Name: Briproof Website Review
Author: briproof

Briproof gives a designer’s client one link for the whole project. This plugin connects a WordPress site to the live website review: the client opens the review link, clicks anything on the page and leaves a comment. You see each comment in your Briproof project, with the exact place it belongs to.

There is nothing to set up. Install the plugin, activate it, and paste the site’s address into your Briproof project. Deactivate it and the code is gone from your pages.

Normal visitors notice nothing: the plugin adds one small script to the page head, and without a review link that script does nothing and contacts no one.

You need a Briproof account to create review links. Your client does not need an account.

External services

This plugin connects your site to Briproof, a service for collecting website feedback from clients, run at https://briproof.com.

For normal visitors the plugin contacts no external service and sends no data.

When someone opens your site through a Briproof review link:

their browser loads the review panel from https://widget.briproof.com, which, like any web request, shares their IP address and browser details with that server;
the review code from the link is sent to Briproof to check that the link is valid, and the browser keeps a small flag in its session storage so the review survives moving between pages;
each comment they choose to leave is sent to Briproof: the comment text, the address of the page, the marked element (its tag, classes, a short piece of its text and a few of its attributes) and its position, and their window and page size, scroll position, device type, browser identification string and language.

Nothing is sent from your WordPress server. The plugin’s PHP code reads no WordPress user data or site content. The review panel reads only the element a person marks, in that person’s browser, and never reads cookies or forms.

Source code

The script this plugin prints sits on one compact line in briproof-website-review.php. The same script in readable form, with comments, is in source/review-loader.js. That copy is included for reading only, and the plugin never loads it.

The review panel is part of the Briproof service and runs from https://widget.briproof.com. It is not stored in this plugin.