FishBSE Listings Wordpress Plugin - Rating, Reviews, Demo & Download
Plugin Description
FishBSE Listings connects your WordPress website to the FishBSE aquarium marketplace service. Display your own eligible public listings and auctions with the native FishBSE Listings block or [fishbse_listings] shortcode. Choose cards, list or compact layouts, theme colors, listing type, category and up to 24 items.
Optional transaction buttons let buyers open FishBSE or use an on-page purchase/bid panel. Embedded transactions use a FishBSE sign-in and approval popup followed by Stripe payment fields. FishBSE manages inventory, bid validation, auction timing, reservations, orders and payment status. This plugin does not import WooCommerce products or maintain a separate inventory database.
An active FishBSE seller account, verified email and completed Stripe seller verification are required. Card payments and payouts must be enabled, and FishBSE must permit integration access for the account. The separate FishBSE Verified badge is not required. Public WordPress websites must use HTTPS. FishBSE service terms and applicable transaction fees apply; no plugin license key or paid plugin edition is required.
The optional FishBSE footer logo and credit link are disabled by default. Listing links and transaction controls are part of the marketplace service. All distributed application source is included in readable form; no build step is required. See LICENSE.txt for licensing.
Full instructions and limitations are included in USER-GUIDE.txt and in Settings > FishBSE Listings > How to use.
External service and privacy
This plugin requires FishBSE. It does not send FishBSE requests until a site administrator configures an API key. Saving a key initiates the connection; disconnecting removes that site’s saved key.
FishBSE
FishBSE provides seller inventory, auction management, bid validation, reservations, order records and payment-status verification. Its service terms and privacy policy apply:
Every listing request reports this WordPress site’s home URL in X-FishBSE-Site, including display-only installations. FishBSE stores the origin (scheme, host and port), seller ID, first/last request times and request count so staff can review connected websites. These addresses are client-reported, not domain-ownership verification. Stripe seller verification and staff access controls are checked on every FishBSE request; the separate paid FishBSE Verified badge does not unlock this feature. Disabling access does not cancel existing orders or payments.
Embedded transactions use a FishBSE sign-in/approval popup and direct browser requests to https://fishbse.com/wordpress_embed_api.php. These send the browser’s origin, IP/user agent, a short-lived buyer authorization, and the buyer’s chosen bid or checkout options. Responses contain the scoped listing review, payment-session client secret and verified bid/order result. Buyer access stays in browser memory; the plugin does not persist it in WordPress or localStorage. Stripe.js loads from https://js.stripe.com and sends payment details directly to Stripe. No FishBSE password or full card number is collected by WordPress. See USER-GUIDE.txt for setup, privacy details and limits.
This plugin connects to https://fishbse.com/wordpress_listings_api.php when validating a newly entered API key and when visitors load or refresh listings. Requests send the key in an Authorization header, the chosen listing filters, the WordPress home URL in X-FishBSE-Site on every request, and the WordPress server’s IP address. Transaction-enabled feeds also send the home URL as return_url. Buyer sign-in uses https://fishbse.com/wordpress_connect.php; redirect-mode transactions open https://fishbse.com/wordpress_transaction.php. The key is saved in the WordPress options database and never included in public HTML or browser requests. FishBSE stores only a hash of the key. Protect your WordPress database and backups. Uninstalling deletes the current site’s plugin settings; revoke the key in FishBSE to invalidate it everywhere.
The service returns only the connected seller’s public listing information, current auction bids, bid counts, open trade request counts, and auction dates. Visitors load listing images from their supplied image hosts and open FishBSE links to bid, enquire or purchase. No payment, bidder identity or private contact details are returned. FishBSE account registration is required.
Stripe
Stripe provides payment processing and card verification. Stripe.js loads from https://js.stripe.com/v3/ when the buyer opens a payment or card-verification step, not upon plugin activation. Card information and any requested billing/shipping information are submitted through Stripe’s fields directly to Stripe. Stripe also receives browser/device and network information as described in its privacy policy. Authenticated FishBSE results may show a card brand and last four digits; these are not saved in WordPress settings or returned in the public inventory feed.
Listing images load from the HTTPS image hosts supplied in the FishBSE feed. These hosts receive normal image-request metadata, including the visitor’s IP address. Plugin icons, styles and application scripts are bundled locally; Stripe.js is the documented payment-service exception.
Refresh behavior
Visible pages refresh every 15 seconds, rechecking access with FishBSE on each refresh. Hidden tabs pause refresh and update when reopened. The listings feed is read-only; embedded controls use separate buyer-authorized FishBSE requests and Stripe payment fields inside the WordPress page. Ended, canceled, completed, archived or unpublished listings are removed. Auction release/finalization cron jobs on FishBSE must continue running normally.
If FishBSE cannot be reached or a key is revoked, cards are cleared with an unavailable message instead of displaying stale prices. Replacing a key disconnects all sites using the previous key. Disconnecting in WordPress clears only that site’s saved key. Revoke in the FishBSE dashboard to invalidate it everywhere.
Screenshots
No screenshots provided
