pods
Last commit date
classes
2 years ago
components
2 years ago
deprecated
2 years ago
includes
2 years ago
sql
2 years ago
src
2 years ago
ui
2 years ago
vendor
2 years ago
changelog.txt
2 years ago
init.php
2 years ago
license.txt
10 years ago
readme.txt
2 years ago
readme.txt
310 lines
| 1 | === Pods - Custom Content Types and Fields === |
| 2 | Contributors: sc0ttkclark, zrothauser, keraweb, jimtrue, quasel, nicdford, jamesgol, ramoonus, pglewis, dan.stefan, Desertsnowman, mgibbs189, Shelob9, clubduece, curtismchale, mikedamage, jchristopher, pcfreak30 |
| 3 | Donate link: https://friends.pods.io/ |
| 4 | Tags: pods, custom post types, custom taxonomies, content types, custom fields |
| 5 | Requires at least: 6.0 |
| 6 | Tested up to: 6.5 |
| 7 | Requires PHP: 7.2 |
| 8 | Stable tag: 3.2.2 |
| 9 | License: GPLv2 or later |
| 10 | License URI: http://www.gnu.org/licenses/gpl-2.0.html |
| 11 | |
| 12 | Pods is a framework for creating, managing, and deploying customized content types and fields for any project. |
| 13 | |
| 14 | == Description == |
| 15 | |
| 16 | Manage all your custom content needs in one location with the Pods Framework. |
| 17 | |
| 18 | * **Create content types** including Custom Post Types, Custom Taxonomies, and our special Advanced Content Types (ACTs get their own custom tables) |
| 19 | * **Extend and customize content types** including Posts, Pages, Categories, Tags, Users, and Media with one easy click |
| 20 | * **Create custom settings pages** easily within seconds |
| 21 | * **Add custom fields** to *any* content type |
| 22 | * **Conditionally show fields** based on the value of other fields with Conditional Logic |
| 23 | * **Group your fields** however you'd like into their own sections and add additional headings to help organize |
| 24 | * **Show your fields** anywhere using our [blocks](https://docs.pods.io/displaying-pods/pods-blocks/), [shortcodes](https://docs.pods.io/displaying-pods/pods-shortcode/), [widgets](https://docs.pods.io/displaying-pods/pods-widgets/), or the non-coder [Pods Template](https://docs.pods.io/displaying-pods/pods-templates/) approach along with our [automatic theme integration](https://docs.pods.io/displaying-pods/pods-templates/auto-templates/) |
| 25 | * **Create connections** between any of your content with [relationship fields](https://docs.pods.io/fields/relationship/) to keep your content organized |
| 26 | |
| 27 | Let Pods help you grow your development and site building skills so that you can manage content beyond the standard WordPress Posts & Pages. |
| 28 | |
| 29 | Want to check it out? Give Pods a test drive with our new [One-click Demo](https://pods.io/demo/). |
| 30 | |
| 31 | Check out our [Documentation](https://docs.pods.io/), [Support Forums](https://wordpress.org/support/plugin/pods/), and our [Live Community Slack Chat](https://support.pods.io/chat/) for assistance building your dream project with Pods. |
| 32 | |
| 33 | = Introduction = |
| 34 | |
| 35 | [youtube https://www.youtube.com/watch?v=0WqKZr2gPZY] |
| 36 | |
| 37 | = Content types that evolve with your needs = |
| 38 | |
| 39 | Create any type of content that you want -- small or large -- we've got you covered. Every content type created with Pods gets all the love it needs to grow up big and strong. You'll get an easy-to-use interface that lets you manage field groups, custom fields, and how your content type will look or function. |
| 40 | |
| 41 | = Create new content types = |
| 42 | |
| 43 | With Pods, you can create entirely new content types and settings pages. |
| 44 | |
| 45 | = Every Field Type, FREE = |
| 46 | |
| 47 | If you choose to use Pods for your custom fields, you'll get every field type you need, free of charge. Pods works great alongside [other custom field plugins](https://comparewp.org/cck) like [Advanced Custom Fields](https://wordpress.org/plugins/advanced-custom-fields/) too. |
| 48 | |
