Title: Verakta
Author: syaifulrdn
Published: <strong>2026 年 7 月 21 日</strong>
Last modified: 2026 年 7 月 21 日

---

搜索插件

![](https://s.w.org/plugins/geopattern-icon/verakta.svg)

# Verakta

 作者：[syaifulrdn](https://profiles.wordpress.org/syaifulrdn/)

[下载](https://downloads.wordpress.org/plugin/verakta.0.5.0.zip)

 * [详情](https://cn.wordpress.org/plugins/verakta/#description)
 * [评价](https://cn.wordpress.org/plugins/verakta/#reviews)
 *  [安装](https://cn.wordpress.org/plugins/verakta/#installation)
 * [开发进展](https://cn.wordpress.org/plugins/verakta/#developers)

 [支持](https://wordpress.org/support/plugin/verakta/)

## 描述

Verakta gives any organization — training providers, universities,
 event organizers,
professional associations — a way to:

 1. Bulk-upload certificate data via CSV.
 2. Offer a public verification page where anyone can enter a certificate
     number and
    get an instant, trustworthy confirmation.

Nothing is hardcoded: no institution name, no number format, no interface
 text.
Everything is configured from the settings page, so a fresh install is ready to 
use without touching any code.

#### Key features

 * **Bulk import from CSV or Excel (.xlsx)** with flexible column mapping,
    a preview
   step before anything is committed, and configurable duplicate handling (skip,
   overwrite, or cancel the whole import). Excel date cells are converted automatically.
 * **Public verification without a page reload** (AJAX), with a working
    non-JavaScript
   fallback for accessibility and reliability.
 * **Configurable name privacy**: show the full name, a masked name (e.g.
    Bu*i 
   Sa****o), or require both the number and the name to match.
 * **Configurable certificate number format**: free-form (no validation),
    a simple
   segment-based pattern builder, or a custom regex for unusual formats.
 * **Native Elementor widget** with full styling controls (typography,
    colors, 
   border radius, spacing) — plus a Gutenberg block and a [verakta] shortcode for
   everywhere else.
 * **Rate limiting per IP** and a honeypot field to keep the public
    endpoint from
   being abused.
 * **Audit log** recording every import, addition, and edit.
 * **Translation-ready**, shipping with Indonesian and English out of the
    box.

#### Security

Security was treated as a first-class requirement throughout development,
 not an
afterthought:

 * Every database query goes through `$wpdb->prepare()` — no SQL string
    built by
   concatenating user input.
 * All input is sanitized and all output is escaped.
 * CSV formula-injection protection on import (cells starting with `=`,
    +, `-`,
   or `@` are neutralized).
 * Every admin action is protected by a WordPress nonce and a capability
    check.
 * A dedicated `manage_certificates` capability, so an operator can be
    granted 
   access without making them a full Administrator.
 * Rate limiting and a honeypot field on the public verification endpoint,
    with
   optional trusted-proxy support for sites behind a CDN.
 * The public AJAX endpoint only ever performs read operations.
 * A custom regex number-format pattern is linted for ReDoS risk (nested
    quantifiers)
   both when it’s saved and, as a hard backstop, again at match time via PCRE2 execution
   limits.
 * No connection to any external/third-party service — all verification
    logic, 
   rate limiting, and data storage happen entirely on your own WordPress site.

## 屏幕截图

[⌊The public verification page showing a verified result.⌉⌊The public verification
page showing a verified result.⌉[

The public verification page showing a verified result.

[⌊The CSV import screen with column mapping and a preview.⌉⌊The CSV import screen
with column mapping and a preview.⌉[

The CSV import screen with column mapping and a preview.

[⌊The Elementor widget with its styling control panel.⌉⌊The Elementor widget with
its styling control panel.⌉[

The Elementor widget with its styling control panel.

## 区块

该插件提供了 1 个区块.

 *   Verifikasi Sertifikat

## 安装

 1. Upload the `verakta` folder to `/wp-content/plugins/`.
 2. Activate the plugin from the Plugins menu in WordPress — a short setup wizard will
    appear automatically to collect your institution name and preferred number format.
 3. Place the `[verakta]` shortcode, the “Verify Certificate” block, or the “Verify
    Certificate” Elementor widget on any page.

## 常见问题

### Do I need Elementor for this plugin to work?

No. Elementor is entirely optional — the plugin works fully through the
 [verakta]
shortcode or the Gutenberg block. The Elementor widget only registers itself if 
Elementor (Free, 3.x or later) is active; deactivating Elementor never causes an
error.

