General Settings

Comprehensive platform configuration with encrypted API storage and security features

General Settings Overview

The General Settings module provides comprehensive configuration for your cryptocurrency platform with secure API key management, Telegram integration, VIP commission rates, and regulatory compliance features. All sensitive data is automatically encrypted using AES-256-CBC encryption.

๐Ÿ” Core Configuration Features

  • Encrypted API Storage: Binance, PayPal, Stripe keys with AES-256-CBC encryption
  • Telegram Integration: Bot setup, webhook management, real-time notifications
  • VIP Commission System: 10 VIP levels with customizable commission rates
  • KYC Compliance: Verification requirements for trading, purchases, withdrawals
  • Referral System: Multi-level referral commission configuration
  • Shop Management: E-commerce settings, coupons, payment gateways
  • Platform URLs: User page redirects and navigation settings

API Configuration & Encrypted Storage

Secure API key management with automatic AES-256-CBC encryption for all sensitive credentials. The system supports multiple payment gateways and cryptocurrency exchange integrations.

Supported API Integrations

Service Purpose Required Keys Environment
Binance Cryptocurrency trading, price data, order execution API Key, API Secret Production / Testnet
PayPal Fiat deposits/withdrawals, payment processing Client ID, Client Secret Live / Sandbox
Stripe Credit card payments, refunds, subscriptions Publishable Key, Secret Key Live / Test Mode
Telegram User notifications, admin alerts, verification Bot Token, Webhook URL Production

API Key Security & Encryption

๐Ÿ”’ Security Implementation

  • AES-256-CBC Encryption: All sensitive keys encrypted before database storage
  • WordPress Salt Integration: Uses wp_salt('secure_auth') as encryption key
  • Environment Separation: Separate testnet/sandbox configurations
  • Permission Validation: Requires 'manage_options' capability for access
  • Secure Transmission: AJAX calls protected with WordPress nonces
  • Activity Logging: All API configuration changes are logged

Binance API Setup โ€” Step by Step

The Binance integration powers live prices, the Trading Exchange and order routing. Set it up once and the rest of the plugin works automatically.

Generating the API Key Pair

  1. Log into your Binance account at binance.com.
  2. Open Account โ†’ API Management (top-right user menu).
  3. Click Create API, choose System generated, give the key a label (e.g. "wpcrypto-platform"), and complete the security checks.
  4. Copy the API Key and Secret Key immediately โ€” the secret is only shown once.

Required Permissions

Permission Required? Why
Enable ReadingRequiredLive prices, order book, account balance lookups.
Enable Spot & Margin TradingRequired for live tradingRoutes user orders through Binance Spot. Leave it off if you are only running the testnet.
Enable WithdrawalsNot usedThe plugin never withdraws from your Binance account โ€” leave this permission disabled for safety.
Enable Futures / Margin BorrowNot usedDisable both โ€” Spot trading only.

IP Access Restrictions

๐ŸŒ Unrestricted vs Trusted IPs

Binance offers two modes for the API key:

  • Unrestricted (any IP): Acceptable for production. The key is still protected by the API secret and the permissions above, and works without further configuration even if your hosting provider rotates outbound IPs.
  • Restrict access to trusted IPs only: Tighter, but you must keep the IP list in sync with your server's outbound IPs (and refresh it whenever you migrate hosting, change CDN, or your provider rotates them). Recommended only if you have a static dedicated IP and a process for updating it.

If you are unsure, start with Unrestricted โ€” it is the lower-friction choice and still secure as long as the secret key never leaves the encrypted plugin storage.

Configuring the Plugin

  1. Open WP Crypto โ†’ General Settings in your WordPress admin.
  2. Paste the API Key and API Secret into the Binance fields.
  3. Choose the environment:
    • Production โ€” live trading on real Binance.
    • Testnet โ€” recommended while configuring pairs / fees / risk policy. No real funds move.
  4. Save. The plugin encrypts the credentials with AES-256-CBC before writing them to the database.

๐Ÿงช Always test on Binance Testnet first

Binance offers a free testnet at testnet.binance.vision. Generate a separate API key there and point the plugin at the Testnet environment while you set everything up. Switch to Production only after the full test trade flow works end-to-end (see Trading Exchange โ†’ Trading Requires a Balance).

Binance API Proxy URL (Geo-Block / HTTP 451)

Binance geo-blocks some hosting providers' IP ranges, regardless of where the server is physically located โ€” the WHOIS label on the outbound IP is what matters. When the API responds with HTTP 451 โ€” Unavailable For Legal Reasons, you do not need to migrate hosting; you only need to route the calls through a thin proxy whose own IP Binance accepts.

