etymolt-wordpress

Official Etymolt WordPress plugin — brand name verification with cryptographically signed verdicts.

• Plugin name: Etymolt Brand Check
• Version: 0.1.0
• License: GPL-2.0-or-later
• WordPress: 6.0+, PHP 7.4+
• API base: https://api.etymolt.com
• Verify widget: https://www.etymolt.com/verify
• Pricing: $0.25 per verdict

What ships in v0.1.0

• Shortcode — [etymolt_check name="..." goods="..." classes="9,42"] renders a color-coded verdict card server-side.
• Gutenberg block — etymolt/brand-check with name / goods / Nice-class controls in the sidebar. Preview uses WordPress ServerSideRender, so the API key never touches the browser.
• Admin tool — Tools -> Etymolt Brand Check lets an admin run a private check without publishing.
• Settings page — Settings -> Etymolt Brand Check stores the API key in wp_options (etymolt_api_key) with a masked read-back and password input.
• Server-side API client — wp_remote_post with 10s timeout and up to 3 retries on transport / 5xx errors. 4xx errors are surfaced without retrying.
• XSS safety — every string from the API is escaped with esc_html / esc_url / esc_attr before rendering. No raw HTML from the API is emitted.
• Uninstall hygiene — uninstall.php deletes etymolt_api_key and every etymolt_bc_* transient. Multisite-aware.

File layout

etymolt-brand-check.php               Main plugin (header, Settings, Tools, shortcode, block registration)
includes/class-etymolt-api-client.php Thin wp_remote_post wrapper with retry
includes/class-etymolt-renderer.php   Single source of truth for verdict card HTML
blocks/brand-check/block.json         Gutenberg block registration
blocks/brand-check/index.js           Editor UI (plain wp.blocks + ServerSideRender, no npm required)
blocks/brand-check/style.css          Frontend + editor styles
assets/css/admin.css                  Settings + Tools styles
uninstall.php                         Option + transient cleanup on delete
readme.txt                            WordPress.org marketplace listing
README.md                             This file
LICENSE                               GPL-2.0-or-later full text

Local install

1. Download etymolt-wordpress-0.1.0.zip from the Releases page.
2. In wp-admin, go to Plugins -> Add New -> Upload Plugin, choose the ZIP, and click Install Now.
3. Activate Etymolt Brand Check.
4. Go to Settings -> Etymolt Brand Check and paste your API key from www.etymolt.com/dashboard.
5. Test privately at Tools -> Etymolt Brand Check, or add the shortcode [etymolt_check name="Acme"] to a page.

Shortcode reference

[etymolt_check name="Acme"]
[etymolt_check name="Acme" goods="tea and coffee"]
[etymolt_check name="Acme" classes="9,42"]
[etymolt_check name="Acme" goods="tea and coffee" classes="30,35"]

• name — required.
• goods — free-text goods / services description.
• classes — comma-separated Nice classes (1..45). Invalid entries are silently dropped.

Verdict card

Every card shows:

• Color-coded badge — green for PROCEED, amber for PROCEED_STRATEGIC, red for ABANDON.
• Score bar (0..100) with aria-valuenow for accessibility.
• Score explainer (from the API response).
• Top 3 findings.
• Signature footer — signature_key_id + link to https://www.etymolt.com/verify#<verdict_id>.
• Disclaimer verbatim: Clearance signal, not legal advice. Consult a trademark attorney before adopting a name in commerce.

Security posture

• API key stored server-side only. The block editor uses ServerSideRender, so the preview also runs on the server.
• Every API-side string passes through esc_html, esc_url, or esc_attr before rendering. The admin tool form uses wp_nonce_field + wp_verify_nonce.
• API client uses HTTPS with sslverify => true and a 10s per-request timeout.

Distribution

• GitHub Releases: canonical distributable ZIP.
• WordPress.org marketplace: submission is manual (SVN) and is not autonomously executed by this repo. See readme.txt for the marketplace listing content.

License

GPL-2.0-or-later. See LICENSE.