Admin Portal | Grab Fragrance

Total Orders

—

All time

Pending

—

Awaiting fulfillment

Fulfilled

—

Completed orders

Revenue

—

Total paid orders

Recent Orders

Today's Summary

—

Orders today

—

Revenue today

—

Pending today

Order ID	Customer	Fragrance(s)	Total	Date	Status	Actions

Pull Orders by Date Range

From

To

	Name	Category	Price	Stock	Status	Actions

Store Settings

Core business information used in emails and reports.

Store Name

WhatsApp Number

Support Email

Location

PayFast Configuration

Enter your PayFast credentials. Use sandbox credentials while testing.

This panel does not affect the live checkout. The merchant ID, key, and URLs actually used at checkout are hardcoded directly in index.html's payment form and in payfast-notify.js. Saving here only writes to settings/payfast in Firestore, which nothing in the live site reads. To change live PayFast settings, edit those files directly and redeploy.

Merchant ID

Merchant Key

Return URL

Notify URL (server endpoint)

Resend API Configuration

Connect your Resend account to send order confirmation emails automatically.

Get your free API key at resend.com. Free tier: 3,000 emails/month, 100/day. For testing use onboarding@resend.dev as the from address. Once you have grabfragrances.co.za, verify it in Resend and use orders@grabfragrances.co.za.

Resend API Key

From Email (verified domain)

From Name

Order Confirmation Email Template

Firebase Setup Checklist

Complete these steps in the Firebase console to activate all integrations.

Replace Firebase config in this file with your project credentials Enable Email/Password sign-in in Firebase Auth console Create admin user in Firebase Auth console Create Firestore database in production mode Set Firestore security rules (only authenticated users read orders) Deploy site to Firebase Hosting (firebase deploy) Replace PayFast sandbox credentials with live credentials Verify domain in Resend and update from address

Recommended Firestore Security Rules

        rules_version = '2';
        service cloud.firestore {
       match /databases/{database}/documents {
        // Orders — only authenticated admins can read/write
     match /orders/{orderId} {
      allow read, write: if request.auth != null;
    }
    // Settings — only admins
    match /settings/{doc} {
      allow read, write: if request.auth != null;
    }
  }
}