WP Manifestindependent plugin directory
manifest / analytics / ftt-public-heatmap

Zume/FTT - Public Heatmaps WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

★ 0stars
17release downloads
≈10active sites
0.3latest · 4 years ago

Install

Download zume-public-heatmaps.zip From the 0.3 release on GitHub, Oct 2, 2022

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/zumeproject/ftt-public-heatmap/releases/download/0.3/zume-public-heatmaps.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

Zúme - Public Heatmap

Add public & private saturation heat maps for Activity, Practitioners, Trainings, and new Churches, as well as add a reporting portal to every contact so that they can self report on status and church planting progress.

Purpose

Expand Disciple Tools' ability to communicate progress and collect progress from key contacts.

Usage

Will Do

  • The measurement for the saturation statistics is 1 practitioner and 2 churches for every 5,000 in the US and 50k for the world.
  • Adds magic links for public map display
  • Adds a reporting portal that allows a contact to edit the contact's personal details and report churches generationally.

Requirements

  • Disciple.Tools Theme installed on a Wordpress Server

Installing

  • Install as a standard Disciple.Tools/Wordpress plugin in the system Admin/Plugins area.
  • Requires the user role of Administrator.

Contribution

Contributions welcome. You can report issues and bugs in the Issues section of the repo. You can present ideas in the Discussions section of the repo. And code contributions are welcome using the Pull Request system for git. For a more details on contribution see the contribution guidelines.

Screenshots

Saturation Map Screen screenshot Saturation Map - Saturation Measurement Panel screenshot Report Home (mobile first, magic link) screenshot Report Menu (mobile first, magic link) screenshot Report New Church Editor screenshot

Releases

3 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
0.3 latest
Oct 2, 2022 4 years ago
zume-public-heatmaps.zip
7
0.2
Oct 2, 2022 4 years ago
zume-public-heatmaps.zip
5
0.4
Oct 2, 2022 4 years ago
zume-public-heatmaps.zip
5

Active-site estimate ≈10 comes from the median of recent superseded releases. Method.

A- grade

Security

Zume/FTT - Public Heatmaps 0.3 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
0.3
Findings
1
Worst severity
low
Content hash
36a9af6841f30c504e01ef73…

Findings

  • low Notice dismiss AJAX missing capability check

    missing_capability

    dt_hook_ajax_notice_handler verifies a nonce then update_option('dismissed-' . $type) with no current_user_can. Blast radius is limited to suppressing admin notices (dismissed-zume-public-heatmaps etc.).

    zume-public-heatmaps.php:251-261

    Recommendation

    Require current_user_can('manage_options') before updating dismissed-* options, and allowlist type values.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.