Order Attachment is a practical Magento 2 module for stores that need to collect additional files from customers related to an order. The extension is especially useful wherever photos, scans, PDF documents, graphic designs, confirmations, prescriptions, forms, or other materials provided by the customer are needed to complete a purchase.

The module adds a secure attachment field in checkout and saves the file together with the order. The form can be visible for all orders or only when the cart contains a product marked as requiring an attachment. This means the store does not force uploads where they are not needed, while still allowing precise handling of products that require additional data.

The module’s main advantage is control over the timing and security of file uploads. The attachment is validated on the backend, stored outside the public directory, and made available to administrators only through secured actions in the Magento admin panel. This reduces the risk of accidental exposure of customer files and eliminates the problem of public links to private documents.

After the order is placed, the administrator can see the attachment directly in the order view. They can download the file or open its preview if the format is supported. Popular image formats and PDF are supported, and the allowed extensions and maximum file size can be configured in the admin panel.

Key features

Global enable or disable of the module in Magento configuration.
Conditional display of the upload field in checkout.
Support for per-product configuration through a product attribute.
Option to require an attachment only for selected SKUs.
Upload of images and PDF files.
Backend validation of extension, MIME type, and file size.
Secure file storage outside the public directory.
Attachment linked to a specific order.
File download link in the admin panel.
Preview of supported files in the order view.
Automatic cleanup of old temporary files.

Who this module is for

The module is intended for Magento 2 stores that sell products or services requiring an additional file from the customer, for example:

personalized products,
printing and graphic arts,
graphic services,
medical or optical products requiring documents,
orders requiring a reference photo,
B2B products requiring confirmations or forms.

Business benefits

Less manual email communication after an order is placed.
Lower risk of losing a file, because the attachment goes directly to the order.
Better handling process for products that require additional data.
Greater control over the security of customer files.
Simpler work for the administrative team in the Magento admin panel.

Configuration

The administrator can set in the panel:

whether the module is active,
when the attachment field should be visible,
whether the attachment is required,
which file extensions are allowed,
the maximum file size,
whether the attachment should be visible in the order view,
whether file preview is available.

Security

The module was designed with the assumption that every uploaded file is untrusted. Therefore, files are validated on the server side, given secure technical names, and are not published as direct URLs in pub/media. Downloading and preview are handled through administrative controllers protected by Magento permissions.