cointacted

<p><strong>Cointacted Social Terminal</strong> adds a beautiful, modern, keyboard-first terminal interface to any WordPress site.<br />
It works seamlessly across pages, posts, builders, communities, dashboards, and custom layouts.</p>
<p>The terminal provides a clean command-driven experience with:</p>
<ul>
<li>🎨 Fully theme-inherited UI</li>
<li>⌨️ Interactive CLI-style input</li>
<li>📐 Monospace-accurate typing + perfect cursor alignment</li>
<li>🧩 Extensible command registry</li>
<li>🦊 Safe, optional, read-only wallet awareness</li>
<li>🛡️ Optional Cloudflare Turnstile protection (anti-bot)</li>
<li>🔌 Add-on architecture for advanced features</li>
</ul>
<p>The terminal can optionally be protected with Cloudflare Turnstile.<br />
When enabled, the terminal remains locked until the visitor successfully passes the security check.<br />
This feature is fully configurable and disabled by default.</p>
<p>This is the core of the <strong>Cointacted Ecosystem</strong> — lightweight, free, safe, and designed to integrate everywhere.</p>
<h3>✨ Key Features</h3>
<ul>
<li><strong>Interactive terminal UI</strong> – Fast, responsive, keyboard-friendly.</li>
<li><strong>Automatic theme matching</strong> – Uses your theme’s buttons and styles.</li>
<li><strong>Accurate prompt + cursor</strong> – Perfect alignment for a real terminal feel.</li>
<li><strong>Command registry</strong> – Add, remove, or extend commands.</li>
<li><strong>JS Developer API</strong> – Register custom commands or hook into output events.</li>
<li><strong>Secure by design</strong>
<ul>
<li>Normalized input  </li>
<li>Command access rules  </li>
<li>Server-side validation  </li>
<li>Cloudflare Turnstile support</li>
</ul>
</li>
<li><strong>Optional wallet awareness</strong>
<ul>
<li>Only detects what the browser already exposes  </li>
<li>Never requests connection or signs anything</li>
</ul>
</li>
<li><strong>Add-on ready</strong> – Extend functionality without touching the core.</li>
</ul>
<p>Works in:<br />
– Gutenberg / FSE<br />
– Elementor, Divi, Bricks, Oxygen<br />
– BuddyBoss, FluentCommunity, Peepso<br />
– Membership sites<br />
– Web3 dashboards<br />
– Custom frontend admin tools</p>
<h3>🛡️ Cloudflare Turnstile Security (Optional)</h3>
<p>The terminal can be protected by <strong>Cloudflare Turnstile</strong> to prevent automated abuse.</p>
<ul>
<li>Invisible challenge runs on page load  </li>
<li>Server verifies tokens before unlocking the terminal  </li>
<li>If verification fails, the terminal stays locked  </li>
<li>Fully optional — disabled by default  </li>
<li>No user data is sent anywhere except to Cloudflare’s Turnstile API (standard behavior)</li>
</ul>
<p>Turnstile is loaded via <code>wp_enqueue_script()</code> and used only when enabled.</p>
<h3>🧩 Optional Wallet Awareness (Read-Only)</h3>
<p>Admin can activate/deactivate BLockchain completely in plugin settings.</p>
<p>The core plugin includes a <strong>safe, read-only</strong> wallet detector:</p>
<ul>
<li>Detects if a browser wallet exists (e.g., MetaMask)</li>
<li>Reads exposed account / chain info only if the wallet is <strong>already unlocked</strong></li>
<li>Shows chain ID, network name, and address</li>
</ul>
<p>✔ The core plugin <strong>never</strong>:<br />
– requests connection<br />
– triggers popups<br />
– reads private keys<br />
– signs messages<br />
– makes RPC calls</p>
<p>Blockchain actions require separate add-ons.</p>
<h3>🧩 Upcoming Official Add-Ons</h3>
<p>Social Mining:<br />
– Shortcodes integration<br />
– Social Mining (on-chain logs & claimable rewards)<br />
– EVM Integration<br />
– Solana Integration</p>
<p>Gamification / Community:<br />
– myCred Integration<br />
– GamiPress Integration<br />
– BuddyBoss Integration<br />
– FluentCommunity Integration<br />
– Peepso Integration</p>
<p>Advanced:<br />
– AI Commands Add-On<br />
– Analytics Add-On<br />
– Customization Pack (themes, cursors, styles)<br />
– And many more to come</p>
<h3>🧠 Developer API & Add-On Integration</h3>
<p>Cointacted Social Terminal is built around a <strong>secure core + add-on architecture</strong>.</p>
<p>The core plugin provides:<br />
– the terminal UI<br />
– command registry<br />
– security model<br />
– permission enforcement</p>
<p>All custom functionality (commands, integrations, blockchain actions, social features) is implemented via add-ons.</p>
<p>Developers can:<br />
– register new terminal commands (PHP)<br />
– control command access (public / user / capability-based)<br />
– hook into terminal output events<br />
– append output lines from JavaScript<br />
– integrate with third-party plugins and SPAs</p>
<p>All command execution is <strong>server-side only</strong> for security.</p>
<p>📘 Full developer documentation:<br />
https://docs.cointacted.com</p>
<h3>⛶️️ Screenshots</h3>
<ol>
<li>The Terminal interface displayed on the frontend.</li>
<li>The Help panel showing available command groups and usage examples.</li>
<li>Optional wallet-awareness summary (read-only) when blockchain features are enabled.</li>
<li>General settings page for URLs, guest mode, and terminal behavior.</li>
<li>Commands settings page showing command groups and configuration options.</li>
<li>Security settings page with Cloudflare Turnstile configuration and enforcement modes.</li>
<li>Blockchain settings page with the global blockchain-enable toggle.</li>
</ol>
<h3>🌍️ External services</h3>
