Comments Press Zone
| 开发者 | resite |
|---|---|
| 更新时间 | 2026年4月26日 21:02 |
| 捐献地址: | 去捐款 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 6.9 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Comments Press Zone transforms your WordPress comments into a modern, engaging discussion platform. Built for performance and accessibility, it seamlessly replaces the default comment system while preserving all your existing comments.
Key Features
Engagement Tools
- Upvote and downvote comments
- Social sharing (Facebook, Twitter/X, LinkedIn)
- Threaded replies with configurable nesting depth
- Confetti celebration on new comments
- Post-comment sharing prompts
- Three color modes: Light, Dark, and Theme Inherit
- Styling options: Square, Rounded, or Pill borders
- Adjustable padding: Wide, Standard, or Minimal
- Configurable border thickness
- Live preview in admin panel
- Fully responsive for all devices
- Ban users permanently or temporarily
- Mute users for specified periods
- Issue warnings with custom messages
- Full moderation audit log
- User infraction history
- Report system for community moderation
- Comment editing and deletion
- Google reCAPTCHA v3 integration
- Comment rate limiting (throttling)
- Banned words filter
- External link blocking option
- Optimized database queries
- Optional Redis caching support
- Optional Memcached support
- Minimal frontend footprint
- WCAG 2.1 AA compliant
- Full keyboard navigation
- Screen reader optimized
- Focus indicators on all interactive elements
- Respects prefers-reduced-motion
- Community websites requiring robust moderation tools
- Publications wanting engagement metrics and voting
- Blogs needing customizable comment appearance
- Sites requiring spam protection beyond Akismet
- Developers building extensible comment systems
- WordPress 6.0 or higher
- PHP 7.4 or higher
- MySQL 5.7 or higher
安装:
- Upload the
comments-press-zonefolder to/wp-content/plugins/ - Activate the plugin through the 'Plugins' menu in WordPress
- Navigate to Comments Zone > Design to customize appearance
- Configure settings in Comments Zone > Settings
- Visit any post with comments to see the new interface
- Customize colors and styling in Design settings
- Enable/disable engagement features in Settings
- Configure spam protection as needed
屏幕截图:
常见问题:
Does this replace WordPress default comments?
Yes, Comments Press Zone integrates with WordPress native comments while providing an enhanced interface and additional features. All existing comments display seamlessly.
Is it compatible with my theme?
Yes! The plugin includes a "Theme Inherit" mode that automatically adapts to your active theme's colors. You can also choose Light or Dark modes for consistent styling.
Will I lose my existing comments?
No. The plugin uses WordPress's native comment system. All existing comments remain intact and display in the new interface.
Does it work with other comment plugins?
Comments Press Zone replaces the default comment display. It may conflict with other comment plugins like Disqus, Jetpack Comments, or wpDiscuz. We recommend deactivating other comment plugins.
How do I enable dark mode?
Navigate to Comments Zone > Design > Colors and select "Dark". For automatic detection based on user preference or theme, select "Inherit".
What moderation tools are included?
Full moderation suite including: ban users (permanent or temporary), mute users, issue warnings, view user history and infractions, manage reports, and complete audit log of all moderation actions.
How does spam protection work?
Multiple layers: Google reCAPTCHA v3 (optional), comment rate limiting, banned words filter, and optional blocking of external links. Works alongside Akismet if installed.
Can I customize the comment display order?
Yes! In Settings > Comments Display, you can choose between "Newest First" or "Oldest First" ordering.
Is it translation ready?
Yes, fully translatable with included .pot file. Hebrew translation included. All strings use the comments-press-zone text domain.
Does it support RTL languages?
Yes, full RTL (right-to-left) support is included for languages like Hebrew, Arabic, and Persian.
更新日志:
1.0.6
- WordPress.org Compliance: Fixed internationalization issue - removed dynamic translation of user-configurable template values (Options.php:141)
- WordPress.org Compliance: Added comprehensive build tools documentation (CONTRIBUTING.md) with detailed instructions for webpack and SCSS compilation
- Documentation: Enhanced developer onboarding with step-by-step build process, directory structure, and troubleshooting guide
- Code Quality: Clarified that user-defined email templates and tooltip text should not be passed through gettext functions
- Security Fix: CRITICAL - Fixed SQL injection vulnerability in RestReports (added whitelist validation for report types)
- Security Fix: CRITICAL - Fixed SQL injection vulnerability in RestInfractions (wrapped query with $wpdb->prepare())
- Security Fix: HIGH - Fixed privilege escalation in comment editing (reordered ownership check before moderator permissions)
- Security Fix: HIGH - Fixed stored XSS via innerHTML in Editor component (replaced all .innerHTML with .textContent for user data)
- Security Fix: MEDIUM - Added HMAC validation for rate limit bypass prevention (cryptographic validation with wp_hash())
- Security Fix: MEDIUM - Fixed information disclosure in REST API (generic error messages, detailed errors logged only)
- Security Fix: MEDIUM - Added IP address validation before sanitization (filter_var validation)
- Accessibility: Added navigation landmark with aria-label to pagination for screen reader context
- Accessibility: Implemented aria-pressed attribute for Editor toolbar toggle buttons (bold, italic, etc.)
