Eleva CRM for Photographers
| 开发者 | eleva |
|---|---|
| 更新时间 | 2026年8月27日 18:04 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Eleva is the CRM built for wedding and event photographers. It keeps every client, every shoot, and every payment in one place, right inside the WordPress admin you already use, with no monthly subscription and nothing sent to a server you don't control.
You already have enough to think about on shoot day. Eleva handles the rest: who is getting married and when, what they owe and what they have paid, which memory card belongs to which shoot, and where every contract and file lives. The client details that matter most, names, contacts, home addresses, are protected by a dedicated encryption vault, so a leaked database never hands anyone a usable list of your clients.
Features
- Customers: keep every couple or client together, with more than one contact per booking, so a bride's email and a groom's email can both live on the same record. Full search across names, emails, phones, and addresses. Every customer page shows their full booking history with running totals.
- Services: build a catalog of the packages and add-ons you offer, then override the price or notes for any specific booking without touching the catalog.
- Works (your bookings): the hub for every job. Customer, services, event date and time, every location, every file, and every payment, on one page.
- Payments: track deposits and balances with a running list of installments. Paid, Partial, or Unpaid status is worked out for you automatically from what has actually been paid.
- Custom payment types: go beyond a simple deposit and balance and define your own installment types to match how you actually bill.
- Files: attach contracts, invoices, and reference files to any booking, or drop in a link to a Google Drive or Dropbox folder instead. Images and PDFs preview right in the browser, with zoom and full-document search.
- Dashboard: your year at a glance. Revenue booked, payments still to receive, and the next five shoots coming up.
- Monthly calendar: every booking as a colored pill on a real calendar. Click through to see the customer, date, and payment status.
- Calendar colors: tag each booking with one of twelve colors, so a glance at the calendar tells you which is which.
- Memory Cards: an inventory of your SD and CF cards, so you always know which ones are safe to format. Status moves itself: Ready, In Use, Backed Up, or Damaged, as you attach a card to a shoot and check off the backup.
- Quick Notes: a short rich-text field on every booking for the one-line reminder you need at a glance, kept separate from your full notes.
- Vault: a dedicated encryption layer, protected by its own password and a TOTP authenticator app, that keeps client names, contact details, and addresses unreadable in the database, even to someone with direct database access.
- Encrypted backup: download one encrypted archive of your entire CRM (customers, bookings, services, and files) whenever you want, protected by your Vault credentials and opened by no one but you.
安装:
- Download the plugin ZIP from WordPress.org.
- Go to Plugins > Add New > Upload Plugin in your WordPress admin.
- Upload the ZIP and click Install Now, then Activate.
- Navigate to Eleva in the WP Admin sidebar.
- On first launch, set your Vault master password and scan the QR code with an authenticator app (Google Authenticator, Authy, or any TOTP-compatible app).
- Enter your Vault password and the current OTP code to unlock the CRM.
屏幕截图:
常见问题:
Who is Eleva for?
Wedding and event photographers who want a CRM built around how a shoot actually works: one client, one date, a handful of payments, and a stack of files, not a generic sales pipeline.
Do I need a subscription?
No. Eleva is free, with no monthly fee and no feature paywall inside the app. An optional paid add-on, Eleva CRM Pro, exists for studios that want a team (collaborators), a Kanban board, analytics, and automatic scheduled backups to Google Drive, but nothing in the free plugin nags you to upgrade.
Does this require ACF (Advanced Custom Fields)?
No. Eleva uses only native WordPress meta boxes and registers all custom post types itself. No third-party field plugin is required or used.
Does this work without WooCommerce?
Yes. Eleva is completely standalone and has no dependency on WooCommerce or any other plugin.
What is the Vault?
