D11 Random Quote Loader
| 开发者 | briz_dad |
|---|---|
| 更新时间 | 2026年5月29日 14:05 |
| 捐献地址: | 去捐款 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
D11 Random Quote Loader adds a classic WordPress widget that pulls a random quote from a custom database table each time a page loads.
Quotes are managed entirely from within your WordPress dashboard, and the plugin ships with three sample quotes so it works immediately after activation.
Features:
- Displays a random quote on every page load using an efficient COUNT + OFFSET strategy (not ORDER BY RAND())
- Full admin panel — add, edit, and delete quotes without touching code
- CSV Export — download all your quotes as a spreadsheet-compatible .csv file
- CSV Import — bulk-upload quotes with automatic encoding detection (UTF-8 and Windows-1252 / Excel), BOM stripping, per-row validation, and a 5,000-row safety limit
- Clean, semantic HTML output using blockquote, p, and cite elements — easy to style with your theme's CSS
- Fully internationalised — every string is ready for translation via the d11-random-quote-loader text domain
- Safe uninstall — drops the custom table only when the plugin's own signature column is detected
- Security hardened — nonces on every form, current_user_can() capability checks, full output escaping, and wp_rand() throughout
- [d11rql_random_quote] shortcode — insert a random quote into any post, page, or text widget
- Quote categories — tag quotes and display different sets on different pages or sidebars
安装:
- Upload the d11-random-quote-loader folder to /wp-content/plugins/, or install directly through the WordPress plugin screen.
- Activate the plugin through the Plugins screen in WordPress.
- Go to Appearance > Widgets and drag the D11 Random Quote Loader into your desired sidebar.
- Optionally set a widget title and click Save.
- Visit Quotes in your admin menu to add, edit, or delete quotes, or to import/export via CSV.
屏幕截图:
常见问题:
How do I add quotes?
Navigate to Quotes in your WordPress admin sidebar. Use the form at the top of the page to add a new quote and an optional author name.
Can I import quotes in bulk?
Yes. Prepare a .csv file with two column headers: quote and author. Use the Import CSV section at the bottom of the Quotes admin page. The import replaces all existing quotes and supports up to 5,000 rows. Files saved from Excel (Windows-1252 encoding) are converted automatically.
How do I export my quotes?
Click Export to CSV on the Quotes admin page. The file downloads immediately.
Can I style the widget output?
Yes. The widget outputs a blockquote.rqw-quote element containing a p.rqw-quote-text and, when an author is present, a cite.rqw-quote-author. Target these CSS classes in your theme's stylesheet.
Will my quotes be deleted if I deactivate the plugin?
No. Deactivating the plugin leaves the database table intact. Quotes are only deleted when you choose Delete on the Plugins screen, which triggers the uninstall routine.
Is the plugin translation-ready?
Yes. All user-facing strings use the d11-random-quote-loader text domain and are ready for translation via .po/.mo files in the /languages/ folder, or via translate.wordpress.org.
What PHP version is required?
PHP 7.4 or higher. PHP 8.0+ is fully supported and recommended.
How do I use the shortcode?
Place [d11rql_random_quote] anywhere in a post or page. Available parameters: [d11rql_random_quote] [d11rql_random_quote title="Daily Quote"] [d11rql_random_quote category="inspiration"] [d11rql_random_quote title="Food for Thought" category="philosophy"] The shortcode outputs a div.rqw-shortcode wrapper containing a blockquote.rqw-shortcode-quote element, and an h3.rqw-shortcode-title when a title is provided.
How do categories work?
Assign a category name to any quote when adding or editing it in the Quotes admin page. Then use [d11rql_random_quote category="your-category"] in a shortcode, or set a category in the widget settings. Quotes with no category assigned are treated as uncategorized and will appear in all category queries as a fallback.
更新日志:
2.3
- Security: renamed database table from {prefix}quotes to {prefix}d11rql_quotes, eliminating collision risk with other plugins. Existing installs are migrated automatically.
- Security: replaced TRUNCATE TABLE with DELETE FROM inside the CSV import transaction. TRUNCATE causes an implicit commit in MySQL, meaning a failed import could not be rolled back. DELETE FROM is fully transactional.
- Security: replaced explode()/str_getcsv() CSV parser with a php://memory stream + fgetcsv(). The previous approach broke on quoted multi-line fields. The memory stream approach has no filesystem writes and correctly handles all RFC 4180 CSV edge cases.
- Synced D11RQL_MIN_WP_VERSION constant and plugin header to 6.9 to match readme.txt.
- Renamed all internal function, constant, option, and transient prefixes from rqw_ (3 chars, too short) to d11rql_ to comply with WordPress.org prefix length requirements (minimum 4 characters).
- Updated plugin_signature value in database from rqw_v1 to d11rql_v1.
- No database schema changes — existing installs upgrade cleanly on next page load.
- Changed shortcode tag from [random_quote] to [d11rql_random_quote] to comply with WordPress.org prefix requirements.