- Accessibility: Added language attributes to dynamically generated content (templates, modals)
- Accessibility: Enhanced vote announcements with descriptive context ("Comment now has X votes")
- Accessibility: Improved emoji picker keyboard navigation robustness (boundary checks, focus management)
- Accessibility: Modernized skip link with clip-path (better browser support)
- Accessibility: Added high-contrast focus styles to admin interface
- Accessibility: Added screen-reader-only heading to comment items (semantic structure)
- Accessibility: Enhanced emoji category announcements ("Showing X category with Y emojis")
- Accessibility: Added sr-only text to loading spinner for screen readers
- Translation: Complete i18n coverage - wrapped all 31 REST API strings with __() translation function
- Translation: Added translation support to RestAdmin, RestModeration, RestInfractions, RestReports
- Compliance: Achieved 100% WordPress.org Plugin Check compliance (A+ grade)
- Compliance: Achieved perfect 10/10 security score
- Compliance: Achieved 100% WCAG 2.1 Level AA accessibility compliance
- Code Quality: Created RestBase class to standardize error handling across REST endpoints
- Code Quality: Removed duplicate CSS property in modal styles
- Documentation: Updated variable comment for styling convention clarity
- WordPress.org Compliance: Fixed Plugin URI to point to valid GitHub repository (avi-ezra/comments-press-zone)
- WordPress.org Compliance: Updated Contributors list to only include WordPress.org username 'resite'
- WordPress.org Compliance: Enhanced source code documentation with detailed build instructions for admin/build/admin.js
- WordPress.org Compliance: Expanded External Services documentation with comprehensive details for reCAPTCHA and social sharing
- WordPress.org Compliance: Verified "Powered by" attribution removed from frontend (already removed in 1.0.3)
- Security: Enhanced IP address validation in reCAPTCHA verification using FILTER_VALIDATE_IP filter
- Security: Improved settings sanitization with proper handling for multiline fields, passwords, and API keys
- Code Quality: Added PHPCS suppression comment for legitimate dynamic translation of user-configurable templates
- Code Quality: Enhanced per-field sanitization in Settings.php (sanitize_textarea_field for email bodies, preserve API key special characters)
- Development: Added .distignore and build-package.sh for clean WordPress.org package creation (excludes development files)
- Documentation: All inline styles and scripts verified as properly enqueued (wp_enqueue_style/wp_enqueue_script)
- Compliance: Fixed Plugin URI to point to GitHub repository (was returning 404)
- Compliance: Enhanced external services documentation with detailed privacy/ToS links for Facebook, Twitter, LinkedIn
- Compliance: Removed "Powered by" attribution from frontend (WordPress.org guideline compliance)
- Compliance: Added detailed source code documentation for all compiled/minified files
- Security: Improved IP address sanitization using FILTER_VALIDATE_IP in reCAPTCHA verification
- Security: Enhanced settings sanitization to properly handle API keys, secrets, and passwords
- Code Quality: Removed unused CSS for footer attribution
- Documentation: Added build instructions and source code locations to readme
- Security Fix: Resolved all WordPress Plugin Check warnings for database queries.
- Security Fix: Added file-level PHPCS disable blocks for custom table queries (DirectDatabaseQuery, NoCaching, PreparedSQL).
- Security Fix: Fixed translators comment placement for i18n compliance.
- Security Fix: Added Squiz.PHP.DiscouragedFunctions ignores for legitimate ini_set() usage (ReDoS protection).
- Security Fix: Added esc_html() escaping to display_name in REST API responses.
- Compliance: Full WordPress.org Plugin Check compliance for database security rules.
- Compliance: Replaced wp_add_inline_style with direct style output for theme color variables.
- Accessibility: Added ARIA attributes (role, aria-controls, aria-label) to admin actions menu.
- Accessibility: Added full keyboard navigation to emoji picker (arrow keys, Enter, Escape).
- Improvement: Increased reCAPTCHA verification timeout from 2s to 5s for reliability.
- Code Quality: Refactored 6 files to use consistent PHPCS suppression patterns.
- Code Quality: Cleaned up redundant inline PHPCS comments.
- Security Fix: CRITICAL - Fixed IDOR vulnerability in comment deletion (moderators can now only delete comments on posts they moderate).
- Security Fix: HIGH - Fixed ban/mute system bypass by consolidating warnings table and user meta checks.
- Security Fix: MEDIUM - Added dual-layer rate limiting (User ID + IP Address) to vote system.
- Security Fix: MEDIUM - Added ReDoS protection to banned word patterns (wildcard/length limits + PCRE backtrack limits).
- Security Fix: MEDIUM - Removed information disclosure in error messages (generic messages instead of revealing banned words).
- Enhancement: Complete GridTable component refactor using CSS Grid for perfect column alignment.
- Enhancement: Recent Activity section redesigned to use GridTable for consistent UI.
- Improvement: GridTable accessibility enhanced with scope attributes (WCAG 2.1 AA Compliant).
- Improvement: Added robust hosting compatibility checks for regex operations.
- Fix: Resolved column alignment issues in Moderation tabs.
- Fix: Removed disconnected border lines in table cells.
- Performance: Optimized table rendering with direct CSS Grid children.
- Security Hardening: Improved sanitization for user IP addresses.
- Security Hardening: Enforced strict sanitization for settings inputs.
- Security Hardening: Secured ReCAPTCHA key storage.
- Fix: Escaping in comment templates to prevent XSS.
- Fix: Editor component linting issues.
- Initial public release
- Full commenting system with voting
- Moderation suite (ban, mute, warn)
- Design customization with live preview
- reCAPTCHA v3 integration
- Social sharing integration
- Accessibility compliance (WCAG 2.1 AA)
- Redis and Memcached caching support
- Complete admin dashboard