Changeset 3465325

Timestamp:

02/19/2026 06:53:25 PM (9 hours ago)

Author:

psakhilsoman

Message:

Release 1.2.1 - cleanup old effects, added review system, improvements

Location:

faecursor

Files:

• assets/screenshot-3.png (added)
• assets/screenshot-4.png (added)
• trunk/README.txt (modified) (4 diffs)
• trunk/assets/css/fae-cursor-admin.css (modified) (3 diffs)
• trunk/assets/effects/drop-effect (deleted)
• trunk/assets/effects/duo-circle (deleted)
• trunk/assets/effects/duo-circle-2 (deleted)
• trunk/assets/effects/line-effect (deleted)
• trunk/assets/effects/rise-effect (deleted)
• trunk/assets/js/fae-cursor-review.js (added)
• trunk/assets/seasonal/valentines (deleted)
• trunk/faecursor.php (modified) (2 diffs)
• trunk/includes/class-fae-cursor-admin.php (modified) (11 diffs)
• trunk/includes/class-fae-cursor-device.php (modified) (1 diff)
• trunk/includes/class-fae-cursor-enqueue.php (modified) (3 diffs)
• trunk/includes/class-fae-cursor-pro.php (modified) (1 diff)
• trunk/includes/class-fae-cursor-review.php (added)
• trunk/includes/views/admin-page.php (modified) (19 diffs)
• trunk/includes/views/preview-embed.php (modified) (3 diffs)
• trunk/includes/views/preview-page.php (modified) (4 diffs)

faecursor/trunk/README.txt

@@ -1 @@
-=== FaeCursor | WordPress Custom Cursor, Keyboard & Screen Effects ===
+=== FaeCursor – Interaction Effects Toolkit ===
 Contributors: psakhilsoman, faecursor
 Author: FaeCursor Plugin Team
-Version: 1.2
+Version: 1.2.1
 Plugin URI: https://faecursor.com/
-Tags: wordpress custom cursor, custom cursor wordpress plugin, mouse cursor effects, keyboard effects, screen effects, particle effects, interaction effects, animation effects, UI animation
+Tags: custom cursor, cursor effects, keyboard effects, particle effects, ui animation
 Requires at least: 5.6
-Tested up to: 6.9.1
-Stable tag: 1.2
+Tested up to: 6.9
+Stable tag: 1.2.1
 Requires PHP: 7.4
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
 
-Bring your WordPress site to life with lightweight **custom cursor, keyboard, and screen effects** — star trails, sparkles, particle animations, and smooth interactive UI effects, fully optimized for performance.
+Bring your WordPress site to life with interactive cursor, keyboard, and screen effects — built for smooth performance and full control.
 
 == Description ==
 
-FaeCursor is a lightweight **WordPress custom cursor plugin** that adds interactive cursor, keyboard, and screen effects to your website. Create engaging experiences with smooth, responsive animations such as **cursor trails, sparkles, stars, and subtle screen particles**. Perfect for Elementor, Divi, and any WordPress theme, FaeCursor enhances user engagement without slowing your pages.
+FaeCursor adds interactive cursor, keyboard, and screen effects to your WordPress website, designed for engaging visual feedback without compromising performance.
 
-**Features:**
-- Multiple **cursor effects**, including star trails, sparkles, dual circles, and magic aura.
-- **Keyboard interaction effects** and shortcut animations for dynamic UI engagement.
-- **Screen effects and particle animations** triggered by user actions.
-- Easy-to-use admin panel with **real-time preview** of all effects.
-- Fully responsive, lightweight, and optimized for **performance**.
-- Works seamlessly with any WordPress theme, Elementor, and Divi.
+Create smooth trails, sparkles, particles, and subtle motion effects that enhance user interaction while keeping your site lightweight and responsive.
 
-**Why Choose FaeCursor?**
-- Boost user engagement with interactive **cursor, keyboard, and screen effects**.
-- Customize animations easily through an intuitive plugin settings screen.
-- Lightweight and performance-optimized — won’t slow your site.
+Unlike effect packs that load everything globally, FaeCursor uses a structured module system so you can enable only what you need.
 
