![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png){kind=logo}
Changeset 3773088
- Timestamp:
- 10/29/2026 01:57:41 PM (14 hours ago)
- Location:
- prt-feed-for-idealo
- Files:
-
- 2 edited
-
tags/2.1.4/readme.txt (modified) (8 diffs)
-
trunk/readme.txt (modified) (8 diffs)
Legend:
- Unmodified
- Added
- Removed
-
prt-feed-for-idealo/tags/2.1.4/readme.txt
r3773047 r3773088 32 32 The assistant in the separate advanced component helps you work with feed settings and existing product attributes. Review its suggestions and confirm them before applying changes. 33 33 34 Advanced local configuration, the assistant interface, statistics dashboards and email report generation are not included here. They are supplied in the separate PRT idealo Premium component, manually downloaded and installed by the store administrator outside WordPress.org. This plugin does not install, download or update that component. It uses the same existing PRT subscription, not a secondsubscription.34 Advanced configuration, the assistant, statistics and email reports require the separate PRT idealo Premium component, downloaded and installed manually from PRT. They are not included in this WordPress.org connector. Both components use the same PRT subscription. 35 35 36 36 = Connector and hosted service = 37 37 38 PRT Feed for idealo connects WooCommerce to PRT's external catalog service. PRT servers retrieve native product data over authenticated HTTPS, evaluate the catalog, generate XML/CSV and host the current feeds. The PRT scheduler rebuilds every 15 minutes and after detected product changes, independently of visits or WordPress cron. Your HTTPS store must remain reachable with thisconnector active.38 PRT generates and hosts your XML and CSV feeds on its servers, with automatic updates every 15 minutes, even when nobody visits your store. Keep your store accessible over HTTPS and the connector active. 39 39 40 All local functionality included in this directory plugin is available without a license check. It includes connection settings, native catalog export, authenticated transport, a mirror of the hosted results, an anonymous aggregate access counter, and the PWS transport. The external feed service requires a PRT subscription because generation, publication and hosting take place on PRT servers. This is not a license-only service.40 The connector's included functions are available without a license check. A PRT subscription is required for the external service that processes your catalog, generates your feeds and keeps them available online. 41 41 42 42 The interface supports Italian, English, German, French and Spanish. PRT provides an independent integration. No endorsement by idealo or WooCommerce is implied. … … 46 46 The existing subscription is EUR 9 per month including VAT, with automatic renewals until cancelled and one 21-day trial per eligible store. Initial approved checkout includes the configuration/statistics option, 300 authorized clicks per paid cycle and EUR 0.03 per additional authorized click. Trial clicks are not billed. Installing either component alone never authorizes payment or changes an existing option. Stripe checkout requires the manager's explicit acceptance. 47 47 48 The premium component supplies advanced local features and their access controls. Disabling its option retains the same EUR 9 base subscription, continues feed and PWS with base rules, and preserves customizations for later restoration. New events during the disabled interval are not retroactively charged. Anonymous aggregate counts are distinct from consented attribution and billing events.48 Disabling the configuration/statistics option keeps the EUR 9 base subscription active. Feed and PWS continue with base rules, and your customizations are saved for later use. New clicks while this option is disabled do not incur CPC charges. Previously incurred charges remain payable. 49 49 50 Deactivating only the premium component first reconciles outstanding authorized usage and disables its option, leaving the base subscription and connector active. Deactivating or uninstalling the connector cancels the PRT subscription after successful reconciliation. If PRT is unreachable, the operation stops with an error instead of claiming cancellation succeeded.50 Deactivating only the Premium component disables its option and keeps the base subscription and connector active. Deactivating or uninstalling the connector cancels the PRT subscription once any outstanding usage has been processed. If the service is unreachable, cancellation stops with an error. Contact PRT to complete it. 51 51 52 52 Product information: https://www.prtflow.com/idealo-woocommerce … … 69 69 2. Open WooCommerce, idealo di PRT. Local connection settings are available without purchasing or connecting a service. 70 70 3. If you want the PRT hosted service, review its terms and cost summary and explicitly proceed to Stripe. 