Attributes User Access

سجل التغييرات

2.0.0

Core and Pro are published together as 2.0.

• Fixed: a broken installation — an upload that stopped halfway, a restored
  backup — switches the plugin off with a notice instead of taking the site
  down with it.
• Fixed: a refused sign-in says why. Any error the extensions raise — a
  password policy, a reCAPTCHA challenge, a second factor — reached the form as
  “An unknown error occurred”. The sentence it was given is now shown. The key
  used to carry that sentence was drawn from an alphabet the reader lowercased,
  so it almost never matched and the generic message showed regardless; the two
  now agree.
• Removed: two public AJAX endpoints, attrua_check_username and
  attrua_check_email, that answered “does this account exist?” to anyone with no
  limit of any kind. Nothing called them — the registration form makes no such
  request — and the Pro extension already dropped its own copies for the same
  reason.
• Fixed: the emergency access link that reaches wp-login.php exchanges its token
  for a short-lived cookie and comes back without the token in the address,
  where it would otherwise sit in access logs, browser history and Referer
  headers. When Pro is active, every use and refusal is written to the audit
  log. It declines the redirect to a custom login page and nothing more — a
  second factor still applies.
• Changed: the nonce-refresh endpoint, which hands a fresh sign-in nonce to a
  cached login page, is served to signed-out visitors only. Its logged-in
  registration handed a session-bound nonce to any page that could make the
  browser ask, and served nobody — someone already signed in is not looking at
  a sign-in form.
• Removed: a decorative nonce on the settings tabs. It protected nothing — the
  tab was already chosen before it was checked — and expired, so a bookmarked
  tab URL stopped working after a day.
• Added: the plugin speaks five languages — French, Spanish, Simplified
  Chinese, Japanese and Traditional Chinese (Taiwan).
• Changed: the footer of the plugin’s own admin screens reports the state of
  the site — authentication pages live, wp-login.php, registration — instead of
  asking for a review. Each fact links to the screen that changes it.
• Changed: the download is a third of the size, 3.31 MB down to 1.14 MB. The
  icon font shipped in three formats and browsers only ever requested one.
• Changed: the version is read from the plugin header alone. It used to be
  written a second time as a constant, and the two could disagree.
• Fixed: after an update, “Create Page” could do nothing. The admin script’s
  address carried the WordPress version instead of the plugin’s, so browsers
  and caches kept serving the previous copy. Each file’s address now changes
  with the package.
• Fixed: the Elementor widget’s Max Width setting was ignored at 380px and
  below.
• Changed: the admin screens no longer advertise the Elite plan. The
  “WooCommerce Pages” rows and the Elite card of the “Unlock More with
  Attributes User Access” section are held back — they promised a tier that
  does not ship yet. Nothing was deleted; both come back from one switch. The
  Pro half of that section still appears on a site running Core alone.
• Maintenance: two .bak copies and a dead redefinition of the version constant
  in uninstall.php are gone.

Everything else in this release is on the Pro side; see its changelog.

1.3.0

• Compatibility: tested with WordPress 7.0.
• Maintenance: regenerated all minified assets from original sources.
• Maintenance: improved asset loading consistency across admin and front end.