Items and where they go

Item types

The type decides what your client sees and what they can send.

Anything a client types is cleaned when it arrives: scripts and unsafe markup are removed, and a URL must start with http:// or https://.

What clients can upload

• Image and Gallery items accept JPG, PNG, GIF and WebP only.
• File items accept those images plus PDF, Word (doc, docx), Excel (xls, xlsx), PowerPoint (ppt, pptx), plain text, CSV, ZIP, MP4, MOV and MP3.
• The maximum size is your server's upload limit, which is a PHP setting (upload_max_filesize and post_max_size). Your host can raise it.

Anything else, for example an SVG or an executable, is refused with "This file type is not allowed here." Developers can change the list with the clientcopy_allowed_mimes filter.

Where an item can be written

Turn on Write approved content into the site when you add or edit an item, then use Where should it go? to pick a page or post, and a field on it. Each destination accepts only certain item types, so the list adapts to the type you chose.

Sections, pages and templates

• Sections group items for your client ("Home", "About", "Brand"). With a template and the draft-pages option ticked, ClientCopy creates one draft page per section and points each item at it.
• Templates are reusable sets of items. Open the Templates tab to build one, or use Save as template on a finished project. Use Add from template to add a template's items to an existing project. Deleting a template never changes existing projects.
• There is no limit on how many templates you can keep.

Advanced Custom Fields

If ACF is active, its text, rich text, image, file, gallery and URL fields appear as destinations. Choose the page, then pick the field from the list. If ACF is not active you will see "Install Advanced Custom Fields to map to ACF fields." For fields ACF does not list, use Custom field and type the key.

Credentials (logins and passwords)

The Credentials type gives your client a small form for a website address, username, password and notes.

• It is encrypted before it is saved on your site, and it is never sent back to the client's browser or written to any page.
• To read it, open the item and click Reveal credentials. Every view is recorded in the project's Activity tab.
• Only ask for credentials you truly need, and only for as long as you need them.

The encryption keys come from the security salts in your wp-config.php. If you ever change those salts, saved credentials can no longer be read and you will need to ask the client to send them again.