# Changelog All notable changes to **IP Locator** are documented in this *changelog*. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and **IP Locator** adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). ## [4.4.0] - 2026-03-20 ### Added - Compatibility with WordPress 7.0. ### Changed - Minimal requirements are now PHP 8.2 and WordPress 6.4. - Some strings in `readme.txt` have been updated. ### Removed - Compatibility with PHP 8.1. - Compatibility with WordPress 6.2 & 6.3. ## [4.3.0] - 2025-11-22 ### Added - Compatibility with WordPress 6.9. ## [4.2.1] - 2025-04-14 ### Changed - Changes `readme.txt` for WordPress 6.8 compatibility. ## [4.2.0] - 2025-03-17 ### Added - Compatibility with WordPress 6.8. ### Changed - Updated ActionScheduler from version 3.9.0 to version 3.9.2. ### Fixed - [SEC005] XSS vulnerability in shortcode (thanks to [Trương Hữu Phúc](https://patchstack.com/database/researcher/932d7d24-fe48-49a3-b915-74f9883dd900) from [Patchstack](https://patchstack.com)). - Plugin update process may be confused when it founds error in release file. ## [4.1.0] - 2024-11-22 ### Added - Compatibility with WordPress 6.6 & 6.7. ### Changed - Ability to self-update from Github. - The plugin user agent is now more consistent and "standard". - The source of IP data is now hosted on its own domain (geoip.assets.perfops.one). - Updated ActionScheduler from version 3.7.4 to version 3.9.0. ### Fixed - IP Locator trigger PHP Fatal error when trying to guess a language with ICU version greater than 74.0 (thanks to [Lukas Gächter](https://github.com/gchtr)). - There's a WordPress core "feature" which causes some PII to leak (to wp.org) during plugin and theme updates. This is no more the case for this plugin. - In some cases, a WordPress notice can be triggered concerning the loading sequence of translations. ### Removed - Test site launching from wordpress.org plugin page. - All Databeam hooks and libraries, as the Databeam project is abandoned. - Dependency on wp.org for updates. ## [4.0.0] - 2024-05-28 ### Added - [BC] To enable installation on more heterogeneous platforms, the plugin now adapts its internal logging mode to already loaded libraries. ### Changed - Updated DecaLog SDK from version 4.1.0 to version 5.0.0. ### Fixed - PHP error with some plugins like Woocommerce Paypal Payments. ## [3.11.0] - 2024-05-07 ### Changed - The plugin now adapts its requirements to the PSR-3 loaded version. ## [3.10.3] - 2024-05-04 ### Fixed - PHP error when DecaLog is not installed. ## [3.10.2] - 2024-05-04 ### Changed - Updated DecaLog SDK from version 3.0.0 to version 4.1.0. - Updated ActionScheduler from version 3.7.3 to version 3.7.4. - Minimal required WordPress version is now 6.2. ## [3.10.1] - 2024-03-25 ### Changed - Updated Action Scheduler from 3.5.2 to 3.7.3. ### Fixed - IP Locator may interfere with WooCommerce table migration (thanks to [Mil1](https://github.com/Mil1)). ## [3.10.0] - 2024-03-02 ### Added - Compatibility with WordPress 6.5. ### Changed - Minimal required WordPress version is now 6.1. - Minimal required PHP version is now 8.1. ## [3.9.0] - 2023-10-25 ### Added - Compatibility with WordPress 6.4. ### Fixed - With PHP 8.2, in some edge cases, deprecation warnings may be triggered when viewing analytics. ## [3.8.0] - 2023-07-12 ### Added - Compatibility with WordPress 6.3. ### Changed - The color for `shmop` test in Site Health is now gray to not worry to much about it (was previously orange). ## [3.7.1] - 2023-03-02 ### Fixed - [SEC004] CSRF vulnerability / [CVE-2023-27444](https://www.cve.org/CVERecord?id=CVE-2023-27444) (thanks to [Mika](https://patchstack.com/database/researcher/5ade6efe-f495-4836-906d-3de30c24edad) from [Patchstack](https://patchstack.com)). ## [3.7.0] - 2023-02-24 The developments of PerfOps One suite, of which this plugin is a part, is now sponsored by [Hosterra](https://hosterra.eu). Hosterra is a web hosting company I founded in late 2022 whose purpose is to propose web services operating in a European data center that is water and energy efficient and ensures a first step towards GDPR compliance. This sponsoring is a way to keep PerfOps One plugins suite free, open source and independent. ### Added - Compatibility with WordPress 6.2. ### Changed - Improved loading by removing unneeded jQuery references in public rendering (thanks to [Kishorchand](https://github.com/Kishorchandth)). - The source of IP data is now hosted on Hosterra. ### Fixed - In some edge-cases, detecting IP may produce PHP deprecation warnings (thanks to [YR Chen](https://github.com/stevapple)). ## [3.6.0] - 2022-10-06 ### Added - Compatibility with WordPress 6.1. - Compatibility with PHP 8.2. - There's a new warning in admin