<p>This plugin optionally integrates with Cloudflare Turnstile to protect the terminal interface from automated abuse and bots.</p>
<p>Cloudflare Turnstile is a privacy-friendly CAPTCHA alternative used only when enabled by the site administrator in the plugin settings.</p>
<p>When Cloudflare Turnstile is enabled:<br />
– The Turnstile JavaScript is loaded from Cloudflare servers.<br />
– A verification request is sent to Cloudflare when a user accesses the terminal.<br />
– The verification is used to determine whether the terminal should be unlocked for use.</p>
<p>Data sent to Cloudflare includes:<br />
– The Turnstile challenge response token generated in the browser.<br />
– The visitor’s IP address (as part of the verification request).</p>
<p>This service is provided by Cloudflare, Inc.</p>
<p>Cloudflare Turnstile:<br />
– Terms of Service: https://www.cloudflare.com/terms/<br />
– Privacy Policy: https://www.cloudflare.com/privacypolicy/<br />
– Turnstile documentation: https://developers.cloudflare.com/turnstile/</p>
<h3>🧾 Changelog</h3>
<h4>1.0.3</h4>
<ul>
<li>Updated wallet integration to remain compatible with recent MetaMask API and provider changes.</li>
<li>Improved terminal UX and responsiveness across desktop and mobile devices.</li>
<li>Refined command input behavior for faster, terminal-style interaction, including keyboard command history navigation.</li>
<li>Removed the terminal header for a cleaner, native terminal experience.</li>
<li>Improved automatic link detection in terminal output, including support for links without protocol.</li>
<li>General internal cleanup and stability improvements across core terminal rendering and input handling.</li>
<li>Documentation updates and clarifications for optional third-party services used by the plugin.</li>
</ul>
<h4>1.0.2</h4>
<ul>
<li>Moved all inline JavaScript from templates to proper WordPress enqueue flows using wp_add_inline_script().</li>
<li>Scoped Cloudflare Turnstile loading strictly to pages where the terminal is rendered.</li>
<li>Added clear documentation of optional Cloudflare Turnstile usage under External Services in the readme.</li>
<li>Improved asset loading structure to fully comply with WordPress.org plugin guidelines.</li>
<li>Added internal hooks and structural support for a forthcoming FluentCommunity add-on providing native SPA integration.</li>
<li>Prepared core logic to allow the terminal to run as a native FluentCommunity SPA page (no full page reloads), with automatic light/dark mode adaptation and social-network-specific terminal commands, delivered via a separate add-on.</li>
<li>Minor internal refactoring to ensure consistent script initialization and safer execution order.</li>
</ul>
<h4>1.0.1</h4>
<ul>
<li>Added <strong>Security</strong> settings page with full Cloudflare Turnstile integration to protect the terminal from bots and automated abuse.</li>
<li>Added <strong>Blockchain</strong> settings page with a global toggle to fully enable/disable all blockchain-related features.</li>
<li>Implemented server-side Turnstile verification and terminal lock/unlock logic for strict anti-bot protection.</li>
<li>Added advanced command payload normalization, sanitization and argument validation (including Unicode/control character stripping).</li>
<li>Added base64 and suspicious-input detection guards in the dispatcher for improved command security.</li>
<li>Enhanced permission model: registry-driven command access rules, capability checks, and guest-mode safeguards.</li>
<li>Introduced global wallet-awareness toggle and terminal behavior changes when blockchain features are disabled.</li>
<li>Improved help system to dynamically hide blockchain/wallet command groups when disabled.</li>
<li>Localized all assets: replaced external logo with internal plugin asset and enqueued Turnstile using wp_enqueue_script().</li>
<li>General structural hardening and consistency improvements across core terminal logic, REST API, and JS–PHP command pipeline.</li>
</ul>
<h4>1.0.0</h4>
<ul>
<li>🎉 First stable public release.</li>
<li>Strong theme isolation.</li>
<li>Added safe wallet detection (read-only).</li>
<li>Expanded developer API & command registry.</li>
<li>Add-on ecosystem architecture implemented.</li>
</ul>
<h3>🔒 Privacy</h3>
<p>Cointacted Social Terminal does not collect, track, or store personal data by default.</p>
<p>The plugin does not send user data to external services and does not interact with blockchains unless optional features are explicitly enabled by the site administrator.</p>
<p>Wallet addresses are only stored locally in WordPress user metadata when the administrator enables wallet persistence. No private keys are ever accessed or stored.</p>
<p>If Cloudflare Turnstile is enabled, the plugin communicates with Cloudflare to verify whether a visitor is a human before allowing access to the terminal. This verification involves sending a challenge response token and the visitor’s IP address to Cloudflare for validation.</p>
<p>This data is processed according to Cloudflare’s privacy policy and is not stored by the plugin itself.</p>
<p>Cloudflare Privacy Policy:<br />
https://www.cloudflare.com/privacypolicy/</p>
<p>Cointacted Social Terminal is designed to be GDPR-friendly and minimizes data processing wherever possible.</p>
<h3>🆘 Support</h3>
<p>Documentation: https://docs.cointacted.com<br />
Plugin website: https://cointacted.com<br />
Support: https://cointacted.com/support</p>


