Description
Youtix is a service operated at https://api.youtix.site by this plugin’s author/contributors.
Youtix Sync Connector connects a WordPress site to the Youtix service at https://api.youtix.site. After a site administrator explicitly saves valid service credentials and completes the connection, the plugin provides a single dashboard page for viewing service data and accepts authenticated article requests from the service.
The plugin uses HTTPS, an API key, timestamped HMAC signatures, and replay protection for service communication. It creates or updates only posts marked as managed by Youtix. Incoming featured images are size-limited, decoded strictly, verified as supported image types, and stored in the local WordPress Media Library.
The Youtix service is an external service and must provide substantive functionality for this connector to operate. Before activating the connection, review the current Youtix service terms and privacy notice supplied by your service provider.
Key features
- A single, top-level Youtix dashboard page for connecting and viewing service data.
- Authenticated REST endpoints for health checks and managed article create, read, update, and delete operations.
- Timestamped HMAC verification and one-time replay protection for incoming service requests.
- Protection against updating, reading, or deleting posts that were not created by this connector.
- Secure local handling of optional featured images with strict size and type checks.
- A scheduled health ping while connected and an hourly cleanup task for expired replay records.
- Suggested privacy-policy content for site administrators.
Privacy
This plugin adds suggested content to the WordPress privacy-policy guide. Site administrators must review and adapt that suggested text before publishing a privacy policy. The service connection is initiated only after an administrator enters credentials and selects Save and connect.
External services
This plugin connects to the Youtix service, hosted at https://api.youtix.site, to synchronize and publish articles on this site on behalf of the site administrator.
It sends the following data:
- During the connection handshake (triggered manually by the administrator when saving credentials): the site URL, the WordPress version, and the plugin version.
- On every scheduled health check (hourly, while a connection is active) and on every authenticated request coming from the service: a timestamped HMAC signature used to verify the request, no personal data.
- The service, in turn, may send article titles, content, SEO metadata, and optional featured images to this site for publication.
No data is sent until an administrator has explicitly entered valid credentials and selected “Save and connect”.
This service is provided by Youtix: Terms of Service, Privacy Policy.
Installation
- Upload the
youtix-sync-connectorfolder to the/wp-content/plugins/directory, or install the plugin through the WordPress Plugins screen. - Activate the plugin through the
Pluginsscreen in WordPress. - Open
Youtixfrom the WordPress administration menu. - Obtain a Client ID, Client Secret, and API Key from your Youtix service account.
- Enter the credentials and select
Save and connect. - Confirm the connection succeeds before enabling automated article delivery in the Youtix service.
FAQ
-
Where does the plugin connect?
-
The connector uses the fixed production endpoint
https://api.youtix.site. It does not accept arbitrary administrator-supplied endpoint URLs. -
What data is sent to the external service?
-
During the connection handshake, the plugin sends the site URL, the WordPress version, and the plugin version. Authenticated dashboard and health requests are then sent to the Youtix service. The service may send article titles, content, SEO metadata, and optional featured images to WordPress for publication.
-
Are credentials displayed after saving?
-
No. Saved connection credentials are not rendered back into the administration form. Leave a credential field blank when reconnecting to retain its previously saved value.
-
Can the service update any post on my site?
-
No. The connector only permits the authenticated service to retrieve, update, or move to trash a post that is already marked as managed by Youtix.
-
What happens when the plugin is removed?
-
The plugin removes its connection options, cached dashboard data, scheduled events, and replay-protection records. It does not delete created posts or their media automatically, so that a site owner does not accidentally lose published content.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Youtix Sync Connector” is open source software. The following people have contributed to this plugin.
Contributors
Translate “Youtix Sync Connector” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.2.7
- Translated the connection (login) page and the connection log/debug guidance into Persian. Field labels (Client ID, Client Secret, API Key) remain in English; helper text, status messages, and debug instructions are now in Persian.
1.2.6
- Fixed a typo in the Yoast SEO postmeta keys used by
sync_third_party_meta(): values were being written to_yoast_wp_seo_*instead of the correct_yoast_wpseo_*keys, so Yoast never picked up the meta title, meta description, focus keyword, or Open Graph title/description sent by Youtix, even though the data was saved successfully. - Added a one-time migration (runs automatically on the next page load, guarded so it only runs once) that moves any values already sitting under the old misspelled keys over to the correct keys on existing posts, without overwriting a correct-key value that’s already set.
1.2.3
- Renamed the plugin from “SEOBot Connector for Youtix” to “Youtix Sync Connector” to avoid confusion with an existing, unrelated “SEOBot AI” plugin, per WordPress.org Plugin Review Team guidance. Updated all internal identifiers (classes, functions, option and meta keys, text domain) to match.
1.2.2
- Documented and justified the two remaining postmeta lookup queries flagged by the Plugin Check tool.
1.2.1
- Renamed and rebranded to comply with WordPress.org naming guidelines.
- Fixed enqueue, i18n, escaping, and variable-naming issues found by the Plugin Check tool.
- Bumped “Tested up to” to WordPress 7.1.
1.2.0
- Replaced development localhost configuration with the fixed HTTPS production endpoint.
- Added secure REST request schemas, replay protection, managed-post authorization, and safer request validation.
- Added strict featured-image size, MIME, file-type, and image-editor validation.
- Removed sensitive request/response logging and raw response display.
- Added WordPress.org metadata, privacy-policy guidance, and translatable administration strings.
1.1.0
- Initial release.