توضیحات
Let customers upload files directly on your WooCommerce product page — no more chasing emails for artwork, logos, prescriptions, or documents.
تغییرات این نسخه
1.7.7 (09.10.2026)
Security fix: Encrypt legacy public uploads with authenticated encryption when private filesystem storage cannot be created, then remove the verified plaintext originals.
Security fix: Store new uploads directly as opaque encrypted containers when private filesystem storage is unavailable, without writing plaintext into the public uploads folder.
Reliability fix: Verify each encrypted migration by byte size and SHA-256 before deleting its public plaintext source.
System Status: Report encrypted fallback availability, encrypted container totals, and the number of public plaintext files still awaiting migration.
1.7.6 (26.09.2026)
Security fix: Prevent new uploads from falling back to the public uploads directory when private storage is unavailable.
Security fix: Require exact file and access-key matches when authorizing downloads for cart sessions, order owners, guest customers, and WooCommerce managers/admins.
Security fix: Harden private-path validation and stop automatic path selection when the document root cannot be determined safely.
Security fix: Enforce product upload rules, request shape validation, upload size limits, rate limiting, free-space protection, and abandoned-upload cleanup on the server.
Security fix: Warn while legacy public files remain, use a precedence-safe Nginx deny rule, and require direct-access verification on Apache/LiteSpeed.
Reliability fix: Compare migrated files by SHA-256 content hash before deleting duplicate l
Security fix: Encrypt legacy public uploads with authenticated encryption when private filesystem storage cannot be created, then remove the verified plaintext originals.
Security fix: Store new uploads directly as opaque encrypted containers when private filesystem storage is unavailable, without writing plaintext into the public uploads folder.
Reliability fix: Verify each encrypted migration by byte size and SHA-256 before deleting its public plaintext source.
System Status: Report encrypted fallback availability, encrypted container totals, and the number of public plaintext files still awaiting migration.
1.7.6 (26.09.2026)
Security fix: Prevent new uploads from falling back to the public uploads directory when private storage is unavailable.
Security fix: Require exact file and access-key matches when authorizing downloads for cart sessions, order owners, guest customers, and WooCommerce managers/admins.
Security fix: Harden private-path validation and stop automatic path selection when the document root cannot be determined safely.
Security fix: Enforce product upload rules, request shape validation, upload size limits, rate limiting, free-space protection, and abandoned-upload cleanup on the server.
Security fix: Warn while legacy public files remain, use a precedence-safe Nginx deny rule, and require direct-access verification on Apache/LiteSpeed.
Reliability fix: Compare migrated files by SHA-256 content hash before deleting duplicate l