IA.Top Connect

This plugin securely links your WordPress site to a content automation platform in a single click, so that new articles can be published on your behalf without ever sharing your admin password. Once connected, the platform automatically publishes search-engine-optimized articles to your blog, written and structured to match your industry and brand voice. The plugin detects whichever SEO plugin you already use — Yoast SEO, Rank Math, SEOPress, or All in One SEO — and fills in the title, meta description, and focus keyword for every article it publishes, so your existing SEO setup keeps working exactly as before. What the plugin does:

• Securely generates a WordPress Application Password so the automation platform can publish on your behalf, without ever handling your admin password
• Sends those credentials to the platform over an encrypted connection
• Lets you disconnect at any time — the generated password is removed automatically
• Cleans up the connection and the generated password automatically if you deactivate or remove the plugin
• Keeps track of page views and internal link clicks on published posts, so you can see how each article performs

Requirements:

• WordPress 5.6 or later (needed for Application Passwords)
• A user account with administrator permissions
• A client code, provided when you sign up for the automation service

1.6.6

• Added a per-IP rate limit to the public /pv and /lc beacon endpoints, capping how many post-meta writes, dedup transients, and outbound webhook calls a single client can trigger per minute

1.6.5

• Added a Terms of Service link alongside the Privacy Policy link in the External services section

1.6.4

• Moved the admin settings page CSS out of an inline <style> tag and into wp_add_inline_style(), loaded only on the plugin's own admin page
• Tightened REST permissions: /posts-sync now requires manage_options (it returns full site content including private/trashed posts), /seo-fields now checks edit_post capability for the specific post being modified, and /seo-plugin now requires edit_posts instead of being public
• Translated the rest of the readme (Installation, FAQ, External services, Tags) to English, and documented each external service call with what is sent, when, and a link to IA.Top's privacy policy
• Translated the plugin header description to English

1.6.3

• Removed the Plugin URI header — it was identical to Author URI, which WordPress.org's submission form rejects

1.6.2

• Fixed two remaining Plugin Check warnings by moving the phpcs:ignore comments to the exact lines they needed to cover
• Expanded the English plugin description (the short version was likely triggering a language-detection false positive)

1.6.1

• Fixed unescaped output flagged by the WordPress Plugin Check tool (version number, admin notice link)
• Removed suppress_filters from the posts-sync query (discouraged by WordPress performance guidelines)
• Sanitized and unslashed all $_SERVER/$_POST reads ($_SERVER['REMOTE_ADDR'], HTTP_USER_AGENT, HTTP_REFERER, iatop_client_uuid)
• The connect form now verifies the nonce before re-displaying a previously submitted client code
• Documented the direct $wpdb calls against AIOSEO's own table with justification comments (no core API exists for it)
• Renamed unprefixed globals in uninstall.php
• Updated "Tested up to" and translated the plugin's short and long description to English, as required for the WordPress.org directory listing

1.6.0

• Added uninstall.php: cleans up the Application Password and connection when the plugin is deleted, not just deactivated
• Added the "External services" section to the readme, documenting each outbound call to IA.Top
• Fixed the readme's Stable tag, which didn't match the plugin's real version
• Updated the Contributors list

1.5.5

• Automatic detection of the active SEO plugin (Yoast, Rank Math, SEOPress, AIOSEO) and a unified /wp-json/ia/v1/seo-fields endpoint to write title, description, and focus keyword regardless of which plugin is installed
• Direct write access to wp_aioseo_posts for AIOSEO (no paid REST add-on required)
• /wp-json/ia/v1/posts-sync endpoint so IA.Top can reconcile post status, content, and views
• View (post_views_count) and link-click tracking, with 15-minute deduplication and bot filtering
• Notifies IA.Top on post status changes (publish, schedule, trash) and on permanent deletion
• Fixed the real publish date on scheduled posts
• "Views" column in the admin post list
• Admin notice when the plugin is installed but not connected

1.1.0

• Initial release
• Connection to IA.Top via Application Passwords
• Status panel with connect/disconnect
• Automatic cleanup on deactivation