Sell video courses with WooCommerce and the secure player
Show the XAPlayer player only to customers who bought the course product in WooCommerce, with one shortcode and no extra plugin.
All guides
Start
Quick start: your first protected course in 10 minutesVideo security: encryption, watermarks and what no player can doAdd to your site
Embed the secure player in WordPressSell video courses with WooCommerce and the secure playerThe XAPlayer secure player in MoodleThe XAPlayer secure player in LaravelThe XAPlayer secure player with Node.js and ExpressThe XAPlayer secure player in Next.jsThe XAPlayer secure player with Python: Django and FlaskHTML sites, site builders, or no serverFor sellers
Uploading videos and automatic protectionIssuing licenses, device limits and bulk issuingHow to stop IDM and downloaders from saving your course videosProtect course videos on WordPress and WooCommerceFor students
For students: watching a course with a license codePlatforms: Android, iPhone, Windows, Mac and LinuxWatching a course on AndroidWatching a course on iPhone and iPadWatching a course on Windows, Mac and LinuxFor developers
API reference: embed the secure player on any siteHere the lesson page shows the player only to people who bought that course’s product in your WooCommerce store. Everyone else sees a message with a link to buy it.
Before you start#
- In your XAPlayer panel, open Settings and create an API key. It is shown only once, so copy it right away.
- Under Websites allowed to show your player, add your site’s full address, such as https://academy.example.com. If your site also opens with www, add that too.
- Get the course ID: in Settings, pick the course in “Show the player on your website” and the ID is filled into the sample code. It is also the last part of the course page’s address in the panel.
- Follow “Embed the secure player in WordPress” first; this shortcode builds on [xaplayer].
A shortcode for buyers#
File: wp-content/themes/your-child-theme/functions.php
<?php
// [xaplayer_course product="123" course="COURSE_ID"]
// Shows the player only to customers who bought WooCommerce product 123.
add_shortcode('xaplayer_course', function ($atts) {
$atts = shortcode_atts(['product' => 0, 'course' => ''], $atts, 'xaplayer_course');
$product = (int) $atts['product'];
if (!is_user_logged_in()) {
return '<p>Please sign in to watch this lesson.</p>';
}
$user = wp_get_current_user();
if (!wc_customer_bought_product($user->user_email, $user->ID, $product)) {
return sprintf(
'<p>This lesson is for students who bought the course. <a href="%s">Buy the course</a></p>',
esc_url(get_permalink($product))
);
}
return do_shortcode(sprintf('[xaplayer course="%s"]', esc_attr($atts['course'])));
});
Use it#
- Find the course product’s ID in WooCommerce: hover the product name in the Products list and the ID appears.
- On the lesson page write [xaplayer_course product="123" course="COURSE_ID"].
- Open the page as a buyer and as someone else to see both cases.
If it doesn’t work#
| What you see | Cause and fix |
|---|---|
| The player area is empty or the browser says it refused to connect | Your site isn’t in the allowed websites, or www differs. Add the page’s exact address. |
| 401 unauthorized | The API key is wrong, or you created a new key and the old one stopped working. Copy the key again. |
| 404 not_found | The course or video ID is wrong or belongs to another account. |
| 400 bad_request | The body is incomplete: send exactly one of courseId or videoId, and a non-empty viewer.id. |
| After a few hours the player says the page timed out | The token expired. Get a fresh token every time the page opens, and never cache the player address. |
Try XAPlayer free for 14 days, with 10 licenses on us.
Try it free with your own course