REST XML-RPC Data Checker vs Store-IT – Contact

JSON REST API and XML-RPC API are powerful ways to remotely interact with WordPress. If you don’t have external applications that need to communicate with your WordPress instance using JSON REST API or XML-RPC API you should disable access to them for external requests. In the standard WordPress installation JSON REST API and XML-RPC API are enabled by default. In particular the REST API is turned on also for unlogged users. This means that your WordPress instance is potentially leaking data, for example anyone could be able to: copy easily your published contents natively with the REST API (and not with a web crawler); get the list of all users (with their ID, nickname and name); retrieve other information that you didn’t want to be public (such as an unlisted published page or a saved media not yet used). Even if you could do the stuff by writing your own code using native filters, this plugin aims to help you to control JSON REST API and XML-RPC API accesses from the administration panel or programmatically by a simple API filter. Basic Features Disable REST API interface for unlogged users. Disable JSONP support on REST API. Add Basic Authentication to REST API. Remove REST tags, REST Link HTTP header and REST Really Simple Discovery (RSD) informations. Setup trusted users, IP/Networks and endpoints for unlogged users REST requests. Change REST endpoint prefix. Disable XML-RPC API interface. Remove to the Really Simple Discovery (RDS) informations. Remove X-Pingback HTTP header. Setup trusted users, IP/Networks and methods for XML-RPC requests. Show user’s access informations in users list administration screen. Usage Once the plugin is installed you can control settings in the following ways: Using the Settings->REST XML-RPC Data Checker administration screen. Programmatically, by using rest_xmlrpc_data_checker_settings filter (see below). API Hooks rest_xmlrpc_data_checker_settings Filters plugin settings values. apply_filters( 'rest_xmlrpc_data_checker_settings', array $settings ) rest_xmlrpc_data_checker_admin_settings Filter allowing to display or not the plugin settings page in the administration. apply_filters( 'rest_xmlrpc_data_checker_admin_settings', boolean $display ) rest_xmlrpc_data_checker_rest_error Filter JSON REST authentication error after plugin checks. apply_filters( 'rest_xmlrpc_data_checker_rest_error', WP_Error|boolean $result ) xmlrpc_before_insert_post Filter XML-RPC post data to be inserted via XML-RPC before to insert post into database. apply_filters( 'xmlrpc_before_insert_post', array|IXR_Error $content_struct, WP_User $user )

The Store-IT Contact plugin allows you to create and manage contact forms that automatically sync submissions with the Store-IT API. The plugin provides a complete form builder with styling options, field management, and multi-language support. Features Form Builder: Create unlimited contact forms with customizable fields Store-IT API Integration: Automatic submission synchronization with Store-IT services Multi-language Support: Available in English, Dutch, German, Spanish, Finnish, French, and Italian Customizable Styling: Full control over form appearance including colors, fonts, and spacing Field Management: Configure field visibility, requirements, labels, and validation reCAPTCHA Support: Built-in Google reCAPTCHA integration for spam protection Responsive Design: Mobile-friendly forms that adapt to any screen size Admin Dashboard: Complete management interface for forms and submissions Supported Form Fields Location (dropdown of available facilities) Request Type (dropdown of available request categories) Title (optional title field with predefined options) First Name (text input) Surname (text input) Phone Number (telephone input with validation) Email (email input with validation – required) Message (textarea for message content) reCAPTCHA (Google reCAPTCHA verification) Submit Button (form submission button) Multi-language Support The plugin includes translations for: * English (en) * Dutch (nl) * German (de) * Spanish (es) * Finnish (fi) * French (fr) * Italian (it) Configuration API Settings Navigate to Store-IT Contact > Global Settings Configure your API credentials: Base URL: Your Store-IT API endpoint Username: Your Store-IT API username Password: Your Store-IT API password Grant Type: Authentication method (default: password) Client ID: Your Store-IT API client ID reCAPTCHA Setup (Optional) Go to Store-IT Contact > Global Settings > reCAPTCHA Enter your Google reCAPTCHA credentials: Site Key: Your reCAPTCHA site key Secret Key: Your reCAPTCHA secret key Usage Creating a Contact Form Navigate to Store-IT Contact > Add New Form Configure the form settings (name, title, language, request types, locations) Customize styling in the Styling tab Configure fields in the Fields tab Set up notifications in the Notifications tab Displaying Forms Use the shortcode to display your form: [store_it_contact_form id=”your_form_id”] Requirements WordPress 5.0 or higher PHP 7.4 or higher Store-IT API access credentials cURL support for API communication External services This plugin relies on external services to provide its functionality: Store-IT API Integration The plugin connects to the Store-IT API to synchronize form submissions and create customer records. * Service Provider: Store-IT (https://store-it.eu/) * API Endpoints: – https://api.store-it365.eu (main API endpoint) – https://token.store-it365.eu/auth (authentication endpoint) * Data Sent: Form submission data including contact information (name, email, phone, address), request type, location, and message content * When Data is Sent: Every time a contact form is submitted on your website * Purpose: To create customer records and tasks in the Store-IT system for business management * Terms of Service: https://store-it.atlassian.net/wiki/x/EgDS5g * Privacy Policy: https://store-it.atlassian.net/wiki/x/EgDS5g Google reCAPTCHA (Optional) When enabled, the plugin uses Google reCAPTCHA to prevent spam submissions. * Service Provider: Google LLC * Service Endpoint: https://www.google.com/recaptcha/api.js * Data Sent: User interaction data and IP address for verification purposes * When Data is Sent: When users interact with the reCAPTCHA widget on the contact form * Purpose: Spam protection and bot detection * Terms of Service: https://policies.google.com/terms * Privacy Policy: https://policies.google.com/privacy Support For support and documentation, visit: * Store-IT Website: https://store-it.eu/ * Store-IT Software: https://store-it.eu/store356-de-software/ License This plugin is licensed under the GPL v2 or later. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA