Wala shell

Advanced PHP File Manager

Server IP: 127.0.0.1 | PHP Version: 8.3.30 | Domains Hosted: 54

Name	Size	Last Modified	Actions
📁 ..	-	2026-04-03 17:53
📁 assets	-	2026-01-05 18:46
📄 changelog.txt == Changelog == = 2.11.1 December 16, 2025 = * Enhancements: - Added: 'Privacy Options' for Member Directory. 'Who can see this member directory' and 'Allowed Roles'. - Added: 'Rate Limit' setting for nopriv AJAX actions. * Bugfixes: - Fixed: Security issue CVE ID: CVE-2025-13220. Used `shortcode_atts()` function to avoid using wrong attributes. - Fixed: Security issue CVE ID: CVE-2025-13217. Implementing proper input sanitization and escaping for iframe URLs in YouTube, Vimeo, and Google Maps embeds. - Fixed: Security issue CVE ID: CVE-2025-14081. Filtering fields based on user permissions during Account form submission. - Fixed: Security issue CVE ID: CVE-2025-12492. Added directory privacy settings and added rate limiting. * Templates required update: - members.php - members-grid.php - members-list.php = 2.11.0 December 02, 2025 = * Enhancements: - Added: Extra condition for checking the license activation requests. - Added: 2nd `$args` attribute to the action hook 'um_cover_area_content'. - Added: `$args` and `$user_id` attributes to the action hook 'um_after_profile_header_name'. - Added: Class `um-profile-subnav-{$subnav_id}-link` to the sub navigation links in the User Profile page. - Tweak: Updated `Extensions_Updater` class to use Action Scheduler in the upgrade process of the UM extensions. * Bugfixes: - Fixed: User profile links in the comments section on the frontend when the `$comment->user_id` is empty. - Fixed: The `emotize` function regexp for better emoji converting. - Fixed: The conflict between the image uploader and lazy-loading attribute added by 3rd-party plugins. - Fixed: PHP warnings for roles without meta data. - Fixed: Typo in labels. = 2.10.6 October 02, 2025 = * Enhancements: - Added: Avoid caching of the UM Forms on the mobile devices via adding the nocache headers to the screens with UM Forms. - Added: Filter hook `um_get_empty_status_users_query_result` for changing default query on the different websites to optimize it. - Added: Filter hook `um_admin_settings_get_pages_list_args` for changing WP_Query arguments for getting pages visible in the dropdown fields in UM Settings. - Added: JS filter hook `um_admin_blocks_prefixes_excluded` for excluding 3rd-party Gutenberg blocks with predefined prefixes from UM restriction arguments. - Added: WebP file-extension support for UM uploader. - Added: `UM_LICENSE_REQUEST_DEBUG` constant for debugging license activation process when it's needed. - Added: `Extensions_Updater` class to standardize the upgrade process in UM extensions. - Added: Sanitize handlers `sanitize_array_key_int` and `sanitize_array_key` for making sanitize in UM extensions' settings. * Bugfixes: - Fixed: Changed the view and the edit user profile links in the comments section on the frontend. - Fixed: `Contains` conditional logic operand when value is array. - Fixed: Getting cover_size for displaying it in the member directory card. - Fixed: Filter's range for numeric-type fields to avoid getting the empty values. - Fixed: Integer validation for the 'start_of_week' WP native setting. - Fixed: Dependencies with Action Scheduler library. * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade * = 2.10.5 June 25, 2025 = * Enhancements: - Added: Filter hook [`um_password_reset_form_primary_btn_classes`](https://ultimatemember.github.io/ultimatemember/hooks/um_password_reset_form_primary_btn_classes.html) for primary button classes in UM Password Reset form. - Added: Filter hook [`um_login_form_primary_btn_classes`](https://ultimatemember.github.io/ultimatemember/hooks/um_login_form_primary_btn_classes.html) for primary button classes in UM Login form. - Added: Filter hook [`um_register_form_primary_btn_classes`](https://ultimatemember.github.io/ultimatemember/hooks/um_register_form_primary_btn_classes.html) for primary button classes in UM Registration form. - Tweak: Refactored Site Health data, added hooks for 3rd-party integration. - Tweak: Avoid using `um_user( 'password_reset_link' )` and make it directly with `UM()->password()->reset_url( $user_id )` for getting a proper reset URL. - Tweak: Avoid using `um_user( 'account_activation_link' )` and make it directly with `UM()->permalinks()->activate_url( $user_id )` for getting a proper activation URL. * Bugfixes: - Fixed: Stripped shortcodes in the user data during the Account, Registration and Profile forms submission. (Thanks to [MissVeronica](https://github.com/MissVeronica)) - Fixed: Email placeholders values. - Fixed: Refactor deactivation logic to un-schedule Action Scheduler actions. - Fixed: Action Scheduler library errors. Updated to the recent 3.9.2 version. - Fixed: Secondary email field validation. - Fixed: Action Scheduler batch actions with users who have Undefined status. - Fixed: Restrictions for 3rd-party Gutenberg Blocks. - Fixed: Date/time picker filter-types range query on Member Directories. - Fixed: Renamed "Macedonia, the former Yugoslav Republic of" to the official "North Macedonia". * Deprecated: - Fully deprecated `account_activation_link_tags_patterns( $placeholders )` function. It's not used previously. Used email function arguments instead. - Fully deprecated `account_activation_link_tags_replaces( $replace_placeholders )` function. It's not used previously. Used email function arguments instead. - Fully deprecated `UM()->profile()->add_placeholder()` function. Used email function arguments instead. - Fully deprecated `UM()->profile()->add_replace_placeholder()` function. Used email function arguments instead. - Fully deprecated `UM()->user()->add_activation_placeholder()` function. Used email function arguments instead. - Fully deprecated `UM()->user()->add_activation_replace_placeholder()` function. Used email function arguments instead. - Deprecated `UM()->user()->maybe_generate_password_reset_key( $userdata )` function. Use `UM()->common()->users()->maybe_generate_password_reset_key( $userdata )` instead. - Deprecated `UM()->user()->set_last_login()` function. Use `UM()->common()->users()->set_last_login( $user_id )` instead. * Templates required update: - password-reset.php * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade * = 2.10.4 May 15, 2025 = * Bugfixes: - Fixed: Security issue CVE ID: CVE-2025-47691. Used "sniccowp/php-scoper-wordpress-excludes" for getting the recent WordPress functions list and added them to the dynamic blacklist based on the WordPress version. - Fixed: The Action Scheduler action `um_set_default_account_status`. Case when some users were approved manually or deleted, and we need to reset the admin notice. Added `error_log()` to the wrong conditions. - Fixed: Reset Password request from not a predefined password reset page. It's possible to submit reset password form sitewide using block or shortcode. - Fixed: Setting 'Allow users to change email' for the Account page. It works now for any role instead of only the roles with 'Can edit other member accounts?' capability enabled. = 2.10.3 April 24, 2025 = * Enhancements: - Added: The `Ignore the "User Role > Registration Options"` setting. It provides an ability to auto-approve users if they were created via wp-admin > Users screen. - Tweak: Avoid email notifications to Administrator about user registration via wp-admin > Users screen. - Tweak: Updated the Action Scheduler implementation to improve flexibility and clarity. Refactor Action Scheduler for not only email handling. * Bugfixes: - Fixed: Member Directory styles when it's rendered on the Gutenberg builder page. - Fixed: Member Directory filtering query when the custom users metatable is used. - Fixed: PHP Warning that occurs when using the `getimagesize` function with an image from an external source. - Fixed: Reset Password email notification's the {password_reset_link}` placeholder. - Fixed: Changed "Turkey" to the current official term "Türkiye". * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade * = 2.10.2 April 02, 2025 = * Enhancements: - Added: `UM()->common()-filesystem()::maybe_init_wp_filesystem();` method. - Added: `UM()->common()-filesystem()::remove_dir();` method. * Bugfixes: - Fixed: Security issue CVE ID: CVE-2025-1702. Reviewed general search scripts and suggested another solution that uses only `$wpdb->prepare()`. = 2.10.1 March 03, 2025 = * Bugfixes: - Fixed: Security issue CVE ID: CVE-2025-1702. - Fixed: Activation link redirects to Reset Password after registration without password field and required email activation. - Fixed: Honeypot scripts/styles for themes without pre-rendered shortcodes. Enqueue honeypot scripts/styles everytime. - Fixed: Profile photo metadata when Gravatar image is used. * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade * = 2.10.0 February 18, 2025 = * Enhancements: - Added: User Profile `form-id` attribute and updated code for Profile/Cover photos actions dropdowns. - Added: Honeypot scripts/styles via `wp_add_inline_script()`, `wp_add_inline_style()` changed from direct adding in header and footer. - Updated: We've made improvements to requests for extension updates to boost stability. - Updated: PHP requirement - the minimum PHP version is now upgraded to 7.0. - Updated: Using $wpdb and WPCS for queries. Set minimum required version to 6.2 due to using %i for `$wpdb->prepare()`. - Updated: Revised wp-admin user actions handling. Now, the required capability is `edit_users` instead of `manage_options`. - Removed: User Profile hidden inputs on view mode. - Tweak: WPCS enhancements. * Bugfixes: - Fixed: Security issue CVE ID: CVE-2024-12276. - Fixed: Custom usermeta table metakeys for filtering in member directory (from `_money_spent` to `wc_money_spent_` and added `wc_order_count_`). - Fixed: Layout for "Download your data" and "Erase of your data" fields. - Fixed: Image sizes used for Open Graph meta in User Profile headers are now corrected. - Fixed: "Delete account text" settings visibility issue in wp-admin. - Fixed: The "Privacy Policy" field in the registration form. Disallowed HTML from the "Privacy Policy" content (like `<form>`) is filtered out by the `wp_kses()` function. - Fixed: Password fields are now sanitized the WordPress native way, with `wp_unslash()` omitted post-submission. * Templates required update: - gdpr-register.php - profile.php * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade * = 2.9.2 January 14, 2025 = * Enhancements: - Added: Compatibility with the new [Ultimate Member - Zapier](https://ultimatemember.com/extensions/zapier/) extension - Added: Only approved user Reset Password setting defined as true by default - Added: `UM()->is_new_ui()` function for future enhancements related to new UI - Added: Filter hook `um_before_user_submitted_registration_data` - Tweak: Changed hook's priority for initialization of email templates paths - Tweak: Removed `load_plugin_textdomain` due to (article)[https://make.wordpress.org/core/2024/10/21/i18n-improvements-6-7/#Enhanced-support-for-only-using-PHP-translation-files] * Bugfixes: - Fixed: Security issue CVE ID: CVE-2025-0308 - Fixed: Security issue CVE ID: CVE-2025-0318 - Fixed: Using placeholders in email templates when Action Scheduler is active. Using `fetch_user_id` attribute for fetching necessary user before sending email - Fixed: PHP 8.4 compatibility. Using WordPress native `wp_is_mobile()` instead of MobileDetect library - Fixed: PHP errors related to `UM()->localize()` function - Fixed: PHP errors in user meta header when `last_update` meta is empty - Fixed: Small CSS changes and avoid duplicates - Fixed: Removed ms-native show password button for type="password" field in UM forms - Fixed: Define scalable attribute for cropper * Deprecated: - Fully deprecated `UM()->mobile()` function - Fully deprecated `UM()->localize()` function - Fully deprecated `um_language_textdomain` filter hook * Templates required update: - account.php * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.9.1 November 15, 2024 = * Enhancements: - Added: `um_image_upload_validation` hook for 3rd-party validation during upload images * Bugfixes: - Fixed: "Load textdomain just in time" issue - Fixed: Capabilities checking in the wp-admin > Users list table - Fixed: File/image upload on the role specific profile form - Fixed: Issues when the form's custom fields meta has a wrong format - Fixed: Validation of the "Registration Default Role" slug - Fixed: Allowed query variables via registered REST API class only when REST_REQUEST is defined = 2.9.0 November 12, 2024 = * Enhancements: - Added: Action Scheduler (version 3.8.1) for email sending. More info is [here](https://actionscheduler.org/) - Added: Supporting new `wp_register_block_metadata_collection()` function for registering WP Blocks * Bugfixes: - Fixed: `ajax_image_upload()` and `ajax_resize_image()` handlers vulnerability. CVE ID: CVE-2024-10528 - Fixed: Disabling user status column wp-admin > Users screen - Fixed: User status filter on wp-admin > Users on mobile devices - Fixed: Extra unwrapping of the WP Editor field's value * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.8.9 October 14, 2024 = * Enhancements: - Added: Using PHP tidy extension (if it's active) to make HTML textarea value clear - Added: `um_tidy_config` filter hook for setting PHP tidy config - Tweak: Avoid using force `set_status()` function. - Tweak: Properly using `UM()->common()->users()->get_status( $user_id )` instead of `um_user( 'account_status' )` - Tweak: Properly using `UM()->common()->users()->get_status( $user_id, 'formatted' )` instead of `um_user( 'account_status_name' )` - Tweak: Properly using `um_user( 'status' )` for getting user role setting while registration * Bugfixes: - Fixed: UM tipsy removing inside .um-page selector (e.g. tipsy init from um-modal) - Fixed: Rollback using `<iframe>` for displaying HTML formatted textarea value - Fixed: Capability to edit user profile for Administrator when user doesn't have a capability to edit its profile - Fixed: Sending email notifications based on user status after registration - Fixed: PHP error when meta `um_member_directory_data` has a wrong format * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.8.8 October 04, 2024 = * Bugfixes: - Fixed: Download routing initialization - Fixed: Textarea height and HTML formatted textarea field height isolated via `<iframe>` on view mode - Fixed: User registration if email activation or admin review are required - Fixed: First installation errors * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.8.7 October 01, 2024 = * Enhancements: - Added: Single user actions on WP Users list table - Updated: User status filter on WP Users list table - Updated: User bulk actions on WP Users list table - Updated: User actions on User Profile and Member Directory card - Added: Applying shortcodes in the post restriction message - Added: ProfilePage Structured Data - Added: Ability to use HTML tags (allowed in `wp_kses_post`) in the global block restriction message - Changed: Some wp-admin fields descriptions - Updated: Data format in `um_admin_bulk_user_actions_hook` filter hook. Changed format from `$action_slug => array( 'label' => $action_title )` to `$action_slug => $action_title` - Added: `$old_status` param to `um_after_user_status_is_changed` action hook - Added: `$user_id` param to `um_before_user_hash_is_changed` action hook - Added: `$user_id, $hash, $expiration` params to `um_after_user_hash_is_changed` action hook - Added: `um_restricted_post_content` filter hook - Added: `um_loggedin_inner_content` filter hook - Added: `um_profile_dynamic_meta_profile_schema` filter hook - Removed: `UM()->fields()->get_restricted_fields_for_edit()` function from a fields loop * Bugfixes: - Fixed: Single user action on User Profile security vulnerability. CVE ID: CVE-2024-8520 - Fixed: [um_loggedin] shortcode security vulnerability. CVE ID: CVE-2024-8519 - Fixed: Performance issue related to Settings > Secure tab - Fixed: The "Clear All" button in the member directory did not reset all dependent dropdowns - Fixed: Telegram and Discord social links in profile header - Fixed: UM links to empty phone numbers - Fixed: Email changing via User Account flush session. Security enhancement because email can be used for login - Fixed: User Profile image URL in meta tags - Fixed: Empty User Profile and PHP Fatal error when cannot get profile field data - Fixed: Parsing /modal/ templates and parsing templates on the Windows hosting - Fixed: Validation `form_id` attribute in the `ultimatemember` shortcode * Templates required update: - login-to-view.php * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade * Deprecated: - Hook: Action hook `um_after_user_status_is_changed_hook`. Use action hook `um_after_user_status_is_changed` instead. - Hook: Action hook `um_when_status_is_set`. Use action hook `um_before_user_status_is_set` instead. - Hook: Action hook `um_admin_user_action_hook`. Use filter hook `um_handle_bulk_actions-users-{$current_action}` for custom user bulk actions instead. - Hook: Action hook `um_admin_user_action_{$bulk_action}_hook`. Use filter hook `um_handle_bulk_actions-users-{$current_action}` for custom user bulk actions instead. - Hook: Action hook `um_admin_custom_hook_{$action}`. Use filter hook `um_handle_bulk_actions-users-{$current_action}` for custom user bulk actions instead. - Hook: Filter hook `um_admin_views_users`. Use filter 'um_user_statuses_admin_filter_options' hook instead. - Function: `UM()->user()->set_status( $status )`. Use function `UM()->common()->users()->set_status( $status, $user_id )` instead. - Function: `UM()->user()->assign_secretkey()`. Use function `UM()->common()->users()->assign_secretkey( $user_id )` instead. - Function: `UM()->user()->approve( $repeat )`. Use function `UM()->common()->users()->approve( $user_id, $force )` instead. - Function: `UM()->user()->email_pending()`. Use function `UM()->common()->users()->send_activation( $user_id, $force )` instead. - Function: `UM()->user()->pending()`. Use function `UM()->common()->users()->set_as_pending( $user_id, $force )` instead. - Function: `UM()->user()->reject()`. Use function `UM()->common()->users()->reject( $user_id )` instead. - Function: `UM()->user()->deactivate()`. Use function `UM()->common()->users()->deactivate( $user_id )` instead. - Function: `UM()->user()->user_exists_by_id( $user_id )`. Use function `UM()->common()->users()::user_exists( $user_id )` instead. - Function: `UM()->files()->format_bytes( $size )`. Use function `UM()->common()->filesystem()::format_bytes( $size )` instead. = 2.8.6 May 22, 2024 = * Enhancements: - Added: Member Directory > Admin Filtering supports datepicker and timepicker filter-types with only "From" or "To" filled value - Added: Ability to customize modal templates upload-single.php and view-photo.php - Added: New FontAwesome library. Version 6.5.2 * Bugfixes: - Fixed: Using HTML in the block restriction message. Replaced escaper to wp_kses sanitize while saving - Fixed: Getting user capabilities without role - Fixed: YouTube validation when field value is empty - Fixed: Social URLs sanitizing where user can put his social username (e.g. Instagram, Facebook) - Fixed: Using only published forms and member directories IDs on predefined pages installation - Fixed: Member Directory before query hook when custom meta table is active - Fixed: Unique email validation - Fixed: Displaying asterisk on the Profile > View Mode - Fixed: PHP errors while upgrade from 1.3.x version - Fixed: Rating field view - Fixed: Sorting by last login value when "Hide my last login" is set - Fixed: PHP errors while uploading files - Fixed: Parsing error on the license activation * Templates required update: - Renamed templates/modal/um_upload_single.php → templates/modal/upload-single.php - Renamed templates/modal/um_view_photo.php → templates/modal/view-photo.php * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.8.5: April 9, 2024 = * Enhancements: - Added: "Hide my last login" via the Account > Privacy setting - Added: Exclude and Include fields for member directory searching - Tweak: Compatibility with WordPress 6.5 * Bugfixes: - Fixed: URL attributes escaping (CVE-2024-2765) - Fixed: wp-admin Ultimate Member > Dashboard layouts - Fixed: Required fields labels - Fixed: Change password and update account email notifications duplicates - Fixed: Reset Password urlencoded username - Fixed: Clear media JS in wp-admin settings * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.8.4: March 6, 2024 = * Enhancements: - Tweak: Added separate file for full changelog. readme.txt shows only a few latest versions * Bugfixes: - Fixed: Member directory data sanitizing (CVE-2024-2123) - Fixed: Activation link time changed from seconds to days - Fixed: Password validation error - Fixed: Password reset url for the approved user who didn't set their password after registration without password - Fixed: Conflict with WebP Uploads = 2.8.3: February 19, 2024 = * Enhancements: - Added: Link to the Ultimate Member docs - Tweak: Ultimate Member > Settings redesign. More details about setting up. Tooltips changed to descriptions. * Bugfixes: - Fixed: Member directory queries to custom usermeta table properly escaped and validated - Fixed: Member directory custom sorting when wp_usermeta table is used - Fixed: aria-invalid attribute for the user description field - Fixed: wp_kses protocols for email notifications content - Fixed: PHP notice while registration form validation - Fixed: Field validations (English letters, Alpha-numeric types) - Fixed: Hidden buttons in the modal when uploading profile and cover photo - Fixed: Theme updater log message - Fixed: Search line shortcode layout - Fixed: PHP notice while login form submission - Fixed: Email notifications HTML layout - Fixed: Default email notification body color - Fixed: Ignore username slug when custom meta slug exists when parse user from query * Templates required update: - email/notification_deletion.php - email/notification_new_user.php - email/notification_review.php - email/welcome_email.php - password-change.php * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.8.2: January 15, 2024 = * Enhancements: - Added: The `data` protocol for embedding base64 encoded logos in emails - Added: Hook `um_access_restricted_post_instance` for filtering the restricted post instance - Added: Shortcode `[um_author_profile_link]` for getting user Profile URL - Updated: Using underscore.js native debounce method for resize handler - Updated: Texts spelling * Bugfixes: - Fixed: AJAX requests conflict with `um_current_locale` attribute - Fixed: Pickadate styling (Date & Time fields) in wp-admin screen - Fixed: RTL styling and removed `um` class from UM frontend predefined pages - Fixed: select2 conflict with Impreza theme - Fixed: cropper conflict with Avada theme and active Fusion Image lazyload - Fixed: MegaMenu conflict with nav menu items conditional settings (e.g. Newsletter theme) - Fixed: PHP Fatal error when there isn't a proper WP_Post object in UM User Profile > Posts loop - Fixed: Account styles - Fixed: Saving `um_form_version` postmeta * Templates required update: - profile/posts-single.php * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.8.1: December 20, 2023 = * Enhancements: - Updated: Twitter texts to X - Added: Safeguards against clickjacking attacks on UM Forms * Bugfixes: - Fixed: Displaying notice to avoid using wrong symbols - Fixed: UM > Settings button styles - Fixed: Error notice when creating page via extensions - Fixed: Workaround for Cropper.JS if UM.frontend.cropper.obj undefined (Cropper hasn't been properly inited for UM objects) - Fixed: The visibility of sub-items of hidden menu items = 2.8.0: December 11, 2023 = * Enhancements: - Refactored: wp-admin assets. Separated or merged some file based on the wp-admin screens - Tweak: SASS pre-processor is used for wp-admin styles. - Tweak: Using minified JS and CSS in wp-admin and frontend assets - Tweak: Added PHP class UM()->admin()->screen() for screen control in wp-admin - Updated: jquery-ui styles to 1.13.2 version. Prefixed with .um class. - Updated: Cropper.JS to 1.6.1 version - Note: Select2.JS version 4.0.13 - Refreshed: Tipsy.JS to 1.0.0a version. Removed custom changes and restored library base code - Refreshed: Raty.JS to 2.6.0 version. Restored library base code - Refreshed: Pickadate.JS to 3.6.2 version. Restored library base code - Updated: Used `um-tip-{x}` classes to make Tipsy.JS initialization commonly for wp-admin and frontend. - Updated: wp-admin forms class and render icon type field - Updated: Using `custom_submitdiv` on the UM Form and UM Member Directory screen to avoid custom styling for unnecessary metabox functionality. Just to render the necessary metabox content with only submission tools. * Bugfixes: - Fixed: Using fields with numeric keys in Form Builder - Fixed: Pickadate.JS (datetime picker) localizations using - Fixed: PHP notices on the SiteHealth and Form Builder pages - Fixed: Using 'um_user_permissions_filter' hook and it's arguments. * Deprecated: - Removed Simplebar.JS library in Ultimate Member core. It's used only in extensions. - Removed outdated styles and scripts for 1.3.x first install page - `UM()->admin()->enqueue()->js_url` param. Please use `UM()->admin()->enqueue()::get_url( 'js' );` or `self::get_url( 'js' );` instead - `UM()->admin()->enqueue()->css_url` param. Please use `UM()->admin()->enqueue()::get_url( 'css' );` or `self::get_url( 'js' );` instead - `UM()->frontend()->enqueue()->js_url` param. Please use `UM()->frontend()->enqueue()::get_url( 'js' );` or `self::get_url( 'js' );` instead - `UM()->frontend()->enqueue()->css_url` param. Please use `UM()->frontend()->enqueue()::get_url( 'css' );` or `self::get_url( 'js' );` instead - Fully `UM()->permalinks()->um_rel_canonical_()` function. Because since version 2.1.7 there is used `um_profile_remove_wpseo();` alternative - Fully `UM()->permalinks()->admin_act_url()` function. Since update for wp-admin links when there is nonce this function isn't used - Fully `UM()->admin()->enqueue()->front_js_baseurl` param. - Fully `UM()->admin()->enqueue()->front_css_baseurl` param. - Fully `UM()->admin()->enqueue()->post_page` param. - Fully `UM()->frontend()->enqueue()->load_google_charts()` function. Outdated. - Fully `UM()->frontend()->enqueue()->load_fileupload()` function. Used scripts/styles dependencies to load script in the necessary place. - Fully `UM()->frontend()->enqueue()->load_datetimepicker()` function. Used scripts/styles dependencies to load script in the necessary place. - Fully `UM()->frontend()->enqueue()->load_scrollbar()` function. Outdated - Fully `UM()->frontend()->enqueue()->load_imagecrop()` function. Used scripts/styles dependencies to load script in the necessary place. - `UM()->is_um_screen()` function. Please use `UM()->admin()->screen()->is_own_screen()` instead - `UM()->is_plugin_post_type()` function. Please use `UM()->admin()->screen()->is_own_post_type()` instead - `UM()->is_restricted_entity()` function. Please use `UM()->admin()->screen()->is_restricted_entity()` instead - `UM()->cpt_list()` function. Please use `UM()->common()->cpt()->get_list()` instead - `um-admin-clear` CSS class. It duplicates WordPress native `clear`. Using WordPress native instead. - `um-admin-tipsy-{x}` classes to make Tipsy.JS initialization commonly for wp-admin and frontend by `um-tip-{x}` class. * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.7.0: October 11, 2023 = * Enhancements: - Added: Site Health sections - Added: oEmbed field type - Added: YouTube field type supports YouTube Shorts links - Added: Profile permalink base options: Unique hash, Custom usermeta - Added: UM Form meta `um_form_version` for legacy support in the future - Added: Setting "Deleting user comments after deleting a user" for WordPress native logic workaround - Added: `aria-invalid` and `aria-errormessage` attributes to the fields on UM Forms - Updated: Structure for enqueue assets PHP classes - Updated: [Hooks Documentation v2](https://ultimatemember.github.io/ultimatemember/hooks/) * Bugfixes: - Fixed: Member directory search query escaping process - Fixed: Added 'ID' metakey to the blacklist. It's not possible to create field with 'ID' metakey to avoid the conflict - Fixed: Add/Edit Field metabox and "Field Icon", "Conditional logic" fields - Fixed: Init `jquery-slider-ui` script/style on the block editor page - Fixed: Displaying "Notifications Account Tab" setting - Fixed: Displaying Post Date on the User Profile > Posts tab based on this [article](https://make.wordpress.org/core/2019/09/23/date-time-improvements-wp-5-3/) - Fixed: Small PHP warning, notices and typos * Deprecated: - `UM()->enqueue()` use `UM()->frontend()->enqueue()` method - `UM()->admin_enqueue()` use `UM()->admin()->enqueue()` method - `UM()->admin_enqueue()->suffix` property use `UM()->frontend()->enqueue()::get_suffix()` - `UM()->admin()->enqueue()->suffix` property use `UM()->frontend()->enqueue()::get_suffix()` - Changed directories for the fonts (fonticons + raty), and JS/CSS files related to libs `jquery-ui`, `raty`, `select2`, `tipsy`, `fonticons (FontAwesome + Ionicons)` * Templates required update: - account.php - login.php - password-change.php - password-reset.php - register.php - profile/posts-single.php * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.6.11: September 06, 2023 = * Bugfixes: - Fixed: Empty mail From data when there isn't set an option - Fixed: Nonce validation for the admin actions handler - Fixed: REST API endpoint List Pages redirecting to the homepage - Fixed: Standardize the 'editable' attribute for the UM fields and hooks that can extend these fields - Fixed: Redirection from default WordPress registration to UM registration page (if it's not a published) = 2.6.10: August 17, 2023 = * Enhancements: - Added: 'um_can_view_profile' hook to operate with profile privacy - Added: 'um_member_directory_core_search_fields' hook to operate with core searching fields in member directory search - Tweak: Standardize the condition for checking not editable fields to `empty( $data['editable'] )` - Tweak: Unified `UM()->fields()->editing` and `UM()->fields()->viewing` to bool variables use true\|false in conditions to make `===` or `!==` comparing - Updated: [Hooks Documentation v2](https://ultimatemember.github.io/ultimatemember/hooks/) * Bugfixes: - Fixed: Restriction settings handler when there isn't a WP_Post in query. PHP notices in some cases when WP query is not canonical - Fixed: User description (Biography) field conflict with validation (max chars) in both cases when HTML can be used or not. Case when there are 2 biography fields are displayed on the profile (header + form field) - Fixed: Displaying WordPress native registration errors when unique username\|email validation is disabled - Fixed: Make links clickable in the Registration Details - Fixed: WP_Users_Query on wp-admin > Users screen - Fixed: Performance for `um_get_form_fields` hook - Fixed: Admin Modal JS library conflict with bootstrap.js * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.6.9: July 26, 2023 = * Enhancements: - Added: Compatibility with UM:Stripe extension - Added: Show/hide password button for toggle password visibility - Added: JS scripts for syncing biography fields if there are the 1st field in the profile header and the 2nd field in the profile form * Bugfixes: - Fixed: Using allowed hosts for safe redirect after profile deletion - Fixed: Nonce validation for the admin actions handler - Fixed: Using singleton for UM Forms and UM Account shortcodes. Empty pages issue - Fixed: PHP errors in admin notices - Fixed: PHP errors on UM Profile update when there is multiselect field - Fixed: UM Form and UM Member Directories titles un-slashed. Please re-update the entities where you have extra-slashes - Fixed: Maximum allowed words option for textarea where you may insert HTML tags. Ignore HTML tags symbols when count - Fixed: Sanitize for fields (Min characters, Max characters, etc.) where can be empty string or absint value * Templates required update: - profile.php * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.6.8: July 19, 2023 = * Enhancements: - Added: Secure settings. [Read more](https://docs.ultimatemember.com/article/1869-security-feature) - Added: Admin notices about possible security issues. For example, regarding the roles with which the user can register on the site - Added: `um_edit_profile_url` hook for force changing user profile edit URL - Added: Additional hook attributes to 'um_reset_password_errors_hook' and 'um_reset_password_process_hook' - Added: $form_data attribute to 'um_before_save_registration_details' hook - Added: `um_safe_redirect()` function for handle `wp_safe_redirect()` function with new the "Allowed hosts for safe redirect" setting - Updated: [Hooks Documentation v2](https://ultimatemember.github.io/ultimatemember/hooks/) * Bugfixes: - Fixed: Updating user description if there isn't custom field on profile form, but field is displayed on profile top - Fixed: Delete Row and Sub-Row actions in UM Form Builder. Avoid cases when fields from rows and sub-rows are still in form after delete their parents rows - Fixed: Ultimate Member WP Cron schedule events starting time. Daily event starts since 12:00AM for now. The similar for weekly and twice-daily events - Fixed: Custom sorting label issue on the Member Directory header - Fixed: Disabled not-editable fields on UM Forms - Fixed: Disabled fields attribute on UM Forms - Fixed: Registration with empty role. Set default if role fields on the form are empty when form is submitted - Fixed: Admin notices after UM actions has unique key with 'um_' prefix for now - Fixed: Escaping form errors. It used `esc_html()` but now there is `wp_kses()` - Fixed: Stop render 2 similar shortcodes on the same page (e.g. 2 login forms with the same `form_id`). To return back use [`um_ultimatemember_shortcode_disable_singleton`](https://ultimatemember.github.io/ultimatemember/hooks/um_ultimatemember_shortcode_disable_singleton.html) hook - Fixed: Stop render Ultimate Member forms (Login, Profile, Registration, Member Directory) on the predefined Account page - Fixed: Using blocks with Ultimate Member shortcodes on the predefined Ultimate Member pages - Fixed: Using some specific functions which cannot exist if PHP modules are disabled * Deprecated: - Deprecated: Unnecessary `um_multiselect_option_value` hook * Templates required update: - members.php = 2.6.7: July 1, 2023 = * Bugfixes: - Fixed: A privilege escalation vulnerability used through UM Forms. Known in the wild that vulnerability allowed strangers to create administrator-level WordPress users. Please update immediately and check all administrator-level users on your website. - Fixed: Displaying fields on Account page > Privacy > Member directory settings - Fixed: Allowed types for the file field - Fixed: Disabled weekdays for the datepicker field = 2.6.6: June 29, 2023 = * Bugfixes: - Fixed: Password Confirm field and validation - Fixed: Form Builder row editing - Fixed: Spotify URL user URL display on user profile - Fixed: Spotify URL validation = 2.6.5: June 28, 2023 = * Enhancements: - Removed: `extract()` function and increase supporting WordPress Code Standards - Updated: [Hooks Documentation v2](https://ultimatemember.github.io/ultimatemember/hooks/) * Bugfixes: - Fixed: A privilege escalation vulnerability used through UM Forms. Known in the wild that vulnerability allowed strangers to create administrator-level WordPress users. Please update immediately and check all administrator-level users on your website. = 2.6.4: June 27, 2023 = * Enhancements: - Added: Avoid using `extract()` function and increase supporting WordPress Code Standards * Bugfixes: - Fixed: PHP8.2 PHP errors (deprecated, warnings, etc.) - Fixed: Using `str_contains()` in template override - Fixed: Override templates and custom path for 'members-grid.php', 'members-header.php', 'members-list.php', 'members-pagination.php', 'searchform.php', 'login-to-view.php', 'profile/comments.php', 'profile/comments-single.php', 'profile/posts.php', 'profile/posts-single.php', 'modal/um_upload_single.php', 'modal/um_view_photo.php' template files - Fixed: Custom emails data "--- UM Email HTML Templates ---" in Install info = 2.6.3: June 14, 2023 = * Enhancements: - Added: `um_profile_menu_link_{$id}_attrs` hook for changing link attributes - Added: `get_member_directory_id()` function for getting member directory ID based on page ID - Added: The "Order" and "Data type" settings for custom sorting fields based on metakey in Member Directory - Added: New hooks `um_profile_permalink`,`um_external_profile_url` - Added: Users dropdown field to Admin Forms class - Added: Spotify URL field type - Added: New developer docs [here](http://ultimatemember.github.io/ultimatemember/). It will be upgraded from version to version * Bugfixes: - Fixed: PHP8.2 PHP errors (deprecated, warnings, etc.) - Fixed: Filters visibility on member directory page based on public or private visibility for filter's field - Fixed: Incorrect Member Directory numerical sorting order - Fixed: wp_editor() doesn't work correctly in content restriction settings for Mac users - Fixed: Profile links when WPML plugin is active - Fixed: ACF and UM blocks conflict - Fixed: `UM()->mail()->locate_template()` function's visibility * Deprecated: - Deprecated: `um_localize_permalink_filter`. Use `post_link` instead * Templates required update: - members.php = 2.6.2: May 31, 2023 = * Bugfixes: - Fixed: Email notifications sending - Fixed: File and Image uploaders and allowed types data for them - Fixed: Content field-type editor in wp-admin Form Builder - Fixed: Image and File uploaders max size saving in wp-admin Form Builder = 2.6.1: May 29, 2023 = * Enhancements: - Added: Override templates versioning utility for wp-admin - Added: Style and class attributes to `info_text` field type in settings - Added: Emails to install info - Added: 'um_email_get_template_file_path' hook - Added: Merging data passed with original field data when `edit_field()` function running - Added: loading="lazy" for avatars and cover photos - Tweak: Changed Discord account validation - Tweak: Changes the structure for the Gutenberg blocks' scripts and way of registration - Tweak: Removed `filter_input` function using * Bugfixes: - Fixed: Removed the hidden in UI taxonomies from the Access > Enable the "Content Restriction" settings for taxonomies setting - Fixed: Dynamically declared variables inside the classes for PHP8 installations - Fixed: Added wpnonce attribute for duplicate UM Form link - Fixed: Sanitize restriction messages when Gutenberg block is restricted - Fixed: Login form error class vulnerability * All templates required update. Please add the version comments to your custom templates in themes * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.6.0: March 29, 2023 = * Enhancements: - Added: Hook arguments ($form_id, $not_searched) to 'um_members_directory_head' - Added: Using user locale `get_user_locale()` for localization with the 1st priority - Added: Hooks to change the profile SEO image: 'um_profile_dynamic_meta_image_size', 'um_profile_dynamic_meta_image_type' - Added: Filter for making 3rd-party roles editable through Ultimate Member interfaces. Use 'um_extend_editable_roles' and pass there an array of role keys( e.g. 'editor', 'administrator', etc. ) * Bugfixes: - Fixed: Major issues with the Member Directory search line - Fixed: Social links (Twitch, TikTok, Reddit) colors in profile header - Fixed: Exclude registered date field from editable fields - Fixed: Create the custom table for usermeta if does not exists - Fixed: Locale loading time and hook for that - Fixed: Used `wp_unslash()` for input POST data on Change Password - Fixed: Role setting "Avoid indexing profile by search engines" - Fixed: Date Picker field value format for 3rd-party integration meta fields - Fixed: Last login timestamp being lost in the users cache - Fixed: Textdomain typos - Fixed: Small PHP warnings and notices * Deprecated: - Deprecated: VKontakte and Google+ predefined fields. VKontakte and Google+ fields validation changed to just URL validation. * Templates required update: - members.php = 2.5.4: February 17, 2023 = * Enhancements: - Added: TikTok, Twitch and Reddit fields - Added: Handler of restriction settings for blog page - Added: Support of the `<iframes>` inside textarea with enabled the "HTML using" option - Added: 'um_get_field_date' hook for filtering date fields - Added: `UM()->get_allowed_html()` function for using it inside wp_kses allowed HTML tags * Bugfixes: - Fixed: Redirect to some links when content is restricted. Using `esc_url_raw()` instead of `esc_url()` for redirect to URLs inside class-access.php - Fixed: Handle restriction settings for attachments, later hook is used for checking capabilities through `current_user_can()` - Fixed: Honeypot triggering in password reset, when not set - Fixed: Small PHP notices and warnings = 2.5.3: December 19, 2022 = * Bugfixes: - Fixed: Plugin upgrade DB initialization and PHP Fatal Error. = 2.5.2: December 14, 2022 = * Enhancements: - Added: Custom dropdown callback functions security enhancements. Avoid using blacklisted functions through namespace or uppercase format - Added: Validation for upgrade package in wp-admin - Added: `Change Password request limit` option for prevent from any brute-force attacks or password guessing with the form - Added: Strong password checking for not using username\|email inside the password - Added: `um_custom_authenticate_error_codes` hook for handling 3rd-party login errors on UM invalid form * Bugfixes: - Fixed: Some texts sanitizing - Fixed: PHP Error in url-type field on UM Forms - Fixed: Using `wp_mkdir` to avoid the filesystem conflict when copy email template to theme - Fixed: Password Reset URL generating - Fixed: Multiple users approve - Fixed: Using regular URL-type field for displaying * Templates required update: - members.php * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.5.1: October 26, 2022 = * Enhancements: - Added: Custom fields callbacks blacklist. Use `um_dropdown_options_source_blacklist` filter for adding your custom functions to the custom callbacks blacklist. By default there are all PHP internal functions. * Bugfixes: - Fixed: Posts' restriction that is based on term restriction settings - Fixed: Issue with class name in checkbox and radio. Class name being 'activeright' instead of 'active right' - Fixed: Admin upgrade scripts and upgrades pack validation - Fixed: Directory traversal vulnerabilities - Fixed: Destroying user sessions after changing "Approved" status to something else (e.g. deactivated) - Fixed: Conflict when `wp_get_current_user()` not exists. Transferred restriction settings callbacks to `plugins_loaded` hook - Fixed: Restriction post displaying when 404 is enabled and old restiction logic isn't active - Fixed: PHP warning when nav menu is empty - Fixed: Disable auto-login after user is registered by Administrator and UM Registration form - Fixed: Some typos errors - Fixed: Using an apostrophe symbols in emails for registration and login both - Fixed: Sanitizing YouTube links. Applying both https://youtu.be/xxxxxxx and https://youtube.com/xxxxxxx links * Deprecated: - Removed: Outdated setting using in code (force_display_name_capitlized). Moved the functionality to extended [repo](https://github.com/ultimatemember/Extended/tree/main/um-capitalize-name#readme) = 2.5.0: August 17, 2022 = * Enhancements: - Added: Input type "tel" using for the "Mobile Number" and "Phone Number" fields * Bugfixes: - Fixed: Performance issue on wp-admin Users screen. Queries were replaced to the cache transient values - Fixed: Privacy policy displaying when there are 2 registration forms on the same page - Fixed: Password Reset process via Ultimate Member - Password Reset form. Reset password links' arguments changed to the same view as WordPress native has. Password Reset available for the same cases as native WordPress Password Reset has - Fixed: Sanitizing for the Info Text field-type in wp-admin forms. Needed for the proper 3rd-party integrations - Fixed: Displaying the filters' titles on the Member Directory pages * Deprecated: - `UM()->query()->get_users_by_status()` without alternativities. It's unused since 2.5.0. Will be removed since 2.7.0 - `UM()->user()->get_pending_users_count()`. Use `UM()->query()->get_pending_users_count()` instead. It's unused since 2.5.0. Will be removed since 2.7.0 - `UM()->user()->remove_cached_queue()` without alternativities. It's unused since 2.5.0. Will be removed since 2.7.0 * Templates required update: - password-change.php - password-reset.php * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.4.2: July 14, 2022 = * Bugfixes: - Fixed: Member Directory vulnerabilities - Fixed: 3rd-party integration with profile tabs and ability to show edit profile form on the 3rd-party profile tab - Fixed: PHP fatal error on unset - Fixed: select2 style conflicts with 3rd-party plugins = 2.4.1: June 13, 2022 = * Enhancements: - Added: Number-type Ultimate Member custom fields to the list of the sorting fields on the member directory * Bugfixes: - Fixed: XSS issue related to the JS confirmation and links with JS code inside - Fixed: PHP error when `um_options` option in wp_options table doesn't exist or has wrong format - Fixed: select2 styles for RTL languages - Fixed: Using slashes in the `Choices callback` setting for the dropdown/multi-select fields. It's for the using PHP namespaces - Fixed: Deleting `um_member_directory_data` user meta when user is deleted - Fixed: Using special chars inside the password and avoid using "\" symbol (WordPress native logic) - Fixed: Conflict when `wp_get_current_user()` not exists - Fixed: Changed hook for member directory variables initialization for getting ability to use Ultimate Member hooks for customizing these variables via theme - Fixed: Remove a redundant WP_Users_Query when getting empty `account_status` users = 2.4.0: June 1, 2022 = * Enhancements: - Added: "Allow external link redirect confirm" setting for the displaying JS.confirm alert before redirect to external link from User Profile links - Added: "Allowed Choice Callbacks" setting for the security enhancements * Bugfixes: - Fixed: PHP warning when nav menu is empty - Fixed: Security issue related to the User Description field - Fixed: Security issue related to the [um_loggedin] shortcode - Fixed: Using $current_screen without checking for existence - Fixed: `remove_unused_uploads()` function for some PHP installations = 2.3.2: April 21, 2022 = * Enhancements: - Added: wp-admin notice with reminder about locking WordPress native registration for guests - Added: Users dropdown field for Ultimate Member settings fields in wp-admin. It supports AJAX lazy loading - Added: JS confirm when redirection from User Profile links to the 3rd-party URL * Bugfixes: - Fixed: PHP warning when there aren't proper user while login - Fixed: Removing UM custom capabilities from global $wp_roles when uninstall - Fixed: Removing UM custom roles from user roles after uninstall - Fixed: Issue with echo XSS on User Profile - Fixed: Sanitizing for the checkbox, radio, multiselect fields for PHP8 installations * Deprecated: - `um_whitelisted_wpadmin_access` hook and `wpadmin_allow_ips` option. They were unused and redundant since the 2.x version = 2.3.1: February 9, 2022 = * Enhancements: - Added: wp-admin notice on the Settings page when settings have been changed (#963) - Added: WP Blocks restriction settings for the blocks (templates/nav-menu) on the FSE pages - Added: UM-specific query_var for UM additional Users_Query on users.php screen in wp-admin. `um_custom_user_query` = true - Added: Ability for dropdown.js to use it inside parent wrapper (not only document.body) - Changed: Using WP Cron schedules. Un-schedule events after plugin deactivation - Removed: `um_check_extensions_licenses` and replaced it to `um_daily_scheduled_events` event * Bugfixes: - Fixed: "Can user edit this field?" fields' option for the file/image upload field-types (#958) - Fixed: Using uppercase symbols in the "Blocked Email Addresses" and "Blacklist Words" blacklists settings (#962) - Fixed: PHP warning related to the Ultimate Member custom fields without type - Fixed: Some typos in the labels (#975) - Fixed: UX issue with wrong text on the admin notice about upgrade - Fixed: UX issue with Blacklist Words and Blocked Email settings labels. Added a small description about per line separation (#962) - Fixed: Sorting the Extensions settings sections = 2.3.0: December 20, 2021 = * Enhancements: - Added: WhatsApp, Telegram, Discord, Viber messengers predefined fields. - Added: Callback for deleting the custom field data from member direcroty settings when this custom field has been deleted in Form Builder. - Added: 'um_account_active_tab_inited' JS hook. - Updated: Require a strong password option (`Ultimate Member > Settings > General > Users > Require a strong password?`) to make it common for all Ultimate Member forms. Renamed option key from `reset_require_strongpass` to `require_strongpass`. - Updated: Form errors texts on the login/password reset forms. Made them secure. - Deprecated: `Ultimate Member > Settings > General > Account > Require a strong password?` option and merged with `Ultimate Member > Settings > General > Users > Require a strong password?