OneEuroLabs License Key Manager

1.0.6

• Fix: All remaining lhf- submenu page slugs renamed to oelkm-
• Fix: REST namespace changed from licensehub/v1 to oelkm/v1
• Fix: JS/HTML element ID mismatches corrected (banner, settings)
• Fix: Enqueue hook check updated to oelkm- prefix

1.0.5

• Fix: Renamed remaining lhf-upgrade slug and LHF JS global to OELKM prefix
• Security: Resend endpoint now requires matching license key + rate limiting (3 requests/hour)
• Security: PayPal webhook verifies Webhook-ID header against stored value to prevent spoofing

1.0.4

• Fix: Renamed all prefixes to OELKM (min. 5 chars) per WordPress.org requirements
• Fix: Nonce validation now covers all $_POST reads in new-license form
• Fix: Added wp_unslash() to $_GET sanitization in licenses view
• Fix: uninstall.php uses prepared SQL; hardcoded table names

1.0.3

• Security: Stripe webhook no longer creates licenses for donations or unrelated payments
• Security: PayPal webhook requires verified plan before issuing any license
• Security: Removed dangerous fallback plan keys that granted licenses without valid purchase

1.0.2

• Complete English translation: plans page, settings page, new license page, documentation
• Documentation now available in English and German based on WordPress language setting
• Added all missing i18n strings for settings labels, hints, and button texts
• Billing cycle labels, table headers and action buttons are now fully translated

1.0.1

• Plans page now shows Stripe Price-ID or PayPal Plan-ID depending on the active payment provider
• Added paypal_plan_id field to plans database table
• Improved PayPal webhook: plan lookup via Plan-ID, subscription renewal handling
• Migration: existing installations automatically receive the new paypal_plan_id column

1.0.0

• Initial release
• Stripe & PayPal webhook support
• REST API (validate, activate, deactivate)
• Dismissible StripeDeck info banner (permanently dismissed per user)