MAX Autopost 1.11.1
1.11.1 — security & UX hardening
Safety (mass-send / «5 messages»)
- Multi-chat counter + warning (N targets = N messages per post)
- Bulk / requeue / errors: batches of 50 + confirm with estimated N×M
- Successful test no longer enables worker unless checkbox «После теста»
- Cron: no pile-up of single-events; cleared on upgrade
- Sticky upgrade notice (worker off, queue quarantined, API v2 note)
Security
upload_urlSSRF guard (HTTPS + domain allowlist)- cURL HTTPS-only protocols
register_setting→manage_options- Token field: empty = keep; warning that DB storage is less safe → prefer
define('KRV_MAX_TOKEN', ...)in wp-config.php - Admin send/queue prefer POST forms
UX
- Settings sections, RU labels, clear logs, metabox last status
- Partner block labeled as ads
Install
Update via ZIP or GitHub auto-update from this release.