=== LocalWeb All In One === Contributors: sajdoko Tags: localweb, local web, chat, wim, web instant messenger Requires at least: 4.8.5 Tested up to: 7.0 Requires PHP: 7.4 Stable tag: trunk License: GPLv2 or later License URI: https://www.gnu.org/licenses/gpl-2.0.html LocalWeb All In One integrates services such as Web Instant Messenger, Google Analytics, and a consent-based cookie banner into your website. == Description == **LocalWeb All In One** is a versatile WordPress plugin developed exclusively for Local Web S.R.L clients. It integrates essential services such as Web Instant Messenger, Google Analytics, Contact Form 7, and a consent-based cookie banner, enhancing website engagement and performance. Key Features: * **Cookie Banner Integration:** Integrates cookie banner consent functionality to manage optional cookies through explicit visitor choices. * **Web Instant Messenger Integration:** Embeds the [Web Instant Messenger](https://www.webinstantmessenger.it/) script into your website, activating a chat window for enhanced user interaction . All chat interactions and information entered into the chat window are transmitted to LocalWeb's server. * **Google Analytics Integration:** Facilitates integration with both Google Analytics 4 (GA4) and Google Tag Manager (GTM) for advanced tracking capabilities. * **Contact Form 7 Integration:** Provides customization options for Contact Form 7 to optimize script and style usage based on your website’s needs. > **Note:** This plugin is intended exclusively for [LocalWeb](https://localweb.it/ "Web Marketing Agency") clients and leverages services provided by LocalWeb. For more information, updates, and support, please visit [LocalWeb's official website](https://localweb.it/). == Installation == 1. Upload the plugin folder `lw-all-in-one` and its contents to the `/wp-content/plugins/` directory of your WordPress installation. 2. Activate the plugin through the 'Plugins' screen in your WordPress admin panel. 3. A new options page named "LW AIO Options" will appear in the left-side menu of your WordPress admin panel. 4. From the "LW AIO Options" page, you can activate or deactivate the various services provided by the plugin. == Screenshots == 1. Google Analytics options plugin page. 2. Cookie Banner options plugin page. 3. Contact Form 7 options plugin page. 4. Header and Footer script options plugin page. 5. Plugin options page. == Changelog == = 1.10.6 = * Security: require authorized requests for legacy cleanup and privacy-page changes; protect executable settings across all forms. * Security: SSO adds durable atomic one-time token replay prevention, cryptographic domain binding, administrator permission enforcement, and optional account-mapping configuration. * Security: confine image conversion to canonical public uploads, bound decoding, and use distinct versioned cache keys. * Harden analytics ingestion, database pagination, output escaping, remote responses, notices and lifecycle cleanup. * Require PHP 7.4 or later; earlier advertised PHP versions were incompatible with existing plugin syntax. = 1.10.5 = * Preserve undelivered CF7 enquiries during retention; configure the delivered-row retention window. * Add durable retry state, bounded exponential retries, endpoint cooldown and bounded batch delivery. * Display delivery failures and hold the old backlog until API acceptance is confirmed. * Guard the CF7 dequeue path when the global post is absent. = 1.10.4 = * Update: Updated contact and privacy policy addresses to reflect new location = 1.10.3 = * Fix: Fixed the options saving bug on update. = 1.10.2 = * UX: Cleaned up the admin dashboard by using PHP to natively block third-party plugin notices from rendering, while safely preserving WordPress core and plugin update banners. = 1.10.1 = * Security: Fixed missing authorization capability check on privacy policy pages creation. * Security: Fixed stored XSS vulnerability by restricting header/footer script saving to administrators with `unfiltered_html` capability. * Security: Fixed HTML minification regex failure causing site blanking (Denial of Service). * Security: Enhanced SSO domain binding validation. * Security: Improved PHP code stripping in scripts sanitization. * Security: Implemented rate limiting for unauthenticated Google Analytics event endpoint. = 1.10.0 = * Introduced Performance Optimization module (WebP image conversion, Critical CSS extraction, HTML Minification). = 1.9.1 = * Add SSO functionality with public key verification and endpoint handling = 1.9.0 = * Updated styles for improved UI consistency * Enhanced accessibility features * Fixed various bugs and issues = 1.8.4 = * Enhance security and code quality by sanitizing output and database queries = 1.8.3 = * Activated cookie banner by default upon plugin activation. = 1.8.2 = * Updated translation files = 1.8.0 = * Added functionalities to display cookie banner consent. = 1.7.4 = * Added analytics tracking functionalities for WooCommerce data. = 1.7.3 = * Added new Spanish language. = 1.7.2 = * Added backward compatibility down to PHP 5.6. = 1.7.1 = * Fixed error with str_contains() in older versions of PHP. = 1.7.0 = * Added support for PHP v8.2. = 1.6.9 = * Removed Speed Tab Purify service and performed code cleanup. = 1.6.8 = * Added support for GA4 and Google Tag Manager. = 1.6.7 = * Updated to support Contact Form 7 events update. = 1.6.6 = * Removed forgotten test variable from `\admin\class-lw-all-in-one-admin.php` line 127. = 1.6.5 = * Updated to comply with WordPress Plugin Directory guidelines by implementing proper sanitizations. Added sanitizations for the host `localweb.it`. = 1.6.4 = * Updated the Google Analytics tracking code validation function. = 1.6.3 = * Adjusted the plugin to align with WordPress Plugin Directory guidelines. = 1.6.2 = * Introduced an option to purify CSS. = 1.6.1 = * Added an option to dequeue Contact Form 7 scripts/styles if the shortcode is not set. = 1.6.0 = * Improved WIM (Web Instant Messenger) API. = 1.5.9 = * Added an option to reset plugin options to their default settings. = 1.5.8 = * Fixed an error related to header/footer scripts. = 1.5.7 = * Added a filter to enable automatic plugin updates in the future. = 1.5.6 = * Updated privacy pages. = 1.5.5 = * Added an option to add custom analytics tracking events. = 1.4.5 = * Integrated WIM options to deactivate the service on LocalWeb's server. Also included other minor improvements. = 1.4.3 = * Added confirmation prompts for deleting saved records and implemented a function for checking data retention options. = 1.4.1 = * Resolved issues with plugin options during plugin upgrades. = 1.4.0 = * Introduced a new 'Plugin Options' tab with settings for data retention and data deletion on uninstall. = 1.3.0 = * Implemented WP_List_Table for managing saved GA events and CF7 (Contact Form 7) pages. = 1.2.5 = * Fixed the scheduled hook function for CF7 synchronization with the LocalWeb server. = 1.2.4 = * Optimized the overall code design patterns. = 1.1.3 = * Added an option to insert Packet Type and Id in LW AIO Options instead of using a hidden field in contact forms. = 1.1.2 = * Fixed the time format when saving CF7 form data to the database. = 1.1.2 = * Initial version online.