General Settings
Comprehensive platform configuration with encrypted API storage and security features
General Settings Overview
The General Settings module provides comprehensive configuration for your cryptocurrency platform with secure API key management, Telegram integration, VIP commission rates, and regulatory compliance features. All sensitive data is automatically encrypted using AES-256-CBC encryption.
๐ Core Configuration Features
- Encrypted API Storage: Binance, PayPal, Stripe keys with AES-256-CBC encryption
- Telegram Integration: Bot setup, webhook management, real-time notifications
- VIP Commission System: 10 VIP levels with customizable commission rates
- KYC Compliance: Verification requirements for trading, purchases, withdrawals
- Referral System: Multi-level referral commission configuration
- Shop Management: E-commerce settings, coupons, payment gateways
- Platform URLs: User page redirects and navigation settings
API Configuration & Encrypted Storage
Secure API key management with automatic AES-256-CBC encryption for all sensitive credentials. The system supports multiple payment gateways and cryptocurrency exchange integrations.
Supported API Integrations
| Service | Purpose | Required Keys | Environment |
|---|---|---|---|
| Binance | Cryptocurrency trading, price data, order execution | API Key, API Secret | Production / Testnet |
| PayPal | Fiat deposits/withdrawals, payment processing | Client ID, Client Secret | Live / Sandbox |
| Stripe | Credit card payments, refunds, subscriptions | Publishable Key, Secret Key | Live / Test Mode |
| Telegram | User notifications, admin alerts, verification | Bot Token, Webhook URL | Production |
API Key Security & Encryption
๐ Security Implementation
- AES-256-CBC Encryption: All sensitive keys encrypted before database storage
- WordPress Salt Integration: Uses wp_salt('secure_auth') as encryption key
- Environment Separation: Separate testnet/sandbox configurations
- Permission Validation: Requires 'manage_options' capability for access
- Secure Transmission: AJAX calls protected with WordPress nonces
- Activity Logging: All API configuration changes are logged
Binance API Setup โ Step by Step
The Binance integration powers live prices, the Trading Exchange and order routing. Set it up once and the rest of the plugin works automatically.
Generating the API Key Pair
- Log into your Binance account at binance.com.
- Open Account โ API Management (top-right user menu).
- Click Create API, choose System generated, give the key a label (e.g. "wpcrypto-platform"), and complete the security checks.
- Copy the API Key and Secret Key immediately โ the secret is only shown once.
Required Permissions
| Permission | Required? | Why |
|---|---|---|
| Enable Reading | Required | Live prices, order book, account balance lookups. |
| Enable Spot & Margin Trading | Required for live trading | Routes user orders through Binance Spot. Leave it off if you are only running the testnet. |
| Enable Withdrawals | Not used | The plugin never withdraws from your Binance account โ leave this permission disabled for safety. |
| Enable Futures / Margin Borrow | Not used | Disable both โ Spot trading only. |
IP Access Restrictions
๐ Unrestricted vs Trusted IPs
Binance offers two modes for the API key:
- Unrestricted (any IP): Acceptable for production. The key is still protected by the API secret and the permissions above, and works without further configuration even if your hosting provider rotates outbound IPs.
- Restrict access to trusted IPs only: Tighter, but you must keep the IP list in sync with your server's outbound IPs (and refresh it whenever you migrate hosting, change CDN, or your provider rotates them). Recommended only if you have a static dedicated IP and a process for updating it.
If you are unsure, start with Unrestricted โ it is the lower-friction choice and still secure as long as the secret key never leaves the encrypted plugin storage.
Configuring the Plugin
- Open WP Crypto โ General Settings in your WordPress admin.
- Paste the API Key and API Secret into the Binance fields.
- Choose the environment:
- Production โ live trading on real Binance.
- Testnet โ recommended while configuring pairs / fees / risk policy. No real funds move.
- Save. The plugin encrypts the credentials with AES-256-CBC before writing them to the database.
๐งช Always test on Binance Testnet first
Binance offers a free testnet at testnet.binance.vision. Generate a separate API key there and point the plugin at the Testnet environment while you set everything up. Switch to Production only after the full test trade flow works end-to-end (see Trading Exchange โ Trading Requires a Balance).
Binance API Proxy URL (Geo-Block / HTTP 451)
Binance geo-blocks some hosting providers' IP ranges, regardless of where the server is physically located โ the WHOIS label on the outbound IP is what matters. When the API responds with HTTP 451 โ Unavailable For Legal Reasons, you do not need to migrate hosting; you only need to route the calls through a thin proxy whose own IP Binance accepts.
