D11 Random Quote Loader
| 开发者 | briz_dad |
|---|---|
| 更新时间 | 2026年10月14日 06:56 |
| 捐献地址: | 去捐款 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
D11 Random Quote Loader adds a classic WordPress widget that pulls a random quote from a custom database table each time a page loads.
Quotes are managed entirely from within your WordPress dashboard, and the plugin ships with three sample quotes so it works immediately after activation.
Features:
- Displays a random quote on every page load using an efficient COUNT + OFFSET strategy (not ORDER BY RAND())
- Full admin panel — add, edit, and delete quotes without touching code
- CSV Export — download all your quotes as a spreadsheet-compatible .csv file
- CSV Import — bulk-upload quotes with automatic encoding detection (UTF-8 and Windows-1252 / Excel), BOM stripping, per-row validation, and a 5,000-row safety limit
- Clean, semantic HTML output using blockquote, p, and cite elements — easy to style with your theme's CSS
- Fully internationalised — every string is ready for translation via the d11-random-quote-loader text domain
- Safe uninstall — drops the custom table only when the plugin's own signature column is detected
- Security hardened — nonces on every form, current_user_can() capability checks, full output escaping, and wp_rand() throughout
- [d11rql_random_quote] shortcode — insert a random quote into any post, page, or text widget
- Quote categories — tag quotes and display different sets on different pages or sidebars
安装:
- Upload the d11-random-quote-loader folder to /wp-content/plugins/, or install directly through the WordPress plugin screen.
- Activate the plugin through the Plugins screen in WordPress.
- Go to Appearance > Widgets and drag the D11 Random Quote Loader into your desired sidebar.
- Optionally set a widget title and click Save.
- Visit Quotes in your admin menu to add, edit, or delete quotes, or to import/export via CSV.
屏幕截图:
常见问题:
How do I add quotes?
Navigate to Quotes in your WordPress admin sidebar. Use the form at the top of the page to add a new quote and an optional author name.
Can I import quotes in bulk?
Yes. Prepare a .csv file with two column headers: quote and author. Use the Import CSV section at the bottom of the Quotes admin page. By default, imported quotes are appended to your existing library and duplicates (the same quote and author, ignoring letter case) are skipped; you can optionally choose Replace to delete existing quotes first. Replace is all-or-nothing: if any row is invalid (for example, an empty quote or an author longer than 255 characters), nothing is changed and the invalid rows are listed by spreadsheet row number, counting the header as row 1. Replace needs the quotes table to use the InnoDB storage engine (the WordPress default) so that a failed import can be undone; on other storage engines Replace is refused and nothing is changed, so use Append instead. In the default Append mode, valid rows are imported and invalid ones are skipped and reported. Import supports up to 5,000 rows. Files saved from Excel (Windows-1252 encoding) are converted automatically.
How do I export my quotes?
Click Export to CSV on the Quotes admin page. The file downloads immediately. To protect against spreadsheet formula injection, any cell that begins with =, +, -, @, a tab, or a carriage return is exported with a leading apostrophe (for example, '=1+1), so Excel and other spreadsheet apps treat it as plain text. Exports also include an empty d11rql_formula_protection column. Leave that column in place: when it is present, re-importing removes the added apostrophes and restores your original text exactly. Files without it, such as exports from version 2.3.2 or earlier and spreadsheets you create yourself, are imported exactly as written, so apostrophes in them are always kept.
Can I style the widget output?
The widget currently outputs the quote and author as plain, unstyled paragraph elements with no CSS classes attached, so there's nothing to target directly — style it via your theme's general paragraph rules, or wrap the widget area in a custom container. The shortcode (below) uses semantic markup with CSS classes and is the better option if you want more granular styling control.
Will my quotes be deleted if I deactivate the plugin?
No. Deactivating the plugin leaves the database table intact. Quotes are only deleted when you choose Delete on the Plugins screen, which triggers the uninstall routine.
Is the plugin translation-ready?
Yes. All user-facing strings use the d11-random-quote-loader text domain and are ready for translation via .po/.mo files in the /languages/ folder, or via translate.wordpress.org.