pages when PHP Intl extension is not installed. - [WPCLI] The results of `wp location` commands are now logged in [DecaLog](https://wordpress.org/plugins/decalog/). ### Changed - Improved primary language detection. - Improved ephemeral cache in analytics. - Updated Action Scheduler from 3.4.0 to 3.5.2. - [WPCLI] The results of `wp location` commands are now prefixed by the product name. - Improved resiliency to partially wrong or corrupted ICU data. ### Fixed - [SEC003] Moment.js library updated to 2.29.4 / [Regular Expression Denial of Service (ReDoS)](https://github.com/moment/moment/issues/6012). - With some versions of Intl PHP extension, language detection may be wrong. - ICU data may be partially wrong. ## [3.5.0] - 2022-04-21 ### Added - Compatibility with WordPress 6.0. ### Changed - Site Health page now presents a much more realistic test about object caching. - Updated DecaLog SDK from version 2.0.2 to version 3.0.0. - Updated Action Scheduler from 3.2.1 to 3.4.0. ### Fixed - [SEC002] Moment.js library updated to 2.29.2 / [CVE-2022-24785](https://github.com/advisories/GHSA-8hfj-j24r-96c4). ## [3.4.1] - 2022-01-17 ### Fixed - The Site Health page may launch deprecated tests. ## [3.4.0] - 2022-01-17 ### Added - Compatibility with PHP 8.1. ### Changed - Updated DecaLog SDK from version 2.0.0 to version 2.0.2. - Updated PerfOps One library from 2.2.1 to 2.2.2. - Refactored cache mechanisms to fully support Redis and Memcached. - Improved bubbles display when width is less than 500px (thanks to [Pat Ol](https://profiles.wordpress.org/pasglop/)). - The tables headers have now a better contrast (thanks to [Paul Bonaldi](https://profiles.wordpress.org/bonaldi/)). ### Fixed - Object caching method may be wrongly detected in Site Health status (thanks to [freshuk](https://profiles.wordpress.org/freshuk/)). - The console menu may display an empty screen (thanks to [Renaud Pacouil](https://www.laboiteare.fr)). - There may be name collisions with internal APCu cache. - An innocuous Mysql error may be triggered at plugin activation. ## [3.3.0] - 2021-12-07 ### Added - Compatibility with WordPress 5.9. - New button in settings to install recommended plugins. - The available hooks (filters and actions) are now described in `HOOKS.md` file. ### Changed - Improved update process on high-traffic sites to avoid concurrent resources accesses. - Better publishing frequency for metrics. - Updated labels and links in plugins page. - X axis for graphs have been redesigned and are more accurate. - Updated the `README.md` file. ### Fixed - Country translation with i18n module may be wrong. ## [3.2.0] - 2021-09-07 ### Added - It's now possible to hide the main PerfOps One menu via the `poo_hide_main_menu` filter or each submenu via the `poo_hide_analytics_menu`, `poo_hide_consoles_menu`, `poo_hide_insights_menu`, `poo_hide_tools_menu`, `poo_hide_records_menu` and `poo_hide_settings_menu` filters (thanks to [Jan Thiel](https://github.com/JanThiel)). ### Changed - Updated DecaLog SDK from 1.2.0 to 2.0.0. - Updated Action Scheduler from 3.1.4 to 3.2.1. ### Fixed - There may be name collisions for some functions if version of WordPress is lower than 5.6. - The main PerfOps One menu is not hidden when it doesn't contain any items (thanks to [Jan Thiel](https://github.com/JanThiel)). - In some very special conditions, the plugin may be in the default site language rather than the user's language. - The PerfOps One menu builder is not compatible with Admin Menu Editor plugin (thanks to [dvokoun](https://wordpress.org/support/users/dvokoun/)). ## [3.1.2] - 2021-08-11 ### Changed - New redesigned UI for PerfOps One plugins management and menus (thanks to [Loïc Antignac](https://github.com/webaxones), [Paul Bonaldi](https://profiles.wordpress.org/bonaldi/), [Axel Ducoron](https://github.com/aksld), [Laurent Millet](https://profiles.wordpress.org/wplmillet/), [Samy Rabih](https://github.com/samy) and [Raphaël Riehl](https://github.com/raphaelriehl) for their invaluable help). ### Fixed - In some conditions, the plugin may be in the default site language rather than the user's language. - Purging analytics history may produce a PHP notice. ## [3.1.1] - 2021-06-22 ### Fixed - wp.org distribute a Release Candidate, not the 3.1.0 version. ## [3.1.0] - 2021-06-22 ### Added - Traces now include metrics collation span. - New option, available via settings page and wp-cli, to disable/enable metrics collation. ### Changed - Updated DecaLog SDK. - Updated developer's documentation. - [WP-CLI] `location status` command now displays DecaLog SDK version too. ### Fixed - Analytics and historical data options are not saved, nor applied. ## [3.0.0] - 2021-05-25 ### Added - Compatibility