OUI Aloa is a comprehensive WordPress control panel plugin. It provides ACL management, menu customization, content duplication, business information management, login customization, maintenance mode, activity logging, and deep integration with popular WordPress tools.

1. Getting Started

Installation

OUI Aloa can be installed via the standard WordPress plugin installation process. Follow the steps below to get started.

1. Download the oui-aloa.zip plugin archive from your account or the provided distribution link.
2. In your WordPress admin panel, navigate to Plugins → Add New → Upload Plugin.
3. Click Choose File, select the oui-aloa.zip archive, then click Install Now.
4. Once installed, click Activate Plugin to enable OUI Aloa on your site.
5. Upon first activation, you will be automatically redirected to the Aloa Welcome Page, where you can begin configuring your site.

System Requirements

2. Aloa Dashboard Panneau de contrôle

The Aloa Dashboard replaces the default WordPress Dashboard with a purpose-built control panel designed for efficiency. It provides a customizable widget grid that surfaces the most important information from your site and connected services at a glance.

Dashboard Features

• Replaces the default WordPress dashboard with a modern, responsive control panel
• Customizable widget grid — drag to reorder, toggle visibility per widget
• Version badge display showing the current Aloa version (v0.22b)
• "Configurer mon site" quick-access button linking directly to the Webmaster Panel
• Automatic detection and display of compatible plugin widgets
• Responsive layout that adapts to different screen sizes

Supported Widget Integrations

The dashboard automatically detects and offers widgets for the following plugins when they are active on your site:

Managing Dashboard Widgets

Each widget on the dashboard can be individually configured:

• Show/Hide: Click the eye icon on any widget to toggle its visibility.
• Reorder: Drag and drop widgets to rearrange the grid layout. Your arrangement is saved per user.
• Refresh: Individual widgets can be refreshed without reloading the entire dashboard.

3. Webmaster Panel

The Webmaster Panel is the central configuration hub of OUI Aloa. It provides quick-access cards to all major settings sections and allows administrators to configure the plugin behavior from a single location.

Panel Tabs

Dashboard Settings

The Webmaster Panel provides top-level control over key Aloa features:

Configuration Presets

Aloa offers three pre-configured presets to quickly tailor the WordPress experience to different user types:

Site Information Panel

The bottom of the Webmaster Panel displays a read-only information card with key site details:

• Site Name: The WordPress site title
• Site URL: The home URL of the installation
• WordPress Version: Currently running WP version
• Aloa Version: Currently installed Aloa version (v0.22b)

4. Interface Globale Apparence

The Interface Globale section controls the visual appearance of your site's front-end elements managed by Aloa. It is organized into six tabs, each focused on a specific aspect of your site's look and functionality.

4.1 Header & Logo

Configure your site header and logo display. Aloa provides a custom header system that can replace your theme's built-in header with a fully customizable alternative.

Logo Settings

Header Styling

4.2 Menu & Navigation

Configure how menus and navigation elements are displayed on your site's front end.

4.3 Authentication

OUI Aloa provides a built-in custom login page that replaces the default WordPress wp-login.php with a branded authentication experience.

Login Page Configuration

4.4 Maintenance Mode

Enable maintenance mode to temporarily restrict front-end access to your site. Only logged-in administrators can view the site while maintenance mode is active.

4.5 Social & Integration

Configure social media links and third-party integration display options.

Social Icons

Enter the full URLs for each social media profile. When a URL is provided, the corresponding icon is displayed in the site's side menu or footer, depending on your template configuration.

WooCommerce Settings

4.6 Header Templates

OUI Aloa includes 8 predefined header templates that you can apply with a single click. Each template is designed for a specific type of website and can be further customized after applying.

5. Business Information L'entreprise

Store your company's legal and contact information in one place. This data is used across the site to automatically populate legal notices, footer content, invoices, and transactional emails.

Company Identity

Legal Numbers

Headquarters Address

Contact Information

6. Admin Menu Customization

OUI Aloa allows you to selectively hide WordPress admin menu items and admin bar elements on a per-role or per-user basis. This is a powerful access control feature that lets you create tailored admin experiences without modifying user capabilities.

Configuration Process

1. Select target: Choose whether to customize menus by User Role (affects all users with that role) or by Specific User (affects only one user). Roles available: Administrator, Editor, Author, Contributor, Subscriber, plus any custom roles.
2. Load existing customization: Click the "Load existing customization" button to view and edit any previously saved customizations for the selected role or user.
3. Select elements to hide: Use the checkbox interface to select which menu items and admin bar elements to hide for the target role or user.
4. Save customization: Click the save button to apply your changes. They take effect immediately for affected users.