71 4. For advanced configuration, assistant, statistics and reports, manually install the separate PRT component using https://prtdev.com/apps/idealo-woocommerce/premium-install.html . The connector never installs external executable code.71 4. For advanced configuration, assistant, statistics and reports, manually install the separate PRT component using https://prtdev.com/apps/idealo-woocommerce/premium-install.html . 72 72 5. Set your market, shipping, delivery and payment conditions. Review the current hosted feed before sharing its private link with idealo. 73 73 6. For PWS, enter your idealo credentials, verify them and explicitly authorize sending offers. Agree the feed/PWS channel with idealo. 74 74 75 Existing direct idealo-prt installations must be migrated with PRT while preserving their identity and subscription. Do not deactivate the old direct connector as a migration shortcut because its deactivation cancels the subscription. Do not activate two connector distributions together.75 Already using a version downloaded from PRT? Contact support before switching to this connector to preserve your settings and subscription. Do not deactivate the existing connector or activate both versions together. 76 76 77 77 == External services and data == … … 79 79 = PRT = 80 80 81 Endpoint: https://prtdev.com/apps/idealo-woocommerce/api.php 81 After you accept the service summary and press Proceed, the connector sends PRT your store URL, installation details and connection credentials so it can register your store. It then regularly shares product titles, identifiers, prices, stock, images, product links and export settings to generate and host your feeds. Share feed links only with authorized recipients. 82 82 83 A fresh installation does not contact PRT until the administrator accepts the service summary and presses Proceed. Registration transmits the installation ID, HTTPS store URL, authentication token, private feed-token hash, connector version and return URL. After registration, authenticated scheduled requests synchronize native product titles, identifiers, prices, stock, images, product links and export conditions. The service evaluates and groups offers, hosts the XML/CSV output and returns a signed data-only mirror. Feed links contain access tokens, so share them only with authorized recipients. 84 85 PRT receives subscription choices, explicit authorizations and previously authorized usage event IDs/times during reconciliation. The connector can reconcile outstanding events created by the separate component even if that component is no longer active. It does not send raw orders, customer names, addresses, visitor IP addresses or PWS credentials to PRT. No visitor identifier or unique browsing history is created by its aggregate counter. 83 PRT also receives your subscription choices, payment authorizations and records of previously authorized usage to manage the service and billing. This connector does not send PRT full orders, customer names or addresses, visitor IP addresses or idealo PWS credentials. 86 84 87 85 Terms: https://prtdev.com/apps/idealo-woocommerce/legal.php?document=terms&lang=en … … 90 88 = Stripe = 91 89 92 Payment and subscription management use https://checkout.stripe.com and https://billing.stripe.com . The PRT server communicates with Stripe. This plugin does not receive card details or a Stripe secret key.90 Stripe handles payment and subscription management through https://checkout.stripe.com and https://billing.stripe.com . PRT sends Stripe the details needed to manage your subscription and charges. You enter payment details directly on Stripe. The plugin does not receive your card details. 93 91 94 92 Terms: https://stripe.com/legal … … 97 95 = idealo PWS = 98 96 99 idealo internet GmbH provides the optional Partner Web Service (PWS) to keep the merchant's offers synchronized with idealo. No request is sent to idealo until the administrator enters their own credentials and explicitly verifies the connection. Verification sends the client ID and secret over HTTPS to https://api.idealo.com/mer/businessaccount/api/v1/oauth/token to obtain an access token. Credentials remainencrypted in WordPress and are not sent to PRT.97 The optional idealo Partner Web Service (PWS), provided by idealo internet GmbH, keeps your offers synchronized in real time. When you enter your idealo credentials and verify the connection, they are sent securely to https://api.idealo.com for authentication. Your credentials are stored encrypted in WordPress and are not sent to PRT. 100 98 101 Only after the administrator also enables PWS, local scheduled synchronization sends the authorized bearer token, idealo shop ID, offer SKU and current offer fields to https://import.idealo.com/shop/{shop}/offer/{sku}. These fields can include product titles, identifiers, descriptions, prices, availability, delivery/payment/shipping conditions, images, product URLs and product-specific attributes. The adapter creates or updates offers, reads them back for verification and removes offers that are no longer eligible. It does not send orders or customer information to idealo. Bulk removals require a separate confirmation. Disable PWS to stop scheduledsynchronization.99 Only after you enable PWS, the connector regularly sends your idealo shop and product identifiers, product titles, descriptions, prices, availability, shipping and payment conditions, images, product links and relevant attributes to https://import.idealo.com . This updates eligible offers and removes offers that are no longer eligible. No orders or customer details are sent to idealo. Bulk removals require a separate confirmation. Disable PWS to stop synchronization. 102 100 103 This local adapter is not license-gated. It operates on a fresh authenticated service mirror and stops when that data is unavailable or stale. API acceptance is not proof of final publication on idealo. The merchant's actual listing agreement and country-specific conditions remain applicable.101 PWS synchronization pauses if current feed data is unavailable. Successful transmission does not guarantee publication on idealo. Your idealo agreement and the conditions for your country still apply. 104 102 105 103 Terms of service for merchant listings: https://partner.idealo.com/partner-idealo-com/uk/gtc 106 104 Privacy policy for business customers: https://partner.idealo.com/partner-idealo-com/de/datenschutzerklaerung 107 105 Merchant account and applicable agreements: https://business.idealo.com/ 108 API documentation: https://idealo.github.io/idealo-partner-api-docs/109 Feed documentation: https://idealo.github.io/csv-importer/en/csv/110 106 111 107 == Privacy == 112 108 113 The local counter records hourly product access totals from valid signed idealo landing links. It does not store visitor cookies, sessions, IP addresses, user agents or unique visitor records. Staff, recognizable bots and prefetches are excluded. It is an aggregate count, not a guaranteed unique human-click measurement. Ordinary hostinglogs are separate.109 The connector counts product visits from idealo in aggregate. It does not store visitor cookies, sessions, IP addresses, user agents or individual browsing histories. These totals are not a guaranteed count of unique human visitors. Your hosting provider's usual logs are separate. 114 110 115 The separate premium component documents its own optional consented attribution, assistant and reports. Those implementations are not included in this directory package. Customer and order data remain in WooCommerce. Review the service privacy notice and your own obligationsbefore enabling data sharing.111 The separate Premium component explains its own optional attribution, assistant and reporting features and any consent they require. Customer and order data remain in WooCommerce. Review the service privacy notice before enabling data sharing. 116 112 117 113 == Frequently Asked Questions == … … 119 115 = Is the PRT service free? = 120 116 121 No. Downloading the connector does not create a free service plan. The paid PRT service performs substantive catalog processing and feed publication on PRT servers. The local connector code is fully available without a license check.117 The connector is free to download and its included functions have no license check. The external PRT service that processes your catalog, generates feeds and hosts them requires a subscription. 122 118 123 119 = Does the premium component create a second subscription? = 124 120 125 No. Both components share the same installation identity, configuration and existing PRT subscription. Manually installing the component does not create or modify a payment authorization.121 No. Both components use the same PRT subscription. Installing the Premium component does not by itself authorize new payments. 126 122 127 123 = Are old feed generations used if a refresh fails? = … … 131 127 = Do updates require visitors? = 132 128 133 No. The PRT server schedules hosted builds. WooCommerce's queue supports local maintenance and timely change notifications and should run regularly.129 No. PRT updates the hosted feeds every 15 minutes even without visits. Keep your store online. Your hosting provider should also keep WooCommerce's scheduled tasks running for local updates and maintenance. 134 130 135 131 = Are feeds public? = 136 132 137 The links use private access tokens. Treat each full link as a credential.133 Feed links provide access to your catalog. Share them only with idealo and other authorized recipients. 