Descrição
Dreamanual Toolkit gathers small single-purpose WordPress features – back-to-top button, maintenance mode, featured image tools, SMTP mail, content visibility, AI tag generation and more – into standalone modules under one plugin. Each module can be enabled or disabled independently; disabled modules load no code and register no hooks, so there is zero overhead.
Modules included:
- AI Optimizer – AI-powered tag generation with batch processing and multiple AI model support
- Content Visibility – per-category content visibility with per-channel hiding and role bypass
- Role Manager – fine-grained WordPress role and capability editing
- Site Enhance – back-to-top button, maintenance mode, featured image filters, default featured image, quick-edit excerpt, comment avatar optimization, SMTP mail
- Site Optimize – 16 site optimization toggles, Chinese typography, admin ad blocker, plus Speculative Loading
- Search Push – auto-submits post links to Baidu and Bing on publish/update
Security features:
- API keys and SMTP passwords are AES-256-CBC encrypted with a key derived from AUTH_KEY + SECURE_AUTH_KEY
- Every AJAX endpoint uses check_ajax_referer + current_user_can double verification
- Front-end uses Vanilla JS with CSS BEM naming
External Services
This plugin optionally connects to third-party services when the corresponding modules are enabled. All connections are initiated by the site admin and require explicitly configured credentials.
AI Optimizer
Sends post content (post title and body text) to your configured AI provider’s API for tag and excerpt generation. Data is sent only when the admin clicks “Generate” or runs batch processing, and only if the module is enabled and an API key is provided.
Supported providers:
-
DeepSeek – https://api.deepseek.com
Terms of Service: https://platform.deepseek.com/policies/terms
Privacy Policy: https://platform.deepseek.com/policies/privacy -
OpenAI – https://api.openai.com
Terms of Service: https://openai.com/policies/terms-of-use
Privacy Policy: https://openai.com/policies/privacy-policy -
Anthropic (Claude) – https://api.anthropic.com
Terms of Service: https://www.anthropic.com/legal/terms
Privacy Policy: https://www.anthropic.com/legal/privacy -
Kimi / Moonshot AI – https://api.moonshot.cn
Terms of Service: https://kimi.moonshot.cn/user/agreement/modeluse
Privacy Policy: https://kimi.moonshot.cn/user/agreement/userprivacy
SMTP Mail (Site Enhance)
Connects to your own SMTP server to send emails. SMTP host, port, credentials, and encryption are fully configured by the site admin. The plugin does not collect or send any data to third parties; all email is routed through the admin’s own mail server.
Search Push
Submits post URLs to search engine indexing APIs when a post is published or updated. Requires site-specific API tokens configured by the site admin. No data is sent unless the module is enabled and tokens are provided.
-
Baidu Search Resource Platform – http://data.zz.baidu.com
Terms of Service: https://www.baidu.com/duty/
Privacy Policy: https://www.baidu.com/duty/ -
Bing Webmaster Tools – https://www.bing.com/webmasters
Terms of Service: https://www.microsoft.com/en-us/legal/intellectualproperty/copyright/default.aspx
Privacy Policy: https://privacy.microsoft.com/en-us/privacystatement
Instalação
- Upload the dreamanual-toolkit folder to /wp-content/plugins/
- Activate Dreamanual Toolkit on the Plugins page
- Go to DM Toolkit – Module Management and enable the modules you need
Perguntas frequentes
-
Does this plugin slow down my site?
-
No. Disabled modules load no code and register no hooks, so there is zero overhead from unused features.
-
Are API keys stored securely?
-
Yes. API keys and SMTP passwords are encrypted with AES-256-CBC using a key derived from your wp-config.php AUTH_KEY and SECURE_AUTH_KEY.
Avaliações
Não há avaliações para este plugin.
Colaboradores e desenvolvedores
“Dreamanual Toolkit” é um programa de código aberto. As seguintes pessoas contribuíram para este plugin.
ColaboradoresDreamanual Toolkit” foi traduzido para 1 localidade. Agradecemos aos tradutores por suas contribuições.
Traduzir o “Dreamanual Toolkit” para seu idioma.
Interessado no desenvolvimento?
Navegue pelo código, consulte o repositório SVN ou assine o registro de desenvolvimento por RSS.
Registro de alterações
1.4.1
- Security: fixed IDOR vulnerability in AI Optimizer (missing post-level capability check)
- Security: fixed administrator lockout in Role Manager (protected roles can no longer strip manage_options)
- Security: API key no longer exposed to frontend in batch processing
- Fixed: Kimi model list updated to kimi-k2.6/k2.7-code/k2.7-code-highspeed/k3 (moonshot-v1 series deprecated)
- Fixed: Maintenance mode hardcoded lang attribute now uses get_bloginfo(‘language’)
- Fixed: Chinese typography now filters the_content/the_excerpt instead of full-page output buffer
- Fixed: module deactivate now properly unregisters hooks (prevents zombie state on re-activate)
- Added: independent Crypto class with Error_Translator for shared network error translation
- Added: support for custom post types in AI Optimizer batch processing
- Improved: asset versioning with filemtime fallback to plugin version
- Improved: role user count uses count_users() instead of per-role queries
- Improved: Baidu push URL upgraded to HTTPS
- Improved: Site Optimize on_activate simplified (defaults via get_option fallback)
1.4.0
- Site Optimize: added Chinese Typography group (auto-spacing, text justify, smart quotes, paragraph indent)
- Site Optimize: added Admin Ad Blocker group with editable CSS selector rules
- Site Enhance: added Comment Avatar optimization (Gravatar mirror, custom default avatar)
- Fixed missing drea-toggle__input class on Site Optimize settings page checkboxes
- Fixed AI Optimizer save settings error response format (prevented [object Object] display)
- Fixed Plugin Check warnings for SMTP password and dynamic field sanitization in Site Enhance
- Refreshed translation template: 21 missing strings added to .pot and zh_CN.po
1.3.0
- Full internationalization: all user-facing PHP strings converted to English source
- Added zh_CN.po translation file (364 translated entries)
- Refreshed .pot translation template (369 unique entries)
- Translated JavaScript hardcoded strings and error log messages
- Plugin defaults to English; Chinese users receive translations via GlotPress or .po file
1.2.2
- Fixed invalid Terms of Service and Privacy Policy URLs in readme
- Fixed update_option return value check in AI Optimizer module
1.2.1
- Replaced inline styles/scripts with proper wp_enqueue calls
- Added Terms of Service and Privacy Policy links for all external services
- Removed unnecessary load_plugin_textdomain() call
1.2.0
- Back-to-top button: SVG arrow icon, icon color customization with live preview
- All settings pages: save button disabled until form is modified
- Prepared for WordPress.org: .pot template, external service declarations, English description
1.1.0
- Site Enhance: SMTP password sanitization hardening
- Plugin Check compliance fixes across all modules
- Minor asset and styling refinements
1.0.0
- Initial release with 6 modules








