Init User Engine – WordPress Plugin to Build Engaging Communities with Full Gamification

Review

Changelog

• 1.4.3 – VIP State Body Classes & UI Extensibility
  • Added VIP state–aware body classes:
    • Automatically adds iue-vip for active VIP users.
    • Adds iue-vip-expired for users whose VIP has expired.
    • Adds iue-expire-soon when VIP is close to expiration (default: ≤ 1 day).
  • Improved frontend customization for developers:
    • Introduced init_plugin_suite_user_engine_vip_expire_soon_threshold filter to customize the “expire soon” window.
    • Introduced init_plugin_suite_user_engine_body_vip_classes filter to add, modify, or remove VIP-related body classes.
    • Enables lightweight CSS customization without complex conditional logic.
  • Clear separation between VIP logic and presentation layer:
    • No impact on core VIP logic or existing data.
    • No database, schema, or API changes.
    • Ensures backward compatibility and long-term stability.
• 1.4.2 – VIP Bonus Log Sync & Transaction Accuracy
  • Synchronized VIP Bonus in Transaction Logs:
    • Coin transactions now automatically apply the correct VIP bonus % inside the log.
    • No more mismatches between actual Coin received and the logged value.
    • Bonus applies only to Coin and only when adding positive amounts.
  • Enhanced Log Data Structure:
    • Added original: amount before applying VIP bonus.
    • Added amount: amount after VIP bonus is applied.
    • Included vip_bonus and bonus_percent for easier debugging and auditing.
    • New fields integrate cleanly without breaking existing data.
  • Stability & Storage Improvements:
    • Log history capped at 100 entries using stable array_slice.
    • Prevents long-term meta bloat for users with frequent Coin activity.
    • No database schema changes.
  • Code Structure Refinements:
    • Separated original_amount and final_amount for clearer readability.
    • Bonus calculation fully aligned with init_plugin_suite_user_engine_add_coin().
    • Ensures consistent behavior across UI, backend logic, and transaction history.
• 1.4.1 – Bonus Logic Fix & Register Trigger Support
  • Fixed VIP Bonus Logic:
    • Bonus percentage now applies only when adding positive Coin values.
    • Negative adjustments (deducting Coin) no longer receive bonus.
    • Ensures accurate reward calculation and prevents unwanted balance inflation.
  • Added data-iue="register" Trigger:
    • Clicking any element with data-iue="register" now opens the login modal.
    • Automatically switches the modal to the Register tab.
    • Fully compatible with lazy-loaded Register form and Turnstile initialization.
  • WPCS & PluginCheck Cleanup:
    • Added targeted phpcs:ignore rules for false-positive warnings.
    • Handled dynamic table name warnings in prepared SQL queries.
    • No logic changes — only code quality and compliance improvements.
  • Stability & Compatibility:
    • No database changes.
    • No impact to existing APIs or REST endpoints.
    • Small patch release focused on correctness and developer experience.
• 1.4.0 – Admin Action Permission Guard
  • Improved Admin User Overview behavior:
    • The overview box (Coin / Cash / VIP / Inbox / Logs) is now always visible to the user themselves.
    • No more conditional hiding of the metabox based on role.
  • Action Permission Guard (important security upgrade):
    • Only users with manage_options (Admins) can:
      • Remove VIP
      • Ban / Unban avatar upload
    • Other users can view data but cannot trigger actions.
    • Action buttons are auto-disabled / hidden for non-admin users (visual feedback).
  • Server-side Permission Enforcement:
    • Added capability enforcement with current_user_can('manage_options') in backend actions.
    • All admin-post requests are now protected via nonce + capability validation.
    • Prevents URL/REST crafting to remove VIP or toggle avatar ban.
  • Compatibility & Stability:
    • No database changes.
    • No REST API or endpoint behavior altered.
    • Fully backward-compatible with existing logic.
• 1.3.9 – Password Visibility Toggle & Modal Stability
  • Enhanced Login / Register Forms:
    • Added Password Visibility Toggle using native SVG icons (eye / eye-off).
    • Toggle works even when the field is empty for better UX.
    • No markup changes — pure JavaScript enhancement.
  • Modal Behavior Improvements:
    • Prevent modal from closing when clicking the visibility icon.
