WP Manifestindependent plugin directory
manifest / users / disciple-tools-streams

Disciple.Tools - Streams WP Registry grade C-. High-severity findings · 1 findingWP RegistryHigh-severity findings · 1 findingOpen the reportC-

A stream is a collection of work, large or small. The streams plugin interconnects leaders, disciples, groups, churches, trainings, and other elements with census style reporting. A stream can be a large organization, movement, or a few groups started from a single training. It is a named effort that needs to be tracked for good stewardship.

★ 1stars
431release downloads
≈30active sites
3.1.6latest · 2 years ago

Install

Download disciple-tools-streams.zip From the 3.1.6 release on GitHub, Sep 26, 2024

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/discipletools/disciple-tools-streams/releases/download/3.1.6/disciple-tools-streams.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

Plugin Banner

Disciple.Tools - Streams

A stream is a collection of work, large or small. The streams plugin interconnects leaders, disciples, churches, churches, trainings, and other elements with census style reporting. A stream can be a large organization, movement, or a few churches started from a single training. It is a named effort that needs to be tracked for good stewardship.

Purpose

The movement of the kingdom is not clean and organized. Streams is an effort to provide a container that allows a disciple maker to track area of work which might be a collection of leaders, trainings, and churches. Often the reporting from these efforts can lack detail, so the census reporting allows those leaders and key disciples to report on the numbers of baptisms and churches with locations.

Organizing collections of work this way, allows leaders to go to one place and understand key leadership, key churches/churches, and key training efforts in those areas.

Usage

Will Do

  • Track parent, child, and peer streams of work
  • Track key leaders connected as contacts
  • Track key disciples as contacts
  • Track key churches in the movement stream
  • Track comments and notes
  • (with the Trainings plugin installed) Track trainings in the stream
  • Track comments about the stream
  • Share the stream, assigned owner, and church planters responsible for the stream
  • Collect census reports through secure magic links that require no password.

Will Not Do

  • Currently, reports do not create churches or contacts.

Requirements

  • Disciple.Tools Theme installed on a Wordpress Server

Installing

  • Install as a standard Disciple.Tools/Wordpress plugin in the system Admin/Plugins area.
  • Requires the user role of Administrator.

Contribution

Contributions welcome. You can report issues and bugs in the Issues section of the repo. You can present ideas in the Discussions section of the repo. And code contributions are welcome using the Pull Request system for git. For a more details on contribution see the contribution guidelines.

Screenshots

details page details

list page list page

census reports magic collection page reports

Releases

19 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
3.1.6 latest
Sep 26, 2024 2 years ago
disciple-tools-streams.zip
51
Feb 1, 2024 2 years ago
disciple-tools-streams.zip
34
Jan 31, 2024 2 years ago
disciple-tools-streams.zip
30
Jan 31, 2024 2 years ago
disciple-tools-streams.zip
4
Mar 16, 2023 3 years ago
disciple-tools-streams.zip
37
Feb 14, 2023 3 years ago
disciple-tools-streams.zip
27
3.1
Nov 11, 2022 3 years ago
disciple-tools-streams.zip
27
3.0
Oct 6, 2022 4 years ago
disciple-tools-streams.zip
23
2.6
May 3, 2022 4 years ago
disciple-tools-streams.zip
27
Dec 17, 2021 4 years ago
disciple-tools-streams.zip
57
2.5
Dec 15, 2021 4 years ago
disciple-tools-streams.zip
9
Nov 11, 2021 4 years ago
disciple-tools-streams.zip
14
Oct 29, 2021 4 years ago
disciple-tools-streams.zip
8
Aug 18, 2021 5 years ago
disciple-tools-streams.zip
15
2.3
Jul 19, 2021 5 years ago
disciple-tools-streams.zip
14
2.2
Feb 18, 2021 5 years ago
disciple-tools-streams.zip
17
2.1
Jan 27, 2021 5 years ago
disciple-tools-streams.zip
12
2.0
Jan 7, 2021 5 years ago
disciple-tools-streams.zip
7
0.1
Jul 22, 2020 6 years ago
disciple-tools-streams.zip
18

Active-site estimate ≈30 comes from the median of recent superseded releases. Method.

C- grade

Security

Disciple.Tools - Streams 3.1.6 · audited by WP Registry

High-severity findings.

1 high
Audited release
3.1.6
Findings
1
Worst severity
high
Content hash
5d8f6d4f952844316d05abf0…

Findings

  • high Magic-link report delete is not bound to the stream that presented the key

    missing_auth

    DT_Stream_Reports::endpoint correctly resolves post_id from parts.meta_key + parts.public_key before dispatching. delete_report then calls Disciple_Tools_Reports::delete($params['report_id']) with no check that that report_id belongs to the resolved post_id. Anyone holding any valid streams_app/report magic key (including keys stolen via the join REST bypass) can delete arbitrary dt_reports rows by incrementing report_id. insert_report is bound to the verified post_id; delete is not. Observable consequence is destruction of other streams' baptism/church/disciple census rows while the caller's own post only gets report_last_modified bumped.

    magic/magic-reports.php:2076-2085

    Recommendation

    Load the report by ID and refuse the delete unless report.post_id equals the magic-key-resolved $post_id (and type/subtype match streams_app/report). Prefer a capability/ownership helper inside Disciple_Tools_Reports::delete rather than trusting client report_id.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.