Luzid Backup to Nextcloud

Änderungsprotokoll

1.3.2

• Security: Password encryption at rest – The Nextcloud app password is now encrypted in the database using AES-256-CBC with the site’s AUTH_KEY. Existing plaintext passwords are automatically migrated on first use. Graceful fallback if OpenSSL is not available on the server.

1.3.1

• Fixed: Upload timeout with many files – set_time_limit() is now called before each individual file upload, preventing PHP from killing the process after 20-30 files. Progress bar now updates per file (e.g. „Uploading file 47/187“) instead of per source.
• Fixed: Language preference not saved – Switching to English/German is now persisted in the database. The chosen language stays active across page reloads and redirects.

1.3.0

• Streaming uploads: Files > 2 MB are now uploaded via cURL streaming (reads from disk, never loads entire file into RAM). Solves timeout and memory issues on shared hosting with large backup files.
• Context-aware buttons: Each tab shows only the relevant action buttons. Setup shows only „Save & Test“; Backup Sources and Schedule show „Save Settings“; How-To hides all buttons.
• Upload button gating: „Start Manual Upload“ is disabled (greyed out) until at least one backup source is enabled.
• Password field improvements: Visibility toggle (eye icon), autocomplete="new-password" to prevent browser autofill, renamed form field name to avoid browser recognition.
• Removed „Remove password“ checkbox: Passwords are now simply replaced by entering a new one.
• Default source paths: Backup source paths and file extensions always fall back to sensible defaults (even after reset). Empty fields are never saved – defaults are restored automatically.
• „Delete All Settings“ preserves defaults: Resetting the plugin now keeps default source paths and extensions intact, only clears user configuration, logs, and schedule.
• Guided setup flow: New hint text on Setup tab guides users through the configuration process.
• Updated How-To guides: German and English documentation rewritten to match current UI and features.
• Fixed: $log / $source / $s variable reference bugs from prefix renaming.
• Fixed: Sources tab fields (path, extensions) now save correctly.

1.2.9

• WordPress.org Review Compliance – all review team requirements addressed
• Behoben: Removed invalid Author URI (luzid.app)
• Behoben: Contributors changed from \“luzid\“ to \“luzidmedia\“
• Fixed: Replaced WP_CONTENT_DIR constant with wp_normalize_path( dirname() )
• Fixed: Explicit field extraction from $_POST instead of processing the whole stack
• Fixed: JS object name luzidBackup renamed to luzid_backup_data (prefixed)
• Behoben: All global variables in admin-page.php prefixed with luzid_btn_

1.2.4

• Settings now save correctly on first install
• WebDAV credentials persist after „Save & Test“
• Better fallback handling for tab detection

1.2.3

• Replaced cURL with wp_remote_request() for WordPress compliance
• All PHPCS warnings resolved

1.2.2

• All date() replaced with gmdate()
• All wp_redirect() replaced with wp_safe_redirect()
• Proper wp_unslash() + sanitize everywhere

1.2.1

• Initial public release with full feature set

1.2.0

• Beta release