Version 1.1.9 - Checkout Redirect Improvements

What's New in 1.1.9

Enhancements

• Improved checkout redirect functionality for WooCommerce
• Added special styling for checkout redirect messages
• Enhanced login page UI for checkout redirects
• Added JavaScript handling for checkout redirect scenarios

Bug Fixes

• Fixed duplicate settings links in plugin actions
• Resolved version number inconsistencies
• Improved error handling for redirect scenarios

Developer Notes

• Added new CSS classes for checkout redirect messages
• Improved JavaScript handling of UI elements
• Enhanced plugin meta handling

v1.1.8 - Documentation Update

Documentation Updates

• Updated plugin description for improved clarity

Notes

• This is a documentation-only update with no functional changes

v1.1.7 - Code Cleanup

What's New in 1.1.7

🧹 Code Cleanup

• Removed unnecessary whitespace in main plugin file
• Improved code readability

Version 1.1.6 - Update System Optimization

What's New in 1.1.6

🔧 Technical Improvements

• Fixed and optimized GitHub-based update system
• Improved update reliability with better URL handling
• Enhanced version checking mechanism

📝 Developer Notes

This release fixes URL parsing in the update system to ensure reliable plugin updates through WordPress.

🔍 Testing Notes

If you don't see the update immediately in WordPress:

1. Go to Dashboard > Updates
2. Click "Check Again"

Version 1.1.5 - Custom Update System

What's New in 1.1.5

🔄 New Update System

• Implemented a custom GitHub-based update system
• Removed Composer dependencies for lighter plugin footprint
• Added automated release management

📝 Technical Details

• Replaced plugin-update-checker library with custom implementation
• Added release.sh script for automated version management
• Streamlined update process for better reliability

🔧 Instructions

• Deactivate and reactivate the plugin after updating
• Clear WordPress plugin cache if update doesn't appear immediately

💡 Note

This update changes how the plugin handles updates. While the change should be seamless, please ensure you have a backup of your site before updating.

Version 1.1.4: Configurable Contact Help Message

New Feature

• Added new setting in Security tab to control visibility of the "If you need help creating an account, contact us" message
• The contact help message is now disabled by default on new plugin installations

Details

The new setting can be found in WordPress Admin > Settings > WP Custom Login Manager > Security tab. Look for the "Show Contact Help Message" option.

Important Notes

• Existing installations will maintain their current behavior (message visible)
• New installations will have the message disabled by default
• The setting can be changed at any time through the plugin's security settings

Version 1.1.3: Configurable Contact URL & Role-Based Email Support

Role-Based Email Support

• Improved detection of role-based addresses
• Works in both quick and power verification modes

Technical Improvements

• Enhanced role-based email validation to check both API status and flag
• Fixed validation logic to properly respect role-based email setting
• Improved error message handling for role-based emails
• Added proper cleanup of new settings during uninstallation

Configuration

After updating, visit WordPress Admin > Custom Login > Security Settings to configure:

1. Contact Link URL: Set the URL for contact links in error messages
2. Role-Based Emails: Toggle whether to allow registration with role-based addresses

Security Notes

• Contact URLs are sanitized with esc_url_raw for storage
• Contact URLs are escaped with esc_url for display
• Role-based emails remain disabled by default
• Warning shown when enabling role-based emails

Upgrading

No special steps required. Your existing contact links will continue working with /contact/ until configured, and role-based emails remain blocked by default until explicitly enabled.

Version 1.1.2: Configurable Contact URL & Role-Based Emails

What's New

• Added configurable contact URL in security settings for Reoon email verifier
• Added option to allow role-based email addresses during registration (Reoon email verifier)
• Enhanced error message contact links to use configured URL
• Added proper URL sanitization and escaping

New Settings

After updating, you can configure two new options in:

1. WordPress Admin > Custom Login > Security Settings
2. Scroll down to the Email Verification Settings section
3. Look for:
   • "Contact Link URL": Configure the URL for contact links in error messages
   • "Role-Based Emails": Toggle whether to allow registration with role-based addresses

Contact URL Configuration

• Default value is /contact/ if not configured
• Supports both absolute URLs (https://example.com/contact) or relative paths (/contact/)
• All error messages with contact links will use the configured URL

Role-Based Email Configuration

• Disabled by default for security
• When enabled, allows registration with addresses like info@, admin@, support@
• Can be toggled on/off without affecting existing accounts

Security

• Added esc_url_raw sanitization for URL storage
• Added esc_url escaping for URL output
• Maintains WordPress security best practices
• Role-based email setting includes security warning

Upgrading

No special upgrade steps required. Your existing contact links will continue working with /contact/ until configured, and role-based emails remain blocked by default until explicitly enabled.

v1.1.1 - Password Reset Error Message Fix

What's Changed

This release fixes an important issue with error message display during password resets, particularly when using Turnstile security verification.

🐛 Bug Fixes

• Fixed password reset form not displaying error messages when security verification fails
• Implemented more reliable error message handling using WordPress transients
• Improved error message visibility and styling
• Removed development debug code for production optimization

🔧 Technical Changes

• Replaced URL parameter-based error handling with WordPress transients
• Optimized error message styling by removing unnecessary CSS overrides
• Improved code organization in password reset form handling
• Enhanced error message persistence through form redirects

v1.1.0 - Enhanced Security Suite with Rate Limiting, Turnstile, and Email Verification

What's New in 1.1.0

🛡️ Rate Limiting System

• Protects login forms against brute force attacks
• IP-based monitoring of login attempts
• Configurable maximum attempts and lockout periods
• Smart IP detection supporting various proxy configurations

🤖 Cloudflare Turnstile Integration

• Advanced bot protection using Cloudflare's latest technology
• Configurable per form type
• Easy to set up with site and secret keys
• Seamless user experience

✉️ Email Verification

• Real-time email validation using Reoon API
• Configurable verification modes
• Cache system for improved performance
• Prevents registration with invalid emails

⚙️ Configuration Options

• Maximum login attempts (default: 6)
• Lockout duration (default: 15 minutes)
• Monitoring period (default: 1 hour)
• Turnstile site and secret keys
• Email verification API key and mode

🔒 Security Enhancements

• Improved error handling with clear user feedback
• Secure session management
• Robust IP detection through multiple proxy headers

🔧 Technical Details

• New WPCLM_Rate_Limiter class for centralized rate limiting
• New WPCLM_Turnstile class for bot protection
• New WPCLM_Email_Verifier class for email validation
• Transient-based storage for attempt tracking
• Integration with existing login forms
• Enhanced error messaging system

📝 Required Configuration

After updating, please configure:

1. Cloudflare Turnstile site and secret keys
2. Reoon Email Verification API key
3. Review and adjust security settings as needed

🐛 Known Issues

None reported