First wp.org-distributed release. If you previously installed v1.2.x manually, upgrade in place \u2014 no settings reset is required.<\/p>"},"ratings":[],"assets_icons":{"icon-256x256.png":{"filename":"icon-256x256.png","revision":3532771,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-772x250.png":{"filename":"banner-772x250.png","revision":3532771,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.4.0","1.5.0","1.6.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3533297,"resolution":"1","location":"assets","locale":"","width":1280,"height":800},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3533297,"resolution":"2","location":"assets","locale":"","width":1280,"height":800},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3533297,"resolution":"3","location":"assets","locale":"","width":1280,"height":800},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3533297,"resolution":"4","location":"assets","locale":"","width":1280,"height":800},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3533297,"resolution":"5","location":"assets","locale":"","width":1280,"height":800}},"screenshots":{"1":"Composer \u2014 pick a Page, write a message, attach an image, choose post type, send or schedule.","2":"Coloured-background picker \u2014 41 native Facebook background presets with previews, plus a custom preset-ID field.","3":"Calendar view \u2014 month grid with post counts per day, status-coloured pills, click a day to filter.","4":"List view \u2014 next post going out first, then drafts \/ past activity. Visual preview thumbnail per row.","5":"Settings \u2014 Facebook App credentials, Connect to Facebook button, list of connected Pages."},"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[569,157,86,4685,154],"plugin_category":[56],"plugin_contributors":[261763],"plugin_business_model":[],"class_list":["post-311603","plugin","type-plugin","status-publish","hentry","plugin_tags-automation","plugin_tags-facebook","plugin_tags-post","plugin_tags-scheduler","plugin_tags-social-media","plugin_category-social-and-sharing","plugin_contributors-onetwothreesend","plugin_committers-onetwothreesend"],"banners":{"banner":"https:\/\/ps.w.org\/one-two-three-post\/assets\/banner-772x250.png?rev=3532771","banner_2x":false,"banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/one-two-three-post\/assets\/icon-256x256.png?rev=3532771","icon_2x":"https:\/\/ps.w.org\/one-two-three-post\/assets\/icon-256x256.png?rev=3532771","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/one-two-three-post\/assets\/screenshot-1.png?rev=3533297","caption":"Composer \u2014 pick a Page, write a message, attach an image, choose post type, send or schedule."},{"src":"https:\/\/ps.w.org\/one-two-three-post\/assets\/screenshot-2.png?rev=3533297","caption":"Coloured-background picker \u2014 41 native Facebook background presets with previews, plus a custom preset-ID field."},{"src":"https:\/\/ps.w.org\/one-two-three-post\/assets\/screenshot-3.png?rev=3533297","caption":"Calendar view \u2014 month grid with post counts per day, status-coloured pills, click a day to filter."},{"src":"https:\/\/ps.w.org\/one-two-three-post\/assets\/screenshot-4.png?rev=3533297","caption":"List view \u2014 next post going out first, then drafts \/ past activity. Visual preview thumbnail per row."},{"src":"https:\/\/ps.w.org\/one-two-three-post\/assets\/screenshot-5.png?rev=3533297","caption":"Settings \u2014 Facebook App credentials, Connect to Facebook button, list of connected Pages."}],"raw_content":"\n
One Two Three Post is a WordPress plugin for site owners who manage one or more Facebook Pages and want a clean composer + scheduler inside WordPress instead of switching to Meta's tools.<\/p>\n\n
The plugin is fully functional on its own. A separate companion plugin (One Two Three Post Pro, distributed independently) will add AI-generated post drafting and Publer-style multi-network support \u2014 One Two Three Post does not require it.<\/p>\n\n
This plugin contacts the following Facebook endpoints using credentials you provide. Nothing is sent to any third party without you connecting first.<\/p>\n\n