with WordPress 5.8. - The settings screen now displays a warning if IP data auto-updates is not supported. - IP locator now supports Google Cloud-LB country detection. - Compatibility with future DecaLog SDK. - [BC] The version of IP Locator API is now `v3`. ### Changed - As the IP Database provider (WebNet77/Software77) has shutdown, there's a new data provider - more accurate and more durable: me! - Improved internal IP detection: support for cloud load balancers. - Improved IP data download process. - Improved data signature verification. ### Fixed - Erroneous message when it's not possible to download data signature. ## [2.2.0] - 2021-02-24 ### Added - Compatibility with WordPress 5.7. ### Changed - Consistent reset for settings. - Improved translation loading. - [WP_CLI] `location` command have now a definition and all synopsis are up to date. ### Fixed - In Site Health section, Opcache status may be wrong (or generates PHP warnings) if OPcache API usage is restricted. ## [2.1.0] - 2020-11-23 ### Added - Compatibility with WordPress 5.6. ### Changed - Improvement in the way roles are detected. ### Fixed - [SEC001] User may be wrongly detected in XML-RPC or Rest API calls. - When site is in english and a user choose another language for herself/himself, menu may be stuck in english. - [WP-CLI] Typos in `status` command result. ## [2.0.0] - 2020-10-15 ### Added - Full analytics dashboard with detailed accesses, countries and languages (see "Locations" in PerfOps Analytics menu). - New tool (in PerfOps Tools menu) to analyze an IP address. - [WP-CLI] New command to get a location detail: see `wp help location describe` for details. - [WP-CLI] New command to toggle on/off main settings: see `wp help location settings` for details. - [WP-CLI] New command to display IP Locator status: see `wp help location status` for details. - [WP-CLI] New command to display locations statistics: see `wp help location analytics` for details. - New Site Health "info" section about shared memory. - [API] New `/wp-json/ip-locator/v1/describe` endpoint to analyze an IP. Available to all authenticated users. - Compatibility with WordPress 5.5. - [MultiSite] New menu to get Locations right from "my sites" or network admin page. - Support for data feeds - reserved for future use. ### Changed - Improvement in the way roles are detected. - The positions of PerfOps menus are pushed lower to avoid collision with other plugins (thanks to [Loïc Antignac](https://github.com/webaxones)). - [MultiSite] Improved default site detection. - Improved layout for language indicator. - Admin notices are now set to "don't display" by default. - Improved IP detection (thanks to [Ludovic Riaudel](https://github.com/lriaudel)). - Improved changelog readability. - The integrated markdown parser is now [Markdown](https://github.com/cebe/markdown) from Carsten Brandt. - A warning is now displayed in the settings page when no device detection mechanism is found. - Prepares PerfOps menus to future 5.6 version of WordPress. ### Fixed - The remote IP can be wrongly detected when behind some types of reverse-proxies. - When trying to detect local network IPs, an (innocuous) error `Cannot load resource element und_xx: U_MISSING_RESOURCE_ERROR` may be shown in logs. - With Firefox, some links are unclickable in the Control Center (thanks to [Emil1](https://wordpress.org/support/users/milouze/)). - Some internal logs are wrongly classified as 'INFO' when it should be 'DEBUG'. - Some typos in `CHANGELOG.md`. ### Removed - Parsedown as integrated markdown parser. - The section "Current connexion" of the data tab, as it is now in tools. ## [1.0.6] - 2020-06-29 ### Changed - Detection of improper PHP intl module installation. - Full compatibility with PHP 7.4. - Automatic switching between memory and transient when a cache plugin is installed without a properly configured Redis / Memcached. ### Fixed - When used for the first time, settings checkboxes may remain checked after being unchecked. ## [1.0.5] - 2020-05-05 ### Fixed - There's an error while activating the plugin when the server is Microsoft IIS with Windows 10. - With Microsoft Edge, some layouts may be ugly. ## [1.0.4] - 2020-04-18 ### Changed - [MultiSite] Only main site is now responsible for updating data, to avoid quota overrun. ## [1.0.3] - 2020-04-10 ### Fixed - Some main settings may be not saved. ### Removed - A link to a non-existent page. ## [1.0.2] - 2020-04-07 ### Changed - Improved initialization and update of IP data. - Improves error handling when downloading IP data files. ### Fixed - With some old versions of DB servers, tables can't be created. - Some typos in the settings screen. ## [1.0.1] - 2020-04-02 Initial release