WooCommerce

Setup

1. Add a site in Nolgard and list your WordPress origins, for example https://example.com. Copy the site key and secret.
2. In WordPress, go to Plugins → Add New → Upload Plugin. Select the zip and activate the plugin.
3. Open Settings → Nolgard. Paste both keys, select the forms to protect and save.
4. Click Test connection.

With WooCommerce active, you can select My Account login, My Account registration and checkout. These checkboxes are hidden otherwise.

What is protected

Checkout gets a fresh token on every attempt, including AJAX retries after a validation error.

Block checkout is not protected

Block-based checkout posts JSON to the Store API. This release does not attach a token to that request. To protect checkout, use a page with the classic shortcode:

[woocommerce_checkout]

Shadow and limit

Login, registration and checkout never fake success. A shadow decision returns a generic error, just like block. A limit decision lets the request through and fires nolgard_limit. Use that hook to remove a coupon or trial for the customer.