` option. * Bugfixes: - Fixed: "Clear All" button for the filters with "&" symbol in the label. - Fixed: Uninstall process when delete UM data. Avoid the issue when 3rd-party pages that had been selected as UM page are removed on UM uninstall. - Fixed: Header meta for the Twitter Card. If the user has twitter field filled then <meta name="twitter:site"> will be filled by this value. - Fixed: Member directory a slider filter's label displaying. It uses the filled label for now. - Fixed: SkypeID field validation. Also all SkypeID fields on your forms changed type from `url` to `text`. SkypeID supports nicknames or https://join.skype.com/{hash} links. - Fixed: Typos in Account > Privacy tab texts related to Download/Erase the user data. - Fixed: Some typos in the fields' labels. - Fixed: "false" display name in the member directory. It displays empty for now if the user hasn't display name. - Fixed: `UM()->clean_array()` function. - Fixed: LinkedIn field URL. Added ability to display the organization URL. - Fixed: Canonical link of the user profile if WPML plugin is active. - Fixed: Replacing placeholders in nav menus. Used an earlier hook for filtering items before generating HTML and avoided issues with raw, not-escaped HTML inside tags' attributes. * Templates required update: - members-grid.php - members-list.php - password-reset.php * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.2.5: September 22, 2021 = * Enhancements: - Added: Ability to insert SoundCloud track URL instead of Track ID - Added: Settings for the password min/max length (Ultimate Member > Settings > Users) * Bugfixes: - Fixed: Invalid role keys on the role list-table + role edit screen (case when latin symbols used with not UTF-8 symbols) - Fixed: Restriction logic and archive lists (+ nav menu bar) with active "Disable pre-queries for restriction content logic" option - Fixed: Restriction settings fields conditions on wp-admin screens - Fixed: Account `user_login` field validation removed as redundant. The field is disabled and not used in code flow - Fixed: `display_name` data update after First + Last name fields edition on the Account page - Fixed: Password length validation on the Account page and Password Reset page - Fixed: Using custom fields from multi-select dropdowns for user's `Display Name`. Unserialized custom field's values = 2.2.4: August 27, 2021 = * Bugfixes: - Fixed: Hiding comments feed for pages with active comments - Fixed: Changing the post title to the restricted value while displaying in the loop that uses direct `post_title` variable - Fixed: PHP errors related to not passed function attributes from 3rd-party plugins or themes when using WP native hooks - Fixed: Handling the login form errors via \WP_Error = 2.2.3: August 25, 2021 = * Enhancements: - Added: 'um_ignore_restricted_title' hook for workaround show post title of the restricted post - Added: Disable pre-queries for restriction content logic ('disable_restriction_pre_queries') option for backward compatibility with business logic where 404 error for restricted content isn't a good way - Added: Replace the restricted Post Title ('restricted_post_title_replace') option for ability to disable restricted post's title replace * Bugfixes: - Fixed: `pre_get_terms` callback to avoid the conflicts with other terms queries - Fixed: Terms query and global access settings on PHP8 installations - Fixed: Member directory dropdown filters where options contain `&` symbol - Fixed: Displaying 404 error for the restricted Media - Fixed: Displaying 'Login as this user' action on the user profile - Fixed: Sanitizing of the social links fields (e.g. Twitter, Facebook, etc.) - Fixed: Visibility of a restricted taxonomy page in the nav menu - Fixed: Sanitizing key for the drag&drop action - Fixed: Sanitizing the description field with allowed HTML inside - Fixed: The "Assignment to constant variable" JS error on some sites - Fixed: Keep description formatting in a view mode - Fixed: Profile form nonce handling, security enhancement - Fixed: `um_edit_profile_url()`` function and added $user_id attribute - Optimized: Restriction content handlers, avoid queries duplicates or unnecessary queries = 2.2.2: August 3, 2021 = * Bugfixes: - Fixed: `is_restricted()` functions in class-access.php. Avoid using object as array offset = 2.2.1: August 2, 2021 = * Enhancements: - Added: Extended callback functions for sanitizing data in wp-admin forms fields - Added: Restricted Access Post Title setting * Bugfixes: - Fixed: Restriction settings and related queries (comments, archives, recent posts, post navigation, etc.) - Fixed: Sanitizing `max-width` value of the Login/Registration/Profile form settings - Fixed: Sanitizing `in_group` field's data - Fixed: Restriction settings related with `Hide in queries` - Fixed: Restriction settings and CPU performance issues on some installations - Fixed: Form meta settings and handling them on PHP8 installations - Fixed: Make it clearer the restriction settings form labels = 2.2.0: July 20, 2021 = * Enhancements: - Added: Sanitizing handlers to the Ultimate Member > Settings forms' fields - Added: Sanitizing handlers to the Ultimate Member > User Role Add/Edit forms' fields - Added: Sanitizing handlers to the Ultimate Member > Forms forms' fields - Added: Sanitizing handlers to the Ultimate Member > Forms > Add Field/Edit Field forms' fields - Added: Sanitizing handlers to the Ultimate Member > User Roles forms' fields - Added: Sanitizing handlers to the Restriction Content forms' fields in the posts/pages/menus additional fields - Added: Sanitizing handlers to the all (Login/Registration/Profile/Account) frontend forms' fields - Added: Custom placeholder setting for the Confirm Password field * Bugfixes: - Fixed: Content restriction settings using in Avada theme with active page headers - Fixed: Content restriction (CPT + Terms). Avoid displaying comments if the post is restricted - Fixed: Content restriction (CPT + Terms). Avoid displaying comments and posts feed - Fixed: Content restriction (CPT + Terms). Displaying the proper count of the posts. Restricted are excluded - Fixed: Saving and displaying settings on the UM > Settings > Access screen - Fixed: Saving and displaying default Member Directory settings - Fixed: Minor PHP warnings on registration data preview - Fixed: Member directory slider filter-type query and results - Fixed: Uploader filename displaying * Tweaks: - WordPress 5.8 compatibility. Widgets screen changes based on the new features with Legacy Widget block * Templates required update: - members.php - password-reset.php * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.1.21: June 17, 2021 = * Enhancements: - Added: `um_scripts.max_upload_size` localized variable getting from `wp_max_upload_size()` - Updated: dropdown.js library to make the stable working * Bugfixes: - Fixed: Displaying different profile form shortcodes with different role visibility settings on the same page - Fixed: Displaying avatar on the logout page - Fixed: Role meta sanitizing and related XSS vulnerability * Templates required update: - logout.php - members.php - members-list.php * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.1.20: May 7, 2021 = * Enhancements: - Added: Hook `um_registration_for_loggedin_users` to unlock the ability to add new users through the registration form - Added: Filter hook 'um_change_usermeta_for_update' for extending `$to_update` usermeta array after all profile fields validations - Added: Filter hook 'um_profile_tabs_privacy_list' and 'um_profile_menu_can_view_tab' for extending privacy options for Profile Tabs * Bugfixes: - Fixed: XSS vulnerability when getting user profile URL - Fixed: Temp directory size calculation = 2.1.19: April 20, 2021 = * Bugfixes: - Fixed: Endless JS loop when filtering on Member Directory page = 2.1.18: April 19, 2021 = * Bugfixes: - Fixed: Endless JS loop when filtering on Member Directory page - Fixed: Regular expression for registration form and username field (added ability to use spaces) (#812) = 2.1.17: April 14, 2021 = * Enhancements: - Added: Activation link expiration setting (#803) - Added: 'Owner and specific roles' privacy type for the Profile tabs (#773) - Added: Hooks `um_before_email_notification_sending` and `um_after_email_notification_sending` regarding #743 pull-request - Added: Hooks for integration member directory filters with different conditions for query to DB * Bugfixes: - Fixed: Editing private profiles capability. Removed the priority for "Can edit other member accounts?" capability when the account is private. (#805) - Fixed: PHP notice when the admin filtering field has the not array default value (e.g. bool) - Fixed: The conflict with [Disable Blog](https://wordpress.org/plugins/disable-blog/) plugin regarding this [issue](https://wordpress.org/support/topic/ultimate-member-file-image-download/). `download_routing` callback has the highest priority now. - Fixed: Fields privacy functionality. This function `um_can_view_field()` has been rewritten (#780) - Fixed: Fields privacy + form validation functionality. Skip the field's validation that aren't visible on the form based on the privacy settings (#795) - Fixed: PHP notice in the confirm password label [wp.org thread](https://wordpress.org/support/topic/undefined-index-label-php-notice/) - Fixed: Confirm password placeholder when label is empty - Fixed: Permanently deleting form's field (#786) - Fixed: Default value with comma for checkbox field-type (#729) - Fixed: Gutenberg blocks conditional settings (#793) - Fixed: Getting active Profile tab when some of them are hidden - Fixed: Restricted content message is showing twice and removing header, avoid the conflicts with themes that use 'the_content' filter in header or footer (#799) - Fixed: "Is required" validation for the multiselect field-type when it's empty on submit - Fixed: Using 'wp_login_failed' hook, added 2nd parameter required since WordPress 5.4 version (#810) = 2.1.16: March 10, 2021 = * Enhancements: - Added: General and role setting to avoid indexing users' profiles - Added: `um_prepare_user_results_array_meta` hook and the 2nd argument for `um_prepare_user_results_array` hook for handle $user_ids based on getting members query - Added: Change password email when the password has been reset - Added: jQuery v3 compatibility - Added: An option "Administrator" in a menu settings to make the menu visible for administrators only * Bugfixes: - Fixed: Creating and removing usermeta data with `password_rst_attempts` key, just update if exists for now - Fixed: Using 'edit_users' capability instead of 'manage_options' for approve\|reject membership - Fixed: Using 'manage_options' capability instead of 'delete_users' for switching between members - Fixed: Using myCRED points metakeys in UM usermeta table - Fixed: Empty icons are shown in the popup "Choose from... available icons" - Fixed: Member Directory slider filter with NaN or decimal range - Fixed: PHP notices and warnings - Fixed: Security vulnerability with User Account page and password field - Fixed: User creating without username but based on first+last name with not-ASCII symbols - Fixed: Password reset hash generating more than 1 time - Fixed: Random order type translation string on the member directory - Fixed: Resize and compress images when uploading on User Profile images fields or user wall - Fixed: Displaying more than 1 UM popups on the same page - Fixed: UM dropdown.js position calculation - Fixed: Select2 dropdown block position calculation * Tweaks: - Updated: Select2 to 4.0.13 version = 2.1.15: December 24, 2020 = * Bugfixes: - Fixed: Conditional logic for the form fields without metakeys = 2.1.14: December 22, 2020 = * Enhancements: - Added a tooltip with meta key name for fields in a form settings - Added `Administrator` user role to a restriction setting (to make the content visible only for `Administrator` role) * Bugfixes: - Added third parameter $args to the action hook for Profile Tab redirections `um_user_after_updating_profile` - Fixed issues with fields without metakeys when trying to display them by the hook - Fixed PHP notices/warnings = 2.1.13: December 8, 2020 = * Enhancements: - Added: `um_member_directory_cover_image_size` hook with ability to change the cover photo size on the member directory - Added: `um_member_directory_avatar_image_size` hook with ability to change the profile photo size on the member directory - Added: `um_member_directory_get_members_allow` JS hook for 3rd-party integration with the member directory. You could use a time throttle until some data is loaded - Added: Notice about the fields' conditional logic rules + small CSS enhancements - Added: Invalid nonce validation on Login and Registration pages instead of wp_die() - Added: Privacy settings for the Divider field type (#688) - Added: Ability for the integration with Gutenberg Block restriction settings (extends the block restriction settings via 3rd-party plugins) - Added: Strings translations * Bugfixes: - Fixed: Upgrade process on websites where a hosting locks the frequent AJAX requests (added default JS throttle between requests) - Fixed: Getting page content of the GDPR privacy policies - Fixed: Password strength validation for Unicode symbols - Fixed: Issue with apostrophe options in the multiselect/checkbox fields (#689) - Fixed: Translation for Password field's label - Fixed: Download Personal Data URL - Fixed: Vulnerability with timestamp field on UM Forms (the hidden field with name='timestamp' is deprecated) * Tweaks: - There are changed PHP’s intval(), strval(), floatval(), and boolval() typecasting functions to (int), (string), (float) and (bool) regarding [this doc](https://make.wordpress.org/core/2020/11/20/miscellaneous-developer-focused-changes-in-wordpress-5-6/). = 2.1.12: October 29, 2020 = * Enhancements: - Added ratings required notice and warning * Bugfixes: - Fixed conflict with other plugins with user 'status' in admin - Fixed security patch for UM forms handlers - Fixed security patch for handlers on the edit users' roles - Fixed member directory admin filtering by the field with uppercase in 'key' - Fixed member directory sorting by the full name - Fixed registration form with not editable role field - Fixed PHP notice for the filter without field's label - Fixed PHP notice on Admin_Form class initialization - Fixed style of the textarea field - Fixed Confirm Password field's placeholder = 2.1.11: October 6, 2020 = * Bugfixes: - Fixed can_view_profile() function - Fixed security patch for role change via profile form - Fixed admin-menu PHP notice = 2.1.10: September 23, 2020 = * Enhancements: - Deprecated the Feed widget from Ultimate Member dashboard * Bugfixes: - Fixed age filter at Member Directory when using WP native usermeta table - Fixed the role field values at the user profile/registration forms - Fixed PHP notice when cover photo is empty - Fixed the conflict issue with Pickadate JS library and their legacy.js functions - Fixed Gutenberg Blocks descriptions = 2.1.9: September 9, 2020 = * Bugfixes: - Fixed security patch for role change via profile form = 2.1.8: September 2, 2020 = * Enhancements: - Added dependency functions for extensions: [Ultimate Member - User Notes](https://ultimatemember.com/extensions/user-notes/) & [Ultimate Member - Profile Tabs](https://ultimatemember.com/extensions/profile-tabs/) - Added unique IDs to the form fields at the Profile's view mode - Added restrictions for WP > Users list table based on UM Roles capabilities * Bugfixes: - Removed additional slashes in the UM custom roles titles - Fixed cleaning user old uploads and integration with Social activity & Groups files - Fixed Info window fields (hide fields without metakeys) - Fixed PHP warning in conditional logic function - Fixed member directory preloader when using a slider filter - Fixed 'redirect_to' attribute and approving user on registration - Fixed activate an account via email = 2.1.7: August 12, 2020 = * Enhancements: - Added dependency functions for plugins: [Ultimate Member - JobBoardWP integration](https://wordpress.org/plugins/um-jobboardwp) & [JobBoardWP](https://wordpress.org/plugins/jobboardwp) - Added account privacy setting for the avoiding profile indexation - Added setting "Change image orientation" based on image EXIF data - Added setting "Account Deletion without password Custom Text" * Bugfixes: - Fixed security lacks for 'redirect_to' attributes - Fixed account submission when change a password - Fixed updating UM roles metadata (WP capabilities section) when 3rd-party plugins update the caps for the UM roles - Fixed member directory roles in query (the case when selected some roles, but current user can see another only) - Fixed member directory sorting - Fixed member directory list dropdown init after changing view type - Fixed member directory admin filtering by the 'user_registered' field - Fixed validation when using HTML in textarea - Fixed cleaning user old uploads - Fixed conditional logic for file/image-type fields - Fixed "get_profile_photo_size" function (avoid PHP notice with array_combine) - Fixed password reset/change form when other forms are initialized at the same page - Fixed getting extension updates on multisites - Fixed the 'wp_authenticate_user' filter's variables (changed username string to WP_User object) - Fixed SEO link canonical for the profile page - Fixed displaying error & notice when the text is empty * Deprecated: - Deprecated JS event 'um_before_modal_removed', use wp.hooks action 'um_before_modal_removed' instead = 2.1.6: June 1, 2020 = * Enhancements: - Added The profile page SEO meta tags for OG, Twitter and schema.org - Added filter to the field's privacy option for the 3rd-party integrations 'um_field_privacy_options' - Added layout changes to show email notification description in Settings > Email screen - Added member directory option 'Exclude specific users' - Added filter for the changing redirect after profile edited 'um_update_profile_redirect_after' - Added JS filters for conditional logic - Tweak: apply_shortcodes() function support - Tweak: nav-menu custom fields using 'wp_nav_menu_item_custom_fields' hook * Bugfixes: - Fixed custom meta table fields migration (create, edit, remove field actions) - Fixed wp-login.php and UM login form validation/errors triggers when using email for login - Fixed profile form duplicates, show only the first form shortcode on the page for the user with selected role - Fixed creating user uploads directory on registration - Fixed Role fields validation on registration - Fixed Erase User Data field on the Account page - Fixed profile privacy - Fixed SkypeID field - Fixed clickable links in the UM forms which are displayed in a modal window - Fixed disabling select and textarea fields in inactive tabs on Account - Fixed compatibility with jQuery 3.x and 'load' event - Fixed some translations - Small PHP notices fixes = 2.1.5: April 2, 2020 = * Enhancements: - Added number field-type to member directory filters - Changed export/erase personal data in account page - Sanitizing variables in wp-admin * Bugfixes: - Fixed PHP notice 'form_id' on account submission - Fixed birthday range for member directory filter - Fixed fields visibility when user can edit other users - Fixed honeypot JS - Fixed edit mode for Role (Dropdown/Radio) fields (getting editable priority role) = 2.1.4: February 24, 2020 = * Enhancements: - Updated select2 JS library to 4.0.12 version - Added a few member directories PHP and JS filters for 3rd-party integrations - Added labels for member directories filters to increase Accessibility points in Audit - Added formatting for submitted data - Added fields notices functionality - Added sanitizing $_GET variables in wp-admin side * Bugfixes: - Fixed activation licenses with sslverify - Fixed fields' options if they contains spaces in the start and the end of option (added trim) - Fixed getting range for slider filters - Fixed 2.1.3-beta3 package upgrade - Fixed resize image on registration form - Fixed multiselect field styles - Fixed issue with not editable fields and their visibility - Fixed displaying header with member counts - Fixed JS errors with not defined tinyMCE on Forms builder - Fixed issues with "key => value" fields (dropdown + multiselect) if 'um_select_options_pair' filter is used - Fixed social URLs validations - Fixed Ultimate Member wrapper's visibility on add/edit user page (wp-admin) - Fixed jQuery-UI library images - Fixed vulnerability with sanitizing $_POST - Fixed last login order on member directories when UM metatable is turned on - Fixed RTL styles at Account page and Member Directory = 2.1.3: January 21, 2020 = * Enhancements: - Added sorting by Last & First name - Added integrations with future extensions - Added filter for changing the order of options in select-type filter - Added GDPR template to get overwritten in the theme directory - Added member directories' custom sorting labels - Added ability to use custom metatable for faster requests for Member Directories - Added ability to request Erase or Download user data via Privacy tab at the Account page - Added an option to set the "Hide profile from directory" option by default * Bugfixes: - Fixed [um_loggedin] shortcode render with htmlspecialchars_decode - Fixed checkbox options missing selections with conditional settings - Fixed vulnerability with uploading cover/profile photo for other user ID - Fixed integration with WPML for Account and User pages in case if there are different permalinks for different languages for these pages - Fixed issues with pagination settings - Fixed search line additional slashes - Fixed issues with member results JS template - Fixed getting posts count at the Posts tab for 3rd party integrations - Fixed member directories' admin filtering - Fixed issue with reset filters on member directory - Fixed getting image/file custom fields values in form submission with not validated values - Fixed JS handlers for select-type filters with callback and parent/child relations - Fixed um_convert_tags for array-type values - Fixed small CSS issues = 2.1.2: December 4, 2019 = * Enhancements: - Added text-type filters - Added sorting for filters, tagline and reveal section fields - Added universal hook for field's wrapper and improve rendering the field wrapper attributes - Added returning only existed values for select-type filters - Added checking privacy for custom fields in filters and general search, exclude private fields - Added Form fields validation for E-mail( not unique ) - Added $user_id attribute in update profile hooks for proper callbacks * Bugfixes: - Fixed fields privacy, editable and visibility attributes - Fixed member directory styles - Fixed random sorting - Fixed conflict with 'php_data' variable in admin JS - Fixed datepicker/timepicker filtering in the member directories - Fixed initialization of datepicker, timepicker, slider filters when the "Show results only after search/filtration" option is active - Fixed callback select-type filters handlers on member directories filters bar - Fixed cover photo thumbnail sizes in member directory - Fixed Role filter - Fixed clearing filters with \|\| condition - Fixed endless recursion in the function um_check_conditions_on_submit() - Fixed issue that appears if we try to update several plugins at once - Fixed using different templates for different member directories - Fixed form previews, added overlay and displayed buttons - Fixed wp-admin/admin-post.php access issue = 2.1.1: November 12, 2019 = * Bugfixes: - Fixed admin actions hook - Fixed JS templates for list and grid view when user metakeys contain "-" symbol - Fixed JS template list "$show_block" issue - Fixed member directory search if 'roles_can_search' is set - Fixed member directory filters bar animation - Fixed save profile with Last Login field - Fixed admin builder for profile form, show not editable fields = 2.1.0: November 11, 2019 = * Enhancements: - Added member directory list view - Added member directory search bar - Added member directory filters by range, date and time - Added AJAXed member directories - Updated member directories' search engine - Additional parameter 'user_id' to action hook 'um_user_after_updating_profile' - Added ability to set profile/cover image sizes from Ultimate Member -> General -> Uploads settings or Original size - Added ability edit cover photo HTML (e.g. for adding some HTML attributes. See how add srcset attribute based on all generated cover sizes [here](https://docs.ultimatemember.com/article/1519-change-cover-photo-html)) - Added custom date format for Date Picker field - Added hook 'um_show_meta_item_html' to customize user meta HTML at User Profile page - Added "aria-label" attribute in Field icon * Bugfixes: - Optimized usermeta for Account submit security - Fixed flushing rewrite rules on every page reloading - Fixed Gmail & Yahoo UTF-8 encoding of email notification subject - Fixed ajax_resize_image() process - Fixed country fields values - Fixed dynamic_profile.php notice - Fixed integration with WP native admin_post and admin_post_nopriv requests - Fixed profile image settings - Fixed profile privacy for not logged in users, if restriction options set for profile page as visible only for logged in and showing message instead of redirect (it makes the same for {site_url}/user and {site_url}/user/{user_slug} ) - Fixed security issue on registration form submission when username or email have conditional logic - Fixed RTL styles issues on user profile and account pages - Fixed upload profile/cover photos at the profile page, don't apply until the crop finished - Fixed alphabetical field validation for cyrillic and not UTF-8 symbols - Fixed user profile validation if username, username or email, password and email fields were added to form - Fixed user profile preview in admin Form Builder - Fixed getting templates function for some Windows servers - Fixed plugin update process for multisites - Fixed function "um_apply_conditions". An error appears with jQuery v2.1.3 - Localized um-raty.js library - Localized strings = 2.0.56: August 21, 2019 = * Enhancements: - Added security fixes (XSS) - Added hooks for 3rd party integrations - Updated Datepicker & Timepicker library from 5.6 to 6.2 version * Bugfixes: - Fixed validation of forms conditional fields at the backend (for the nesting fields) - Fixed edit profile mode when profile menu is disabled - Fixed RTL styles and layouts - Fixed user profile description validation - Fixed JS errors on some installs - Fixed ability approve users by Administrator with special capabilities - Fixed multiselects' retrieval of options from callback function - Fixed save process and conditional logic for Appearances -> Profile Menu settings section - Fixed uninstall process - Fixed is_selected method for some cases - Fixed form settings fields for default button labels in wp-admin metaboxes - Fixed generate metakeys for the form's custom fields - Fixed issue when UM Roles localized as object on Add/Edit User screen - Fixed PHP notices = 2.0.55: August 16, 2019 = * Bugfixes: - Fixed profile privacy for not logged in users, if restriction options set for profile page as visible only for logged in = 2.0.54: July 22, 2019 = * Enhancements: - Added security fixes (XSS) * Bugfixes: - Fixed update process for not UM custom role - Fixed extensions licenses validation handler - Fixed profile tabs handlers = 2.0.53: July 16, 2019 = * Enhancements: - Added option to disable profile avatar uploader - Moved extensions icons to core * Bugfixes: - Fixed Profile Tabs Privacy settings - Fixed Notifications Account tab view - Fixed warnings on validation process - Fixed slashes in some texts from options - Fixed callback functions for select and multiselect fields = 2.0.52: July 11, 2019 = * Enhancements: - Extended hooks for 3rd party integrations * Bugfixes: - Fixed settings labels with CPT & Taxonomies - Fixed UM Roles create/edit XSS security issue - Fixed XSS security issue on account upgrade = 2.0.51: July 09, 2019 = * Bugfixes: - Fixed UM Roles create/edit security issue = 2.0.50: July 02, 2019 = * Enhancements: - Extended hooks for 3rd party integrations * Bugfixes: - Fixed PHP notices when runs validation - Fixed loop issue with Profile tabs - Fixed home page restrictions = 2.0.49: May 29, 2019 = * Enhancements: - Extended hooks for 3rd party integrations * Bugfixes: - Fixed security vulnerability with registration form - Fixed the using of deprecated send password hook = 2.0.48: May 16, 2019 = * Enhancements: - Added an ability to 3rd party integration with cover image actions * Bugfixes: - Fixed ability to edit profile on not predefined Profile Page = 2.0.47: May 14, 2019 = * Bugfixes: - Fixed save special characters values - Fixed trim fields options before validation - Fixed save empty value at Profile Registration form in radio/checkbox/select/multiselect fields - Fixed displaying empty value of multiselect field at Profile Page - Fixed cover photo dropdown menus = 2.0.46: May 10, 2019 = * Bugfixes: - Fixed extensions' upgrader - Security vulnerabilities on Profile/Registration submit and file/images uploading - Fixed session