Symptoms

  • Live Crypto Prices do not load, the page logs 451.
  • Trades cannot be submitted โ€” the order form returns "Could not reach price feed".
  • Direct curl https://api.binance.com/api/v3/ping from your server returns HTTP/1.1 451.

Quick Diagnostic

If your hosting provider is one of the commonly-blocked names (Hostinger US, certain DigitalOcean / Linode regions, etc.), or if whois <your-server-ip> shows a US label, you almost certainly need a proxy. Servers in Contabo NL, Hetzner DE, OVH and most EU-located dedicated IPs are usually unaffected.

Recommended Fix: Free Cloudflare Worker Proxy

Cloudflare's Workers free tier (100,000 requests / day) is far more than a small platform needs and takes about 5 minutes to set up.

  1. Sign up at dash.cloudflare.com (free).
  2. Open Workers & Pages โ†’ Create application โ†’ Create Worker, give it a name (for example binance-proxy), click Deploy.
  3. Click Edit code, replace the default script with the snippet below, and click Save and Deploy:
    export default {
      async fetch(request) {
        const url = new URL(request.url);
        const target = 'https://api.binance.com' + url.pathname + url.search;
        const resp = await fetch(target, {
          method: request.method,
          headers: { 'User-Agent': 'CF-Worker-Proxy/1.0' },
        });
        const body = await resp.text();
        return new Response(body, {
          status: resp.status,
          headers: {
            'Content-Type': resp.headers.get('Content-Type') || 'application/json',
            'Cache-Control': 'public, max-age=10',
            'Access-Control-Allow-Origin': '*',
          },
        });
      },
    };
  4. Copy the Worker URL โ€” it looks like https://binance-proxy.<your-account>.workers.dev.
  5. In WP Crypto โ†’ General Settings, paste that URL into the Binance API Proxy URL field and save.

The plugin will route every Binance call through the Worker. Test by reloading the live prices page or running a small market buy on the testnet โ€” both should succeed with HTTP 200.

๐Ÿ” What if I leave the Proxy URL field blank?

If the field is empty, the plugin calls api.binance.com directly โ€” which is the right setup for any server whose outbound IP Binance already accepts. Only fill it in when you are actually hitting an HTTP 451.

๐Ÿšซ Withdrawals do not go through the proxy

The plugin never calls Binance withdrawal endpoints (withdrawals are disabled by design on the API key). The proxy only carries read and trade calls, so there is nothing security-sensitive flowing through it that is not already encrypted by the Binance API signature scheme.

Telegram Integration & Notifications

Advanced Telegram bot integration for user notifications, admin alerts, and account verification. The system supports webhook management and real-time notification delivery.

Telegram Bot Configuration

๐Ÿค– Bot Setup

  • Bot Token: Encrypted storage of Telegram bot token
  • Bot Username: Public bot username configuration
  • Webhook URL: Automatic webhook endpoint generation
  • Enable/Disable: Toggle webhook functionality

๐Ÿ”” Notification Features

  • User Verification: Telegram account linking
  • Real-time Alerts: Trading, deposit, withdrawal notifications
  • Admin Notifications: System alerts and user activities
  • Security Verification: IP validation and secret token

Admin Telegram Settings

๐Ÿ“ฑ Admin Notification System

  • Admin Subscription: Telegram notifications for administrators
  • Activity Monitoring: Real-time platform activity alerts
  • Security Alerts: Login attempts, API changes, system events
  • Unsubscribe Option: Easy admin notification management
  • Subscription Tokens: Secure admin verification system

Webhook Management

  1. Bot Creation: Create bot via @BotFather on Telegram
  2. Token Configuration: Add bot token to settings (encrypted storage)
  3. Webhook Setup: Automatic webhook registration with Telegram
  4. User Verification: Users link accounts via /start commands
  5. Notification Delivery: Real-time message delivery to users

VIP Commission System

Comprehensive 10-level VIP system with customizable commission rates. Administrators can set individual commission percentages for each VIP level from 0% to 100%.

VIP Level Configuration

โญ VIP Commission Structure

  • VIP Levels 1-10: Each level has configurable commission rates
  • Commission Range: 0% to 100% per level
  • Real-time Updates: Changes apply immediately to new transactions
  • Validation: Automatic range validation prevents invalid rates
  • Default Structure: Higher VIP levels typically have lower commission rates

VIP Level Management

๐Ÿ“Š Level Assignment

  • Automatic 30-day trading volume calculation
  • Auto-upgrade when thresholds are met
  • Commission discounts applied to new orders
  • User notification system for level changes

๐Ÿ’ฐ Commission Benefits

  • Reduced trading fees for higher VIP levels
  • Enhanced referral commission rates
  • Priority customer support access
  • Early access to new features and pairs

Referral Commission System

Built-in referral program with configurable commission rates and minimum withdrawal thresholds. The system supports multi-level referral tracking with automatic commission distribution.

