1.3.0
Latest1 new1 fix19 changes
New
- Added `gk/gravityview/magic-links/query-param/token` and `gk/gravityview/magic-links/query-param/email` filters to rename the `gv_magic` and `gv_email` URL parameters
Fixed
- Fixed a PHP warning written to the debug log when a magic link opened Edit Entry for a View with an empty Edit Entry layout.
Changes
- This update strengthens magic link security and resolves several issues with the `{gv_magic_link}` merge tag and email address matching; we recommend updating.
- Note: Magic Links now requires WordPress 6.5 or newer.
- ✨ Improved
- Faster request form submissions, with magic links now created and emailed in the background (on some servers, the email may take a few minutes to arrive).
- 🔒 Security
- Magic links now work only for the entry, View, and action they were created for, and link details are kept out of logs and away from other sites.
- The request form now follows the View's email validation settings, so a View set to "Don't validate by email field" with an empty Allowed Emails list sends links only through notifications.
- Issues with the `{gv_magic_link}` merge tag
- Tags inserted from the Gravity Forms merge tag menu produced no output
- Confirmations displayed the link's HTML as text, and plain-text notifications included link markup
- Delete links did not work when the tag output a plain URL
- Links were created for Views that were disabled, unpublished, or connected to a different form.
- Email addresses were not recognized as matching when their capitalization differed.
- Magic links did not work for some email addresses.
- An error occurred on PHP 8 when opening a malformed magic link URL.
- Each new entry stored its magic link twice.
- 💻 Developer Updates
- Names already used by WordPress or GravityView are ignored, with the reason written to the Magic Links log
- Links sent with the default names keep working after a rename, but links sent with a previous custom name do not.