-exclusive- Envato Purchase Code Verifier Official

catch (Exception $e) echo "Verification failed: " . $e->getMessage();

if ($httpCode === 200) return json_decode($response, true); // Valid code elseif ($httpCode === 404) return false; // Invalid code else throw new Exception("API error: HTTP $httpCode");

Every time a customer buys a theme, plugin, or template on Envato Market, Envato generates a unique Purchase Code. It looks like this: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx (a UUID v4 string). -EXCLUSIVE- Envato Purchase Code Verifier

This 36-character code is the proof of purchase for every digital item sold. Yet, for developers and website administrators, simply having this code is not enough. The critical challenge lies in —distinguishing a legitimate customer from a fraudster using a fake or stolen code.

"item": "id": 12345678, "name": "SuperTheme - Responsive WordPress Theme", "author_username": "themeguru" , "license": "Regular License", "supported_until": "2025-12-31T00:00:00+00:00", "buyer": "john_doe_123", "purchased_at": "2024-01-15T10:30:00+00:00", "amount": "59.00", "currency": "USD" catch (Exception $e) echo "Verification failed: "

$response = curl_exec($ch); $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE); curl_close($ch);

| Solution | Type | Best For | |----------|------|-----------| | | DIY | Developers wanting full control | | Freemius | SDK + SaaS | WordPress plugin sellers needing licensing & updates | | LiquidWeb’s Envato Verifier | PHP Library | Quick integration into existing apps | | Patreon-style gateways | Custom | SaaS platforms using Envato as a payment proxy | This 36-character code is the proof of purchase

// Usage $code = $_POST['purchase_code'] ?? ''; $token = 'YOUR_SECRET_API_TOKEN'; try $saleData = verifyEnvatoPurchaseCode($code, $token); if ($saleData) echo "✅ Valid license for: " . $saleData['item']['name']; // Now check if this code has been used before (your own DB) else echo "❌ Invalid purchase code.";

Whether you copy-paste the PHP function above, integrate an SDK, or wait for Envato’s next evolution, one thing is certain: Have questions about implementing your own verifier? Need an advanced multi-site license tracker? Contact our editorial team—we may feature your solution in an upcoming exclusive.

If the code is invalid, you get a 404 Not Found or 403 Forbidden error.

Always verify on your own backend server. ❌ Pitfall 2: Using the Wrong API Endpoint Some outdated tutorials use the deprecated market:shortcode endpoint. That no longer works.