| 49 | We have an extensive collection of over [25 different input types to choose from on 20+ different field types for any content structure](https://docs.pods.io/fields/). Each field type comes with their own additional options to help you customize content entry and display. |
| 50 | |
| 51 | You can also control visibility by role/capability and [other advanced options](https://docs.pods.io/fields/settings-advanced/). |
| 52 | |
| 53 | * **Repeatable Fields:** Turn almost any field into a repeatable field with multiple values |
| 54 | * **Text:** Plain Text, Website, Phone, Email, Password |
| 55 | * **Paragraph:** Plain Paragraph Text, WYSIWYG (Visual Editor), Code (Syntax Highlighting) |
| 56 | * **Date / Time:** Date and Time, Date, Time |
| 57 | * **Number:** Plain Number, Currency (30+ international currencies) |
| 58 | * **Relationships / Media:** File / Image / Video (Media library and basic upload options available), Avatar (for extended Users), oEmbed, Relationship (Dropdown, Multi Select, Autocomplete, Checkboxes, Radio Buttons, and List View available) |
| 59 | * **Checkbox** (Yes / No) |
| 60 | * **Color Picker** |
| 61 | * **Layout Fields:** Heading text, HTML content |
| 62 | |
| 63 | = Relationships to rule the world with = |
| 64 | |
| 65 | The power is in your hands with our comprehensive support to **relate your content to anything**. |
| 66 | |
| 67 | * **Custom defined lists** of text options |
| 68 | * Relate to any **Post Type or Taxonomy** posts / terms |
| 69 | * Relate to any **User** profile |
| 70 | * Relate to **User Roles or Capabilities** |
| 71 | * Relate to any **Comment** |
| 72 | |
| 73 | And many other relationships are also available including: |
| 74 | |
| 75 | * **Image Sizes** |
| 76 | * **Navigation Menus** |
| 77 | * Relate to content within **any Database Table** |
| 78 | * **Countries** (predefined) |
| 79 | * **US States** (predefined) |
| 80 | * **Canadian Provinces** (predefined) |
| 81 | * **Calendar - Days of Week** (predefined) |
| 82 | * **Calendar - Months of Year** (predefined) |
| 83 | * And many more! |
| 84 | |
| 85 | = Optional Components to do even more = |
| 86 | You can enable some of our included components to extend your WordPress site even further: |
| 87 | |
| 88 | * **Types-only Mode** - On our Pods Settings page, you can choose to disable creating custom fields for a performance boost if you only want to use Pods for content types or you plan on using it alongside of other custom field plugins |
| 89 | * **Pods Templates** - Use our [template engine](https://docs.pods.io/displaying-pods/pods-templates/) to create templates that can be handed off to clients for care-free management |
| 90 | * **Markdown Syntax** - Parses [Markdown Syntax](https://www.markdownguide.org/basic-syntax) for Paragraph Text / WYSIWYG fields |
| 91 | * **Advanced Relationships** - Add even more relationship objects including Database Tables, Multisite Networks, Multisite Sites, Themes, Page Templates (in the theme), Sidebars, Post Type Objects, and Taxonomy Objects |
| 92 | * **Table Storage** - Enable table-based database storage for custom fields on Post Types, Media, Users, and Comments |
| 93 | * **Roles and Capabilities** - Create or edit Roles for your site and customize what they have access to |
| 94 | * **Advanced Content Types** - Create entirely custom content types that have their own database table, and they will exist outside the normal WordPress context avoiding meta database tables |
| 95 | * **Pods Pages** - Create custom pages that function off of your site's URL path with wildcard support and choose the Page Template in the theme to use -- most useful paired with Advanced Content Types |
| 96 | |
| 97 | = Plugins that integrate with Pods = |
| 98 | |
| 99 | * [Advanced Views Lite](https://pods.io/advanced-views-lite/) - Lets you build templates (views) and queries (cards) so that you can manage your content rendering with less code. |
| 100 | * [Bricks Builder](https://bricksbuilder.io/) |