What PHP version is required?
PHP 7.4 or higher. PHP 8.0+ is fully supported and recommended.
How do I use the shortcode?
Place [d11rql_random_quote] anywhere in a post or page. Available parameters: [d11rql_random_quote] [d11rql_random_quote title="Daily Quote"] [d11rql_random_quote category="inspiration"] [d11rql_random_quote title="Food for Thought" category="philosophy"] The shortcode outputs a div.rqw-shortcode wrapper containing a blockquote.rqw-shortcode-quote element, and an h3.rqw-shortcode-title when a title is provided.
How do categories work?
Assign a category name to any quote when adding or editing it in the Quotes admin page. Then use [d11rql_random_quote category="your-category"] in a shortcode, or set a category in the widget settings. Quotes with no category assigned are treated as uncategorized and will appear in all category queries as a fallback.
Does the plugin support WordPress multisite?
The plugin supports individual site activation on WordPress multisite installations using per-site table prefixes. Network-wide activation is not currently supported. Please activate the plugin on each site individually.
更新日志:
2.3.4
- Feature: a dedicated Edit Quote screen replaces the inline edit row. Save Changes and Cancel return you to the same page, category filter, and per-page setting; old edit links keep working; any quote can be edited, not only those on the current list page; and if a save is rejected (for example, an author over 255 characters), the values you entered are kept so you can correct them.
- Security: Edit and Delete now use a separate nonce for each quote, so a request for one quote can never act on another.
- Fix: CSV import no longer re-adds the three sample quotes when your quote table is empty. Sample quotes are now added only when the plugin is activated with an empty table.
- Fix: CSV Replace is now refused, with nothing changed, if the quotes table doesn't use the InnoDB storage engine, because a failed import could not be undone there. A failed Append on such a table no longer claims your original quotes were restored.
- Fix: the edit form and CSV export now show plain text (<, &, and quotes) instead of HTML entities such as < and &. Stored quotes are not changed, and an exported file re-imports as duplicates of the existing quotes.
- Compatibility: CSV import no longer requires PHP's mbstring extension, including the automatic conversion of Excel (Windows-1252) files.
- Compatibility: resolved all Plugin Check warnings (Plugin Check 2.1.0, static and runtime checks).
- Docs: corrected FAQs (formula-escaping characters, Replace on non-InnoDB tables, duplicate matching ignores letter case, multisite FAQ placement) and the import help text.
- No database schema changes. Existing quotes, categories, shortcodes, and widgets are unaffected.
- Security: CSV export now protects against spreadsheet formula injection. Cells beginning with =, +, -, @, tab, or carriage return are prefixed with an apostrophe, and exports gain an empty d11rql_formula_protection marker column. The scheme is exactly reversible: re-importing a marked file restores the original text. Files without the marker (exports from 2.3.2 and earlier, hand-made spreadsheets) are imported literally, so legitimate leading apostrophes are always preserved.
- Fix: adding or editing a quote now reports accurately. Previously, an author over 255 characters or a category over 100 characters was silently rejected by the database while "Quote added!" was still shown. Over-long values are now rejected with a clear message; nothing is ever truncated.
- Fix: empty and whitespace-only quotes can no longer be saved through Add or Edit.
- Fix: CSV Replace import is now all-or-nothing. Every row is validated before any existing quote is touched; if any row is invalid, or the file exceeds 5,000 rows, nothing is changed and the invalid rows are listed with the reason. Previously an over-long field could abort the whole import with a generic database error.
- Fix: CSV Append import still imports valid rows, and now reports rows skipped for an empty quote or an over-long field, including their spreadsheet row numbers.
- Fix: Delete and Edit report a clear error when the quote no longer exists.
- Fix: CSV import now runs before page output and redirects afterwards (Post/Redirect/Get), so refreshing the page can no longer resubmit an import.
- Fix: the Edit link now works on every page of the quote list, not just page 1, and returns you to the same page after saving.
- Fix: corrected invalid HTML in the quote edit row (a form nested inside a table row).
