Skip to content

Releases: dhanushrs1/pwp-forms

Version 1.1.1

22 Jan 16:16

Choose a tag to compare

Full Changelog: v1.1.0...v1.1.1

Security: Fix SQL injection in search - v1.1.1

  • Replaced esc_sql() with $wpdb->prepare() in submissions search
  • Implemented $wpdb->esc_like() for LIKE query wildcards
  • WordPress.org security compliance achieved
  • Ready for plugin directory submission

Version 1.1.0

22 Jan 15:59

Choose a tag to compare

Full Changelog: v1.0.2...v1.1.0

🔐 Major Security Enhancements:

  • Secure File Vault - Files now upload to protected /pwp-secured/ directory
  • Access Control - .htaccess blocks all direct file access (403 Forbidden)
  • Role-Based Viewers - Admins can view all files, users only their own
  • Ownership Verification - Critical security checks prevent unauthorized access
  • Output Buffer Protection - Prevents file corruption from stray output
  • Proper MIME Types - Ensures correct file type headers for downloads

🔒 Additional Security Improvements:

  • Fixed PII leak on cached pages
  • Fixed nonce expiry issues
  • Added IP-based rate limiting (10/hour)
  • Safe file deletion with usage checks
  • Admin replies use HTML templates

⚡ Performance:

  • Full caching compatibility (CDN, page cache)
  • Dynamic data loading via JavaScript
  • Reduced server processing

🆕 New Features:

  • Client-side user data population
  • Fresh nonce fetching on page load
  • Customizable rate limits via filter
  • Nginx configuration support for file protection

Version 1.0.2

21 Dec 09:23

Choose a tag to compare

Full Changelog: v1.0.0...v1.0.2

Version 1.0.1

20 Dec 13:06
3005054

Choose a tag to compare

Full Changelog: v1.0.0...v1.0.1

Version 1.0.0

20 Dec 12:24
c19a313

Choose a tag to compare