    • Removed global early-return; modal logic only runs when required elements exist.
  • Initialization & Compatibility:
    • Automatically attaches toggle to lazy-loaded register form (via MutationObserver).
    • Fully backward compatible — no API or database changes.
• 1.3.8 – VIP Original GIF Avatar & Upload Limit
  • Enhanced Avatar Module:
    • Added option “Keep Original GIF Avatar for VIPs” (no cropping; applies to GIF only).
    • Other image formats (PNG/JPG/WebP) still follow the default crop & resize to -50.jpg and -80.jpg.
    • Added max upload size setting avatar_max_upload_mb (enforced on frontend + backend).
    • Added admin warning: GIF avatars can be large and may affect performance.
  • REST & Frontend: API returns url_orig/url_80/url_50; frontend prioritizes orig → 80 → 50; JS uses InitUserEngineData.avatar_max_upload_mb.
  • New Hook: init_plugin_suite_user_engine_should_keep_original allows overriding the keep-original behavior.
  • Compatibility: no breaking changes; avatar permissions and VIP logic remain unchanged.
• 1.3.7 – Redeem Code System (Gift Code / Voucher)
  • Added Redeem Code Module (Gift Code / Voucher System):
    • Admin can create codes with 3 usage modes:
      • Single use – automatically disabled after the first redemption
      • Multi-use – configurable redemption limit
      • User-locked mode – only the assigned user can redeem
    • Supports automatic random code generation when left blank.
    • Added validity window (Valid from → Valid to) for time-limited campaigns.
    • Displays usage count: used/max_uses and status badge (Active/Disabled).
  • Added Automatic Reward Distribution:
    • Automatically credits Coin/Cash to user wallet with full transaction logging via init_plugin_suite_user_engine_log_transaction().
    • Sends inbox notification confirming rewards to the redeemer.
    • Fully integrated with existing balance and transaction systems.
  • Enhanced Redemption Security:
    • Enforces one-time redemption per user, even for multi-use codes.
    • Stores metadata: user_id, username, display name, redemption timestamp.
    • Added database-level concurrency safety using START TRANSACTION and SELECT ... FOR UPDATE.
    • Users attempting reuse will see: “You have already used this code”.
  • Added REST Endpoint:
    • POST /redeem-code for logged-in users.
    • Returns structured response: { success, message, coin, cash }.
    • Automatically disables the code when usage limit is reached.
  • Improved Admin UI:
    • Integrated with existing user search UI (same as Inbox Tool & Top-Up Tool).
    • Supports selecting user for locked-code mode via live search.
    • Consistent layout and UX patterns.
  • Database & Compatibility:
    • Metadata stores redeemed users (JSON).
    • Redemption operations are ACID-protected (atomic + thread-safe).
    • Fully backward compatible with Coin/Cash/VIP/Inbox systems.
    • No breaking API changes.
• 1.3.6 – Fixed whitespace removal in display name
  • Fixed a critical bug in update_profile endpoint:
    • Previously, the display name (display_name) removed all whitespace, e.g., “Nguyễn Văn A” → “NguyễnVănA”.
    • Adjusted sanitization logic to preserve natural spacing while maintaining XSS safety.
  • Improved display name fallback logic:
    • Automatically falls back to nickname or username when empty.
    • More strict validation for multilingual names.
  • Developer notes:
    • No database or REST structure changes.
    • Fully backward compatible, safe to update immediately.
• 1.3.5 – Minimal modern Submit button UI
  • Improved Submit button UI (Login + Register):
    • New modern minimal design — removed glow/shadow effects.
    • Smoother hover/active feedback using transform and filter.
    • Gradient retained: var(--iue-theme-color) → var(--iue-theme-active-color).
    • Improved :focus-visible for better keyboard accessibility.
    • Pure CSS changes — no HTML edits required, fully backward compatible.
• 1.3.4 – Captcha System, Registration Lock & Multi-layer Defense
  • Enhanced Captcha Security System:
    • Expanded question bank with 40+ math & logic variations.
    • Added 4 smart modes:
      • Symbolic math (+, −, ×)
      • Text-based math (e.g., “What is 5 plus 3?”)
