| @@ -2,9 +2,9 @@ | ||
| 2 | 2 | Contributors: elvinhaci |
| 3 | 3 | Tags: charts,mysql,sql,visualizer,sql chart |
| 4 | 4 | Requires at least: 5.0.0 |
| 5 | 5 | Tested up to: 7.1.2 |
| 6 | -Stable tag: 3.0.1 | |
| 6 | +Stable tag: 3.0.6 | |
| 7 | 7 | Donate link: https://guaven.com/service/small-thankyou-premium-support-service/ |
| 8 | 8 | License: GPLv2 or later |
| 9 | 9 | License URI: http://www.gnu.org/licenses/gpl-2.0.html |
| 10 | 10 | |
| @@ -37,9 +37,9 @@ | ||
| 37 | 37 | 2. Pick a chart type — read the short guide shown under the type cards, or click "Use this example" to start from a working query. |
| 38 | 38 | |
| 39 | 39 | 3. Build your SQL query with the toolbar buttons and autocomplete (real table and column names are suggested), then map the X and Y columns. |
| 40 | 40 | |
| 41 | -4. You can use multiple SQL queries too — just split them with the ";" sign to get comparison charts. You can also pass shortcode arguments into the query: with "select * from wp_posts where ID>{arg1}" the shortcode [gvn_schart_2 id="2" arg1="11"] passes the value in. | |
| 41 | +4. You can use multiple SQL queries too — just split them with the ";" sign to get comparison charts. You can also pass shortcode arguments into the query: with "select * from wp_posts where ID>{arg1}" the shortcode [gvn_schart_2 id="2" arg1="11"] passes the value in (the builder's live preview runs without arguments, so test such charts on a page). | |
| 42 | 42 | |
| 43 | 43 | 5. After Publish/Update you will see the shortcode below the builder. Use it anywhere on your website: pages, posts, widgets, or the "My SQL Charts" Gutenberg block. |
| 44 | 44 | |
| 45 | 45 | 6. Check "Show table-view data below the graph" to also render the data as a styled table. |
| @@ -137,8 +137,36 @@ | ||
| 137 | 137 | |
| 138 | 138 | apply_filters('guaven_sqlcharts_rendered_sql'); |
| 139 | 139 | |
| 140 | 140 | == Changelog == |
| 141 | += 3.0.6 = | |
| 142 | +* FIX: Saving a chart failed with "A post type mismatch has been detected." (and edits appeared to revert) when a dynamic filter was named like a WordPress form field such as post_type. The live preview in the chart builder now renders filter inputs disabled so they are never submitted with the chart. | |
| 143 | +* IMPROVED: Hint in the Input Filters tab about tag names to avoid. | |
| 144 | +* FIX: Date/time X axis: labels of dates that are very close together are now placed one below the other instead of overlapping. | |
| 145 | + | |
| 146 | += 3.0.5 = | |
| 147 | +* FIX: Date/time X axis on Bar charts: bars now have a fixed, clearly visible width instead of shrinking to the closest pair of dates. | |
| 148 | +* FIX: Date/time X axis: the axis now labels only the dates present in the data instead of evenly spaced computed dates. | |
| 149 | + | |
| 150 | += 3.0.4 = | |
| 151 | +* SECURITY: Chart posts are now administrator-only at the capability level (all gvn_schart capabilities map to manage_options), so Contributors/Authors can no longer create or edit charts through any WordPress entry point such as XML-RPC. All guaven_sqlcharts_* custom fields are protected meta. | |
| 152 | +* SECURITY: The forbidden-command check now runs on the final SQL after all shortcode arguments and filter values are inserted, ";" is stripped from user-supplied values, and every statement must start with SELECT, WITH, SHOW, DESCRIBE or EXPLAIN. PREPARE/EXECUTE, LOCK, KILL, FLUSH and similar statements were added to the blocked list. | |
| 153 | +* SECURITY: The cached shortcode now keeps a separate cache entry per user and per dynamic filter value, so a chart using {current_user_*} tags or URL filters can no longer serve one visitor's result to another. | |
| 154 | +* SECURITY: The shortcode "params" attribute is validated and can no longer inject JavaScript into the chart script. | |
| 155 | +* The chart save handler now also requires manage_options and the gvn_schart post type. | |
| 156 | + | |
| 157 | += 3.0.3 = | |
| 158 | +* FIX: Using the same shortcode argument tag (e.g. {arg1}) more than once in the SQL, such as in both queries of a comparison chart, broke the chart with a fatal error. | |
| 159 | +* FIX: The [gvn_schart_2_cached] shortcode ignored arg1..arg19, width, height, table and params attributes; they are now passed through and each set of attributes is cached separately. | |
| 160 | +* IMPROVED: When the SQL contains {arg} tags, the builder shows the shortcode with the needed attributes and explains that the live preview runs without them. | |
| 161 | +* NEW: "Scale X axis by date/time" option (Advanced tab) for Bar and Line charts. Points and bars are placed by real elapsed time when the X values are dates (2024-02-23, 2024-02, 2024, 2024-02-23 14:30). Off by default; existing charts are unchanged. | |
| 162 | + | |
| 163 | += 3.0.2 = | |
| 164 | +* FIX: "Value labels" option now works for Bar, Horizontal Bar, Stacked Bar, Line, Area, Stepped Line, Radar and Scatter charts (previously only circular charts). | |
| 165 | +* NEW: The X axis label and Y axis label fields are now shown as real axis titles on Bar, Line and Scatter charts (Y title for single-series charts; multi-series charts keep the names in the legend). | |
| 166 | +* FIX: Series names containing "&" were cut off (the stored & entity was mistaken for a ";" series separator); labels with quotes or other special characters no longer show HTML entities in the legend or table view. | |
| 167 | +* IMPROVED: Clearer hints in the chart builder for the label, color and value-label fields. | |
| 168 | + | |
| 141 | 169 | = 3.0.1 = |
| 142 | 170 | * FIX: SQL query editor showed HTML entities (e.g. ") instead of quotes after saving a chart. Queries are now stored exactly as typed; single quotes are no longer converted to double quotes. Charts saved with older versions are decoded automatically. |
| 143 | 171 | * Tested up to WordPress 7.1.2. |
| 144 | 172 | |
