Dragwyb Docs Dragwyb Docs
Visit Website
Updated on Oct 17, 2026

Configure Secure WooCommerce Order Tracking

Configure secure WooCommerce order tracking in Dragwyb Click to Chat, including login requirements, account ownership checks, settings, privacy tests, and troubleshooting.

Dragwyb Click to Chat includes a WooCommerce order-status lookup in the AI Assistant. The lookup requires the visitor to be logged in and checks that the order belongs to the current account, matches that account’s email, or is being accessed by an authorized store administrator or shop manager. The front-end tracker asks for an Order ID; it does not ask customers to type a separate billing email.

Before you begin

  • Install and activate WooCommerce.
  • Activate the Dragwyb Click to Chat AI Assistant and make sure it is available on a front-end page for testing.
  • Prepare a staging site or test store with one order linked to a customer account and, if possible, another order belonging to a different account.
  • Keep test orders and customer details private. Do not use a real customer’s order for a demonstration or screenshot.

How order tracking works

When a visitor asks about tracking an order, the plugin can show a Track Your Order Status form. The customer enters the numeric Order ID and selects Look Up Order Status. The front-end sends the Order ID to the plugin’s order-status endpoint; it does not send a billing-email field.

The server checks the current login and order ownership before returning order details. A logged-in user can access an order when the order is assigned to that user account or the order’s billing email matches the email on the logged-in account. Users with the manage_woocommerce or manage_options capability are also allowed. A guest is asked to log in, and an account that does not pass the ownership checks should not receive the order details.

Important: The plugin’s current front-end flow verifies the logged-in account against the order. It does not implement a guest lookup form where a visitor proves ownership by entering both an Order ID and a billing email. Do not describe it as guest Order ID plus email verification.

Open the order tracking settings

Use these settings to configure the AI tool and customize the messages shown around order tracking. The order-status form itself is handled by the plugin when an order-tracking request is detected; the source does not expose a separate on/off switch specifically for the front-end tracker.

  1. In WordPress admin, open Click to Chat → AI Assistant.
  2. Open Chatbot Settings and select the Advance tab.
  3. Under AI Business Tools & Workflow Automation, enable the main switch if you want the AI assistant to use business tools, then enable Order Status Verification in the WooCommerce tools list.
  4. Open the Messages tab and find WooCommerce Order Tracking Notices.
  5. Review the Order Tracking Form Header Prompt (Logged-in Users), Guest Login Required Notice, and Order Email Mismatch Privacy Notice. Keep the login link placeholder {login_url} in the guest notice if you want the plugin to insert the My Account or login URL.
  6. Save the settings using the page’s save action.

The Order Status Verification tool is the AI tool-registry path. The front-end tracker endpoint has its own login and order-ownership checks, so enabling a tool should not be treated as a replacement for those checks.

Test a customer’s own order

  1. On staging, create or select a test order associated with a test customer account. Confirm its billing email matches that account’s email, or that the order is assigned to the account.
  2. Sign in as that test customer and open a front-end page with the AI Assistant.
  3. Ask to track an order and confirm the tracker appears. Enter the numeric Order ID and submit it.
  4. Confirm the result shows the expected order number, status, date, total, and item summary.
  5. Repeat with another order that is also legitimately associated with the same test account, if available.
  6. Sign out when testing is complete and clear any test data or browser session that should not remain available.

Test login and privacy boundaries

  1. Guest request: sign out and try the order-tracking flow. Confirm the site asks the visitor to log in and does not return order details.
  2. Unrelated customer account: sign in as a different test customer and submit an Order ID belonging to the first account. Confirm the response does not disclose the order’s details.
  3. Email mismatch: use a test order whose billing email differs from the signed-in customer’s account email and whose order user ID does not match. Confirm the privacy/mismatch notice is shown.
  4. Authorized store staff: if testing with an administrator or shop manager, remember that the source explicitly allows users with manage_options or manage_woocommerce to look up orders. Do not use a staff account to validate the ordinary customer restriction.
  5. Invalid or missing Order ID: submit an invalid numeric ID and an ID that does not exist. Confirm an error is returned rather than another order’s information.

These are staging test instructions, not a claim that live tests have been run. Verify the behavior on your own WooCommerce setup, especially if other plugins, custom authentication, or order-management extensions modify the customer experience.

Troubleshooting

  • The tracker does not appear: confirm WooCommerce and the AI Assistant are active, then ask a clear order-status question. The tracker is shown through the order-tracking intent path rather than a dedicated tracker toggle.
  • A guest cannot look up an order: this is expected. The current order-status endpoint requires a logged-in user; direct guests to the store’s My Account or login page.
  • A customer’s order is rejected: verify the signed-in account, the order’s customer/user ID, and the order billing email. The email compared by the current implementation is the logged-in account email, not an email typed into the tracker form.
  • The wrong account sees no details: this is expected when neither the order user ID nor billing email matches the logged-in account. Repeat the test with separate staging accounts.
  • Order details are exposed unexpectedly: stop testing with real customer data, record the steps using test accounts, and investigate the site’s plugin/theme customizations before using the feature in production.
  • The AI tool does not perform the lookup: check Advance → AI Business Tools & Workflow Automation → Order Status Verification and ensure the main business-tools switch is enabled if the tool path is needed.

Related WooCommerce guides

Screenshot

Screenshot to add: Capture the front-end order tracker and a successful result using a staging test account and test order. Also capture the guest login notice or a rejected lookup from a separate test account. Hide names, email addresses, addresses, order totals, and any other private information. No screenshot has been captured for this guide yet.