https:\/\/www.facebook.com\/v19.0\/dialog\/oauth<\/code>)<\/strong> \u2014 the OAuth dialog the user is redirected to when clicking \"Connect to Facebook\" in Settings. Standard Facebook Login flow.<\/li>\n- Facebook Graph API (
https:\/\/graph.facebook.com\/v19.0<\/code>)<\/strong> \u2014 for the OAuth code-to-token exchange, listing the user's Pages, fetching Page metadata, publishing posts and comments, scheduling posts. Called only after the user has connected a Page and only when posting \/ scheduling.<\/li>\n<\/ul>\n\nThe plugin itself does not phone home to any other server. No analytics, no telemetry, no third-party trackers, no opt-in newsletter signups, no remote update channel.<\/p>\n\n
\n- Facebook Platform Terms: https:\/\/developers.facebook.com\/terms\/<\/li>\n
- Facebook Privacy Policy: https:\/\/www.facebook.com\/privacy\/policy\/<\/li>\n<\/ul>\n\n
Required Facebook permissions<\/h4>\n\n
The plugin requests three Facebook scopes during the Connect flow:<\/p>\n\n
\npages_manage_posts<\/code> \u2014 create posts on your Pages<\/li>\npages_read_engagement<\/code> \u2014 read your Page metadata<\/li>\npages_show_list<\/code> \u2014 list the Pages you manage<\/li>\n<\/ul>\n\nUseful links<\/h4>\n\n\n- onetwothreesend.com<\/a> \u2014 author site, documentation, and support.<\/li>\n
- Privacy policy<\/a>.<\/li>\n<\/ul>\n\n\n
\n- Upload the plugin zip via Plugins \u2192 Add New \u2192 Upload Plugin, or place the folder in
\/wp-content\/plugins\/one-two-three-post\/<\/code>.<\/li>\n- Activate the plugin.<\/li>\n
- Create a Facebook App at https:\/\/developers.facebook.com\/apps. Pick the \"Business\" use case. Add the \"Facebook Login\" product.<\/li>\n
- Open One Two Three Post \u2192 Settings<\/strong>. Copy the Redirect URI shown on that page into your Facebook App's Facebook Login \u2192 Settings \u2192 Valid OAuth Redirect URIs<\/em> list.<\/li>\n
- Paste your App ID and App Secret into the Settings page and save.<\/li>\n
- Click Connect to Facebook<\/strong>, grant the permissions, you are returned to WordPress with your Pages listed.<\/li>\n
- Open One Two Three Post \u2192 New \/ Compose<\/strong> and write your first post.<\/li>\n<\/ol>\n\n\n
\nI don't have a Facebook App. Where do I get one?<\/h3><\/dt>\nAt https:\/\/developers.facebook.com\/apps. Click \"Create App\", pick \"Business\", give it a name. Add the \"Facebook Login\" product. In Facebook Login \u2192 Settings, paste the Redirect URI shown in the plugin's Settings page into \"Valid OAuth Redirect URIs\". You'll then have an App ID and App Secret to copy into the plugin.<\/p><\/dd>\n
Why does the connect flow ask for `pages_manage_posts`?<\/h3><\/dt>\nBecause that's the Facebook scope required to create a post on a Page. Without it, the plugin can't publish.<\/p><\/dd>\n
Why does my scheduled post need to be at least 10 minutes in the future?<\/h3><\/dt>\nFacebook's API requirement, not ours. Facebook rejects scheduled posts whose time is less than 10 minutes from now and more than six months out.<\/p><\/dd>\n
Where are my Page access tokens stored?<\/h3><\/dt>\nIn the WordPress options table, encrypted at rest with AES-256-CBC using a key derived from your SECURE_AUTH_KEY<\/code> + SECURE_AUTH_SALT<\/code>. They are never sent anywhere except the Facebook Graph API endpoint above.<\/p><\/dd>\nMy scheduled post didn't fire \u2014 what happened?<\/h3><\/dt>\nOpen One Two Three Post \u2192 Scheduled<\/strong> (or All Posts). Posts that failed have a \"Failed\" status with the error message visible. Common causes: page access token revoked (reconnect from Settings), image attachment deleted from media library, network error. The plugin retries up to 3 times.<\/p><\/dd>\nDoes this plugin work with Facebook Groups, Instagram, or my personal Facebook profile?<\/h3><\/dt>\nNo. Pages only. Facebook deprecated programmatic posting to personal profiles years ago, and Group \/ Instagram posting requires different scopes and permissions that aren't a fit for this plugin.<\/p><\/dd>\n
