Mazenprofit — Multilingual E-Learning & Commerce Platform
From a written proposal to a live, privacy-conscious, three-language course platform with Stripe payments, protected video, and hardened WordPress security.
Freelance client project for Mazen Saleh, a German sole proprietor in Hamburg — end-to-end build, plus ongoing technical maintenance and security hardening.
The brief
Mazen needed a professional e-learning platform to sell a structured video course to a German-speaking and Arabic-speaking audience: a mandatory intro video before purchase, a compliant checkout with contract acceptance, protected sequential lessons behind a paywall, a closing exam, and a handoff into a private Discord community for people who complete the course — all built with German data-protection requirements in mind from day one.
What was built
Sales funnel: a no-skip introductory video on the landing page, a pricing page with list/offer pricing, and a checkout flow requiring contract acceptance, registration, and email verification before payment.
Course delivery: LearnDash-powered sequential video lessons with a progress bar and a running 1-year access countdown, downloadable resources per lesson, a ~7-question closing exam with correct-answer-to-advance logic, and a Discord invite flow on completion.
Commerce: WooCommerce plus a live Stripe integration, with an automatic PDF invoice (Rechnung) emailed and saved to the customer's account — a German-market requirement, not an afterthought.
Multilingual: the full platform — landing page, checkout, course, exam, and legal pages — shipped in Arabic, German, and English via WPML, with correct RTL handling for Arabic.
Privacy & technical setup: opt-in cookie consent (Complianz Premium), regularly reviewed Datenschutzerklärung and Impressum pages, geo-IP-aware consent banners, technical configuration for third-party providers (Stripe, Bunny.net, WPML) with data-protection considerations in mind, and a data-deletion request process for WooCommerce customers.
Security hardening, post-launch
Beyond the initial build, I carried out a full security hardening pass across the live platform, covering information-disclosure risks, header- and browser-level protections, and account security — with particular attention to the account and login pages:
- Closed information-disclosure vectors, including public user enumeration and version fingerprinting across WordPress core and plugins
- Applied a full set of standard security headers sitewide, including on the login page
- Rolled out a Content-Security-Policy through a staged, non-breaking process to protect Stripe and plugin functionality
- Disabled legacy endpoints commonly targeted by automated brute-force and enumeration attacks
- Hardened the admin account with two-factor authentication and login-attempt limiting
- Wrote custom order-handling code compatible with WooCommerce's HPOS storage model, ahead of it being enabled
Why this project matters
This is the clearest example in my portfolio of full platform ownership: not just a WordPress build, but the sales funnel, payments, compliance, and security posture that make a commerce platform safe to run in a regulated market — scoped from a written proposal, delivered against a fixed four-week plan, and maintained afterward.
Building a web platform team in Germany?
I am available for qualified full-time roles in WordPress, WooCommerce, web platforms and technical project delivery.
Contact me about a role