| 101 | * [Codepress Admin Columns](https://wordpress.org/plugins/codepress-admin-columns/) using premium [Admin Columns Pro](https://www.admincolumns.com/pods/) Pods integration |
| 102 | * [Conductor](https://conductorplugin.com/) |
| 103 | * [Elementor Pro](https://elementor.com/pro/) |
| 104 | * [Polylang](https://wordpress.org/plugins/polylang/) has direct integration in Pods itself |
| 105 | * [Timber](https://wordpress.org/plugins/timber-library/) |
| 106 | * [WPGraphQL](https://wordpress.org/plugins/wp-graphql/) has direct integration in Pods itself |
| 107 | * [WPML](http://wpml.org/) has direct integration in Pods itself |
| 108 | * [YARPP](http://wordpress.org/plugins/yet-another-related-posts-plugin/) has direct integration in Pods itself |
| 109 | |
| 110 | = Themes that integrate with Pods = |
| 111 | |
| 112 | * [Genesis](https://www.studiopress.com/themes/genesis/) (StudioPress) has direct integration in Pods itself |
| 113 | |
| 114 | = Extend Pods with Free Add-Ons = |
| 115 | |
| 116 | * [Pods Beaver Themer Add-On](https://wordpress.org/plugins/pods-beaver-builder-themer-add-on/) - Integrates Pods with [Beaver Themer](https://www.wpbeaverbuilder.com/beaver-themer/) |
| 117 | * [Pods Gravity Forms Add-On](https://wordpress.org/plugins/pods-gravity-forms/) - Integrates Pods with [Gravity Forms](https://pods.io/gravityforms/) |
| 118 | * [Pods Alternative Cache Add-On](https://wordpress.org/plugins/pods-alternative-cache/) - Speed up Pods on servers with limited object caching capabilities |
| 119 | * [Pods SEO Add-On](https://wordpress.org/plugins/pods-seo/) - Integrates Pods Advanced Content Types with Yoast SEO |
| 120 | * [Pods AJAX Views Add-On](https://wordpress.org/plugins/pods-ajax-views/) - Adds new functions you can use to output template parts that load via AJAX after other page elements |
| 121 | |
| 122 | = Extend Pods with Free Third-party Add-Ons = |
| 123 | |
| 124 | * [Paid Memberships Pro - Pods Add On](https://wordpress.org/plugins/pmpro-pods/) - Integrates Pods with [Paid Memberships Pro](https://wordpress.org/plugins/paid-memberships-pro/) to extend PMPro objects with custom fields added by Pods |
| 125 | * [Panda Pods Repeater Field Add-On](https://wordpress.org/plugins/panda-pods-repeater-field/) - Lets you add groups of fields that repeat and are stored in their own custom database table (Advanced setup required) |
| 126 | |
| 127 | = Pods Pro by SKCDEV Premium Add-Ons = |
| 128 | |
| 129 | * [List Tables Add-On](https://pods-pro.skc.dev/downloads/list-tables/) - A new block and shortcode to list/filter content from Pods in a table format |
| 130 | * [Page Builder Toolkit Add-On](https://pods-pro.skc.dev/downloads/page-builder-toolkit/) - Integrates Pods with [Beaver Builder](https://wordpress.org/plugins/beaver-builder-lite-version/), [Beaver Themer](https://www.wpbeaverbuilder.com/beaver-themer/), [Conditional Blocks Pro](https://conditionalblocks.com/), [Divi Theme](https://www.elegantthemes.com/gallery/divi/), [Elementor](https://wordpress.org/plugins/elementor/), [GenerateBlocks](https://wordpress.org/plugins/generateblocks/), [Oxygen Builder](https://oxygenbuilder.com/), and [Stackable Blocks (premium)](https://wpstackable.com/premium/) |
| 131 | * [Advanced Relationships Storage Add-On](https://pods-pro.skc.dev/downloads/advanced-relationship-storage/) - Advanced options for relationship storage |
| 132 | * [TablePress Integration Add-On](https://pods-pro.skc.dev/downloads/tablepress-integration/) - Integrates Pods with [TablePress](https://wordpress.org/plugins/tablepress/) |
| 133 | * [Advanced Permalinks Add-On](https://pods-pro.skc.dev/downloads/advanced-permalinks/) - Advanced permalink structures and taxonomy landing pages |
| 134 | |
| 135 | == Installation == |
| 136 | |
| 137 | 1. Unpack the entire contents of this plugin zip file into your `wp-content/plugins/` folder locally |
| 138 | 1. Upload to your site |
| 139 | 1. Navigate to `wp-admin/plugins.php` on your site (your WP Admin plugin page) |
