🚀 BBMODZ Store — Sell Attachments Directly From Your Forum
PayPal checkout • Auto-unlock downloads • Orders/Refunds • Diagnostics • Logs
Created with ChatGPT & Claude A.I
Pen-tested By XXCORROSIONXX using HCL AppScan
What is it?
BBMODZ Store lets you list forum attachments as products, accept PayPal, and automatically grant access to download after payment. Designed to feel native to MyBB (templates + theming) and simple for admins.
-
Themed storefront at misc.php?action=store — uses your theme via {$headerinclude} {$header} {$footer} Products: price, currency, active flag, description, and attachment ID to unlock Orders: pending → paid → refunded states; admin list with timestamps PayPal Checkout: create → approve → capture (and refund from ACP) Secure downloads: only purchasers can fetch the paid attachment Diagnostics: token test + log viewer to troubleshoot creds/cURL []Robust logs: writes to inc/plugins/logs/bbm_store.log Settings repair: self-heals settings if MyBB cache hiccups
- BankPipe-inspired structure: clean actions, reliable settings handling
- ACP → Store → Products — add/edit/delete products ACP → Store → Orders — view purchases, issue refunds ACP → Store → Diagnostics — token test + error log Configuration → Settings → BBMODZ Store Settings — enable store, PayPal keys, title, currency, etc.
- MyBB 1.8.x []PHP 7.4+ (8.0/8.1/8.2 OK) []PHP cURL enabled PayPal REST app (Client ID + Secret) * PluginLibrary for nicer settings creation; falls back to manual if missing
Code:
inc/plugins/bbmodz_store.php (bootstrap)
inc/plugins/bbm_store/core.php (tables, settings, templates, helpers)
inc/plugins/bbm_store/admin.php (ACP: products, orders, diagnostics)
inc/plugins/bbm_store/front.php (public routes & downloads)
inc/plugins/bbm_store/paypal.php (token/create/capture/refund)
inc/plugins/logs/ (created automatically)⚙️ Install
Upload all files, preserving folders.ACP → Configuration → Plugins → Activate “BBMODZ Store”.
ACP → Configuration → Settings → BBMODZ Store Settings
- [
- ]Enable Store = On []PayPal Mode = Sandbox (switch to Live when ready) Paste Client ID & Secret
ACP → Store → Products → Add your first product:
- Attachment ID = the aid of a file uploaded to a post Set Active = Yes
[*]Public: go to misc.php?action=store and buy/test.
🧩 How Purchases Work
User clicks Buy → redirected to PayPal (approve)On return, plugin captures the order and marks it paid
Access is granted in bbm_store_purchases (uid, pid, attachment_id)
User downloads via misc.php?action=store_download&pid=PRODUCT_ID
🔧 Troubleshooting
“Could not initiate PayPal checkout”
→ Check Store → Diagnostics. Common causes:-
Missing Client ID/Secret cURL disabled
- Sandbox vs Live mismatch
→ Make sure templates installed on activation. Re-activate the plugin to recreate bbm_store_list & bbm_store_row.
Settings group not showing
→ Use Store → Diagnostics/Repair (if included) or re-activate to rebuild settings; clear forum cache.
🔐 Security Notes
- Downloads are gated per purchase; direct URL access is blocked by auth checks Refund revokes access automatically
- Logs include HTTP status + API body for auditing (do not share secrets)
🗺️ Roadmap
- Postbit/attachment “Paywall” button (buy from the thread) Coupons & limited-time pricing
- Multiple providers (Stripe, etc.)
- Refund does not work at the moment. It's half coded in. If you attempt, it will just error out: Refund failed: Refund Failed - HTTP 422: Status=unknown, Response: {"name":"UNPROCESSABLE_ENTITY","message":"The requested action could not be performed, semantically incorrect, or failed business validation.","debug_id":"d353da9011b8e","details":[{"issue":"REFUND_FAILED_INSUFFICIENT_FUNDS","description":"Capture could not be refunded due to insufficient funds. Ple
- in time....
🆕 Changelog (highlights)
- 1.5.4: Template eval fixed per MyBB docs; cleaner front rendering 1.5.3: Eval concatenation corrected; quote safety 1.5.1: Admin actions reworked to avoid PHP parse on quotes 1.5.0: Multi-file structure, full PayPal flow, templated storefront, secure downloads