clean on logout = 2.0.45: May 08, 2019 = * Bugfixes: - Fixed issues with Gutenberg scripts and UM blocks - Security vulnerabilities on Profile/Registration submit and file/images uploading = 2.0.44: May 08, 2019 = * Enhancements: - Added automatically template saver when you upgrade your theme - Added default value for Date and Time user profile fields - Updated Scroll library - Added REST API v2 class with new query vars. There is an ability to select v1 or v2 for use. For old users v1 is default, for new users v2 * Bugfixes: - Added nocache headers to reset password form - Email templates saving to child theme, if parent theme already has email template files - Email templates locate in the default plugin folder with active WPML - Form builder with some predefined form fields, which had different keys/metakeys (currently use the same) - Logout redirect with active WPML - Fixed $_SERVER usage when WP-CLI using - Extended integration for UM field value - um_user function avoid loop when 'display name' and 'full name' used - Restriction options for Terms and access on front-end - Plugin/Theme upgrader - Remove duplicate data 'user_login' from metadata - Replace placeholders duplicates - Password Reset link regeneration - Fixed issues with scroll on mobile devices - Fixed multisite activation * Deprecated: - "Is Account page?" and "Is User page?" options for WPML integration ( because WPML translations works properly ) = 2.0.43: March 29, 2019 = * Bugfixes: - Fixed Last Login order in Member Directory = 2.0.42: March 28, 2019 = * Enhancements: - Added option for enable/disable Gutenberg blocks * Bugfixes: - Fixed conflicts with themes, which not support custom Gutenberg blocks via the option = 2.0.41: March 27, 2019 = * Enhancements: - Added Gutenberg blocks section with Ultimate Member shortcodes - Clear temp directory on upload process 1 day files old - Updated custom scrollbar JS library to jQuery 3 support * Bugfixes: - Fixed vulnerability with Reset Password form - Fixed Edit Row settings - Fixed save profile fields with 0 values - Fixed upload photo base URL for Windows servers - Fixed displaying user Posts at Profile/Posts tab - Fixed unique filename issue, upload avatar with high case extension - Fixed member directory filter title - Fixed duplicate delete user handler - Fixed sorting by Last Login date for users without meta - Fixed hook after password reset (issue #532) - Fixed member directory user role filter - Fixed restriction content WC Products integration - Fixed words count for French in user description field - Fixed is_selected function for dropdown/multi-select/checkbox profile fields - Fixed disable email field at Edit Profile form via filter (disabled by default) = 2.0.40: March 12, 2019 = * Bugfixes: - Fixed security issue on user Account Update = 2.0.39: February 11, 2019 = * Enhancements: - Restored option for disable users cache - Transposh plugin integration * Bugfixes: - Fixed delete users handlers on single/multisite installs - Fixed fields labels on member directory - Fixed profile form cover photo ratio value - Fixed profile and registration form default field's values - Fixed "is_selected" function with empty value and default value option - Fixed member directory notices with disabled metadata - Fixed textarea profile field formatting - Fixed registration without username field - Fixed flush password reset limit after successfully login - Fixed upload files handlers for avoid the conflicts with other plugins = 2.0.38: January 10, 2019 = * Enhancements: - Added option to enable Gutenberg Blocks restriction = 2.0.37: January 8, 2019 = * Enhancements: - Additional Block's restriction options - Added column to show User Account Status - Added filter for disabling Gutenberg blocks restriction to avoid themes conflicts = 2.0.36: January 7, 2019 = * Enhancements: - Added Block's restriction options - Added compatibility for upcoming User Events extension * Bugfixes: - Fixed Live Preview form at wp-admin - Fixed tinyMCE editor loading in form builder - Fixed external function for dropdown options - Fixed Add New Menu Item handler - Fixed small notices at frontend - Fixed a few admin settings fields - Fixed displaying comments when they are disabled = 2.0.35: December 9, 2018 = * Bugfixes: - Fixed JS/CSS enqueue at wp-admin = 2.0.34: December 7, 2018 = * Enhancements: - Added new "Extensions" class for future integrations * Bugfixes: - Fixed logout redirect vulnerability - Fixed modal window responsive position - Fixed class autoloader for Windows servers - Fixed admin forms integration - Fixed empty value for select2 selectbox - Fixed unchecked Remember Me by default on login page - Fixed admin forms esc_attr value - Fixed admin forms buttons wp_unslash - Fixed get/clean plugin upgrades on multisites - Fixed verify nonce on $_GET requests * Deprecated: - removed "UM_TEXTDOMAIN" constant - removed function UM()->get_ajax_route() for AJAX vulnerability fix = 2.0.33: November 22, 2018 = * Bugfixes: - Fixed AJAX vulnerabilities - Fixed delete user email notification - Fixed profile tabs displaying = 2.0.32: November 20, 2018 = * Bugfixes: - Added compatibility with PHP7.2 (removed deprecated functions and ini variables) - Fixed duplicated "redirect_to" field - Fixed errors on the installs < PHP5.6 - Fixed download files/images on the installs with the different home URL and site URL - Fixed unique emails in admin email notifications - Remove language notice, all translates are available on wp.org = 2.0.31: November 14, 2018 = * Bugfixes: - Fixed compatibility with JS/CSS cache plugins = 2.0.30: November 12, 2018 = * Bugfixes: - Fixed crop settings of the big images - Fixed WPML integration with email notifications - Fixed uppercase symbols using at profile page slug - Fixed download files/images with cache - Fixed download files/images with not closed buffers - Fixed looping in case if set 'display_name' as custom fields for display name setting - Fixed cover photo size - Fixed date time internalization - Fixed posts pagination for un-logged users - Fixed conditional JS - Fixed "um_" prefix for role data - Added compatibility for upcoming User Bookmarks extension = 2.0.29: October 8, 2018 = * Bugfixes: - Fixed User Profile Posts pagination = 2.0.28: October 5, 2018 = * Bugfixes: - Fixed Email notifications - Fixed Download files/images for multisites - Fixed Profile/Cover image for multisites - Fixed XSS vulnerabilities (detected by @Serhack) - Fixed trim fields on submit forms - Fixed submitted info = 2.0.27: October 2, 2018 = * Bugfixes: - Fixed files class = 2.0.26: October 2, 2018 = * Enhancements: - New files/images downloading process - Added dependencies with User Photos and Groups extensions * Bugfixes: - File/Image email placeholders after registration form submitting - File/Image forms fields values on submit/edit - Fixed multisite file/image upload process - Fixed clearing old user sessions after the changing a password - Made reset password process via WP native functions = 2.0.25: August 20, 2018 = * Enhancements: - Upgrade minified scripts = 2.0.24: August 15, 2018 = * Bugfixes: - WP native AJAX using - Force purge temp files dir = 2.0.23: August 10, 2018 = * Bugfixes: - Fixed File/Image uploader = 2.0.22: August 9, 2018 = * Enhancements: - Added an ability to filter user's profile slug "um_change_user_profile_slug" - Added an ability to filter pages for exclude restriction content settings "um_exclude_posts_from_privacy" * Bugfixes: - Fixed callback functions in member directory search - Fixed Profile Privacy Settings for different languages - Fixed security vulnerabilities (File/Image uploader) - Fixed security vulnerabilities (HTML arguments) - Fixed search in members directory for some cases, when metadata format isn't correct - Fixed some cases in conditional logic - Fixed WP Capabilities list for Gravity Forms - Fixed View Profile capabilities * Deprecated: - Filters "um_before_user_upload", "um_after_user_upload" = 2.0.21: July 9, 2018 = * Bugfixes: - Fixed search in members directory by User Tags field (other case) = 2.0.20: July 6, 2018 = * Bugfixes: - Fixed search in members directory by User Tags field = 2.0.19: July 5, 2018 = * Bugfixes: - Fixed few JS file's full versions - Fixed search in members directory by multiselect/radio/checkbox field - Fixed first activation role metadata reset = 2.0.18: July 4, 2018 = * Enhancements: - Added an ability to create different email templates for each site on multisites installs - Added major version notice - Added an ability to make Profile Form visible for 2 or more roles - Added ability to dismiss some UM notices - Redesign some parts of field's conditional logic settings * Bugfixes: - Fixed PHP memory limit issue on some installs. Created pseudo-constructor - Disabled email notification to user, which wasn't approved about delete their account - Fixed profile tabs privacy - Fixed default avatars and Gravatar displaying - Fixed get current URL function - Fixed admin bar displaying - Fixed members directory search - Fixed nav-menu items restriction handlers - Fixed user displaying on multisite (added 404 error in some cases) - Fixed XSS at wp-admin settings screen - Fixed user's "user_login" permalinks - Fixed user's capabilities ("Edit", "Delete" user) and profile actions displaying - Fixed field's conditional logic - Fixed issue with account button ID's duplicates * Deprecated: - REST API user's key option; = 2.0.17: May 30, 2018 = * Enhancements: - Added UM dashboard widget for getting latest extension's upgrades * Bugfixes: - Fixed User Profile restriction when the user isn't logged in - Fixed Profile Tabs displaying on desktop/mobile - Fixed set user status after registration on some installs - Fixed PHP memory limit issue on some installs with small PHP memory limit - Fixed PHP validation on submit UM Forms with conditional fields logic = 2.0.16: May 23, 2018 = * Bugfixes: - Fixed Profile Tabs issues = 2.0.15: May 22, 2018 = * Bugfixes: - Fixed GDPR min.js script = 2.0.14: May 22, 2018 = * Enhancements: - Added support for GDPR Personal Data Exporter - Added support for GDPR Personal Data Eraser - Added new privacy field to form builder for GDPR consent collection - Added GDPR privacy policy guide text - Added GDPR compatibility on delete user process - Added security to Restricted posts comments - Added security to custom field type `Password` - Deprecated time checking spam bot * Bugfixes: - Fixed settings tabs for PHP7.1 - Fixed issues with Profile Tabs - Fixed User Avatars - Fixed set user status on Registration process - Fixed Account Privacy tab content = 2.0.13: May 2, 2018 = * Bugfixes: - Fixed and optimized user avatars - Fixed Profile Menu on some installs - Fixed fields IDs duplicates - Fixed cache users count = 2.0.12: April 30, 2018 = * Bugfixes: - Fixed approving users with "Administrator" role - Fixed problem with URLs for upload images - Fixed not UM roles, which start from "um_" symbols - Fixed content restriction logic = 2.0.11: April 19, 2018 = * Bugfixes: - Fixed profile form JS = 2.0.10: April 17, 2018 = * Bugfixes: - Fixed Profile Form field privacy - Fixed conditional menu logic for 2 different nav menu hooks - Fixed registration form preview on wp-admin screen - Restored old CSS settings to "um_old_settings.css" - Clean user's cache = 2.0.9: April 15, 2018 = * Bugfixes: - Fixed registration form role = 2.0.8: April 13, 2018 = * Bugfixes: - Fixed license activation = 2.0.7: April 13, 2018 = * Bugfixes: - Fixed add rewrite rules for UM pages - Fixed Profile Form, Registration Form use custom settings and role - Fixed save settings security = 2.0.6: April 12, 2018 = * Bugfixes: - Fixed nav-menu content restriction issues for Administrator role = 2.0.5: April 12, 2018 = * Bugfixes: - Fixed old pre2.0 extensions notices - Fixed nav-menu content restriction issues - Fixed lost password URL in UM Login Form - Fixed restriction message on taxonomy page, which is restricted = 2.0.4: April 10, 2018 = * Enhancements: - Added activation dependencies for extensions - Added Licenses checking and changed Licenses page - Added uninstall.php file for delete permanently all UM settings - Added ability to register users without WP Registration enabled - Added visual integration WPML+UM email notifications - Added Account Upgrade email notification - Added ability to register users using role field on Registration Form - Added Account page shortcodes for each tab content - Changed UM Option View (deprecated/added options) - Changed UM Roles, optimized for WP native logic - Changed backend forms/fields to WP native styles - Changed Content Restriction feature for posts, taxonomies, menus - Changed Email Notifications settings and using templates logic - Deprecated Redux Framework - Deprecated old unusable options - Deprecated old unusable forms metadata - Deprecated old unusable member directories metadata - Deprecated old unusable user roles metadata - Optimized registration/upgrade profile process (some hook deprecated) - Optimized some code parts, deprecated some functions - Updated `FontAwesome` library - Removed addons to separate extensions - Created Plugin Updater for getting updates and license details from Shop - Increased integration abilities, added new hooks (see new Hooks Docs + PHP documentation); - Integrated plugin activation, user creation processes with multisite - Make dependencies with extensions - OOP structure without procedural methods for wp-admin side; * Bugfixes: - Fixed avatars on some SSL installs - Fixed some vulnerabilities - Fixed integrations with core/extensions - Fixed `Edit Profile` button at members directory - Fixed conditional logic PHP validation and JS validation (for IE,Edge browsers) - Fixed textdomains for translations - Fixed integration with Woocommerce, SEO Framework, WPML - Fixed navigation menu items custom fields (`Mega Menu`, etc. compatibility) - Fixed theme conflicts with UM js libraries - Fixed and optimized handlers for user permalinks - Fixed replace placeholders for users - Fixed conditional fields logic - Fixed fields sanitize for remove XSS injections = 1.3.88: July 25, 2017 = * Enhancements: - Add new filter hook `um_add_user_frontend_submitted` - Add class for member tagline in directory grid `um-member-tagline-<field key>` - Add recaptcha support and submit button id - Update extensions page layout * Bugfixes: - Fix Conditional Logic fields - Fix required field with specific roles in privacy - Remove wpautop from biography - Remove notices = 1.3.87: June 24, 2017 = * Bugfixes - Fix system info = 1.3.86: June 19, 2017 = * Enhancements: - Update readme.txt = 1.3.85: June 19, 2017 = * Enhancements: * Add new filter hook to modify the profile cancel uri for redirection * `um_edit_profile_cancel_uri` * Add new filter hook to modify the specific field type's value * `um_edit_{$type}_field_value` * Add new filter hook that modies the file name * `um_upload_file_name` * Update en_US translation files * Bugfixes: * Fix file clean up with image/file fields on profile update * Fix text domain slug for wp.org translation compatibility * Fix change password email notification * Fix double click submission in registration forms * Fix custom field role validation * Fix conditional logic 'content block' field * Fix conditional logic field operators and visibility * Fix textarea field sanitation * Fix system info false positive virus scan results * Fix field validation for minimum and maximum numeric values * Fix used custom fields visibility in form builders * Fix cache user's profile option description * Fix double click for android device * Fix png image upload with transparency * Fix extra slashes in form edit view when invalid input fields occur * Remove notices = 1.3.84: April 18, 2017 = * Enhancements: * Adds new action hooks before and after WP_User_Query. * `um_user_before_query` * `um_user_after_query` * Adds a dismiss link in locale / language translation notices * Adds correct user profile url in WPML language switcher * Adds new option to disable name fields in account page * `UM > Settings > Account > Disable First & Last Name fields` * Add new filters to modify upload base directories * `um_multisite_upload_sites_directory` * `um_multisite_upload_directory` * Adds new action hook in admin > user edit > Ultimate Member to append any customisation * `um_user_profile_section` * Adds H2 for UltimateMember section to Add/Edit User Form * Bugfixes * Fix image url cache filter * Fix PHP 7.1+ compatibility issues * Fix UTF8 encoding in form fields * Fix hide member directory option. * Fix conditional logic fields. * Fix login access settings for logged-in users. * Fix WP role synchronisation on UM role update * Fix WP authenticate filter hook * Fix radio and checbox field active state colors when disabled. * Fix Content Availability conditional fields in edit/add category screens * Remove notices = 1.3.83: February 20, 2017 = * Enhancements: * Adds user avatar's alternate text. The default text is set to `display_name` * Adds new filter hook to modif the user avatar's alternate text. * `um_avatar_image_alternate_text` * Set gravatar for newly registered users * Adds Tag archive page access settings * Bugfixes * Remove pointer cursor from field areas in profile view mode * Fix profile slug in permalinks * Fix URL field 'nofollow' issue * Fix field icons display * Fix an issue with admin roles in editing fields * Fix whitepspace issue with Email Address validation * Fix profile visibility option in member directories * Fix icon display as label in profile view * Fix PHP 7.1.1 compatibility * Fix redirection on update profile slug * Fix dynamic CSS options in member directory * Fix edit profile option by specific role * Fix Vkontakte view * Remove notices = 1.3.82: January 31, 2017 = * Enhancements: * Add filter hook to disable secure account fields * `um_account_secure_fields__enabled` * Updates ReduxFramework to version 3.6.2 * Adds a body class in profile/user page for the current loggedin user * `um-own-profile` * Bugfixes * Fix select/multi-select field options translation * Fix profiles visibility and access permissions in member directories * Fix User deletion in mobile browsers * Fix WPML & PolyLang compatibility issues * Fix field view and edit restriction * Fix author name in recent comments widget * Fix overwrite of multiple image and file uploads with the same filename * Remove notices = 1.3.81: January 19, 2017 = * Bugfixes * Fix conditional field option with 'contains' * Fix WPML compatibility with UM logout = 1.3.80: January 18, 2017 = * Bugfixes: * Fix loop email notifications on user creation in the back-end = 1.3.79: January 17, 2017 = * Enhancements: * Adds new username and string validation filter hooks: * um_validation_safe_username_regex * um_validation_safe_string_regex * Adds new filter hook to modify conditional fields * um_get_field__{$field_key} * Change max limit of users queue's count in cache * Adds current logged in users WP and Community roles in the System Info * Adds confirmation on user deletion * Bugfixes: * Fix conditional fields * Fix logout compatibility issues with WPML * Fix select option's custom callback validation * Fix translation strings of primary and secondary buttons on Login and Register forms. * Fix gender filter and results * Fix user deletion in account page for mobile browsers * Fix form rows CSS options * Fix default text autocomplete * Remove notices = 1.3.78: December 08, 2016 = * Bugfixes: * Fix menu settings compatibility issue with WP 4.7 * Fix mobile class on account delete tab heading * Fixes an issue where tagline shows the current users to all members * Fixes notice on updating WP List Table quick edit * Remove notices = 1.3.77: November 30, 2016 = * Bugfixes: * Fix set and reset password validation. * Remove notices = 1.3.76: November 30, 2016 = * Bugfixes: * Fix invalid security notice in set password. = 1.3.75: November 29, 2016 = * Bugfixes: * Fix 'Invalid user ID' on profile update = 1.3.74: November 29, 2016 = * Enhancements: * Improves clear users cache. * Removes user id from redirect URL on registration process for pending review and email activation statuses. * Bugfixes: * Fix assigning of role on registration process * Fix change email address in edit mode. * Fix change password validation. * Removes notices when role field is present in the profile form. = 1.3.73: November 17, 2016 = * Enhancements: * Adds a filter hook to modify the submitted details on registration process * `um_before_save_filter_submitted` * Adds a filter hook to disable canonical link in header * `um_allow_canonical__filter` * Adds a filter hook to modify the auto-generated email address on registration process * `um_user_register_submitted__email` * Adds filter hooks to modify locale, language file path and textdomain * `um_language_textdomain` * `um_language_locale` * `um_language_file` * Adds filter hook to modify the data of selected value: * `um_is_selected_filter_data` * Adds new select/multi-select options to retrieve options from a callback. * In the form builder, edit or add a select/multi-select field and add your callback function in `Choices callback` field to get populated. * Adds parent select field option to dynamically populate another select field. * If `Choices Callback` option is set in the field settings, the `Parent Option` triggers an Ajax request to populate the child options on `change` event. * Updates `um.min.js` file. * Updates `en_US` translation file. * Bugfixes: * Removes notices from WPCLI console. * Removes notices from edit profile mode * Removes autocomplete from search filter fields * Fix translation strings of search filters on a member directory * Fix email notifications not sending on registration process * Fix field selection with special characters on form submission * Fix assigning of role on register submission process = 1.3.72: October 10, 2016 = * Enhancements: * Improves the bulk filters, actions and redirection in `User Screens` * Adds new access options to disallow access on homepage and category pages. * Adds Textarea to show in profile tagline on Member Directory * Adds a filter hook `um_allow_frontend_image_uploads` to allow profile and cover photo uploads on front-end pages. * Adds new filter hooks to modify image field data on upload: * `um_image_handle_global__option` * `um_image_handle_{$field}__option` * Adds a new filter hook to modify the redirection of non logged in users who visit the parent user page. * `um_locate_user_profile_not_loggedin__redirect` * Improves generate dummies tool with `wp_remote_get` * Adds a new action hook for a new section in cover area: * `um_cover_area_content` * Updates the English translation .po and .mo files. * Improves the shortcode `um_show_content` to swap the `user_id` with the current profile. * Bugfixes: * Fixes a bug where multi-select field options doesn't match the user selected options that contain html entities. * Fixes a bug to display correct role slugs in radio and select fields. * Fixes a bug where reset password form is conflicting with register and login form on a page. * Fixes a bug where Users queue count in the Admin > `All Users / Users` menu doesn't update when a user account is in `pending user review` and gets deleted. * Fixes a typo in Password Reset Email option's description * Fixes a bug where conditional fields 'equals to' validation on registration process * Fixes a bug to disable the query with hiding account on member directory * Fixes a bug to retrieve specific number of members * Fixes a bug to retrieve all members with `get_members` new parameter `number` * Fixes a typo in Welcome Email template. * Fixes a bug where login form redirection is set to `wp-admin/admin-ajax.php` instead of the current page when loaded via ajax. * Fixes a bug where uninstall link doesn't load. * Fixes a bug to redirect users to correct URL after login based from login options. * Fixes a bug where non-logged in users are not able to access the profile page when `Global Site Access` is set to `Site accessible to Logged In Users`. * Fixes a bug to modify the login redirection url especially when DOING_AJAX is defined. * Fixes a bug to retrieve correct community roles per site in a Multisite Network setup. = 1.3.71: September 12, 2016 = * Enhancements: * Adds a new filter hook to modify the `cover photo` uri. * `um_user_cover_photo_uri__filter` * Bugfixes: * Fixes a bug to allow users change their password in account form * Fixes a bug to allow role validation and assigning of roles to users on registration process * Fixes a bug to avoid blank admin footer text all around WordPress = 1.3.70: September 09, 2016 = * Enhancements: * Adds a new filter hook to modify the profile `cover photo` uri. * `um_user_cover_photo_uri__filter` * Bugfixes: * Fixes a bug to allow users change their password in account form * Fixes a bug to reset passwords = 1.3.69: September 08, 2016 = * Enhancements: * Adds a system information tool for support purposes * Adds a new option to disable generating profile slugs on every load of member directory pages. * Located in UM > Settings > Advanced > Stop generating profile slugs in member directory. * This improves the performance when loading profiles in directories. It generates profile slug on Profile Update ( front and back-end ), Registration Process and viewing the Users in the back-end. * Adds new filter hook `um_activate_url` to modify the account activation url. * Adds new filter hooks to modify first and last name cases * `um_user_first_name_case` * `um_user_last_name_case` * Adds new filter hooks to modify nonces of image and file uploads * `um_file_upload_nonce` * `um_image_upload_nonce` * Improves search member filters and keyword sensitivity * Improves generation of profile slugs * Improves force capitalization of display names with dash * Improves the pagination and loading of profiles in member directory * Bugfixes: * Fixes a bug where users in member directory are missing after updating their profile * Fixes a bug to generate random email when email field is not added in a form. * Fixes a bug to show hidden members in member directory for admins * Fixes a bug to validate username length on registration process * Fixes a bug to display profile name in dynamic menu and profile