Release

Version 2.1.0 with security improvements and code refactoring

Author: PDowney

.gitignore

@@ -1,5 +1,9 @@
+# Test and build artifacts
 /vendor/
 
+# Local private files
+/.private/
+
 # PHP tooling caches
 /.phpunit.cache/
 /.phpunit.result.cache

CHANGELOG.md

@@ -1,6 +1,6 @@
 # Changelog for EngineScript Site Exporter
 
-## Unreleased
+## 2.1.0 - May 14, 2026
 
 ### Security
 
@@ -45,7 +45,7 @@
 - **DirectoryIterator**: Replaced `scandir()` with `DirectoryIterator` in `sse_bulk_cleanup_exports_handler()` for more efficient file iteration.
 - **PHPStan Level Increase**: Increased PHPStan analysis level from 5 to 6, added `includes/` directory to scan paths.
 - **Inline CSS Removal**: Extracted 7 inline `style` attributes from admin page and success notice into dedicated `css/admin.css` file with semantic CSS classes (`sse-section-spacing`, `sse-form-table`, `sse-warning-text`, `sse-action-button`).
-- **Inline JS Removal**: Extracted inline `onclick` confirmation dialog into dedicated `js/admin.js` file with `sse-confirm-delete` class-based event listener.
+- **Inline JS Removal**: Extracted inline `onclick` confirmation dialog into dedicated `js/admin.js` file with a `sse-confirm-delete` form submit listener.
 - **Asset Enqueueing**: Added `sse_enqueue_admin_assets()` function hooked to `admin_enqueue_scripts` with page-slug check (`tools_page_enginescript-site-exporter`) to load CSS/JS only on the plugin's admin page. Uses `wp_localize_script()` for i18n of JavaScript confirmation string.
 - **EngineScript Documentation**: Clarified that the plugin does not detect EngineScript servers; it produces an EngineScript-compatible archive format usable from any supported WordPress server.
 - **Copilot Instructions Revision**: Rewrote `.github/copilot-instructions.md` to remove irrelevant references (WooCommerce, package.json, admin.php), consolidate redundant security subsections, add plugin-specific naming conventions (`sse_`, `SSE_`), and fix version file list.

GEMINI.md

@@ -7,7 +7,7 @@ This is a secure WordPress site export plugin that creates complete site backups
 ## Plugin Details
 
 - **Name:** EngineScript Site Exporter
-- **Version:** 2.0.0
+- **Version:** 2.1.0
 - **WordPress Compatibility:** 6.8+
 - **PHP Compatibility:** 8.2+
 - **License:** GPL-3.0-or-later

README.md

@@ -6,7 +6,7 @@
 [![PHP Compatible](https://img.shields.io/badge/PHP-8.2%2B-purple.svg?logo=php)](https://www.php.net/)
 
 ## Current Version
-[![Version](https://img.shields.io/badge/Version-2.0.0-orange.svg?logo=github)](https://github.com/EngineScript/enginescript-site-exporter/releases/latest/download/enginescript-site-exporter-2.0.0.zip)
+[![Version](https://img.shields.io/badge/Version-2.1.0-orange.svg?logo=github)](https://github.com/EngineScript/enginescript-site-exporter/releases/latest/download/enginescript-site-exporter-2.1.0.zip)
 
 ## Description
 A WordPress plugin that exports your entire site, including files and the database, as a secure, downloadable EngineScript-compatible ZIP archive.

enginescript-site-exporter.php

@@ -2,7 +2,7 @@
 /**
  * Plugin Name: EngineScript Site Exporter
  * Description: Exports the site files and the database as an EngineScript-compatible site archive.
- * Version: 2.0.0
+ * Version: 2.1.0
  * Author: EngineScript
  * Requires at least: 6.8
  * Tested up to: 6.9
@@ -22,7 +22,7 @@
 
 // Define plugin version.
 if ( ! defined( 'ES_SITE_EXPORTER_VERSION' ) ) {
-	define( 'ES_SITE_EXPORTER_VERSION', '2.0.0' );
+	define( 'ES_SITE_EXPORTER_VERSION', '2.1.0' );
 }
 
 // Define allowed file extensions for export operations.

includes/admin-page.php

@@ -147,11 +147,11 @@ function sse_render_export_success_notice( array $zip_result ): void {
 			<a href="<?php echo esc_url( $download_url ); ?>" class="button sse-action-button">
 				<?php esc_html_e( 'Download Export File', 'enginescript-site-exporter' ); ?>
 			</a>
-			<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" class="sse-inline-form">
+			<form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" class="sse-inline-form sse-confirm-delete">
 				<input type="hidden" name="action" value="sse_delete_export">
 				<input type="hidden" name="file" value="<?php echo esc_attr( $zip_result['filename'] ); ?>">
 				<?php wp_nonce_field( 'sse_delete_export_' . $zip_result['filename'] ); ?>
-				<button type="submit" class="button button-secondary sse-action-button sse-confirm-delete">
+				<button type="submit" class="button button-secondary sse-action-button">
 					<?php esc_html_e( 'Delete Export File', 'enginescript-site-exporter' ); ?>
 				</button>
 			</form>

languages/enginescript-site-exporter.pot

@@ -2,7 +2,7 @@
 # This file is distributed under the GPL-3.0-or-later.
 msgid ""
 msgstr ""
-"Project-Id-Version: EngineScript Site Exporter 2.0.0\n"
+"Project-Id-Version: EngineScript Site Exporter 2.1.0\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/enginescript-site-exporter\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"

readme.txt

@@ -3,7 +3,7 @@ Contributors: enginescript
 Tags: backup, export, migration, site export, database export
 Requires at least: 6.8
 Tested up to: 6.9
-Stable tag: 2.0.0
+Stable tag: 2.1.0
 Requires PHP: 8.2
 License: GPLv3 or later
 License URI: https://www.gnu.org/licenses/gpl-3.0.html
@@ -97,7 +97,7 @@ along with this program.  If not, see <https://www.gnu.org/licenses/>.
 
 == Changelog ==
 
-= Unreleased =
+= 2.1.0 =
 * **Security**: Added `.htaccess` file to export directory with `Deny from all` rules to prevent direct HTTP access to export files
 * **Security**: Removed usage of `_get_cron_array()` private WordPress API from cron failure diagnostics
 * **Security**: Replaced `glob()` with `scandir()` in bulk cleanup handler for cross-platform compatibility