Skip to content

v1.0.3 - WebP/Next-Gen Optimization Support, Memory Resilience & Security Hardening

Latest
Latest

Choose a tag to compare

View all tags
@dev071 dev071 released this 27 Oct 10:30
v1.0.3
faa68b2

🚀 Release v1.0.3 — WebP/Next-Gen Optimization Support, Memory Resilience & Security Hardening

This release introduces comprehensive WebP and next-generation derivative image optimization support, intelligent memory and execution resilience for large media libraries, graceful error recovery, and robust security hardening.

✨ Key Features & Enhancements

  • WebP & Next-Gen Image Optimization Support:

    • Accurately identifies and associates WebP and AVIF derivative images generated by image optimizers (e.g., EWWW Image Optimizer, W3 Total Cache, Imagify, Smush, ShortPixel) back to their parent media library items.
    • Automatically marks converted WebP images as "Used" whenever their corresponding JPEG/PNG source image is actively used across your site.

  • Dynamic Resource Elevation & Memory Resilience:

    • Added autonomous resource elevation (wp_raise_memory_limit('admin'), 512M ceiling) and extended execution time limit (300s).
    • Eliminates out-of-memory fatal crashes when scanning large media libraries (1,000+ to 10,000+ files).

  • Graceful Fatal Error Recovery & Diagnostic Alerts:

    • Implemented a PHP shutdown recovery handler with a reserved memory buffer to gracefully catch fatal memory exhaustion or execution timeouts and return structured JSON responses.
    • Added smart error sniffing in the dashboard AJAX handler to replace generic server errors with clear, actionable warnings and hosting memory advice.

  • Security Hardening (PHP Object Injection):

    • Enforced array( 'allowed_classes' => false ) across all @unserialize() calls for postmeta, options, termmeta, and widgets to eliminate POP gadget execution and object injection attack vectors.

  • CSV Formula Injection Protection (OWASP ASVS):

    • Sanitized CSV export data to neutralize spreadsheet formula injection vulnerabilities (=, +, -, @, , ).

📦 Download & Installation

Download wp-media-usage-tracker-v1.0.3.zip below and install via WordPress Admin > Plugins > Add New > Upload Plugin, or extract to your wp-content/plugins/ directory.

Assets 3
Loading