Symptoms
- Live Crypto Prices do not load, the page logs
451. - Trades cannot be submitted โ the order form returns "Could not reach price feed".
- Direct
curl https://api.binance.com/api/v3/pingfrom your server returnsHTTP/1.1 451.
Quick Diagnostic
If your hosting provider is one of the commonly-blocked names (Hostinger US, certain DigitalOcean / Linode regions, etc.), or if whois <your-server-ip> shows a US label, you almost certainly need a proxy. Servers in Contabo NL, Hetzner DE, OVH and most EU-located dedicated IPs are usually unaffected.
Recommended Fix: Free Cloudflare Worker Proxy
Cloudflare's Workers free tier (100,000 requests / day) is far more than a small platform needs and takes about 5 minutes to set up.
- Sign up at dash.cloudflare.com (free).
- Open Workers & Pages โ Create application โ Create Worker, give it a name (for example
binance-proxy), click Deploy. - Click Edit code, replace the default script with the snippet below, and click Save and Deploy:
export default { async fetch(request) { const url = new URL(request.url); const target = 'https://api.binance.com' + url.pathname + url.search; const resp = await fetch(target, { method: request.method, headers: { 'User-Agent': 'CF-Worker-Proxy/1.0' }, }); const body = await resp.text(); return new Response(body, { status: resp.status, headers: { 'Content-Type': resp.headers.get('Content-Type') || 'application/json', 'Cache-Control': 'public, max-age=10', 'Access-Control-Allow-Origin': '*', }, }); }, }; - Copy the Worker URL โ it looks like
https://binance-proxy.<your-account>.workers.dev. - In WP Crypto โ General Settings, paste that URL into the Binance API Proxy URL field and save.
The plugin will route every Binance call through the Worker. Test by reloading the live prices page or running a small market buy on the testnet โ both should succeed with HTTP 200.
๐ What if I leave the Proxy URL field blank?
If the field is empty, the plugin calls api.binance.com directly โ which is the right setup for any server whose outbound IP Binance already accepts. Only fill it in when you are actually hitting an HTTP 451.
๐ซ Withdrawals do not go through the proxy
The plugin never calls Binance withdrawal endpoints (withdrawals are disabled by design on the API key). The proxy only carries read and trade calls, so there is nothing security-sensitive flowing through it that is not already encrypted by the Binance API signature scheme.
Telegram Integration & Notifications
Advanced Telegram bot integration for user notifications, admin alerts, and account verification. The system supports webhook management and real-time notification delivery.
Telegram Bot Configuration
๐ค Bot Setup
- Bot Token: Encrypted storage of Telegram bot token
- Bot Username: Public bot username configuration
- Webhook URL: Automatic webhook endpoint generation
- Enable/Disable: Toggle webhook functionality
๐ Notification Features
- User Verification: Telegram account linking
- Real-time Alerts: Trading, deposit, withdrawal notifications
- Admin Notifications: System alerts and user activities
- Security Verification: IP validation and secret token
Admin Telegram Settings
๐ฑ Admin Notification System
- Admin Subscription: Telegram notifications for administrators
- Activity Monitoring: Real-time platform activity alerts
- Security Alerts: Login attempts, API changes, system events
- Unsubscribe Option: Easy admin notification management
- Subscription Tokens: Secure admin verification system
Webhook Management
- Bot Creation: Create bot via @BotFather on Telegram
- Token Configuration: Add bot token to settings (encrypted storage)
- Webhook Setup: Automatic webhook registration with Telegram
- User Verification: Users link accounts via /start commands
- Notification Delivery: Real-time message delivery to users
VIP Commission System
Comprehensive 10-level VIP system with customizable commission rates. Administrators can set individual commission percentages for each VIP level from 0% to 100%.
VIP Level Configuration
โญ VIP Commission Structure
- VIP Levels 1-10: Each level has configurable commission rates
- Commission Range: 0% to 100% per level
- Real-time Updates: Changes apply immediately to new transactions
- Validation: Automatic range validation prevents invalid rates
- Default Structure: Higher VIP levels typically have lower commission rates
VIP Level Management
๐ Level Assignment
- Automatic 30-day trading volume calculation
- Auto-upgrade when thresholds are met
- Commission discounts applied to new orders
- User notification system for level changes
๐ฐ Commission Benefits
- Reduced trading fees for higher VIP levels
- Enhanced referral commission rates
- Priority customer support access
- Early access to new features and pairs
Referral Commission System
Built-in referral program with configurable commission rates and minimum withdrawal thresholds. The system supports multi-level referral tracking with automatic commission distribution.