138 134 139 == Source code and packaging==135 == Source code == 140 136 141 All PHP, JavaScript and CSS source files are included in this plugin. The files in assets/ are the human-readable, directly maintained runtime sources, not compiled or minified bundles. There are no third-party JavaScript libraries in this connector. No npm, webpack, transpilation, minification or external source download is needed to modify or run it. 142 143 assets/admin.js handles only the language form's native POST submission. assets/clean-link.js removes the signed product landing parameters from the visible browser address after the server has processed the request. CSS files contain the shared PRT interface styles and the WordPress host adapter. 144 145 No build step is required to use or modify the readable PHP, JavaScript and CSS files. Development-only Python tools are excluded from the installed plugin. 146 147 The standalone packaging script is publicly available at https://prtdev.com/apps/idealo-woocommerce/source/prt-feed-for-idealo-2.1.4-build.py.txt . Save it as build-package.py outside the plugin directory, then run: 148 149 python3 build-package.py /path/to/prt-feed-for-idealo /path/to/prt-feed-for-idealo-2.1.4.zip 150 151 This uses only the Python 3 standard library and creates a ZIP with one prt-feed-for-idealo/ root. Packaging copies these same readable runtime sources without compiling, obfuscating or transforming them. The script excludes development tools, hidden files, caches and unsupported file types. A JavaScript formatter may be used while editing. It is not a build dependency and no generated counterpart is required. 152 153 == Request security == 154 155 Administrative changes use POST forms with wp_nonce_field('prt_idealo'). The handler rejects other HTTP methods, checks current_user_can('manage_woocommerce') and validates check_admin_referer('prt_idealo') before processing input. Payment actions also require their own explicit confirmation. Visiting an admin screen or reading a return selector does not authorize checkout, cancellation, consent or configuration changes. 156 157 The server-to-server connector is not a browser-admin action. It requires a bounded POST JSON body, an installation-bound HMAC, an exact installation identity and a five-minute timestamp window. A WordPress session nonce is not an authentication mechanism for an external scheduler. The ownership challenge is read-only and returns only a keyed proof. Feed redirects require the private feed token. Public product counts require the exact product HMAC and the eligibility checks documented above. None of these machine/public routes relies on a privileged browser cookie. 137 The plugin includes its readable source code. No compilation is required. The packaging tool is available at https://prtdev.com/apps/idealo-woocommerce/source/prt-feed-for-idealo-2.1.4-build.py.txt . It is not needed to install or use the plugin. 158 138 159 139 == Changelog == -
prt-feed-for-idealo/trunk/readme.txt
r3773047 r3773088 32 32 The assistant in the separate advanced component helps you work with feed settings and existing product attributes. Review its suggestions and confirm them before applying changes. 33 33 34 Advanced local configuration, the assistant interface, statistics dashboards and email report generation are not included here. They are supplied in the separate PRT idealo Premium component, manually downloaded and installed by the store administrator outside WordPress.org. This plugin does not install, download or update that component. It uses the same existing PRT subscription, not a secondsubscription.34 Advanced configuration, the assistant, statistics and email reports require the separate PRT idealo Premium component, downloaded and installed manually from PRT. They are not included in this WordPress.org connector. Both components use the same PRT subscription. 35 35 36 36 = Connector and hosted service = 37 37 38 PRT Feed for idealo connects WooCommerce to PRT's external catalog service. PRT servers retrieve native product data over authenticated HTTPS, evaluate the catalog, generate XML/CSV and host the current feeds. The PRT scheduler rebuilds every 15 minutes and after detected product changes, independently of visits or WordPress cron. Your HTTPS store must remain reachable with thisconnector active.38 PRT generates and hosts your XML and CSV feeds on its servers, with automatic updates every 15 minutes, even when nobody visits your store. Keep your store accessible over HTTPS and the connector active. 39 39 40 All local functionality included in this directory plugin is available without a license check. It includes connection settings, native catalog export, authenticated transport, a mirror of the hosted results, an anonymous aggregate access counter, and the PWS transport. The external feed service requires a PRT subscription because generation, publication and hosting take place on PRT servers. This is not a license-only service.40 The connector's included functions are available without a license check. A PRT subscription is required for the external service that processes your catalog, generates your feeds and keeps them available online. 