### How is the certificate number format configured?

On the Settings page, choose one of three modes: Free (no format
 validation), Simple(
a No/Division/Institution/Month/Year style pattern built from ready-made segments),
or Advanced (a custom regex for unusual formats).

### Is the recipient’s full name shown to the public?

That depends on your settings. The default is a masked name (e.g.
 Bu*i Sa****o)
to minimize the risk of personal-data harvesting. An admin can switch this to the
full name, or require visitors to type both the certificate number and the recipient’s
name, so the two must match before anything is revealed.

### What data does the plugin actually store?

Only the certificate number, recipient name, an optional event name, and
 an optional
issued date. The plugin never stores national ID numbers, email addresses, or phone
numbers for certificate recipients.

### What happens to my data if I remove the plugin?

By default, your certificate data is NOT deleted when the plugin is
 uninstalled—
it’s simply left in place, deactivated. Permanent data deletion is opt-in via a 
setting, specifically to prevent accidental data loss.

## 评价

此插件暂无评价。

## 贡献者及开发者

「Verakta」是开源软件。 以下人员对此插件做出了贡献。

贡献者

 *   [ syaifulrdn ](https://profiles.wordpress.org/syaifulrdn/)

[帮助将「Verakta」翻译成简体中文。](https://translate.wordpress.org/projects/wp-plugins/verakta)

### 对开发感兴趣吗?

您可以[浏览代码](https://plugins.trac.wordpress.org/browser/verakta/)，查看[SVN仓库](https://plugins.svn.wordpress.org/verakta/)，
或通过[RSS](https://plugins.trac.wordpress.org/log/verakta/?limit=100&mode=stop_on_copy&format=rss)
订阅[开发日志](https://plugins.trac.wordpress.org/log/verakta/)。

## 更新日志

#### 0.5.0

 * The import screen (now called “Import Data”) accepts Excel .xlsx files
    in addition
   to CSV — same column mapping, preview, and duplicate handling either way. Read
   with PHP’s built-in ZipArchive/SimpleXML, no third-party library required. Excel
   date cells (including genuine date values, not just text) are converted automatically.
 * CSV formula-injection neutralization now also applies to values read
    from .xlsx
   cells.

#### 0.4.1

 * i18n fix: every string in the CSV import interface (JavaScript) is now
    properly
   translated — some previously stayed in the plugin’s source language even on an
   English-locale site.
 * Security fix: an Advanced-mode regex pattern is now validated (ReDoS
    linter)
   at the moment it’s saved in Settings, not only the first time it’s actually used
   to verify a certificate.

#### 0.4.0

 * Database schema, dedicated `manage_certificates` capability, configurable
    number-
   format engine (simple/regex/free), CRUD data model, admin menu.
 * Bulk CSV import with column mapping, preview, duplicate detection, and
    formula-
   injection protection; full audit log.
 * Public verification (AJAX with non-JS fallback), rate limiting with
    trusted-
   proxy support, honeypot, setup wizard, and a complete Settings page.
 * Native Elementor widget with full styling controls, a Gutenberg block,
    and English(
   en_US) translation.
 * Security hardening: a clean PHPCS run against every WordPress-Extra
    security
   sniff, lightweight penetration testing, documentation.

## 额外信息

 *  版本 **0.5.0**
 *  最后更新：**1 月前**
 *  活跃安装数量 **不到10**
 *  WordPress 版本 ** 6.0 或更高版本 **
 *  已测试的最高版本为 **7.0.4**
 *  PHP 版本 ** 8.0 或更高版本 **
 *  语言
 * [English (US)](https://wordpress.org/plugins/verakta/)
 * 标签
 * [certificate](https://cn.wordpress.org/plugins/tags/certificate/)[CSV Import](https://cn.wordpress.org/plugins/tags/csv-import/)
   [elementor](https://cn.wordpress.org/plugins/tags/elementor/)[gutenberg](https://cn.wordpress.org/plugins/tags/gutenberg/)
   [verification](https://cn.wordpress.org/plugins/tags/verification/)
 *  [高级视图](https://cn.wordpress.org/plugins/verakta/advanced/)

## 评级

尚未提交反馈。

[您的评价](https://wordpress.org/support/plugin/verakta/reviews/#new-post)

[查看全部评论](https://wordpress.org/support/plugin/verakta/reviews/)

## 贡献者

 *   [ syaifulrdn ](https://profiles.wordpress.org/syaifulrdn/)

## 支持

有话要说吗？是否需要帮助？

 [查看支持论坛](https://wordpress.org/support/plugin/verakta/)