Super Star Chore Chart v2.4.5

Release v2.4.5 - Security Upgrades & Login Polish 🔒✨

This release focuses heavily on under-the-hood security upgrades and resolving pesky caching conflicts to ensure your families can log in securely and seamlessly every single time. We also polished up some Light Mode UI quirks!

🔒 Security Upgrades

• Stronger Authentication Cryptography: We upgraded the custom login system's cookie generation. It now utilizes strong sha256 HMAC hashing instead of legacy md5, making user sessions much more secure.
• CSRF Protection (Nonces): Added strict WordPress Nonce (Number Used Once) verification to all interior app AJAX calls. This ensures that actions like saving the chart or editing a family are completely protected against Cross-Site Request Forgery.

🐛 Bug Fixes & Authentication Improvements

• Fixed the "Cache Trap" Login Loop: Implemented smart cache-busting redirects (?nocache=timestamp) on login and logout. This completely bypasses aggressive page caching (like Divi or WP Rocket) so users immediately see their chart after logging in, rather than a cached logged-out screen.
• Broadened Authentication Scope: Fixed an issue where WordPress might restrict the custom auth cookie to a specific sub-directory. The COOKIEPATH is now forced to the root /, ensuring the app works perfectly regardless of the WordPress URL structure.
• Resolved Public Form Nonce Expirations: Removed problematic nonce checks from the public-facing Login and Registration endpoints to prevent server-side caching from expiring the form and locking users out.

💅 UI/UX Polish

• Fixed "Invisible" Button Text: Corrected a CSS bug where locking the app into Light Mode caused the text on the "Create Account", "Create Family", and "Join Family" buttons to blend into the background. Text is now a highly readable dark gray.
• Native CSS Cache Busting: Bumped the stylesheet enqueuing version to ensure all active users immediately receive the new UI fixes without having to clear their local browser caches.

*** To update, simply pull the latest includes/login.php, includes/shortcode.php, includes/db.php, and assets/app.css files to your server!