BaseWeb AI Chat & Forms to MAX
| 开发者 | olegroslyakov |
|---|---|
| 更新时间 | 2026年8月11日 20:36 |
| 捐献地址: | 去捐款 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
BaseWeb AI Chat & Forms to MAX is a powerful, all-in-one WordPress plugin that combines an intelligent AI consultant with seamless lead generation. It bridges the gap between your website visitors and your MAX messenger, ensuring you never miss a potential client.
This plugin acts as a "combo" solution:
- AI Chat Consultant: A smart, context-aware chat widget powered by Yandex AI Studio (YandexGPT).
- Fluent Forms Integration: Automatically intercepts form submissions and forwards them to MAX.
- Built-in Lead Capture: An intelligent in-chat form that appears when a user is ready to leave their contact details.
- Yandex AI Studio Integration: Uses the modern Responses API with
store=trueandprevious_response_idfor seamless, context-aware conversations. - Fluent Forms Webhook: Native hook (
fluentform/submission_inserted) to instantly forward any form submission to your MAX bot. - Smart Lead Generation: The AI can dynamically trigger a built-in contact form directly within the chat interface.
- 152-FZ / GDPR Compliant: Includes a mandatory consent checkbox for personal data processing, automatic PII masking (email, phone, IP) in logs, and automated log cleanup after 30 days.
- Enterprise-Grade Security:
- Protocol-Lock: API keys are stored securely in
wp_options, never hardcoded. sslverify => trueenforced for all external API requests.- Strict input sanitization (
sanitize_text_field,esc_url_raw) and nonce verification. - Rate limiting (20 chat requests / 5 lead submissions per 5 minutes per IP).
- Comprehensive Dashboard: A 4-tab admin interface for Yandex settings, MAX configuration, real-time analytics (categories, intents), and CSV/JSON log exports.
- Universal & Customizable: Dynamic placeholders (
{{company_name}},{{manager_name}}) allow you to adapt the AI's persona to any brand without touching the code. - Performance Optimized: Asynchronous logging, transient caching for prompts (1 hour), and strict
max_output_tokenslimits to control API costs.
[bacfm_ai_chat]– Embeds the chat widget directly into the page content.[bacfm_ai_button text="Ask AI Assistant"]– Displays a stylish button that opens the chat widget on click.
安装:
- Upload the
baseweb-ai-chat-forms-to-maxfolder to the/wp-content/plugins/directory. - Activate the plugin through the 'Plugins' menu in WordPress.
- Ensure that the Fluent Forms plugin is installed and activated (required for form interception).
- Navigate to Settings → BaseWeb AI Chat in your WordPress admin dashboard.
- Yandex AI Studio Tab: Enter your API Key (format:
AQVN...) and Folder ID (format:b1g...from the classic Yandex Cloud console). - MAX Bot Tab: Enter your MAX Bot Token and User ID to enable lead forwarding.
- Configure your company name and manager name to personalize the AI's responses.
- Add the shortcode
[bacfm_ai_button]to your desired pages or posts.
屏幕截图:
常见问题:
Where do I get the Yandex AI Studio API Key?
Go to Yandex AI Studio, create a service account with the ai.editor role, and generate an API key in the settings.
Where do I find the Folder ID?
You must use the classic Yandex Cloud console (console.yandex.cloud/folders/). Copy the Folder ID that starts with b1g.... Note: IDs starting with bpf... from the new Yandex Cloud Center are not compatible with the Responses API.
How do I configure the MAX Bot?
- Create or use an existing bot at business.max.ru.
- Copy the bot's authorization token.
- Obtain your User ID (you can use a simple script or check your MAX bot logs).
- Enter both values in the "MAX Bot" tab of the plugin settings.
Is this plugin compliant with GDPR and 152-FZ?
Yes. The plugin includes a mandatory consent checkbox in the lead form, automatically masks Personally Identifiable Information (PII) like emails, phones, and IPs in the logs, and features an automated 30-day log cleanup via WordPress Cron.
Does the plugin work without Fluent Forms?
Yes. The AI chat widget and its built-in lead capture form work perfectly on their own. The Fluent Forms integration is an additional module that activates only if the plugin is present.
How do I control API costs?
The plugin enforces a strict max_output_tokens limit (default 500) and includes rate limiting to prevent spam. We also recommend setting up a monthly budget and alerts in your Yandex Cloud billing dashboard.
更新日志:
3.0.3
- Hotfix: Added prompt cache clearing when logs are cleared.
- Hotfix: Improved [SHOW_LEAD_FORM] marker detection with regex pattern.
- Hotfix: Expanded keyword list for automatic lead form trigger.
- Hotfix: Used %i placeholder in $wpdb->prepare() for secure table name substitution (requires WordPress 6.2+).
- Hotfix: Improved session ID validation to support UUID format with hyphens.
- Hotfix: Added compatibility aliases in API response for frontend JavaScript.
- Hotfix: Updated system prompt with [SHOW_LEAD_FORM] marker instructions for automatic lead form display.
- Hotfix: Added support for Fluent Forms selection in admin settings.
- Requirement: Minimum WordPress version raised to 6.2 for %i placeholder support.
- Release: Public version prepared for WordPress.org repository.
- Architecture: Full migration to strict PHP 8 typing (
declare(strict_types=1)). - Localization: 100% i18n compliance. All UI strings wrapped in
__()with text domainbaseweb-ai-chat-forms-to-max. - Prefix Update: All options, transients, and hooks migrated from
baseweb_uac_tobacfm_to prevent conflicts. - Security: Enhanced nonce verification, strict input sanitization, and enforced
sslverify => trueacross all endpoints. - New Feature: Added
uninstall.phpfor clean database removal upon plugin deletion. - Compatibility: Added explicit
Requires Plugins: fluentformheader.
- Universality: Removed hardcoded brand references. Added dynamic
{{company_name}}and{{manager_name}}placeholders. - Prompt Caching: Added 1-hour transient caching for system prompts to reduce database load.
- Compliance: Added mandatory consent checkbox for lead forms (152-FZ/GDPR) and automated 30-day log cleanup via WP-Cron.
- MAX Integration: Added 60-second transient duplicate locking to prevent double lead submissions.
- UX: Added native WordPress spinner for MAX test button and improved error handling in JS.
- Bugfix: Corrected parameter order in the
fluentform/submission_insertedhook. - Bugfix: Added strict length validation (max 4000 chars) for MAX API payloads.
- Major Architecture Overhaul: Combined AI Chat and Fluent Forms → MAX modules into a single unified plugin.
- New Classes: Introduced
class-max-handler.php(with retry logic),class-logger.php(structured PII-masking logs), andclass-fluent-forms.php. - Dashboard: Upgraded to a 4-tab settings interface (Yandex, MAX, Logs, Export).
- Security: Enforced
sslverify => true, removed all hardcoded tokens, and implemented strict session ID validation.
- Added
session_idvalidation and guest generation. - Enforced
sslverify => trueandmax_tokens => 500for all API calls. - Improved JavaScript error handling and fallback UI messages.
- Initial release of the BaseWeb AI Chat plugin.