| @@ -4,9 +4,9 @@ | ||
| 4 | 4 | Tags: booking calendar, appointment booking, online booking, availability calendar, booking form |
| 5 | 5 | Requires at least: 5.3 |
| 6 | 6 | Requires PHP: 5.6 |
| 7 | 7 | Tested up to: 7.1 |
| 8 | -Stable tag: 11.8.2 | |
| 8 | +Stable tag: 11.8.4 | |
| 9 | 9 | License: GPLv2 or later |
| 10 | 10 | License URI: https://www.gnu.org/licenses/gpl-2.0.html |
| 11 | 11 | |
| 12 | 12 | WP Booking Calendar plugin for full-day bookings, time-slot appointments, rentals & events. Accept bookings and inquiries with flexible contact forms |
| @@ -317,22 +317,33 @@ | ||
| 317 | 317 | 10. **Calendar Availability**: Mark dates available or unavailable in just three clicks. |
| 318 | 318 | |
| 319 | 319 | |
| 320 | 320 | == Changelog == |
| 321 | -= 11.8.2 = | |
| 321 | += 11.8.4 = | |
| 322 | 322 | - Changes in **all** versions: |
| 323 | - * **Improvement**: Added a Custom Shortcode field to Form Builder so supported display tokens, including custom Form Options Cost hints in Business Medium or higher, can be placed without editing Advanced form code. | |
| 324 | - * **Improvement**: Added the `wpbc-hidden-on-frontend` Form Builder CSS class for hiding selected elements on public forms while keeping them visible and editable in the Builder canvas. | |
| 325 | - * **Fix**: Prevented the date-range guidance message from shifting centered calendars or leaving excessive blank space when hidden. | |
| 326 | -- Changes in **Personal / Business Small / Business Medium / Business Large / MultiUser** versions: | |
| 327 | - * **Fix**: Restored public bookings that aggregate availability from additional Booking Resources while retaining exact signed Resource validation. | |
| 328 | -- Changes in **Business Medium / Business Large / MultiUser** versions: | |
| 329 | - * **New**: Form Options Costs now support `if()` conditions and `min()`, `max()`, `abs()`, `round()`, `ceil()`, `floor()`, and `clamp()` functions, including nested formulas. | |
| 330 | - * **Security**: Hardened Form Options Costs with mutation-time permission checks, published Booking Form validation, strict cost-type and expression allow lists, bounded parser input, and finite scalar runtime values. | |
| 331 | -- Changes in **Business Large / MultiUser** versions: | |
| 332 | - * **Fix**: Restored Form Builder selection fields with a saved default, such as Adults, in the Capacity Rules Quantity field list. | |
| 333 | - * **Fix**: Booking Listing now summarizes multi-Resource dates once and shows each expanded date period with its reserved Resources instead of hiding or repeating child Resource labels. | |
| 323 | + * **Improvement**: Expanded Form Builder's Custom Shortcode field to accept one supported Booking Calendar shortcode with options and quoted values, including Coupon fields in editions that provide them, while rejecting malformed or unsafe input. | |
| 324 | + * **Security**: Hardened form auto-fill and time-slot rendering to prevent crafted links from injecting scripts into administrator booking pages. | |
| 334 | 325 | |
| 326 | += 11.8.3 = | |
| 327 | +- Changes in **all** versions: | |
| 328 | + * **Improvement**: Completed Ukrainian translations. | |
| 329 | + * **Security**: Restricted Form Builder option requests to explicitly registered Booking Calendar settings with fixed server-defined nonces and server-owned multi-option allowlists, preventing access to core or unrelated WordPress options. | |
| 330 | + * **Security**: Hardened public Timeline navigation with mandatory request tokens, allow-listed Resource-link options, and JavaScript-safe response serialization to prevent reflected script injection. | |
| 331 | + | |
| 332 | += 11.8.2 = | |
| 333 | +- Changes in **all** versions: | |
| 334 | + * **Improvement**: Added a Custom Shortcode field to Form Builder so supported display tokens, including custom Form Options Cost hints in Business Medium or higher, can be placed without editing Advanced form code. | |
| 335 | + * **Improvement**: Added the `wpbc-hidden-on-frontend` Form Builder CSS class for hiding selected elements on public forms while keeping them visible and editable in the Builder canvas. | |
| 336 | + * **Fix**: Prevented the date-range guidance message from shifting centered calendars or leaving excessive blank space when hidden. | |
| 337 | +- Changes in **Personal / Business Small / Business Medium / Business Large / MultiUser** versions: | |
| 338 | + * **Fix**: Restored public bookings that aggregate availability from additional Booking Resources while retaining exact signed Resource validation. | |
| 339 | +- Changes in **Business Medium / Business Large / MultiUser** versions: | |
| 340 | + * **New**: Form Options Costs now support `if()` conditions and `min()`, `max()`, `abs()`, `round()`, `ceil()`, `floor()`, and `clamp()` functions, including nested formulas. | |
| 341 | + * **Security**: Hardened Form Options Costs with mutation-time permission checks, published Booking Form validation, strict cost-type and expression allow lists, bounded parser input, and finite scalar runtime values. | |
| 342 | +- Changes in **Business Large / MultiUser** versions: | |
| 343 | + * **Fix**: Restored Form Builder selection fields with a saved default, such as Adults, in the Capacity Rules Quantity field list. | |
| 344 | + * **Fix**: Booking Listing now summarizes multi-Resource dates once and shows each expanded date period with its reserved Resources instead of hiding or repeating child Resource labels. | |
| 345 | + | |
| 335 | 346 | = 11.8.1 = |
| 336 | 347 | - Changes in **all** versions: |
| 337 | 348 | * **Improvement**: Added a two-column, two-step Time Slots booking template with live date, start-time, and end-time summary. It appears first in Form Builder when initially added, and clean installations use it for the starter Time Slots page; updates preserve existing forms, pages, and custom URLs. |
| 338 | 349 | * **Improvement**: Added a two-step, one-time welcome flow on Booking Listing after a clean installation: start guided Setup, then test valid starter booking pages through full, uncropped previews. Clean installations now also receive a Resource Selection page for trying the resource-first workflow. The starter-pages window uses complete Booking Calendar branding and can be reopened manually from the welcome panel after automatic dismissal; updates never add these prompts, pages, the reopen action, or the initial Setup menu. |
| @@ -374,6 +385,6 @@ | ||
| 374 | 385 | |
| 375 | 386 | [Full changelog](https://wpbookingcalendar.com/changelog/) |
| 376 | 387 | |
| 377 | 388 | == Upgrade Notice == |
| 378 | -= 11.8 = | |
| 379 | -Adds a vertical multi-month-ready full-day form for new installs, streamlined Booking Modes and Setup, plus paid Availability and Searchable Resources catalogs. Security hardens booking creation. MySQL 9.6+ compatibility; clear page and CDN caches after updating. | |
| 389 | += 11.8 = | |
| 390 | +Adds a multi-month-ready full-day form for new installs, streamlined Booking Modes and Setup, plus paid Availability and Searchable Resources catalogs. Security hardens booking creation, options, Timeline, form auto-fill, and time-slot rendering. MySQL 9.6+ compatibility; clear page/CDN caches. | |