What is a \"coloured-background text post\"?<\/h3><\/dt>\nThe native Facebook short-text-on-a-coloured-background post format \u2014 same one Facebook offers in its own composer for short messages. The plugin renders these via Facebook's text_format_preset_id<\/code> parameter (POST to \/{page_id}\/feed<\/code>). Messages are capped at 130 characters by Facebook.<\/p><\/dd>\nWhat does \"first comment\" do?<\/h3><\/dt>\nIf you fill the optional First Comment field, the plugin posts that text as a comment on the new post immediately after it goes live. Useful for newsletter CTAs, link drops, or follow-up prompts where Facebook tends to suppress reach when the link is in the main post body.<\/p><\/dd>\n
What happens to my data if I delete the plugin?<\/h3><\/dt>\nDeactivating leaves all data in place. Deleting the plugin (Plugins \u2192 Delete) removes the plugin's options, scheduled-post entries, and the WP-Cron event via the bundled uninstall.php<\/code>.<\/p><\/dd>\n\n<\/dl>\n\n\n1.6.0<\/h4>\n\n\n- Added a Delete<\/strong> button on each row of the Scheduled-posts list view, alongside the existing Edit<\/strong> and Open \u2197<\/strong> buttons. Previously the only way to drop a scheduled post was to navigate to One Two Three Post \u2192 All Posts<\/em> and use WordPress's standard row Trash action \u2014 a noticeable extra click whenever the operator just wanted to clear a queue entry from the natural \"where I look at upcoming posts\" view. Pre-publish posts (status not yet
publish<\/code>) are hard-deleted; already-sent posts move to trash so the operator can recover the record of an actual Facebook publish if needed. Native confirm()<\/code> dialog before the action fires. Capability-gated to edit_posts<\/code> and CSRF-nonced per row.<\/li>\n<\/ul>\n\n1.5.0<\/h4>\n\n\n- Added three extension hooks in
OTTPOST_Scheduler::publish_post()<\/code> so add-on plugins (such as the separately-distributed One Two Three Post Pro) can plug a pre-publish validator chain into the existing scheduler without forking. New hooks: ottpost_pre_publish_validate<\/code> (filter \u2014 return a WP_Error<\/code> to block the publish and record the reason as a failure), ottpost_publish_args<\/code> (filter \u2014 mutate the Graph API payload before send), and ottpost_after_publish<\/code> (action \u2014 fires post-attempt with the result array, useful for log-table writes). No behaviour change for sites that don't have an add-on installed; the filters return their inputs unchanged when no listeners are attached.<\/li>\n<\/ul>\n\n1.4.0<\/h4>\n\n\n- Renamed the internal code prefix from
OTP_*<\/code> \/ otp_*<\/code> \/ otp-*<\/code> to OTTPOST_*<\/code> \/ ottpost_*<\/code> \/ ottpost-*<\/code> across all classes, constants, option keys, post meta, cron hooks, REST namespaces, and CSS \/ JS handles. The 3-character otp<\/code> prefix was too short per wp.org's plugin-naming guidelines and risked colliding with other plugins (One Time Passwords, OpenTelemetry, etc.). All seven class-otp-*.php<\/code> files were renamed to class-ottpost-*.php<\/code> to match. Breaking for existing installs:<\/strong> option keys, the otp_fb_post<\/code> custom post type slug, the otp_scheduled<\/code> post status, and the otp_fire_scheduled_posts<\/code> cron hook have all been renamed. After upgrading, you will need to re-connect Facebook (re-OAuth) and re-create any pending scheduled posts. New installs are unaffected.<\/li>\n- Fixed a pre-existing parse error in
admin\/views\/settings.php<\/code> (line 11 had a stray <?php<\/code> opener inside an already-open PHP block \u2014 Settings page would crash on load). Caught by linting the renamed codebase.<\/li>\n- Added file-level
phpcs:disable WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound<\/code> to the four view \/ uninstall files. Plugin Check reports those files' top-level $variables<\/code> as potentially global, but they're always included from inside an admin class method (or, for uninstall.php, WP core's uninstall include) \u2014 function-scoped at runtime. Documented inline so future readers know why the rule is suppressed.<\/li>\n<\/ul>\n\n1.3.3<\/h4>\n\n\n- Removed the redundant Plugin URI from the plugin header. wp.org's reviewer flagged Plugin URI and Author URI being identical (both pointed at the author site) \u2014 Plugin URI dropped, Author URI kept since it's the more accurate one for this header set.<\/li>\n<\/ul>\n\n