41 41 42 42 The interface supports Italian, English, German, French and Spanish. PRT provides an independent integration. No endorsement by idealo or WooCommerce is implied. … … 46 46 The existing subscription is EUR 9 per month including VAT, with automatic renewals until cancelled and one 21-day trial per eligible store. Initial approved checkout includes the configuration/statistics option, 300 authorized clicks per paid cycle and EUR 0.03 per additional authorized click. Trial clicks are not billed. Installing either component alone never authorizes payment or changes an existing option. Stripe checkout requires the manager's explicit acceptance. 47 47 48 The premium component supplies advanced local features and their access controls. Disabling its option retains the same EUR 9 base subscription, continues feed and PWS with base rules, and preserves customizations for later restoration. New events during the disabled interval are not retroactively charged. Anonymous aggregate counts are distinct from consented attribution and billing events.48 Disabling the configuration/statistics option keeps the EUR 9 base subscription active. Feed and PWS continue with base rules, and your customizations are saved for later use. New clicks while this option is disabled do not incur CPC charges. Previously incurred charges remain payable. 49 49 50 Deactivating only the premium component first reconciles outstanding authorized usage and disables its option, leaving the base subscription and connector active. Deactivating or uninstalling the connector cancels the PRT subscription after successful reconciliation. If PRT is unreachable, the operation stops with an error instead of claiming cancellation succeeded.50 Deactivating only the Premium component disables its option and keeps the base subscription and connector active. Deactivating or uninstalling the connector cancels the PRT subscription once any outstanding usage has been processed. If the service is unreachable, cancellation stops with an error. Contact PRT to complete it. 51 51 52 52 Product information: https://www.prtflow.com/idealo-woocommerce … … 69 69 2. Open WooCommerce, idealo di PRT. Local connection settings are available without purchasing or connecting a service. 70 70 3. If you want the PRT hosted service, review its terms and cost summary and explicitly proceed to Stripe. 71 4. For advanced configuration, assistant, statistics and reports, manually install the separate PRT component using https://prtdev.com/apps/idealo-woocommerce/premium-install.html . The connector never installs external executable code.71 4. For advanced configuration, assistant, statistics and reports, manually install the separate PRT component using https://prtdev.com/apps/idealo-woocommerce/premium-install.html . 72 72 5. Set your market, shipping, delivery and payment conditions. Review the current hosted feed before sharing its private link with idealo. 73 73 6. For PWS, enter your idealo credentials, verify them and explicitly authorize sending offers. Agree the feed/PWS channel with idealo. 74 74 75 Existing direct idealo-prt installations must be migrated with PRT while preserving their identity and subscription. Do not deactivate the old direct connector as a migration shortcut because its deactivation cancels the subscription. Do not activate two connector distributions together.75 Already using a version downloaded from PRT? Contact support before switching to this connector to preserve your settings and subscription. Do not deactivate the existing connector or activate both versions together. 76 76 77 77 == External services and data == … … 79 79 = PRT = 80 80 81 Endpoint: https://prtdev.com/apps/idealo-woocommerce/api.php 81 After you accept the service summary and press Proceed, the connector sends PRT your store URL, installation details and connection credentials so it can register your store. It then regularly shares product titles, identifiers, prices, stock, images, product links and export settings to generate and host your feeds. Share feed links only with authorized recipients. 82 82 83 A fresh installation does not contact PRT until the administrator accepts the service summary and presses Proceed. Registration transmits the installation ID, HTTPS store URL, authentication token, private feed-token hash, connector version and return URL. After registration, authenticated scheduled requests synchronize native product titles, identifiers, prices, stock, images, product links and export conditions. The service evaluates and groups offers, hosts the XML/CSV output and returns a signed data-only mirror. Feed links contain access tokens, so share them only with authorized recipients. 84 85 PRT receives subscription choices, explicit authorizations and previously authorized usage event IDs/times during reconciliation. The connector can reconcile outstanding events created by the separate component even if that component is no longer active. It does not send raw orders, customer names, addresses, visitor IP addresses or PWS credentials to PRT. No visitor identifier or unique browsing history is created by its aggregate counter. 