- Compatibility: the CSV import MIME check no longer fails on hosts without the PHP fileinfo extension, and avoids the finfo_close() deprecation in PHP 8.5.
- Compatibility: the import's temporary file path is no longer unslashed, which could break imports on Windows servers.
- Compatibility: database queries use the %i identifier placeholder, and request values are sanitized, resolving Plugin Check warnings. Generated SQL is unchanged.
- Compatibility: the widget_title filter now receives the widget instance and ID base, matching WordPress core widgets.
- No database schema changes. Existing quotes, categories, shortcodes, and widgets are unaffected.
- Compatibility: confirmed compatibility with WordPress 7.1 and updated "Tested up to" accordingly. No functional changes.
- Compatibility: added explicit escape parameter (empty string) to all fgetcsv() and fputcsv() calls, resolving PHP 8.4 deprecation notices that could corrupt exported CSV files.
- Security: CSV import now validates the PHP upload error code (UPLOAD_ERR_OK), enforces a 10 MB file size limit, and verifies the upload via is_uploaded_file() before processing.
- Fix: corrected the third argument of shortcode_atts() from 'random_quote' to 'd11rql_random_quote', preventing potential filter conflicts with other plugins.
- Reliability: database version is now saved only after confirming the table exists, ensuring a failed installation retries correctly on the next page load.
- Reliability: CSV import in replace mode now rolls back and preserves existing quotes when zero valid records are found in the uploaded file.
- Fix: removed wp_unslash() from values returned by fgetcsv() — backslashes in imported quotes and author names are now preserved correctly.
- Fix: added $wpdb->esc_like() to all SHOW TABLES LIKE queries, preventing false matches on table names containing SQL wildcard characters.
- Feature: CSV import now offers two modes — Append (default, adds imported quotes alongside existing ones, skipping exact duplicates) and Replace (deletes all existing quotes before importing).
- Security: renamed database table from {prefix}quotes to {prefix}d11rql_quotes, eliminating collision risk with other plugins. Existing installs are migrated automatically.
- Security: replaced TRUNCATE TABLE with DELETE FROM inside the CSV import transaction. TRUNCATE causes an implicit commit in MySQL, meaning a failed import could not be rolled back. DELETE FROM is fully transactional.
- Security: replaced explode()/str_getcsv() CSV parser with a php://memory stream + fgetcsv(). The previous approach broke on quoted multi-line fields. The memory stream approach has no filesystem writes and correctly handles all RFC 4180 CSV edge cases.
- Synced D11RQL_MIN_WP_VERSION constant and plugin header to 6.9 to match readme.txt.
- Renamed all internal function, constant, option, and transient prefixes from rqw_ (3 chars, too short) to d11rql_ to comply with WordPress.org prefix length requirements (minimum 4 characters).
- Updated plugin_signature value in database from rqw_v1 to d11rql_v1.
- No database schema changes — existing installs upgrade cleanly on next page load.
- Changed shortcode tag from [random_quote] to [d11rql_random_quote] to comply with WordPress.org prefix requirements.
- Rewrote CSV import to use in-memory str_getcsv() parsing — no temporary filesystem writes.
- Removed load_plugin_textdomain() call, which is no longer needed for WordPress.org hosted plugins since WordPress 4.6.
- Fixed Contributors field in readme.txt to use correct WordPress.org username (briz_dad).
- Compatibility: updated "Tested up to" to WordPress 7.0.
- Updated "Requires at least" to WordPress 6.9.
- No code or database changes.
- Admin: added pagination to the Manage Quotes page. Defaults to 10 quotes per page with numbered page links and Previous/Next controls.
- Admin: added a per-page dropdown (10, 25, 50, 75, 100) that persists across page navigation and category filtering.
- Admin: quote count display shows current range and total (e.g. "Showing 1–10 of 74 quotes").
- Admin: category filter links now reset to page 1 and preserve the current per-page setting.
- Admin: export description clarified to confirm all quotes are exported regardless of current page or filter.
- Database: added an index on the category column for faster category-filtered queries on larger quote libraries. Applied automatically via dbDelta on next page load — no manual steps required.