| 140 | 1. Activate this plugin |
| 141 | |
| 142 | OR you can just install it with WordPress by going to Plugins >> Add New >> and type this plugin's name |
| 143 | |
| 144 | == Frequently Asked Questions == |
| 145 | |
| 146 | = Where do I go for Support on your plugin? = |
| 147 | |
| 148 | Our primary Support is handled through our [Support Forums](https://wordpress.org/support/plugin/pods/). For the fastest support, you can contact us on our [Live Community Slack Chat](https://support.pods.io/chat/) in the #support channel. We do not staff our Slack channel 24/7, but we do check any questions that come through daily and reply to any unanswered questions. |
| 149 | |
| 150 | We do have a community of Pods users and developers that hang out on Slack, so you're sure to get an answer quickly. We answer our Forum questions once a week with follow-up during the week as we're prioritizing resources towards restructuring and improving our documentation. |
| 151 | |
| 152 | = Where do I report bugs or request features? = |
| 153 | |
| 154 | If you’ve encountered a bug or have an idea for a new feature, we kindly request you to create an Issue on our GitHub Repository at [https://github.com/pods-framework/pods/issues/new](https://github.com/pods-framework/pods/issues/new). Please be very specific about what steps you did to create the issue you’re having and include any screenshots or other configuration parameters to help us recreate or isolate the issue. |
| 155 | |
| 156 | = Will Pods work with my Theme? = |
| 157 | |
| 158 | Most likely the answer is yes. We don't require any special CSS or display attributes to use Pods with your theme, so you should have little to no difficulty showing your content in your theme. If you encounter any issues, contact your theme developer and ask them about their support for the standard WordPress theming functions and how to use [WordPress Template Hierarchy](https://wphierarchy.com) with their theme. |
| 159 | |
| 160 | == How can I translate Pods into my own language? == |
| 161 | |
| 162 | Many thanks go out to the fine folks who have helped us translate the Pods plugin into many other languages. |
| 163 | |
| 164 | Join us in further translating the Pods interface on the official [Translating WordPress dashboard](https://translate.wordpress.org/projects/wp-plugins/pods) |
| 165 | |
| 166 | We are also available through our [Live Community Slack Chat](https://support.pods.io/chat/) to help our translators get started and to support them on the process. |
| 167 | |
| 168 | Are you looking to translate your Pods and Fields themselves? You'll want to enable the "Translate Pods" component from Pods Admin > Components. |
| 169 | |
| 170 | == Screenshots == |
| 171 | |
| 172 | 1. Create new content types or extend existing ones |
| 173 | 2. Add groups of fields and manage your content type |
| 174 | 3. Add fields of many types with individual options for each |
| 175 | 4. Creating or extending a Post Type will add groups of fields to the Post Editor |
| 176 | 5. Creating or extending a Taxonomy will add groups of fields to the Term Editor |
| 177 | 6. Extending Users will add groups of fields to the User Profile and Edit forms |
| 178 | |
| 179 | == Contributors == |
| 180 | |
| 181 | Pods really wouldn't be where it is without all the contributions from our [donors](https://friends.pods.io) and [code/support contributors](https://github.com/pods-framework/pods/graphs/contributors). |
| 182 | |
| 183 | == Changelog == |
| 184 | |
| 185 | = 3.2.2 - June 18th, 2024 = |
| 186 | |
| 187 | * Feature: You can now turn on Taxonomy filters for a Custom Taxonomy so that you see a dropdown filter on the list of posts for any associated post types. (@sc0ttkclark) |
| 188 | * Added: Pods Templates > Support for comments on post types using Pods Templates using `[each comments]` and `[if comments]`. (@sc0ttkclark) |
