Changed: redirect links are now protected with a stable signed token (HMAC) instead of a WordPress nonce. Links no longer expire after ~24 hours and are fully compatible with page caching plugins
Fixed: rate limiting is now actually enforced on the countdown page
Fixed: security headers are now sent on the download countdown request
Fixed: URLs are no longer rewritten to force a “www.” subdomain, which could break valid download links
Fixed: countdown timer could initialize twice and run too fast on already-loaded pages
Fixed: removed deprecated FILTER_SANITIZE_STRING usage for PHP 8.1+ compatibility
Improved: uninstall now removes all plugin options and transients
Improved: avoid unnecessary database writes on every page load