- Fix: Added DONOTCACHEPAGE constant to both the shortcode and widget output functions. This tells WP Super Cache, W3 Total Cache, WP Rocket, and other major caching plugins not to serve a static cached copy of pages containing a random quote — ensuring the quote is genuinely random on every page load for logged-out visitors.
- Data: encoding fix for smart quotes, em dashes, and emoji in imported CSV data (Mojibake caused by Windows-1252 bytes being mis-interpreted as UTF-8 during export).
- Database: replaced all SELECT * queries with explicit column lists (id, quote, author, category) across all files.
- Database: CSV import now runs inside a MySQL transaction — if any insert fails mid-import, a ROLLBACK fully restores the original quotes rather than leaving a partial data set.
- Database: admin quote listing queries now use explicit column selection.
- No database schema changes — safe drop-in replacement for 2.0.1.
- Security: capability check in admin form handler now fires before any superglobal access, closing a trivial bypass via spoofed $_GET['page'].
- Security: admin success notices (added/updated/deleted) now use per-user transients instead of URL parameters, preventing anyone from flashing misleading notices via crafted URLs.
- Security: uninstall.php now verifies the table exists before running SHOW COLUMNS, preventing a DB error on edge-case removal.
- Reliability: rqw_maybe_upgrade_db() now uses a static guard to prevent repeated dbDelta calls if update_option() fails transiently.
- Reliability: rqw_get_random_quote() now handles the COUNT/OFFSET race condition — if a quote is deleted between the two queries, it falls back to the first available quote instead of silently returning nothing.
- Version bump to 2.0.1 (no database changes).
- Added quote categories — assign a category to each quote and filter by category in the widget, shortcode, and admin page.
- Shortcode now accepts a category parameter: [d11rql_random_quote category="inspiration"].
- Widget settings now include an optional Category field.
- Admin page: Category column added to the quotes table, category field in Add/Edit forms, filter bar to view quotes by category, category autocomplete using HTML datalist.
- CSV export now includes the category column. CSV import supports an optional category column (backwards compatible with old files).
- Database: added category column (varchar 100) via dbDelta — safe, non-destructive upgrade for existing installations.
- Uncategorized quotes (empty category) appear in all category-filtered queries as a fallback.
- Added [d11rql_random_quote] shortcode for displaying a random quote in any post or page.
- Shortcode supports an optional title parameter: [d11rql_random_quote title="Daily Quote"].
- Shortcode output uses semantic blockquote/cite markup with CSS class hooks (rqw-shortcode, rqw-shortcode-quote, rqw-shortcode-title).
- WordPress.org submission release.
- Added Requires PHP: 7.4 header and runtime PHP/WP version checks on activation.
- Added RQW_VERSION constant.
- Full WordPress Coding Standards pass: tabs for indentation, absint() replacing intval(), wp_rand() replacing rand(), gmdate() replacing date().
- All user-facing strings now use the d11-random-quote-loader text domain (previously some used the bare text_domain placeholder).
- Widget output updated to use semantic blockquote/cite markup with CSS class hooks.
- Widget now renders before_title/after_title when a title is set.
- Admin page function renamed to rqw_render_admin_page for consistent rqw_ namespacing.
- All $wpdb insert/update/delete calls now pass explicit format arrays.
- Added GPL-2.0-or-later SPDX licence identifier and @package docblock to every file.
- CSV import: added per-row UTF-8 validation with skip-and-report for unreadable characters.
- CSV import: 5,000-row limit with count of skipped rows reported to the user.
- CSV import: added BOM stripping and Windows-1252 to UTF-8 encoding conversion.
- CSV import: server-side MIME type and file-extension validation.
- CSV export moved to admin-post.php for a proper browser file-download response.
- Added CSV import and export functionality.
- Added inline edit functionality for existing quotes.
- Security pass: nonces added to all forms, current_user_can() checks on all admin actions.
- Replaced ORDER BY RAND() with COUNT + OFFSET strategy for better database performance.
- Initial release.