| 189 | * Added: REST API > Add support for determining whether to require person to be logged in to read values for custom fields (default: login not required). (@sc0ttkclark) |
| 190 | * Added: Automatically redirect to the proper edit URL when going to the Pods Admin > Edit Pods page for a specific pod but `id=XX` is the slug. (@sc0ttkclark) |
| 191 | * Tweak: Accessibility > Make it easier to copy and paste field names for the Edit Pod screen with a new copy icon you can click. #7291 #7237 (@heybran, @sc0ttkclark) |
| 192 | * Tweak: Responsive UI > Improved appearance for the Edit Pod screen for smaller screens. (@sc0ttkclark) |
| 193 | * Fixed: Security hardening > Sanitize HTML before passing into Pods field inputs for paragraph/code/wysiwyg field types to cover additional cases where something could make it past the sanitization process on save. (@sc0ttkclark) |
| 194 | * Fixed: Accessibility > Add label for color fields in the Pods Blocks API so it shows the label and not just the color input itself. #7306 #7305 (@pdclark) |
| 195 | * Fixed: Group and field names now generate in the UI as expected. (@sc0ttkclark) |
| 196 | * Fixed: Compatibility > Date, Date/Time, and Time default values now use single quotes to ensure maximum compatibility with various SQL engines. (@sc0ttkclark) |
| 197 | * Fixed: Compatibility > More PHP compatibility issues with `trim()` related function usage resolved. (@sc0ttkclark) |
| 198 | * Fixed: Code quality > Various phpstan/phpcs issues resolved. (@sc0ttkclark) |
| 199 | |
| 200 | = 3.2.1.1 - May 8th, 2024 = |
| 201 | |
| 202 | *Security Release* |
| 203 | |
| 204 | * Security hardening: Enforce safe URLs for Pods form submission confirmation page URLs. Props to the wesley (wcraft) / Wordfence for responsibly reporting this. (@sc0ttkclark) |
| 205 | |
| 206 | = 3.2.1 - March 29th, 2024 = |
| 207 | |
| 208 | * Performance: The Advanced Filters popup now uses Autocomplete for relationship fields to improve performance for large itemsets. FYI filters are a feature in the Manage Content UI for Advanced Content Types only. (@sc0ttkclark) |
| 209 | * Fixed: Conditional logic for display callbacks 'allowed' field now showing when choosing the Customized option. (@sc0ttkclark) |
| 210 | * Fixed: PHP 8.1 compatibility fix for null values passed to esc_* functions in WP. (@sc0ttkclark) |
| 211 | * Fixed: PHP 8.1 compatibility fix for html_entity_decode. (@sc0ttkclark) |
| 212 | |
| 213 | = 3.2.0 - March 25th, 2024 = |
| 214 | |
| 215 | * Feature: New support for Custom Field revisions in Pods that are Post Types that use Meta storage. You can optionally enable the feature per-pod or per-field. #7265 (@sc0ttkclark) |
| 216 | * Feature: New support for WordPress `register_meta()` for all Pods fields on meta-based Pods. You can enable this feature in Pods Admin > Settings > "Register meta fields". (@sc0ttkclark) |
| 217 | * Feature: New support for specifying where your Custom Fields show in REST API responses for Pods that support that. You can choose from Object (response.field_name) or Meta (response.meta.field_name). (@sc0ttkclark) |
| 218 | * Feature: New support for Custom Fields in the new [WordPress 6.5 Block Bindings API](https://make.wordpress.org/core/2024/03/06/new-feature-the-block-bindings-api/) for the `core/post-meta` source. To use your custom fields there, you will need to enable "Register meta fields" in your Pods Admin > Settings and set your Pod to show it's REST API fields in the "Meta" location instead of Object. (@sc0ttkclark) |
| 219 | * Feature: New custom binding source support for the [WordPress 6.5 Block Bindings API](https://make.wordpress.org/core/2024/03/06/new-feature-the-block-bindings-api/). Specify your source as `pods/bindings-field` and then just pass the same arguments you would pass for a normal `[pods]` shortcode or block. This will bind that dynamic output to the block you are working with. (@sc0ttkclark) |