Menu Admin Items

The following top-level WordPress admin menu items can be individually shown or hidden:

Admin Bar Items

The following WordPress admin bar (toolbar) elements can be shown or hidden:

• Logo WordPress — The WordPress logo dropdown in the top-left
• Nom du site — The site name link in the toolbar
• Mises à jour — The updates notification counter
• Commentaires — The comments shortcut in the toolbar
• Modifier — The "Edit" link for the current page/post
• Yoast SEO — Yoast SEO admin bar item (if installed)
• SEOPress — SEOPress admin bar item (if installed)

7. Content Types Manager Types de contenu

The Content Types Manager lets you create, modify, and manage custom post types directly from the WordPress admin without writing any code. It displays both built-in WordPress types and custom types registered by Aloa.

WordPress Content Types

The following system content types are displayed as read-only entries:

Custom Content Types

Custom types created through Aloa appear in a separate table with full management actions:

Creating a New Content Type

Feature Support

Select which WordPress features are enabled for the content type:

Taxonomy Support

• Catégories — Hierarchical taxonomy for organizing content into categories
• Étiquettes — Flat taxonomy for tagging content with keywords

Additional Settings

8. Legal Documents Légaux

OUI Aloa automatically creates four essential legal documents as draft posts when the plugin is activated for the first time. These documents use the "Légaux" custom content type and are pre-populated with template content based on your Business Information settings.

Default Legal Documents

9. Roles & Permissions

OUI Aloa provides a comprehensive roles and permissions management interface that goes beyond the default WordPress capabilities system. You can view, edit, duplicate, and create roles with granular permission control.

Role Management

The main view lists all existing WordPress roles with the following details:

• Role Name: Display name of the role
• User Count: Number of users assigned to this role
• Permission Count: Total number of capabilities assigned
• Actions:
  • Modifier — Edit the role's capabilities
  • Dupliquer — Create a copy of the role with all its permissions as a new custom role

Creating a New Role

Permission Categories

Permissions are organized into logical categories for easier management:

10. Content Duplication

OUI Aloa adds a convenient content duplication feature to WordPress. A "Duplicate this content" link appears in the row actions for posts, pages, and custom post types, allowing you to clone any content with a single click.

How It Works

1. Navigate to any post, page, or custom post type listing in the WordPress admin.
2. Hover over the item you want to duplicate. A "Duplicate this content" link appears in the row actions.
3. Click the link. A new copy is created instantly and you are redirected to the editor for the new item.

What Gets Duplicated

• All post content (title, body, excerpt)
• All custom field metadata
• All assigned taxonomies (categories, tags, custom taxonomies)
• Featured image (thumbnail) assignment
• Page template selection
• Post format settings

Duplication Behavior

11. Activity Logging

OUI Aloa includes a comprehensive activity logging system that tracks user actions and system events across your WordPress site. Logs can be viewed in the admin and optionally sent to a remote API for centralized monitoring.

Tracked Event Categories

Log Entry Structure

Each log entry contains the following data:

{
  "id": 1234,
  "timestamp": "2026-02-11T14:30:00Z",
  "user_id": 1,
  "user_login": "admin",
  "action": "post_updated",
  "object_type": "post",
  "object_id": 456,
  "object_title": "Sample Blog Post",
  "details": "Post content and title modified",
  "ip_address": "192.168.1.100",
  "user_agent": "Mozilla/5.0 ..."
}

Remote Logging

Activity logs can be sent to a remote API endpoint for centralized monitoring across multiple WordPress installations. This is useful for agencies and multi-site administrators.

12. Database Tables

OUI Aloa creates the following custom database tables during plugin activation. All tables use the standard WordPress table prefix (typically wp_).

Schema Details

wp_apparence_headers

CREATE TABLE wp_apparence_headers (
  id BIGINT(20) UNSIGNED NOT NULL AUTO_INCREMENT,
  header_type VARCHAR(50) NOT NULL DEFAULT 'custom',
  settings LONGTEXT NOT NULL,
  template_id VARCHAR(50) DEFAULT NULL,
  is_active TINYINT(1) NOT NULL DEFAULT 0,
  created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
  updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
  PRIMARY KEY (id),
  KEY idx_active (is_active)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;

