外掛標籤
開發者團隊
原文外掛簡介
Revys is a review service (SaaS) published by OZAPP SRL (Belgium). It collects the Google reviews of your business through the official Google Business Profile API (you connect your profile with Google OAuth in your Revys dashboard), then pushes them to your WordPress site every night over a signed connection (HMAC SHA-256).
This plugin is the WordPress side of that connection. It receives the reviews, stores them in your WordPress database and renders them on the server: the reviews are part of the static HTML of your page, with no JavaScript needed to display them. Search engine crawlers and AI assistants that read pages without running JavaScript (Google, ChatGPT search, Google AI Overviews, Perplexity…) can therefore read your reviews, which is not the case with most review widgets loaded by JavaScript or in an iframe.
A Revys account is required. The plugin does nothing on its own: the reviews come from your Revys account. A free plan (one Google Business Profile) and a paid Pro plan are available on revys.io.
Features
Google reviews shown as server-side HTML: author, rating, date and text, with the layout, theme and style chosen in your Revys dashboard (carousel, grid, list, badge, wall; light or dark).
Compliant schema.org structured data: an Organization object (name, URL) only. The plugin never outputs AggregateRating or Review markup for your own business (see the FAQ).
“Revys Reviews” block for the block editor, and the [revys_reviews widget="ID"] shortcode.
Settings page (top-level “Revys” menu, also under Settings → Revys) to paste your connection secret, with an immediate check against Revys.
Signed, push-based sync: Revys sends the reviews to a dedicated REST endpoint of your site; requests without a valid signature are rejected.
The widget markup sent by Revys is filtered before output (strict allow-list of tags and attributes, stylesheet scoped to the widget, JSON-LD re-encoded). No JavaScript is added to your pages.
Works with page cache plugins: when a sync changes your reviews, the cached pages that show them are cleared (LiteSpeed Cache, WP Rocket, W3 Total Cache, WP Super Cache, WP Fastest Cache, SiteGround Optimizer, Hummingbird, Cloudflare).
Translation-ready (translations are managed on translate.wordpress.org).
Supported review sources
Google (Google Business Profile): available.
Facebook and Trustpilot: planned, not available yet.
Free plan credit
On the free Revys plan, the widget rendered by the Revys service ends with a small “Widget gratuit par Revys” credit linking to revys.io (rel="nofollow sponsored"). It is part of the service output, not added by the plugin, and it is removed on the paid plan.
Source code
The plugin ships with its full, human-readable source code (no build step, no minified or obfuscated file).
External services
This plugin connects to Revys (https://revys.io), a review service published by OZAPP SRL (Belgium). The service is required: it collects your Google reviews and provides the content the plugin displays.
1. Secret check (request sent by your site to Revys)
What: a POST request to https://revys.io/api/wordpress/verify.
When: only when an administrator saves a connection secret on the Revys settings page. Never on page views, never on a schedule.
Data sent: your site’s home URL, the current timestamp, and an HMAC SHA-256 signature of those two values computed with the secret (in the X-Revys-Signature header). The secret itself is not sent. No data about your visitors or users is sent.
Why: to tell you right away whether the secret matches your site’s connection in Revys and, if it does, to let Revys send the first sync.
2. Review sync (requests sent by Revys to your site)
What: Revys calls the REST endpoint POST /wp-json/revys/v1/sync of your site.
When: every night, right after a secret is successfully checked, and when you click “Sync now” in your Revys dashboard (My businesses › your business › On my website).
Data received: the reviews of the connected Google Business Profile (author name, author picture URL, rating, text, language, date), the business name and URL, the display settings and the widget markup rendered by Revys. Requests without a valid signature are rejected. Your site answers with the widget ID and the number of reviews stored.
Author pictures, when present in the reviews, are image URLs served by Google; visitors’ browsers load them when the reviews are displayed.
Developers can point the plugin to another Revys instance (for local testing) with the REVYS_API_URL constant or the revys_api_url filter.
The reviews themselves are retrieved by Revys from Google through the official Google Business Profile API, under your Google account’s authorization; the plugin does not contact Google.
Revys terms and conditions: https://revys.io/legal/cgv
Revys privacy policy: https://revys.io/legal/confidentialite