The Vault is a dedicated encryption layer for the personal details tied to your clients and bookings: names, email addresses, phone numbers, home addresses, nationality, tax ID, Instagram handles, and each booking's event address. Every one of those is encrypted with AES-256 before it is written to the database. You set a Vault master password, independent of your WordPress login, and pair it with a TOTP authenticator app (Google Authenticator, Authy, or similar); unlocking always needs both. The password itself is never stored: it is stretched through PBKDF2 with 600,000 iterations, and the resulting key lives only in a temporary, authenticated session cookie (AES-256-GCM), never in the database. The Vault locks itself again after 15 minutes of inactivity, and on every WordPress login or logout, so a shared computer is never left open. Booking details like the event date, price, and your own notes sit outside the Vault. Only the personal contact details listed above are encrypted.
What if I forget my Vault password?
Eleva gives you two separate fallbacks, both set up ahead of time from the Settings page. If you still know your password but lost your authenticator app, the one-time recovery code gets you back in. If you forgot your password itself, only the recovery phrase can reset it without losing your encrypted data. Set up both, since they cover different problems. Losing your password, your authenticator, and both recovery credentials together means the data cannot be recovered by anyone, including us. That is what makes the encryption real.
Does the plugin work on shared hosting?
Yes. It needs PHP 7.4 or higher and WordPress 6.0 or higher, both standard on modern shared hosting.
Where is my data stored?
Entirely in your own WordPress database. Eleva makes no external HTTP requests and sends no data to any external server, ours or anyone else's. You own and control your data completely.
Will Eleva slow down my site?
No. Eleva only loads on its own admin screen inside WP Admin; it adds nothing to your public-facing site, so visitor-facing performance is unaffected.
Can I get my data out if I stop using Eleva?
Yes, any time, from the Settings page: download a complete encrypted backup of every customer, booking, service, and file. It is your data in a portable archive, not locked to the plugin.
Does Eleva back up my data?
Yes. From Settings, download a single encrypted archive of your entire CRM: customers, bookings, services, memory cards, and every attached file. Nothing leaves your server: the archive is built locally and saved to your own computer. That archive is encrypted with your Vault password and authenticator code before it is ever written. Nobody, including us, can open it without them, and there is no back door: lose your password, recovery code, and recovery phrase together, and the archive is unrecoverable. This backs up your CRM data, not your whole WordPress site. Themes, other plugins, and unrelated content are not included. Automatic, scheduled backups that push this same archive to your own Google Drive are an Eleva CRM Pro feature. The free plugin's backup is always manual: on demand, whenever you choose to download one.
更新日志:
1.5.0
- New: Total Price is now calculated automatically from the work's service rows (plus any supplier referral fees, with Eleva CRM Pro) instead of being typed by hand, so it can never drift out of sync with what the services actually cost.
- New: Work edit screen gains a Suppliers section (requires Eleva CRM Pro) for tracking referral fees owed to wedding planners, venues, and other suppliers who refer a job.
- Fix: a work saved before this change, with a total price but no service rows, keeps its existing total instead of it being reset to zero. The work form shows a notice on any such work explaining that adding a service row lets the total be calculated automatically again.
- Fix: the Calendar view could show a customer name with a wrongly HTML-encoded ampersand, and Kanban task reminders never appeared on the Calendar at all. Both were caused by this plugin and Eleva CRM Pro registering the same calendar endpoint; this plugin now steps aside when Pro is active.
- i18n: new interface strings for this release are fully translated into Italian (it_IT).
- Fix: cleaned up wording on several vault, recovery, and file-selection screens for clarity and consistency.
- i18n: Italian (it_IT) translation completed for a couple of messages that had never been translated, including the session idle-timeout warning and an alternate recovery option on the "forgot my authenticator" screen.
- New: Work edit screen gains a Reminders section (requires Eleva CRM Pro): set a date offset from the event date and it turns into a Kanban task, with optional Google Calendar sync.
- New: "Open Google Calendar" button on the Calendar page, shown once a Google Account is connected (requires Eleva CRM Pro 1.4.1+).
- Fix: Dashboard revenue now scopes each payment installment by its own date instead of its work's event date. A payment dated in a different year than its work no longer gets double-counted in one year and missed in the other.