page title * Fixes a bug where frequent security notices show on registration process * Fixes a bug to assign correct role to a user on registration process * Fixes a bug to display correct roles in radio and dropdown fields * Fixes a bug to validate the reset password * Fixes a bug to change the assign of role in navigation menu items * Fixes a bug to select radio field in profile form * Fixes a bug to allow frontpage and posts page to handle custom access settings * Fixes a bug where profile role field's conditional logic doesn't show/hide the second field. * Fixes a bug to show 'Last Login' field in profile edit and view mode. * Fixes a bug to sync roles with users in Edit Roles. * Fixes a bug to disable/enable UM profile cache * Fixes a bug to disable biography field's character limit when added in form = 1.3.68: August 02, 2016 = * Fixed: radio field in account page = 1.3.67: August 02, 2016 = * New: allow non-editable fields in registration form * Fixed: member directory mobile pagination * Fixed: biography field validation in profile header and forms * Fixed: remove override 'birth date' label * Fixed: html support in biography field * Fixed: select options search * Fixed: select field's search query * Fixed: search filters and multi-select fields * Fixed: select, radio and checkbox field options * Fixed: multiple select in UM settings * Fixed: member directory's pagination links * Fixed: remove nonce and http referer from submitted user details * Fixed: disallow direct access link to posts with enabled category access restriction * Added: new filter hook: `um_get_default_cover_uri_filter` * Added: new filter hook: `um_register_allow_nonce_verification` * Added: new filter hook: `um_get_option_filter__{$option_id}` * Added: new filter hook: ` um_profile_{$key}__filter` * Added: new filter hook: `um_profile_{$key}_empty__filter` * Added: new filter hook `um_enable_ajax_urls` * Added: new filter hook `um_field_checkbox_item_title` = 1.3.66: July 14, 2016 = * Tweak: update translation strings and English translation file. * Fixed: alphabetic and lowercase validations * Fixed: checkbox and radio label encoding * Fixed: user_login field validation type * Fixed: registration form process * Fixed: remove comments with hidden/private posts from comment tab = 1.3.65: July 06, 2016 = * Tweak: update ReduxFramework to version 3.6.0.1 * Added: new action hook 'um_registration_after_auto_login' * Added: new option for Network Permalink Structure * Added: an account option to require first and last name * Fixed: account deletion and password confirmation * Fixed: registration form submission process * Fixed: access settings in home page and posts conflict * Fixed: encoding non UTF8 strings = 1.3.64: June 29, 2016 = * Fixed: edit profile permission = 1.3.63: June 28, 2016 = * Fixed: admin navigation * Fixed: profile access and redirection = 1.3.62: June 27, 2016 = * Fixed: access settings and redirection for logged out users * Fixed: global access settings * Fixed: remove notice in permalink = 1.3.61: June 24, 2016 = * Fixed: edit profile url in multi-site setup * Fixed: global access settings = 1.3.60: June 23, 2016 = * Fixed: change password * Fixed: menu settings and roles * Fixed: cropper issue with Avada theme * Fixed: image cropper and modal * Fixed: nonce in registration forms * Fixed: user redirection for non-loggedin users * Fixed: global access setting = 1.3.59: June 17, 2016 = * Added: filter 'um_register_hidden_role_field' * Added: filters and action hooks in form post * Added: cache time filter in avatar url * Fixed: Nonces added to file uploads * Fixed: remove notices * Fixed: upload image cropper * Fixed: select field multiple select * Fixed: changing community role by admin * Fixed: current url method in multisite setup * Fixed: access settings = 1.3.58: June 09, 2016 = * Fixed: change password * Fixed: select field overlay = 1.3.57: June 09, 2016 = * Fixed: admin access restriction = 1.3.56: June 09, 2016 = * Fixed: query of pages = 1.3.55: June 09, 2016 = * Fixed: select fields styles * Fixed: select fields with accented characters * Fixed: select fields with accented text values * Fixed: select fields in overlay * Fixed: admin front-end access restriction * Fixed: pages query = 1.3.54: June 02, 2016 = * Fixed: remove quick edit from Built-in roles row actions * Fixed: remove notices * Fixed: dropdown/select fields * Fixed: upload file extension's case sensitive issue * Fixed: reset and change password = 1.3.53: June 01, 2016 = * New: generate dummy users tool * Added: filter 'um_submit_form_error' for custom error messages * Tweak: update compressed CSS * Tweak: update select2.js to version 4.0.2 * Fixed: gravatar and transfer tool * Fixed: permalink base for username * Fixed: saving account fields * Fixed: remove notice * Fixed: upload form error logging * Fixed: cache option * Fixed: edit profile url * Fixed: login redirection * Fixed: remove account information from welcome email * Fixed: form error with users tags * Fixed: select fields with accented characters * Fixed: image upload = 1.3.52: May 14, 2016 = * Added: 'wp_authenticate_username_password_before' action hook * Tweak: remove access settings in media screens * Fixed: convert tags format * Fixed: ReduxFramework notice * Fixed: remove PHP notice = 1.3.51: May 10, 2016 = * Added: 'um_form_fields_textarea_settings' filter * Added: reset password limit options * Added: option to force display name to be capitlized * Fixed: remove notices * Fixed: redirect url on login * Fixed: optimize query and object caching * Fixed: profile photo as required field * Fixed: admin access in front-end login * Fixed: typos in tooltips * Fixed: embedding video fields * Fixed: Flush rewrite rules = 1.3.50: April 21, 2016 = * Fixed: menu incompatibility issue * Fixed: username validation * Fixed: admin css conflict * Fixed: display name capitalization * Fixed: search member filter and fields * Fixed: member directory big SELECT query * Added: action hook 'um_access_post_type' & 'um_access_post_type_{current_page_type}' for current page type in access settings = 1.3.49: April 14, 2016 = * Fixed: remove core notices from ajax requests * Fixed: upload form and media path = 1.3.48: April 11, 2016 = * New: advanced option to disable profile object caching * Added: ssl media uri function * Added: first and last name initial as meta key * Fixed: order by random and pagination * Fixed: user sort by random * Fixed: status message encoding * Fixed: image upload and file name * Fixed: user login with other provider * Fixed: translation strings * Fixed: dependencies fatal errors * Fixed: remove notices = 1.3.47: April 6, 2016 = * Fixed: Fatal errors with language filter file = 1.3.46: April 6, 2016 = * Fixed: Search widget fatal error * Fixed: image jpeg upload sizes = 1.3.45: April 6, 2016 = * New: support for wordfence and limit login * New: search widget * New: secondary email address * Added: hook to password reset form fields * Added: privacy options for profile menu tabs * Added: option to allow primary email editable in profile view * Added: member directory sort randomly * Fixed: user page redirection * Fixed: admin script error * Fixed: invalid image path * Fixed: upload image png with transparency * Fixed: permalink basename fallback * Fixed: casting variable and add new filter * Fixed: remove notices * Fixed: search users by tag * Fixed: force UT8 encoding option * Fixed: email content type * Fixed: WPML compatibility * Fixed: permalink base name format and redirect loop in profile page * Fixed: form labels textdomain * Fixed: edit profile redirect * Tweak: accept period in profile url = 1.3.44: March 11, 2016 = * New: an option to force Strings to use UTF-8 encoding * New: an option to change Gravatar default image * New: South Sudan to the list of countries. * Fixed: update profile edit * Fixed: remove feed from content restriction * Fixed: search username query * Fixed: support for server query string data after user login * Fixed: matching fields values * Fixed: email template path * Fixed: shortcode within [um_show_content] shortcode * Tweak: remove notices = 1.3.43: March 5, 2016 = * Fixed: redirect URL after login * Fixed: security check in registration form * Fixed: email template path string * Fixed: member directory query = 1.3.42: March 3, 2016 = * Fixed: email template and localization * Fixed: redirect URL = 1.3.41: March 3, 2016 = * Fixed: Registration form redirect url = 1.3.40: March 3, 2016 = * New: filter `um_<field_type>_form_show_field` for display field * New: shortcode: show custom content to specific role [um_show_content roles='member'][/um_show_content] * New: 'not' attribute to [um_show_content not='member,contributor'][/um_show_content] shortcode * Tweak: update masonry script * Tweak: sql concatenate with prepare statement * Fixed: remove notices * Fixed: missing mCSB_buttons.png * Fixed: set Gravatar default image as UM default image * Fixed: fix default gravatar image * Fixed: select2 multi dropdown for wc orders * Fixed: show admin bar option * Fixed: session issue with logout * Fixed: register using email address if it exists * Fixed: duplicate full_name permalinks * Fixed: duplicate profile * Fixed: show admin bar for non-logged in users * Fixed: honorifics in full name * Fixed: unsynced wp role * Fixed: display wp user role filters * Fixed: select and radio invalid value * Fixed: email template path * Fixed: user profile url with single dash in the last name * Fixed: function to check meta value existence by meta key * Fixed: um-admin-dashboard warnings * Fixed: community role field in profile edit screen * Fixed: mismatched roles * Fixed: admin access in profiles * Fixed: allow multiple member directory shortcode in a page * Fixed: datepicker for ios and safari * Fixed: adding of members in wp-admin * Fixed: Fix redirection and XSS issue in login form = 1.3.39: February 24, 2016 = * New: add gravatar transfer tool * New: show users with gravatar photo in member directory * New: add upgrade class for data migration * Tweak: Set last login for new users to show in member directory * Tweak: validate roles for forms without fields * Tweak: cropper js update * Tweak: update minified script * Tweak: tooltip and comment * Fixed: member search query * Fixed: Registration process with pending and show message enabled * Fixed: Fix form security validation * Fixed: email content type, template and localization * Fixed: remove php notices * Fixed: custom columns for roles * Fixed: admin bar visibility per user role * Fixed: community role editing = 1.3.38: February 19, 2016 = * Tweak: remove username validation * Tweak: update minified scripts * Fixed: Fix email and user submitted data encoding * Fixed: role validation on register submission * Fixed: form role and validation * Fixed: search form pagination visibility = 1.3.37: February 17, 2016 = * New: Add password confirmation validation * New: Add VK url validation * New: Add Vkontakte as predefined url field * New: Add additional file types * New: Add file size limit label in image field * New: Added password reset limit * New: Allow redirect_to param after registration * New: Indonesian language support added * New: Add bio characters limit * Tweak: Use native WP masonry script instead of duplicating it * Tweak: Add image upload notice * Tweak: Add option to allow users to hide profiles from member page * Tweak: Add filters to modify output field * Tweak: Add filter hook for email template path * Tweak: Tweak upload form styles * Tweak: Remove masonry from core and gulp * Tweak: Add admin assets and apply minification * Tweak: Update pickadate assets * Tweak: Allowing usertags in search filters * Tweak: Allow members template to be customized/overridden * Tweak: Option to login user after clicking the activation link * Tweak: Remove bio count strings * Fixed: bio limit javascript error * Fixed: ssl checker for load balancers * Fixed: redirect loop with wpml permalink * Fixed: WPML permalink and form compatibility * Fixed: blocked words * Fixed: searching with space * Fixed: change password * Fixed: members grid override * Fixed: tipsy.js error * Fixed: Plugin conflict causing account page displaying wrong info * Fixed: email locale tempalte path * Fixed: invalid role * Fixed: validation for change password * Fixed: unchecked access roles * Fixed: telno input styles * Fixed: escape display name in title attributes * Fixed: datepicker css issue with some themes * Fixed: make sure the hash parameter is a string * Fixed: loading core assets * Fixed: title tags not updated * Fixed: empty uneditable fields * Fixed: account deletion on one submission * Fixed: Fixed indentation * Fixed: user_login fallbacks and remove email address * Fixed: password changed email template = 1.3.36: January 6, 2016 = * New: added in-page content restriction to protect content for logged-in or logged out users * New: added community role field to user creation in backend * New: added community role field to user editing in backend * New: show specific users in members directory * New: added a new field type: Number * New: added filter hooks to specific profile fields * New: added custom admin bulk actions support * New: added usermeta support to content locking feature in-page * Tweak: several tweaks in core to be more WordPress native * Tweak: added fallback for page setup selections * Tweak: automatic clickable links in profile header bio * Tweak: trim long field labels in backend fields modal * Fixed: profile page SEO title * Fixed: multi-site redirect support * Fixed: activation hash comparison * Fixed: page setup fallback field * Fixed: prevents php warnings and notices * Fixed: WP-CLI and cronjobs issues * Fixed: category posts restriction and redirection * Fixed: category access settings * Fixed: activation link = 1.3.35: December 15, 2015 = * Fixed: registration/login issues resolved = 1.3.34: December 15, 2015 = * New: new privacy option for fields: allow profile owner & specific roles to view the field * Fixed: wrong php syntax in admin notice = 1.3.33: December 15, 2015 = * Fixed: Member search on homepage * Fixed: emoticons support * Fixed: redux notices, css styles in admin * Fixed: users not being deleted = 1.3.32: December 10, 2015 = * Fixed: array format and notices * Fixed: users search, delete confirmation and role filter * Fixed: unique key field validation = 1.3.31: December 9, 2015 = * Fixed: Add slash in base url filter for multisite * Fixed: manage user roles, status and filters * Fixed: Enable WPML support to all UM url/links * Fixed: Sanitize referers and printing notices in admin screens = 1.3.30: December 3, 2015 = * New: added Simplified Chinese language support * Tweak: added many new filters (for developers) * Fixed: Display name update in profile * Fixed: Photo upload unique IDs * Fixed: Remove duplicated method um_convert_tags = 1.3.29: October 31, 2015 = * New: added new documentation links to plugin files * New: added filters to control profile photo menu (for developers) * Fixed: added security patch to remove decrypted passwords from database * Fixed: bug with blocked words during registration * Fixed: some localization strings * Fixed: php warnings/bugs on specific installs = 1.3.28: October 13, 2015 = * Fixed: Bug with plugin folder structure = 1.3.27: October 13, 2015 = * Fixed: Role name display in Users dashboard = 1.3.26: September 25, 2015 = * New: added Greek language support * Tweak: added custom class to every user meta in member directory * Tweak: added option to stop flushing rewrite rules every load (performance tweak) * Fixed: WPML issue on multisite install * Fixed: Removed redux menu from tools * Fixed: fix for wp_authenticate_username_password() * Fixed: searching users by e-mail address * Fixed: conflict with sites with thousands of pages = 1.3.25: September 7, 2015 = * Fixed: 404 error on UM pages = 1.3.24: September 6, 2015 = * Tweak: saved some database queries * Tweak: plugin not compatible with cache plugins out of the box - needs to exclude dynamic urls from cache * Tweak: added more development filters in backend = 1.3.23: September 2, 2015 = * Fixed: PHP strstr() notice on profile = 1.3.22: September 2, 2015 = * Fixed: compatibility bug with older PHP versions = 1.3.21: September 2, 2015 = * Tweak: added security by sanitizing file/image uploads * Fixed: issue with account page > notifications tab * Fixed: image upload path in email notification * Fixed: php issue with displaying name * Fixed: missing localisation strings * Fixed: couple of php notices = 1.3.20: August 28, 2015 = * New: added security measure for profile photo uploads * New: added filter to hook in registration details sent in email notification * New: added core pages filter to allow you change pages of extensions within plugin settings (e.g. activity) * Fixed: multi-select field filtering bug * Fixed: strip slashes from field names in fields modal * Fixed: show drag and drop footer content only in the drag and drop form builder page * Fixed: profile photo crop/upload issue * Fixed: category/post specific restriction conflict * Fixed: display UM classes only in UM pages * Fixed: minor code improvements = 1.3.19: August 20, 2015 = * Fixed: please update - profile issue = 1.3.18: August 20, 2015 = * New: filter for comment types tab in profile * New: jQuery.scrollto script added (for developers and extensions support) * Fixed: XSS vulnerability in text input * Fixed: user goes to profile about tab after editing profile = 1.3.17: August 13, 2015 = * New: added Brazilian Portuguese language support * Tweak: added support for upcoming social activity extension = 1.3.16: August 11, 2015 = * New: added option to restrict categories in addition to per post content restriction * New: added support to use dynamic user/profile ID in shortcode field e.g. [your-shortcode user_id={profile_id}] * New: added security feature to disable admin logging via frontend (optional) * New: added filter to um_get_core_page() function (for developers) * Tweak: removed delay from tooltips * Fixed: conflict with Podcast feed = 1.3.15: August 4, 2015 = * Fixed: issue with logout from adminbar = 1.3.14: August 4, 2015 = * New: added last login date support * New: show user's last login in profile * New: added sorting members by last login date * New: added option to re-assign core pages in plugin settings * Fixed: issue with multi-select required field * Fixed: URL validation for custom fields * Fixed: backend user filtering by non-english role * Fixed: RTL css bugs = 1.3.13: July 22, 2015 = * Fixed: Woocommerce manual order dropdown conflict = 1.3.12: July 22, 2015 = * New: ability to delete user cache from plugin dashboard * New: function is_ultimatemember() checks if user is on UM page (developers) * New: option to disallow editing email in account page * New: added Spanish (Mexico) language support * Fixed: bug with profile viewing and user roles * Fixed: Woocommerce dropdown bugs/conflicts * Fixed: ipad/tablet css fixes for profile columns * Fixed: deleting users delete their content = 1.3.11: July 8, 2015 = * Fixed: Redux errors and popups in backend = 1.3.1: July 7, 2015 = * Fixed: major issue with showing HTML in profiles = 1.3.0: July 7, 2015 = * New: easily sync UM roles with WP roles with role settings * New: first steps towards WPML compatibility * New: option to show member results only If user has searched * New: add .um-err class to UM form if the form contains errors * New: updated redux framework to latest version * Fixed: feed issue with private / access locked posts = 1.2.997: June 21, 2015 = * New: added support for Farsi / Romanian language * Tweak: adapted core community roles to prevent conflicts * Fixed: bug with search results pagination * Fixed: issue with panic key usage and wp-admin screen * Fixed: bug with custom field validation action = 1.2.996: June 11, 2015 = * Fixed: php notice causing errors to appear in both frontend and backend = 1.2.995: June 11, 2015 = * New: added required support for WooCommerce extension * Tweak: added option to fix conflicts of user profile links using different server method to get current url * Fixed: security fix for redux framework added * Fixed: button appearance on tablets * Fixed: member search by display name = 1.2.994: June 6, 2015 = * Tweak: added a filter hook to change priority of enqueued styles/scripts * Fixed: UM forms and elements not appearing in IE * Fixed: Skype field output * Fixed: conflict with libraries using Mobile Detect * Fixed: issue with WP locale (using get_locale() now instead) = 1.2.993: May 29, 2015 = * Fixed: correction to last update * Fixed: Private messages extension bug = 1.2.99: May 29, 2015 = * New: added Czech language support * Fixed: WooCommerce dropdown issues and bugs in backend = 1.2.98: May 18, 2015 = * New: added Google map field * New: added Vimeo video field * New: added YouTube video field * New: added SoundCloud track field * New: added Hebrew language support * Tweak: do not show captcha response in submitted registration details * Fixed: profile photo upload issue on profile view mode * Fixed: user search in backend/frontend * Fixed: UM login check * Fixed: admin settings css issue on mobile * Fixed: cache variable undefined issue = 1.2.97: May 13, 2015 = * Fixed: issue with image upload fields * Fixed: date localization resolved * Fixed: issue with image upload during registration * Fixed: JS issues for PM extension = 1.2.96: May 12, 2015 = * New: hooks and compatibility with Private Messages extension * Fixed: bug with empty password on welcome e-mail * Fixed: bug with member search using default permalinks = 1.2.95: May 9, 2015 = * New: RESTful API methods update.user, get.stats, and delete.user * New: added Danish (Dansk) support * New: added Swedish (Svenska) support * Tweak: minor account and logout redirection tweaks * Fixed: issue with changing user role * Fixed: bug with login form validation * Fixed: issue with biography field and html = 1.2.94: May 6, 2015 = * Fixed: bug with activation e-mails * Fixed: bug stopping password reset * Fixed: bug with changing user role and status in backend = 1.2.93: May 5, 2015 = * New: user profiles are cached to speed up load time * New: emoji support added to bio / user descriptions * Fixed: issues with bio field HTML * Fixed: WP-admin PHP warning * Fixed: bug with localization of en_US.po file = 1.2.92: May 2, 2015 = * New: Important: Introduces the Ultimate Member RESTful API * Tweak: improved um_user_ip() function * Fixed: issue with invalid html on profile photo and cover photo = 1.2.91: April 30, 2015 = * New: added custom field validation support via hooks um_custom_field_validation_{$hook} * Fixed: important bug with profile menu tabs / system = 1.2.9: April 29, 2015 = * New: display pending users count in backend * Tweak: improved user deletion process from backend * Tweak: tweaked filter for register/login buttons * Tweak: disabled registration timebot for admins * Fixed: wp-load.php path in image and file upload scripts * Fixed: RTL compatibility bugs * Fixed: bug with registration and role field * Fixed: bug with edit profile and biography length in header = 1.2.8: April 25, 2015 = * Fixed: Important WP 4.2 conflict resolved: filtering users in backend = 1.2.7: April 25, 2015 = * Tweak: Compatible with WordPress 4.2 * Tweak: general code tweaks and improvements * Tweak: new action hook when user is deleted * Tweak: new action/filter hooks for profiles (developers) * Tweak: new filter hook for profile privacy option * Fixed: permalink issues = 1.2.6: April 22, 2015 = * Fixed: password reset security fix ( do not reveal emails ) * Fixed: bug with custom profile templates * Fixed: display name in member directories * Fixed: URL fields display in member directory * Fixed: many bugs with previous version = 1.2.5: April 21, 2015 = * Fixed: e-mail activation bugs = 1.2.4: April 20, 2015 = * New: added Russian language support * Fixed: Security patch related to add_query_arg() * Fixed: bug with approval HTML e-mail = 1.2.3: April 16, 2015 = * Fixed: major bug with admin capability / editing user profiles via frontend = 1.2.2: April 15, 2015 = * New: added caching to user roles and user permissions to save queries * New: added user switching feature to allow super admins to sign in as another user easily (without password) * New: added new modal css/js for future support * New: added custom scrollbar support for future development use * Tweak: added form elements focus css * Fixed: bug with required radio button * Fixed: prevent access for backend login/register/lost password for a logged in user = 1.1.6: April 7, 2015 = * Fixed: major bug with datepicker (Update recommended) = 1.1.5: April 4, 2015 = * New: new action hook that runs when user role is changed um_member_role_upgrade * Fixed: bug/compatibility issue with caching UM roles data * Fixed: bug with changing role settings/permissions * Fixed: bug with setting e-mail activation redirect URL = 1.1.4: April 2, 2015 = * Fixed: Major bug with dropdown and date fields (Update recommended) * Fixed: hard-coded translation issues = 1.1.3: April 1, 2015 = * New: added option to manage if access control widgets can be edited by admins only * Tweak: update to last security patch - deletes user who try to get unauthorized access = 1.1.2: March 30, 2015 = * Fixed: Important security patch - please update * Fixed: conflict with The Events Calendar plugin * Fixed: bug with edit profile link = 1.1.1: March 29, 2015 = * Fixed: bug where you user could use an already existing e-mail in account page * Fixed: bug with special characaters in username * Fixed: bug with showing draft posts in user profile = 1.1.0: March 27, 2015 = * New: added multi language support to assign different languages to different forms (beta feature) * New: added RTL support (beta, still partial) * New: added a dashboard widget to view latest blog posts from the plugin * Tweak: changed manage_options permission to edit_users on some admin actions * Fixed: corrected all active color references in the css * Fixed: bug with user_row_actions filter * Fixed: do not store user_pass in submitted metakey during registration = 1.0.96: March 25, 2015 = * New: Added Arabic language (ar) support * Fixed: Date fields not working in Safari * Fixed: