About this plugin
WH4U Domains is a WordPress plugin that allows website owners and resellers to offer domain name services directly from their WordPress site. It integrates with the DomainsReseller API to provide real-time domain availability checking, registration, and transfer capabilities.
Features
- Domain Search — Visitors can search for domain availability via a shortcode or Gutenberg block
- Public Registration & Transfer — Anonymous visitors can submit domain registration and transfer requests that admins review and approve
- Admin Dashboard — Full admin panel for managing orders, viewing API status, and monitoring the retry queue
- Reseller Support — Per-user API credentials allow multi-reseller setups
- Retry Queue — Failed API calls are automatically retried with exponential backoff
- Shopping Cart Redirect — Optional redirect to WHMCS, Blesta, ClientExec, Upmind, or custom cart URL with the domain pre-filled when visitors click Register or Transfer
- Internationalization — Fully translatable; Greek translation included
How It Works
- Install and activate the plugin
- Configure your DomainsReseller API credentials under Domains > Settings
- Add the [wh4u_domain_lookup] shortcode or the “Domain Lookup” block to any page
- Visitors search for domains — available domains can be registered, and taken domains can be transferred through the frontend form (or, if configured, sent to your WHMCS/Blesta/ClientExec/Upmind cart with the domain in the URL)
- Admins review and approve/reject public orders from the WordPress admin
Third-Party Service
This plugin connects to the DomainsReseller API provided by WebHosting4U to perform all domain-related operations.
What data is sent
- Domain lookups: The domain name being searched is sent to check availability
- Domain registration: Registrant contact information (name, email, phone, address, company, country), the domain name, registration period, nameservers, and addon preferences are sent to process the registration
- Domain transfer: Domain name, registration period, and EPP code are sent
- TLD queries: Requests for available TLDs are sent
When data is sent
- When a visitor performs a domain search on the frontend
- When an admin approves a public domain registration order
- When an admin submits a registration or transfer order from the admin panel
- When TLD lists are loaded (cached locally for 12 hours)
Service details
- Service provider: WebHosting4U
- Service URL: https://webhosting4u.gr
- Terms of Service: https://webhosting4u.gr/terms-of-service.php
- Privacy Policy: https://webhosting4u.gr/privacy-policy.php
Cloudflare Turnstile (optional)
When Turnstile bot protection is enabled in Settings, this plugin loads the Cloudflare Turnstile JavaScript widget on pages with the domain lookup form and sends the challenge response token to Cloudflare for server-side verification before processing public orders.
- Service provider: Cloudflare, Inc.
- Service URL: https://www.cloudflare.com/products/turnstile/
- Terms of Service: https://www.cloudflare.com/terms/
- Privacy Policy: https://www.cloudflare.com/privacypolicy/
Data stored locally
This plugin stores the following data on your WordPress installation:
- Order records: domain name, registration period, status, and encrypted registrant contact details (encrypted with AES-256-CBC + HMAC at rest)
- Public order submissions: stored as a custom post type with encrypted contact data until an administrator approves or rejects them
- API logs and notification records: request/response entries and email/webhook dispatch history with secrets redacted. A daily WP-Cron task prunes rows older than 30 days; the retention period is filterable via the wh4u_log_retention_days filter.
- Retry queue: failed API calls scheduled for exponential-backoff retry via WP-Cron
- Rate-limit counters: short-lived transients keyed by user ID or a salted SHA-256 hash of the visitor IP; used only for abuse protection and expire within minutes
- Reseller settings: per-user API credentials, with the API key and optional webhook secret encrypted at rest
No data is sent to any third party other than the services listed above.