- Rewrote CSV import to use in-memory str_getcsv() parsing — no temporary filesystem writes.
- Removed load_plugin_textdomain() call, which is no longer needed for WordPress.org hosted plugins since WordPress 4.6.
- Fixed Contributors field in readme.txt to use correct WordPress.org username (briz_dad).
- Compatibility: updated "Tested up to" to WordPress 7.0.
- Updated "Requires at least" to WordPress 6.9.
- No code or database changes.
- Admin: added pagination to the Manage Quotes page. Defaults to 10 quotes per page with numbered page links and Previous/Next controls.
- Admin: added a per-page dropdown (10, 25, 50, 75, 100) that persists across page navigation and category filtering.
- Admin: quote count display shows current range and total (e.g. "Showing 1–10 of 74 quotes").
- Admin: category filter links now reset to page 1 and preserve the current per-page setting.
- Admin: export description clarified to confirm all quotes are exported regardless of current page or filter.
- Database: added an index on the category column for faster category-filtered queries on larger quote libraries. Applied automatically via dbDelta on next page load — no manual steps required.
- Fix: Added DONOTCACHEPAGE constant to both the shortcode and widget output functions. This tells WP Super Cache, W3 Total Cache, WP Rocket, and other major caching plugins not to serve a static cached copy of pages containing a random quote — ensuring the quote is genuinely random on every page load for logged-out visitors.
- Data: encoding fix for smart quotes, em dashes, and emoji in imported CSV data (Mojibake caused by Windows-1252 bytes being mis-interpreted as UTF-8 during export).
- Database: replaced all SELECT * queries with explicit column lists (id, quote, author, category) across all files.
- Database: CSV import now runs inside a MySQL transaction — if any insert fails mid-import, a ROLLBACK fully restores the original quotes rather than leaving a partial data set.
- Database: admin quote listing queries now use explicit column selection.
- No database schema changes — safe drop-in replacement for 2.0.1.
- Security: capability check in admin form handler now fires before any superglobal access, closing a trivial bypass via spoofed $_GET['page'].
- Security: admin success notices (added/updated/deleted) now use per-user transients instead of URL parameters, preventing anyone from flashing misleading notices via crafted URLs.
- Security: uninstall.php now verifies the table exists before running SHOW COLUMNS, preventing a DB error on edge-case removal.
- Reliability: rqw_maybe_upgrade_db() now uses a static guard to prevent repeated dbDelta calls if update_option() fails transiently.
- Reliability: rqw_get_random_quote() now handles the COUNT/OFFSET race condition — if a quote is deleted between the two queries, it falls back to the first available quote instead of silently returning nothing.
- Version bump to 2.0.1 (no database changes).
- Added quote categories — assign a category to each quote and filter by category in the widget, shortcode, and admin page.
- Shortcode now accepts a category parameter: [d11rql_random_quote category="inspiration"].
- Widget settings now include an optional Category field.
- Admin page: Category column added to the quotes table, category field in Add/Edit forms, filter bar to view quotes by category, category autocomplete using HTML datalist.
- CSV export now includes the category column. CSV import supports an optional category column (backwards compatible with old files).
- Database: added category column (varchar 100) via dbDelta — safe, non-destructive upgrade for existing installations.
- Uncategorized quotes (empty category) appear in all category-filtered queries as a fallback.
- Added [d11rql_random_quote] shortcode for displaying a random quote in any post or page.
- Shortcode supports an optional title parameter: [d11rql_random_quote title="Daily Quote"].
- Shortcode output uses semantic blockquote/cite markup with CSS class hooks (rqw-shortcode, rqw-shortcode-quote, rqw-shortcode-title).
- WordPress.org submission release.
- Added Requires PHP: 7.4 header and runtime PHP/WP version checks on activation.
- Added RQW_VERSION constant.
- Full WordPress Coding Standards pass: tabs for indentation, absint() replacing intval(), wp_rand() replacing rand(), gmdate() replacing date().
- All user-facing strings now use the d11-random-quote-loader text domain (previously some used the bare text_domain placeholder).
- Widget output updated to use semantic blockquote/cite markup with CSS class hooks.
- Widget now renders before_title/after_title when a title is set.
- Admin page function renamed to rqw_render_admin_page for consistent rqw_ namespacing.
- All $wpdb insert/update/delete calls now pass explicit format arrays.
- Added GPL-2.0-or-later SPDX licence identifier and @package docblock to every file.
- CSV import: added per-row UTF-8 validation with skip-and-report for unreadable characters.
- CSV import: 5,000-row limit with count of skipped rows reported to the user.
- CSV import: added BOM stripping and Windows-1252 to UTF-8 encoding conversion.
- CSV import: server-side MIME type and file-extension validation.
- CSV export moved to admin-post.php for a proper browser file-download response.
- Added CSV import and export functionality.
- Added inline edit functionality for existing quotes.
- Security pass: nonces added to all forms, current_user_can() checks on all admin actions.
- Replaced ORDER BY RAND() with COUNT + OFFSET strategy for better database performance.
- Initial release.