issue with HTML e-mails * Fixed: issue with showing sidebar logout widget on bbpress forums = 1.0.95: March 24, 2015 = * Tweak: added more hooks to mail function to allow for sending custom e-mails * Fixed: issue with content lock settings in backend appearing for non-admins * Fixed: issue with form errors handling = 1.0.94: March 23, 2015 = * Fixed: bug with member directory search * Fixed: bug with custom role homepage = 1.0.93: March 22, 2015 = * Fixed: bug with showing register and login forms on same page = 1.0.92: March 20, 2015 = * New: added option to customize redirection URL after e-mail activation * Fixed: issue with hardcoded ajax/upload URLs - they are now localized * Fixed: issue with admin notification for a deleted account * Fixed: admin notifications are in plain text format = 1.0.91: March 20, 2015 = * Tweak: featured image in user posts goes to post link * Fixed: solved a bug with e-mail validation = 1.0.90: March 19, 2015 = * Tweak: minor admin css changes * Tweak: error message for frontend upload with theme/plugin conflicts = 1.0.89: March 18, 2015 = * Tweak: Major Performance Improvements (beta) = 1.0.88: March 18, 2015 = * Fixed: bug with viewing member profiles = 1.0.87: March 17, 2015 = * Tweak: profile edit form tweaked to be processed for profile edit only. allows you to have custom (not nested) valid forms in other profile tabs = 1.0.86: March 16, 2015 = * Tweak: UM admins can see unapproved users on front-end members directory * Fixed: few misspelling errors * Fixed: bug with custom profile templates (showing blank) resolved = 1.0.85: March 14, 2015 = * New: added option to show user social links in profile header (optional) * New: added option to display post featured image in profile "posts" tab * Tweak: improved error reporting for theme conflicts on photo upload * Fixed: issue with comments tab on profile = 1.0.84: March 13, 2015 = * New: adds automatic body class to UM core pages automatically * Fixed: important jQuery issue * Fixed: upload security issue - extension error was empty = 1.0.83: March 12, 2015 = * New: added a logout template If user is already logged in (customizable) * New: strong password formula not required when resetting password (optional) * Fixed: jQuery issue with live() method - Thanks to Jim Wetton = 1.0.82: March 11, 2015 = * Fixed: issue with saving user account general tab = 1.0.81: March 11, 2015 = * New: official support for plugin extensions released = 1.0.80: March 10, 2015 = * Tweak: added licensing support to plugin core * Fixed: issue with account form = 1.0.79: March 10, 2015 = * Tweak: Redux up to date * Fixed: security issue related to deleting a temp file via ajax * Fixed: bug with a php warning on undefined field type Credits to "James Golovich http://www.pritect.net" for the security checks = 1.0.78: March 10, 2015 = * Fixed: important correction from previous version = 1.0.77: March 10, 2015 = * New: integration with comments to show user profile link instead of user link (not compatible with all themes) * New: option to control maximum size of uploaded profile photo * New: option to control maximum size of uploaded cover photo * Tweak: URL fields will are now treated as hyperlinks * Fixed: bug with member directory privacy option * Fixed: bug with using # as a character in file or image upload = 1.0.76: March 7, 2015 = * New: added {user_avatar_small} tag to display user photo in menu (requires extra css work) * Tweak: Removed !important css rules from colors and backgrounds * Fixed: issue with content block field = 1.0.75: March 5, 2015 = * New: improved & modern html e-mail templates * New: addon to transfer BuddyPress profile photos to Ultimate Member (user request) * New: added option to turn off time bot feature (fixes conflict with plugins) * New: added built-in addons support * Tweak: improved backend design and css = 1.0.74: March 4, 2015 = * Fixed: bug with numeric validation for a field * Fixed: bug with conditional logic rules with checkbox = 1.0.73: March 3, 2015 = * Tweak: general code improvements = 1.0.72: March 2, 2015 = * Fixed: bug with e-mail activation since last update = 1.0.71: March 2, 2015 = * Fixed: issue with password reset link * Fixed: issue with social links showing but user did not fill them = 1.0.70: March 2, 2015 = * Tweak: added a filter hook to control profile photo url * Tweak: harder random generated passwords by making the length 40 characters for a key/password * Tweak: added option to enable/disable custom css tab (off by default) * Tweak: changed rewrite rules to be compatible with some themes and plugins * Fixed: bug with Role field not showing error when required and left empty * Fixed: bug with showing incorrect age when users did not fill their age * Fixed: issue with template name for custom profile templates = 1.0.69: February 28, 2015 = * Tweak: better WP logout handling * Tweak: new action and filter hooks added = 1.0.68: February 27, 2015 = * New: added support for mp3 as allowed filetype / upload * Fixed: bug with profile privacy option (on non-english sites) * Fixed: uncommon php warning caused by um_get_user_avatar_url() function * Fixed: new translation corrections = 1.0.67: February 26, 2015 = * New: Improved the default HTML e-mail templates design * New: added a bunch of action hooks to account tabs and content * Tweak: added a few template tags to use in email: {site_url}, {user_account_link} * Fixed: issue with making a checkbox required prior to registering * Fixed: issue with comments showing in posts tab under profile * Fixed: issue with plugin uninstallation link not showing in multisite = 1.0.66: February 25, 2015 = * New: added option to send e-mails as HTML * New: added default HTML templates for e-mail notifications = 1.0.65: February 24, 2015 = * New: added option to customize register form secondary button URL * New: added option to customize login form secondary button URL * Fixed: issue with global access lock when homepage is excluded * Fixed: issue with custom account tabs * Fixed: minor css conflict with profile photo = 1.0.64: February 22, 2015 = * Tweak: updated language files on server * Tweak: modified account page hooks to accept custom hooks easily * Fixed: important css issues with safari browser * Fixed: language notice will no longer show on (English UK/Other) wordpress sites = 1.0.63: February 21, 2015 = * Tweak: minor changes to dashboard widgets * Tweak: cleaned dashboard js * Tweak: a few action hooks refined * Tweak: added filters to registration form buttons * Fixed: issue with delete account feature = 1.0.62: February 20, 2015 = * New: added Polish (Polski) language * New: added option to disable Name fields from Account page * New: added support for custom profile templates selectable from template dropdown * Tweak: remove rows with no fields from profile view * Tweak: remove empty rows/row headings from profile * Fixed: removed plain password user meta key from all users * Fixed: issue with image upload when form has errors * Fixed: resolved issue with disabling profile menu / tabs = 1.0.61: February 20, 2015 = * Tweak: Upload button text is made translatable * Fixed: conflicts with Divi theme * Fixed: issue with Roles dropdown field = 1.0.60: February 18, 2015 = * Tweak: added a protection to prevent wp-admin lockout for admin users * Tweak: new hook for account page form submitting (for developers) * Tweak: added a few missing translations * Fixed: issue with roles dropdown not saving its state * Fixed: issue with roles dropdown when made required in form * Fixed: issue with tabbing on form fields = 1.0.59: February 17, 2015 = * New added Finnish language (fi_FI) * Tweak: show e-mail column in users backend * Fixed: issue with showing members directory on frontpage = 1.0.58: February 16, 2015 = * Fixed: display name as search field in member directory * Fixed: translation issues in backend settings * Fixed: issue with non-english letters in display names * Fixed: bug with multiple default values for multi-select and checkbox fields * Fixed: bug with multiple conditional logic based on different checkbox values = 1.0.57: February 16, 2015 = * Tweak: Italian language up-to-date * Fixed: issue with registration where it can trigger a php warning * Fixed: some translation issues = 1.0.56: February 15, 2015 = * Fixed: issue with permalink changes = 1.0.55: February 15, 2015 = * New: added Dutch (Nederlands) language * New: show user registration/joined date in profile and/or member directory * New: added facebook meta tags on user profiles (You have to disable facebook og tags in your SEO plugin) * Tweak: sort users by default in "backend" by newest users first * Tweak: added a close icon to profile and account notices * Fixed: changed all time features to reflect WordPress installation time * Fixed: timestamp on registration info shows form submission date/day * Fixed: updated language files and new translation words = 1.0.54: February 15, 2015 = * New: added a remember me checkbox to login forms by default (optional) * Tweak: keep your users signed in even if they close browser (optional) * Tweak: minor css changes * Fixed: bug with double redirects (causing incorrect loop) after login on some sites = 1.0.53: February 14, 2015 = * Tweak: when deleting users in backend, users will be deleted upon confirmation only * Tweak: deleted users content is assigned to admin by default (to avoid losing content) * Fixed: include plugin js and css on specific pages only = 1.0.52: February 13, 2015 = * Fixed: issue with users backend update recommended * Fixed: preview registration info in users backend = 1.0.51: February 13, 2015 = * New: show registration info for each user in users backend * New: show user stats at a glance in plugin dashboard * New: sort users in backend by account status * New: sort users in backend by user role * New: added option to disable plugin css and js on homepage * Tweak: updated language and translations files * Fixed: issue with changing user role from Profile page * Fixed: php bug with user description that has links * Fixed: small issue with rewrite rules = 1.0.50: February 12, 2015 = * New: added option to include plugin js/css only on specific pages (user suggestion) * Tweak: image and file uploads tweaked * Fixed: date and time picker localization * Fixed: bug with date and time fields * Fixed: issue with searching members with default permalinks used * Fixed: minor css fixes = 1.0.49: February 10, 2015 = * New: added option to disable UM menu (fixes conflict with mega-menu on some themes/plugins) * New: added option to disable strong password in Account / Password change tab * New: added a notice to Account page when user updates account * Fixed: issue with global access settings = 1.0.48: February 10, 2015 = * New: added translation downloader/updater in plugin dashboard * New: added admin notice when language is updated or downloaded * Tweak: redirect to login page by default if content is restricted * Tweak: redirect back to the protected content after successful login * Tweak: small modifications to plugin admin css * Fixed: issue with registration form per role not appearing (when logged in) * Fixed: image and file uploads strip illegal characters from file name * Fixed: small issue with mandrill plugin * Fixed: bug with role creation that have used slugs that exist in database = 1.0.47: February 9, 2015 = * New: A more native dashboard for Ultimate Member * New: view your temp uploads directory size and purge it from dashboard * Fixed: user uploads bug with handling photo uploads at once * Fixed: issue with using UM role as search filter in directory * Fixed: a little icon issue with directory backend * Fixed: localized a few words from predefined fields = 1.0.46: February 8, 2015 = (Update Recommended) * New: added Spanish language pack * Fixed: important JS conflict in admin when UM is active * Fixed: profile permalink issue for e-mail usernames * Fixed: installation issue on some WP databases = 1.0.45: February 8, 2015 = * Fixed: Multisite bug php Fatal error: call to undefined function wpmu_delete_user() = 1.0.44: February 8, 2015 = * Tweak: improved performance: unused user photos are deleted when user upload * Tweak: cleaned up dashboard code * Tweak: updated current translations * Fixed: display name field should be updated with wp_update_user and not in usermeta * Fixed: admin js and css should are loaded in UM backend only = 1.0.43: February 7, 2015 = * New: added German (Deutsch) language support * Tweak: updated all translation packs * Fixed: profile social links in member directory * Fixed: prevent storing user_pass in usermeta table * Fixed: php error triggered from um-access.php file = 1.0.42: February 6, 2015 = * New: added option to block specific e-mail domains from registering * New: 2 new social profile fields: YouTube and SoundCloud * New: added option to show field icons in profile header * New: import/export plugin settings feature added to the backend * New: added option to duplicate forms in backend with one click * Tweak: cleaned up installation code * Tweak: minor css modifications * Fixed: adding HTML and iframe content to html-allowed textarea fields * Fixed: upload folders permissions with some configurations and servers * Fixed: live preview of profile forms in backend = 1.0.41: February 5, 2015 = * New: added access control settings to custom post types, you can have custom access settings applied to your custom post types now * New: divider and spacing fields fully support conditional logic * Tweak: Turkish language completed * Tweak: updated some translations * Fixed: a couple of PHP warnings and errors have been resolved * Fixed: conflict with MailPoet plugin has been resolved = 1.0.40: February 4, 2015 = * Tweak: line-breaks and automatic urls are now working for textarea fields * Tweak: updated ReduxFramework to latest version * Tweak: backend sentences are now properly localized / updated translation * Fixed: important issue with field positions in backend form builder * Fixed: issue with usernames that have spaces resolved * Fixed: conflict with page title in bbpress forums resolved * Fixed: issue with escaping the apostrophes resolved * Fixed: issue with loading more posts/comments in profile resolved = 1.0.39: February 3, 2015 = * New: added support for child templates to allow customizing the templates of plugin via theme or child theme. [See how](https://ultimatemember.com/codex/overriding-default-ultimate-member-profile-templates/) * New: added French language pack * Tweak: improved localization notification in backend * Tweak: improved template loading * Fixed: a minor css issue with multi-select field placeholder = 1.0.38: February 3, 2015 = * New: added a built-in automatic language pack downloader * New: plugin now available in Italian, Turkish (40%) * Tweak: If you need the plugin on available language pack you can download it automatically via the dashboard * Tweak: when user updates account page the page will refresh and stay in the same tab * Fixed: possible permalinks conflict with some wordpress themes = 1.0.37: February 2, 2015 = * Tweak: automatic line breaks in user description field * Tweak: added gravatar rating parameter to the gravatar function * Fixed: permalinks issue with customized slug for user and account pages = 1.0.36: February 1, 2015 = * New: URLs in user description are automatically converted to hyperlinks * New: added option to redirect author archive to their UM profile automatically * New: added option to show asterisk next to required fields (optional) * New: Turkish language file (40% completed) * Tweak: updated language file with missing sentences and words * Tweak: auto redirect user/ base to user profile (e.g. user/username/) * Fixed: issue with wrong comments count on user profile menu * Fixed: issue with display name tags in nav menu * Fixed: issue with conditional logic for select/multi-select fields * Fixed: issue with conditional logic for content blocks and shortcode fields * Fixed: conflict with Pods wordpress plugin = 1.0.35: January 31, 2015 = * Tweak: exif module is not required anymore and does not stop photo uploads (exif is highly recommended) * Fixed: issue with changing a WP administrator role to a community administrator role * Fixed: issue with plugin uploads directory on some multisite installations * Fixed: conflict with default profile tab and editing profile * Fixed: minor css conflict on account page with some themes when viewed on tablets = 1.0.34: January 31, 2015 = * New: added option to set a default cover photo * New: added option to hide restricted content from search and archive * Fixed: php error in title tab with ElegantThemes * Fixed: theme conflict with photo/cover upload * Fixed: issue with country field showing country code in profile * Fixed: issue with setting default tab * Fixed: issue with 2-name user roles = 1.0.33: January 30, 2015 = * New: Introducing profile menu / tab system (optional) * New: display user posts and comments in profile menu (optional) * New: added option to force hide adminbar on the frontend even for administrators * Tweak: added profile menu options to plugin settings panel * Tweak: added option to enable/disable profile menu and/or profile menu tabs * Tweak: added option to show or hide post and comment counts (when the tabs are active) * Tweak: account activation via e-mail redirects user to login page and displays a success message * Fixed: issue with conditional logic on profile fields has been resolved * Fixed: bug with searching members by gender * Fixed: admin nav menus conditional logic conflict with some themes * Fixed: bug with datepicker field on windows servers = 1.0.32: January 30, 2015 = * New: added 3 new tags to use in email templates {first_name}, {last_name}, and {gender} * Fixed: Issue with account page permalink resolved - [view issue](https://ultimatemember.com/forums/topic/permalink-bug/) * Fixed: Issue with conditional menu items showing for un-approved users resolved - [view issue](https://ultimatemember.com/forums/topic/registration/) = 1.0.31: January 29, 2015 = * Fixed: Issue with custom user page slug resolved [view issue](https://wordpress.org/support/topic/translate-plugin-9) * Fixed: PHP warning in members directory resolved * Fixed: Issue with hardcoded user profile URLs in menu = 1.0.30: January 29, 2015 = * New: added option to control number of profiles to display in members directory for mobile devices * New: new admin action hook 'um_extend_admin_menu' to extend plugin administration menu * New: Improved plugin accessbility e.g add alt text to links and images so people with disabilities can use screen readers * New: added option to show/hide the message that appears if profile is empty (includes emoticon show/hide) * Tweak: new translatable strings * Tweak: added option to customize single-result text for members directory * Tweak: removed unnecessary code from member directory backend * Tweak: removed unnecessary js from admin head * Fixed: Account page is now translatable * Fixed: content restriction widget css in backend = 1.0.29: January 28, 2015 = * New: added feature to show user display name in menu (e.g. Welcome, {display_name}) * New: added option to add text to dividers (which can be added using the drag-and-drop form builder) * New: security improvement: added whitelisted IP(s) option to allow you to access the WP-admin screen always (prevents lockout) * New: added filter hook um_whitelisted_wpadmin_access to control access to wp-admin login screens (for developers) * New: added custom css option to apply extra css styling rules from plugin settings * New: added custom css option to each form allowing you to apply extra styling rules per form * New: added option to customize profile fields area width (per form basis) besides global option * Tweak: compatibility with default permalinks (Pretty permalinks are strongly recommended though!) * Tweak: improved the function that gets user IP address * Tweak: performance: inline css from the plugin is automatically compressed/minified = 1.0.28: January 27, 2015 = * New: added compatibility with wpMandrill to handle email delivery * Fixed: Issue with profile edit menu not appearing = 1.0.27: January 27, 2015 = * Fixed: WP admin bar issue with some plugins and themes * Fixed: conflict with WP Recent Comments With Avatars plugin = 1.0.26: January 26, 2015 = * Fixed: Important issue fix (update recommended) = 1.0.25: January 26, 2015 = * New: addded support to use gravatars (optionally) If the user does not have a custom avatar * New: um_user_permissions_filter hook (for developer use) * Tweak: plugin uses get_avatar() properly now * Fixed: user avatars in backend are fixed * Fixed: Mobile_Detect class does not throw php error if it was previously called * Fixed: corrected a few translations errors = 1.0.24: January 26, 2015 = * Tweak: predefined fields are now localized (translatable) * Fixed: PHP warning in comments was fixed * Fixed: avatars in comments = 1.0.23: January 25, 2015 = * Fixed: important bugfix with profile editing = 1.0.22: January 25, 2015 = * New: option to set maximum profile fields area width * New: ajax functions for future development use * Tweak: improved profile permalinks for e-mail based usernames * Tweak: disable user from editing username (If admin put the username field by mistake in profile) * Tweak: minor css changes * Fixed: ability to clear conditional logic from fields in backend * Fixed: corrected spacing issue in a multi-column layout in profile = 1.0.21: January 24, 2015 = * New: Added ajax action hook for development use * New: Extended profile hooks * New: you can restrict / apply access control to woocommerce shop page * Fixed: content restriction for woocommerce shop page = 1.0.20: January 24, 2015 = * New: Custom email is sent to user after resetting/changing password * New: Added action/filter hooks to profile * Tweak: Improved a few core functions * Fixed: Encoding issue with non-english sites fixed = 1.0.19: January 23, 2015 = * New: Border thickness option for members directory * New: Option to show/hide forgot password link on login form * Tweak: Capital initials on members directory * Fixed: Issue with row styling in form builder * Fixed: Conditional logic bug fixes * Fixed: Icon for conditional rules in backend * Fixed: php warning in debug mode * Fixed: Mobile/phone number validation fixed = 1.0.18: January 23, 2015 = * Fixed: Issue with drag and drop form builder * Fixed: Form builder trash icon in backend * Fixed: Minor css adjustments in frontend = 1.0.17: January 22, 2015 = * New: WordPress Multi-site compatibility for user uploads and photos * Fixed: Searching members by username or email in directory (partial search supported) * Fixed: Anonymous tracking * Fixed: Minor css fixes = 1.0.16: January 22, 2015 = * Fixed: Settings page: tracking popup removed = 1.0.15: January 22, 2015 = * New: User profiles now show a cool message if the user profile field area is empty * New: Added 'visibility' setting to all field types in backend * Tweak: Members search function supports partial search matching * Tweak: Deleting photo or file removes file from server * Tweak: Deleting a user will delete all his personal uploads from the server * Fixed: Duplicate tooltip for password field has been removed = 1.0.10: January 22, 2015 = * Fixed: Template tags for welcome e-mail * Fixed: {submitted_registration} e-mail template tag = 1.0.0: January, 2015 = * First official release!	156.57 KB	2026-01-05 18:46
📁 includes	-	2026-01-05 18:46
📁 languages	-	2026-01-05 18:46
