Ruhler Review Pins
| 开发者 | ruhler |
|---|---|
| 更新时间 | 2026年11月1日 23:41 |
| PHP版本: | 8.0 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPL-2.0-or-later |
| 版权网址: | 版权信息 |
详情介绍:
Turn “that section needs changing” into feedback your team can act on.
Ruhler Review Pins lets reviewers leave comments directly on the page elements they mean. A numbered pin marks each location, so your team can see what needs attention without matching emails and screenshots to the right part of the website.
Use it to review a new website, proof content before launch, or collect feedback on existing pages. Leave a comment about a specific element or the whole page, resolve it when the work is done, and reopen it when it needs another look.
A clear path from feedback to follow-through
- Pin comments directly to page elements, using a mouse or keyboard.
- Collect general feedback about an entire page.
- Track open and resolved comments in the WordPress dashboard.
- Give reviewers dedicated accounts with limited permissions.
- Optionally issue expiring, revocable sign-in links to eligible reviewer accounts.
- Keep feedback on your WordPress site, with no external service or telemetry.
- Review is off on a fresh install. An administrator turns it on in Review Pins → Settings, and chooses whether review is available in all environments or only in non-production environments (local, development, staging — as reported by
wp_get_environment_type(); WordPress treats an unset environment type as production). - While review is off, no review controls, scripts, or styles are added to your pages and the review API refuses requests. Existing feedback stays available to managers in the dashboard.
- Review links are off by default and are a separate setting (see below).
- Review Pins Reviewer — use Review Mode: place pins, read comments on the pages they review, and resolve or reopen comments. Reviewers are kept out of wp-admin except their own profile page.
- Review Pins Manager — everything a reviewer can do, plus the feedback dashboard: resolve, reopen, trash, restore, and permanently delete feedback.
- Administrators can use Review Mode and manage feedback.
- Editors can use Review Mode (place pins, read, resolve, and reopen feedback) but cannot open the feedback dashboard or trash, restore, or delete feedback. Assign the Review Pins Manager role to people who should manage feedback.
- Only administrators can change settings and issue or revoke review links.
- Reviewers only see feedback for pages they are allowed to view. Feedback on private or draft pages is hidden from people who cannot read those pages, and their titles and addresses are not shown to them.
- Links can only be issued to dedicated accounts whose single role is Review Pins Reviewer and which have no other capabilities. Accounts with any additional role or privilege (including managers, editors, and administrators) are refused, both when a link is issued and every time it is used.
- A link expires 7 days after it is issued, or at the end of a review-window date you set. Issuing a new link replaces the old one; links can be revoked at any time.
- Sessions started from a link end on their next request once the link is revoked, replaced, or expired, the account gains another role or capability, or review or review links are turned off.
- The link is shown to the administrator once and is never stored in readable form. Issuing and revoking links is recorded in an activity log (without the link itself).
- Two-factor authentication. Review links are refused for accounts that use the Two Factor plugin (tested with version 0.17.0); those reviewers sign in with their password and second factor as usual. Enabling two-factor on an account also ends its existing review-link sessions. Other two-factor plugins are not detected and their compatibility is not verified: review-link sign-in does not use a password and does not run WordPress's
authenticatefilters (so it bypasses plugins that act only there, such as login-attempt limiters), although it does fire the standardwp_loginaction. If your site uses another two-factor plugin, keep review links off or use theruhler_rp_allow_review_link_loginfilter to refuse them.
- Trash expiry: like other WordPress content, trashed feedback is permanently deleted by WordPress after
EMPTY_TRASH_DAYS(30 days by default). If your site setsEMPTY_TRASH_DAYSto 0, trashing deletes immediately. - Unassigned feedback (administrators only): feedback saved by earlier development builds whose page cannot be identified reliably is kept as Unassigned instead of appearing on the homepage. Only administrators can see it, in the dashboard's Unassigned view, to review or delete it.
wp ruhler-review-pins status | list | show | resolve | reopen | trash | restore | delete | add-reviewer | remove-reviewer. WP-CLI commands are administrative tools and keep working while review is off. Status changes and deletions must be attributed to a real user (--user or --actor). Account creation and role changes also require an explicit actor with WordPress's applicable create_users and/or promote_users capabilities and permission to assign the target role. remove-reviewer removes Review Pins access and roles but never deletes the WordPress account or its content. add-reviewer never replaces an existing account's roles and refuses accounts with other roles or privileges.
Requirements and limits
- WordPress 6.4 or later and PHP 8.0 or later. The minimum combination was exercised in a disposable runtime; WordPress 7.1 and PHP 8.4 were also tested during release-candidate validation.
- Feedback is tied to each page's address. Both plain (
?page_id=123) and pretty permalinks are supported. Tracking parameters (such asutm_*), preview arguments, and this plugin's own parameters are ignored when matching a page. Changing a page's address or your permalink settings can separate existing feedback from that page. - Multisite is not supported in this version.
安装:
- Upload the plugin and activate it.
- Go to Review Pins → Settings, turn on review, and choose the environments where it should be available.
- Give each reviewer their own account with the Review Pins Reviewer role (or Review Pins Manager for people who will manage feedback).
- Reviewers sign in, open a page, and select Review this page.
- Optional: turn on review links in Settings and issue links from Review Pins → Reviewer Access.
屏幕截图:
常见问题:
How do reviewers leave a comment?
Select Review this page, then Make comment and click the part of the page you mean, or use the arrow keys to move through the page's content and press Enter. To comment on the whole page, use Add page comment. Press Escape to cancel.
Can visitors see the feedback?
No. Review controls and feedback are only shown to signed-in users with review access, only while review is available, and only for pages they are allowed to view.
What happens to data when I deactivate or uninstall?
Deactivating keeps everything. On uninstall, the plugin always removes review links and their tokens, the Review Pins roles, and the review capabilities it added to other roles. By default it keeps feedback and settings, so they are not lost by accident. If an administrator checks Permanently delete all review feedback and plugin settings when the plugin is uninstalled in Settings, uninstalling also deletes all feedback, settings, and the review-link activity log. WordPress user accounts and their content are never deleted. Network-wide uninstall on multisite is not supported.
How does the plugin handle personal data requests?
Review Pins works with Tools → Export Personal Data and Tools → Erase Personal Data. An export includes the feedback a person wrote (including the page excerpt captured where they commented), comments they resolved, and review-link activity about them. Erasure removes the text of the feedback they wrote, the captured page excerpts and on-page locations, and their name from feedback they wrote or resolved; it also revokes their review link and anonymizes the link activity log. A de-identified record of each comment (which page, its status, and dates) is kept and reported as retained; managers can delete it from the dashboard. Feedback written by other people is not searched for mentions of the person.
Does it send data anywhere?
No. The plugin makes no external requests and includes no tracking.
更新日志:
1.0.0
- First release: on-page pins and general feedback, resolve/reopen workflow, management dashboard, dedicated reviewer and manager roles, optional review links, privacy tools, lifecycle cleanup policy, pagination, keyboard placement, and WP-CLI commands.
- Review is off on new installs and review links are separately opt-in.
- Account-changing WP-CLI commands require an explicitly authorized WordPress actor, and feedback targets are authorized server-side before a record is created.
- Supports WordPress 6.4+ and PHP 8.0+; multisite network operation is not supported.