內容簡介
Apaxon Core 是一個基礎外掛，支援其他 Apaxon 外掛的運行。它負責處理授權、共享設定框架、細緻的權限管理及安全性輔助功能，確保所有 Apaxon 外掛不重複使用相同的程式碼。
【主要功能】
• 加密秘密：使用 libsodium 加密 API 金鑰和密碼
• 寄送郵件：支援多種郵件服務提供商
• 細緻權限：可設定不同使用者的操作權限
• 站點檢查：報告授權狀態及任務執行情況
• 無追蹤：不收集訪客數據或使用者行為
• 外部服務：與 Apaxon 平台進行安全通信
外掛標籤
開發者團隊
原文外掛簡介
Apaxon Core is the plugin the other Apaxon plugins sit on. Install it once and it handles licensing, a shared settings framework, granular permissions and the security helpers every Apaxon plugin uses — so no two of our plugins ship their own copy of the same code.
Encrypted secrets
API keys, SMTP passwords and webhook secrets are sealed with libsodium before they reach the database. Most plugins store them in plaintext, which means any database dump, stray backup file or SQL injection elsewhere on the site hands over a working set of credentials.
Email that actually sends
WordPress sends email through your server by default, which on shared hosting often means it is quietly discarded. Pick your provider — Gmail, Microsoft 365, Brevo, SendGrid and others are preset — enter an app password, and press the test button. Passwords are encrypted before they are stored.
If you already run WP Mail SMTP, FluentSMTP or Post SMTP, Apaxon leaves email alone entirely and tells you which plugin is in charge.
Granular permissions
Apaxon features use their own capabilities rather than manage_options. You can let a receptionist manage the booking calendar without making them an administrator who can install plugins and edit users.
Site checks
Core reports what it can see: licence state, whether scheduled tasks are actually running, PHP end-of-life, HTTPS, the file editor, debug mode. Findings appear in Apaxon Tools and in WordPress’s own Site Health screen.
Your site keeps working
If our platform is unreachable, Core keeps your last known entitlements and carries on. Nothing switches off because of an outage on our side, and nothing switches off the moment a subscription lapses — plugins fall back to their free capabilities instead.
No tracking
Core reports your WordPress version, PHP version and plugin versions so we can warn you about vulnerabilities affecting your site. It does not collect visitor data, page views, or anything about the people using your website.
External services
This plugin communicates with the Apaxon platform at https://wpapaxon.com. Nothing is sent automatically until you enter a licence key.
Automatically, once a licence key is present:
Activating and validating your key, twice a day by default (sends: licence key, site address, and — unless you turn off version reporting in Settings — your WordPress, PHP and Apaxon Core versions)
Checking for module updates (sends: licence key, site address, installed module versions)
Only when you press the button:
Apaxon → Tools → Maintenance → “Test the connection to Apaxon” makes a single request to check whether your server can reach us. It works without a licence key, so you can tell a blocked host from an invalid key. Like every request this plugin makes, it identifies itself with your site address and the Apaxon Core version.
Terms: https://wpapaxon.com/terms — Privacy policy: https://wpapaxon.com/privacy
