=== Surbma | Booking.com Shortcode ===
Contributors: Surbma, CherryPickStudios
Donate link: https://surbma.com/donate/
Tags: Booking.com, shortcode
Requires at least: 5.1
Tested up to: 7.0
Stable tag: 2.1.1
Requires PHP: 7.4
License: GPLv2
License URI: http://www.gnu.org/licenses/gpl-2.0.html

A simple shortcode to include Booking.com search box into WordPress.

== Description ==

A simple shortcode to include Booking.com search box into WordPress. This is a very useful plugin if your user don't have a permission to embed javascript in the content.

The shortcode: `[surbma-bookingcom param="ALL_THE_PARAMETERS"]`

Where param is the parameter, you can find in the Booking.com embed code. You need to find the src field, where you have to copy all the parameters after the `https://www.booking.com/general.html?` url.

You can find the parameters at the end of your Booking.com script's url:
`<script type="text/javascript" src="https://www.booking.com/general.html?ALL_THE_PARAMETERS"></script>`

== Installation ==

1. Upload `surbma-bookingcom-shortcode` folder to the `/wp-content/plugins/` directory
2. Activate the Surbma | Booking.com Shortcode plugin through the 'Plugins' menu in WordPress
3. That's it. Now you can use the shortcode. :)

== Frequently Asked Questions ==

= What is Booking.com? =

Booking.com offers online accommodation booking. For more information, please visit the official Booking.com website: <a href="https://www.booking.com/" target="_blank">www.booking.com</a>

= Can I customize the look of the form? =

No, you can't.

= What does Surbma mean? =

It is the reverse version of my last name. ;)

== Changelog ==

= 2.1.1 =

Release date: 2026-04-12

- SECURITY - Shortcode `param` is stripped of HTML, the script URL is built safely, and `esc_url()` is used on output (addresses stored XSS reports for contributor-level shortcode use).

= 2.1 =

Release date: 2024-01-01

FIX

- Changed textdomain hook to init.
- Security fix for shortcode: parameters are properly escaped.

OTHER

- Code optimizations.


= 2.0 =

Release date: 2020-02-10

- TWEAK - Tested with WordPress 5.3 version.
- TWEAK - Updated to use a new way to deploy it to wp.org repo.

= 1.1.0 =

- Changed shortcode name to surbma-bookingcom from booking_com. The old shortcode is still working, but it's deprecated and it will be removed from the next version.

= 1.0.3 =

- Tested up to WordPress 4.9 version.

= 1.0.2 =

- Changed some texts, text domain and function names.

= 1.0.1 =

- Fix localization.
- Prevent direct access to the plugin.

= 1.0.0 =

- Initial release.