>
<li>Any business requiring secure client file exchange</li>
</ul>
<h3>Additional Information</h3>
<h4>Support</h4>
<p>For support, please visit <a href="https://www.darkstarmedia.net" rel="nofollow ugc">Darkstar Media</a> or contact us through our website.</p>
<h4>Privacy Policy</h4>
<p>This plugin stores uploaded files on your server and metadata (filenames, timestamps, uploader) in JSON files. No data is sent to external servers.</p>
<h4>Credits</h4>
<p>Developed by Darkstar Media</p>


Darkstar File Manager

Secure client document management system allowing administrators to share files with clients and clients to upload their own documents.

Invoice Maker — Payments with Stripe vs Darkstar File Manager