Version 1.1.0 - Critical Security Update

🔒 Critical Security Update

This release fixes critical SQL injection vulnerabilities and includes important security improvements. Highly recommended upgrade for all users.

---

🔐 Security Fixes

• ✅ Fixed critical SQL injection vulnerabilities in log viewer
• ✅ Fixed critical SQL injection vulnerability in cart abandonment feature
• ✅ Fixed critical bug in uninstall script (undefined variable)
• ✅ Added capability checks to all admin functions

✨ New Features

• 🎯 Added cart abandonment message configuration in settings page
• 📄 Added pagination to SMS logs viewer (50 logs per page)

🚀 Enhancements

• ✅ Added API credentials validation before sending SMS
• ✅ Added phone number format validation
• ✅ Improved API response handling with proper HTTP status code checking
• ✅ Added conditional debug logging (only when WP_DEBUG is enabled)
• ⚡ Added database index on sent_at column for better performance
• 🌍 Added text domain for internationalization support
• 🧹 Added deactivation hook to properly clean up scheduled events

🔧 Code Quality Improvements

• 📝 Extracted API endpoint to constant for better maintainability
• 📚 Added comprehensive PHPDoc blocks throughout the codebase
• 🛡️ Improved error handling across all features

---

📦 Installation

From GitHub

1. Download woocommerce-sms-notifications.zip from the assets below
2. Go to WordPress Admin → Plugins → Add New → Upload Plugin
3. Upload the zip file and activate

Manual Installation

1. Download and extract the zip file
2. Upload the woocommerce-sms-notifications folder to /wp-content/plugins/
3. Activate the plugin through the Plugins menu in WordPress

---

📋 Upgrade Instructions

Important: This is a security update. Please update as soon as possible.

1. Backup your site before updating
2. Update the plugin via WordPress Admin or manually upload the new version
3. The database will automatically update with the new index on activation

---

🔄 Full Changelog

Modified Files:

• admin/log-viewer.php - Added pagination and SQL injection fix
• admin/settings-page.php - Added cart abandonment message field and capability check
• includes/class-cart-abandonment.php - Fixed SQL injection and added error handling
• includes/class-order-status.php - Added conditional debug logging
• includes/class-sms-api.php - Added validation and improved response handling
• uninstall.php - Fixed variable name bug
• woocommerce-sms-notifications.php - Added deactivation hook and database index
• readme.txt - Updated version and changelog

Stats: 8 files changed, 194 insertions(+), 22 deletions(-)

---

🙏 Credits

Maintained by Phil Wamba
GitHub: @philwamba