Order Attachment is a practical Magento 2 module for stores that need to collect additional files from customers related to an order. The extension is especially useful wherever photos, scans, PDF documents, graphic designs, confirmations, prescriptions, forms, or other materials provided by the customer are needed to complete a purchase.

The module adds a secure attachment field to the checkout and saves the file together with the order. The form can be visible for all orders or only when the cart contains a product marked as requiring an attachment. This means the store does not force uploads where they are not needed, while still being able to precisely handle products that require additional data.

The module’s main advantage is control over the timing and security of file uploads. The attachment is validated on the backend, stored outside the public directory, and made available to administrators only through secured Magento admin panel actions. This reduces the risk of accidentally exposing customer files and eliminates the problem of public links to private documents.

After the order is placed, the administrator can see the attachment directly in the order view. They can download the file or open its preview if the format is supported. Popular image formats and PDF are supported, and the allowed extensions and maximum file size can be configured in the admin panel.

Key features

Global enable or disable option for the module in Magento configuration.
Conditional display of the upload field at checkout.
Per-product configuration support through a product attribute.
Option to require an attachment only for selected SKU.
Upload of images and PDF files.
Backend validation of extension, MIME type, and file size.
Secure file storage outside the public directory.
Attachment linked to a specific order.
File download link in the admin panel.
Preview of supported files in the order view.
Automatic cleanup of old temporary files.

Who this module is for

The module is designed for Magento 2 stores that sell products or services requiring an additional file from the customer, for example:

personalized products,
printing and print services,
graphic design services,
medical or optical products requiring documents,
orders requiring a reference photo,
B2B products requiring confirmations or forms.

Business benefits

Less manual email communication after the order is placed.
Lower risk of losing a file because the attachment goes directly to the order.
A better workflow for handling products that require additional data.
Greater control over customer file security.
Simpler work for the administrative team in the Magento panel.

Configuration

The administrator can set the following in the panel:

whether the module is active,
when the attachment field should be visible,
whether the attachment is required,
which file extensions are allowed,
what the maximum file size is,
whether the attachment should be visible in the order preview,
whether file preview is available.

Security

The module was designed with the assumption that every uploaded file is untrusted. Therefore, files are validated on the server side, receive secure technical names, and are not published as direct URLs in pub/media. Downloading and preview are handled through administrative controllers protected by Magento permissions.