Collect private artwork with a WooCommerce order

Use a staging store with Cartdini Free 1.8.2 and Pro 1.8.2 active. Activate your Pro licence through its supported setup screen to unlock editing and tools. Keep Free active. Check your checkout type and compatibility requirements.

Use fictional answers and a test or offline payment method for verification. Review every draft before choosing Save questions & fields; a recipe does not publish itself.

1. Check private storage first.

   Your host needs writable storage outside publicly served web roots. If Cartdini reports a storage problem, resolve it before enabling uploads. Do not move private files into the public media library to bypass the check.

2. Load the artwork recipe.

   Go to Workflows → Artwork & instructions. Review the file question and accompanying instructions. Alternatively, add a File question in Extra questions at Order information.

3. Choose formats and size.

   Open File requirements. Select the formats you actually accept and a 1–10 MB limit. Our example accepts PDF, JPG and PNG up to 5 MB. The effective server limit can be lower; JPG/PNG require supported image processing.

4. Save and test a real sample.

   Review required/optional status, instructions and placement, then Save questions & fields. At staging checkout, upload a harmless sample and wait for the ready confirmation before placing the order.

1. Upload an allowed file and check the filename and ready state.
2. Remove it through Remove file and check that it is cleared. Upload the sample again.
3. Place a test order and open the saved file through the authorized order screen.
4. Check that an unrelated signed-out visitor cannot retrieve the file. Also test an unsupported format and an oversized file on your staging store.

Images are re-encoded within pixel limits. PDFs are restricted plain PDF 1.0–1.7 files: forms, scripts, links, attachments, encryption and compressed object streams are rejected. These conservative checks are not antivirus scanning.

Unused uploads expire after 24 hours. Order attachments follow the plugin’s retention and privacy lifecycle. Keep administrative access limited, follow your store’s privacy policy and verify host cleanup requirements. A filename may itself contain personal information.

Uploads belong at the order location. Repeatable-group child uploads are not supported. Read the full upload limits and storage reference.

Ask for files only when the question is relevant · Export selected answers, with filenames only