Skip to content

Commit b68b815

Browse files
PDowneyPDowney
authored
Release
1 parent 3158c71 commit b68b815

6 files changed

Lines changed: 804 additions & 430 deletions

File tree

‎.github/workflows/wp-compatibility-test.yml‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,14 @@
1+
# This workflow performs comprehensive WordPress plugin compatibility and quality checks.Add commentMore actions
2+
# It runs multiple validation processes including:
3+
# - WordPress Plugin Check for WordPress.org compatibility
4+
# - PHP compatibility testing across multiple PHP versions (7.4, 8.0, 8.1, 8.2, 8.3)
5+
# - WordPress compatibility testing across multiple WP versions (6.4, 6.5, 6.6, 6.7, 6.8)
6+
# - PHPStan static analysis for WordPress-specific code quality
7+
# - WordPress security vulnerability scanning using pattern analysis
8+
# - PHPCS code standards validation for WordPress coding standards
9+
# - Code quality analysis and automated issue creation for failures
10+
# The workflow ensures the plugin meets WordPress.org standards and maintains compatibility.
11+
112
name: WordPress Compatibility & Plugin Check
213

314
on:

‎.github/workflows/wp-tested-updater.yml‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,10 @@
1+
2+
# This workflow automatically monitors WordPress version compatibility for the plugin.
3+
# It checks if the "Tested up to" version in readme.txt matches the latest WordPress release.
4+
# The workflow runs weekly and on pushes to main branch to ensure compatibility information
5+
# stays current. When a newer WordPress version is available, it creates an issue or pull request
6+
# to update the compatibility information, helping maintain plugin currency with WordPress releases.
7+
18
name: WordPress Version Checker
29

310
on:

‎CHANGELOG.md‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,34 @@
11
# Changelog for Simple WP Site Exporter
22

3+
## 1.6.6 - June 9, 2025
4+
### Security & Best Practices Improvements
5+
- **CRITICAL**: Added missing secure download and delete handlers for export files
6+
- **Text Domain Consistency**: Fixed all text domain inconsistencies to use 'simple-wp-site-exporter'
7+
- **Enhanced Shell Security**: Improved WP-CLI path validation with comprehensive security checks
8+
- **Path Traversal Protection**: Enhanced file path validation with better edge case handling
9+
- **Global Variable Handling**: Improved WordPress filesystem API initialization and error handling
10+
- **Rate Limiting**: Added download rate limiting (1 download per minute per user)
11+
- **Scheduled Deletion Security**: Added validation to scheduled file deletion to prevent unauthorized deletions
12+
- **Information Disclosure**: Sanitized error messages to prevent server path exposure
13+
- **Code Quality**: Removed duplicate function definitions and improved error handling
14+
15+
### New Security Features
16+
- Enhanced WP-CLI binary validation with version checking
17+
- Proper filesystem API error handling throughout
18+
- User capability verification for all download/delete operations
19+
- Secure file serving with appropriate headers for large files
20+
- Request source validation and nonce verification
21+
22+
## 1.6.5 - June 8, 2025
23+
### Code Quality Improvements
24+
- **PHPMD Compliance**: Refactored entire codebase to address PHP Mess Detector warnings and improve code quality
25+
- **Function Complexity**: Broke down large functions into smaller, single-responsibility functions for better maintainability
26+
- **Variable Naming**: Converted variable names to camelCase format to comply with PHPMD standards
27+
- **Error Handling**: Removed unnecessary error control operators (@) and improved error handling
28+
- **Code Structure**: Eliminated unnecessary else expressions and duplicate code
29+
- **Global Variables**: Fixed naming conventions for WordPress global variables
30+
- **Function Splitting**: Split complex boolean-flag functions into separate, dedicated functions
31+
332
## 1.6.4 - June 6, 2025
433
### Bug Fixes
534
- **Text Domain Fix**: Fixed mismatched text domain to properly use 'Simple-WP-Site-Exporter' instead of 'simple-wp-site-exporter' for WordPress plugin compliance

‎README.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
[![PHP Compatible](https://img.shields.io/badge/PHP-7.4%2B-purple.svg?logo=php)](https://www.php.net/)
77

88
## Current Version
9-
[![Version](https://img.shields.io/badge/Version-1.6.4-orange.svg?logo=github)](https://github.com/EngineScript/Simple-WP-Site-Exporter/releases/latest/download/simple-wp-site-exporter-1.6.4.zip)
9+
[![Version](https://img.shields.io/badge/Version-1.6.6-orange.svg?logo=github)](https://github.com/EngineScript/Simple-WP-Site-Exporter/releases/latest/download/simple-wp-site-exporter-1.6.6.zip)
1010

1111
## Description
1212
A WordPress plugin that exports your entire site, including files and database, as a secure, downloadable ZIP archive.

‎readme.txt‎

Lines changed: 23 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ Contributors: enginescript
33
Tags: backup, export, migration, site export, database export
44
Requires at least: 5.8
55
Tested up to: 6.8
6-
Stable tag: 1.6.4
6+
Stable tag: 1.6.6
77
Requires PHP: 7.4
88
License: GPLv3 or later
99
License URI: https://www.gnu.org/licenses/gpl-3.0.html
@@ -72,6 +72,28 @@ Yes, the plugin is designed to be compatible with most shared hosting environmen
7272

7373
== Changelog ==
7474

75+
= 1.6.6 =
76+
* CRITICAL: Added missing secure download and delete handlers for export files
77+
* Fixed all text domain inconsistencies to use 'simple-wp-site-exporter'
78+
* Enhanced shell security with improved WP-CLI path validation and security checks
79+
* Improved path traversal protection with better edge case handling
80+
* Enhanced global variable handling for WordPress filesystem API
81+
* Added download rate limiting (1 download per minute per user)
82+
* Improved scheduled deletion security with proper file validation
83+
* Sanitized error messages to prevent server information disclosure
84+
* Removed duplicate function definitions and improved error handling
85+
* Added comprehensive security features including user capability verification
86+
87+
= 1.6.5 =
88+
* Code quality improvements and PHPMD compliance
89+
* Refactored entire codebase to address PHP Mess Detector warnings
90+
* Broke down large functions into smaller, single-responsibility functions
91+
* Converted variable names to camelCase format for better code standards
92+
* Removed unnecessary error control operators and improved error handling
93+
* Eliminated unnecessary else expressions and duplicate code
94+
* Fixed naming conventions for WordPress global variables
95+
* Split complex boolean-flag functions into separate, dedicated functions
96+
7597
= 1.6.4 =
7698
* Fixed text domain mismatch to use 'Simple-WP-Site-Exporter' for WordPress plugin compliance
7799
* Updated plugin header text domain to match expected slug format for WordPress.org directory standards

0 commit comments

Comments
 (0)