Boris Volkovich

<p>If you need a simple plugin to navigate through your posts by first letter use this plugin.</p>


WP Alphabetic Navigation

David Marín Carreño

<p>DFX Parish Retreat Letters lets your parish manage the full lifecycle of confidential personal messages for retreat attendants — from collecting letters through a public web form to printing them securely in the admin, while keeping every piece of content fully encrypted and every action fully audited.</p>
<h4>How it works</h4>
<ol>
<li><strong>Create a retreat</strong> and register your attendants.</li>
<li><strong>Share each attendant’s unique, private URL</strong> with the people who want to write to them — family, friends, spiritual directors.</li>
<li><strong>Writers fill in the form</strong> on a clean public page: they can type a rich-text message, attach images or documents, and agree to a legal disclaimer. A simple arithmetic CAPTCHA protects against bots.</li>
<li><strong>Messages are stored encrypted</strong> in the database. Nobody can read them by browsing the admin — they are only revealed at print time.</li>
<li><strong>Authorised staff print the messages</strong> from the admin panel. Each print is logged with the user’s name, timestamp, and IP address.</li>
<li><strong>Messages are handed to attendants</strong> during or after the retreat.</li>
</ol>
<h4>Retreat management</h4>
<ul>
<li>Create retreats with name, location, start and end dates, and a custom welcome message shown on the submission form.</li>
<li>Set a legal disclaimer text and an acceptance checkbox label that writers must tick before they can submit.</li>
<li>Enable or disable optional <strong>Notes</strong> and <strong>Internal Notes</strong> fields per retreat (Notes are exportable; Internal Notes are not).</li>
<li>Set custom <strong>body CSS classes</strong> on the message-form page per retreat, so each retreat can use a different visual style.</li>
<li>Choose a custom <strong>header block</strong> and <strong>footer block</strong> (any WordPress block or template part) to brand the submission form page.</li>
<li>Delete a retreat together with all its attendants and messages in one action.</li>
</ul>
<h4>Attendant management</h4>
<ul>
<li>Add attendants individually or <strong>import them from a CSV file</strong> (supports merge mode to add emergency-contact data without overwriting existing records).</li>
<li>Each attendant stores: name, surnames, date of birth, and the following optional fields — notes, internal notes, emergency-contact details (name, surnames, relationship, email), inviting person, and incompatibilities.</li>
<li><strong>Export attendants to CSV</strong> including their unique message URL, message count, and all standard fields.</li>
<li>Sort and filter the attendant list by name, message count, notes, or any other available column.</li>
<li>The attendant list shows at a glance how many messages each person has received and how many have not yet been printed.</li>
<li>Delete individual attendants, or remove all attendants from a retreat at once.</li>
</ul>
<h4>Confidential message submission (public form)</h4>
<ul>
<li>Each attendant has a <strong>unique, cryptographically secure URL</strong> (based on a random token). Anyone with the link can submit a message without logging in to WordPress.</li>
<li>The submission form provides a <strong>rich-text editor</strong> (with formatting, images, and copy-paste from Word or Google Docs).</li>
<li>Writers can attach <strong>images and documents</strong> (PDF, DOCX, and other common types). If a message has multiple non-image files, they are bundled into a ZIP for printing.</li>
<li>An optional <strong>legal disclaimer</strong> with a configurable acceptance checkbox can be required before submission.</li>
<li>A simple <strong>arithmetic CAPTCHA</strong> prevents automated submissions. Logged-in WordPress users skip the CAPTCHA.</li>
<li>The form URL includes the attendant’s initials as a suffix for easy identification when sharing links, without exposing the full name.</li>
<li><strong>Rate limiting</strong> (20 requests per hour per IP) prevents abuse.</li>
</ul>
<h4>Secure message access and printing</h4>
<ul>
<li>The admin interface <strong>never displays message content</strong> — there is no content-preview panel. This protects confidentiality if a screen is visible to others.</li>
<li>Authorised users open a message and click <strong>Print</strong>. The plugin decrypts the content on the fly, renders it in a print-ready format with the recipient’s name and the sender’s name, and sends it to the printer.</li>
