Skip to content

MAX Autopost 1.11.1

Choose a tag to compare

@A-Krivoshen A-Krivoshen released this 16 Jul 06:11

1.11.1 — security & UX hardening

Safety (mass-send / «5 messages»)

  • Multi-chat counter + warning (N targets = N messages per post)
  • Bulk / requeue / errors: batches of 50 + confirm with estimated N×M
  • Successful test no longer enables worker unless checkbox «После теста»
  • Cron: no pile-up of single-events; cleared on upgrade
  • Sticky upgrade notice (worker off, queue quarantined, API v2 note)

Security

  • upload_url SSRF guard (HTTPS + domain allowlist)
  • cURL HTTPS-only protocols
  • register_settingmanage_options
  • Token field: empty = keep; warning that DB storage is less safe → prefer define('KRV_MAX_TOKEN', ...) in wp-config.php
  • Admin send/queue prefer POST forms

UX

  • Settings sections, RU labels, clear logs, metabox last status
  • Partner block labeled as ads

Install

Update via ZIP or GitHub auto-update from this release.