內容簡介
CosmautDL 是一款多雲端下載管理外掛，能將分散的雲端硬碟連結轉換為整潔的「下載卡片」體驗，並提供專屬的下載頁面、全站檔案樹索引及點擊統計，幫助網站擁有者管理資源。
【主要功能】
• 統一的下載卡片介面
• 每篇文章專屬下載頁面
• 整理外部連結的重定向路徑
• 瀏覽所有共享資源的檔案樹頁面
• 下載點擊統計儲存在本地資料庫
• 可選的微信 QR 碼解鎖流程
外掛標籤
開發者團隊
原文外掛簡介
CosmautDL is a multi-cloud download manager plugin for WordPress.
It turns scattered cloud-drive links into a clean “download card” experience, and provides dedicated download pages, a site-wide file-tree index, and click statistics for site owners.
Key features:
Unified download card UI for posts/pages
Dedicated download page route per post
Redirect route to keep outbound links tidy
File-tree page to browse all shared resources
Click statistics stored in your own database
Optional WeChat QR unlock workflow
Assets loaded only when needed
Supported providers
Baidu Pan, 123Pan, Aliyun Drive, Tianyi Cloud, Quark, PikPak, Lanzou, Xunlei, Weiyun, OneDrive, Google Drive, Dropbox, MEGA, MediaFire, Box, and Other.
Routes (pretty permalinks recommended):
Download page: /downloads/{post_id}.html (or ?cosmdl_download=1&post_id={id})
File tree: /downloads/tree.html (or ?cosmdl_tree=1)
Stats entry: /downloads/stats.html (or ?cosmdl_stats=1; admin-only)
Redirect: /{prefix}/{post_id}/{type}.html (or ?cosmdl_redirect=1&post_id={id}&type={type})
Data and privacy overview:
Stores download click logs in a custom table: {wp_prefix}cosmdl_clicks (post_id, type, attach_id, user_id, ip, ua, referer, success, created_at).
Core features do not require external services.
Privacy/External Services
Data Collection: The plugin records the IP, UA, Referer, and time of download clicks only for backend statistics and troubleshooting; data is stored in your database and never sent outside.
External Services (Optional): When “IP Geolocation Display” is enabled, the admin backend queries ipapi/ip-api/ipinfo for geolocation; results are cached and displayed in wp-admin. No external requests occur when disabled.
WeChat QR Unlock (Optional): Redirects the visitor browser to WeChat authorization (open.weixin.qq.com) and the server calls api.weixin.qq.com endpoints to exchange code for openid and check subscription. The plugin does not persist openid; it uses a short-lived unlock flag (~10 minutes) and caches the official account access_token (up to ~2 hours).
User Control: You can disable these optional features at any time in plugin settings; uninstalling the plugin cleans up plugin-created data and caches.
Compliance Note: In some jurisdictions, IP addresses are personal data; obtain consent or meet legal requirements before enabling IP geolocation.
External services
This plugin can connect to external services only when you enable related options.
1) WeChat OAuth and subscription check
Service: WeChat / Tencent
Purpose: Used for WeChat unlock mode authentication
Endpoints:
https://open.weixin.qq.com/connect/oauth2/authorize (OAuth authorize, visitor browser redirect)
https://api.weixin.qq.com/sns/oauth2/access_token (exchange OAuth code for openid)
https://api.weixin.qq.com/cgi-bin/token (fetch official account access_token)
https://api.weixin.qq.com/cgi-bin/user/info (check subscription status)
When: Only if you enable WeChat unlock in CosmautDL settings and visitors open the unlock URL in WeChat after scanning the QR code.
Data sent:
Visitor browser to open.weixin.qq.com: appid, redirect_uri, response_type, scope, state, and standard HTTP request metadata handled by WeChat (for example IP address and user agent).
Your server to api.weixin.qq.com: appid, appsecret, OAuth code, grant_type; later access_token, openid, lang.
Data stored (local): Does not store openid permanently; stores a short-lived unlock flag transient (10 minutes) and caches the official account access_token transient (up to ~2 hours, based on API expires_in).
User control: You can disable this feature at any time in plugin settings.
Data deletion: Transients expire automatically.
Terms of Service: https://www.wechat.com/en/service_terms.html
Privacy Policy: https://www.wechat.com/en/privacy_policy.html
2) IP geolocation lookup
Services (selectable in settings):
https://ipapi.co/
https://ip-api.com/
https://ipinfo.io/
Purpose: To display IP location in admin download statistics
When: Only if you enable Show IP location in stats and open stats details in wp-admin.
Data sent: IP address from your click logs, from your server to the chosen provider (requests are cached).
Caching: Results are cached for 168 hours (7 days) by default to reduce API calls.
User control: You can disable this feature at any time in plugin settings.
Data Flow: Your server to IP Geolocation API and back to your server (IP addresses are sent for location lookup)
Privacy Impact: IP addresses are considered personal data in some jurisdictions; cached results help minimize exposure
Data Deletion: Cached geolocation data automatically expires after 7 days; IP addresses in click logs can be deleted from admin stats page
Terms of Service:
ipapi: https://ipapi.co/terms/
ip-api: https://ip-api.com/docs/legal
ipinfo: https://ipinfo.io/terms-of-service
Privacy Policies:
ipapi: https://ipapi.co/privacy/
ip-api: https://ip-api.com/docs/legal
ipinfo: https://ipinfo.io/privacy-policy
Third-party libraries
phpqrcode
Library: phpqrcode (LGPL-3.0)
Purpose: On-site QR code generation for WeChat unlock functionality
License: GNU Lesser General Public License v3.0
License URI: https://www.gnu.org/licenses/lgpl-3.0.html
Usage: Used for generating unlock QR codes without external dependencies
Compatibility: LGPL-3.0 is compatible with GPLv3
