Atte Liimatainen

<p>WordPress plugin that helps to serve content through REST routes and gives<br />
customizability to developers through filters.</p>
<h3>Available Routes</h3>
<ul>
<li><code>/wp-json/arha/v1/post</code></li>
<li><code>/wp-json/arha/v1/page</code></li>
<li><code>/wp-json/arha/v1/options</code></li>
<li><code>/wp-json/arha/v1/archive</code></li>
</ul>
<h3>Example queries</h3>
<ul>
<li><code>/wp-json/arha/v1/post?post_type=POST_TYPE&slug=SLUG</code></li>
<li><code>/wp-json/arha/v1/page?path=PATH</code></li>
<li><code>/wp-json/arha/v1/options</code></li>
<li><code>/wp-json/arha/v1/archive?post_type=POST_TYPE&posts_per_page=POSTS_PER_PAGE&paged=PAGED&orderby=ORDERBY&order=ORDER</code></li>
</ul>
<h3>tax_query and meta_query in archive-route</h3>
<ul>
<li><code>tax_query</code> and <code>meta_query</code> are supported and they work how the query is built for it in <code>new WP_Query()</code></li>
<li>both needs their values to bes passed in as stringified json</li>
</ul>
<h3>Multiple post_types in archive-route</h3>
<ul>
<li>To pass multiple post_types in archive-route, use syntax that lets PHP read GET-param as an array. https://stackoverflow.com/a/9547490</li>
</ul>
<h3>Filters</h3>
<ul>
<li>
<p>To exclude querying specific post types from <code>post</code>– and <code>archive</code>-routes, you<br />
can use following filters:</p>
<p>`<br />
add_filter(‘arha_routes/archive_excluded_post_types’, ‘exclude_post_types’);<br />
add_filter(‘arha_routes/post_excluded_post_types’, ‘exclude_post_types’);</p>
</li>
</ul>
<p>function exclude_post_types($excluded_post_types) {<br />
  $excluded_post_types = [‘post’];<br />
  return $excluded_post_types;<br />
}<br />
    `</p>
<ul>
<li>To format <code>post</code>-route’s post before it’s served to client, use <code>arha_routes/format_post</code>-filter<br />
`<br />
add_filter(‘arha_routes/format_post’, ‘format_post’);</li>
</ul>
<p>function format_post($post) {<br />
  return $post;<br />
}<br />
    `</p>
<ul>
<li>To format <code>page</code>-route’s post before it’s served to client, use <code>arha_routes/format_page</code>-filter<br />
`<br />
add_filter(‘arha_routes/format_page’, ‘format_page’);</li>
</ul>
<p>function format_page($page) {<br />
  return $page;<br />
}<br />
    `</p>
<ul>
<li>
<p>To format <code>archive</code>-route’s posts before they are served to client, use <code>arha_routes/format_archive_post</code>-filter</p>
<p><code>add_filter('arha_routes/format_archive_post', 'format_archive_post');<br />
function format_archive_post($post) {<br />
return $post;<br />
}</code></p>
</li>
<li>
<p><code>options</code>-route returns empty result by default. To add content to it, use <code>arha_routes/format_options</code>-filter<br />
`<br />
add_filter(‘arha_routes/format_options’, ‘format_options’);</p>
</li>
</ul>
<p>function format_options($options) {<br />
  return $options;<br />
}<br />
    `</p>
<ul>
<li>
<p>By default Arha Routes returns only published content with post-, page- and archive-route, this can be modified by adding following filters.<br />
`<br />
// for archive route<br />
add_filter(‘arha_routes/allowed_post_statuses_archive’, ‘allowed_post_statuses’);<br />
// for post route<br />
add_filter(‘arha_routes/allowed_post_statuses_post’, ‘allowed_post_statuses’);<br />
// for page route<br />
add_filter(‘arha_routes/allowed_post_statuses_page’, ‘allowed_post_statuses’);<br />
function allowed_post_statuses($post_statuses) {<br />
// … change post_statuses array</p>
<p>return $post_statuses;<br />
}<br />
`<br />
After adding setting up these filters, request can include “post_status” parameter and it will be compared to $post_statuses array.</p>
</li>
</ul>
<h3>SearchWP</h3>
<p>Arha Routes supports SearchWP-plugin, which lets WP users to make keyword search engine for their content.</p>
<p>Activating SearchWP-plugin adds optional keyword-search functionality to <code>archive</code>-route. This is done by adding <code>s=KEYWORD</code> to the route<br />
– Example: <code>/wp-json/arha/v1/archive?post_type=products&posts_per_page=10&paged=1&orderby=date&order=ASC&s=monitor</code></p>
<h3>Polylang</h3>
<p>Arha Routes supports Polylang-plugin, which allows users to create content in multiple languages.</p>
<p>Activating Polylang changes how endpoints work:</p>
<ul>
<li>All routes require additional <code>lang</code>-param
<ul>
<li>Example: <code>/wp-json/arha/v1/archive?post_type=products&posts_per_page=10&paged=1&orderby=date&order=ASC&lang=en</code></li>
</ul>
</li>
<li><code>page</code>-route doesn’t support language prefix in path
<ul>
<li>Example: Permalink <code>/zh/info</code>, use like this <code>/wp-json/arha/v1/page?path=/info&lang=zh</code></li>
<li>Example: Permalink <code>/en/info/test</code>, use like this <code>/wp-json/arha/v1/page?path=/info/test&lang=zh</code></li>
</ul>
</li>
<li><code>options</code>-route passes <code>lang</code>-param forward to <code>arha_routes/format_options</code>-filter<br />
<code>add_filter('arha_routes/format_options', 'format_options', 10, 2);<br />
function format_options($options, $lang) {<br />
return $options;<br />
}</code></li>
</ul>
<h3>Polylang + SearchWP</h3>
<p>In order to make these two plugins work together, you need to add extra plugin to WP installation.</p>
<p>https://searchwp.com/extensions/polylang-integration/</p>


