Changelog

2.3.0 – 20 May, 2019

• [SECURITY] Potential path traversal vulnerability
• [SECURITY] Improved security around profile fields & preferences AJAX
• [SECURITY] Full audit of parameters passed via $_REQUEST into SQL queries
• [SECURITY] Full audit of parameters passed via $_REQUEST into filesystem
• [SECURITY] AJAX exploit allowing to post on another user’s stream even if they disabled the option
• [SECURITY] Improved server-side MIME type verification for media uploads
• [SECURITY] Allow admin to disable embeds to avoid Server Side Request Forgery (SSRF)
• [PeepSo] Move Mentions (formerly Tags) parsing to the CSR engine
• [PeepSo] Use the new Mentions CSR in post and comment author tags
• [PeepSo] Use CSR engine to store human readable post previews
• [CHAT] Refreshed the design of Messages screen
• [USERLIMITS] Allow admin limit the “Repost” feature based on rules
• [USERLIMITS] Registration e-mail domain blacklist and whitelists

• [PeepSo] improved 2FA plugin detection
• [PeepSo] Bumped the recommended PHP version to 7.3

• [PeepSo] Hashtags CSR interfering with blog post rendering containing #
• [PeepSo] Password reset hint mentions “12 characters” no matter what the length setting is
• [PeepSo] Date picker in “ban” interface is sometimes not clickable
• [PeepSo] username clean-up not working for MemberPress
• [GROUPS] Pinned group posts are not searchable
• [PHOTOS] Avatar timestamp sometimes says “2020 years ago”

2.2.7 – 6 May, 2019

• [PeepSo] Post Type selection button now shows all available icons (Photos, Videos, Polls etc)
• [PeepSo] Hide the Post Type selection if there is only one option available
• [GROUPS] Post To Group overlay design is more consistent and mobile friendly
• [GROUPS] Show Post To Group in the profile postbox

• [GROUPS] Non-sequential activity ID causes pinned group posts to show out of order
• [BP] BuddyPress Migrator fails to import multiple group admins
• [PeepSo] Clicking “show more comments” button on the root comments thread also trigger “show more comments” buttons

2.2.6 – 29 April, 2019

• [PeepSo] Ensured WordPress 5.2 compatibility
• [PeepSo] Registration can be enabled independent from WordPress registration
• [PeepSo] Admins can see and modify the post privacy of all posts
• [PeepSo] Postbox “post types” grouped in a single dropdown
• [GROUPS] Admin can define the default view (categories or group list) when categories are enabled
• [WPADS] Category & Grid view
• [WPADS] Ability to disable features
• [WPADS] Search by location

• [PeepSo] Additional CSS selectors for multiple select profile fields
• [PeepSo] Disallow blocking admins, remove user from blocks when promoted to admin
• [FRIENDS] Load Friends with cacheable AJAX to avoid slow queries on very big communities (50k+)
• [GROUPS] Better cleanup of notifications and posts when a group is deleted
• [MEDIA] Better FFmpeg detection

• [PeepSo] Registration shortcode renders nothing if URL does not contain a trailing slash
• [PeepSo] Native County field is missing “registration” and “searchable” options

2.2.5 – 17 April, 2019

• [PeepSo] MarkDown support for table syntax
• [PeepSo] New postbox UI & UX
• [GROUPS] Guest access improvements
• [GROUPS] Post straight to group

• [PeepSo] Allow deleting the automated Blog Posts activities
• [PeepSo] Better Scheduled Posts date picker on mobile
• [GROUPS] “Post to group” overlay should search as text is typed
• [GROUPS] Added “create group” button in profiles
• [WORDFILTER] Added “•” as the default censorship character

• [PeepSo] Hashtag URLs containing HTML tags
• [PeepSo] Buttons to add new Reactions / Profile Fields are hidden in RTL
• [BADGEOS] Points not awarded after certain steps
• [FRIENDS] A few untranslatable strings
• [GROUPS] Move GroupFollowers integrity scripts to Maintenance class
• [WOOCOMMERCE] Third party payment integrations causing calls to missing templates

2.2.4 – 9 April, 2019

• A few days ago it was brought to our attention that the Audio Uploads feature allows uploading other file types. According to preliminary research, files such as PHP or HTML were not going through, which meant the severity of the issue is rather low.

2.2.3 – 2 April, 2019

• [PeepSo] Hashtags: improved handling of non-Latin characters
• [PeepSo] Compatibility with Two Factor Authentication plugin
• [PeepSo] Follow “registration enabled” WordPress preference on fresh installs
• [PeepSo] Page to manage brute force login attempts
• [CHAT] Option to disable Chat on selected pages
• [USERLIMITS] Cover photo requirement

• [PeepSo] Markdown: more user-friendly whitespace & linebreak handling
• [PeepSo] Make link preview sizes more consistent
• [PeepSo] Allow admins to schedule posts further than the year 2024
• [PeepSo] Improve handling of window resize event
• [PeepSo] Trigger MD formatting on all pages
• [PeepSo] Single post OpenGraph improvements
• [Chat] Clicking on a chat notification should mark it as read

• [PeepSo] Admin unable to see some “only me” posts by other users
• [PeepSo] MarkDown parses WordFilter * characters as bold
• [PeepSo] Unable to delete scheduled posts
• [PeepSo] Report e-mail attempts sending even to empty recipient
• [PeepSo] Blocked users still receive/generate notifications and are able to send messages
• [DIGEST] E-mail doesn’t send if title contains quotes
• [WPADS] Create page is a 404 if badgeOS active and SEO links enabled

