DevDome Affiliate Manager: Amazon Affiliate Links & Amazon Associates

Description

DevDome Affiliate Manager is an affiliate link manager for WordPress. It applies Amazon tracking IDs, creates buttons and keyword links, counts clicks and indexes product links. Optional hosted services check product status, find replacements at click time and route visitors to regional stores.

Amazon Associates Tagging

Add tracking IDs under Affiliate Tags. Choose from 22 Amazon marketplaces and apply tags sitewide or to selected posts, pages and post categories. Supported Amazon links in individual content pages are tagged when displayed, without rewriting stored content.

SEO Attributes offers No Follow, Follow and Sponsored. No Follow and Sponsored are enabled by default. Open in New Tab is off by default. The click tracker honours it, with a same-tab fallback if the browser blocks the new window.

Amazon Buy Button

Use [devdaffi_button asin="YOUR_ASIN"] for a generated product button. Replace YOUR_ASIN with the product’s ten-character ASIN.

Under Button Link, Edit selects the generated marketplace. Regenerate resets it to amazon.com. Don’t add tag omits tagging and click interception for generated shortcode buttons.

Use Custom Link accepts a custom URL. An {ASIN} placeholder is filled from the shortcode’s ASIN. A fixed custom URL needs only [devdaffi_button]. Non-Amazon custom destinations do not receive an affiliate tag.

Amazon Geo Localization

OneLink Alternative enables regional routing and is off by default. Hosted geo routing requires a connected DevDome account and a usable service response.

If you have not configured a tag for the visitor’s local store, the original destination stays in use. On /go, a tag that is not yours is replaced with a configured tag or removed. See External services for the visitor IP and other fields sent.

Amazon Link Checker and Link Radar

Use Scan Site For Amazon Links to build the local index and Scan Again to refresh it. The scanner reads published content and WooCommerce product URLs. It indexes full Amazon product URLs containing an ASIN, not shortlinks or generated shortcode buttons. WooCommerce product URLs can also contain supported ASIN paths on your own site’s host.

Stock & 404 Monitor contains Check Now. It checks every scanned product in batches of up to 20, with a live progress row and an updating usage meter. Pause stops further batches, Resume continues them and Cancel ends the run. A running batch may finish first.

The run continues on the server through WP-Cron and a loopback request when the page closes. Its progress appears when you return. Background continuation depends on those requests being able to run. Account, quota or service errors can stop the run.

Auto Re-Scan is off by default. While enabled, it re-reads content at the interval set by Scan every and checks up to 20 indexed products every hour through DevDome. Content scans are local; status checks use the account’s monthly allowance.

Status results include live, out of stock, dead and unknown. A failed service request leaves existing statuses unchanged. The screen describes the free allowance as 500 checks and searches per month per account and displays usage returned by the service.

Dead Amazon Link Recovery

Out of Stock Redirect and 404 ASIN Redirect independently enable recovery for products with those stored statuses. Each offers Best replacement product or Search page. Replacement mode asks for a live replacement at click time and falls back to Amazon search when none is returned. With recovery disabled for that status, it leaves the destination unchanged.

For bulk replacement, type the replacement into New ASIN. The button reads Replace on N pages, with the actual page count and singular wording for one page. It replaces matching ASINs in indexed content and product URLs, then checks the new ASIN. It does not choose the ASIN for you. These content edits persist.

Affiliate Link Tracking

The plugin routes supported Amazon clicks through /go for affiliate link tracking. Each Affiliate Tags and Keyword Rules row shows Clicks and Unique. Tag totals belong to the affiliate ID; rule totals belong to the rule.

Unique means one visitor per tag or rule per 30 minutes, identified by a hash of IP address and browser user agent. Click statistics do not store those raw values. Blocked bots have one global counter, not a counter per tag. Rate limits cap counted clicks from a repeatedly requesting address.

The endpoint validates Amazon destinations and resolves supported shortlinks before tagging. A shortlink that cannot resolve to an allowed storefront is refused.

