BrandMeetsCode DataLayer Tracker

1.2.8 – 2026-05-27

• Admin: optional WordPress.org review prompt on DataLayer Tracker screens (after 14 days, dismissible, not site-wide)

1.2.7 – 2026-05-26

• WordPress.org: updated plugin directory banner, icon, and readme screenshots
• Prefix: rename all plugin symbols from adt_/ADT_ to brandatr_/BRANDATR_ (4+ character prefix per WordPress.org guidelines)
• Security: localize admin-ajax URL via admin_url() — remove hardcoded /wp-admin/admin-ajax.php fallbacks in JS
• Security: escape JSON-LD inline script with default wp_json_encode() flags (no JSON_UNESCAPED_SLASHES)
• Security: move CMP status panel to enqueued JS with safe DOM APIs (textContent/createElement) instead of innerHTML with runtime strings
• Migration: copy legacy adt_* options, transients, and user meta to brandatr_* on upgrade

1.2.6 – 2026-05-26

• Security: session IDs use random_bytes() only — no WordPress auth salt material
• Privacy: remove GA4 Measurement Protocol refund calls from wp-admin (no third-party tracking from admin)
• Plugin Check: pair inline script output buffers via brandatr_capture_inline_script(); remove stray global ob_start()
• Security: sanitize AJAX nonces with sanitize_text_field() before verification; sanitize array setting values on save; remove nonce_hint from error responses
• Naming: remove deprecated unprefixed PHP wrappers (user_is_premium, has_consent, enqueue_brandatr_assets, render_brandatr_*)
• Cleanup: remove dead setup-wizard GA4/Meta connection-test JavaScript (handlers were not shipped in this build)

1.2.5 – 2026-05-18

• WordPress.org naming: distinctive listing BrandMeetsCode DataLayer Tracker; slug and text domain brandmeetscode-datalayer-tracker; wp-admin UI remains DataLayer Tracker
• WordPress.org compliance: remove server-side connection-test AJAX handlers (GA4 MP, Meta CAPI) from setup wizard — these features are not included in this build
• Update External Services documentation to accurately reflect only services this build actually contacts
• Remove all remaining inline <script>/<style> tags; all JS/CSS now enqueued via wp_enqueue/wp_add_inline_script
• Fix: session_start() restricted to WooCommerce order-received pages only (not all pages)
• Clean up wizard settings field map to remove fields for removed features
• Docs: WooCommerce browser events, field-level form tracking, and form-vendor shortcuts are included in the free build (enable in Settings); Pro listing corrected on welcome and pricing pages
• Plugin Check: escape tab SVG output with wp_kses(); Tested up to 7.0
• Security: nonce + manage_options on all privileged admin/AJAX mutations; removed unauthenticated welcome dismiss GET shortcut
• Plugin Check: centralize admin GET action nonce checks in brandatr_verify_admin_get_action()
• Naming: prefix public PHP helpers (brandatr_has_consent, brandatr_user_is_premium, brandatr_enqueue_assets, brandatr_render_field_callback); deprecated aliases retained

1.2.4 – 2026-05-18

• Fix consent blocking: cast consent-related settings to strings to match JS strict comparisons
• Fix: replace broken adt-ip-exclusion-check.js enqueue with inline script injection
• Remove broken external logo from debug overlay; overlay title uses DataLayer Tracker
• Fix SyntaxError in adt-consent-universal.js and adt-cmp-debug.js (stray tags)
• Fix 502 Bad Gateway: guard brandatr_register_settings() from running on AJAX requests

1.2.3 – 2026-05-18

• WordPress.org compliance: remove Pixels, Server-Side Tracking, GTM Exporter, and Content Intelligence modules
• Fix fatal error: add missing brandatr_detect_cmp_server_side() function used by consent status panel
• Rename plugin to BrandMeetsCode DataLayer Tracker; update contributors list and support links

1.2.2 – 2026-05-15

• Remove Freemius trial/checkout from .org-bound core build; paid checkout + licensing live in the optional DataLayer Tracker Pro companion (Freemius SDK + brandatr_user_is_premium); DATALAYER_TRACKER_PRO_ACTIVE only marks the companion as loaded
• Add Customer area wp-admin screen (brandatr-settings-account) linking datalayer-tracker.com pricing, customer portal (/account → Freemius), downloads, docs
• Add brandatr_get_pro_sales_url(), brandatr_get_pro_customer_download_url(), brandatr_get_pro_customer_account_url() with BRANDATR_PRO_SALES_URL, BRANDATR_PRO_CUSTOMER_DOWNLOAD_URL, BRANDATR_PRO_CUSTOMER_ACCOUNT_URL, filters brandatr_pro_sales_url, brandatr_pro_customer_download_url, brandatr_pro_customer_account_url
• Let free installs open all ADT wp-admin tabs (welcome wall removed)
• Refresh readme so WordPress.org Description/FAI reflects free vs Pro

1.2.1 – 2025-01-15

New Features:
* Multi-pixel tracking with 6 platform support (Premium)
* Dual pixel mode – GTM + Direct SDK (Premium)
* Cart abandonment tracking with 3 detection methods
* Session-aware ecommerce tracking
* Form vendor auto-detection for 20+ platforms
* Field-level form tracking (Premium)
* Video progress tracking (YouTube/Vimeo)
* Event simulator in debug overlay
* SDK status monitoring
* Export history tracking

Improvements:
* Performance: 40% faster event processing
* Consent: Better CMP detection with 5-second timeout
* GTM Export: Category-grouped containers
* Debug Overlay: Event filtering and search
* Settings: Import/Export configuration as JSON

Bug Fixes:
* Fixed checkbox save issue in settings
* Fixed AJAX cart tracking timing
* Fixed consent queue not flushing properly
* Fixed duplicate scroll events
* Fixed builder iframe detection

1.1.0 – 2024-12-01

• Initial public release
• Core engagement tracking
• Basic ecommerce support
• Form tracking
• GTM export functionality
• Debug overlay
• Consent management