Cointacted – Social Terminal

A sleek, interactive terminal UI for WordPress with custom commands, developer API, and safe, read-only wallet awareness.

sakurainternet

<p><strong>Auto Login for Sakura Rental Server</strong> allows administrators to issue one-time, time-limited auto-login URLs using HMAC signatures.<br />
This is useful for secure temporary access or system integration.</p>
<p>Features:<br />
– Secure auto-login with one-time tokens<br />
– Tokens are HMAC-signed and invalidated after use<br />
– Token issuance and usage history (up to 100 entries per user)<br />
– Records IP address and username of the issuer<br />
– Rate limiting: 1 request per second per IP<br />
– WP-CLI commands for token generation and history inspection</p>
<p>Example use cases:<br />
– Temporarily granting admin access<br />
– Safe automatic login from external systems<br />
– Keeping an audit log of who issued a token and from where</p>
<h3>Usage</h3>
<h3>Generate a token via CLI</h3>
<pre><code>wp auto-login-for-sakura-rental-server generate <user_id> [–expires=] [–remote_addr=] [–username=]
</code></pre>
<p>Example:</p>
<ul>
<li>Default expiration time: 300 seconds  </li>
<li><code>--expires</code> and <code>--username</code> are optional</li>
</ul>
<h3>Check issue history</h3>
<p>Token history is stored in the user meta key <code>sakura_auto_login_history</code>.<br />
You can check it via WP-CLI:</p>
<p>wp user meta get  sakura_auto_login_history</p>
<h3>Auto-login URL format</h3>
<pre><code>https://example.com/?rs_auto_login_token=<64-character HMAC token>
</code></pre>
<p>Visiting the URL will log in as the corresponding user and redirect to the admin dashboard.</p>
<h3>Security Notes</h3>
<ul>
<li>Tokens are invalidated immediately after use (one-time only)</li>
<li>Issue and usage history includes IP address, issuer username, and timestamps</li>
<li>Stored using <code>update_option()</code> for caching compatibility</li>
<li>HTTPS is strongly recommended</li>
</ul>


Auto Login for Sakura Rental Server

Provides one-time auto-login URLs with HMAC signatures and time limits.

Cointacted – Social Terminal vs Auto Login for Sakura Rental Server