| 开发者 | sprigly |
|---|---|
| 更新时间 | 2026年5月8日 09:35 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 6.9 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
/portal/ on your WordPress site and see their journey, milestone by milestone/portal/.htaccess hardening + media library filter/portal/ URL to work correctly.
Recommended: Install and configure an SMTP plugin (WP Mail SMTP, Post SMTP, FluentSMTP, or Easy WP SMTP) to ensure reliable email delivery. By default, WordPress sends mail through your hosting server, which can be filtered or junked by Gmail/Outlook/Yahoo. Sprigly detects an active SMTP plugin and shows its status in Sprigly → Settings → Tools.Yes. The client portal at /portal/ is fully self-contained and does not inherit your theme's styles. It works correctly with any theme — including page builders like Divi, Elementor, and Beaver Builder.
Yes, each client has a WordPress user account with the sprigly_client role. This role gives them access only to the client portal — they cannot access wp-admin. Sprigly creates the account automatically when you add a client.
At /portal/ on your WordPress site (e.g. yourdomain.com/portal/). You can find the full URL in Sprigly → Settings → Portal. Share this link with your clients.
Nothing, by default. The "Protect data on uninstall" setting is ON by default, which means all your journeys, clients, milestones, and reflections are kept in the database even if the plugin is deactivated or deleted. You can change this behaviour in Sprigly → Settings → Tools.
Yes. Sprigly detects WP Mail SMTP, Post SMTP, FluentSMTP, and Easy WP SMTP automatically and routes all email through whichever is active. We strongly recommend installing an SMTP plugin for reliable delivery.
Yes. You can set a custom portal name, upload separate logos for the login page and the portal nav bar, set logo heights, and pick a primary brand colour (used for buttons, progress bars, and accents in the portal and emails).
Yes. When creating or editing a journey, set the "Client-facing role" field to whatever suits your profession, coach, trainer, mentor, teacher, tutor, instructor, guide, etc. This replaces the default "practitioner" in all client-facing emails for that journey. A suggestion is auto-filled based on the Industry/Category you select, but you can change it to anything you like.
Sprigly Pro (sold separately at sprigly.co) layers on the practitioner toolkit: checkpoint sign-offs, scheduled milestone unlocks, custom check-in fields, a Resources library, practitioner notes, file uploads on reflections, branded PDF progress reports, JSON export and import, multi-practitioner Team support, and a branded login page. See https://sprigly.co/pricing/ for the full feature list.
Sprigly keeps your client data on your own WordPress installation, sends emails through your own site's wp_mail(), and ships its display font (Poppins) inside the plugin so the portal does not contact Google Fonts.
There are two narrow situations where the plugin does reach out to a third party, both opt-in by behaviour:
wp_oembed_get() to fetch the embed metadata from YouTube or Vimeo so the video can render. The response is cached for 24 hours.Sprigly is built to support GDPR compliance. Client data is stored only on your own WordPress installation. You remain the data controller for all client data on your site.
Sprigly ships a built-in Safety & Backups page (Sprigly, Safety & Backups, admin-only). It takes snapshots of all nine Sprigly DB tables (journeys, milestones, clients, progress, reflections, notes, resources, custom fields, field responses) directly inside your own database. Nothing is sent off-site. By default the plugin takes a snapshot every night and after every Sprigly plugin update, plus you can take a manual snapshot any time. Restores are reversible (a pre-restore safety snapshot is taken automatically). Both automatic behaviours can be disabled in the Settings tab. This is a safety net for routine "before I touch this" moments, your hosting provider's full-site backups remain the authoritative recovery path for catastrophic loss.
