Skip to content

Bookingistic v2.5.3

Choose a tag to compare

View all tags
@Shubochandrosarker Shubochandrosarker released this 23 Oct 09:28
· 3 commits to main since this release
v2.5.3
4050bfc

Bookingistic v2.5.3

Bookingistic 2.5.3 clears the entire Plugin Check static-analysis report — 0 errors, 0 warnings — while keeping every feature identical. The attached zip is the exact package submitted back to the WordPress.org review team.

Highlights

  • Every superglobal read is now unslashed and sanitized (or explicitly cast): admin save/action handlers, list filters, and the public cancel / reschedule / pay signed-token links.
  • All templates use plugin-prefixed variable names ($bookingistic_*), so no template can leak or collide with globals.
  • Dispatcher-safe nonce ordering: every admin handler bails early on action mismatch before any nonce or capability check — a POST for one screen can never be tripped by another screen's handler (re-verified end-to-end on a fresh install).
  • Justified annotations for the custom-table repositories: the plugin's own tables are queried intentionally (identifiers from class constants, values always prepared), so DirectQuery / NoCaching / SchemaChange are disabled per-file with rationale; read-only $_GET display filters carry inline justifications.
  • Fixed: removed a leftover duplicate "Footer text" field on Settings that still referenced the branding gate removed in 2.5.1.

Verification performed

  • Fresh-install activation on a clean WordPress 7.1: no "unexpected output" warning; the bookingistic_gcal_sync cron event schedules correctly with the 15-minute recurrence (verified via WP Crontrol).
  • Official Plugin Check (PCP): 0 errors, 0 warnings.
  • All 16 admin screens render clean; settings save end-to-end through the capability + nonce guards; every booking/service/staff/automation workflow intact.
  • Standalone test suite: 32 assertions, all passing; PHP 8.0–8.3 lint clean.

Upgrade notes

  • No database changes — a safe one-click update from 2.5.x.
  • Compatibility: WordPress 6.4+, PHP 8.0+.

Release assets

File What it is
bookingistic-2.5.3.zip The WordPress plugin. Upload it under Plugins → Add New → Upload Plugin.
SHA256SUMS.txt Checksums for every file.

Verify with sha256sum -c SHA256SUMS.txt after download.

Assets 4
Loading