MyLiveChat – Live Chat Plugin for WordPress

Changelog

2.1.5

• Fixes a fatal error that made the plugin unusable on PHP 8. Version 2.1.4 registered the email-confirmation reminder against admin_notices but never shipped the method it pointed at; the 2.1.4 rewrite of the settings screen removed the method and left the registration behind. 2.1.2 and 2.1.3 are not affected — both were checked on PHP 8.2 and neither raises the error. On PHP 7 an invalid callback was only a warning, so the reminder simply never appeared; on PHP 8 it raises a TypeError, and because admin_notices runs on every admin page the whole WordPress dashboard showed “There has been a critical error on this website”. If you installed the plugin and your admin went blank, this was why — updating fixes it, and nothing on your site or your MyLiveChat account was affected.
• The reminder described in 2.1.3 works again: administrators see it on admin pages until the account email is confirmed, and it can be dismissed.

2.1.4

• The settings screen is now fully translatable. Every visible string goes through the text domain and a languages/my-live-chat-for-wp.pot template ships with the plugin, so it can be localised the way the chat widget already is.
• Removed the inline onclick attributes and the inline script that fixed up the two dropdowns after the page rendered. The selected option is now marked server-side, so there is no flash of the wrong value and the screen works under a Content Security Policy that disallows inline script.
• Accessibility: the settings table used td scope=”row” for its row headers, where scope has no effect. They are th scope=”row” now, so screen readers announce the label with each field.

2.1.3

• New accounts created from the settings screen are inactive until the emailed link is clicked, but the chat widget goes live immediately — so visitors could start chats that nobody was able to answer, with only a one-line hint on a screen the admin had already left. A reminder now appears on every admin page until the email is confirmed, explaining what is and is not working and how to get a fresh link. It is dismissible, and only administrators see it.

2.1.2

• Fixed: MyLiveChatAdmin shared its singleton storage with its parent class, so whichever ran first decided the type both returned. Any request that touched the admin and front-end paths together could get the wrong object back.
• Added a “Settings” link to the plugin’s row on the Plugins screen. The previous attempt was registered against the global plugin_action_links filter, which would have added the link to every other plugin’s row, and had been left disabled; it now uses the per-plugin hook.
• Added uninstall cleanup, so deleting the plugin removes its six options instead of leaving them in the database forever. Multisite deletes are handled per site.
• Fixed: the MYLIVECHAT_VERSION constant still said 2.1.1 while the plugin header said 2.1.2. It is used to bust the cache on the admin CSS and JavaScript, so an upgrade could leave stale assets loaded.
• Output escaping is now applied at every point of use rather than when the value is assigned, so the escaping is visible where the output happens.
• Added the missing text domain to a translatable string, and a guard around a superglobal index read.
• Documented why the two request reads on the settings screen need no nonce: they only choose which confirmation notice to display.
• The plugin header name now matches the name in readme.txt, so the two can no longer drift.

2.1.1

• Request data is now unslashed and passed through sanitize_text_field() before the existing digit filter and whitelists are applied.
• The Site ID is escaped on output as well as being restricted to digits on input.
• Removed a debug-only call that changed PHP’s global error_reporting() level.
• Admin permission messages are now translatable.
• Minimum supported PHP raised to 7.4.

2.1.0

• Security: the settings-save and settings-reset handlers now require the manage_options capability and a valid nonce. Previously either action could be triggered by any authenticated user, or cross-site against an administrator.
• Security: the admin menu is registered against the manage_options capability instead of the administrator role name.
• Hardening: the Site ID is restricted to digits and length-capped; display type and position are validated against a fixed list before they are stored.
• Hardening: added direct-access guards so plugin files cannot execute when requested directly.
• Housekeeping: completed the plugin header (License, Requires at least, Requires PHP, Text Domain), moved all URLs to https, and rewrote this readme.

2.0.4

• New installations default to the visible floating Chat Widget so a successful setup never appears blank.
• Account creation is single-flight and preserves the exact password entered while explaining the no-spaces policy.

2.0.3

• Prevented duplicate Chat Widget bootstraps, made asset URLs work when the plugin folder is renamed, and moved front-end CSS into the WordPress enqueue system.

2.0.2

• Restored the settings-page signup controls, kept signup passwords out of URLs, and explained email verification after account creation.

2.0.1

• Improved readme. Added the support forum link.

2.0.0

• In-page chat window UI. Web and Mac agent consoles.

1.0.2

• Rewrote the plugin code.

1.0.0

• First release.