WP Manifestindependent plugin directory
manifest / themes / wp-custy

Custy - Customizer Library WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

Add beautiful and flexible options into WP Customizer

★ 7stars
10composer installs
1.5.4latest · 6 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/hrsetyono/wp-custy/archive/refs/heads/master.zip

On Packagist as pixelstudio/wp-custy:

composer require pixelstudio/wp-custy
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Custy - Advanced WordPress Customizer

This is a fork of Blocksy Customizer, with many added features like automatic CSS output and simpler parameters.

This plugin adds variety options such as Typography and Color Picker to WP Customizer.

It also comes with drag-n-drop builder for Header and Footer:

1. GETTING STARTED

Download this repo, put it in your /plugins folder, install it, and activate this plugin.

If you use Composer to install plugin, this plugin is available with the name pixelstudio/wp-custy.

Then go to Appearance > Customizer and you will see these default sections:

  1. General - Contains options for color palette, shadow, and site width.
  2. Text - Contains options for Body and Heading typography.
  3. Header - Contains drag-n-drop builder for Header.
  4. Footer - Contains drag-n-drop builder for Footer.

2. TERMINOLOGY

  • Option - Each individual setting. For example (see 1st picture above): Root Typography, Small Font Size
  • Section - The whole column of options. For example: General, Text
  • Builder - Either Header or Footer drag-n-drop setting.
  • Item - Set of options that can be placed in Header or Footer. For example (see 2nd picture above): Button, Logo

3. USING CSS OPTIONS

Across the options, you might notice this CSS toggle:

That means the value of that options is automatically outputted into :root (by default) using that variable name.

Then implement that variable in your theme wherever it fits.

4. ADD NEW SECTION

Let's say we want to add a new section where we can toggle on and off various features. Use this filter below:

add_filter( 'custy_sections', function( $sections ) {

  $sections[ 'features' ] = [
    'title' => __( 'Features' ),
    'container' => [ 'priority' => 10 ],
    'options' => [

      'has_back_to_top' => [
        'label' => __( 'Has Back to Top?' ),
        'type' => 'ct-switch',
      ],

      'has_fixed_header' => [
        'label' => __( 'Has Fixed Header?' ),
        'type' => 'ct-switch',
      ],

      'has_blog_sidebar' => [
        'label' => __( 'Has Blog Sidebar?' ),
        'type' => 'ct-switch',
      ],

    ]
  ];

  return $sections;
} );

Then, define the default values of those new options:

add_filter( 'custy_default_values', function( $defaults ) {

  $defaults = wp_parse_args( [

    'has_back_to_top' => 'yes',
    'has_fixed_header' => 'no',
    'has_blog_sidebar' => 'yes',

  ], $defaults );

  return $defaults;
} );

Done!, Check out the Customizer and you will see a new section called "Features"

Check out the Wiki for complete information on Options type and other things.

5. USING NON-CSS OPTIONS

Use the function Custy::get_mod( $option_id ) like shown below:

if( Custy::get_mod('has_back_to_top') == 'yes' ) {
  // output the back to top markup
}

To make it easy to remember what the option ID is, the label should be the same. For example: the label for has_back_to_top is "Has Back to Top?"

6. MORE INFO AT WIKI

I have prepared tons of information at Wiki including:

7. THEME BUILT WITH CUSTY

  • Edje WP Theme - My own WP starter theme using Timber Library.
  • Blocksy - The theme where this customizer originated. It is an amazing theme and I used it on my WPTips.dev Blog, but the customizer is hard to edit because it lacks filter.

Releases

16 releases.

Tag
Published
1.5.4 latest
May 20, 2020 6 years ago
May 18, 2020 6 years ago
May 17, 2020 6 years ago
May 17, 2020 6 years ago
May 10, 2020 6 years ago
May 6, 2020 6 years ago
Apr 17, 2020 6 years ago
Apr 13, 2020 6 years ago
Apr 12, 2020 6 years ago
Apr 7, 2020 6 years ago
Apr 4, 2020 6 years ago
Apr 4, 2020 6 years ago
Mar 23, 2020 6 years ago
Mar 23, 2020 6 years ago
Mar 22, 2020 6 years ago
Mar 17, 2020 6 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

Custy - Customizer Library 1.5.4 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
1.5.4
Findings
1
Worst severity
low
Content hash
42e07f5811c78e00ee08c409…

Findings

  • low Changelog AJAX endpoint missing capability check

    missing_capability

    Blocksy_Admin_Dashboard_API registers wp_ajax_get_latest_changelog without current_user_can or nonce. Any logged-in user (Subscriber+) can POST admin-ajax.php?action=get_latest_changelog and receive the theme changelog.txt contents via wp_send_json_success. Observable consequence: minor information disclosure of theme changelog text (not site secrets).

    blocksy-lib/admin/api.php:24-55

    Recommendation

    Require current_user_can('edit_theme_options') or manage_options before returning changelog data; add a nonce if kept as admin UI ajax.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.