-**Upgrade to FaeCursor Pro**
-Love the free version? Take it further — get the full experience with [FaeCursor Pro](https://faecursor.com/).
+== Modular Architecture ==
+
+FaeCursor is built as a controlled interaction system, not a collection of random animations.
+
+= Cursor Effects =
+Add refined visual feedback that follows pointer movement. Includes multiple presets with adjustable size, speed, and color controls.
+
+= Keyboard Effects =
+Display subtle interaction feedback during typing. Ideal for forms, comment sections, and interactive experiences.
+
+= Screen Effects =
+Optional screen-based visual layers such as particle systems and motion backgrounds that enhance atmosphere without interfering with usability.
+
+Each module can be enabled or disabled independently.
+
+== Key Features ==
+
+• Independent interaction layers  
+• Conditional asset loading (disabled modules do not load scripts)  
+• Real-time live preview in the admin dashboard  
+• Adjustable performance and animation controls  
+• Mobile and touch device filtering  
+• Compatible with Elementor, Divi, Bricks, Gutenberg, and any WordPress themes  
+• Lightweight and optimized for modern browsers  
+
+== Why FaeCursor? ==
+
+FaeCursor focuses on performance, control, and clean integration:
+
+• Enable only the effects you need  
+• Avoid unnecessary frontend bloat  
+• Maintain compatibility with modern themes and builders  
+• Keep full control over visual behavior  
+
+== FaeCursor Pro ==
+
+FaeCursor Pro extends the toolkit with advanced control options:
+
+• Page-level and post-level targeting  
+• Role-based visibility rules  
+• Extended customization controls (size, speed, opacity, triggers)  
+
+Want even more control over your interaction effects?  
+Explore everything FaeCursor Pro has to offer: [FaeCursor Pro](https://faecursor.com/)
 
 == Installation ==
@@ -42 +75 @@
 == Frequently Asked Questions ==
 
-= Does FaeCursor work with all themes? =
-Yes! FaeCursor is fully compatible with any WordPress theme, including Elementor and Divi, without affecting page layout.
+= Will FaeCursor slow down my site? =
 
-= Will FaeCursor slow down my site? =
-No, the plugin is lightweight and optimized for performance. Smooth animations will not impact your site speed.
+No. Only enabled modules load their assets. Disabled effects do not enqueue scripts or styles.
+
+= Can I disable effects on mobile devices? =
+
+Yes. You can disable specific modules on touch devices while keeping others active.
+
+= Does it work with page builders? =
+
+Yes. FaeCursor works with Elementor, Divi, Bricks, Gutenberg, and most any WordPress themes.
 
 == Screenshots ==
@@ -56 +95 @@
 
 == Changelog ==
+
+= 20 Feb 2026 - ver 1.2.1 =
+* Improved WordPress Coding Standards compliance for better code quality.
+* Enhanced security with proper input sanitization and nonce verification.
+* Fixed compatibility issues for WordPress.org submission.
+* Code optimization and performance improvements.
 
 = 05 Feb 2026 - ver 1.2.0 =
@@ -73 +118 @@
 == Upgrade Notice ==
 
+= 1.2.1 =
+Security and code quality improvements. Adds smart review request system. Recommended update for WordPress.org compliance.
+
 = 1.2.0 =
 This update adds keyboard and screen interaction effects with a fully improved admin UI for live previews.

