AngelForce Cache – AI Speed Optimizer

سجل التغييرات

2.2.0

• Change: delaying JavaScript now works through the WordPress script APIs (wp_script_attributes and wp_inline_script_attributes filters) and applies to scripts enqueued with WordPress. A script is only delayed when every script that depends on it is delayed too.
• Change: critical / used CSS is added with wp_add_inline_style() and the full stylesheets are switched to non-blocking through the style_loader_tag filter. The CSS of a page or template is computed on its first build and used from the next one (the preloader requests each page twice).
• Change: CSS minify, Google Fonts display=swap, DNS prefetch / preconnect and font preload use the style_loader_src, wp_resource_hints and wp_preload_resources filters.
• Removed: “Combine deferred JavaScript files” (little gain on HTTP/2 and later) and the remote default-model list; the AI model is picked from your own key’s model list.
• Change: the cache folder only holds data files: the drop-in reads its settings from JSON and parsed stylesheets are stored as JSON instead of PHP.
• Requires WordPress 6.3 or later.

2.1.1

• Change: on the AngelForce Cache screen, notices printed by other plugins (rating requests, upsells) are shown below the plugin’s own screen instead of above it, so the dashboard starts at the top. Nothing is removed; every other admin screen is unchanged. Filter: velox_hide_foreign_notices.

2.1.0

• New name: AngelForce Cache – AI Speed Optimizer (folder and text domain angelforce-cache). While the earlier copy (folder velox-cache) is still active this one stays idle and shows a notice; deactivate the earlier copy and the settings carry over.
• New: the AI assistant can use the AI provider connected in WordPress 7.0 and later (WordPress AI Client), so no key has to be stored in this plugin. Your own OpenAI or Anthropic key still works; alt texts currently need it.
• Change: all front-end scripts and styles of the plugin (YouTube preview, delayed-script loader, full-CSS loader, Core Web Vitals collector) are separate files loaded with wp_enqueue_script / wp_enqueue_style and configured through data attributes; nothing is printed inline any more except the generated critical CSS.
• Change: “Defer JavaScript” uses the WordPress script loading strategies (6.3+) for enqueued scripts, so core keeps a script blocking whenever inline code or another script depends on it. The data: URL wrapper for inline scripts is gone.
• Change: files are resolved through plugins_url(), get_theme_root(), wp_upload_dir() and content_url(), so sites with moved plugin, theme or upload folders are optimized correctly.
• Change: translations come from translate.wordpress.org; the bundled language files were removed.
• Change: the shared-hosting hint on the Server tab no longer guesses from the folder name; hosts can set it with the velox_shared_hosting filter.

2.0.2

• Security: the public Core Web Vitals beacon (the only endpoint that works without login, used by the optional real-visitor measurement) now requires a same-site Origin/Referer and a daily signed token printed into the page, on top of the existing limits (five numbers only, 2 KB, one sample per IP per 30 s, fixed file in the cache folder). Reports from other sites or scripts are rejected with 403.
• Security: the public beacon never deletes files any more; expired rate-limit markers are removed by the hourly maintenance cron instead. A request can only choose between the fixed files mobile.log and desktop.log.

2.0.1

• Fix: with “Remove unused CSS” the full stylesheets now always follow right after the page has loaded instead of waiting for the first interaction or 5 seconds, so themes and page builders that add classes with JavaScript (for example Impreza with WPBakery) are never left unstyled.
• Fix: when the reduced CSS of a page is implausibly small next to the stylesheets it replaces, AngelForce Cache keeps those stylesheets (non-blocking, with critical CSS) for that page instead.
• Change: the Maximum profile keeps critical CSS on as a fallback and loads the full CSS right after page load; when a page builder is detected it shows a warning and asks for confirmation.
• New: the dashboard shows which quick-setup profile is active, with “Open quick setup again” to choose another one.

2.0.0

• New: a ? next to every setting explains what it does, when to use it and what to watch out for, in all 8 languages.
• Security (final audit before release): a percent-encoded NUL byte in an image or stylesheet URL can no longer trigger a PHP 8 error on the front end; the Brotli/gzip rules in .htaccess apply only to AngelForce Cache cache files instead of every .gz/.br file on the site; statically served pages send the same Vary header as the drop-in; manual critical CSS rejects expression(), javascript: and @import; ?velox_off=1 works for administrators only; translated strings are escaped before they are inserted into the admin page.
• New: PHP API for other plugins on the same site: velox_get_status(), velox_get_server_stats(), velox_get_vitals(), velox_purge_url(), velox_purge_all(), velox_preload(), the actions velox_purged_all, velox_purged_url and velox_settings_saved, and the filter velox_is_cacheable. Nothing is sent off the site.
• Security (independent audit): pages rendered with any query string, tracking parameters included, are no longer stored, so a crafted utm_ value printed by a theme or form plugin can never reach other visitors (visitors with tracking parameters still get the cached clean page); “Undo AI changes” always restores the settings from the start of the latest session and never rolls back API keys or tokens; the health check fetches the untouched page past the cache; the Web Vitals beacon rate-limits IPv6 networks per /64 and caps its rate-limit files; the host name is validated before it is written into .htaccess; month-old CSS parse caches are cleaned up.
• New: WooCommerce tab (shown when WooCommerce is active). Product pages, the shop page and product categories are refreshed when an order changes stock, stock status changes or a scheduled sale starts or ends, so a sold-out product never shows “In stock” from the cache. Optional: skip the cart fragments request for visitors with an empty cart. Tested on a real shop: cart, checkout and account pages and visitors with a cart are never cached.
• Fix: a tap or click made while delayed scripts are still loading is no longer lost; it is replayed once they have run (for example the mobile menu now opens on the first tap). Plain links still open immediately.
• New: Server tab. Live CPU load, memory, disk and OPcache gauges (refreshing every 15 seconds while open), 7-day charts of CPU load, memory, pages built by PHP per hour and pages in the cache, plus PHP, web server and database size with the largest tables. History is one hourly snapshot in a single option; the only front-end cost is one byte appended to a counter file when PHP builds a page.

Older versions were released outside WordPress.org.