| 220 | * Feature: Now you can specify whether to default values for a Pods field when the field is empty. This works great for when you add a new field to a Pod and you want to edit an existing item that did not have a field value set. The default value will be used in that circumstance. (@sc0ttkclark) |
| 221 | * Feature: Support for multiple default values when working with a multi-select field. Now you can just separate your values with a comma and they will be set as the default values. (@sc0ttkclark) |
| 222 | * Feature: Now you can specify whether to evaluate magic tags for default values like `{@user.ID}`. (@sc0ttkclark) |
| 223 | * Tweak: New option for Pods shortcodes when used in plugins like Elementor to bypass detecting the loop and to just use whatever ID/post type is available. Use the `bypass_detect_loop="1"` attribute. #7269 (@sc0ttkclark) |
| 224 | * Tweak: Added first used and last installed Pods versions to the Site Health information to be more helpful with debugging. (@sc0ttkclark) |
| 225 | * Tweak: Improved the field label/description for Additional User Capabilities field in the CPT settings. (@sc0ttkclark) |
| 226 | * Fixed: Resolved an annoying issue when adding a new group or field where it would reset the Pod label to the name (slug) of the pod. (@sc0ttkclark) |
| 227 | * Fixed: Updated logic for default value handling when using magic tags for internal field configs to ensure the magic tags get evaluated. (@sc0ttkclark) |
| 228 | * Fixed: Resolve issue with `pods_register_block_type()` not clearing the known blocks cache when registering them. #7167 (@sc0ttkclark) |
| 229 | * Fixed: PHP fatal errors resolved with `array_combine()` usage from changes in WP 6.5. #7266 (@sc0ttkclark) |
| 230 | * Fixed: Custom capability fallbacks when the option is empty now properly fallback to the default capability using that post type name. #7250 (@JoryHogeveen) |
| 231 | * Fixed: PHP deprecated notice with `trim()`. (@sc0ttkclark) |
| 232 | * Fixed: Resolved plupload browse button references to prevent JS console errors. (@sc0ttkclark) |
| 233 | * Fixed: Resolved issue with `window.wpEditorL10n` calls to more safely check for it to prevent JS console errors. (@sc0ttkclark) |
| 234 | * Fixed: Updated the implementation of the compatibility hooks for `set_transient` and `setted_transient` hooks have the proper args expected sent. (@sc0ttkclark) |
| 235 | * Fixed: Empty REST API fields no longer show when the pod doesn't support REST API. (@sc0ttkclark) |
| 236 | * Fixed: Restrict/unrestrict dynamic features logic now properly updates all of the associated Pod settings it needs to in the Access Rights Review screen. (@sc0ttkclark) |
| 237 | * Fixed: Empty arrays now return correctly in Pod / Group / Field settings instead of using their defaults when empty. (@sc0ttkclark) |
| 238 | * Fixed: Resolve potential issues with REST API in certain circumstances which would throw exceptions with the Pods REST API Messages object. (@sc0ttkclark) |
| 239 | * Fixed: Resolve issues when duplicating pods where the new pod name is over the limit and prevents creating the new pod correctly. (@sc0ttkclark) |
| 240 | * Fixed: Access Rights Review notice now only shows on existing installs updating from pre-3.1 instead of showing on new 3.1+ installs too. (@sc0ttkclark) |
| 241 | * Fixed: Accessibility issues with tabbing resolved for Pods Admin > Edit Pods table and Pods Admin > Edit Pod fields list table when working with row actions. #7196 #7198 (@heybran, @sc0ttkclark) |
| 242 | |
| 243 | = 3.1.4 - February 28th, 2024 = |
| 244 | |
| 245 | * Fixed: Defaults now show correctly for checkbox groups in the Edit Field modals. (@sc0ttkclark) |
| 246 | * Fixed: Resolve potential PHP errors with cached configs in Collections classes that has been there since Pods 2.x. (@sc0ttkclark) |
| 247 | * Fixed: Revisited due to our automated NPM build issue - Resolved an issue with CodeMirror 6.x fields in forms (this is separate from the version 5.x that the Pods Template editor uses). (@sc0ttkclark) |
| 248 | |
