Syndicore - Automated Content Syndication & Publishing for WordPress

Syndicore is a powerful, automated content engine designed to synchronize RSS feeds and social media directly into your WordPress installation. It includes a robust Telegram Bot integration that allows you to draft, edit, and publish articles remotely.

Whether you are managing a specialized news aggregator, curating content from various subreddits and YouTube channels, or simply drafting blog posts efficiently via Telegram, Syndicore serves as the central engine for your syndication workflows.

Features

Automated Content Syndication

• Multi-Source Ingestion: Fetch and parse content from standard RSS/Atom feeds, YouTube Channels, Reddit, and third-party RSS bridges.
• Dynamic Content Mapping: Utilize template tags ({title}, {date}, {body}, {image}, {original_url}, {author_name}) to precisely format how the imported content is rendered in WordPress.
• Automated Media Handling: Automatically downloads and attaches external images to the WordPress Media Library, configuring them as Featured Images.
• Content Sanitization: Automatically strip emojis, remove specific HTML tags, or omit unwanted text strings from the imported content during the ingestion phase.
• Duplicate Prevention: Intelligent tracking via unique GUIDs and content hashing ensures identical articles are never published twice.
• Database Optimization: Maintains a lightweight database by automatically deleting imported posts that exceed a specified retention period.

Telegram Remote Publishing

• Remote Publishing Access: Connect your WordPress site directly to a custom Telegram Bot for external publishing.
• Structured Drafting Workflow: Intuitive conversational interface to systematically draft your post title, body content, and attach featured media.
• Secure Webhooks: Encrypted and secure connections utilizing automated Telegram Webhook registration and strict secret token validation.
• Access Control: Restrict publishing capabilities to designated Telegram Chat IDs, ensuring only authorized personnel have write access.

Installation

1. Download the latest release of Syndicore.
2. Upload the syndicore folder to the /wp-content/plugins/ directory of your WordPress installation, or install it via the WordPress Admin interface (Plugins > Add New > Upload Plugin).
3. Activate the plugin through the Plugins menu in WordPress.
4. Navigate to Syndicore in the left sidebar of your WordPress admin panel to begin configuring the global settings.

Configuration & Usage

Adding an Integration

1. Navigate to Syndicore > Integrations and select Add New Integration.
2. Input your target RSS or social media URL. (Syndicore will automatically attempt to resolve specific Reddit and YouTube URLs to their corresponding feed formats).
3. Configure the mapping rules (e.g., categories, tags, and synchronization intervals).
4. Save the integration. Syndicore will automatically initiate a background synchronization process to ingest the latest articles.

Setting up the Telegram Bot

1. Open the Telegram application and search for @BotFather.
2. Send the /newbot command and follow the instructions to provision a new bot.
3. Copy the provided HTTP API Token.
4. In your WordPress admin dashboard, navigate to Syndicore > Options.
5. Input the token into the Bot Token field.
6. Enter your Telegram User ID or Chat ID in the Authorized Chat IDs field to enforce strict access control.
7. Save your changes. Syndicore will automatically register the necessary webhooks with Telegram.
8. Send /start or /new to your bot on Telegram to begin drafting a post.

Security & Open Source Readiness

Syndicore is engineered in strict adherence to WordPress coding standards and modern security practices:

• Nonces & Permissions: All settings, AJAX calls, and administrative actions are protected by Nonces and strict current_user_can('manage_options') authorization checks.
• Sanitization: Comprehensive usage of sanitize_text_field, wp_kses_post, and esc_url_raw prevents cross-site scripting (XSS) and injection vulnerabilities.
• Webhook Security: Incoming communication from Telegram is validated using the X-Telegram-Bot-Api-Secret-Token header, ensuring payload authenticity.
• Credential Management: No hardcoded API keys are present in the repository; all sensitive credentials are user-supplied and stored securely in the WordPress database.

Contributing

Contributions, issue reports, and feature requests are highly encouraged. Please review the issues page if you wish to contribute to the project's development.

License

This project is licensed under the GPLv2 (or later) License - see the LICENSE file for comprehensive details.