Περιγραφή
42flows SEO Meta enables REST API write access to SEO meta fields for posts and pages. It auto-detects your active SEO plugin (Yoast SEO, Rank Math, or All in One SEO) and registers only the relevant meta fields with show_in_rest.
This plugin is required if you use 42flows to publish SEO-optimized content to your WordPress site. Without it, SEO titles, meta descriptions, and focus keyphrases cannot be set via the REST API.
Supported SEO plugins
- Yoast SEO —
_yoast_wpseo_title,_yoast_wpseo_metadesc,_yoast_wpseo_focuskw - Rank Math —
rank_math_title,rank_math_description,rank_math_focus_keyword - All in One SEO —
_aioseo_title,_aioseo_description,_aioseo_keywords
What it does
- Detects which SEO plugin is active on your site
- Registers that plugin’s meta fields with
show_in_rest => truefor posts and pages - Adds
sanitize_callback(sanitize_text_field) andauth_callback(requires edit_posts capability) - Does nothing if no supported SEO plugin is detected
What it does NOT do
- Does not modify your existing SEO data
- Does not add any admin pages, settings, or UI
- Does not load any JavaScript or CSS
- Does not store any data
Companion plugin installation and upgrades
When your site is connected to 42flows, 42flows may request that this plugin install, activate, or upgrade a companion plugin (42flows-content) that enables render-time features for posts delivered by the 42flows pipeline (schema markup, attribution footer, page-optimizer REST surface). The companion plugin is downloaded from https://42flows.com/plugins/42flows-content-latest.zip via the /wp-json/42flows/v1/install-companion REST route.
The route requires the requesting user to hold:
install_pluginsandactivate_pluginsfor fresh installs (typically Administrator role)delete_pluginsadditionally when amin_versionparameter is supplied that exceeds the currently-installed companion version, because the upgrade path deletes the existing companion folder before reinstalling
The companion zip URL is hard-coded in the plugin source — it is never user-supplied — so the route presents no SSRF surface. No installation, upgrade, or deletion occurs unless your site is connected to 42flows and the request is authenticated by an administrator-capability user.
Εγκατάσταση
- Install the plugin from the WordPress plugin directory, or upload the ZIP file via Plugins > Add New > Upload Plugin.
- Activate the plugin.
- No configuration needed — the plugin auto-detects your SEO plugin.
Συχνές Ερωτήσεις
-
Do I need this plugin?
-
Only if you use 42flows to publish content to your WordPress site and want SEO meta fields (title, description, focus keyphrase) set automatically via the REST API.
-
What if I don’t have an SEO plugin?
-
The plugin does nothing if no supported SEO plugin (Yoast, Rank Math, or AIOSEO) is detected. It is safe to keep installed.
-
Is it safe?
-
Yes. It only registers existing meta fields for REST API access with proper sanitization and authentication. Only users with the
edit_postscapability can write to these fields. All input is sanitized withsanitize_text_field.The companion-install REST route requires
install_plugins+activate_pluginscapabilities, and additionallydelete_pluginsfor in-place upgrades. The companion plugin source URL is hard-coded — never accepted from request input — so there is no SSRF surface. The optionalmin_versionparameter is validated against a strictX.Y.Zregex before being passed to PHP’sversion_compare. -
Does it work with custom post types?
-
Currently it registers meta fields for posts and pages. Support for custom post types can be added in a future version.
Κριτικές
Δεν υπάρχουν αξιολογήσεις για αυτό το πρόσθετο.
Συνεισφέροντες & Προγραμματιστές
“42flows SEO Meta” είναι λογισμικό ανοιχτού κώδικα. Οι παρακάτω έχουν συνεισφέρει στη δημιουργία του.
Συντελεστές
Το “42flows SEO Meta” έχει μεταφραστεί σε 1 γλώσσα. Ευχαριστούμε τους μεταφραστές για τις συνεισφορές τους.
Μεταφράστε το “42flows SEO Meta” στην γλώσσα σας.
Ενδιαφέρεστε για την ανάπτυξη;
Περιηγηθείτε στον κώδικα, ανατρέξτε στο αποθετήριο SVN ή εγγραφείτε στο αρχείο καταγραφής αλλαγών ανάπτυξης μέσω RSS .
Σύνοψη αλλαγών
1.2.1
- Auto-enable WordPress plugin auto-updates for 42flows plugins. On every successful
/install-companioncall, both42flows-seo-metaand42flows-contentare added to WordPress’sauto_update_pluginssite option so future feature/security/fix releases reach the customer site without a manual click. Idempotent — safe to call repeatedly. Customers retain control: the WP admin Plugins page still shows a “Disable auto-updates” link. - Why: customers connect their site to 42flows specifically so 42flows manages the meta + render layer; asking them to also manually toggle plugin auto-updates per plugin is onboarding friction with no upside (every WP-side plugin update of these two plugins comes from us anyway).
1.2.0
- Add optional
min_versionparameter to/wp-json/42flows/v1/install-companion. When supplied (semverX.Y.Z), the route compares the installed companion version againstmin_versionand performs an in-place upgrade (deactivate delete reinstall activate) if the installed version is older. Required because WordPress’sPlugin_Upgrader::installrefuses to overwrite an existing plugin folder. Without this parameter, behavior is unchanged: idempotent ensure-installed-and-active. - Upgrade path additionally requires the authenticated user to hold the
delete_pluginscapability, in line with the principle of least privilege. min_versionis validated as^\d+\.\d+\.\d+$before reachingversion_compare()to reject arbitrary input.- Code refactored: install logic deduplicated into a shared helper used by both fresh-install and upgrade paths.
1.1.0
- Add REST route
/wp-json/42flows/v1/install-companionfor authenticated companion-plugin installation (requiresinstall_pluginscapability). Used only when the site is connected to 42flows.
1.0.0
- Initial release.
- Support for Yoast SEO, Rank Math, and All in One SEO.
- Meta fields registered for posts and pages.