83 PRT also receives your subscription choices, payment authorizations and records of previously authorized usage to manage the service and billing. This connector does not send PRT full orders, customer names or addresses, visitor IP addresses or idealo PWS credentials. 86 84 87 85 Terms: https://prtdev.com/apps/idealo-woocommerce/legal.php?document=terms&lang=en … … 90 88 = Stripe = 91 89 92 Payment and subscription management use https://checkout.stripe.com and https://billing.stripe.com . The PRT server communicates with Stripe. This plugin does not receive card details or a Stripe secret key.90 Stripe handles payment and subscription management through https://checkout.stripe.com and https://billing.stripe.com . PRT sends Stripe the details needed to manage your subscription and charges. You enter payment details directly on Stripe. The plugin does not receive your card details. 93 91 94 92 Terms: https://stripe.com/legal … … 97 95 = idealo PWS = 98 96 99 idealo internet GmbH provides the optional Partner Web Service (PWS) to keep the merchant's offers synchronized with idealo. No request is sent to idealo until the administrator enters their own credentials and explicitly verifies the connection. Verification sends the client ID and secret over HTTPS to https://api.idealo.com/mer/businessaccount/api/v1/oauth/token to obtain an access token. Credentials remainencrypted in WordPress and are not sent to PRT.97 The optional idealo Partner Web Service (PWS), provided by idealo internet GmbH, keeps your offers synchronized in real time. When you enter your idealo credentials and verify the connection, they are sent securely to https://api.idealo.com for authentication. Your credentials are stored encrypted in WordPress and are not sent to PRT. 100 98 101 Only after the administrator also enables PWS, local scheduled synchronization sends the authorized bearer token, idealo shop ID, offer SKU and current offer fields to https://import.idealo.com/shop/{shop}/offer/{sku}. These fields can include product titles, identifiers, descriptions, prices, availability, delivery/payment/shipping conditions, images, product URLs and product-specific attributes. The adapter creates or updates offers, reads them back for verification and removes offers that are no longer eligible. It does not send orders or customer information to idealo. Bulk removals require a separate confirmation. Disable PWS to stop scheduledsynchronization.99 Only after you enable PWS, the connector regularly sends your idealo shop and product identifiers, product titles, descriptions, prices, availability, shipping and payment conditions, images, product links and relevant attributes to https://import.idealo.com . This updates eligible offers and removes offers that are no longer eligible. No orders or customer details are sent to idealo. Bulk removals require a separate confirmation. Disable PWS to stop synchronization. 102 100 103 This local adapter is not license-gated. It operates on a fresh authenticated service mirror and stops when that data is unavailable or stale. API acceptance is not proof of final publication on idealo. The merchant's actual listing agreement and country-specific conditions remain applicable.101 PWS synchronization pauses if current feed data is unavailable. Successful transmission does not guarantee publication on idealo. Your idealo agreement and the conditions for your country still apply. 104 102 105 103 Terms of service for merchant listings: https://partner.idealo.com/partner-idealo-com/uk/gtc 106 104 Privacy policy for business customers: https://partner.idealo.com/partner-idealo-com/de/datenschutzerklaerung 107 105 Merchant account and applicable agreements: https://business.idealo.com/ 108 API documentation: https://idealo.github.io/idealo-partner-api-docs/109 Feed documentation: https://idealo.github.io/csv-importer/en/csv/110 106 111 107 == Privacy == 112 108 113 The local counter records hourly product access totals from valid signed idealo landing links. It does not store visitor cookies, sessions, IP addresses, user agents or unique visitor records. Staff, recognizable bots and prefetches are excluded. It is an aggregate count, not a guaranteed unique human-click measurement. Ordinary hostinglogs are separate.109 The connector counts product visits from idealo in aggregate. It does not store visitor cookies, sessions, IP addresses, user agents or individual browsing histories. These totals are not a guaranteed count of unique human visitors. Your hosting provider's usual logs are separate. 114 110 115 The separate premium component documents its own optional consented attribution, assistant and reports. Those implementations are not included in this directory package. Customer and order data remain in WooCommerce. Review the service privacy notice and your own obligationsbefore enabling data sharing.111 The separate Premium component explains its own optional attribution, assistant and reporting features and any consent they require. Customer and order data remain in WooCommerce. Review the service privacy notice before enabling data sharing. 