BdThemes | Smart Admin Assistant Pro Changelog

Sem data · 14 versões

1. 2.4.1

   Última

   2 melhorias3 correções

   Ocultar

   Melhoria

   • URL Redirect Manager now saves with an explicit Save Changes button instead of saving while you type
   • The From field shows the path that will actually be stored as soon as you leave the field, and warns when it matches the site homepage

   Corrigido

   • Adding a redirect in URL Redirect Manager no longer removes the empty row a moment later — a rule is kept in the editor until both From and To are filled in
   • A source path typed as a full URL is no longer saved as "/", which turned the rule into a redirect of the whole homepage
   • A redirect whose From points at another domain is now refused with an explanation instead of being stored as a homepage redirect, and it can no longer overwrite the rule that was already saved

2. 2.4.0

   1 novo2 melhorias

   Ocultar

   Novo

   • The Custom Code snippet manager now ships in this add-on. Snippet storage, insertion points, the editor screen and CSS/JavaScript/HTML rendering moved here from the free plugin, which can no longer include them — WordPress.org does not permit a directory-hosted plugin to save and run arbitrary code. PHP snippets, display conditions, scheduling, minification and import/export are unchanged

   Melhoria

   • Existing snippets are picked up automatically. They stay in the same database table, which this plugin now creates and removes
   • Requires Smart Admin Assistant 2.4.0 or newer — update the free plugin first

3. 1.7.0

   3 novos3 melhorias1 correção

   Ocultar

   Novo

   • Site health email reports — scheduled weekly or daily delivery, "email after each scan", and the manual send from Settings and the scan report modal. Moved here from the free plugin; settings saved there are picked up automatically
   • All premium features now ship in this add-on instead of being unlocked inside the free plugin — SEO, SMTP, redirects, code snippets, admin menu design, login page builder, 2FA, CAPTCHA, magic login, activity log, session monitor, cron manager, developer tools and server health
   • Pro React admin bundle that plugs its tabs and pages into the free dashboard

   Melhoria

   • A failed report now says why (the mailer's own reason, e.g. a refused SMTP login) instead of only "check your mail configuration"
   • Requires Smart Admin Assistant 2.3.0 or newer — update the free plugin first
   • Pro options, CAPTCHA fields and script handles renamed to a `bdtsaapro_` prefix (existing values migrate automatically)

   Corrigido

   • The media replacement screen no longer requests a stylesheet that does not exist

4. 1.6.3

   1 correção

   Mostrar

   Corrigido

   • Admin menu items hidden with Menu Design stayed visible on every screen outside the plugin's own pages

5. 1.6.2

   1 novo3 correções

   Mostrar

   Novo

   • REST API for the new WP-Cron Manager tab (requires free version 2.2.0)

   Corrigido

   • Magic Login links showed the login page instead of signing the user in while the Custom Login URL feature was enabled
   • Magic Login emails could go out with an empty subject or body when the saved template fields were blank; the defaults are now used instead
   • Magic Login email templates support HTML such as links and line breaks (requires free version 2.2.0)

6. 1.6.1

   2 melhorias4 correções1 de segurança

   Mostrar

   Melhoria

   • Lighter server metrics, batched activity-log cleanup, and less frequent cron checks
   • REST endpoints now validate their query parameters

   Corrigido

   • Scripts and styles now load only on the screens where they are used
   • Renamed several AJAX actions to avoid conflicts with other plugins (requires free version 2.1.1)
   • Disabling all pro modules re-enabled them, and the dependency notice would not stay dismissed
   • Failed database operations (broken links, IP blocklist, optimizer) now report accurate errors

   Segurança

   • Hardened Magic Login form handling

7. 1.6.0

   2 novos1 correção

   Mostrar

   Novo

   • Server Monitor module — live CPU, RAM, swap, and disk metrics with WordPress health insights, powering the new Server Health dashboard
   • REST API endpoint for server metrics, with built-in caching to keep dashboard polling lightweight

   Corrigido

   • Server CPU readings could blend together on Linux hosts; each reading is now smoothed independently

