Memory Wiki

Let me start by checking the environment and existing files.

Good. I have the full picture. Now let me create the plugin file.

Now copy it into the container and verify syntax.

Plugin activated. Now let me test the end-to-end functionality.

The value is correct — `wp-cli` just masks `***` in output for security. The actual content is `test-api-key-123`. Let me now test removing a key (empty value) and verify non-managed entries are preserved.

Excellent! The vault write and update work correctly. Let me verify the site still loads.

All functions are registered and working. Let me now restore some test values and do a final comprehensive verification.

All 7 fields written and all original entries preserved. Let me do final verification.

The file ownership got changed to `root:root` from running `wp eval` as root. The file needs to be owned by `www-data` for the web form to work. Let me fix that.

Let me improve the plugin to preserve empty lines in the vault file.

Now let me do a comprehensive end-to-end validation. First, let me write a test that simulates the form saving, then verify the file.

Let me read the final version of the plugin to confirm the complete code is correct.

Let me clean up the dead code in the write function.

Now let me run a complete end-to-end test.

All 5 tests pass. Let me restore the SMTP_PORT, fix ownership, and do a final health check.

Here is the summary of what was done and the results. --- ## Summary: Profe License Plugin ### What was created **Plugin file:** `/var/www/html/wp-content/plugins/profe-license/profe-license.php` **Structure:** Single-file WordPress plugin containing: - **Menu:** Top-level "Profe (sotano)" admin menu (dashicons-admin-network) with a "License" subpage - **License page:** Settings form with 7 fields (Mail API Key, Payment Client ID, Payment Secret, SMTP Host, SMTP Port, SMTP Username, SMTP Password) - **Password fields** (Mail API Key, Payment Secret, SMTP Password): display as `<input type="password">` with a dashicons eye toggle to show/hide - **Save logic:** Reads `/var/www/html/sotano.env`, updates managed SOTANO_ keys, preserves all other lines (comments, blanks, non-managed SOTANO_ entries), writes atomically via temp file + rename - **Security:** `manage_options` capability check, nonce verification, output escaping (`esc_attr`, `esc_html`), no user input in file paths - **Environment sync:** Calls `putenv()` and sets `$_ENV` after save for immediate effect ### Test results (all pass) | # | Test | Result | |---|------|--------| | 1 | PHP syntax check (`php -l`) | PASS | | 2 | Plugin activation (`wp plugin activate`) | PASS | | 3 | Write all 7 managed fields | PASS | | 4 | Verify all 7 field values in vault file | PASS | | 5 | Verify non-managed entries preserved (DB creds, auth keys, salts) | PASS | | 6 | Remove a field by saving empty value (SMTP_PORT) | PASS | | 7 | Verify other fields intact after removal | PASS | | 8 | Verify `putenv()` reflects changes | PASS | | 9 | Site health (HTTP 302 — normal redirect) | PASS | | 10 | Temp file cleanup (no .tmp residue) | PASS | ### Files modified - **Created:** `/root/profe-license.php` (working copy) - **Created:** `/var/www/html/wp-content/plugins/profe-license/profe-license.php` - **Modified:** `/var/www/html/sotano.env` (re-written with new managed fields) - **Permissions restored:** `sotano.env` → `www-data:www-data` / `chmod 640` ### Issues encountered 1. **File ownership changed after `wp eval` as root** — running `wp eval --allow-root` writes the vault file as `root:root`. This was fixed by `chown www-data:www-data` afterward. In production (form submission via WP admin), this won't happen because Apache runs as `www-data`. ### Admin page description The License settings page shows: - **Title:** "License Settings" - **Description:** "Manage your sotano credential vault. Changes are written directly to sotano.env and take effect immediately." - **Form table** with 7 rows, each labeled: - Mail API Key (password field + eye toggle) - Payment Client ID (text field) - Payment Secret (password field + eye toggle) - SMTP Host (text field) - SMTP Port (text field, narrow width 100px) - SMTP Username (text field) - SMTP Password (password field + eye toggle) - Each field pre-filled with the current value from `sotano.env` - **Save Changes** button at the bottom - Success/error notices displayed at top after save