LANGA Tools Lite

變更記錄

1.0.39

• Fix: removed call to undefined function on fresh install

1.0.39

• Removed all literal style/script/link tags from PHP source
• Credits button CSS extracted to file via wp_enqueue_style
• langtoli_inline_style rewritten to wp_register_style + wp_add_inline_style
• Custom CSS functionality completely removed

1.0.37

• All inline styles/scripts use WP enqueue API
• External CSS/JS via wp_register/enqueue
• Sanitized bg_opacity and transition_ms
• Custom CSS save handlers removed
• Badge output wrapped in wp_kses
• Inline JS variables escaped with esc_js

1.0.36

• SMTP/Mail module physically removed from build
• All license-gating code removed
• Credits mode: only local (opt-in) or off (default)
• All iframe/grayscale rendering removed
• Maintenance footer attribution removed
• Ghost pages nonce verification added
• exclude_pages sanitized with sanitize_textarea_field

1.0.35

• Removed Smart Setup PRO module configs (Cache/SEO/Safer/Legal)
• Removed all license gating logic from module page
• Removed Powered By from mail template
• Added wp_kses_post to shortcode callback returns
• Removed bridge references from registry

1.0.34

• Converted all admin inline scripts to wp_print_inline_script_tag
• Removed jQuery dependency from credits page (vanilla JS)
• Removed Google Fonts external dependency
• Added esc_html/esc_attr to all remaining unescaped outputs
• Sanitized CSS output with wp_strip_all_tags

1.0.33

• Removed all PRO module code from Lite package
• Removed telemetry/heartbeat cron (bridge-protocol, sync-protocol, scheduler)
• Removed user-switching functionality
• Removed custom CSS/JS editor (use WordPress Customizer)
• Removed Powered By attribution from maintenance and email
• Fixed backup path to use uploads directory
• Added wp_kses_post escaping to shortcode returns
• Added esc_attr/esc_html to all remaining unescaped outputs
• Replaced WP_PLUGIN_DIR with dirname(FILE)

1.0.32

• Security: Removed anti-deactivation guard (mu-plugin protection system)
• Security: Removed server sync for mixcode/boom/banned flags
• Fix: Credits system is now fully opt-in (off by default)
• Fix: Removed all trialware UI (locked module cards, PRO pricing)
• Fix: Removed custom CSS/JS editor fields
• Fix: Added escaping to all unescaped output variables
• Fix: Stable tag aligned with plugin version
• Requires WordPress 5.7 or later

1.0.11

• Fix: WP_CONTENT_DIR replaced with WPMU_PLUGIN_DIR (always defined by WP core)
• Fix: Removed error suppression on set_time_limit
• Fix: Removed generic shortcodes [temp], [support_id], [friend_id], [breadcrumb]: use prefixed versions
• Fix: Added nonce verification for user-switching switch-back action
• Fix: Sanitized all POST inputs with wp_strip_all_tags / sanitize_text_field
• Fix: Escaped output in dashboard widget, module page SVG, alias codes
• Fix: Added phpcs annotations for inline scripts/styles in admin callbacks and standalone pages
• Fix: Added phpcs annotations for SQL queries using schema-validated identifiers
• Fix: Added recovery notice with download URL on failed activation
• Improvement: Inline CSS for user-switching converted to wp_add_inline_style
• Improvement: Visual Builder mu-plugin inline styles annotated for compliance

1.0.4

• Improved Site Lock protection
• Added Settings link on plugins page
• Fixed custom login logo default
• UI improvements for Branding & Credits panel

1.0.3

• Initial public release
• UI/UX module with admin improvements
• Custom Login branding
• Credits footer signature
• Maintenance mode
• Events logging