- Fix: Google Calendar. Removing an event from the Calendar view no longer appears to succeed when the request actually failed.
- Fix: Settings page. The Vault and Backup sections' description text no longer renders in a narrow column with empty space beside it; text now fills the panel like every other section.
- New: encrypted CRM backup. Download a single archive of all your CRM data (customers, works, services, memory cards, and every attached file) from the Settings page, protected by your Vault password and authenticator code. Nobody, including us, can open it without them.
- New: a standalone, dependency-free command-line decrypt tool ships with the plugin, so a backup can be restored on any machine with just PHP: no WordPress or plugin install required.
- Improved: refreshed spacing, borders, and layout across every form and list screen; the sidebar now collapses to icon-only and remembers your choice; tables get a persistent scroll indicator instead of relying on the operating system's hidden scrollbar.
- Fix: the sidebar's collapse/expand button and the calendar's day-of-week column headers now translate correctly in Italian. They previously always showed in English regardless of site language.
- Note: with Eleva CRM Pro connected to Google Drive, backups also run automatically on a schedule. See the Pro changelog.
- Fix: Italian (it_IT) translation now covers the Customers, Services, and Works list screens, the Dashboard, and the Calendar view. These previously displayed in English regardless of the site or user language setting, even though the rest of the plugin was translated.
- New: the Files section on a Work now accepts external links (Google Drive, Dropbox, etc.) alongside uploaded files, with an optional custom display label.
- New: images and PDFs in the Files section now open in a full-size in-browser preview instead of only downloading. The PDF viewer includes zoom, page navigation, and full-document search.
- New: Customers, Services, Works and Memory Cards lists now show a clickable title that opens the record's edit page directly, styled in your WordPress admin theme color with an underline, matching the existing Edit button shortcut.
- Fix: Dashboard's "Recent Works" title links now use your WordPress admin theme color with a permanent underline, instead of a hardcoded blue that only underlined on hover.
- Fix: file downloads on a Work's Files section now use an authenticated request instead of a plain link, so downloads work correctly when the vault is involved.
- Fix: the Notes field on a Work no longer appears to reset after external re-renders. The data was always saved correctly; only the on-screen display was affected.
- Fix: vault now re-locks on every WordPress login/logout (no longer stays unlocked across sessions).
- Fix: the Lock Vault button now locks immediately without a page refresh.
- New: Memory Cards. Keep an inventory of your SD/CF cards so you always know which ones are safe to reuse. Each card has a status: Ready, In Use, Backed Up, or Damaged, that advances automatically as you attach the card to a shoot and tick off backup and formatting. Manage your full card list from the new sidebar entry, or assign cards to a shoot right inside the Work editor. A card that is currently in use cannot be deleted by mistake.
- Vault: added a recovery phrase so you can regain access if you forget your vault password, separate from the existing one-time recovery code used for a lost authenticator. After updating, unlock your vault and you will be offered to set one up. This is optional and re-encrypts nothing.
- Vault: the unlock and setup screens now save credentials in your browser's password manager under a dedicated "crm-vault" username, so the vault password is never confused with, or overwritten on top of, your WordPress login.
- Vault: authenticator codes are now accepted within a ±60 second window, fixing spurious "invalid code" errors after the server or device clock drifts (for example, after the machine sleeps).
- Vault: the vault now auto-locks after 15 minutes of inactivity and silently re-opens on page refresh while it is unlocked.
- Fix: the sidebar title now follows your site language instead of always appearing in English, and the sidebar lock button and version footer are tidier and easier to use.
- i18n: Italian (it_IT) translation updated to 100%, including all the new Memory Cards and vault recovery-phrase wording.
- Updating from 1.3.x is seamless: your vault, password, authenticator and encrypted data are unchanged. Just update and unlock as usual: there is no data migration and no required action.
- i18n: Italian (it_IT) translation completed to 100%. Added the vault recovery-code and payment-type strings that were previously untranslated, and corrected leftover pre-rebrand strings.