      • General knowledge numerics (e.g., “How many days in a week?”)
      • Contextual variants (e.g., “Double 4 is?”, “Next even number after 7.”)
    • New hook init_user_engine_captcha_bank to extend question bank.
    • All questions fully translatable with translators: comments.
    • Answers standardized to numeric for improved bot resistance.
  • Added Disable Captcha:
    • Disables all captcha (including Cloudflare Turnstile) — for debugging/testing.
    • Displays DANGER warning to prevent misuse.
    • Skips validation on both frontend & backend.
  • Added Disable New Registrations:
    • Locks all new registrations via REST and WP form.
    • Early-return logic added in registration endpoint.
    • Prevents rendering of registration form when enabled.
    • Useful for maintenance or private-access sites.
  • Improved Multi-layer Defense:
    • Combined honeypot + custom captcha + Cloudflare Turnstile.
    • Global registration lock switch (shutdown mode).
    • Improved rate limit by IP and token lifetime.
• 1.3.3 – Notification Tool & Unified Admin UI
  • Upgraded Admin Notification Tool:
    • Synchronized user selection UI with Top-up Tool.
    • Unified recipient types:
      • Selected users (manual + live search)
      • Active VIPs (via init_plugin_suite_user_engine_get_active_vip_users('ids'))
      • All members (via get_users(['fields' => 'ID']))
    • Replaced checkbox with radio button grouping.
    • Batch inbox sending via init_user_engine_inbox_bulk_chunk_size (default: 500).
    • Fully consistent with existing inbox logic, metadata, and hooks.
  • Improved Unified Admin UI:
    • Recipient selector layout synced with Top-up Tool.
    • Unified “Select Users” UI (search, display, hidden ID).
    • Preserved sanitize, nonce, and permission checks.
  • Stability & Backward Compatibility:
    • No changes to schema, database, or API.
    • No impact to message structure or metadata.
• 1.3.2 – Avatar Upload Permission System & Admin Enhancements
  • Added Avatar Upload Permission System with multiple control layers:
    • New helper: init_plugin_suite_user_engine_can_upload_avatar( $user_id )
    • Supports 3 permission levels:
      • Global disable – disable avatar uploads completely.
      • VIP-only mode – only VIP users can upload (init_plugin_suite_user_engine_is_vip()).
      • Per-user ban – via meta iue_avatar_ban.
    • Integrated into upload_avatar and remove_avatar REST endpoints.
    • Automatically blocks upload/delete if user is banned or restricted.
  • Improved Admin User Metabox:
    • Added “Ban Avatar Upload” / “Unban Avatar Upload” next to Remove VIP.
    • Toggles iue_avatar_ban with secure admin-post action.
    • Permission validation (edit_user), nonce checks, and redirect notice.
    • Audit logging via init_plugin_suite_user_engine_avatar_ban_toggled.
    • Displays current state: “Allowed” or “BANNED”.
  • Improved Security & Consistency:
    • Backend guard prevents unauthorized upload/delete even if frontend is modified.
    • Clear HTTP error codes: 403 (forbidden) and 423 (locked).
    • Standardized wp_die() and WP_Error usage across user endpoints.
• 1.3.1 – Admin Top-up Overhaul & Persistent Logs
  • Improved Admin Top-up Tool:
    • Replaced old checkbox with radio recipient selector: Selected users / Active VIPs / All members.
    • Displays Top-up Logs under form (up to latest 100 entries).
    • Log format shows quantity, type (Coin/Cash), Target (including user link when single), timestamp.
    • Cleaner UI with grouped fields, logic unchanged.
  • Persistent Logging System:
    • Functions: init_plugin_suite_user_engine_add_topup_log(), init_plugin_suite_user_engine_get_topup_logs().
    • Format: quantity|type(coin|cash)|target(VIP|ALL|uid:{id}|user:{count})|time.
    • Keeps latest 100 entries via update_option() (autoload: no).
  • Simplified architecture:
    • Removed legacy/fallback form fields; fully uses new flow (radio recipient mode).
    • Adds delete key init_plugin_suite_user_engine_topup_logs on uninstall.
  • Backward Compatibility:
    • No schema nor database changes.
    • Wallet logic, transaction log, and batch inbox remain unchanged.
