The connector only does what is needed to add news posts, and it is built to be safe:
- It accepts only requests signed by AlgoPoint (HMAC-SHA256, within a 5-minute window).
- Every database query is a prepared statement, and post HTML is cleaned to safe tags.
- It reads the structure of your news tables and the names of your categories and authors, so you can choose them in My Sites.
- It never sends your articles, users or passwords anywhere.
- It never creates or deletes tables, categories or users, and it only changes posts it created itself.
- Its settings live in
algopoint-connect-data.php, which starts with <?php exit; so it cannot be read through the browser.
The connector page is protected by your password, and you can Pause or Disconnect AlgoPoint there at any time.