Keyword Auto-Linker and Blog Monetization

Keyword Rules can turn selected words and phrases into Amazon affiliate links when content is displayed. This supports affiliate marketing without manually inserting each link.

Rules offer Exact Match and Broad Match, case sensitivity and link limits. Existing links are always excluded. Configurable exclusions cover headings, code, blockquotes and the first paragraph. The auto-linker is off by default.

WooCommerce Affiliate Product Links

WooCommerce Buttons is off by default. Enable it to route supported external product buttons through /go for tagging and click counting.

Generated buttons keep the Amazon store their product link already names. Supported same-site links without a store use the marketplace selected under Button Link. A configured custom button URL applies to matching product buttons even when WooCommerce Buttons is off. Button rewriting happens at display time.

Click Protection

Under Bot Protection, Block Bot Clicks is on by default. It stops detected bots before redirecting and counting affiliate clicks. Detection uses the built-in bot list plus shared bot signatures and Spamhaus DROP ranges when those are available in the shared cache. This WordPress.org build does not download the shared feeds.

Outdated Browsers contains Block outdated browsers. It is off by default and applies only while Block Bot Clicks is on. It treats desktop Chrome, Chromium-based Edge and Firefox below version 125 as bots. Chrome and Edge 109 and Firefox 115 ESR are allowed. Phones and tablets are excluded from this version rule.

Bots Blocked shows the global blocked-click count, subject to the click rate limit. Reset Count clears it. Redirect Method selects JavaScript + 302 (Recommended), JavaScript Only or 302 Redirect Only.

Amazon Mobile App Opener

Mobile App is off by default. On Android, Force Amazon App (Intent) attempts to open the Amazon app and falls back to the browser. Web Only (Recommended) uses the normal web destination.

The optional iOS setting offers an Open in Safari link in detected in-app browsers. The link opens a new browsing context; the plugin cannot guarantee that the device chooses Safari.

AI and Agent Support

On WordPress 6.9 and newer, the plugin registers 16 WordPress Abilities. Compatible agents can use them when your site exposes them.

They cover settings, tags, keyword rules, scans, product statuses, quota, ASIN replacement and click counters. They require administrator permissions. The status-check ability checks a bounded batch; it does not start the screen’s complete Check Now run.

ASIN replacement, tag or rule removal, counter resets and remote status checks require confirmation. Enabling geo routing or scheduled checks, disabling bot blocking, or saving lists that remove tags or rules also requires confirmation.

Ability output excludes account email addresses, the site token and server paths. Remote checks and replacement checks use the services disclosed below.

Independent Amazon Associates Tool

Choose the features you need for amazon affiliation and link maintenance.

DevDome Affiliate Manager is an independent project. Amazon, Amazon Associates and OneLink are trademarks of Amazon.com, Inc. or its affiliates. This plugin is not endorsed by, sponsored by or otherwise affiliated with Amazon.

External services

DevDome provides the services below. Terms: https://devdome.com/terms-of-service Privacy policy: https://devdome.com/privacy-policy

Plugin catalog: https://devdome.com/wp-plugins/catalog.json. After account connection, the shared DevDome Tools dashboard fetches plugin names, descriptions, logos and links. The request identifies the bundled core version through its user agent, with no site or visitor fields. Successful results are cached for 12 hours; failures for one hour. Before connection, the dashboard uses its bundled catalog.

Link Radar status checks, https://api.devdome.com/amazon-404-oos-checker

/check-batch receives a POST containing ASINs, their Amazon domains, this site’s domain and secret site token. Calls occur during Check Now, status rechecks, checks following bulk replacement, confirmed agent checks and hourly checks while Auto Re-Scan is enabled. Hourly checks process up to 20 products. An empty index gives them nothing to check.

/search receives a GET containing a keyword, Amazon domain, site domain and site token. The keyword contains up to six words derived from the linking post’s title or product metadata. It runs at click time when recovery is enabled for the stored status and Best replacement product is selected. Results are cached for one hour, or ten minutes when no replacement is returned. No visitor IP or browser data is included in these two service payloads.

/usage receives a GET containing the site domain and site token when the screen or an agent requests account usage. The caller must have a connected account state or a recorded connection attempt. The screen also updates its meter from batch responses.