📄 license.txt GNU GENERAL PUBLIC LICENSE Version 3, 29 June 2007 Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/> Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The GNU General Public License is a free, copyleft license for software and other kinds of works. The licenses for most software and other practical works are designed to take away your freedom to share and change the works. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change all versions of a program--to make sure it remains free software for all its users. We, the Free Software Foundation, use the GNU General Public License for most of our software; it applies also to any other work released this way by its authors. You can apply it to your programs, too. When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for them if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs, and that you know you can do these things. To protect your rights, we need to prevent others from denying you these rights or asking you to surrender the rights. Therefore, you have certain responsibilities if you distribute copies of the software, or if you modify it: responsibilities to respect the freedom of others. For example, if you distribute copies of such a program, whether gratis or for a fee, you must pass on to the recipients the same freedoms that you received. You must make sure that they, too, receive or can get the source code. And you must show them these terms so they know their rights. Developers that use the GNU GPL protect your rights with two steps: (1) assert copyright on the software, and (2) offer you this License giving you legal permission to copy, distribute and/or modify it. For the developers' and authors' protection, the GPL clearly explains that there is no warranty for this free software. For both users' and authors' sake, the GPL requires that modified versions be marked as changed, so that their problems will not be attributed erroneously to authors of previous versions. Some devices are designed to deny users access to install or run modified versions of the software inside them, although the manufacturer can do so. This is fundamentally incompatible with the aim of protecting users' freedom to change the software. The systematic pattern of such abuse occurs in the area of products for individuals to use, which is precisely where it is most unacceptable. Therefore, we have designed this version of the GPL to prohibit the practice for those products. If such problems arise substantially in other domains, we stand ready to extend this provision to those domains in future versions of the GPL, as needed to protect the freedom of users. Finally, every program is threatened constantly by software patents. States should not allow patents to restrict development and use of software on general-purpose computers, but in those that do, we wish to avoid the special danger that patents applied to a free program could make it effectively proprietary. To prevent this, the GPL assures that patents cannot be used to render the program non-free. The precise terms and conditions for copying, distribution and modification follow. TERMS AND CONDITIONS 0. Definitions. "This License" refers to version 3 of the GNU General Public License. "Copyright" also means copyright-like laws that apply to other kinds of works, such as semiconductor masks. "The Program" refers to any copyrightable work licensed under this License. Each licensee is addressed as "you". "Licensees" and "recipients" may be individuals or organizations. To "modify" a work means to copy from or adapt all or part of the work in a fashion requiring copyright permission, other than the making of an exact copy. The resulting work is called a "modified version" of the earlier work or a work "based on" the earlier work. A "covered work" means either the unmodified Program or a work based on the Program. To "propagate" a work means to do anything with it that, without permission, would make you directly or secondarily liable for infringement under applicable copyright law, except executing it on a computer or modifying a private copy. Propagation includes copying, distribution (with or without modification), making available to the public, and in some countries other activities as well. To "convey" a work means any kind of propagation that enables other parties to make or receive copies. Mere interaction with a user through a computer network, with no transfer of a copy, is not conveying. An interactive user interface displays "Appropriate Legal Notices" to the extent that it includes a convenient and prominently visible feature that (1) displays an appropriate copyright notice, and (2) tells the user that there is no warranty for the work (except to the extent that warranties are provided), that licensees may convey the work under this License, and how to view a copy of this License. If the interface presents a list of user commands or options, such as a menu, a prominent item in the list meets this criterion. 1. Source Code. The "source code" for a work means the preferred form of the work for making modifications to it. "Object code" means any non-source form of a work. A "Standard Interface" means an interface that either is an official standard defined by a recognized standards body, or, in the case of interfaces specified for a particular programming language, one that is widely used among developers working in that language. The "System Libraries" of an executable work include anything, other than the work as a whole, that (a) is included in the normal form of packaging a Major Component, but which is not part of that Major Component, and (b) serves only to enable use of the work with that Major Component, or to implement a Standard Interface for which an implementation is available to the public in source code form. A "Major Component", in this context, means a major essential component (kernel, window system, and so on) of the specific operating system (if any) on which the executable work runs, or a compiler used to produce the work, or an object code interpreter used to run it. The "Corresponding Source" for a work in object code form means all the source code needed to generate, install, and (for an executable work) run the object code and to modify the work, including scripts to control those activities. However, it does not include the work's System Libraries, or general-purpose tools or generally available free programs which are used unmodified in performing those activities but which are not part of the work. For example, Corresponding Source includes interface definition files associated with source files for the work, and the source code for shared libraries and dynamically linked subprograms that the work is specifically designed to require, such as by intimate data communication or control flow between those subprograms and other parts of the work. The Corresponding Source need not include anything that users can regenerate automatically from other parts of the Corresponding Source. The Corresponding Source for a work in source code form is that same work. 2. Basic Permissions. All rights granted under this License are granted for the term of copyright on the Program, and are irrevocable provided the stated conditions are met. This License explicitly affirms your unlimited permission to run the unmodified Program. The output from running a covered work is covered by this License only if the output, given its content, constitutes a covered work. This License acknowledges your rights of fair use or other equivalent, as provided by copyright law. You may make, run and propagate covered works that you do not convey, without conditions so long as your license otherwise remains in force. You may convey covered works to others for the sole purpose of having them make modifications exclusively for you, or provide you with facilities for running those works, provided that you comply with the terms of this License in conveying all material for which you do not control copyright. Those thus making or running the covered works for you must do so exclusively on your behalf, under your direction and control, on terms that prohibit them from making any copies of your copyrighted material outside their relationship with you. Conveying under any other circumstances is permitted solely under the conditions stated below. Sublicensing is not allowed; section 10 makes it unnecessary. 3. Protecting Users' Legal Rights From Anti-Circumvention Law. No covered work shall be deemed part of an effective technological measure under any applicable law fulfilling obligations under article 11 of the WIPO copyright treaty adopted on 20 December 1996, or similar laws prohibiting or restricting circumvention of such measures. When you convey a covered work, you waive any legal power to forbid circumvention of technological measures to the extent such circumvention is effected by exercising rights under this License with respect to the covered work, and you disclaim any intention to limit operation or modification of the work as a means of enforcing, against the work's users, your or third parties' legal rights to forbid circumvention of technological measures. 4. Conveying Verbatim Copies. You may convey verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice; keep intact all notices stating that this License and any non-permissive terms added in accord with section 7 apply to the code; keep intact all notices of the absence of any warranty; and give all recipients a copy of this License along with the Program. You may charge any price or no price for each copy that you convey, and you may offer support or warranty protection for a fee. 5. Conveying Modified Source Versions. You may convey a work based on the Program, or the modifications to produce it from the Program, in the form of source code under the terms of section 4, provided that you also meet all of these conditions: a) The work must carry prominent notices stating that you modified it, and giving a relevant date. b) The work must carry prominent notices stating that it is released under this License and any conditions added under section 7. This requirement modifies the requirement in section 4 to "keep intact all notices". c) You must license the entire work, as a whole, under this License to anyone who comes into possession of a copy. This License will therefore apply, along with any applicable section 7 additional terms, to the whole of the work, and all its parts, regardless of how they are packaged. This License gives no permission to license the work in any other way, but it does not invalidate such permission if you have separately received it. d) If the work has interactive user interfaces, each must display Appropriate Legal Notices; however, if the Program has interactive interfaces that do not display Appropriate Legal Notices, your work need not make them do so. A compilation of a covered work with other separate and independent works, which are not by their nature extensions of the covered work, and which are not combined with it such as to form a larger program, in or on a volume of a storage or distribution medium, is called an "aggregate" if the compilation and its resulting copyright are not used to limit the access or legal rights of the compilation's users beyond what the individual works permit. Inclusion of a covered work in an aggregate does not cause this License to apply to the other parts of the aggregate. 6. Conveying Non-Source Forms. You may convey a covered work in object code form under the terms of sections 4 and 5, provided that you also convey the machine-readable Corresponding Source under the terms of this License, in one of these ways: a) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by the Corresponding Source fixed on a durable physical medium customarily used for software interchange. b) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by a written offer, valid for at least three years and valid for as long as you offer spare parts or customer support for that product model, to give anyone who possesses the object code either (1) a copy of the Corresponding Source for all the software in the product that is covered by this License, on a durable physical medium customarily used for software interchange, for a price no more than your reasonable cost of physically performing this conveying of source, or (2) access to copy the Corresponding Source from a network server at no charge. c) Convey individual copies of the object code with a copy of the written offer to provide the Corresponding Source. This alternative is allowed only occasionally and noncommercially, and only if you received the object code with such an offer, in accord with subsection 6b. d) Convey the object code by offering access from a designated place (gratis or for a charge), and offer equivalent access to the Corresponding Source in the same way through the same place at no further charge. You need not require recipients to copy the Corresponding Source along with the object code. If the place to copy the object code is a network server, the Corresponding Source may be on a different server (operated by you or a third party) that supports equivalent copying facilities, provided you maintain clear directions next to the object code saying where to find the Corresponding Source. Regardless of what server hosts the Corresponding Source, you remain obligated to ensure that it is available for as long as needed to satisfy these requirements. e) Convey the object code using peer-to-peer transmission, provided you inform other peers where the object code and Corresponding Source of the work are being offered to the general public at no charge under subsection 6d. A separable portion of the object code, whose source code is excluded from the Corresponding Source as a System Library, need not be included in conveying the object code work. A "User Product" is either (1) a "consumer product", which means any tangible personal property which is normally used for personal, family, or household purposes, or (2) anything designed or sold for incorporation into a dwelling. In determining whether a product is a consumer product, doubtful cases shall be resolved in favor of coverage. For a particular product received by a particular user, "normally used" refers to a typical or common use of that class of product, regardless of the status of the particular user or of the way in which the particular user actually uses, or expects or is expected to use, the product. A product is a consumer product regardless of whether the product has substantial commercial, industrial or non-consumer uses, unless such uses represent the only significant mode of use of the product. "Installation Information" for a User Product means any methods, procedures, authorization keys, or other information required to install and execute modified versions of a covered work in that User Product from a modified version of its Corresponding Source. The information must suffice to ensure that the continued functioning of the modified object code is in no case prevented or interfered with solely because modification has been made. If you convey an object code work under this section in, or with, or specifically for use in, a User Product, and the conveying occurs as part of a transaction in which the right of possession and use of the User Product is transferred to the recipient in perpetuity or for a fixed term (regardless of how the transaction is characterized), the Corresponding Source conveyed under this section must be accompanied by the Installation Information. But this requirement does not apply if neither you nor any third party retains the ability to install modified object code on the User Product (for example, the work has been installed in ROM). The requirement to provide Installation Information does not include a requirement to continue to provide support service, warranty, or updates for a work that has been modified or installed by the recipient, or for the User Product in which it has been modified or installed. Access to a network may be denied when the modification itself materially and adversely affects the operation of the network or violates the rules and protocols for communication across the network. Corresponding Source conveyed, and Installation Information provided, in accord with this section must be in a format that is publicly documented (and with an implementation available to the public in source code form), and must require no special password or key for unpacking, reading or copying. 7. Additional Terms. "Additional permissions" are terms that supplement the terms of this License by making exceptions from one or more of its conditions. Additional permissions that are applicable to the entire Program shall be treated as though they were included in this License, to the extent that they are valid under applicable law. If additional permissions apply only to part of the Program, that part may be used separately under those permissions, but the entire Program remains governed by this License without regard to the additional permissions. When you convey a copy of a covered work, you may at your option remove any additional permissions from that copy, or from any part of it. (Additional permissions may be written to require their own removal in certain cases when you modify the work.) You may place additional permissions on material, added by you to a covered work, for which you have or can give appropriate copyright permission. Notwithstanding any other provision of this License, for material you add to a covered work, you may (if authorized by the copyright holders of that material) supplement the terms of this License with terms: a) Disclaiming warranty or limiting liability differently from the terms of sections 15 and 16 of this License; or b) Requiring preservation of specified reasonable legal notices or author attributions in that material or in the Appropriate Legal Notices displayed by works containing it; or c) Prohibiting misrepresentation of the origin of that material, or requiring that modified versions of such material be marked in reasonable ways as different from the original version; or d) Limiting the use for publicity purposes of names of licensors or authors of the material; or e) Declining to grant rights under trademark law for use of some trade names, trademarks, or service marks; or f) Requiring indemnification of licensors and authors of that material by anyone who conveys the material (or modified versions of it) with contractual assumptions of liability to the recipient, for any liability that these contractual assumptions directly impose on those licensors and authors. All other non-permissive additional terms are considered "further restrictions" within the meaning of section 10. If the Program as you received it, or any part of it, contains a notice stating that it is governed by this License along with a term that is a further restriction, you may remove that term. If a license document contains a further restriction but permits relicensing or conveying under this License, you may add to a covered work material governed by the terms of that license document, provided that the further restriction does not survive such relicensing or conveying. If you add terms to a covered work in accord with this section, you must place, in the relevant source files, a statement of the additional terms that apply to those files, or a notice indicating where to find the applicable terms. Additional terms, permissive or non-permissive, may be stated in the form of a separately written license, or stated as exceptions; the above requirements apply either way. 8. Termination. You may not propagate or modify a covered work except as expressly provided under this License. Any attempt otherwise to propagate or modify it is void, and will automatically terminate your rights under this License (including any patent licenses granted under the third paragraph of section 11). However, if you cease all violation of this License, then your license from a particular copyright holder is reinstated (a) provisionally, unless and until the copyright holder explicitly and finally terminates your license, and (b) permanently, if the copyright holder fails to notify you of the violation by some reasonable means prior to 60 days after the cessation. Moreover, your license from a particular copyright holder is reinstated permanently if the copyright holder notifies you of the violation by some reasonable means, this is the first time you have received notice of violation of this License (for any work) from that copyright holder, and you cure the violation prior to 30 days after your receipt of the notice. Termination of your rights under this section does not terminate the licenses of parties who have received copies or rights from you under this License. If your rights have been terminated and not permanently reinstated, you do not qualify to receive new licenses for the same material under section 10. 9. Acceptance Not Required for Having Copies. You are not required to accept this License in order to receive or run a copy of the Program. Ancillary propagation of a covered work occurring solely as a consequence of using peer-to-peer transmission to receive a copy likewise does not require acceptance. However, nothing other than this License grants you permission to propagate or modify any covered work. These actions infringe copyright if you do not accept this License. Therefore, by modifying or propagating a covered work, you indicate your acceptance of this License to do so. 10. Automatic Licensing of Downstream Recipients. Each time you convey a covered work, the recipient automatically receives a license from the original licensors, to run, modify and propagate that work, subject to this License. You are not responsible for enforcing compliance by third parties with this License. An "entity transaction" is a transaction transferring control of an organization, or substantially all assets of one, or subdividing an organization, or merging organizations. If propagation of a covered work results from an entity transaction, each party to that transaction who receives a copy of the work also receives whatever licenses to the work the party's predecessor in interest had or could give under the previous paragraph, plus a right to possession of the Corresponding Source of the work from the predecessor in interest, if the predecessor has it or can get it with reasonable efforts. You may not impose any further restrictions on the exercise of the rights granted or affirmed under this License. For example, you may not impose a license fee, royalty, or other charge for exercise of rights granted under this License, and you may not initiate litigation (including a cross-claim or counterclaim in a lawsuit) alleging that any patent claim is infringed by making, using, selling, offering for sale, or importing the Program or any portion of it. 11. Patents. A "contributor" is a copyright holder who authorizes use under this License of the Program or a work on which the Program is based. The work thus licensed is called the contributor's "contributor version". A contributor's "essential patent claims" are all patent claims owned or controlled by the contributor, whether already acquired or hereafter acquired, that would be infringed by some manner, permitted by this License, of making, using, or selling its contributor version, but do not include claims that would be infringed only as a consequence of further modification of the contributor version. For purposes of this definition, "control" includes the right to grant patent sublicenses in a manner consistent with the requirements of this License. Each contributor grants you a non-exclusive, worldwide, royalty-free patent license under the contributor's essential patent claims, to make, use, sell, offer for sale, import and otherwise run, modify and propagate the contents of its contributor version. In the following three paragraphs, a "patent license" is any express agreement or commitment, however denominated, not to enforce a patent (such as an express permission to practice a patent or covenant not to sue for patent infringement). To "grant" such a patent license to a party means to make such an agreement or commitment not to enforce a patent against the party. If you convey a covered work, knowingly relying on a patent license, and the Corresponding Source of the work is not available for anyone to copy, free of charge and under the terms of this License, through a publicly available network server or other readily accessible means, then you must either (1) cause the Corresponding Source to be so available, or (2) arrange to deprive yourself of the benefit of the patent license for this particular work, or (3) arrange, in a manner consistent with the requirements of this License, to extend the patent license to downstream recipients. "Knowingly relying" means you have actual knowledge that, but for the patent license, your conveying the covered work in a country, or your recipient's use of the covered work in a country, would infringe one or more identifiable patents in that country that you have reason to believe are valid. If, pursuant to or in connection with a single transaction or arrangement, you convey, or propagate by procuring conveyance of, a covered work, and grant a patent license to some of the parties receiving the covered work authorizing them to use, propagate, modify or convey a specific copy of the covered work, then the patent license you grant is automatically extended to all recipients of the covered work and works based on it. A patent license is "discriminatory" if it does not include within the scope of its coverage, prohibits the exercise of, or is conditioned on the non-exercise of one or more of the rights that are specifically granted under this License. You may not convey a covered work if you are a party to an arrangement with a third party that is in the business of distributing software, under which you make payment to the third party based on the extent of your activity of conveying the work, and under which the third party grants, to any of the parties who would receive the covered work from you, a discriminatory patent license (a) in connection with copies of the covered work conveyed by you (or copies made from those copies), or (b) primarily for and in connection with specific products or compilations that contain the covered work, unless you entered into that arrangement, or that patent license was granted, prior to 28 March 2007. Nothing in this License shall be construed as excluding or limiting any implied license or other defenses to infringement that may otherwise be available to you under applicable patent law. 12. No Surrender of Others' Freedom. If conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot convey a covered work so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not convey it at all. For example, if you agree to terms that obligate you to collect a royalty for further conveying from those to whom you convey the Program, the only way you could satisfy both those terms and this License would be to refrain entirely from conveying the Program. 13. Use with the GNU Affero General Public License. Notwithstanding any other provision of this License, you have permission to link or combine any covered work with a work licensed under version 3 of the GNU Affero General Public License into a single combined work, and to convey the resulting work. The terms of this License will continue to apply to the part which is the covered work, but the special requirements of the GNU Affero General Public License, section 13, concerning interaction through a network will apply to the combination as such. 14. Revised Versions of this License. The Free Software Foundation may publish revised and/or new versions of the GNU General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Program specifies that a certain numbered version of the GNU General Public License "or any later version" applies to it, you have the option of following the terms and conditions either of that numbered version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of the GNU General Public License, you may choose any version ever published by the Free Software Foundation. If the Program specifies that a proxy can decide which future versions of the GNU General Public License can be used, that proxy's public statement of acceptance of a version permanently authorizes you to choose that version for the Program. Later license versions may give you additional or different permissions. However, no additional obligations are imposed on any author or copyright holder as a result of your choosing to follow a later version. 15. Disclaimer of Warranty. THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 16. Limitation of Liability. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. 17. Interpretation of Sections 15 and 16. If the disclaimer of warranty and limitation of liability provided above cannot be given local legal effect according to their terms, reviewing courts shall apply local law that most closely approximates an absolute waiver of all civil liability in connection with the Program, unless a warranty or assumption of liability accompanies a copy of the Program in return for a fee. END OF TERMS AND CONDITIONS How to Apply These Terms to Your New Programs If you develop a new program, and you want it to be of the greatest possible use to the public, the best way to achieve this is to make it free software which everyone can redistribute and change under these terms. To do so, attach the following notices to the program. It is safest to attach them to the start of each source file to most effectively state the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found. <one line to give the program's name and a brief idea of what it does.> Copyright (C) <year> <name of author> This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see <https://www.gnu.org/licenses/>. Also add information on how to contact you by electronic and paper mail. If the program does terminal interaction, make it output a short notice like this when it starts in an interactive mode: <program> Copyright (C) <year> <name of author> This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'. This is free software, and you are welcome to redistribute it under certain conditions; type `show c' for details. The hypothetical commands `show w' and `show c' should show the appropriate parts of the General Public License. Of course, your program's commands might be different; for a GUI interface, you would use an "about box". You should also get your employer (if you work as a programmer) or school, if any, to sign a "copyright disclaimer" for the program, if necessary. For more information on this, and how to apply and follow the GNU GPL, see <https://www.gnu.org/licenses/>. The GNU General Public License does not permit incorporating your program into proprietary programs. If your program is a subroutine library, you may consider it more useful to permit linking proprietary applications with the library. If this is what you want to do, use the GNU Lesser General Public License instead of this License. But first, please read <https://www.gnu.org/licenses/why-not-lgpl.html>.	34.33 KB	2026-01-05 18:46