• 1.3.0 – Coin Exchange & Profile Update Enhancements
  • Added Coin Exchange System enabling users to convert Cash → Coin:
    • Integrated POST /exchange REST endpoint with authentication and full security checks.
    • Supports configurable rate and min/max limits via filter.
    • Auto-logs transactions and updates wallet balance in real time.
    • User-friendly UI with auto number formatting (thousand separators).
  • Improved profile update:
    • Added smart display name fallback — uses nickname or username if empty.
    • Prevents saving names that contain only whitespace.
    • Ensures consistency between display and stored profile data.
  • Added shortcut Alt + X to open Exchange UI directly from dashboard.
  • No database or REST API structural changes — fully backward compatible.
• 1.2.9 – Bulk Inbox Sender & Admin Tool Refactor
  • Upgraded multi-user inbox delivery to use bulk insert for massive scalability:
    • Converts thousands of single inserts into optimized batches.
    • Automatically chunks large user lists for stability.
  • Simplified inbox table creation for new installations (no indexes applied).
  • Significantly improved performance when sending inbox messages to large user bases (e.g., 10,000+ users).
  • Refactored Admin Tools:
    • Notification Tool now uses the new bulk inbox system for instant multi-user delivery.
    • Top-up Tool integrated with the new inbox system while preserving per-user balance updates and transaction logs.
  • Fully backward compatible; no schema or API changes.
• 1.2.8 – Password Autofill Control & Settings Polish
  • Switched from autocomplete="off" to autocomplete="new-password" for all Password/Secret Key fields in settings to reduce browser auto-fill/save prompts.
  • No database or processing logic changes; existing options remain intact.
  • Minor UI consistency tweaks on settings forms (aligned padding/borders across inputs).
• 1.2.7 – Inbox Cleanup Tool & Security Enhancements
  • Added the new Inbox Cleanup Tool directly inside the Inbox Statistics admin page:
    • Introduced a new block Cleanup Inbox by Type under the Refresh Data section.
    • Allows administrators to permanently delete all inbox messages of a selected type.
    • Automatically lists all existing message types for quick selection and execution.
    • Includes nonce verification, capability check (manage_options), and a confirmation prompt for safe operation.
    • Displays success or error notice with the total number of deleted messages after the cleanup process.
  • Enhanced security of the date range filter:
    • Added a nonce field and verification for the Date Range dropdown form.
    • Removed WPCS warning NonceVerification.Recommended from $_GET handling.
  • Improved PHPCS compliance for the statistics module:
    • Explicitly documented safe display-only notice cases to justify PHPCS ignores.
    • Restricted PHPCS ignore usage to justified database queries only.
  • Fully backward compatible:
    • No database schema changes or dependency additions.
    • Fully compatible with all existing inbox data and analytics logic.
• 1.2.6 – Admin Metabox Log & Inbox Enhancements
  • Enhanced Admin User Metabox for clearer visibility of user activity and communication:
    • Added Recent Transactions section under VIP Details, displaying up to 100 latest Coin/Cash entries with type, amount, source, and timestamp.
    • Added Recent Inbox section under Inbox (User), listing up to 100 latest messages with type, status, title, and date.
    • Both sections feature compact, scrollable layouts with truncated long text for a cleaner and more admin-friendly experience.
  • Fully backward compatible:
    • No database or meta structure changes required.
    • Automatically uses existing transaction log and inbox data.
    • Display limited to 100 entries per section to ensure stable performance even on large user histories.
• 1.2.5 – Dashboard Multi-menu & Frame Polish
  • Refined dashboard menu CSS for better scalability with grouped items:
    • Added .multi-menu style to support grouped links (e.g., Sticker Store, Frame Store, Effects).
    • Adjusted padding, spacing, and hover states to keep grouped items compact yet consistent with main menu design.
    • Improved dark mode support for multi-menu background and hover effects.
  • Optimized avatar frame overlay CSS:
    • Prevented hover scaling on frame elements while maintaining core avatar hover effects.
    • Ensured overlay alignment remains consistent across various container contexts.
  • Minor visual polish:
    • Standardized border-radius and spacing for consistent visuals across badges, dots, and menu links.
