WP Manifestindependent plugin directory
manifest / admin / disciple-tools-auto-assignment

Disciple.Tools - Auto Assignment WP RegistryLow-severity findings · 1 findingOpen the reportA-

by discipletools · github.com/discipletools/disciple-tools-auto-assignment · website

★ 0stars
76release downloads
≈10active sites
1.1latest · 4 years ago

Install

Download disciple-tools-auto-assignment.zip From the 1.1 release on GitHub, Feb 18, 2022

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/discipletools/disciple-tools-auto-assignment/releases/download/1.1/disciple-tools-auto-assignment.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.
Readme github.com/discipletools/disciple-tools-auto-assignment ↗

Plugin Banner

Disciple.Tools - Auto Assignment

Auto assignment of incoming contacts from various sources, with corresponding multiplier; based on highest relevance.

Purpose

This plugin further assists the dispatcher by automating the assignment of contacts to the relevant multiplier, based on information such as location, age, gender and/or language.

Usage

Will Do

  • Enable the cherry-picking of incoming sources to be processed.
  • Provides the ability to specify if under-age contacts are to be automatically assigned.
  • Provides the ability to specify areas (gender, location, age) of enforcement.
  • Auto-Assignment decision-making process is also dependent on other factors, such as a multiplier's availability and current workload.

Requirements

  • Disciple.Tools Theme installed on a Wordpress Server

Installing

  • Install as a standard Disciple.Tools/Wordpress plugin in the system Admin/Plugins area.
  • Requires the user role of Administrator.

Contribution

Contributions welcome. You can report issues and bugs in the Issues section of the repo. You can present ideas in the Discussions section of the repo. And code contributions are welcome using the Pull Request system for git. For a more details on contribution see the contribution guidelines.

Releases

2 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
1.1 latest
Feb 18, 2022 4 years ago
disciple-tools-auto-assignment.zip
66
1.0
Feb 10, 2022 4 years ago
disciple-tools-auto-assignment.zip
10

Active-site estimate ≈10 comes from the median of recent superseded releases. Method.

A- grade

Security

Disciple.Tools - Auto Assignment 1.1 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
1.1
Findings
1
Worst severity
low
Content hash
96c3fd4cb57ff76efd514b17…

Findings

  • low Notice dismiss AJAX updates dismissed-* options without a capability check

    missing_capability

    dt_hook_ajax_notice_handler is registered on wp_ajax_dismissed_notice_handler. It verifies a nonce then writes update_option('dismissed-' . $type, true) with $type from $_POST['type'] after sanitize_text_field. There is no current_user_can check. Any authenticated user who obtains or reuses a valid dismiss nonce can pollute dismissed-* options. Blast radius is limited to notice-dismissal flags.

    disciple-tools-auto-assignment.php:265-271

    Recommendation

    Require an appropriate capability (e.g. manage_dt or manage_options) before updating dismissed-* options, and optionally restrict $type to an allowlist of known notice keys.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →