Rounds – Website care -- WordPress 插件

开发者	roundsfordev
更新时间	2026年11月3日 18:11
PHP版本:	7.4 及以上
WordPress版本:	7.1
版权:	GPLv2 or later
版权网址:	版权信息

Rounds is a website-care service for developers and agencies. Your client opens a small panel on their own site, points at a text, and asks for a change or makes it. You decide which texts they may touch, and every change can be undone. This plugin connects a WordPress site to Rounds. It does nothing on its own: you need a Rounds account (free to start, paid plans for more sites) at rounds-for.dev. What the plugin lets Rounds do, and nothing else:

Read the editable texts of a page: Elementor text, heading, button and similar widgets; block editor paragraphs, headings, list items and buttons; headings, texts, buttons, alt texts, accordions and tabs made with WPBakery, Divi 4, Avada, Beaver Builder, Bricks, SiteOrigin Page Builder, Kadence Blocks, Spectra and GenerateBlocks; and a post's title, excerpt and text custom fields (never one that holds a script link, a path or data).
Prepare a change in the plugin's own table. The page does not change yet.
Put a change live in the page as its builder stores it, changing only that text, after a snapshot, with a revision that names the change where WordPress keeps one.
Roll a change back from that snapshot.
Report versions of WordPress, PHP, the database, the theme and the plugins, so you can see what needs updating, with whether PHP has its sodium extension, the installed themes and how many administrators the site has (a number, never who).

Settings changes: off until you turn them on. Under Settings → Rounds, an administrator can allow Rounds to change some of the site's settings, group by group, each with its own checkbox:

site identity (title, tagline, logo, site icon); menus (classic and block theme navigation); header and footer text in widgets and template parts; the homepage and the posts page; turning comments off on a page;
contact forms' recipient, subject and messages (Contact Form 7, WPForms, Gravity Forms, Fluent Forms, Elementor Pro), with an e-mail to the site's admin address whenever a form's recipient changes; a page's SEO title and description (Yoast SEO, Rank Math, SEOPress, All in One SEO); 301 redirects (Redirection, Rank Math, Yoast SEO Premium), never from the login, wp-admin, the REST API, WordPress's own files or the homepage;
media: an image's alt text, and replacing an image's file with another from the media library (its old files, every size of it, are kept for 30 days in a folder of the plugin's own, so it can be put back; the folder refuses web requests on servers that read .htaccess, and deleting the plugin removes it);
WooCommerce: prices, stock, short descriptions and the store notice;
the page cache: emptying it through your cache plugin's own purge.

A setting is changed only from that fixed list, only in the groups you allow, and only after your developer approves the change in Rounds, having seen it before and after. Most can be undone. Unticking a group stops its changes at once. Who changed the choice and when is kept here and sent to Rounds (see External services). What is kept, and for how long: who changed the choice and when, here and at Rounds, while the site is connected (Rounds keeps an older choice 24 months after it was replaced, to show what was allowed when, and deletes all of a removed site's within 30 days); each change, here, for 12 months from its last step, which is also how long it can be undone; a replaced image's old files for 30 days. Deleting the plugin removes all of it from the site. What it can never do, by construction:

Run code, SQL or commands sent from outside.
Install or delete plugins or themes, or edit theme, plugin or any other code files. (The one file it ever writes is an image you replace from the media library, when you allow media changes.)
Administer the site: create, invite or delete accounts, change anyone's role, or switch plugin or WordPress updates on or off. Those stay with the site's administrators, in WordPress.
Read orders, form entries or comments, or delete posts.

Every request from Rounds is signed with a key made for your site alone and checked by the plugin. No WordPress password, Application Password or cookie ever leaves your site. Under Settings → Rounds you can pause Rounds or disconnect it at any time, and see a log of everything it did. The plugin adds nothing for your visitors: no script, no style and no request to Rounds, until you connect the site. Source code The plugin's PHP is in this package, readable, and follows the WordPress coding standards; its translations come from translate.wordpress.org. assets/rounds.js, the panel your clients open, is the readable (not minified) build of the same Rounds widget code sites load, built from one entry with esbuild; it is the whole of that code, with nothing left out.

0.1.31

The panel always lets you leave "point at it" again: Esc, Cancel or the same button.

0.1.30

Replacing a picture keeps its file type on sites where another plugin turns new JPEG uploads into WebP (for example Modern Image Formats), so pages that show the picture keep working.

0.1.29

On sites with Elementor and WordPress 6.9 or later, the panel marks a page's title, excerpt and custom fields again. Elementor turns off WordPress's page output buffer, which those marks need; the plugin now asks WordPress for it on a signed-in client's page only, and visitors' pages stay exactly as they were.

0.1.28

The panel follows a dark site: on a dark page it opens dark, as Ro already did.
After "Hide on this device", Ro's notice stands clear of an open panel instead of under it.
Pressing a text in the panel's list of texts shows at once that it is opening.
When Rounds no longer accepts this site's keys (the site was removed from its Rounds account), Settings → Rounds says the site is no longer connected, and the site asks Rounds less and less often, once a day at most, instead of every minute.
The versions report and the connection request say whether PHP has its sodium extension.

0.1.27

On a site whose PHP has no sodium extension, a reply WordPress signed wrongly (rarely, about once in 350,000 signatures) is now caught and signed again before it is sent, so Rounds no longer refuses it as not the site's. The same check covers the site's other signatures.

0.1.26

For a site on metered care, the panel's button says "Send the round", and a round sent too soon after the last one says when it can go.

0.1.25

The panel links Rounds' privacy notice beside the button that sends a request.

0.1.24

Preview links escape the previewed title, excerpt and content as they are printed.
The panel's marks for the title, the excerpt and custom fields now use WordPress's own page output buffer (WordPress 6.9 and later); the plugin no longer opens one of its own. On older WordPress those fields are simply not marked.

