WP Manifestindependent plugin directory
manifest / email / supernova-mail-manager

SuperNova Mail Manager

Advanced control over WordPress emails — override From, set CC/BCC/Reply-To, configure SMTP, and log every outgoing message.

by Jatin Chavda · github.com/jatinchavda/supernova-mail-manager · website

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/jatinchavda/supernova-mail-manager/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/jatinchavda/supernova-mail-manager ↗

SuperNova WP Mail Manager

Requires WordPress: 5.8+
Requires PHP: 7.4+
License: GPL-2.0-or-later
Text Domain: supernova-mail-manager

File Structure

supernova-mail-manager/
├── supernova-mail-manager.php   ← Main plugin file (bootstrap + hooks)
├── includes/
│   ├── class-snwpmm-settings.php  ← Settings registration, sanitisation, accessor
│   ├── class-snwpmm-mailer.php    ← wp_mail / phpmailer_init hooks
│   ├── class-snwpmm-admin.php     ← Admin menu, settings page, log page
│   └── class-snwpmm-logger.php    ← DB log table + capture hooks
├── languages/                     ← .pot / .po / .mo translation files (future)
└── README.md

WordPress Coding Standards Checklist

Standard Applied
Unique prefix snwpmm_ on all functions, classes, constants, options ✅
ABSPATH guard in every file ✅
sanitize_* / esc_* on all inputs and outputs ✅
wp_nonce_field + check_admin_referer on all forms ✅
current_user_can('manage_options') capability check ✅
register_setting with sanitize_callback ✅
wp_safe_redirect + exit after form handling ✅
No direct DB queries without $wpdb + prepared statements ✅
dbDelta for table creation ✅
Internationalisation with __() / esc_html_e() / esc_attr_e() ✅
Singleton pattern — one instance per class ✅
register_activation_hook / register_deactivation_hook ✅
PHPDoc blocks on every class, method, and property ✅
admin-post.php endpoint for form actions (not $_SERVER['REQUEST_URI']) ✅
Password field: only updates when a new value is entered ✅

Security Note — SMTP Password

The SMTP password is stored in wp_options as plain text (encrypted storage is outside WordPress core). For production use consider one of these approaches:

  1. Environment variable — define SNWPMM_SMTP_PASS in wp-config.php and read it in SNWPMM_Settings::get() before falling back to the DB value.
  2. Secret Manager — retrieve the value from AWS Secrets Manager / GCP Secret Manager at runtime and never persist it.

Planned Future Features

  • Email templates — HTML wrapper for all outgoing WordPress emails.
  • Per-role CC/BCC — add different CC addresses based on the sending context.
  • Conditional routing — use different SMTP profiles for WooCommerce vs. contact-form emails.
  • WP-CLI commands — wp snwpmm log list, wp snwpmm log clear, wp snwpmm test-email.
  • Log auto-pruning — scheduled event to delete log rows older than N days.
  • Import / Export settings — JSON export and import of all options.
  • Multisite support — network-level settings with per-site overrides.
  • App password support — dedicated UI helpers for Gmail / Outlook OAuth.