| 249 | = 3.1.3 - February 27th, 2024 = |
| 250 | |
| 251 | * Fixed: Resolved an issue with CodeMirror 6.x fields in forms (this is separate from the version 5.x that the Pods Template editor uses). (@sc0ttkclark) |
| 252 | |
| 253 | = 3.1.2 - February 27th, 2024 = |
| 254 | |
| 255 | * Added: Now you can set Content Visibility when creating a new pod. (@sc0ttkclark) |
| 256 | * Added: More help text to better explain things on the Access Rights Review screen for extended content types. (@sc0ttkclark) |
| 257 | * Added: New option to specify whether to Sanitize Output for a field in the Additional Field Options of Heading, Paragraph, WYSIWYG, Code, and Text fields. (@sc0ttkclark) |
| 258 | * Added: Pod Reference metabox on the Pods Templates editor screen now has more help text and will now allow clicking to copy any magic tag to clipboard. (@sc0ttkclark) |
| 259 | * Added: Better explain Public vs Publicly Queryable for Post Types and Taxonomies along with showing the current Content Visibility below. (@sc0ttkclark) |
| 260 | * Changed: Updated CodeMirror to 5.65.16 so we can start moving towards CodeMirror 6 for the Pods Template editor. (@sc0ttkclark) |
| 261 | * Fixed: Resolved issues with Access Rights Review screen when making content type public or private causing it not to be fully set (only public was set on, it left out publicly_queryable). (@sc0ttkclark) |
| 262 | |
| 263 | = 3.1.1 - February 22nd, 2024 = |
| 264 | |
| 265 | This is just a release to retrigger the zip generation on WordPress.org that missed a fix put into the initial 3.1 release tag in SVN. |
| 266 | |
| 267 | Pods 3.1 is a security focused release, see below for the changelog information. |
| 268 | |
| 269 | = 3.1 - February 21st, 2024 = |
| 270 | |
| 271 | *Security Release* |
| 272 | |
| 273 | While this release is meant to be as backwards compatible as possible, some aspects of security hardening may require manual intervention by site owners and their developers. There were no known reports and no known attempts to take advantage of the issues resolved by this release except where noted. |
| 274 | |
| 275 | Read more about [How access rights work with Pods](https://docs.pods.io/displaying-pods/access-rights-in-pods/) for more details including new filters/snippets that can provide limited access. |
| 276 | |
| 277 | * Security hardening: Introduced new access checks and additional fine-grained control over dynamic features across any place in Pods that allows embedding content or forms. This only applies to usage through Pods Blocks or Shortcodes. Using PHP will continue to expect you are handling this on your own unless you pass the appropriate arguments to the corresponding Pods methods. (@sc0ttkclark) |
| 278 | * Security hardening: Prevent using the Pods Views Block / Shortcode to embed any files outside of the current theme. Props to the Nex Team / Wordfence for responsibly reporting this. (@sc0ttkclark) |
| 279 | * Security hardening: Prevent output of `user_pass`, `user_activation_key`, and `post_password` through Pods dynamic features / PHP. These values will be set in Pods references to `****************` if they were not-empty so you can still do conditional checks as normal. While Scott was already aware of this in pre-planned security release work, additional props go to the Nex Team / Wordfence for responsibly reporting this too. (@sc0ttkclark) |
| 280 | * Security hardening: Prevent more unsavory PHP display callbacks from being used with magic tags in addition to those already prevented. Props to the Nex Team / Wordfence for responsibly reporting this. (@sc0ttkclark) |
| 281 | * Feature: Access rights > Access-related Admin notices and Errors can be hidden by admins in a new setting in Pods Admin > Settings > Security. (@sc0ttkclark) |
| 282 | * Feature: Dynamic Features > Dynamic features (Pods Blocks and Shortcodes) can be disabled by admins in a new setting in Pods Admin > Settings > Security. (@sc0ttkclark) |
