add_action( 'woocommerce_checkout_process', function() {
$source = isset( $_POST['_wc_order_attribution_source_type'] )
? sanitize_text_field( $_POST['_wc_order_attribution_source_type'] )
: '';
if ( $source === 'typein' || empty( $source ) ) {
$utm = isset( $_POST['_wc_order_attribution_utm_source'] )
? sanitize_text_field( $_POST['_wc_order_attribution_utm_source'] )
: '';
if ( empty( $utm ) || $utm === '(direct)' ) {
// Additional entropy check - block if name looks random
}
}
});
