Turn \u201cthat section needs changing\u201d into feedback your team can act on.<\/p>\n\n
Ruhler Review Pins lets reviewers leave comments directly on the page elements they mean. A numbered pin marks each location, so your team can see what needs attention without matching emails and screenshots to the right part of the website.<\/p>\n\n
Use it to review a new website, proof content before launch, or collect feedback on existing pages. Leave a comment about a specific element or the whole page, resolve it when the work is done, and reopen it when it needs another look.<\/p>\n\n
wp_get_environment_type()<\/code>; WordPress treats an unset environment type as production).<\/li>\n- While review is off, no review controls, scripts, or styles are added to your pages and the review API refuses requests. Existing feedback stays available to managers in the dashboard.<\/li>\n
- Review links are off by default<\/strong> and are a separate setting (see below).<\/li>\n<\/ul>\n\n
Who can do what<\/h4>\n\n\n- Review Pins Reviewer<\/strong> \u2014 use Review Mode: place pins, read comments on the pages they review, and resolve or reopen comments. Reviewers are kept out of wp-admin except their own profile page.<\/li>\n
- Review Pins Manager<\/strong> \u2014 everything a reviewer can do, plus the feedback dashboard: resolve, reopen, trash, restore, and permanently delete feedback.<\/li>\n
- Administrators<\/strong> can use Review Mode and manage feedback.<\/li>\n
- Editors<\/strong> can use Review Mode (place pins, read, resolve, and reopen feedback) but cannot open the feedback dashboard or trash, restore, or delete feedback. Assign the Review Pins Manager role to people who should manage feedback.<\/li>\n
- Only administrators<\/strong> can change settings and issue or revoke review links.<\/li>\n
- Reviewers only see feedback for pages they are allowed to view. Feedback on private or draft pages is hidden from people who cannot read those pages, and their titles and addresses are not shown to them.<\/li>\n<\/ul>\n\n
Review links (optional)<\/h4>\n\n
Reviewers can always sign in with a normal WordPress password. If an administrator enables review links<\/strong>, they can also issue a private sign-in link to a reviewer from Review Pins \u2192 Reviewer Access<\/strong>:<\/p>\n\n\n- Links can only be issued to dedicated accounts whose single role is Review Pins Reviewer<\/strong> and which have no other capabilities. Accounts with any additional role or privilege (including managers, editors, and administrators) are refused, both when a link is issued and every time it is used.<\/li>\n
- A link expires 7 days after it is issued, or at the end of a review-window date you set. Issuing a new link replaces the old one; links can be revoked at any time.<\/li>\n
- Sessions started from a link end on their next request once the link is revoked, replaced, or expired, the account gains another role or capability, or review or review links are turned off.<\/li>\n
- The link is shown to the administrator once and is never stored in readable form. Issuing and revoking links is recorded in an activity log (without the link itself).<\/li>\n
- Two-factor authentication.<\/strong> Review links are refused for accounts that use the Two Factor<\/a> plugin (tested with version 0.17.0); those reviewers sign in with their password and second factor as usual. Enabling two-factor on an account also ends its existing review-link sessions. Other two-factor plugins are not detected and their compatibility is not verified: review-link sign-in does not use a password and does not run WordPress's
authenticate<\/code> filters (so it bypasses plugins that act only there, such as login-attempt limiters), although it does fire the standard wp_login<\/code> action. If your site uses another two-factor plugin, keep review links off or use the ruhler_rp_allow_review_link_login<\/code> filter to refuse them.<\/li>\n<\/ul>\n\nFeedback dashboard<\/h4>\n\n
Review Pins \u2192 Feedback<\/strong> lists comments with Open, Resolved, All, and Trash views, 20 per page. From here managers can go to a comment on its page, resolve or reopen it, move it to the Trash, restore it, or delete it permanently from the Trash.<\/p>\n\n\n- Trash expiry:<\/strong> like other WordPress content, trashed feedback is permanently deleted by WordPress after
EMPTY_TRASH_DAYS<\/code> (30 days by default). If your site sets EMPTY_TRASH_DAYS<\/code> to 0, trashing deletes immediately.<\/li>\n- Unassigned feedback (administrators only):<\/strong> feedback saved by earlier development builds whose page cannot be identified reliably is kept as Unassigned<\/em> instead of appearing on the homepage. Only administrators can see it, in the dashboard's Unassigned view, to review or delete it.<\/li>\n<\/ul>\n\n
WP-CLI<\/h4>\n\nwp ruhler-review-pins status | list | show | resolve | reopen | trash | restore | delete | add-reviewer | remove-reviewer. WP-CLI commands are administrative tools and keep working while review is off. Status changes and deletions must be attributed to a real user (`--user` or `--actor`). Account creation and role changes also require an explicit actor with WordPress's applicable `create_users` and\/or `promote_users` capabilities and permission to assign the target role. `remove-reviewer` removes Review Pins access and roles but never deletes the WordPress account or its content. `add-reviewer` never replaces an existing account's roles and refuses accounts with other roles or privileges.\n<\/code><\/pre>\n\nRequirements and limits<\/h4>\n\n\n- WordPress 6.4 or later and PHP 8.0 or later. The minimum combination was exercised in a disposable runtime; WordPress 7.1 and PHP 8.4 were also tested during release-candidate validation.<\/li>\n
