LiraScope

Description

LiraScope adds server-rendered shortcodes and dynamic blocks for Syrian Pound exchange rates. It shows the Central Bank rate and the market rate as separate sources, including the spread between them.

The plugin works without an API key. Public mode is the default and includes every display in this release. Client mode uses an existing LiraScope API key for metered requests and falls back to public data when enabled. A key adds account routing; it does not unlock plugin code or place a licence restriction on the plugin.

Included displays:

• One exchange-rate figure, using the consistent sell, then mid, then buy basis.
• A sortable and filterable rates table.
• The official-versus-market gap with widest, narrowest, and current values.
• A currency calculator with current or archived rates.
• Accessible history and multi-currency comparison charts with visible data tables.
• Gold and cryptocurrency tables with history charts.
• Market analysis links and current LiraScope service status.
• Bounded CSV exports streamed through a temporary file.
• An externally hosted image card that refreshes once a minute.

Two classic widgets provide the single-rate and rates-table displays. Client mode also
shows plan usage and lets administrators create, edit, test, delete, and rotate webhook
secrets. A signing secret is shown only once after creation or rotation.

All displays show new SYP and can show the old-SYP value multiplied by 100. Arabic, English, German, Turkish, Kurdish Sorani, and Kurdish Kurmanji are included. Arabic and Sorani render right to left.

No front-end credit link appears unless an administrator enables the clearly labelled attribution setting.

Source code and development files are available at https://github.com/OMARINO-DE/LiraScope/tree/main/plugins/wordpress/lirascope

Shortcodes

• [lirascope_rate currency="USD" source="market"]
• [lirascope_table currencies="USD,EUR,TRY" source="market"]
• [lirascope_gap currency="USD" days="180"]
• [lirascope_widget pair="USD" source="market" size="card" theme="auto"]
• [lirascope_calculator from="USD" to="SYP" source="market"]
• [lirascope_chart currency="USD" days="30" mode="history"]
• [lirascope_chart currencies="USD,EUR,TRY" days="30" mode="comparison"]
• [lirascope_gold type="24K" days="30"]
• [lirascope_crypto symbol="BTC" days="30"]
• [lirascope_analysis take="5"]
• [lirascope_status]
• [lirascope_export currency="USD" days="30" kind="history"]

Each shortcode has a matching dynamic block and uses the same PHP renderer.

WooCommerce currency feeds

When WooCommerce and a supported multi-currency plugin are active, LiraScope supplies the
SYP rate through FOX/WOOCS, CURCY Custom Finance API, WCML, or Booster. Each adapter follows
that plugin’s documented rate direction. Market mode quotes the store base currency
directly when available and otherwise reconstructs it through the USD cross-rate payload.
Central Bank mode supports only USD as the store base because the cross-rate endpoint is
market-derived. Other base currencies are refused and an administrator notice explains why.

For CURCY, select Custom under Multi Currency > Update > Finance API. The filter is part of
CURCY’s paid-plugin documentation and is registered only when CURCY is active.

External services

LiraScope depends on the LiraScope service operated by OMARINO IT Services at lirascope.syria-cloud.sy.

Server-side API requests: On a display render or local REST-proxy request, the plugin contacts the service only when its local cache has no usable response. It sends currency codes and bounded query parameters. In client mode it also sends the configured X-Api-Key and X-Api-Secret headers. The User-Agent contains only LiraScope-WordPress and the plugin version; it does not contain the installing site’s URL. The service processes the WordPress server’s IP address for rate limiting. Results are cached for at least five minutes, and stale data is used during temporary upstream errors.

Embed card: If a site owner places the Embed Card block or shortcode, each visitor’s browser requests an image directly from lirascope.syria-cloud.sy once per minute while the page is open. The service receives the visitor’s IP address and normal Referer or Origin, from which it derives the embedding hostname. It also receives the selected pair, source, and optional embed identifier. The hostname and render counts are retained as daily aggregate statistics. The plugin ships its own refresh script and never downloads executable code from LiraScope.

Webhook management: In Client mode, webhook actions send the webhook URL, label, currency, threshold, and alert type entered by an administrator to LiraScope. The service stores this configuration against that API client. Requests occur only when an administrator opens the account panel or explicitly creates, edits, tests, deletes, or rotates a webhook.

Service terms: https://lirascope.syria-cloud.sy/en/legal/terms

Service privacy policy: https://lirascope.syria-cloud.sy/en/legal/privacy

Privacy

The plugin stores an HMAC identifier derived from a visitor IP and a one-minute time window to enforce its local REST-proxy limit. It never stores the raw visitor IP. These counter rows expire within 25 hours. Cached API data contains exchange-rate information, not visitor information.

The Embed Card is externally hosted media and performs aggregate third-party measurement as described under External services. Do not place that block or shortcode unless the site’s privacy notice covers this request. The plugin adds precise suggested wording to WordPress’s Privacy Policy Guide.

The API key and secret are stored in WordPress options with autoload disabled unless they are supplied as constants in wp-config.php. The secret field is never printed back into the settings page. A blank save keeps it; the separate Remove secret action clears it.

Technical details