    • Unified hover background opacity values for both light and dark modes.
• 1.2.4 – Turnstile Integration & Security
  • Full integration with Cloudflare Turnstile for spam-proof registration:
    • New plugin settings for Site Key and Secret Key.
    • If both keys are provided → Turnstile widget replaces the legacy math captcha.
    • If keys are missing → fallback to legacy captcha.
    • If captcha is disabled → registration form shows no verification at all.
  • Updated /register endpoint:
    • Server-side token verification with Cloudflare API.
    • Fallback to math captcha if Turnstile is not configured.
    • Clear WP_Error codes: turnstile_required, turnstile_invalid, captcha_wrong…
    • Preserved honeypot and IP-based rate limiting (5 attempts per hour).
  • Improved guest.js:
    • Unified client flow for both Turnstile and legacy captcha.
    • Lazy init: Turnstile widget loads only when switching to the Register tab.
    • Auto-reset widget/token after each submission.
    • Clear error messages when token is missing, expired, or invalid.
  • Security enhancements:
    • No bypass allowed when captcha/Turnstile token is missing.
    • Tokens are strictly single-use and cannot be reused.
    • Triple protection against spam bots: honeypot + rate limit + Turnstile.
• 1.2.3 – Reward Filters & Daily Tasks
  • Refactored the entire EXP + Coin system to use unified filters instead of hardcoded values:
    • init_plugin_suite_user_engine_publish_post_rewards – when publishing a post.
    • init_plugin_suite_user_engine_user_register_rewards – when registering a new account.
    • init_plugin_suite_user_engine_update_profile_rewards – when updating profile for the first time.
    • init_plugin_suite_user_engine_daily_login_rewards – on first login of the day.
    • init_plugin_suite_user_engine_woo_order_rewards – when completing a WooCommerce order.
  • Each filter returns an array [ 'exp' => ..., 'coin' => ... ] for easy customization by developers.
  • Preserved default reward values (e.g., 20 EXP + 5 Coin for publishing, 50 EXP + 20 Coin for registration, etc.).
  • WooCommerce rewards now support dynamic calculation based on order total, with full override capability via filter.
  • Updated Inbox notification content to use filtered values dynamically instead of hardcoded numbers.
  • Synchronized /daily-tasks REST API with plugin settings:
    • checkin_coin now drives the reward for “Check in today”.
    • online_coin now drives the reward for “Stay active today”.
  • Prevented mismatch between API output and actual check-in/claim logic by removing hardcoded values in daily tasks.
  • Added translators: comments for new strings to ensure full i18n support.
  • Maintained backward compatibility with legacy actions: init_plugin_suite_user_engine_add_exp and init_plugin_suite_user_engine_add_coin.
• 1.2.2 – Comment Reward System
  • Added new Comment Reward section in plugin settings:
    • EXP per Comment: default 10 EXP for each valid comment.
    • Coin per Comment: default 2 Coins for each valid comment.
    • Daily Comment Cap: default 0 (unlimited), reset anchored to daily check-in.
  • Implemented counter reset tied to iue_checkin_last meta to ensure daily limits reset only after check-in.
  • Prevented reward farming by enforcing strict per-day cap logic.
  • Localized all new strings with msgid/msgstr entries for full translation support.
  • Preserved backward compatibility: reward actions still trigger via init_plugin_suite_user_engine_add_exp and init_plugin_suite_user_engine_add_coin hooks.
• 1.2.1 – Avatar Override & WPCS Fixes
  • Refactored avatar override to hook into pre_get_avatar_data with very high priority, ensuring IUE avatar takes precedence over third-party filters such as Nextend Social Login.
  • Retained lightweight get_avatar_url shim for backward compatibility with direct URL calls.
  • Added safe fallbacks:
    • Defer to WordPress/Nextend when no IUE avatar is present.
    • If Gravatar is disabled, serve bundled SVG as default.
  • Improved cache behavior so avatar changes propagate more consistently with CDN/page cache purges.
  • Fixed WPCS issues in admin_post_iue_remove_vip:
    • Properly unslashed and sanitized all $_GET inputs before verification.
    • Strengthened nonce handling with a dedicated notice nonce for admin notices.