0.1.23

Rounds no longer administers the site: inviting people, changing roles and switching automatic updates are gone from the settings Rounds may change. Managing people and updates stays with the site's administrators, in WordPress.
Translations now come from translate.wordpress.org; the plugin no longer bundles its own.
The versions report no longer says which plugins update themselves.
The plugin is now called "Rounds – Website care".

0.1.22

The panel's script is rebuilt with this release of Rounds (pointing stops cleanly when the panel is closed). Nothing changes in how you use it on WordPress.

0.1.21

In strict mode, choosing who owns a translation ("keep my own" or "keep it in step") asks the person to confirm it is them first, as saving a text does, and "keep my own" is not pressed while something covers the panel.

0.1.20

Two saves to the same text at nearly the same moment no longer undo each other: the later one is refused and the panel says the text changed meanwhile. Undo after somebody else changed the text is refused the same way, so their change stays.

0.1.19

Until Rounds has sent your site's rules on who may change what (it does so when the site is connected, and before each change), only your developer can change texts; people in the panel wait for them. This also holds after connecting again.
Where WordPress filters HTML for everybody (a multisite network, or DISALLOW_UNFILTERED_HTML), Rounds no longer saves a page that filtering would strip, and a change that fails is put back exactly as the page was.
Previews now work for WPBakery, Divi 4, Avada, Beaver Builder, Bricks and SiteOrigin pages, and for titles and custom fields.
Deleting the plugin on a multisite network removes its data from every site, not only the main one.
Two changes to the same form, product or page can no longer overwrite each other.
Disconnecting, or connecting to another Rounds project, unticks the settings Rounds may change and closes the changes still waiting for approval.

0.1.18

The panel's script no longer carries a shared-password sign-in screen: Rounds retired the shared site password for every website. The people your Rounds account invites sign in with an e-mailed code the first time, then a passkey; the panel then asks Rounds for a short-lived ticket that lets your site mark the editable texts for that person.

0.1.17

After you save one of your texts, the panel can add one plain sentence on why that kind of text matters. Your developer can turn these notes off.

0.1.16

After a round is sent, the panel says when Rounds' AI is preparing it, that what comes back is a draft, and that nothing goes live until a person approves it.

0.1.14

Before you connect, Settings → Rounds links to Rounds for anyone without an account yet (a plain link; nothing is loaded or sent). The plugin's row in Plugins has a Settings link, and after activation one notice, for administrators only, says where to connect; it goes once the site is connected or you dismiss it.

0.1.13

The person you allow to approve changes (the client approver) gets "Changes to approve" on the site while signed in to the panel: they approve, reject, preview and publish the text changes waiting for them. Settings changes stay yours to approve.
Strict mode loads Rounds' strict.js 1.2.1, with its accessibility fixes.

0.1.12

Settings changes, off until an administrator turns them on under Settings → Rounds: the site title and tagline, menus, header and footer text, the homepage, contact form recipients, SEO titles, redirects, images, products, the store notice, comments on a page, inviting an editor or author, the team's roles and the page cache. Each change waits for the developer's approval, shows before and after, and (except a cache purge) can be undone.
The versions report also lists themes, each plugin's slug, automatic updates and required PHP, and the number of administrators.

0.1.11

The panel is easier to use with a keyboard and a screen reader: its icon buttons show their names on hover and on keyboard focus, "All texts" keeps the focus inside it and closes with Escape, the photo's focal point moves with the arrow keys, the password field works with password managers, and the panel tells assistive technology which language it speaks.

0.1.10

Strict mode, when you turn it on in your Rounds account: the panel, its sign-in and its session open in a frame on Rounds' own address, and your site's page runs only a small script from Rounds, pinned to one version by its hash. No other script on your site can read the sign-in.

0.1.9

Texts that may be formatted (bold, italic, underline, links and lists, as the field allows) open with a formatting toolbar instead of a plain box, and show on the page as you format them. The plugin still checks every value as before.

0.1.8

No change to what the panel does on a WordPress site, where you sign in with your WordPress account as before. Its script now carries the sign-in screen and the confirmation of who you are that other kinds of website use, switched off here.

0.1.6

Texts made with WPBakery, Divi 4, Avada, Beaver Builder, Bricks, SiteOrigin Page Builder, Kadence Blocks, Spectra and GenerateBlocks can be read and changed; a page made with another builder names that builder in the request.

0.1.5

No change to what the panel does. Its script now carries the groundwork for a stricter way of opening the panel, switched off until a later version.

0.1.4

The panel says what it is doing, keeps focus where you were, and keeps an unsent note while it is closed.
"Hold still" answers at once and covers the panel opening and closing.

0.1.3

A field your plan does not open is no longer highlighted as editable in the panel.
A round that must wait for its date can show the way to send it sooner, where that is offered.

0.1.2

Undo in the panel acts once, however many times it is pressed.

0.1.1

The panel's script is in the package, readable, as WordPress.org asks.
Refused requests are logged once per kind every ten minutes, not once each.
Custom fields that hold a script link, a path or data are never offered or written; ordinary text and web addresses stay editable.
The panel's pages can no longer be framed by other sites.
Policy patterns cover post titles, excerpts and custom fields, and refuse a trailing line break.
A page deleted while a change is being applied fails that change cleanly.

0.1.0

First release: pairing with a one-time code, signed requests both ways, reading and changing texts in Elementor and the block editor, snapshots and rollback, cache purges after each change, pause and disconnect, an activity log, and a full clean-up on uninstall.

Rounds – Website care

标签

下载

详情介绍:

安装:

屏幕截图:

升级注意事项:

常见问题:

更新日志: