GT Link Manager

لاگ تبدیل ڪريو

1.7.1

• Fixed: The GT Link toolbar now works with the core Button block by updating the Button’s native URL and rel attributes.
• Improved: Rich text and Button controls now share the same GT Link search popover, normalize rel attributes, and preserve noopener for buttons that open in a new tab.

1.7.0

• New: Geolocation targeting. Any link can route visitors to a different destination based on their country, with rules evaluated in order and the first country match winning.
• New: Country detection with zero dependencies. The country is read from request variables your CDN or web server already provides — Cloudflare (CF-IPCountry), CloudFront, Vercel, Google App Engine, nginx GeoIP2, Apache mod_geoip, mod_maxminddb, or a custom header you name. No GeoIP database file, no third-party API, no outbound request.
• New: EU country group expands to all 27 member states in a single rule; extendable via gtlm_geo_country_groups.
• New: Per-rule status codes, and a “show a 404” fallback for visitors matching no rule.
• New: Geolocation settings section with a live “Detected Now” readout showing which country and source resolved for the current request — the fastest way to confirm your CDN is forwarding a country header.
• New: “Check Detection” button. Lists every country header present on the request with its raw value, and runs a loopback self-test — it sends the site a request carrying a country header and reports what the plugin detected at the other end. That proves detection works even on a local or staging install with no CDN in front, where “no country on this request” is correct rather than a fault. Also validates a country code you type before you use it in a rule.
• New: The detection readout distinguishes “nothing is proxying this site, so no country is expected” from “your CDN is in front but sent no country header” — only the second is a misconfiguration, and it now says how to fix it.
• New: Rule builder in the link editor. Numbered rows show match precedence, rules can be reordered, one-click picks cover common markets (US + CA, EU, UK, India, AU + NZ), the long country list is filterable, selections show as removable chips, and the “Everyone else” fallback reads as the final row. It warns when a country is listed twice (only the highest rule can ever match) or when a rule has countries but no URL.
• New: Rule preview. Pick a country and see exactly which rule wins and where it sends — evaluated in the browser against your unsaved edits, with no request made.
• New: Privacy disclosure. The plugin registers a suggested privacy-policy section under Settings → Privacy → Policy Guide, and states inline that country detection reads only a CDN-provided header — never the visitor’s IP address, never an external service, and the country is never stored or logged.
• Fixed: a partial REST update (PATCH) of one field silently reset every field that was not included, because each write argument declared a schema default that WP_REST_Request materialises into the request. Sending only geo_rules would reset redirect_type to 301 — which quietly breaks geo targeting — and blank tags, notes, and rel. Omitted fields now keep their stored values. Create defaults are unchanged.
• New: Optional X-GTLM-Country debug response header showing the detected country, its source, and whether a rule matched.
• New: Geo rules are exposed in the REST API on /links (create, read, update) with a self-describing schema, so links can be geo-targeted programmatically. Posting geo_rules without geo_mode opts the link in automatically.
• New: Geo rules round-trip through CSV import and export; a malformed rules cell is dropped without failing the row.
• New: Geo column in the links list table, and geolocation status in Diagnostics.
• Performance: geolocation costs nothing on links that do not use it — the check is a single array read, and country detection is never invoked unless a matched link opts in. Detection and settings are resolved once per request.
• Note: geo-targeted links should use 302, not 301. A 301 is cached by the browser permanently, which pins a visitor to whichever country they were in on their first click. The link editor warns when a geo link is set to 301.
• Note: a country header can be forged on requests that reach your site without passing through your CDN, so the 404 fallback is not a security control. Behind Cloudflare, CF-IPCountry is rewritten at the edge and cannot be spoofed; the “Cloudflare only” detection method is the strictest setting.

1.6.1

• Fixed nonce mismatch bug — trash, restore, and permanent delete actions were failing due to inconsistent nonce prefixes.
• Fixed potential ReDoS vulnerability — removed error suppression on regex pattern matching, added pattern length validation.
• Standardized all nonce prefixes to gtlm_ across admin actions and list table.
• Added REST API route descriptions to all endpoints for better discoverability.
• Added object caching for admin category dropdown with proper invalidation on create, update, and delete.
• Updated readme with free training course, developer reference, REST API guide, and new FAQ entries.

1.6.0

• Added advanced redirects: Direct (prefix-free) and Regex (pattern-based) link modes.
• Direct links redirect without the prefix — e.g., yoursite.com/my-page instead of yoursite.com/go/my-page.
• Regex links match request paths against patterns with capture group substitution in destination URLs.
• New “Enable Advanced Redirects” toggle in Settings (off by default) to opt in.
• Link edit form shows mode selector (Standard / Direct / Regex) with contextual fields.
• Conflict detection warns when direct link paths match existing WordPress posts or pages.
• Regex patterns are validated on save; invalid patterns are rejected.
• List table shows link mode with filter support.
• REST API accepts and returns link_mode, regex_replacement, and priority fields.
• New database columns: link_mode, regex_replacement, priority — fully backwards compatible.

1.5.3

• Fixed plugin zip size bloat — excluded .wordpress-org assets directory from distribution package.

1.5.2

• Added “Delete Data on Uninstall” setting — data is now preserved by default when the plugin is deleted.
• Uninstall only removes tables and options if the user explicitly opts in via Settings.

1.5.1

• Fixed CSS custom properties not resolving on some admin pages — all values are now hardcoded.
• Fixed form-table double-card styling when rendered inside a card container.
• Improved edit form submit buttons layout — buttons now display in a single horizontal row.
• Improved branded URL preview styling with distinct blue tint.
• Added subtle row separators inside card form tables.
• Added WordPress.org SVN deploy to release workflow.
• Added plugin banner and icon assets for WordPress.org listing.

1.4.0

• Renamed internal code prefix from gt_ to gtlm_ (4+ characters) per WordPress.org guidelines.
• Fixed nonce verification order in CSV import handler — nonce is now checked before reading POST data.
• Fixed SQL injection vector — $orderby now uses %i identifier placeholder in prepared queries.
• Added Source Code section to readme for compiled block editor assets.
• Added card-based UI styling to all admin pages (edit link, categories, settings, import/export).
• Settings page reorganized into General, Tools, and Diagnostics cards.
• Clean uninstall now removes both old (gt_) and new (gtlm_) prefix options and tables.

1.3.1

• Block editor: aligned GT Link popover anchoring with core rich text behavior using selection-based anchor.

1.3.0

• Refactored admin into separate actions and rendering classes for maintainability.
• Added Pretty Links CSV import preset alongside Generic and LinkCentral.
• Improved input sanitization on redirect URI parsing.
• Added PHPCS configuration and Composer dev tooling.
• Added uninstall.php for clean plugin removal (drops tables and options).
• Improved build.sh with .distignore support and critical file verification.
• Improved release workflow with version verification, checksums, and distribution validation.
• Block editor popover anchor now uses bounding rect snapshot for reliable positioning.
• Button primary color now follows WordPress admin theme color.
• Lowered PHP requirement from 8.2 to 8.0.
• Tested up to WordPress 6.9.

1.2.3

• Fixed release packaging bug that accidentally removed blocks/link-inserter/build/* from zip assets.
• GitHub release workflow now compiles block editor assets before zipping and verifies build files exist.

1.2.2

• Fixed block editor link inserter not appearing on WordPress 6.8+.
• Removed deprecated useAnchor hook that crashed the toolbar button on render.
• Eliminated react-jsx-runtime dependency that prevented the script from loading on some WordPress versions.
• Popover now anchors to the toolbar button for reliable positioning.

1.2.0

• Fixed critical bug: links disappeared after 1.1.9 update because new DB columns were not added on plugin update (only on fresh activation).
• Added automatic DB migration that runs on update to add missing columns and backfill existing rows.
• Fixed WordPress admin sidebar menu getting unintended card styles on the Settings page.
• Improved Settings page: Flush Permalinks and Run Diagnostics buttons are now inline, diagnostics output uses a clean table layout with status badges.

1.1.9

• Added link activate/deactivate toggle. Inactive links stop redirecting but remain in the database.
• Delete now moves links to trash instead of permanent deletion. Links can be restored from trash.
• Trash view with restore and permanent delete actions.
• New bulk actions: Activate, Deactivate, Move to Trash, Restore, Delete Permanently.
• REST API: DELETE defaults to trash (use ?force=true for permanent). New /restore and /toggle-active endpoints.
• Status column and views (All / Active / Inactive / Trash) in the links list table.
• New is_active and trashed_at columns added to the links table on upgrade.

1.1.8

• Maintenance release.

1.1.7

• Block editor: Fixed editor scroll jump when opening GT Link popover from the toolbar.
• Block editor: Improved search input focus behavior so opening popover does not move viewport.

1.1.6

• REST API: Added full pagination (page, per_page, category_id, orderby, order) to GET /links endpoint.
• REST API: Added args schema validation to all write endpoints (links, categories, bulk-category).
• Security: Replaced innerHTML with DOM methods in admin quick edit to prevent XSS.
• DB: Added rel whitelist validation on filter queries.
• Build: build.sh now compiles block editor assets before packaging.

1.1.5

• Maintenance release.

1.1.4

• Anchor popover to selected text using useAnchor from @wordpress/rich-text.

1.1.3

• Fixed format registration conflict with core/underline on WP 6.9+ (both used bare span tag).
• Added unique className to avoid tagName collision.

1.1.2

• Switch to RichTextToolbarButton for standard format toolbar integration.

1.1.1

• Force-inject format into RichText allowedFormats for reliable toolbar display.

1.1.0

• Rebuilt block editor link inserter with @wordpress/scripts build pipeline.
• Fixed toolbar button not appearing in block editor.
• Proper dependency resolution via index.asset.php.

1.0.4

• Fixed toolbar button registration in block editor for GT Link inserter.
• Added selected-text autofill in GT Link inserter search field.
• Improved redirect detection for WordPress installs in subdirectories.

1.0.3

• Enhance block editor integration with additional dependencies and improved format registration

1.0.2

• Minor internal hardening and cleanup.

1.0.1

• Fixed uninstall to preserve links and settings data across reinstalls.

1.0.0

• Initial release.