salman/igny8
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix plguin

Browse Source
This commit is contained in:
IGNY8 VPS (Salman)
2025-11-21 15:26:44 +00:00
parent c35b3c3641
commit 9ec1aa8948
4 changed files with 54 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

BIN
backend/celerybeat-schedule
View File

Binary file not shown.

73
igny8-wp-integration-plugin/admin/class-admin.php
View File

@@ -161,31 +161,58 @@ class Igny8Admin {
* Render settings page * Render settings page
*/ */
public function render_settings_page() { public function render_settings_page() {
// Handle form submission // Handle form submission (use wp_verify_nonce to avoid wp_die on failure)
if (isset($_POST['igny8_connect']) && check_admin_referer('igny8_settings_nonce')) { if (isset($_POST['igny8_connect'])) {
$this->handle_connection(); if (empty($_POST['_wpnonce']) || !wp_verify_nonce($_POST['_wpnonce'], 'igny8_settings_nonce')) {
add_settings_error(
'igny8_settings',
'igny8_nonce',
__('Security check failed. Please refresh the page and try again.', 'igny8-bridge'),
'error'
);
} else {
$this->handle_connection();
}
} }
// Handle revoke API key // Handle revoke API key (use wp_verify_nonce)
if (isset($_POST['igny8_revoke_api_key']) && check_admin_referer('igny8_revoke_api_key')) { if (isset($_POST['igny8_revoke_api_key'])) {
self::revoke_api_key(); if (empty($_POST['_wpnonce']) || !wp_verify_nonce($_POST['_wpnonce'], 'igny8_revoke_api_key')) {
add_settings_error( add_settings_error(
'igny8_settings', 'igny8_settings',
'igny8_api_key_revoked', 'igny8_nonce_revoke',
__('API key revoked and removed from this site.', 'igny8-bridge'), __('Security check failed. Could not revoke API key.', 'igny8-bridge'),
'updated' 'error'
); );
} else {
self::revoke_api_key();
add_settings_error(
'igny8_settings',
'igny8_api_key_revoked',
__('API key revoked and removed from this site.', 'igny8-bridge'),
'updated'
);
}
} }
// Handle webhook secret regeneration // Handle webhook secret regeneration (use wp_verify_nonce)
if (isset($_POST['igny8_regenerate_secret']) && check_admin_referer('igny8_regenerate_secret')) { if (isset($_POST['igny8_regenerate_secret'])) {
$new_secret = igny8_regenerate_webhook_secret(); if (empty($_POST['_wpnonce']) || !wp_verify_nonce($_POST['_wpnonce'], 'igny8_regenerate_secret')) {
add_settings_error( add_settings_error(
'igny8_settings', 'igny8_settings',
'igny8_secret_regenerated', 'igny8_nonce_regen',
__('Webhook secret regenerated. Update it in your IGNY8 SaaS app settings.', 'igny8-bridge'), __('Security check failed. Could not regenerate secret.', 'igny8-bridge'),
'updated' 'error'
); );
} else {
$new_secret = igny8_regenerate_webhook_secret();
add_settings_error(
'igny8_settings',
'igny8_secret_regenerated',
__('Webhook secret regenerated. Update it in your IGNY8 SaaS app settings.', 'igny8-bridge'),
'updated'
);
}
} }
// Include settings template // Include settings template

2
igny8-wp-integration-plugin/docs/WORDPRESS-PLUGIN-INTEGRATION.md
View File

@@ -79,6 +79,8 @@ function igny8_get_headers() {
} }
``` ```
Note (required): The bridge now requires all three credentials to be provided in Settings → IGNY8 API: **Email**, **Password**, and **API Key**. These map to WordPress options `igny8_email`, `igny8_access_token`/`igny8_refresh_token`, and `igny8_api_key`. The API key will be stored with `igny8_store_secure_option()` when available; if any required credential is missing the plugin will not establish the connection.
--- ---
## API Client Class ## API Client Class

2
master-docs/WORDPRESS-PLUGIN-INTEGRATION.md
View File

@@ -59,6 +59,8 @@ function igny8_get_headers() {
} }
``` ```
Note (required): To establish a bridge connection the plugin now requires three credentials to be provided and saved in the WordPress settings: **Email**, **Password**, and **API Key**. All three are stored as options (`igny8_email`, `igny8_access_token`/`igny8_refresh_token`, `igny8_api_key`) — the API key is stored using secure storage helpers when available. The bridge will refuse connection if any of these are missing.
--- ---
## API Client Class ## API Client Class