8. 1.5.0

   3 novos2 melhorias5 correções10 de segurança

   Mostrar

   Novo

   • Compatibility with WordPress 7.0.1
   • REST API endpoints for Activity Log and Debug Log (React dashboard integration)
   • Performance module support for removing .htaccess browser caching rules when disabled

   Melhoria

   • Activity log with individual entry deletion, cleaner option tracking, and improved CSV export
   • Login page customization compatibility with the React admin dashboard

   Corrigido

   • The debug-log REST endpoint always returned an empty log (it called a method that did not exist); it now returns the actual log lines for the React dashboard.
   • Clearing the debug log via REST reported success even when the file was missing or not writable; it now reports an accurate result and surfaces a clear error when the file cannot be written. Both endpoints now resolve the log path through the viewer's containment-checked helper.
   • Clearing the activity log (REST and AJAX) and clearing all IP blocks now report an accurate error when the underlying database operation fails, instead of always reporting success.
   • The spam-comment cleanup now reports an error when the deletion query fails rather than reporting success with a count of zero.
   • Login template builder event handling and template switching in React admin context

   Segurança

   • Fixed a two-factor authentication bypass. The 2FA setup flow could be used to complete login without verifying a second factor — either by posting directly to the final "complete" step, or by re-running setup against an already-enrolled account. Setup completion now requires a second factor to be verified within the same pending-login session, and already-enrolled users are routed to verification instead of setup.
   • The Developer Tools "manage WP debug log" feature no longer writes a plaintext `wp-config.php.bdtsaa-bak` backup next to wp-config.php (web-accessible on most installs, exposing database credentials and secret keys). The config is now updated via an atomic replace with no on-disk backup, and any backup left by a previous version is removed automatically.
   • The 2FA verification screen now enforces the account lockout at entry, so the "maximum attempts" limit can no longer be bypassed to brute-force verification codes.
   • Magic Login email codes are now generated with a cryptographically secure random source instead of str_shuffle.
   • Magic Login token authentication is now throttled per account after repeated invalid attempts.
   • Magic Login now derives the client IP from REMOTE_ADDR only, ignoring spoofable forwarding headers unless the site opts in via the `bdtsaa_trust_proxy_headers` filter.
   • The Performance module no longer leaves predictable, web-accessible ".htaccess" backup copies (".htaccess.bdtsaa-backup-*") in the site root when toggling browser-caching rules. Writes now use a random temporary file with an in-memory restore, and any backups left by earlier versions are removed automatically.
   • Two-factor recovery codes are now compared in constant time (hash_equals) to remove a theoretical timing side channel.
   • The Magic Login form no longer reveals whether an account exists for a submitted username or email; it always shows the same "check your inbox" response, preventing username/email enumeration.
   • The dependency admin notice can no longer be dismissed via a forged GET request; dismissal now always requires a valid nonce and capability.

9. 1.4.0

   3 novos

   Mostrar

   Novo

   • Debug Log Viewer with live refresh, clear, and download capabilities (Developer Tools)
   • URL Redirect Manager and Smart 404 Redirect runtime support (Utilities)
   • Login page template builder with layout templates and advanced style settings (Pro)

10. 1.3.1

    1 correção

    Mostrar

    Corrigido

    • Resolved CAPTCHA validation issue preventing successful authentication on login forms

11. 1.3.0

    2 novos1 melhoria

    Mostrar

    Novo

    • Compatibility with WordPress 7.0
    • 2FA (Two-Factor Authentication) support to the Security module

    Melhoria

    • Updated codebase for the latest WordPress core APIs and standards

12. 1.2.2

    1 novo1 melhoria1 correção

    Mostrar

    Novo

    • Disable Emojis option in Performance Module to reduce unnecessary script loading and improve page load times

    Melhoria

    • Code quality and overall plugin stability

    Corrigido

    • Various minor bugs and edge case issues

13. 1.2.1

    2 melhorias1 correção

    Mostrar

    Melhoria

    • General performance optimizations and code improvements
    • Enhanced compatibility with Smart Admin Assistant free version

    Corrigido

    • Minor bug fixes and stability improvements

14. 1.2.0

    1 novo1 correção

    Mostrar

    Novo

    • Comprehensive activity logging system to monitor user activities, system modifications, and security events

    Corrigido

    • Resolved SMTP configuration and settings persistence issues