-
released this
2025-11-08 18:15:09 +01:00 | 14 commits to main since this release🔒 Security & Data Integrity
- Fully sanitized database access across all modules (
$wpdbnow uses prepared statements and whitelisted tables). - Added strict nonce and capability checks to all AJAX endpoints.
- Escaped all dynamic outputs (
esc_html,esc_attr,esc_url) in both admin and frontend templates. - Implemented input and loop limits to prevent abuse and large data submissions.
- Hardened import/export routines with MIME type validation and nonce enforcement.
- Cleaned up
class-database.phpandclass-admin.php— removed unsafe globals and raw queries.
🎨 CSS & UI Cleanup
- Major refactor of
style.cssandadmin.css:- Removed redundancy and outdated selectors.
- Replaced hardcoded colors with CSS variables.
- Simplified layout and spacing rules.
- Unified visual style for badges, modals, and buttons.
- Adopted WordPress admin color palette for a more native look.
- Leaner responsive styles for faster rendering.
⚙️ General Improvements
- Improved code consistency and readability across PHP and JS.
- Prepared Gutenberg color and typography settings for future block-level customization.
- Added minor accessibility and contrast enhancements in admin UI.
💡 This release focuses on hardening the plugin and modernizing its CSS foundation, paving the way for a more flexible Gutenberg integration in upcoming versions.
Downloads
-
Source code (ZIP)
1 download
-
Source code (TAR.GZ)
1 download
- Fully sanitized database access across all modules (