Installation
Requirements
Section titled “Requirements”- CS-Cart or CS-Cart Multi-Vendor 4.17.2 – 4.21.x (tested on CS-Cart Ultimate 4.17.2 with PHP 8.1, Multi-Vendor 4.17.2 with PHP 8.1 and Multi-Vendor 4.21.2 with PHP 8.3).
- PHP 7.2.5 – 8.3, as supported by your CS-Cart version.
- MySQL/MariaDB with InnoDB.
- Outgoing e-mail working in CS-Cart (the cash-on-delivery confirmation is sent as a normal store e-mail).
Install
Section titled “Install”- Go to Add-ons → Manage add-ons, click the + (upload) button and upload
kv_order_risk_guard-1.0.0.zip. - Find Order Risk Guard in the list and click Install. The add-on is active after the installation.
- Enter your license key in Settings → License (or the CS-Cart Marketplace license number in Add-ons → Manage add-ons).
- Open the add-on Settings and check the thresholds, the cash-on-delivery payment methods and which order statuses count as refused or returned (see Configuration).
- Optional: add your known bad customers in Orders → Risk Guard or import them from a CSV file.
What the installation creates
Section titled “What the installation creates”| Item | Details |
|---|---|
| Order status “Risk review” | Held orders. Stock is reserved, the customer and the orders department are notified (“We are checking a few details”). |
| Order status “Awaiting confirmation” | Cash-on-delivery orders waiting for the buyer’s confirmation. Stock is reserved; the e-mail text asks the buyer to use the link or code. |
| E-mail template | “Order Risk Guard: confirm a cash-on-delivery order” in Administration → Notifications (customer e-mail with the link and the code). |
| Tables | Block and allow list, risk of each order, confirmations, refused checkouts. |
You can rename the two statuses and change their e-mail texts and colours in Administration → Order statuses like any other status.
Cron job (optional)
Section titled “Cron job (optional)”Unconfirmed cash-on-delivery orders are cancelled automatically while the admin panel is used (checked every 10 minutes). On stores where nobody opens the admin panel for long periods, add a cron job, for example every 15 minutes:
*/15 * * * * php /home/yourstore/public_html/admin.php --dispatch=kv_order_risk_guard.cronIf your host has no command-line cron, call the URL shown in Settings → General → Automatic expiry from an external cron service. The URL contains a secret key.
Privileges
Section titled “Privileges”Administrators need View order risk lists to see the lists and Manage order risk lists and risk actions to change them and to approve or cancel held orders (group Order Risk Guard in the usergroup privileges). The risk panel and the order list column are shown to everyone who can see the order. Multi-Vendor vendors never see the lists.
Upgrading
Section titled “Upgrading”Upload the new package over the installed add-on (or use the Upgrade Center). Lists, risk history and pending confirmations are kept; missing tables, settings and texts are added automatically on the next admin page view.
Disabling and uninstalling
Section titled “Disabling and uninstalling”- Disable: new orders are not scored, nothing is hidden or held. Confirmation links already sent keep working.
- Uninstall: orders still in “Risk review” or “Awaiting confirmation” are moved to Open (without e-mails), both statuses are deleted, and the add-on tables (lists, risk history, confirmations), settings and texts are removed. Orders themselves are not changed otherwise.