includes/class-sp-portal-preview.php (class Sprigly_Portal_Preview).wp_kses_post). Existing customers who had a welcome message set under the older Sprigly Pro keep their text intact: SP_Admin_Settings::read_portal_welcome() reads the canonical sprigly_portal_welcome option first and falls back to the legacy sp_portal_welcome key on first read, promoting the value forward.'html' option type in SP_Admin_Settings with wp_kses_post sanitiser, used by the welcome message field.Sprigly_Admin_Journeys::render_preview_button() registered on sprigly_journey_edit_after_title. Defers gracefully if an older Sprigly Pro is loaded that still ships its own preview button.wp_kses_post() before echoing. The two affected echoes ($milestone_card_extras from the sprigly_admin_enrolment_milestone_card_extras extension point, and $sp_item['html'] from the sprigly_admin_milestone_timeline_items filter) previously trusted contributing renderers to pre-escape; they now late-escape regardless, so a future filter callback returning unfiltered HTML cannot inject into the admin screen.SP_ prefix are renamed to the standard Sprigly_ prefix: SP_Backup becomes Sprigly_Backup and SP_Admin_Safety becomes Sprigly_Admin_Safety. Both ship a class_alias() for backwards compatibility so any external code that still references the old names keeps working. The wp_localize_script JS object handed to portal-reflection.js is renamed from spReflectionStrings to spriglyReflectionStrings (the JS file is updated in lockstep).sp_* keys missed by the v1.2.0 prefix migration are now handled. A new upgrade_to_1_4_2_rename_residual_sp_options() routine copies values for sp_portal_page_id to sprigly_portal_page_id and sp_suspended_practitioners to sprigly_suspended_practitioners, then renames the _sp_client_id post meta key on reflection attachments to _sprigly_client_id in place. Idempotent. The legacy admin_post_sp_send_test_email and admin_post_sp_send_bug_report aliases (kept for the v1.2.0 to v1.3.0 transition) are removed; the canonical sprigly_* action hooks remain. Stale _sp_* references in doc comments are corrected to match the live _sprigly_* keys.paused status but had no UI to transition out of it (Pro's Pause/Reactivate buttons hide when is_pro() returns false). Lite now renders a Reactivate button for paused enrolments whenever no add-on is hooked to sprigly_client_status_actions, so a Pro to Lite downgrade can never lock the practitioner out of their own data. The button posts new_status=active through the existing update_client_status handler (which already accepts active in its default whitelist, no DB layer change needed).Sprigly->cleanup_deleted_user() now early-returns when the sp_journeys table does not exist on the site. Previously, when WordPress fired deleted_user on an install where Sprigly was loaded but its tables had never been created (or had been dropped by a cleanup utility), the cascade fired several queries against missing tables and flooded debug.log on every WP user deletion. The guard is one SHOW TABLES LIKE per call.Sprigly: Do not delete), client-profile and journey-list dropdown placeholders (Select journey..., Select user..., Select...), bug-report email subject, and admin notices are replaced with commas, periods, parentheses, or colons depending on context. Single em-dash placeholders for empty values (Phone, Industry, First Assigned columns) become empty strings. Code comments and error_log() debug output are unchanged. Internal punctuation only, no behaviour change.class-sp-portal.php (sprigly_portal_skip_auth_check, sprigly_portal_skip_form_actions, sprigly_portal_skip_role_autorestore, sprigly_portal_resolve_user_id, sprigly_portal_skip_render_dispatch + sprigly_portal_render, sprigly_portal_url, sprigly_portal_body_class, sprigly_portal_after_shell_open, sprigly_portal_nav_html, sprigly_portal_head) so add-ons can re-implement preview without Sprigly carrying any preview-specific code itself. The Settings → Upgrade tab lists Preview Journey again under Authoring & workflow.manage_options capability, so a hosting account, web designer, accountant, or any other non-owner administrator on the site cannot create, restore, or delete snapshots.ensure_admin_practitioner_role() no longer leaks the sprigly_practitioner role to every WordPress administrator on admin_init. Pre-v1.4.1 the helper auto-added the role to ANY user with manage_options, which meant a brand-new WP admin (hosting account, web designer, etc.) was silently treated as a Sprigly practitioner the first time they loaded wp-admin: they showed up in Sprigly → Team and saw the full Sprigly menu. The auto-grant is now scoped to the designated Sprigly owner. Non-owners only become practitioners through an explicit Team → Invite Practitioner / "Add me as a practitioner" banner / practice-setup form path.is_practitioner() no longer treats every WordPress administrator as a Sprigly practitioner. Only the designated owner OR users explicitly carrying the sprigly_practitioner role pass the helper now.#IDs, matching the table's "When" column. Post-update snapshots now also fire on single-plugin updates (the previous handler only listened for the plugins plural array key, missing the plugin singular set by core's standard upgrade flow).class-sp-admin-settings.php:191 (WordPress.Security.ValidatedSanitizedInput.InputNotSanitized) is suppressed with a phpcs:ignore comment naming the per-type whitelist (sanitizer_for_type) — sanitization is happening, just dynamically dispatched.sprigly_admin_client_filter_status_options available for add-on plugins that introduce additional workflow states.register_setting(). The single generic sanitize_text_field callback is replaced by per-option sanitizers driven by an explicit type schema: esc_url_raw for logo URLs, bounded absint (with min/max) for the login-logo and nav-logo heights, sanitize_hex_color for the brand colour, and a yes/no whitelist for toggles. The custom save handler in Settings → Branding now routes every posted value through the same sanitizer table, so writes via the Settings UI and writes via the Options API stay consistent.home_url('/wp-login.php?...') replaced with wp_login_url() + add_query_arg() in the SiteGround Security login-redirect branch (class-sp-portal.php), so subdirectory installs and renamed-login plugins resolve the login URL correctly.