Referral Configuration

๐Ÿ’ฐ System Settings

  • Enable/Disable: Toggle referral system on/off
  • Commission Rate: Configurable percentage rate
  • Minimum Withdrawal: Set minimum payout threshold
  • Real-time Processing: Instant commission calculation

๐Ÿ”„ Commission Processing

  • Automatic Distribution: Commissions credited automatically
  • Single-level Tracking: One referrer per user
  • Activity Logging: Complete audit trail
  • Telegram Notifications: Real-time commission alerts

Referral Process Flow

  1. User Registration: New user signs up with referral code
  2. Activity Tracking: System monitors referred user activities
  3. Commission Calculation: Calculate commission based on configured rate
  4. Balance Update: Credit commission to referrer's account
  5. Notification: Send Telegram/email notification to referrer
  6. Withdrawal: Referrer can withdraw when minimum threshold is met

KYC (Know Your Customer) Requirements

Comprehensive verification level system for regulatory compliance. Administrators can set specific KYC requirements for different platform operations to ensure legal compliance and user security.

KYC Configuration Options

๐Ÿ“‹ Trading Operations

  • Trade KYC Level: Verification required for trading
  • Crypto Purchase KYC: Level for credit card crypto purchases
  • Withdraw KYC Level: Verification for withdrawals
  • Deposit KYC Level: Verification for deposits

๐Ÿ’ผ Additional Services

  • Stake KYC Level: Verification for staking operations
  • Shop KYC Level: Verification for shop purchases
  • ICO KYC Level: Verification for ICO participation
  • Flexible Configuration: Each operation can have different requirements

KYC Level Implementation

Operation Setting Field Purpose
Trading trade_kyc_level Exchange trading operations
Crypto Purchase crypto_purchase_kyc_level Credit card cryptocurrency purchases
Withdrawals withdraw_kyc_level Fund withdrawal operations
Deposits deposit_kyc_level Fund deposit operations
Staking stake_kyc_level Staking pool participation
Shop shop_kyc_level Digital product purchases
ICO ico_kyc_level ICO token sale participation

Platform URL Configuration

Configure important page URLs for user navigation, automated emails, and system redirects. These settings ensure proper user flow throughout the platform.

User Account URLs

Page Type Setting Field Purpose
Register Page register_page_url New user registration form
Login Page login_page_url User authentication page
User Profile user_profile_url User account management
Forgot Password forgot_password_url Password reset request
Email Activation email_activation_url Account email verification
Password Reset password_reset_url New password confirmation

Legal & Shop URLs

๐Ÿ“‹ Legal Pages

  • Privacy Policy: Data protection information
  • Terms & Conditions: Platform usage terms
  • Commission Rates: Fee structure page

๐Ÿ›’ Shop Settings

  • Shop Main Page: Product listing page
  • Shopping Cart: Cart management page
  • Checkout Page: Payment processing
  • Success Page: Post-purchase confirmation

WPCrypto Shop Configuration

E-commerce functionality settings including payment gateways, product organization, template styling, and customer experience options.

Shop Structure Settings

๐Ÿ”— URL Slugs

  • Products Slug: URL structure for product pages
  • Categories Slug: Product category URL format
  • Tags Slug: Product tag URL structure
  • SEO Friendly: Customizable slug configuration

๐ŸŽจ Template & Experience

  • Template Style: Shop visual appearance
  • Guest Shopping: Allow purchases without registration
  • Mobile Responsive: Optimized for all devices
  • Payment Integration: Crypto and fiat payments

Coupon Management System

๐ŸŽ Discount Coupon Features

  • Coupon Codes: Create custom discount codes
  • Discount Percentages: Set percentage-based discounts (0-100%)
  • Duplicate Prevention: Automatic code validation
  • Code Limits: Maximum 32 characters per code
  • Real-time Validation: Instant discount application
  • Shop Integration: Automatic checkout integration

Data Management Settings

๐Ÿ—‚๏ธ Uninstall Configuration

  • Data Retention: Choose whether to keep data on plugin removal
  • Complete Cleanup: Option to delete all plugin data
  • Database Tables: Remove custom tables and settings
  • User Data: Handle user-generated content appropriately