Skip to content

v1.3.0 — White-Label & Security

Choose a tag to compare

View all tags
@tom4cam tom4cam released this 22 Mar 13:20
· 77 commits to main since this release
v1.3.0
ba230c4

What's New in v1.3.0

White-Label Support

  • New admin settings for complete branding control:
    • Business Name, Practitioner Name, Service Type
    • Google Calendar Event Title (with {practitioner}, {client}, {duration}, {service} placeholders)
    • Hero Tagline, Hero Subtitle, Booking Page Title
  • All 50+ hardcoded references to "Ryan Caswell", "Caswell Therapy", and "massage" replaced with configurable values
  • Email/SMS templates now use {site_name} placeholder instead of hardcoded business name
  • Existing ryan_bio and ryan_credentials settings automatically migrated to new field names

Security Hardening

  • Rate limiting on auth endpoints: Login, registration, and forgot-password limited to 10 attempts per 15 minutes per IP
  • All existing security measures verified: CSRF nonces, input sanitization, output escaping, timing-safe token comparison, AES-256-CBC encryption

Other Changes

  • Removed hardcoded email addresses from admin setup instructions
  • Updated plugin description and URI
  • Email templates use generic "appointment" instead of "massage therapy appointment"
  • Square payment notes use configurable service type

Upgrading

No database changes required. Existing settings are automatically migrated. New branding fields default to current behavior — no visible changes until you customize them.

Assets 2
Loading