| 开发者 |
intuitinadeployment
pssllc |
|---|---|
| 更新时间 | 2026年9月23日 01:22 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
No. This plugin is completely self-contained. No other plugins are required.
Yes. WooCommerce support is optional - the plugin automatically detects whether WooCommerce is active and only exposes product data if it is.
Yes. The plugin only exposes content that is already publicly visible on your site. All access requires a valid WordPress Application Password created by an administrator - it cannot be accessed anonymously.
No. The plugin only responds when your Intuitina chatbot makes a request. There is no background processing, no scheduled tasks, and no impact on your site's frontend performance.
WordPress 6.0 or higher.
Visit intuitina.com to get started.
cache: 'no-store' on the fetch, and explicit no-cache response headers server-side, so every poll is now guaranteed to reflect live state.pre_get_posts interference. Search is now raw SQL end-to-end - both the native pass and the index fallback - so nothing on any host's stack can intercept it. Verified against a real local WordPress + MySQL install before release, not just in isolation.WP_Query, which - despite suppress_filters - is still subject to pre_get_posts, a hook that fires unconditionally on every query and that some security plugins/host-provided must-use plugins use to alter query behavior site-wide. On at least one customer site this silently zeroed out otherwise-correct matches. The fallback now queries the database directly via a parameterized SQL statement, with no hook surface at all, verified against a real WordPress install to behave identically to the old code for normal cases while being immune to this class of interference.suppress_filters and caching disabled, so a host-level search-replacement service (e.g. an Elasticsearch-backed search add-on) or a persistent object cache can no longer silently swap in its own, potentially out-of-date results. Search always reads directly from the site's live database now, matching the plugin's core promise.list_orders_for_email tool returns the customer's recent orders (up to 5) so the chatbot can either answer directly when there's only one, or offer a short pick-list when there are several. Still privacy-safe — results are filtered by billing email, so it cannot be used to see other customers' orders.get_order tool: when a customer asks something like "has order #4970 been dispatched?", the chatbot can now look up the order and answer with status, shipping method, and date placed. Privacy-safe by design — the tool requires BOTH the order number AND the email the customer used at checkout, and returns "not found" if the email does not match. That means an order number alone cannot be used to enumerate other customers' orders. Requires WooCommerce.wp_suspend_cache_addition( true ) so no lingering object-cache state can ever stale a product / post / page edit that was just saved. Every chatbot request reads the current database state.search and fetch. Unified Q&A pair matching the ChatGPT MCP compatibility schema. search(query) returns matching pages/posts/products from a single call, with live price, sale price, on-sale flag and stock status inline for each product result — so a chatbot can answer "what's the price of ABC?" in one round-trip instead of two.Cache-Control: no-store (via WP core's nocache_headers()), so no CDN or caching plugin can serve stale product data. New, renamed, repriced, or trashed products reach the chatbot immediately — no re-index required.Authorization: Bearer <token>. Works on sites where Application Passwords are blocked by security plugins (Solid Security, Wordfence, All In One WP Security), magic-link login systems, WP Engine SSO, or hosts that strip the Basic Authorization header.hash_equals prevents timing attacks.__() calls.languages/intuitina-mcp-connector.pot).manage_options capability (Administrator). Previously edit_posts was used, which is also held by Authors and Contributors - too permissive for an endpoint that exposes site-wide content and WooCommerce data to an external service.intuitina/v1/mcp (versioned, conflict-free).