📄 readme.txt === Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin === Author URI: https://ultimatemember.com/ Plugin URI: https://ultimatemember.com/ Contributors: ultimatemember, champsupertramp, nsinelnikov Tags: community, member, membership, user-profile, user-registration Requires PHP: 7.0 Requires at least: 6.2 Tested up to: 6.9 Stable tag: 2.11.1 License: GPLv3 License URI: http://www.gnu.org/licenses/gpl-3.0.txt Membership & community plugin with user profiles, registration & login, member directories, content restriction, user roles and much more. == Description == = User Profile & Membership Plugin for WordPress = The ultimate user profile & membership plugin for WordPress. The plugin makes it a breeze for users to sign-up and become members of your website. The plugin allows you to add beautiful user profiles to your site and is designed for creating advanced online communities and membership sites. Lightweight and highly extendible, Ultimate Member will enable you to create almost any type of site where users can join and become members with absolute ease. = Features of the plugin include: = * Front-end user profiles * Front-end user registration * Front-end user login * Custom form fields * Conditional logic for form fields * Drag and drop form builder * User account page * Custom user roles * Member directories * User emails * Content restriction * Conditional nav menus * Show author posts & comments on user profiles * Developer friendly with dozens of actions and filters Read about all of the plugin's features at [Ultimate Member](https://ultimatemember.com) = Paid Extensions = Ultimate Member has a range of extensions that allow you to extend the power of the plugin. You can purchase all of these extensions at a significant discount with one of our [paid plans](https://ultimatemember.com/pricing/) or you can purchase extensions individually. * [Zapier](https://ultimatemember.com/extensions/zapier/) - Allow to integrate the Zapier popular apps with Ultimate Member * [Stripe](https://ultimatemember.com/extensions/stripe/) - Sell paid memberships to access your website via Stripe subscriptions * [User Notes](https://ultimatemember.com/extensions/user-notes/) - Allow users to create public and private notes from their profile * [Profile Tabs](https://ultimatemember.com/extensions/profile-tabs/) - Allow to add the custom tabs to profiles * [User Locations](https://ultimatemember.com/extensions/user-locations/) - Allow to display users on a map on the member directory page and allow users to add their location via their profile * [Unsplash](https://ultimatemember.com/extensions/unsplash/) - Allow users to select a profile cover photo from [Unsplash](https://unsplash.com/) from their profile * [User Bookmarks](https://ultimatemember.com/extensions/user-bookmarks/) - Allow users to bookmark content from your website * [User Photos](https://ultimatemember.com/extensions/user-photos/) - Allow users to upload photos to their profile * [Groups](https://ultimatemember.com/extensions/groups/) - Allow users to create and join groups around shared topics, interests etc. * [Private Content](https://ultimatemember.com/extensions/private-content/) - Display private content to logged in users that only they can access * [User Tags](https://ultimatemember.com/extensions/user-tags/) - Lets you add a user tag system to your website * [Social Activity](https://ultimatemember.com/extensions/social-activity/) - Let users create public wall posts & see the activity of other users * [WooCommerce](https://ultimatemember.com/extensions/woocommerce/) - Allow you to integrate WooCommerce with Ultimate Member * [Private Messages](https://ultimatemember.com/extensions/private-messages/) - Add a private messaging system to your site & allow users to message each other * [Followers](https://ultimatemember.com/extensions/followers/) - Allow users to follow each other on your site and protect their profile information * [Real-time Notifications](https://ultimatemember.com/extensions/real-time-notifications/) - Add a notifications system to your site so users can receive real-time notifications * [Social Login](https://ultimatemember.com/extensions/social-login/) - Let users register & login to your site via Facebook, Twitter, G+, LinkedIn, Instagram and Vkontakte (VK.com) * [bbPress](https://ultimatemember.com/extensions/bbpress/) - With the bbPress extension you can beautifully integrate Ultimate Member with bbPress * [MailChimp](https://ultimatemember.com/extensions/mailchimp/) - Allow users to subscribe to your MailChimp lists when they signup on your site and sync user meta to MailChimp * [User Reviews](https://ultimatemember.com/extensions/user-reviews/) - Allow users to rate & review each other using a 5 star rate/review system * [Verified Users](https://ultimatemember.com/extensions/verified-users/) - Add a user verification system to your site so user accounts can be verified * [myCRED](https://ultimatemember.com/extensions/mycred/) - With the myCRED extension you can integrate Ultimate Member with the popular myCRED points management plugin * [Notices](https://ultimatemember.com/extensions/notices/) - Alert users to important information using conditional notices * [Profile Completeness](https://ultimatemember.com/extensions/profile-completeness/) - Encourage or force users to complete their profiles with the profile completeness extension * [Friends](https://ultimatemember.com/extensions/friends/) - Allows users to become friends by sending & accepting/rejecting friend requests = Free Extensions = * [JobsBoardWP](https://ultimatemember.com/extensions/jobboardwp/) - This free extension integrates Ultimate Member with the job board plugin [JobBoardWP](https://wordpress.org/plugins/jobboardwp). * [ForumWP](https://ultimatemember.com/extensions/forumwp/) - This free extension integrates Ultimate Member with the forum plugin [ForumWP](https://forumwpplugin.com). * [Terms & Conditions](https://ultimatemember.com/extensions/terms-conditions/) - Add a terms and condition checkbox to your registration forms & require users to agree to your T&Cs before registering on your site. * [Google reCAPTCHA](https://ultimatemember.com/extensions/google-recaptcha/) - Stop bots on your registration & login forms with Google reCAPTCHA * [Online Users](https://ultimatemember.com/extensions/online-users/) - Display what users are online with this extension = Theme = Our official [theme](https://ultimatemember.com/theme/) is purpose built for websites that have logged in and out users. The [theme](https://ultimatemember.com/theme/) has deep integration with Ultimate Member plugin and the extensions, different header designs for logged-in/out users and works alongside the Beaver Builder and Elementor page builders. = Our other plugins = In addition to Ultimate Member, we also have two other plugins: [ForumWP](https://forumwpplugin.com/) and [JobBoardWP](https://wordpress.org/plugins/jobboardwp). = ForumWP = [ForumWP](https://forumwpplugin.com/) is a forum plugin which adds an online forum to your website, allowing users to create topics and write replies. Forums are a great way to build and grow an online community. = JobBoardWP = [JobBoardWP](https://wordpress.org/plugins/jobboardwp) is a job board plugin which adds a modern job board to your website. Display job listings and allow employers to submit and manage jobs all from the front-end. = Development * Translations = If you're a developer and would like to contribute to the source code of the plugin you can do so via our [GitHub Repository](https://github.com/ultimatemember/ultimatemember). Want to add a new language to Ultimate Member? Great! You can contribute via [translate.wordpress.org](https://translate.wordpress.org/projects/wp-plugins/ultimate-member). If you are a developer and you need to know the list of UM Hooks, make this via our [Hooks Documentation](https://docs.ultimatemember.com/article/1324-hooks-list) or [Hooks Documentation v2](https://ultimatemember.github.io/ultimatemember/hooks/). If you are a developer and you need to know the structure of our code, make this via our [Documentation API](https://ultimatemember.github.io/ultimatemember/phpdoc/). = Documentation & Support = Got a problem or need help with Ultimate Member? Head over to our [documentation](http://docs.ultimatemember.com/) and perform a search of the knowledge base. If you can’t find a solution to your issue then you can create a topic on the [support forum](https://wordpress.org/support/plugin/ultimate-member). == Installation == 1. Activate the plugin 2. That's it. Go to Ultimate Member > Settings to customize plugin options 3. For more details, please visit the official [Documentation](http://docs.ultimatemember.com/) page. == Frequently Asked Questions == = Do I need to know any coding to use this plugin? = No, we have built Ultimate Member to be extremely easy to use and does not require you to manually build shortcodes or have any coding knowledge. = Is Ultimate Member mobile responsive? = Yes. Ultimate Member is designed to adapt nicely to any screen resolution. It includes specific designs for phones, tablets and desktops. = Is Ultimate Member multi-site compatible? = Yes. Ultimate Member works great on both single site and multi-site WordPress installs. = Does the plugin work with any WordPress theme? = Yes. Ultimate Member will work with any properly coded theme. However, some themes may cause conflicts with the plugin. If you find a styling issue with your theme please create a post in the community forum. = Does the plugin work with caching plugins? = The plugin works with popular caching plugins by automatically excluding Ultimate Member pages from being cached. This ensures other visitors to a page will not see the private information of another user. However, if you add features of Ultimate Member to other pages you have to exclude those pages from being cached through your cache plugin settings panel. = Does Ultimate Member restrict access to wp-login.php when the plugin is active? = The plugin does not restrict access to the wp-login.php page when active, so that our plugin does not interfere with the existing functionality of a website or other plugins that may utilise the default login page. If you wish to restrict access to the wp-login.php page you can use a plugin such as [WPS Hide Login](https://wordpress.org/plugins/wps-hide-login/) or another plugin that removes the ability to login via wp-login.php. = Are Ultimate Member Login/Registration pages required? = No, you do not need to use our plugin’s login or registration pages and can use another plugin or the default WordPress methods for user registration and login. = Are additional PHP modules necessary for the plugin to work correctly? = No specific extensions are needed. But we highly recommended keep active these PHP modules: `mbstring`, `json`, `dom`, `exif`, `gd`, `fileinfo`, `curl`, `iconv`. wp-admin > Tools > Site Health page has a summary about your installation and required modules. All major extensions are listed [here](https://make.wordpress.org/hosting/handbook/server-environment/#php-extensions). == Screenshots == 1. Screenshot 1 2. Screenshot 2 3. Screenshot 3 4. Screenshot 4 5. Screenshot 5 6. Screenshot 6 7. Screenshot 7 8. Screenshot 8 9. Screenshot 9 10. Screenshot 10 11. Screenshot 11 12. Screenshot 12 == Changelog == = Important: = IMPORTANT: PLEASE UPDATE THE PLUGIN TO AT LEAST VERSION 2.6.7 IMMEDIATELY. VERSION 2.6.7 PATCHES SECURITY PRIVILEGE ESCALATION VULNERABILITY. PLEASE SEE [THIS ARTICLE](https://docs.ultimatemember.com/article/1866-security-incident-update-and-recommended-actions) FOR MORE INFORMATION = 2.11.1 2025-12-16 = Enhancements * Added: 'Privacy Options' for Member Directory. 'Who can see this member directory' and 'Allowed Roles'. * Added: 'Rate Limit' setting for nopriv AJAX actions. Bugfixes * Fixed: Security issue CVE ID: CVE-2025-13220. Used `shortcode_atts()` function to avoid using wrong attributes. * Fixed: Security issue CVE ID: CVE-2025-13217. Implementing proper input sanitization and escaping for iframe URLs in YouTube, Vimeo, and Google Maps embeds. * Fixed: Security issue CVE ID: CVE-2025-14081. Filtering fields based on user permissions during Account form submission. * Fixed: Security issue CVE ID: CVE-2025-12492. Added directory privacy settings and added rate limiting. * Templates required update: * members.php * members-grid.php * members-list.php = 2.11.0 2025-12-02 = Enhancements * Added: Extra condition for checking the license activation requests. * Added: 2nd `$args` attribute to the action hook 'um_cover_area_content'. * Added: `$args` and `$user_id` attributes to the action hook 'um_after_profile_header_name'. * Added: Class `um-profile-subnav-{$subnav_id}-link` to the sub navigation links in the User Profile page. * Tweak: Updated `Extensions_Updater` class to use Action Scheduler in the upgrade process of the UM extensions. Bugfixes * Fixed: User profile links in the comments section on the frontend when the `$comment->user_id` is empty. * Fixed: The `emotize` function regexp for better emoji converting. * Fixed: The conflict between the image uploader and lazy-loading attribute added by 3rd-party plugins. * Fixed: PHP warnings for roles without meta data. * Fixed: Typo in labels. [See changelog for all versions](https://plugins.svn.wordpress.org/ultimate-member/trunk/changelog.txt). == Upgrade Notice == = 2.11.1 = This version fixes a security related bug. Upgrade immediately. = 2.10.4 = This version fixes a security related bug. Upgrade immediately. = 2.10.2 = This version fixes a security related bug. Upgrade immediately. = 2.10.1 = This version fixes a security related bug. Upgrade immediately. = 2.10.0 = Increased the minimum PHP and WordPress requirements. The plugin now requires at least PHP 7.0 and WordPress 6.2. This version fixes a security related bug. Upgrade immediately. = 2.9.2 = This version fixes a security related bug. Upgrade immediately. = 2.9.0 = This version fixes a security related bug. Upgrade immediately. = 2.8.7 = This version fixes a security related bug. Upgrade immediately. = 2.8.5 = This version fixes a security related bug. Upgrade immediately. = 2.8.4 = This version fixes a security related bug. Upgrade immediately. = 2.8.3 = This version fixes a security related bug. Upgrade immediately. = 2.6.7 = This version fixes a privilege escalation vulnerability used through UM Forms. Known in the wild that vulnerability allowed strangers to create administrator-level WordPress users. Please update immediately and check all administrator-level users on your website. = 2.6.5 = This version fixes a security related bug. Upgrade immediately. Version <= 2.6.4 has a privilege escalation vulnerability with administrator-level users. = 2.6.4 = This version fixes a security related bug. Upgrade immediately.	14.75 KB	2026-01-05 18:46
📁 templates	-	2026-01-05 18:46
📄 ultimate-member.php <?php /** * Plugin Name: Ultimate Member * Plugin URI: http://ultimatemember.com/ * Description: The easiest way to create powerful online communities and beautiful user profiles with WordPress * Version: 2.11.1 * Author: Ultimate Member * Author URI: http://ultimatemember.com/ * License: GPLv3 * License URI: http://www.gnu.org/licenses/gpl-3.0.txt * Text Domain: ultimate-member * Domain Path: /languages * Requires at least: 6.2 * Requires PHP: 7.0 * * @package UM */ defined( 'ABSPATH' ) \|\| exit; require_once ABSPATH . 'wp-admin/includes/plugin.php'; $plugin_data = get_plugin_data( __FILE__, true, false ); // phpcs:disable Generic.NamingConventions.UpperCaseConstantName define( 'um_url', plugin_dir_url( __FILE__ ) ); define( 'um_path', plugin_dir_path( __FILE__ ) ); define( 'um_plugin', plugin_basename( __FILE__ ) ); define( 'ultimatemember_version', $plugin_data['Version'] ); define( 'ultimatemember_plugin_name', $plugin_data['Name'] ); // phpcs:enable Generic.NamingConventions.UpperCaseConstantName define( 'UM_URL', plugin_dir_url( __FILE__ ) ); define( 'UM_PATH', plugin_dir_path( __FILE__ ) ); define( 'UM_PLUGIN', plugin_basename( __FILE__ ) ); define( 'UM_VERSION', $plugin_data['Version'] ); define( 'UM_PLUGIN_NAME', $plugin_data['Name'] ); define( 'UM_WP_FUNCTIONS_VERSION', '6.8.0' ); // Updates every major WordPress release. define( 'UM_LICENSE_REQUEST_DEBUG', false ); // Set true then need to debug the license request. define( 'UM_UPDATER_DEBUG', false ); // Set true then need to debug the upgrade packages. // define( 'UM_DEV_MODE', true ); require_once 'includes/class-functions.php'; require_once 'includes/class-init.php';	1.64 KB	2026-01-05 18:46
📄 uninstall.php <?php /** * Uninstall UM * */ // Exit if accessed directly. if ( ! defined( 'WP_UNINSTALL_PLUGIN' ) ) { exit; } if ( ! defined( 'UM_PATH' ) ) { define( 'UM_PATH', plugin_dir_path( __FILE__ ) ); } if ( ! defined( 'UM_URL' ) ) { define( 'UM_URL', plugin_dir_url( __FILE__ ) ); } if ( ! defined( 'UM_PLUGIN' ) ) { define( 'UM_PLUGIN', plugin_basename( __FILE__ ) ); } //for delete Email options only for Core email notifications remove_all_filters( 'um_email_notifications' ); //for delete only Core Theme Link pages remove_all_filters( 'um_core_pages' ); require_once plugin_dir_path( __FILE__ ) . 'includes/class-functions.php'; require_once plugin_dir_path( __FILE__ ) . 'includes/class-init.php'; $delete_options = UM()->options()->get( 'uninstall_on_delete' ); if ( ! empty( $delete_options ) ) { //remove uploads $upl_folder = UM()->files()->upload_basedir; UM()->files()->remove_dir( $upl_folder ); //remove core settings $settings_defaults = UM()->config()->settings_defaults; foreach ( $settings_defaults as $k => $v ) { UM()->options()->remove( $k ); } //delete UM Custom Post Types posts $um_posts = get_posts( array( 'post_type' => array( 'um_form', 'um_directory', 'um_role', 'um_private_content', 'um_mailchimp', 'um_profile_tabs', 'um_social_login', 'um_review', 'um_frontend_posting', 'um_notice', ), 'post_status' => array( 'publish', 'pending', 'draft', 'auto-draft', 'future', 'private', 'inherit', 'trash' ), 'numberposts' => -1, ) ); foreach ( $um_posts as $um_post ) { delete_option( 'um_existing_rows_' . $um_post->ID ); delete_option( 'um_form_rowdata_' . $um_post->ID ); wp_delete_post( $um_post->ID, 1 ); } global $wp_roles; $role_keys = get_option( 'um_roles', array() ); if ( class_exists( '\WP_Roles' ) ) { if ( ! isset( $wp_roles ) ) { $wp_roles = new \WP_Roles(); } if ( $role_keys ) { foreach ( $role_keys as $roleID ) { $role_meta = get_option( "um_role_{$roleID}_meta" ); if ( ! empty( $role_meta ) && ! empty( $wp_roles->roles[ $roleID ] ) ) { $wp_roles->roles[ $roleID ] = array_diff( $wp_roles->roles[ $roleID ], $role_meta ); } } } update_option( $wp_roles->role_key, $wp_roles->roles ); } //remove user role meta if ( $role_keys ) { foreach ( $role_keys as $role_key ) { delete_option( 'um_role_' . $role_key . '_meta' ); } $um_custom_role_users = get_users( array( 'role__in' => $role_keys, ) ); if ( ! empty( $um_custom_role_users ) ) { foreach ( $um_custom_role_users as $custom_role_user ) { foreach ( $role_keys as $role_key ) { if ( user_can( $custom_role_user, $role_key ) ) { $custom_role_user->remove_role( $role_key ); } } } } } delete_option( '__ultimatemember_sitekey' ); delete_option( 'um_flush_rewrite_rules' ); $statuses = array( 'approved', 'awaiting_admin_review', 'awaiting_email_confirmation', 'inactive', 'rejected', ); foreach ( $statuses as $status ) { delete_transient( "um_count_users_{$status}" ); } delete_transient( 'um_count_users_pending_dot' ); delete_transient( 'um_count_users_unassigned' ); // legacy but still need to delete while uninstall. //remove all users cache UM()->user()->remove_cache_all_users(); global $wpdb; $wpdb->query( "DELETE FROM {$wpdb->usermeta} WHERE meta_key LIKE '_um%' OR meta_key LIKE 'um%' OR meta_key LIKE 'reviews%' OR meta_key = 'submitted' OR meta_key = 'account_status' OR meta_key = 'password_rst_attempts' OR meta_key = 'profile_photo' OR meta_key = '_enable_new_follow' OR meta_key = '_enable_new_friend' OR meta_key = '_mylists' OR meta_key = '_enable_new_pm' OR meta_key = '_hidden_conversations' OR meta_key = '_pm_blocked' OR meta_key = '_notifications_prefs' OR meta_key = '_profile_progress' OR meta_key = '_completed' OR meta_key = '_cannot_add_review' OR meta_key = 'synced_profile_photo' OR meta_key = 'full_name' OR meta_key = '_reviews' OR meta_key = '_reviews_compound' OR meta_key = '_reviews_total' OR meta_key = '_reviews_avg'" ); $wpdb->query( "DELETE FROM {$wpdb->postmeta} WHERE meta_key LIKE '_um%' OR meta_key LIKE 'um%'" ); // Remove all tables from extensions $results = $wpdb->get_results( "SHOW TABLES LIKE '{$wpdb->prefix}um\_%'" ); if ( $results ) { foreach ( $results as $index => $value ) { foreach ( $value as $table_name ) { $um_groups_members = $wpdb->prefix . 'um_groups_members'; if ( $table_name === $um_groups_members ) { $wpdb->query( "DELETE posts, term_rel, pmeta, terms, tax, commetns FROM {$wpdb->posts} posts LEFT JOIN {$wpdb->term_relationships} term_rel ON (posts.ID = term_rel.object_id) LEFT JOIN {$wpdb->postmeta} pmeta ON (posts.ID = pmeta.post_id) LEFT JOIN {$wpdb->terms} terms ON (term_rel.term_taxonomy_id = terms.term_id) LEFT JOIN {$wpdb->term_taxonomy} tax ON (term_rel.term_taxonomy_id = tax.term_taxonomy_id) LEFT JOIN {$wpdb->comments} commetns ON (commetns.comment_post_ID = posts.ID) WHERE posts.post_type = 'um_groups' OR posts.post_type = 'um_groups_discussion'" ); } $wpdb->query( $wpdb->prepare( "DROP TABLE IF EXISTS %i", $table_name ) ); } } } //remove options from extensions //user photos $um_user_photos = get_posts( array( 'post_type' => array( 'um_user_photos', ), 'post_status' => array( 'publish', 'pending', 'draft', 'auto-draft', 'future', 'private', 'inherit', 'trash' ), 'numberposts' => -1, ) ); if ( $um_user_photos ) { foreach ( $um_user_photos as $um_user_photo ) { $attachments = get_attached_media( 'image', $um_user_photo->ID ); foreach ( $attachments as $attachment ) { wp_delete_attachment( $attachment->ID, 1 ); } wp_delete_post( $um_user_photo->ID, 1 ); } } //user notes $um_notes = get_posts( array( 'post_type' => array( 'um_notes', ), 'post_status' => array( 'publish', 'pending', 'draft', 'auto-draft', 'future', 'private', 'inherit', 'trash' ), 'numberposts' => -1, ) ); if ( $um_notes ) { foreach ( $um_notes as $um_note ) { $attachments = get_attached_media( 'image', $um_note->ID ); foreach ( $attachments as $attachment ) { wp_delete_attachment( $attachment->ID, 1 ); } wp_delete_post( $um_note->ID, 1 ); } } // User tags $wpdb->query( "DELETE tax, terms FROM {$wpdb->term_taxonomy} tax LEFT JOIN {$wpdb->terms} terms ON (tax.term_taxonomy_id = terms.term_id) WHERE tax.taxonomy = 'um_user_tag'" ); //mailchimp $mailchimp_log = UM()->files()->upload_basedir . 'mailchimp.log'; if ( file_exists( $mailchimp_log ) ) { unlink( $mailchimp_log ); } $um_options = $wpdb->get_results( "SELECT option_name FROM {$wpdb->options} WHERE option_name LIKE '_um%' OR option_name LIKE 'um_%' OR option_name LIKE 'widget_um%' OR option_name LIKE 'ultimatemember_%'" ); foreach ( $um_options as $um_option ) { delete_option( $um_option->option_name ); } //social activity $um_activities = get_posts( array( 'post_type' => array( 'um_activity', ), 'post_status' => array( 'publish', 'pending', 'draft', 'auto-draft', 'future', 'private', 'inherit', 'trash' ), 'numberposts' => -1, ) ); foreach ( $um_activities as $um_activity ) { $image = get_post_meta( $um_activity->ID, '_photo', true ); if ( $image ) { $user_id = get_post_meta( $um_activity->ID, '_user_id', true ); $upload_dir = wp_upload_dir(); $image_path = $upload_dir['basedir'] . '/ultimatemember/' . $user_id . '/' . $image; if ( file_exists( $image_path ) ) { unlink( $image_path ); } } wp_delete_post( $um_activity->ID, 1 ); } }	7.66 KB	2026-01-05 18:46

Terminal