The Client Area and Tiaro Connect

The client area at my.tiaro.eu is the place where you see every website Tiaro maintains for you: its health, visits, enquiries, pending updates and errors. From there you also open the administration of a website without a second password.

A website appears in the client area once it is connected. The connection is made by Tiaro Connect, a part of Tiaro Core. It sends nothing before an administrator of the website has confirmed the connection.

In this article: Connecting a website · What the client area reads · Signing in to the client area · What you see · Opening a website from the client area · Notifications · Related

Connecting a website

The connection is started by Tiaro in the client area and confirmed on the website. Nobody types a key by hand.

  1. Tiaro adds the website in the client area and receives a pairing link. The link is valid for 30 minutes and works once.
  2. An administrator of the website opens the link while logged in. It leads to Tirenoa › Connect, where a box Confirm the connection appears.
  3. Choose Connect this website. The website and the client area exchange a secret, which the website stores encrypted with its own keys.

The same screen shows the State of the connection, the Hub it belongs to, Connected since and Last contact. Two buttons end it: Switch off keeps the pairing but refuses every request, and Remove connection forgets it. A pairing link is only accepted for my.tiaro.eu.

Note: During pairing the website sends its address, its title, the administrator e-mail address from Settings › General and its WordPress version to my.tiaro.eu. This is the only request the website starts by itself; everything afterwards is an answer to a signed request from the client area.

What the client area reads

Every request is signed with the website’s own secret and expires after five minutes. The client area fetches state, form counts and content counts once an hour and the statistics once a night.

Area What is read
Versions and updates WordPress, PHP, database and server software, the theme, the list of installed plugins, and pending updates.
Cache and requests State of Tiaro Cache and its crawler guard, and counts of requests and errors of the last two days.
Errors The last lines of the PHP error log, and the mail and indexing logs. Recipients of failed mails are masked.
Users The users of the website with name, e-mail address, role and last login.
Statistics Totals from Tiaro Analytics, when it is installed: visits, pages, sources, countries, devices. Never single visitors.
Forms How many submissions each form received, and for the newest ones the subject line and the name field. The full enquiry stays on the website.
Content Counts per content type and the last edits.
Storage and branding Size of the uploads folder, free disk space, and the addresses of logo and site icon.

It never reads passwords, the content of pages, or the full text of a form submission.

Signing in to the client area

You receive an invitation by e-mail with a link to set your password. The first visit asks once for your language. Sign-in always has a second step: a six-digit code sent to your e-mail address, or a code from an authenticator app if you set one up under Account. A browser can be remembered for 30 days.

What you see

The dashboard has one card per website with a health score, the visits and enquiries of the last seven days, errors and pending updates. Opening a website shows its panels. Which panels you see is set by Tiaro per person.

Panel What it shows
Overview State, versions, visits and forms at a glance.
Statistics Visits per day for 7, 30, 90 or 365 days, a map of countries and the top lists.
Forms Submission counts and the newest enquiries by subject line.
Content Content counts and the last edits.
Errors & performance Server errors, the PHP error log with the button Clear the log, cache, mail and search engines.
Users & logins Users of the website and their last logins.
Updates Pending updates, and the button that re-installs the Tiaro packages with a backup.
Billing Your invoices with their state.

The health score starts at 100 and loses points for server errors, PHP errors today, pending updates, a cache that is not caching, failed mails, a lock, and data older than three hours.

Opening a website from the client area

The button Administration on a website opens its WordPress administration without another password. The link behind it is valid for 60 seconds and works once. Your account on the website is created on first use, with the role Tiaro set for you there.

Notifications

The bell in the client area collects what happened: a new invoice, an update that ran, a website that needs attention or stops answering, new enquiries, and messages from Tiaro. Under Account › Notifications you switch each kind on or off.

With Turn on for this device the same notifications reach your phone or computer while the client area is closed. The client area can be installed like an app; on iPhone and iPad it has to be added to the Home Screen first for this to work.

Note: Privacy: push messages are sent by my.tiaro.eu itself, encrypted, to the delivery service of your browser’s maker. No other service is involved, and notifications are not sent by e-mail.