<li>Each print action is recorded in a <strong>print log</strong> (user, timestamp, IP address). The log is visible from the attendant’s message list.</li>
<li>Multiple images in a single message are laid out so they do not split across pages.</li>
</ul>
<h4>Three-tier permission system</h4>
<p>The plugin uses three access levels, each scoped to specific retreats:</p>
<p><strong>Plugin Administrators</strong> (WordPress users with the <code>manage_retreat_plugin</code> capability, automatically granted to WordPress Administrators):</p>
<ul>
<li>Create and delete retreats.</li>
<li>Manage all attendants and all messages across all retreats.</li>
<li>Grant or revoke permissions for any retreat.</li>
<li>Access Global Settings and Privacy & Compliance pages.</li>
</ul>
<p><strong>Retreat Managers</strong> (assigned per retreat):</p>
<ul>
<li>Full control of their assigned retreat: edit retreat details, manage attendants, access all messages.</li>
<li>Invite and assign Message Managers to their retreat.</li>
<li>Cannot access other retreats or global settings.</li>
</ul>
<p><strong>Message Managers</strong> (assigned per retreat):</p>
<ul>
<li>Read-only access to attendant names for context.</li>
<li>Can open and print confidential messages for their retreat.</li>
<li>Cannot edit attendants, retreat details, or permissions.</li>
<li>All print actions are logged.</li>
</ul>
<h4>User invitations</h4>
<ul>
<li>Invite any email address to become a Retreat Manager or Message Manager for a specific retreat directly from the retreat’s <strong>Access Management</strong> tab.</li>
<li>The invitee receives an email with a secure, time-limited token link.</li>
<li>If the email address already belongs to a WordPress user, they are granted the role immediately on acceptance. If not, a new WordPress account is created for them.</li>
<li>Pending invitations can be cancelled at any time. Expired invitations are cleaned up automatically.</li>
</ul>
<h4>Encryption and data security</h4>
<ul>
<li>All message content and file attachments are encrypted with <strong>AES-256-CBC</strong> and authenticated with HMAC-SHA256 before being written to the database or disk.</li>
<li>The encryption key is generated automatically on first activation and stored in the database. An admin notice prompts you to move it to <code>wp-config.php</code> by defining the constant <code>DFXPRL_ENCRYPTION_KEY</code> for better security. If the constant and the database key ever differ, the plugin detects the mismatch and offers a one-click resolution.</li>
<li>Every sensitive admin action (permission grants, revocations, invitation events) is written to a <strong>permission audit log</strong>.</li>
</ul>
<h4>GDPR and privacy compliance</h4>
<ul>
<li><strong>Right to Erasure</strong> (GDPR Article 17): delete all personal data for a specific email address or attendant in one action.</li>
<li><strong>Data Portability</strong> (GDPR Article 20): export all personal data associated with an email address as a structured file.</li>
<li><strong>IP address anonymisation</strong>: sender IP addresses are automatically anonymised after a configurable retention period (default 30 days). A daily WordPress cron job handles the cleanup.</li>
<li><strong>Configurable data retention</strong>: set how long messages and audit log entries are kept before automatic deletion.</li>
<li><strong>Spanish privacy law (LOPD-GDD)</strong>: the plugin was designed with Spanish data-protection requirements in mind, in addition to GDPR.</li>
<li>All settings are found under <strong>Retreats > Privacy & Compliance</strong>.</li>
</ul>
<h4>Global settings</h4>
<p>Under <strong>Retreats > Global Settings</strong> you can configure:</p>
<ul>
<li>Default header and footer blocks for the message submission form (overridable per retreat).</li>
<li>Default body CSS classes for the submission form page.</li>
<li>Encryption key management (including the option to remove a database-stored key in favour of the <code>wp-config.php</code> constant).</li>
</ul>
<h4>Internationalisation</h4>
<ul>
<li>The plugin ships with a complete <strong>Spanish (es_ES)</strong> translation.</li>
<li>A <code>.pot</code> template file is included so you can add your own language.</li>
<li>The public submission form uses informal Spanish (“tú”) for a friendlier tone.</li>
</ul>


DFX Parish Retreat Letters

Manage personal messages in parish retreats: attendants, confidential messages, permissions, and GDPR compliance — all in one place.

WP Alphabetic Navigation vs DFX Parish Retreat Letters