Referral Configuration
๐ฐ System Settings
- Enable/Disable: Toggle referral system on/off
- Commission Rate: Configurable percentage rate
- Minimum Withdrawal: Set minimum payout threshold
- Real-time Processing: Instant commission calculation
๐ Commission Processing
- Automatic Distribution: Commissions credited automatically
- Single-level Tracking: One referrer per user
- Activity Logging: Complete audit trail
- Telegram Notifications: Real-time commission alerts
Referral Process Flow
- User Registration: New user signs up with referral code
- Activity Tracking: System monitors referred user activities
- Commission Calculation: Calculate commission based on configured rate
- Balance Update: Credit commission to referrer's account
- Notification: Send Telegram/email notification to referrer
- Withdrawal: Referrer can withdraw when minimum threshold is met
KYC (Know Your Customer) Requirements
Comprehensive verification level system for regulatory compliance. Administrators can set specific KYC requirements for different platform operations to ensure legal compliance and user security.
KYC Configuration Options
๐ Trading Operations
- Trade KYC Level: Verification required for trading
- Crypto Purchase KYC: Level for credit card crypto purchases
- Withdraw KYC Level: Verification for withdrawals
- Deposit KYC Level: Verification for deposits
๐ผ Additional Services
- Stake KYC Level: Verification for staking operations
- Shop KYC Level: Verification for shop purchases
- ICO KYC Level: Verification for ICO participation
- Flexible Configuration: Each operation can have different requirements
KYC Level Implementation
| Operation | Setting Field | Purpose |
|---|---|---|
| Trading | trade_kyc_level | Exchange trading operations |
| Crypto Purchase | crypto_purchase_kyc_level | Credit card cryptocurrency purchases |
| Withdrawals | withdraw_kyc_level | Fund withdrawal operations |
| Deposits | deposit_kyc_level | Fund deposit operations |
| Staking | stake_kyc_level | Staking pool participation |
| Shop | shop_kyc_level | Digital product purchases |
| ICO | ico_kyc_level | ICO token sale participation |
Platform URL Configuration
Configure important page URLs for user navigation, automated emails, and system redirects. These settings ensure proper user flow throughout the platform.
User Account URLs
| Page Type | Setting Field | Purpose |
|---|---|---|
| Register Page | register_page_url | New user registration form |
| Login Page | login_page_url | User authentication page |
| User Profile | user_profile_url | User account management |
| Forgot Password | forgot_password_url | Password reset request |
| Email Activation | email_activation_url | Account email verification |
| Password Reset | password_reset_url | New password confirmation |
Legal & Shop URLs
๐ Legal Pages
- Privacy Policy: Data protection information
- Terms & Conditions: Platform usage terms
- Commission Rates: Fee structure page
๐ Shop Settings
- Shop Main Page: Product listing page
- Shopping Cart: Cart management page
- Checkout Page: Payment processing
- Success Page: Post-purchase confirmation
WPCrypto Shop Configuration
E-commerce functionality settings including payment gateways, product organization, template styling, and customer experience options.
Shop Structure Settings
๐ URL Slugs
- Products Slug: URL structure for product pages
- Categories Slug: Product category URL format
- Tags Slug: Product tag URL structure
- SEO Friendly: Customizable slug configuration
๐จ Template & Experience
- Template Style: Shop visual appearance
- Guest Shopping: Allow purchases without registration
- Mobile Responsive: Optimized for all devices
- Payment Integration: Crypto and fiat payments
Coupon Management System
๐ Discount Coupon Features
- Coupon Codes: Create custom discount codes
- Discount Percentages: Set percentage-based discounts (0-100%)
- Duplicate Prevention: Automatic code validation
- Code Limits: Maximum 32 characters per code
- Real-time Validation: Instant discount application
- Shop Integration: Automatic checkout integration
Data Management Settings
๐๏ธ Uninstall Configuration
- Data Retention: Choose whether to keep data on plugin removal
- Complete Cleanup: Option to delete all plugin data
- Database Tables: Remove custom tables and settings
- User Data: Handle user-generated content appropriately