Arha Routes

Wordpress plugin that helps to serve content through REST routes and gives customizability to developers through filters.

WebFiable

<p><strong>Improve your site’s security posture and configuration health with monitoring and recommendations.</strong></p>
<p>Webfiable Info is the on-site companion for the Webfiable security service (https://webfiable.com). It securely gathers information about your site’s WordPress version, plugins, themes, and basic site metadata and registers your site with Webfiable so you can receive ongoing reports via email. You stay in control: consent is explicit, and the public endpoint is opt-in and verified on save.</p>
<p>During the white march period, there is no separate signup or billing – the plugin registers your site automatically from the settings screen and you can use the service for free. A subscription may be required in the future; we will notify administrators well in advance.</p>
<h3>Features</h3>
<ul>
<li><strong>One-click registration</strong>: Enter a report recipient email, grant consent, and enable the endpoint; Webfiable Info verifies the endpoint and registers the site automatically.</li>
<li><strong>Opt-in endpoint</strong>: The public <code>/webfiable</code> endpoint is disabled by default and verified when enabled. If verification or registration fails, the plugin safely disables it.</li>
<li><strong>Consent-aware behavior</strong>: Turning off consent simply saves your choice and disables the endpoint; you can re-enable later.</li>
<li><strong>Lightweight by design</strong>: No heavy background jobs; the endpoint serves inventory on demand and runs in milliseconds.</li>
<li><strong>Secure by default</strong>: Uses hybrid encryption (AES-256 + RSA-2048) to transport data.</li>
<li><strong>Part of the Webfiable service</strong>: Currently in white march (early access) and free to use; a subscription may be required in the future. Learn more at https://webfiable.com.</li>
</ul>
<h3>Security Features</h3>
<p>Webfiable Info is built with security at its core, ensuring that your website’s data is protected at every stage:</p>
<ul>
<li><strong>Hybrid Encryption</strong>: Combines AES and RSA. The inventory is encrypted with AES-256-CBC; the AES key is encrypted with RSA-2048.</li>
<li><strong>Fresh IV per response</strong>: Each response uses a new IV so ciphertext is always unique.</li>
<li><strong>Public endpoint, private content</strong>: The <code>/webfiable</code> endpoint can be accessed by anyone, but the payload is encrypted for Webfiable only.</li>
<li><strong>Rate limiting</strong>: Basic per-IP rate limiting reduces abuse.</li>
</ul>
<h3>Why It Is Secure</h3>
<ol>
<li><strong>Strong transport</strong>: AES-256 for data, RSA-2048 for the key – only Webfiable can decrypt.</li>
<li><strong>Unique IVs</strong>: Each response is unique even for identical content.</li>
<li><strong>Minimal inventory</strong>: Only software inventory and basic metadata needed for analysis; no credentials or content are collected.</li>
</ol>
<h3>License</h3>
<p>This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version.</p>


Webfiable Info

Connect your site to Webfiable (webfiable.com) to track config health and get security recommendations. Public early access (white march). Free.

Arha Routes vs Webfiable Info