| 283 | * Changed: Dynamic Features > New installs will now default to not allowing all SQL arguments to be used by dynamic features. Existing installs will default to only allowing simple SQL arguments. All SQL fragments are checked for disallowed usage like subqueries. This can be set in a new setting in Pods Admin > Settings > Security. (@sc0ttkclark) |
| 284 | * Feature: Pods Display > The Display-related Pods Blocks and Shortcodes have additional checks that limit access to content based on the user viewing it. For Post Types that are non-public, they must have access to the `read` capability from that post type as a normal user. For displaying content from Users, they must have access to `list_users` capability to view that. [Read more about how access rights work with Pods](https://docs.pods.io/displaying-pods/access-rights-in-pods/) (@sc0ttkclark) |
| 285 | * Feature: Pods Forms > The Pods Form Block and Form Shortcode have additional checks that limit access to creating/editing content based on the user submitting the form. For Post Types that are non-public, they must have access to the 'create' capability from that post type as a normal user. Forms that submit to the Users pod, now require that the submitter must have access to the `create_users` or `edit_users` capability to create or edit that user. [Read more about how access rights work with Pods](https://docs.pods.io/displaying-pods/access-rights-in-pods/) (@sc0ttkclark) |
| 286 | * Feature: Pods Forms > The Pods Form Block and Form Shortcode now have a new option to identify the form with a custom key you choose that will get passed to various access-related filters so that developers can override access rights more easily. (@sc0ttkclark) |
| 287 | * Feature: Pods Forms > When a user has access to create or edit content through a Pods form for a post type, the `post_content` field is cleaned based on the level of access they have to prevent inserting unintentional shortcodes or blocks. (@sc0ttkclark) |
| 288 | * Feature: Markdown functionality has now been replaced by the [Parsedown library](https://github.com/erusev/parsedown) for better security and performance and it's uniquely prefixed so it prevents future conflicts with plugins using the same library. (@sc0ttkclark) |
| 289 | * Changed: Pods Views > One of the breaking changes in this work is that the Pods Views Block / Shortcode dynamic feature is now disabled by default and must be enabled for new and existing installs. This can be done in a new setting in Pods Admin > Settings > Security. (@sc0ttkclark) |
| 290 | * Changed: Display PHP callbacks > New installs will now default to only allowing specific callbacks to be used. This defaults the specific callbacks allowed to `esc_attr,esc_html` which can be further customized in Pods Admin > Settings > Security. (@sc0ttkclark) |
| 291 | |
| 292 | = 3.0.10 - December 11th, 2023 = |
| 293 | |
| 294 | * Fixed: The safe rendering handler for Pods Blocks now properly passes along context to all Pods Blocks so that they work within Query Loops again and other places they could take on context. (@sc0ttkclark) |
| 295 | * Fixed: Resolved PHP 8.3 deprecation notice with `get_class()` usage. #7225 (@netlas, @sc0ttkclark) |
| 296 | * Fixed: File fields using the direct plupload option will properly avoid uploading files above the limit and handle uploading multiple files without losing all but the first file in the file list. #7138 (@sc0ttkclark, @PD-CM) |
| 297 | |
| 298 | Our GitHub has the full list of all prior releases of Pods: [https://github.com/pods-framework/pods/releases](https://github.com/pods-framework/pods/releases) |
| 299 | |
| 300 | == Upgrade Notice == |
| 301 | |
| 302 | = 3.1 = |
| 303 | This upgrade is security focused. |
| 304 | |
| 305 | = 3.0 = |
| 306 | This upgrade requires a minimum versions of PHP 7.2+ and WordPress 6.0+. |
| 307 | |
| 308 | = 2.8 = |
| 309 | This upgrade requires a minimum versions of PHP 5.6+ and WordPress 5.5+. |
| 310 |