WVDevel Community Assistant for Telegram

This plugin connects a Telegram bot to your WordPress site to support
the community or group you manage:

• Validates every Telegram user against the plugin’s own database
  table (username, Telegram ID and an access code). The code is stored
  encrypted with AES-256-GCM (authenticated encryption) using the
  security keys from your own wp-config.php, and is managed from a
  screen in the WordPress admin, with no loose JSON files.
• If a user is not validated, the bot does not reply at all -except
  for a single private notice the first time they write- so no
  information is exposed and no spam is generated.
• In a group, the bot only replies if it is mentioned (@bot username,
  replying to one of its messages, or with a command directed at it).
  In private chats it always replies, to already validated users.
• Includes configurable general commands: /reglas, /horario,
  /anuncios, /recursos, /ayuda, /misdatos -all editable from
  the WordPress admin, without touching code.
• Includes moderation commands for administrators, private chat only:
  /validar, /invalidar, /listar, /anunciar, /stats.
• “Mis recursos”: each validated user can have a carnet (student/member
  code). Files uploaded per carnet from the “Recursos por usuario” admin
  screen are offered to that user -and only that user- when they send
  /recursos in a private chat: one button per file plus a “download
  all” button that sends a ZIP. The files are stored in a private,
  web-inaccessible folder and are delivered straight to Telegram, never
  through a public URL.
• Integrates an Ollama (conversational AI) client that is already
  built but disabled by default: once your Ollama server is ready,
  just enable the checkbox and set the URL/model in Settings. Until
  then the bot replies with a notice instead of failing.

Use cases

Built for any Telegram community that needs to moderate access and
automate replies: study groups, communities of practice, work teams,
clubs or product support.

External services

This plugin connects to the following external services to work:

• Telegram Bot API (https://api.telegram.org) – required for the
  bot to function. The plugin sends your bot token and the text
  messages exchanged with Telegram users (inbound and outbound) so it
  can receive and reply to messages via webhook. Subject to Telegram’s
  Terms of Service and
  Privacy Policy.
• Ollama (URL you configure, typically your own server) – optional
  and disabled by default. If you enable it, the text of messages from
  validated users is sent to the URL you configure to generate an AI
  reply. No information is sent to any third-party server other than
  the one you specify in Settings.

Requirements

• WordPress 5.8 or higher.
• PHP 7.4 or higher, with the openssl extension enabled.
• A site with valid HTTPS (Telegram does not accept webhooks over
  http://).
• A bot created with @BotFather on Telegram.

1. Upload the full plugin folder to wp-content/plugins/, or zip its
   contents and use Plugins -> Add New -> Upload Plugin from the
   WordPress admin.
2. Activate “WVDevel Community Assistant for Telegram” in Plugins.
   On activation, the required database tables and a random webhook
   secret are created automatically.
3. Go to Bot Telegram -> Ajustes (Settings):
   1. Paste the bot token (obtained from @BotFather) and save the
      settings. It is encrypted before being saved.
   2. Click “Configurar Webhook” to register your site with Telegram.
   3. Add the group ID under “Grupos permitidos” and your own Telegram
      ID under “IDs de administradores”.
   4. Edit the /reglas, /horario, /anuncios and /recursos texts
      with your community’s actual content.
4. Go to Bot Telegram -> Usuarios validados and register each
   member (Telegram ID, username, name and access code). You can also
   do this from Telegram with /validar [id] [codigo] [usuario]
[nombre] in a private chat with the bot, once your ID is in the
   administrators list.
5. (Optional) “Mis recursos” – personal files per member:
   1. In Bot Telegram -> Ajustes, section “4. Mis recursos”,
      keep “Activar” checked (it is on by default), optionally edit
      the intro text and the per-file size limit.
   2. In Bot Telegram -> Usuarios validados, fill the Carnet
      field for each member (their student/member code). This is the
      key that links a person to their folder of files.
   3. In Bot Telegram -> Recursos por usuario, type a carnet and
      upload one or more files for it. They are stored in a private
      folder inside wp-content/uploads that is not reachable from
      the web.
   4. The member writes /recursos in a private chat with the
      bot: after the general text they get a button per file (tap to
      download) and, if there are two or more, a “download all”
      button that sends a ZIP.
6. (Optional, later) Enable Ollama in Settings once your server is
   running, providing its URL and the model to use.

1.1.0

• New “Mis recursos” feature: per-carnet personal files. Adds a “carnet”
  field to validated users, a “Recursos por usuario” admin screen to
  upload/delete files per carnet, and extends /recursos so that in a
  private chat the bot also lists the user’s files with inline buttons
  (download one by one, or “download all” as a ZIP).
• Files are kept in an unguessable folder inside uploads, locked down
  with a Deny-from-all .htaccess/web.config, and are uploaded to
  Telegram via multipart -no public URL is ever exposed.
• The bot now handles Telegram callback_query updates (inline button
  presses), restricted to private chats and validated users.
• Uninstalling now also drops the wvdevel_resources table and removes
  the private resources folder.

1.0.0

• Initial release: encrypted user validation (AES-256-GCM), REST
  webhook protected with a secret_token, configurable general
  commands, private moderation commands, a message log screen with
  search and per-conversation deletion, an administrators screen, a
  broadcast screen for sending messages/attachments to validated
  users and/or allowed groups, and an Ollama client ready to be
  enabled.