Checks and searches require a connected account and consume its allowance. The screen states a free allowance of 500 checks and searches per month. The service supplies the current plan, limit and usage. Failed or refused checks leave stored statuses unchanged.

Geo-localization, https://api.devdome.com/geo-resolve

The actual endpoint is https://api.devdome.com/geo-resolve/resolve. When OneLink Alternative is enabled, eligible /go clicks send a JSON POST containing the visitor’s IP, destination ASIN and Amazon domain, domains with enabled regional tags, site domain and site token.

The service uses these fields to choose a regional destination. No request is made without a visitor IP or configured regional coverage. An unusable response leaves the original destination in place. The plugin subsequently replaces or removes tags that are not yours.

DevDome account, https://api.devdome.com/plugin/account, /plugin/disconnect and https://analytics.devdome.com/api/plugin/connect/*

The shared account library makes no account-status request before a connection action has been recorded.

• https://api.devdome.com/plugin/account: POST with the site domain and the site token in an Authorization header. It verifies account status after connection actions and on later status reads. Successful responses are cached for 15 minutes. The response includes account identity, email and plan.
• https://analytics.devdome.com/api/plugin/connect/start: POST when you press Connect. It sends the site domain as site_id and site_domain, the site token and the wp-admin return URL.
• https://analytics.devdome.com/api/plugin/connect/claim: POST when completing the connection. It sends site_id, site_domain, site_token, request_token and the handshake nonce.
• https://api.devdome.com/plugin/disconnect: POST when you press Disconnect, carrying the site domain and authenticated site token.

The browser visits https://devdome.com/connect/ to authorize the connection. Its URL carries an opaque request handle, not the Account ID or site token.

Connecting through the disclosed DevDome Tools card also authorizes an inventory in recurring account-status requests: active DevDome plugin slugs and versions, plus DevDome library, WordPress and PHP versions. It excludes other plugins, users, email addresses, content and visitors. Existing connections and connection buttons without this disclosure do not grant that inventory permission. Disconnecting stops inventory sharing.

Amazon

At click time, /go resolves Amazon URLs server-side, including amzn.to, a.co, amzn.eu and amzn.asia. It requests HEAD first and retries with GET if HEAD fails, returns below 200, or returns 405 or 501. It follows only allowed Amazon hosts, with a seven-request-hop limit. Successful resolution is cached for 12 hours.

Requests contain the destination URL and a generic plugin user agent, not the visitor’s IP or browser user agent. The visitor’s browser separately contacts Amazon when it follows the resulting link.

This service is provided by Amazon.com, Inc.: Conditions of Use, Privacy Notice.

No error reports

This plugin sends no error reports. The “Report a bug” link on its screen opens the bug form on devdome.com in your browser; the plugin itself sends nothing.

Not contacted on this WordPress.org build

This build does not fetch https://api.devdome.com/bot-protection/list, /bot-protection/asns or /bot-protection/drop, and does not schedule feed downloads. Local matching can still use shared data already cached on the site.

It does not contact https://api.devdome.com/plugin-updates/. The self-hosted updater and installer are excluded. Updates come from WordPress.org. Dashboard installation of listed WordPress.org plugins uses WordPress’s plugin-information API and validated packages from downloads.wordpress.org, only after an authorized installation request.

Never sent, in any request

The plugin’s generated service payloads do not include passwords, password hashes, visitor form input, visitor names or visitor email addresses.

The scanner runs locally. It does not upload posts, pages or comments. Status checks send extracted ASINs and domains. The content-derived exception is the replacement keyword described above, which contains up to six words from a title or product metadata.

Source & build

The React admin source is included in admin-ui-src/src/. Vite builds assets/admin/index.js and its stylesheet with minification disabled in the build configuration.

To rebuild, run cd admin-ui-src, then npm install and npm run build. Dependency versions are recorded in admin-ui-src/package-lock.json: React and ReactDOM (MIT), and Lucide React (ISC). Bundled upstream production dependencies can contain compressed code.