- Feedback is tied to each page's address. Both plain (
?page_id=123<\/code>) and pretty permalinks are supported. Tracking parameters (such as utm_*<\/code>), preview arguments, and this plugin's own parameters are ignored when matching a page. Changing a page's address or your permalink settings can separate existing feedback from that page.<\/li>\n- Multisite is not supported<\/strong> in this version.<\/li>\n<\/ul>\n\n
Privacy<\/h3>\n\n
Review Pins stores, for each comment: the comment text, the page address, the on-page location and a short excerpt of the page text there, the reviewer's user account, and who resolved it and when. When review links are used it also stores a hashed link token (never the link itself) and a log of when links were issued or revoked and by whom. This data is visible to administrators and review managers, is kept until deleted (see the FAQ), and is never sent to third parties. A suggested privacy-policy section is added to Settings \u2192 Privacy<\/strong>.<\/p>\n\n\n\n- Upload the plugin and activate it.<\/li>\n
- Go to Review Pins \u2192 Settings<\/strong>, turn on review, and choose the environments where it should be available.<\/li>\n
- Give each reviewer their own account with the Review Pins Reviewer<\/strong> role (or Review Pins Manager<\/strong> for people who will manage feedback).<\/li>\n
- Reviewers sign in, open a page, and select Review this page<\/strong>.<\/li>\n
- Optional: turn on review links in Settings and issue links from Review Pins \u2192 Reviewer Access<\/strong>.<\/li>\n<\/ol>\n\n\n
\nHow do reviewers leave a comment?<\/h3><\/dt>\nSelect Review this page<\/strong>, then Make comment<\/strong> and click the part of the page you mean, or use the arrow keys to move through the page's content and press Enter. To comment on the whole page, use Add page comment<\/strong>. Press Escape to cancel.<\/p><\/dd>\nCan visitors see the feedback?<\/h3><\/dt>\nNo. Review controls and feedback are only shown to signed-in users with review access, only while review is available, and only for pages they are allowed to view.<\/p><\/dd>\n
What happens to data when I deactivate or uninstall?<\/h3><\/dt>\nDeactivating keeps everything. On uninstall, the plugin always removes review links and their tokens, the Review Pins roles, and the review capabilities it added to other roles. By default it keeps feedback and settings<\/strong>, so they are not lost by accident. If an administrator checks Permanently delete all review feedback and plugin settings when the plugin is uninstalled<\/strong> in Settings, uninstalling also deletes all feedback, settings, and the review-link activity log. WordPress user accounts and their content are never deleted. Network-wide uninstall on multisite is not supported.<\/p><\/dd>\nHow does the plugin handle personal data requests?<\/h3><\/dt>\nReview Pins works with Tools \u2192 Export Personal Data<\/strong> and Tools \u2192 Erase Personal Data<\/strong>. An export includes the feedback a person wrote (including the page excerpt captured where they commented), comments they resolved, and review-link activity about them. Erasure removes the text of the feedback they wrote, the captured page excerpts and on-page locations, and their name from feedback they wrote or resolved; it also revokes their review link and anonymizes the link activity log. A de-identified record of each comment (which page, its status, and dates) is kept and reported as retained; managers can delete it from the dashboard. Feedback written by other people is not searched for mentions of the person.<\/p><\/dd>\nDoes it send data anywhere?<\/h3><\/dt>\nNo. The plugin makes no external requests and includes no tracking.<\/p><\/dd>\n\n<\/dl>\n\n\n
1.0.0<\/h4>\n\n\n- First release: on-page pins and general feedback, resolve\/reopen workflow, management dashboard, dedicated reviewer and manager roles, optional review links, privacy tools, lifecycle cleanup policy, pagination, keyboard placement, and WP-CLI commands.<\/li>\n
- Review is off on new installs and review links are separately opt-in.<\/li>\n
- Account-changing WP-CLI commands require an explicitly authorized WordPress actor, and feedback targets are authorized server-side before a record is created.<\/li>\n
- Supports WordPress 6.4+ and PHP 8.0+; multisite network operation is not supported.<\/li>\n<\/ul>","raw_excerpt":"Pin feedback directly to your WordPress pages. Review comments together and track changes to resolution.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/389772","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=389772"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/ruhler"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=389772"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=389772"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=389772"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=389772"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=389772"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=389772"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}