116 112 117 113 == Frequently Asked Questions == … … 119 115 = Is the PRT service free? = 120 116 121 No. Downloading the connector does not create a free service plan. The paid PRT service performs substantive catalog processing and feed publication on PRT servers. The local connector code is fully available without a license check.117 The connector is free to download and its included functions have no license check. The external PRT service that processes your catalog, generates feeds and hosts them requires a subscription. 122 118 123 119 = Does the premium component create a second subscription? = 124 120 125 No. Both components share the same installation identity, configuration and existing PRT subscription. Manually installing the component does not create or modify a payment authorization.121 No. Both components use the same PRT subscription. Installing the Premium component does not by itself authorize new payments. 126 122 127 123 = Are old feed generations used if a refresh fails? = … … 131 127 = Do updates require visitors? = 132 128 133 No. The PRT server schedules hosted builds. WooCommerce's queue supports local maintenance and timely change notifications and should run regularly.129 No. PRT updates the hosted feeds every 15 minutes even without visits. Keep your store online. Your hosting provider should also keep WooCommerce's scheduled tasks running for local updates and maintenance. 134 130 135 131 = Are feeds public? = 136 132 137 The links use private access tokens. Treat each full link as a credential.133 Feed links provide access to your catalog. Share them only with idealo and other authorized recipients. 138 134 139 == Source code and packaging==135 == Source code == 140 136 141 All PHP, JavaScript and CSS source files are included in this plugin. The files in assets/ are the human-readable, directly maintained runtime sources, not compiled or minified bundles. There are no third-party JavaScript libraries in this connector. No npm, webpack, transpilation, minification or external source download is needed to modify or run it. 142 143 assets/admin.js handles only the language form's native POST submission. assets/clean-link.js removes the signed product landing parameters from the visible browser address after the server has processed the request. CSS files contain the shared PRT interface styles and the WordPress host adapter. 144 145 No build step is required to use or modify the readable PHP, JavaScript and CSS files. Development-only Python tools are excluded from the installed plugin. 146 147 The standalone packaging script is publicly available at https://prtdev.com/apps/idealo-woocommerce/source/prt-feed-for-idealo-2.1.4-build.py.txt . Save it as build-package.py outside the plugin directory, then run: 148 149 python3 build-package.py /path/to/prt-feed-for-idealo /path/to/prt-feed-for-idealo-2.1.4.zip 150 151 This uses only the Python 3 standard library and creates a ZIP with one prt-feed-for-idealo/ root. Packaging copies these same readable runtime sources without compiling, obfuscating or transforming them. The script excludes development tools, hidden files, caches and unsupported file types. A JavaScript formatter may be used while editing. It is not a build dependency and no generated counterpart is required. 152 153 == Request security == 154 155 Administrative changes use POST forms with wp_nonce_field('prt_idealo'). The handler rejects other HTTP methods, checks current_user_can('manage_woocommerce') and validates check_admin_referer('prt_idealo') before processing input. Payment actions also require their own explicit confirmation. Visiting an admin screen or reading a return selector does not authorize checkout, cancellation, consent or configuration changes. 156 157 The server-to-server connector is not a browser-admin action. It requires a bounded POST JSON body, an installation-bound HMAC, an exact installation identity and a five-minute timestamp window. A WordPress session nonce is not an authentication mechanism for an external scheduler. The ownership challenge is read-only and returns only a keyed proof. Feed redirects require the private feed token. Public product counts require the exact product HMAC and the eligibility checks documented above. None of these machine/public routes relies on a privileged browser cookie. 137 The plugin includes its readable source code. No compilation is required. The packaging tool is available at https://prtdev.com/apps/idealo-woocommerce/source/prt-feed-for-idealo-2.1.4-build.py.txt . It is not needed to install or use the plugin. 158 138 159 139 == Changelog ==
Note:
See TracChangeset
for help on using the changeset viewer.