    • Escaped all dynamic output at the point of rendering to resolve OutputNotEscaped errors.
    • Sanitized query arguments on redirects; left targeted PHPCS ignores only for raw SQL queries with clear justification.
  • No breaking changes: all actions, filters, and helper functions remain unchanged for seamless drop-in update.
• 1.2.0 – VIP Revoke & CAPTCHA Enhancements
  • Added ability to revoke VIP directly from the Admin User Metabox.
  • Automatically sends an inbox notification when VIP is revoked.
  • Ensures safe handling when revoking VIP: correct user identification and permission checks.
  • Introduced plugin setting to completely disable CAPTCHA on the registration form.
  • Updated registration form JS logic to skip CAPTCHA field when disabled.
  • Enhanced REST API /register endpoint to bypass CAPTCHA if disabled in settings.
  • Expanded CAPTCHA question pool with fun, fact-based questions that avoid controversial answers.
  • Added i18n translations (msgid/msgstr) for all new CAPTCHA questions.
  • Improved UI for validation and error display in registration form for smoother user experience.
• 1.1.9 – Extensible Admin KPIs
  • Added a filter to inject custom KPIs right after Cash in the Admin user metabox.
  • Introduced a helper function to normalize extended KPI data and ensure safe output (escape/kses).
  • Kept all default KPIs (Level, EXP, VIP, Inbox…) intact, only inserting new ones after Cash.
  • Provided a sample integration for the “Power Stone” metric with full i18n and WPCS compliance.
  • No wallet data modifications; purely display, supporting custom badge/icon output via safe HTML.
• 1.1.8 – Admin User Metabox
  • Added a metabox on Profile/Edit User screens in Admin showing key user information.
  • Displayed Coin, Cash, Level, and EXP with a dynamic progress bar for level progress.
  • Integrated VIP details including purchase count, expiry date, Lifetime detection, and total Coin spent.
  • Added Inbox quick stats: total messages, unread, last 7 days, and most recent message timestamp.
  • Provided quick link to full Inbox Statistics page for detailed analytics and navigation.
  • Introduced helper functions with safe fallbacks for Coin, Cash, VIP, and Inbox to improve robustness.
  • Fixed missing version warning in wp_register_style() to comply with WordPress coding standards.
  • Updated inline Admin CSS with versioning via INIT_PLUGIN_SUITE_IUE_VERSION to prevent caching issues.
• 1.1.7 – Refactored Admin Top-up Tool
  • Refactored the Admin Top-up tool to support both adding (positive) and deducting (negative) balances.
  • Bypassed VIP/bonus multipliers during manual top-ups to ensure the exact applied value.
  • Implemented raw balance adjustments with clamping to prevent wallets from going below zero.
  • Updated inbox notifications to clearly reflect both addition and deduction actions.
  • Enhanced transaction logging with accurate applied amounts and explicit change types (add/deduct).
  • Added translators: comments for all translation strings with placeholders in the Top-up tool to comply with WPCS i18n standards.
  • Improved the admin UI with a helper note: enter a positive number to add funds, a negative number to deduct.
• 1.1.6 – Database Initialization Enhancement
  • Enhanced database initialization system with admin_init hook for improved reliability and fail-safe table creation.
  • Added administrator privilege verification to ensure secure table creation and maintenance operations.
  • Implemented comprehensive table existence checking to prevent database inconsistencies across all environments.
  • Improved multisite compatibility with automatic table creation for new blog instances and network installations.
  • Added PHPCS compliance annotations to suppress unnecessary warnings for essential database operations.
  • Strengthened plugin activation process with multiple fallback mechanisms to guarantee critical table availability.
• 1.1.5 – Timezone Synchronization & Cron Optimization
  • Fixed timezone consistency issues in transient cleanup cron scheduler.
  • Corrected inbox statistics queries to properly handle WordPress timezone settings.
  • Enhanced date range filtering accuracy for inbox analytics and daily activity charts.
  • Improved scheduled cleanup reliability by using WordPress timezone-aware functions.
  • Fixed statistical calculations that were affected by UTC vs local time discrepancies.
  • Updated cron frequency from hourly to twice-daily for optimal performance balance.
