Brand DigiAudit for your agency

Everything a client sees about who made the plugin, and every address a request goes to, comes from one file: config.php, at the root of the plugin folder. None of it can be changed from the WordPress admin, so a client cannot redirect your quote requests.

Edit config.php before you install

Unzip the release, edit config.php, zip the digiaudit folder again, and install that zip on the client's site.

Keep your changes through updates

An update replaces the plugin folder, config.php included. To set values an update cannot touch, put them in a must-use plugin instead — a PHP file in wp-content/mu-plugins/:

<?php
add_filter( 'digipacket_audit_agency_config', function ( $config ) {
	$config['agency_name']  = 'Your Agency';
	$config['agency_email'] = '[email protected]';
	return $config;
} );

Any key from the table can be set this way.

Send requests to your CRM

With webhook_url set, DigiAudit posts JSON to it on every quote request (quote.requested) and on every proactive alert (scan.alert). A quote request fails only if both the e-mail and the webhook fail, so a webhook is the way to never lose one on a server that cannot send mail.

Each call carries:

• X-Digipacket-Audit-Event — quote.requested or scan.alert;
• X-Digipacket-Audit-Signature — sha256= and the HMAC-SHA256 of the raw body, when webhook_secret is set.

The body holds event, quote (reference, contact details, urgency, message, selected items), site (address, versions, theme, plugins), score, grade, counts, categories, selected, issues, scanned_at and plugin. A 2xx answer within 10 seconds counts as delivered.

Check the signature before trusting a call:

$body     = file_get_contents( 'php://input' );
$expected = 'sha256=' . hash_hmac( 'sha256', $body, $secret );

if ( ! hash_equals( $expected, $_SERVER['HTTP_X_DIGIPACKET_AUDIT_SIGNATURE'] ?? '' ) ) {
	http_response_code( 401 );
	exit;
}

Hooks

Add a check of your own

Extend Digipacket_Audit_Check, describe the check in setup(), return a result from run(), and register it:

class My_Check extends Digipacket_Audit_Check {

	protected function setup() {
		$this->id             = 'my_check';
		$this->category       = 'security'; // security, performance, seo or maintenance
		$this->title          = 'Mon contrôle';
		$this->weight         = 5;
		$this->effort         = 'quick';    // quick, medium or complex
		$this->risk           = 'Pourquoi c\'est important.';
		$this->recommendation = 'Ce que la correction implique.';
	}

	public function run( Digipacket_Audit_Context $ctx ) {
		$ok = true; // Your test.

		return $ok
			? $this->good( 'Tout va bien.' )
			: $this->critical( 'Problème détecté.', array( 'détail' ) );
	}
}

add_filter( 'digipacket_audit_checks', function ( $checks ) {
	$check                = new My_Check();
	$checks[ $check->id ] = $check;
	return $checks;
} );

warning() and skip() return the other two outcomes.