secure-custom-fields
Last commit date
assets
1 year ago
includes
1 year ago
lang
1 year ago
pro
1 year ago
SECURITY.md
1 year ago
acf.php
1 year ago
composer.json
1 year ago
index.php
1 year ago
license.txt
1 year ago
readme.txt
1 year ago
secure-custom-fields.php
1 year ago
readme.txt
85 lines
| 1 | === Secure Custom Fields === |
| 2 | Contributors: wordpressdotorg |
| 3 | Tags: fields, custom fields, meta, scf |
| 4 | Requires at least: 6.0 |
| 5 | Tested up to: 6.7 |
| 6 | Requires PHP: 7.4 |
| 7 | Stable tag: 6.4.1-beta5 |
| 8 | License: GPLv2 or later |
| 9 | License URI: https://www.gnu.org/licenses/gpl-2.0.html |
| 10 | |
| 11 | Secure Custom Fields boosts content management with custom fields and options. It deactivates Advanced Custom Fields to prevent duplicate code errors. |
| 12 | |
| 13 | == Description == |
| 14 | |
| 15 | Secure Custom Fields (SCF) extends WordPress’s capabilities, transforming it into a flexible content management tool. With SCF, managing custom data becomes straightforward and efficient. |
| 16 | |
| 17 | **Easily create fields on demand.** |
| 18 | The SCF builder makes it easy to add fields to WordPress edit screens, whether you’re adding a new “ingredients” field to a recipe or designing complex metadata for a specialized site. |
| 19 | |
| 20 | **Flexibility in placement.** |
| 21 | Fields can be applied throughout WordPress—posts, pages, users, taxonomy terms, media, comments, and even custom options pages—organizing your data how you want. |
| 22 | |
| 23 | **Display seamlessly.** |
| 24 | Using SCF functions, you can display custom field data in your templates, making content integration easy for all levels of developers. |
| 25 | |
| 26 | **A comprehensive content management solution.** |
| 27 | Beyond custom fields, SCF allows you to register new post types and taxonomies directly from the SCF interface, providing more control without needing additional plugins or custom code. |
| 28 | |
| 29 | **Accessible and user-friendly design.** |
| 30 | The field interface aligns with WordPress’s native design, creating an experience that’s both accessible and easy for content creators to use. |
| 31 | |
| 32 | Installing this plugin will deactivate plugins with matching function names/functionality, specifically Advanced Custom Fields, Advanced Custom Fields Pro, and the legacy Secure Custom Fields plugins, to avoid code errors. |
| 33 | |
| 34 | = Features = |
| 35 | * Clear and easy-to-use setup |
| 36 | * Robust functions for content management |
| 37 | * Over 30 Field Types |
| 38 | |
| 39 | == Screenshots == |
| 40 | |
| 41 | 1. Add groups of custom fields. |
| 42 | 2. Easy to add custom content while writing. |
| 43 | 3. Need a new post type? Just add it! |
| 44 | 4. Navigate the various field types with ease. |
| 45 | |
| 46 | = Acknowledgement = |
| 47 | |
| 48 | This plugin builds upon and is a fork of the previous work done by the contributors of Advanced Custom Fields. Please see the plugin's license.txt for the full license and acknowledgements. |
| 49 | |
| 50 | |
| 51 | == Changelog == |
| 52 | = 6.4.1 = |
| 53 | * Unreleased: In beta * |
| 54 | |
| 55 | * Forked from Advanced Custom Fields® |
| 56 | * Various updates to coding standards. |
| 57 | * Updated to rely on the WordPress.org translation packs for all strings. |
| 58 | |
| 59 | = 6.3.9 = |
| 60 | *Release Date 22nd October 2024* |
| 61 | |
| 62 | * Version update release |
| 63 | |
| 64 | = 6.3.6.3 = |
| 65 | *Release Date 15th October 2024* |
| 66 | |
| 67 | * Security - Editing a Field in the Field Group editor can no longer execute a stored XSS vulnerability. Thanks to Duc Luong Tran (janlele91) from Viettel Cyber Security for the responsible disclosure |
| 68 | * Security - Post Type and Taxonomy metabox callbacks no longer have access to any superglobal values, hardening the original fix from 6.3.6.2 even further |
| 69 | * Fix - SCF Fields now correctly validate when used in the block editor and attached to the sidebar |
| 70 | |
| 71 | = 6.3.6.2 = |
| 72 | *Release Date 12th October 2024* |
| 73 | |
| 74 | * Security - Harden fix in 6.3.6.1 to cover $_REQUEST as well. |
| 75 | * Fork - Change name of plugin to Secure Custom Fields. |
| 76 | |
| 77 | = 6.3.6.1 = |
| 78 | *Release Date 7th October 2024* |
| 79 | |
| 80 | * Security - SCF defined Post Type and Taxonomy metabox callbacks no longer have access to $_POST data. (Thanks to the Automattic Security Team for the disclosure) |
| 81 | |
| 82 | == Upgrade Notice == |
| 83 | |
| 84 | = 6.4.1-beta5 = |
| 85 | Corrects some translation strings and now relies on the WordPress.org translation packs for Russian and Vietnamese. |