• 1.1.4 – CAPTCHA Optimization & Memory Management
  • Optimized CAPTCHA loading system with lazy initialization to reduce unnecessary API calls.
  • Implemented smart CAPTCHA management that only loads when users access the registration form.
  • Fixed memory leaks in JavaScript interval handlers with proper cleanup on modal close.
  • Enhanced registration flow by preserving CAPTCHA on successful submissions instead of unnecessary reloads.
  • Improved performance by eliminating background CAPTCHA generation for inactive registration forms.
  • Reduced server load and database transient accumulation through intelligent CAPTCHA lifecycle management.
• 1.1.3 – Automated Transient Cleanup
  • Added automated hourly cleanup system for expired transient data.
  • Implemented scheduled cron job to remove outdated CAPTCHA and rate limiting transients.
  • Enhanced database performance by preventing transient accumulation and orphaned records.
  • Improved system stability through regular cleanup of temporary data without manual intervention.
  • Added proper cleanup on plugin deactivation to maintain database integrity.
  • Optimized memory usage by eliminating stale transient entries that could impact site performance.
• 1.1.2 – Inbox Cleanup
  • Added automated weekly cleanup system to remove orphaned inbox messages.
  • Implemented silent background maintenance to automatically delete inbox entries from removed user accounts.
  • Enhanced database integrity by clearing orphaned data without generating logs or notifications.
  • Improved overall system performance through scheduled cleanup of outdated inbox records.
• 1.1.1 – Inbox Statistics & Dashboard Analytics
  • Added comprehensive Inbox Statistics admin page with detailed analytics and interactive charts.
  • Implemented flexible date range filters: 7 days, 30 days, 90 days, and all-time for customizable reporting periods.
  • Built overview metrics grid displaying total messages, unread counts, daily activity, and recipient statistics.
  • Introduced advanced analytics breakdowns including message types, priority levels, and user engagement metrics.
  • Added visual daily activity chart, top recipients leaderboard, and recent activity timeline.
  • Implemented real-time refresh functionality with last updated timestamps for live insights monitoring.
  • Created simplified dashboard widget showing key inbox metrics with quick navigation links to main features.
  • Enhanced performance with intelligent caching system to reduce database load on admin dashboard.
• 1.1.0 – Asset optimization and consolidation
  • Consolidated all individual CSS files into a single stylesheet to reduce HTTP requests.
  • Combined all JavaScript files into one unified script file.
  • Optimized page loading by eliminating scattered file dependencies.
  • Improved page load speed and caching efficiency through centralized asset architecture.
  • Reduced bandwidth usage and enhanced user experience with optimized asset management.
  • Enhanced code maintainability with centralized CSS and JS structure for easier management.
• 1.0.9 – Extendable transaction log filter
  • Added an extensible filter system to the init_plugin_suite_user_engine_format_log_message() function.
  • Introduced the init_plugin_suite_user_engine_format_log_message hook for customizing transaction log messages.
  • Provided access to full log entry data (entry, source, type, amount…) for more flexible formatting.
  • Improved developer experience by allowing themes and plugins to override how log messages are displayed.
• 1.0.8 – Improved Check-in Countdown
  • Completely rewrote check-in countdown logic to run only when the tab is active, and pause accurately when hidden.
  • Switched from timestamp-based calculation to real-time remaining seconds storage.
  • Fixed critical issue where the countdown kept running in the background when tab was hidden.
  • Added proper tab visibility detection to pause and resume the countdown reliably.
  • Implemented daily reset logic to clear outdated countdown data when the date changes.
  • Fixed auto-claim reward issue that occurred after the browser was idle or suspended for long periods.
  • Countdown state is now preserved properly when switching tabs or closing/reopening the browser.
  • Timer resumes exactly from the last remaining time upon returning to the tab.
  • Improved localStorage handling by using separate keys for remaining time and current date.
  • State is now saved every second to ensure countdown accuracy and reliability.
  • Resolved memory leaks by clearing all intervals and event listeners when not needed.
• 1.0.7 – Check-in Bug Fixes & API Improvements
  • Refactored the entire check-in countdown logic in JavaScript: clearer, safer, and more accurate reward handling.
  • Removed the unnecessary REMAINING_KEY, now using only startTime to track remaining time.