2.2.2 – 18 March, 2019

• [PeepSo] Scheduled posts
• [PeepSo] Markdown merged into Foundation

• [PeepSo] Allow MD formatting in text based profile fields
• [PeepSo] Postbox options buttons UI/UX improvements
• [PeepSo] Let the welcome post be created even when there are no profile fields
• [PeepSo] The “back” button in External Link Warning needs to close the tab if links open in new tabs
• [FRIENDS] Clear the transient cache upon widget settings change

• [PeepSo] Searching issues when “Fast Queries” are enabled
• [PeepSo] Hide the “welcome to PeepSo” screen in wp-admin from non-admins
• [PeepSo] Third party username cleanup not working with WooCommerce Aero Checkout
• [MEDIA] Improve handling of conversion failures due to insufficient server resources

2.2.1 – 4 March, 2019

• [PeepSo] Repeat the e-mail field on registration form to avoid typos
• [PeepSo] Create a “Welcome Post” with selected Profile Fields upon first user login (closed beta)
• [PeepSo] Experimental “Faster Queries” mode
• [MARKDOWN] handle all processing with JavaScript
• [MARKDOWN] override the default linebreak behaviour to more human-intuitive
• [MARKDOWN] add support for links syntax

• [PeepSo] Deleted unnecessary .htaccess file from the plugin root
• [PeepSo] Clear the password field upon failed login
• [PeepSo] Better translation support for the Date / Age profile fields
• [PeepSo] Merge Location, Moods, Tags and some relevant options into a new config tab: Stream Posts
• [GROUPS] Let admin define the default amount of groups showing inside each category
• [GROUPS] Let admin define all categories to be expanded by default

• [PeepSo] Link previews render twice
• [PeepSo] External link warning interferes with profile social sharing
• [PeepSo] WordFilter interferes with BlogPosts activity if the URL contains an excluded word
• [PeepSo] WordFilter interferes posts if an excluded word clashes with PEEPSONEWLINE
• [PeepSo] Member listing shows everyone upon empty search
• [PeepSo] Regular likes still show in single post view despite Reactions already merged with PeepSo
• [PeepSo] Bundled Reaction icons don’t display properly on Windows Server
• [CHAT] Legacy / Mobile Messages postbox shows add-ons that belong to regular posts
• [GROUPS] Managers should be always able to post and invite users, even when posting and invites are disabled by the Owner

2.3.0.1 – 21 May, 2019

• Wrong menu position caused by Header widget wrapper

2.3.0.0 – 20 May, 2019

• Page options: Hide header, Hide header menu & Hide footer
• Hide header widget under icon on mobile view (Admin > Gecko > General tab)

• Improved PeepSo group colors in Dark mode

• Wrong footer position on mobile view

2.2.7.1 – 7 May, 2019

• Elementor should no longer cause wrong footer position
• OpenGraph image on child-theme was loaded from parent theme
• Wrong background color on media box

2.2.7.0 – 6 May, 2019

• Dark mode (alpha version)

• Removed default Gecko logo and replaced with Site title
• Let WordPress handle site title

• Added tags to posts
• Removed “Comments are disabled” message from single pages
• WooCommerce overrides update
• Shortcodes in OpenGraph description

2.2.6.0 – 29 April, 2019

• Customizer: Header Menu links color on hover
• Customizer: Header “Burger” icon color

• Mobile view for Gecko Options panel

• WooCommerce overrides were outdated
• Footer in the middle of the page

2.2.5.0 – 17 April, 2019

• Customizer: Static header
• Options: Global option to hide sidebars on Blog posts
• Options: Global option to hide update date on blog posts
• Page options: Show/Hide update date on single post
• Page options are now available on WPAdverts
• Customizer: Mobile logo – different logo on small devices

• Footer will stick to bottom of the screen on low height pages
• We improved BlogPosts comments section to blend it better with the article block
• Added <body> padding for Transparent Header unless “Builder Friendly template” option is enabled
• Blog category only on blog posts
• Post meta only on blog posts
• Default table styling

• Smooth scrolling affected WooCommerce product detail tabs
• Comments on single page are now visible

2.2.4.0 – 9 April, 2019

• No other changes were introduced in the Gecko theme, as this version is only shipping a patch to the Audio Uploads issue.

2.2.3.0 – 2 April, 2019

• New 404 page
• Scroll to top button (with option to hide it – “Customizer > General” settings)
• Smooth scrolling for anchors

• Improved gap on mobile between sidebars and content wrapper
• Added sidebars to Search page
• Added #main id to the content wrapper (easier to target content in ajax search plugins)
• List formatting

• Active checkbox was invisible on PeepSo polls
• Fixed padding on Elementor builder pages

2.2.2.0 – 18 March, 2019

• Page options: Header blend mode
• Footer social widget position
• Fonts: System font, Roboto, Roboto Condensed

• Option to show 6 footer widgets in a row
• Category on single post is now visible
• Improved margins on Gutenberg gallery block

• Images on single post sometimes broke the layout
• Category description is now visible on front-end
• Fixed cover reposition on Profile with “Wide Cover” option selected

2.2.1.0 – 4 March, 2019

• WooCommerce: improved widgets design
• Bold fonts were too thin on too high resolutions
• Mobile menu close button moved to top
• Top padding on tablets was too small

• Gecko header overlaps Beaver builder menu
• Single page title should not be a link
• Logo is now properly aligned to the left side
• Redirect to homepage after logout (mobile menu)
• Fixed conflict with old FontAwesome library