FluentCart 1.3.21 – S3 Storage Wizard and Cloudflare R2 Support

Day 3 of release week, and we are still shipping!

Version 1.3.21 of FluentCart turns storage from a developer chore into a first-class part of the admin experience. This release overhauls the entire Amazon S3 integration from end to end and adds native support for Cloudflare R2, bringing the two most popular object storage platforms under a single, consistent workflow inside WordPress.

For stores that deliver digital products, large media files, or growing file libraries, storage is no longer a matter of editing a config file and hoping for the best. Inside FluentCart, your storage containers, security posture, and file management are all handled from the same interface — regardless of whether you use Cloudflare or AWS.

Alongside the storage work, this release lands important security patches and a round of stability fixes across uploads, downloads, bucket handling, and the provider dashboard. Here is what shipped.

Amazon S3, Reimagined From The Ground Up

S3 integration has been around for a while, but 1.3.21 replaces the old configuration surface with a guided three-step experience: Credential → Bucket → Security.

Credential Management

Define in wp-config.php — the recommended path. This keeps keys completely out of the database. When FluentCart detects that the constants are already set, it locks the credential fields in the UI to prevent accidental overrides from the dashboard.

Database mode — for teams who prefer UI-only configuration. Credentials are encrypted before storage.

Bucket Management

Manage buckets without leaving WordPress. The updated bucket step lets you browse existing buckets live from your connected AWS account or enter a bucket name manually. Need a new one? Create it directly from FluentCart — name validation, region selection, and all.

Security Settings

The S3 Block Public Access control is now a first-class toggle with clear messaging: Enabled (Recommended) / Disabled (Not Recommended), along with a lock indicator. What used to be buried three screens deep in the AWS console is now right at the final step of your bucket setup.

Connection Verification

Before marking the connection as active, every save goes through a proper verification path. Misconfigurations are caught before they reach a customer download.

The daily file operations — upload, list, search, delete, and download — have all been streamlined, and a provider badge now appears next to each file so it is always clear where an asset actually lives.

Cloudflare R2, Fully Native

1.3.21 ships with a fully native Cloudflare R2 driver. R2 is treated as a first-class storage provider — not a second-class S3-compatible shim. It has its own driver, settings module, bucket tooling, and UI, built against Cloudflare’s API directly.

Store owners connect with their Cloudflare Account ID, Access Key ID, and Secret Access Key using the same credential model as S3 — either defined in wp-config.php or stored encrypted in the database. Every feature available on S3 is also available on R2:

• Browse existing buckets or enter a bucket name manually
• Create a new R2 bucket from within FluentCart with jurisdiction selection: Automatic, Asia Pacific (APAC), Eastern Europe (EEUR), Eastern North America (ENAM), Western Europe (WEUR), Western North America (WNAM), or Oceania (OC)
• Verify connectivity before going live
• Upload, list, and delete files through the same admin UI used for S3

A Consistent Storage Interface

Alongside the new drivers, the entire storage settings area has been rebuilt.

• A single provider list where each driver has a toggle — enabling or disabling a storage backend is one click
• Edit existing provider settings without deleting and reconnecting
• Loading states in the provider dashboard make it clear when connections are validating, and bucket lists are loading
• All labels, copy, and icons across the storage settings have been polished for a clearer, more consistent experience

Whether your store runs S3, R2, or both, the mental model is the same: configure, verify, secure, and manage files.

Please read the developer docs about cloud storage here.

Security Fixes

PayPal checkout security. Strengthened server-side price validation during PayPal checkout to ensure pricing integrity throughout the payment flow.

Bug Fixes and Stability

Bucket lifecycle. Resolved issues with bucket creation, bucket dropdown selection, bucket region mismatch, and bucket fetching.

S3 file deletion. Corrected deletion behavior for S3-hosted files.

Checkout error. Resolved a fatal error during checkout when a product reference was missing (“Attempt to read property id on null”).

SKU duplicate issue. Fixed a constraint error that prevented creating multiple product variations without a SKU value.

Provider badge. The storage provider badge next to each file now displays correctly, making it clear where an asset lives.

PDF template styling (Pro). Resolved a styling issue affecting PDF invoice and receipt templates.

Closing Thoughts

External file storage has been one of the most requested features for stores selling large digital products. Hosting everything on your WordPress server works for small catalogs, but it becomes a bottleneck as download volume grows — both in terms of server resources and reliability.

With S3 and R2 support, FluentCart lets you offload file storage to purpose-built infrastructure without leaving the admin. S3 gives you the full AWS ecosystem. R2 gives you zero egress fees on Cloudflare’s global network. Both are configured from the same guided wizard with the same consistent interface.

The security and stability fixes in this release are equally important. If you are running 1.3.19 or 1.3.20, this is a recommended update.

Full Changelog

1.3.21 (Free)

• Adds AWS S3 storage driver with guided three-step setup wizard
• Adds S3 bucket creation, browsing, and selection from admin
• Adds S3 connection verification and credential validation
• Adds S3 Block Public Access toggle in setup flow
• Adds presigned download URLs with configurable expiration
• Adds two auth modes: wp-config.php constants and encrypted database
• Adds S3 reset and reconfigure flow
• Adds pluggable storage driver architecture
• Adds unified provider list with enable/disable toggles
• Improvements storage settings UI with loading states and polished labels
• Fixes PayPal checkout security to ensure pricing integrity
• Fixes checkout error on null product reference
• Fixes SKU duplicate issue in product variation creation
• Fixes provider badge not displaying correctly on files
• Fixes bucket creation, dropdown selection, region mismatch, and fetching
• Fixes S3 file deletion behavior

1.3.21 (Pro)

• Adds Cloudflare R2 storage driver with dedicated setup wizard
• Adds R2 bucket creation with jurisdiction selection
• Adds R2 connection verification and bucket browsing
• Adds R2 file upload, download, and delete operations
• Adds R2 presigned download URLs with AWS4-HMAC-SHA256 signing
• Fixes PDF template styling issue