  • Fixed countdown bug related to tab visibility: now properly pauses and resumes without memory leaks.
  • Implemented auto-reward logic when user returns after countdown has already completed.
  • Prevented duplicate setInterval by clearing existing intervals before starting a new one.
  • Fixed issue where the check-in button remained disabled indefinitely on API error.
  • Refactored the /daily-tasks API to avoid fatal errors caused by malformed log data.
  • Replaced anonymous closures in REST response callbacks with __return_true for better reliability.
  • Added fallback and safety checks when using call_user_func() to prevent execution errors.
  • Validated and filtered log data before accessing array offsets to avoid runtime crashes.
• 1.0.6 – Daily Tasks & i18n Improvements
  • Added Daily Task modal with full REST API support.
  • Built task system based on real user logs: check-in, online activity, etc.
  • Rewards are displayed dynamically based on actual type and amount from transaction logs.
  • Only completed tasks are shown to keep the UI clean and focused.
  • Task system is extensible via the init_plugin_suite_user_engine_daily_tasks filter.
  • Added translators: comments for all sprintf() strings in the CAPTCHA module.
  • Improved all i18n strings for clarity and consistency.
• 1.0.5 – Emergency Fix & i18n Standardization
  • Applied emergency fix for PHP 7.4 compatibility (replaced match and array unpacking).
  • Standardized all translation strings to meet full i18n compliance.
• 1.0.4 – Upgraded CAPTCHA System
  • Enhanced the CAPTCHA system with three modes: math symbols, natural language, and general knowledge (e.g. What is 3 squared?).
  • Added answer attempt tracking: CAPTCHA auto-refreshes after 3 failed tries.
  • Extended CAPTCHA expiration time from 10 to 15 minutes for better user experience.
  • Improved CAPTCHA token generation using IP, User Agent, and timestamp for added security.
  • Fully translated all CAPTCHA questions and messages using standard i18n functions.
• 1.0.3 – Registration Security & CAPTCHA
  • Added custom CAPTCHA system with randomized math challenges (e.g. 3 + 5 = ? or What is 4 times 2?).
  • Stored CAPTCHA answers using transient (IP + token based), with 10-minute expiration.
  • Implemented honeypot hidden field to block automated bot registrations.
  • Automatically reloads a new CAPTCHA question after failed attempts.
  • Fully translatable CAPTCHA questions with i18n support.
• 1.0.2 – Profile Editing & Admin Top-up
  • Added Edit Profile modal with fields: display name, bio, password, social links, website, and gender.
  • Built REST API endpoints to fetch and update user profile data.
  • Created Admin Top-up tool for adding Coins or Cash to user accounts.
  • Supports targeting specific users or sending to all members.
  • Automatically logs transactions and sends inbox notifications after top-up.
• 1.0.1 – Add user registration
  • Introduced inline registration form inside the modal – lightweight and no page reload needed.
  • Added smooth toggle between login and register forms.
  • Added new REST API endpoint: POST /register to handle user registration.
  • Introduced filter init_plugin_suite_user_engine_validate_register_fields for custom registration field validation.
  • Full i18n support for all registration-related UI strings via wp_localize_script().
  • Improved modal title text to dynamically reflect Login / Register state.
• 1.0.0 – Initial release of Init User Engine
  • Released shortcode [init_user_engine] to display user avatar and open modal dashboard.
  • EXP and level system with support for milestone rewards and customizable EXP logic.
  • Separate coin and cash wallets with transaction logs and REST API support.
  • Daily check-in feature with streak tracking and reward after online countdown.
  • Inbox system with pagination, message types, delete, mark as read, and support for redirect links.
  • VIP membership module using internal coin system, with duration and VIP status handling.
  • Referral module with unique invite link, cookie-based tracking, and reward on successful signup.
  • Custom avatar support: upload, live preview, and revert to default avatar.
  • Fully rendered frontend via Vanilla JS – no jQuery, theme-friendly by default.
  • Full REST API for all major features: EXP, coin, inbox, VIP, referral, avatar, and more.
  • Developer-ready hooks (actions & filters) to customize logic, reward flow, UI rendering, inbox handling, etc.
  • Admin panel to send notifications to users: search users, set message type, priority, and expiration.