外掛說明
BlogWired Gateway connects your WordPress site to the BlogWired content management platform, allowing you to create and manage blog posts remotely through a secure REST API.
Features:
- Secure API key authentication via custom HTTP header
- Create, update, and retrieve posts remotely
- Set post title, content, status, date, author, categories, tags, and post format
- Upload featured images
- Create new categories and tags on the fly
- Rate limiting to protect against brute-force attacks
How it works:
- Install and activate the plugin on your WordPress site.
- Enter the API key from your BlogWired dashboard into the plugin settings.
- BlogWired connects to your site securely via the REST API to publish content.
All communication between BlogWired and your WordPress site is authenticated using a unique API key transmitted via a custom HTTP header.
螢幕擷圖
安裝方式
- Upload the
blogwired-gatewayfolder to the/wp-content/plugins/directory, or install the plugin through the WordPress plugins screen. - Activate the plugin through the ‘Plugins’ screen in WordPress.
- Go to Settings > BlogWired Gateway and enter the API key from your BlogWired dashboard.
常見問題集
-
Where do I get my API key?
-
Log in to your account at blogwired.app and navigate to your site settings. A unique API key for each connected site can be generated there.
-
Is the connection secure?
-
Yes. The API key is transmitted via a custom HTTP header (
X-BlogWired-API-Key) and is never exposed in URLs or query parameters. The plugin also includes rate limiting to protect against brute-force authentication attempts. -
What permissions does the plugin need?
-
The plugin requires no special permissions beyond what WordPress provides. It uses the WordPress REST API and standard post creation functions.
-
Can I use this plugin without a BlogWired account?
-
No. This plugin acts as a gateway and requires an active BlogWired account to function.
使用者評論
這個外掛目前沒有任何使用者評論。
參與者及開發者
變更記錄
1.5.2
- Further improved calling of core files, so they are only called in the correct function instead of as a block
1.5.1
- Improved calling of core files, so they are only called in the correct function instead of as a block
1.5.0
- Improved security: image upload validation with MIME type verification, file size limits, and filename sanitization.
- Added rate limiting on API authentication to prevent brute-force attacks.
- Replaced direct file writing with WP_Filesystem API.
- Replaced direct database query with WordPress get_users() function.
- Added sanitization to post password, post format, new category, and new tag fields.
- Removed API key query parameter fallback (header-only authentication).
- Full internationalisation support with text domain.
- Added phpDoc comments throughout.
- Updated to comply with WordPress.org plugin repository coding standards.
1.4.0
- Initial public testing release.
- REST API endpoints for creating, updating, and retrieving posts.
- Featured image upload via base64.
- API key authentication.
- Admin settings page.