Oumma Contact – Drag & Drop Contact Form Builder

10.0.8

• Improved: SEO-optimized readme title for better search visibility on WordPress.org
• Improved: Enriched long description with detailed feature overview and use cases
• Added: 4 new FAQ entries (page builders, form design, file uploads, mobile responsive)
• Updated: Anti-spam FAQ now reflects all free features (honeypot, blacklists, rate limiting)
• Added: Gutenberg compatibility mention in features list
• Fixed: Dashboard widget CSS not loading on WordPress dashboard (dedicated stylesheet)
• Fixed: Dashboard widget displays correctly with proper grid layout for stats
• Fixed: PRO/FREE detection now correctly checks if add-on is installed with valid license
• Fixed: Builder PRO tools correctly greyed out when add-on is not active
• Fixed: License page shows activation form when add-on is not installed
• Fixed: Dashboard widget shows upgrade button when add-on is not active
• Fixed: Settings page, forms list, and submissions list correctly reflect add-on status
• Added: New oumc_has_pro_addon() function for accurate PRO add-on detection
• Updated: Field types FAQ corrected to reflect all 30+ types included for free
• Updated: All new content translated in 11 languages

10.0.6

• Improved: SEO-optimized plugin title and description for better discoverability
• Updated: All 30+ field types now listed in plugin description
• Improved: Translation quality for German (du-form per WordPress standard) and Dutch (je-form per WordPress standard)
• Fixed: WordPress glossary compliance across all 11 languages (Settings, Configuration terms)
• Fixed: Portuguese translations standardized to PT-PT
• Updated: Translation files refreshed for all 11 languages

10.0.5

• Fixed: All inline styles converted to properly enqueued CSS files
• Fixed: All inline scripts converted to wp_add_inline_script
• Fixed: Variable gettext replaced with literal string mapping
• Fixed: All features enabled in free version (premium add-on extends via hooks)
• Fixed: Plugin Check – 0 errors, 0 warnings

10.0.4

• Fixed: SMTP provider documentation links now fully disclosed in External Services section of readme.txt
• Fixed: file_base64 POST data sanitization improved with explicit wp_unslash + character whitelist
• Fixed: $_FILES properties now explicitly sanitized (sanitize_file_name, sanitize_mime_type, intval) instead of raw assignment
• Fixed: All phpcs:ignore comments updated with precise justifications

10.0.3

• Fixed: External services (Google reCAPTCHA, Oumma Pro License API) fully documented in readme.txt as required by WordPress.org
• Fixed: ABSPATH replaced with wp_get_upload_dir() for file path resolution
• Fixed: Settings save no longer iterates over entire $_POST — all fields explicitly listed with proper sanitization
• Fixed: JSON-decoded form data now recursively sanitized after json_decode()
• Fixed: Premium field output escaped with wp_kses_post() instead of raw echo
• Fixed: Removed unprefixed shortcodes (contact_pro, oumma_contact) — only [oumma-contact] remains
• Fixed: Elementor widget name prefixed (oumc_contact)
• Fixed: GDPR FAQ corrected to mention reCAPTCHA external service
• Fixed: Installation instructions reference correct plugin folder name
• Fixed: Duplicate ABSPATH check removed in admin-forms class

10.0.2

• Improved: SMTP provider help texts with detailed warnings for Outlook/Microsoft 365 (SMTP AUTH, MFA, Azure Security Defaults)
• Improved: SMTP provider help texts for OVH, Zoho Mail, SMTP2GO and Other SMTP with clear instructions and links
• Improved: UI font weights normalized across all admin pages (lighter, more readable text)
• Improved: Input fields text no longer appears bold
• Improved: Page titles changed from bold to normal weight
• Improved: Forms list name column no longer bold
• Improved: Builder right panel labels and controls normalized
• Added: 23 new translated strings for SMTP provider help (11 languages)

10.0.1

• Fixed: File upload attachment now uses base64 encoding to bypass WAF/firewall blocking
• Fixed: Textarea line breaks preserved in emails (sanitize_textarea_field)
• Fixed: OC License Manager footer CSS selector updated after prefix rename

10.0.0

• Major: All internal prefixes renamed for WordPress.org compliance (cp_ → oumc_, cpp_ → oumcp_)
• Major: 27 files refactored, ~3400 replacements across PHP, CSS, JS
• Major: PRO plugin now uses dedicated text domain (oumma-contact-pro) with 31 strings × 10 languages
• Fixed: Plugin Check now passes with 0 errors
• Fixed: Global variables properly prefixed
• Fixed: Shortcodes renamed [contact_pro] → [oumma-contact] (backward compat aliases maintained)

9.9.9

• Architecture: All premium functional code moved to the separate Oumma Contact add-on
• Compliance: No locked, restricted, or gated functionality in the free plugin (WordPress.org Guideline #5)
• Added: Hook system (do_action/apply_filters) for premium features delegation to add-on
• Fixed: cp_is_pro() now requires the Premium add-on to be installed and active
• Fixed: reCAPTCHA v3 site key option name corrected in form renderer
• Fixed: reCAPTCHA moved to free field types where it belongs
• Updated: readme.txt to accurately describe free vs premium features

9.9.7

• Fixed: All remaining Plugin Check errors in password field escaping
• Fixed: PreparedSQL.NotPrepared error on count_submissions query
• Fixed: NonceVerification warning on form builder navigation parameter
• Improved: Full Plugin Check compliance with 0 errors and 0 warnings

9.9.6

• Fixed: phpcs:ignore directives moved inside PHP tags in HTML templates
• Fixed: wp_unslash() and sanitize_text_field() added on all $_POST and $_SERVER access
• Fixed: isset() added on $_FILES and $_POST access
• Added: phpcs:ignore for DirectDatabaseQuery on custom table queries

9.9.5

• Fixed: All Plugin Check escaping errors (esc_html, esc_attr, esc_url, intval)
• Fixed: wp_redirect() replaced with wp_safe_redirect() everywhere
• Fixed: wp_unslash() added on all superglobals
• Fixed: unlink() replaced with wp_delete_file()
• Fixed: rand() replaced with wp_rand()
• Fixed: date() replaced with gmdate()

9.9.4

• Fixed: Nonce verification added to all admin forms

9.9.3

• Prepared for WordPress.org submission
• Added: Plugin URI and Tested up to in plugin header
• Improved: Plugin description for guidelines compliance

9.9.2

• Fixed: License activation now works on external sites via remote API
• Added: New error messages for connection and API errors
• Improved: License activation flow with multiple fallback methods

9.9.1

• Improved: License status detection and support email formatting
• Fixed: Cache refresh for license expiration date after renewal

9.9.0

• Improved: Auto-update icon display with cache-busting
• Fixed: WordPress transient cache handling

9.8.0

• Added: Automatic updates for Premium add-on via license server
• Added: Dashboard widget with recent submissions

9.7.5

• Improved: Freemium architecture with separate add-on for premium features
• Removed: Form and submission limits – now unlimited for all users
• Fixed: Security improvements
• Improved: 11 language translations