wp_aloa_logs

CREATE TABLE wp_aloa_logs (
  id BIGINT(20) UNSIGNED NOT NULL AUTO_INCREMENT,
  timestamp DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
  user_id BIGINT(20) UNSIGNED DEFAULT NULL,
  user_login VARCHAR(60) DEFAULT NULL,
  action VARCHAR(100) NOT NULL,
  object_type VARCHAR(50) DEFAULT NULL,
  object_id BIGINT(20) UNSIGNED DEFAULT NULL,
  object_title VARCHAR(255) DEFAULT NULL,
  details LONGTEXT DEFAULT NULL,
  ip_address VARCHAR(45) DEFAULT NULL,
  user_agent TEXT DEFAULT NULL,
  PRIMARY KEY (id),
  KEY idx_timestamp (timestamp),
  KEY idx_user (user_id),
  KEY idx_action (action)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;

13. Plugin Integrations

OUI Aloa automatically detects and integrates with popular WordPress plugins when they are active. Integrations enhance the Aloa dashboard, provide additional settings, and ensure seamless compatibility.

Integration Detection

Aloa checks for installed plugins during its initialization phase. Integration features are automatically enabled when a compatible plugin is detected and active. No manual configuration is required.

// Aloa checks for WooCommerce
if ( class_exists( 'WooCommerce' ) ) {
    // Enable WooCommerce dashboard widgets
    // Enable cart icon option in header settings
    // Register WooCommerce activity log hooks
}

// Aloa checks for Gravity Forms
if ( class_exists( 'GFForms' ) ) {
    // Enable Gravity Forms dashboard widget
    // Register form submission logging
}

14. Hooks Reference

OUI Aloa provides a set of action and filter hooks that developers can use to extend or modify plugin behavior. Use these hooks in your theme's functions.php or in a custom plugin.

Action Hooks

Filter Hooks

Usage Examples

Adding a Custom Dashboard Widget

add_action( 'aloa_dashboard_init', function() {
    add_filter( 'aloa_dashboard_widgets', function( $widgets ) {
        $widgets['my_custom_widget'] = [
            'title'    => 'My Custom Widget',
            'callback' => 'render_my_custom_widget',
            'priority' => 50,
        ];
        return $widgets;
    });
});

function render_my_custom_widget() {
    echo '<div class="aloa-widget">';
    echo '<p>Custom widget content here.</p>';
    echo '</div>';
}

Modifying Duplicated Post Data

add_filter( 'aloa_duplicate_post_data', function( $post_data, $original ) {
    // Prefix duplicated post titles
    $post_data['post_title'] = '[COPY] ' . $post_data['post_title'];

    // Set a specific post status
    $post_data['post_status'] = 'pending';

    return $post_data;
}, 10, 2 );

Adding Custom Data to Log Entries

add_filter( 'aloa_log_entry', function( $entry ) {
    // Add custom metadata to every log entry
    $entry['site_environment'] = wp_get_environment_type();
    $entry['memory_usage']     = memory_get_peak_usage( true );

    return $entry;
});

15. Security Features

OUI Aloa implements several security measures to protect your WordPress installation and ensure data integrity.

Access Control

• Capability-based access: All Aloa admin pages check for manage_options capability before rendering
• Nonce verification: Every form submission and AJAX request is protected with WordPress nonces
• Role-based menu hiding: UI-level restriction that complements WordPress capability checks
• Maintenance mode bypass: Only users with manage_options capability can access the site in maintenance mode

Data Validation & Sanitization

• All user inputs are sanitized using WordPress sanitization functions (sanitize_text_field(), sanitize_url(), wp_kses_post())
• Database queries use prepared statements via $wpdb->prepare()
• SIRET numbers are validated for correct length (14 digits)
• URLs are validated before saving
• Color values are validated as hex codes

Activity Monitoring

• Failed login attempts are logged with IP address and timestamp
• Administrative actions (settings changes, role modifications) are tracked
• Plugin activation/deactivation events are recorded
• Content modifications include before/after data when applicable

REST API Security

// All Aloa REST endpoints require authentication
register_rest_route( 'aloa/v1', '/settings', [
    'methods'             => 'POST',
    'callback'            => 'aloa_update_settings',
    'permission_callback' => function() {
        return current_user_can( 'manage_options' );
    },
]);

Data Privacy

• IP Logging: Activity logs store IP addresses. Ensure compliance with GDPR and local privacy regulations. Consider anonymizing IPs if required.
• Business Information: Company data is stored in the WordPress options table. Access is restricted to administrators.
• Remote Logging: When remote logging is enabled, data is transmitted to an external server. Ensure the remote endpoint uses HTTPS and meets your data processing requirements.