__( '...', 'default' ) calls in the Plugins-page row-meta de-duplication helper are removed. The helper now compares against the canonical English labels emitted by WordPress core; a non-English locale may show a benign extra row-meta link, which is the smaller of the two trade-offs.class-sp-portal.php, class-sp-email.php, class-sp-roles.php, class-sp-database.php, class-sp-install.php, class-sp-login.php, class-sp-admin-clients.php, class-sp-admin-journeys.php, class-sp-admin-settings.php, and class-sp-admin-menus.php is rewritten in neutral "extension point" / "add-on plugins can hook here" language. The Settings → Upgrade tab no longer lists Preview Journey or Hide Powered by Sprigly as Pro features (Preview is free now; the Powered by toggle ships in Sprigly itself).count_hidden_pro_features() and count_hidden_pro_features_for_milestone() helpers (which existed in Lite solely to support the add-on's downgrade-detection email + dashboard banner) are removed from class-sp-database.php. The add-on plugin owns this functionality at its own callsite now.SP_Database::insert_journey() / update_journey() no longer write sequential_mode; SP_Database::insert_milestone() / update_milestone() no longer write milestone_type, unlock_type, unlock_date, unlock_days, or require_reflection. Add-on plugins that rely on those columns hook the existing sprigly_save_journey and sprigly_save_milestone actions to persist them via direct $wpdb->update() (the patterns Sprigly Pro already uses). Database schema is unchanged so existing rows keep their values.<style> block on the file-proxy notice page (the page rendered when a portal user requests a private file via /?sp_file=ID and the lookup fails) is moved to a real stylesheet at assets/css/portal-notice.css. The notice page exits without firing wp_head/wp_footer, so it manually calls wp_register_style() + wp_enqueue_style() + wp_print_styles() to emit a standard <link rel="stylesheet"> tag. No visual change, just compliance.manage_options), so non-owner admins with manage_sprigly cannot see it even though they can reach the rest of Settings. All existing snapshot / restore / delete / prune / save handlers and URLs were re-pointed at the new tab; no data migration needed.class-sp-admin-safety.php: display-only $_GET reads (active tab, post-redirect notice text) wrapped in a scoped phpcs:disable WordPress.Security.NonceVerification.Recommended block (no form data is processed there); five sprintf( __() ) strings carrying numeric placeholders gained translators: comments; the settings save handler extracts retention_days and keep_minimum via absint( wp_unslash( $_POST[…] ) ) so WPCS sees them as sanitized (the previous inline (int) cast was equivalent at runtime but not recognised by the input-sanitization rule). class-sp-backup.php: every $wpdb call against the snapshot tables annotated with targeted phpcs:ignore for WordPress.DB.PreparedSQL.InterpolatedNotPrepared, WordPress.DB.DirectDatabaseQuery.{DirectQuery,NoCaching,SchemaChange}, and PluginCheck.Security.DirectDB.UnescapedDBParameter (table identifiers are not parameterisable; names come from SP_Database::table() / self::get_manifest_table() plus a server-generated gmdate + wp_generate_password suffix, so no user input touches the SQL string). No behaviour change.SP_Portal::write_protection_files() now accepts an optional $practitioner_id argument. When supplied, the helper creates /uploads/sprigly/{practitioner_id}/ and drops an empty index.html inside it (so directory listing is blocked even on hosts with Options +Indexes enabled). Pairs with Sprigly Pro v2.2.53, which uses this to partition reflection + resource uploads into per-practitioner subfolders. Lite-only installs are unaffected (Lite has no file upload features); the helper just exposes the new arg for Pro to consume.wp_sp_backup_manifest (snapshot ledger) plus per-snapshot wp_sp_*_bak_* copy tables..button, button direct children still capped each button at 120px, which kept the button INSIDE the form at 120px even when its form parent had grown to 100%. Lifted the button cap to 100% to match. With flex: 1 1 auto on every Actions-cell child, View / Edit / Remove still distribute the row width evenly when they fit on one line, and the wrapped Resend Welcome (Pro) now actually fills its row.http:// upload URL doesn't trigger a Mixed Content warning when the admin page is served over https://. Same set_url_scheme() fix as v1.2.19's portal nav and v2.2.38's branded login page; the Branding admin preview was the third render path that was missed. The hidden form inputs intentionally keep the original (un-normalised) value so saving the form doesn't silently rewrite the option, scheme normalisation stays a display-only concern..sp-table-clients td[data-label="Actions"] form had max-width: 120px !important from when those forms only ever fit alongside View / Edit / Remove. Bumped to max-width: 100% !important so a wrapped form gets a comfortable full-width tap target instead of staying capped at 120px. Sibling buttons in the same cell still cap at 120px (unchanged) so the View / Edit / Remove row stays balanced.CHANGELOG.md inside the plugin folder, alongside the pre-split monolithic v1.30.x history. No code changes.handle_save() already rejected non-owner saves with a wp_die() (so non-owners could TRY to change the value but the change wouldn't persist). The visible-but-inert form was confusing — admins saw the checkbox in their preferred state, clicked Save, were dumped on a wp_die page, and had no obvious "this is owner-only" signal. Now non-owners see a read-only status block instead: "Status: Data is protected — deleting the plugin will keep your journeys, clients, milestones, reflections, and settings. Only the Sprigly Owner can change this setting. Contact the owner if it needs adjusting." The owner sees the form unchanged. Server-side gate at handle_save() line 95 stays as defence-in-depth. The amber "Data protection is OFF" warning still renders for all admins regardless of who can edit, since they all need to know if the site is currently in the unprotected state.