From 6c80a3af6a4e921b119db3d96eb8337918783e55 Mon Sep 17 00:00:00 2001 From: Chris Portscheller Date: Thu, 23 Jul 2026 09:15:09 -0500 Subject: [PATCH 1/2] =?UTF-8?q?release:=202.3.0=20=E2=80=94=20one-click=20?= =?UTF-8?q?Cloud=20connect,=20entitlements=20sync,=20chart=20fix?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Version bumps (webdecoy.php header + WEBDECOY_VERSION, readme stable tag), changelogs, plugin-info.json for the CDN channel, and an updated External Services disclosure covering the connect handshake (app/api.webdecoy.com) and twice-daily entitlements fetch (ingest.webdecoy.com) — all strictly after user-initiated Connect. --- cdn-files/plugin-info.json | 14 +++++++------- changelog.txt | 6 ++++++ readme.txt | 20 ++++++++++++++------ webdecoy.php | 4 ++-- 4 files changed, 29 insertions(+), 15 deletions(-) diff --git a/cdn-files/plugin-info.json b/cdn-files/plugin-info.json index 02b69a5..9c49298 100644 --- a/cdn-files/plugin-info.json +++ b/cdn-files/plugin-info.json @@ -1,17 +1,17 @@ { "name": "WebDecoy Bot Detection", "slug": "webdecoy", - "version": "2.2.2", + "version": "2.3.0", "author": "WebDecoy", "author_profile": "https://webdecoy.com", - "requires": "5.6", - "tested": "6.7", + "requires": "6.1", + "tested": "7.0", "requires_php": "7.4", - "download_url": "https://cdn.webdecoy.com/wordpress/webdecoy-2.2.2.zip", + "download_url": "https://cdn.webdecoy.com/wordpress/webdecoy-2.3.0.zip", "sections": { - "description": "

WebDecoy provides enterprise-grade bot detection and fraud protection for WordPress websites. Unlike simple CAPTCHA solutions, WebDecoy uses a layered defense approach that analyzes visitors from multiple angles — including deterministic tripwires that catch scanners with zero false positives.

Key Features

", - "installation": "
  1. Upload the plugin files to /wp-content/plugins/webdecoy
  2. Activate the plugin through the Plugins menu
  3. Tripwires and local protection are active out of the box — no API key required
  4. Optionally go to WebDecoy > Settings > WebDecoy Cloud to connect for centralized monitoring and enforcement
", - "changelog": "

2.1.0

2.0.0

1.3.0

", + "description": "

WebDecoy provides enterprise-grade bot detection and fraud protection for WordPress websites. Unlike simple CAPTCHA solutions, WebDecoy uses a layered defense approach that analyzes visitors from multiple angles \u2014 including deterministic tripwires that catch scanners with zero false positives.

Key Features

", + "installation": "
  1. Upload the plugin files to /wp-content/plugins/webdecoy
  2. Activate the plugin through the Plugins menu
  3. Tripwires and local protection are active out of the box \u2014 no API key required
  4. Optionally go to WebDecoy > Settings > WebDecoy Cloud to connect for centralized monitoring and enforcement
", + "changelog": "

2.3.0

2.1.0

2.0.0

1.3.0

", "faq": "

Does WebDecoy slow down my site?

No. WebDecoy adds negligible latency; tripwire checks are a fast path lookup and clearance minting is idle-deferred.

Will it block search engines?

No. WebDecoy automatically allows 60+ known good bots including all major search engines, and tripwires only fire on hidden paths no legitimate crawler follows.

" }, "icons": { diff --git a/changelog.txt b/changelog.txt index 83fed11..a4c293f 100644 --- a/changelog.txt +++ b/changelog.txt @@ -1,5 +1,11 @@ *** WebDecoy Bot Detection Changelog *** += 2.3.0 - 2026-07-23 = +* Added: One-click WebDecoy Cloud connect (Settings → WebDecoy Cloud). Clicking Connect opens app.webdecoy.com to approve; on return the plugin exchanges a one-time token server-side and stores the provisioned API keys (encrypted at rest). Manual API key entry remains available under "Advanced: manual configuration". +* Added: "Send me a monthly security report" opt-in at connect time. +* Added: Plan entitlements sync (twice daily via cron) — a feature switchboard for upcoming plan-aware capabilities; any sync error fails open to the free tier. +* Fixed: Statistics page charts grew unbounded (thousands of pixels tall) once detection data existed — Chart.js canvases are now wrapped in fixed-height containers. + = 2.2.3 - 2026-07-21 = * Changed: All CSS and JavaScript is now loaded via the WordPress dependency APIs — the challenge/block interstitials use wp_register_style/script + wp_print_styles/scripts with static asset files (public/css/, public/js/webdecoy-challenge.js), and the Statistics page attaches chart data via wp_add_inline_script. No more raw