1.3.2<\/h4>\n\n\n- Plugin Check follow-up: moved the
slow_db_query_meta_query<\/code> phpcs:ignore directly above the meta_query<\/code> array key in OTTPOST_Scheduler::tick()<\/code> so the suppression actually applies (the previous placement above the WP_Query<\/code> call was too high to silence the warning on the inner array key).<\/li>\n<\/ul>\n\n1.3.1<\/h4>\n\n\n- Plugin Check pass. Removed the discouraged
load_plugin_textdomain()<\/code> call (WP 4.6+ auto-loads translations for wp.org plugins). Switched the OAuth-start wp_redirect()<\/code> to wp_safe_redirect()<\/code> with www.facebook.com<\/code> whitelisted via the allowed_redirect_hosts<\/code> filter. Added wp_unslash()<\/code> ahead of sanitize_text_field()<\/code> for $_GET['cal_month']<\/code> and $_GET['day']<\/code> on the Scheduled view. Documented intentional $_POST['app_secret']<\/code> non-sanitization with a phpcs:ignore note (the value is encrypted before storage). Added phpcs:ignore comments for read-only $_GET<\/code> flag checks and the meta_query<\/code> \/ meta_key<\/code> slow-query notices on small admin queries. Trimmed the readme short-description to fit the 150-char wp.org cap.<\/li>\n<\/ul>\n\n1.3.0<\/h4>\n\n\n- Initial wp.org submission. Menu label changed from \"FB Posts\" to \"One Two Three Post\" so the plugin doesn't render an abbreviated trademark in the admin sidebar. Adds a bundled
uninstall.php<\/code> that drops plugin options, OAuth credentials, and the cron event when the user deletes the plugin from Plugins \u2192 Delete.<\/li>\n<\/ul>\n\n1.2.4<\/h4>\n\n\n- List view now sorts the next post going out to the top; older \/ past posts follow in reverse chronological order.<\/li>\n<\/ul>\n\n
1.2.3<\/h4>\n\n\n- Optional First Comment field on the composer \u2014 posted automatically on the published post immediately after it goes live. Comment failures do not roll back the main post.<\/li>\n<\/ul>\n\n
1.2.2<\/h4>\n\n\n- Coloured-background picker now ships 41 known-good Facebook
text_format_preset_id<\/code> values with visual swatches plus a custom-preset-ID override.<\/li>\n<\/ul>\n\n1.2.0<\/h4>\n\n\n- Edit on any saved post now returns to the composer with every field hydrated (page, message, image, schedule, type, background, first comment).<\/li>\n
- Scheduled-posts list grows a Preview column with a thumbnail per row (image \/ coloured tile \/ text excerpt).<\/li>\n<\/ul>\n\n
1.1.0<\/h4>\n\n\n- New \"Scheduled\" admin page with a month Calendar view and a chronological List view of every drafted \/ scheduled \/ pending \/ sent post.<\/li>\n
- Coloured-background text post type added to the composer.<\/li>\n<\/ul>\n\n
1.0.0<\/h4>\n\n\n- Initial release. Facebook OAuth flow (App ID + App Secret \u2192 user token \u2192 page tokens), composer with message + image + Page picker, three modes (Post Now, Schedule, Save as Draft), WP-Cron background worker, encrypted at-rest storage of App Secret and Page tokens.<\/li>\n<\/ul>","raw_excerpt":"Schedule and publish Facebook Page posts from WordPress. Calendar + list views, coloured-background text posts, optional first comment.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/311603","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=311603"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/onetwothreesend"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=311603"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=311603"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=311603"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=311603"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=311603"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=311603"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}