=== Divelogs Widget ===
Contributors: rainermohr
Donate link: https://divelogs.de/
Tags: divelogs, latest dive, SCUBA, diving, Logbook
Requires at least: 5.0
Tested up to: 6.9
Stable tag: 1.6
Requires PHP: 7.4
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Displays your latest dive from divelogs.de in a widget

== Description ==

Displays your latest dive from divelogs.de / divelogs.org in a widget.<br>
Currently german, english, french, dutch, spanish, italian and hebrew are supported.<br>
You can choose if you also want to display your dive's profile graph.<br>
Also provides a shortcode to display your latest dive or any specific dive in a page

== Installation ==

1. Download the ZIP file
2. Go to your WP Admin -> Plugins -> install -> upload
3. upload the ZIP file
4. Activate the plugin after upload
5. You now have a new widget

== Frequently Asked Questions ==

= What do I need to have to use this? =

You need a (free) Online logbook at https://divelogs.de

= My latest dive won't show =

Your logbook needs to be public for the latest dive to show. Private logbooks are not accessible.

== Screenshots ==

1. Widget Settings 
2. The Widget
3. Using the shortcode

== Changelog ==

= 1.6 =
* Security fix: Fixed stored XSS vulnerability in shortcode attributes (CVE-2025-13962)
* Added proper input sanitization and output escaping throughout the plugin
* Replaced deprecated WP_Widget constructor call with parent::__construct()
* Replaced fopen with wp_remote_get for safer HTTP requests
* Improved WordPress coding standards compliance

= 1.5 =
* Small Updates, Checked with Wordpress Version 6.6.3

= 1.4 =
Option to load in background via PHP instead of Javascript. This is for themes, that move Javascript calls to the end of the page. Added Hebrew as language option.

= 1.3 =
Fixed PHP8.1 Problem...

= 1.2.1 =
Added Italian as language option...

= 1.2 =
Added a shortcode [latestdive] for usage in any page...

= 1.1.2 =
Changed from http to secure https...

= 1.1.1 =
Added Spanish as language option...

= 1.1.0 =
Added French and Dutch as language options...

= 1.0.2 =
Corrected an issue if PHP notices are displayed

= 1.0.1 =
Corrected character encoding issue

= 1.0 =
Initial release

== Upgrade Notice ==

= 1.6 =
Security update: Fixes a stored XSS vulnerability. Update immediately.

= 1.0.2 =
Fixes a PHP notice being displayed if you turn off the profile graph and your PHP is configured to show notices

= 1.0.1 =
Fixes some special characters not being displayed correctly