- i18n: bundled translations now also load correctly on WordPress 6.0 to 6.6.
- Renamed to "Eleva CRM for Photographers".
- No locked or upsell-only features remain in the free plugin.
- Security: added nonce verification to the vault file download permission check.
- Security: the vault file download ownership check now compares file IDs exactly, closing a gap where the previous check could match the wrong file in rare cases.
- Security: the password-derived encryption key now uses 600,000 rounds of iteration (up from 100,000), matching current OWASP guidance. Existing vaults keep working exactly as before.
- Security: the customer search filter is now scoped precisely to customer contact fields.
- Fix: admin notices, including security and update warnings, are no longer suppressed on the Eleva screen.
- Reliability: if a required encryption extension is missing on activation, the plugin now deactivates itself cleanly instead of leaving things in a broken state.
- i18n: translator notes added to strings containing placeholders, improving translation accuracy.
- Customer Works recap: the Customer edit page now shows a table of all linked works with title, date, services, total price, and payment status, plus totals for the whole list.
- Works list can now be filtered to a single customer.
- i18n: Italian translations added for all new strings.
- Calendar view is now included: the monthly calendar showing all scheduled works is available to all users.
- Calendar locale fix: month names and event dates now display in the WordPress site language instead of the server's own locale.
- Vault description: Settings page now shows an explanation of the Vault feature, detailed when not yet configured, a short reminder once active.
- UI: logo mark used as the WP Admin menu icon.
- UI: Settings sidebar navigation clipping fixed.
- UI: Payment status filter dropdown in the Works list now sizes to the full option text.
- Layout: the plugin screen now fills the available height correctly.
- Security: vault session cookie upgraded to authenticated AES-256-GCM encryption. Any tampered cookie is now rejected outright rather than silently decrypted to garbage.
- Security: fixed an issue where searchable encrypted fields (email, phone) could share encryption patterns across different values; each value now encrypts uniquely.
- Security: fixed the same issue in the browser-side encryption path.
- Security: fixed a data format issue that could cause some previously-stored email and phone values to fail decryption; they now decrypt correctly.
- Security: added an additional server-side check to vault-protected requests, closing a theoretical cross-site request forgery window.
- Security: fixed the vault file download check so a file ID could not accidentally match a different file's download link.
- Security: vault unlock, failed unlock, lock, and password-change events are now logged (when WP_DEBUG_LOG is enabled) for your own auditing.
- Security: fixed re-encryption of email and phone fields during a vault password change so they always decrypt correctly afterward.
- Security: prices and installment amounts can no longer be saved as negative numbers.
- Security: the vault password now requires a minimum of 12 characters.
- Maintenance: uninstalling the plugin now fully removes all of its data (posts, custom fields, taxonomy terms, options, and the vault upload folder).
- Security: the vault setup process no longer allows accidentally overwriting an already-configured vault.
- Security: removed a guessable fallback in the vault's cookie encryption secret.
- Security: tightened who can save Customer, Service, and Work records to match the same permission level as the REST API.
- Compatibility: resolved a deprecation notice that appeared in some debug logs on newer WordPress versions.
- Compatibility: tested up to WordPress 7.0.
- WP admin theme color integration: sidebar and buttons now adapt automatically to your chosen WordPress admin color scheme.
- Custom payment types: define your own installment types beyond the built-in Default and Coupon, with a manager right in the Works list.
- Payment status badges (Paid / Partial / Unpaid) are now translatable.
- Accessibility: interactive elements now show a visible focus outline for keyboard users.
- Consistent button design across the whole plugin: primary, secondary, and danger styles, all matching your WordPress admin color.
- Forms now use the full available width on Work, Customer, Service, and Settings screens.
- Layout: sidebar and main content now scroll independently, adapting to your screen height.
- Added Quick Notes: a short rich-text field on the Work edit screen for at-a-glance reminders.
- Added Calendar Color: tag each Work with one of twelve colors.
- Full Italian (it_IT) translation, covering the entire plugin interface.
- Initial public release.