| 开发者 | khaliddurani |
|---|---|
| 更新时间 | 2026年8月12日 20:21 |
| PHP版本: | 8.0 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
yoursite.com/client-portal/acme-corp/, branded with your logo and colour — not your theme, and with no WordPress admin bar in sight.[mkcp_portal] shortcode on any page and it inherits your theme./wp-content/plugins/merchantkits-client-portal/, or install it through the Plugins screen in WordPress.No. Clients sign in with an email address and password stored by this plugin, using a separate portal session. They never touch wp-admin and never appear in your Users list. If you want to link a client to an existing WordPress user, there is an optional field for that on the client form.
In wp-content/uploads/mkcp/{client-slug}/{project-id}/, with randomised filenames. That directory ships with .htaccess and web.config rules denying direct web access, and every download runs through a PHP handler that verifies your portal session first. The original filename is preserved in the database and restored when the file is downloaded.
No. Add as many clients and projects as you like. Client statuses (Active, Inactive, Archived) exist purely to keep your list tidy — archiving a client keeps all of their data and they can be reactivated at any time.
No. Every query is scoped to the signed-in client, and project, file, and message lookups re-check ownership before rendering. Changing an ID in the URL returns "not found", not someone else's data.
Yes. The sidebar collapses to a hamburger menu on small screens and the layout switches to a single column. Clients can upload files and approve deliverables from a phone.
Yes — put the [mkcp_portal] shortcode on any page. The portal then renders inside your theme with its header, footer, and styles. Both options work at the same time; use whichever suits each client.
Yes. Copy any template from the plugin's templates/ directory into your-theme/mkcp/ and edit it there — for example your-theme/mkcp/email/client-welcome.php. Your copy takes precedence and survives plugin updates. There are also filters for branding, navigation items, allowed file types, email subjects and content, and more.
Nothing is removed unless you ask for it. Under Settings → Advanced there are two separate opt-ins: one to delete database records and one to delete uploaded files. Both are off by default, so deleting the plugin leaves your data intact for a reinstall.
No, and that is deliberate — passwords are stored hashed with WordPress's own hashing, so nobody can read them back, including you. Use the "Send credentials" row action to generate a fresh password and email it, or point the client at the "Forgot password" link on their sign-in page.
Yes. Each site in the network keeps its own clients, projects, and files.
[mkcp_portal] shortcode for embedding the portal in your theme.mkcp/v1 namespace.