faecursor/trunk/assets/css/fae-cursor-admin.css

@@ -141 +141 @@
 }
 
+/* Review Request Card */
+.fae-review-request-card {
+  background: #fff;
+  border-radius: 12px;
+  padding: 20px 25px;
+  margin-bottom: 30px;
+  box-shadow: 0 2px 8px rgba(0, 0, 0, 0.08);
+  border: 1px solid #e5e7eb;
+  transition: all 0.3s ease;
+}
+
+.fae-review-request-card:hover {
+  box-shadow: 0 4px 12px rgba(0, 0, 0, 0.12);
+  border-color: #667eea;
+}
+
+.fae-review-content {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 20px;
+}
+
+.fae-review-left {
+  display: flex;
+  align-items: center;
+  gap: 20px;
+  flex: 1;
+  min-width: 0;
+}
+
+.fae-review-stars {
+  display: flex;
+  gap: 4px;
+  flex-shrink: 0;
+}
+
+.fae-review-stars svg {
+  width: 20px;
+  height: 20px;
+  color: #fbbf24;
+  fill: #fbbf24;
+  filter: drop-shadow(0 1px 2px rgba(251, 191, 36, 0.3));
+}
+
+.fae-review-text {
+  flex: 1;
+  min-width: 0;
+}
+
+.fae-review-text h3 {
+  margin: 0 0 4px 0;
+  color: #1f2937;
+  font-size: 1.05em;
+  font-weight: 600;
+  line-height: 1.3;
+}
+
+.fae-review-text p {
+  margin: 0;
+  color: #6b7280;
+  font-size: 0.9em;
+  line-height: 1.4;
+}
+
+.fae-review-actions {
+  flex-shrink: 0;
+  display: flex;
+  gap: 10px;
+  align-items: center;
+}
+
+.fae-review-btn {
+  padding: 10px 20px;
+  border-radius: 6px;
+  font-size: 14px;
+  font-weight: 500;
+  text-decoration: none;
+  transition: all 0.2s ease;
+  cursor: pointer;
+  border: none;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  gap: 6px;
+  white-space: nowrap;
+  line-height: 1;
+}
+
+.fae-review-btn-primary {
+  background: #667eea;
+  color: #fff;
+  padding: 10px 24px;
+}
+
+.fae-review-btn-primary:hover {
+  background: #5568d3;
+  transform: translateY(-1px);
+  box-shadow: 0 4px 12px rgba(102, 126, 234, 0.3);
+}
+
+.fae-review-btn-dismiss {
+  background: transparent;
+  color: #9ca3af;
+  padding: 8px;
+  border: 1px solid transparent;
+}
+
+.fae-review-btn-dismiss svg {
+  width: 18px;
+  height: 18px;
+}
+
+.fae-review-btn-dismiss:hover {
+  background: #f3f4f6;
+  color: #6b7280;
+  border-color: #e5e7eb;
+}
+
+.fae-review-request-card.fae-review-hidden {
+  display: none;
+}
+
+/* Responsive adjustments for review card */
+@media (max-width: 900px) {
+  .fae-review-content {
+    flex-wrap: wrap;
+  }
+  
+  .fae-review-actions {
+    width: 100%;
+    justify-content: flex-end;
+  }
+}
+
+@media (max-width: 600px) {
+  .fae-review-request-card {
+    padding: 18px 20px;
+  }
+  
+  .fae-review-left {
+    flex-direction: column;
+    align-items: flex-start;
+    gap: 12px;
+  }
+  
+  .fae-review-content {
+    flex-direction: column;
+    align-items: stretch;
+  }
+  
+  .fae-review-actions {
+    width: 100%;
+    justify-content: space-between;
+    margin-top: 8px;
+  }
+  
+  .fae-review-btn-primary {
+    flex: 1;
+  }
+}
+
 .fae-stat-card {
   background: white;
@@ -150 +312 @@
 }
 
+.fae-stat-card-content {
+  position: relative;
+  z-index: 1;
+}
+
 .fae-stat-card:hover {
   transform: translateY(-5px);
@@ -197 +364 @@
   font-weight: 500;
   line-height: 1.4;
+}
+
+/* Review Notification - Slide in from Right */
+.fae-review-notification {
+  position: fixed;
+  right: 20px;
+  bottom: 20px;
+  width: 360px;
+  max-width: calc(100vw - 40px);
+  background: #fff;
+  border-radius: 12px;
+  box-shadow: 0 10px 40px rgba(0, 0, 0, 0.15), 0 0 0 1px rgba(0, 0, 0, 0.05);
+  transform: translateX(120%);
+  opacity: 0;
+  transition: transform 0.5s cubic-bezier(0.68, -0.55, 0.265, 1.55), opacity 0.5s ease;
+  z-index: 99999;
+  overflow: hidden;
+}
+
+.fae-review-notification.fae-show {
+  transform: translateX(0);
+  opacity: 1;
+}
+
+.fae-review-notification-bar {
+  height: 4px;
+  background: linear-gradient(90deg, #667eea 0%, #764ba2 50%, #f093fb 100%);
+  background-size: 200% 100%;
+  animation: fae-gradient-shift 3s ease infinite;
+}
+
+@keyframes fae-gradient-shift {
+  0%, 100% { background-position: 0% 50%; }
+  50% { background-position: 100% 50%; }
+}
+
+.fae-review-notification-content {
+  padding: 20px;
+  display: flex;
+  gap: 16px;
+}
+
+.fae-review-notification-icon {
+  flex-shrink: 0;
+  width: 48px;
+  height: 48px;
+  background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+  border-radius: 50%;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  box-shadow: 0 4px 12px rgba(102, 126, 234, 0.3);
+}
+
+.fae-review-notification-icon svg {
+  width: 24px;
+  height: 24px;
+  color: #fbbf24;
+  fill: #fbbf24;
+  filter: drop-shadow(0 2px 4px rgba(0, 0, 0, 0.2));
+  animation: fae-icon-bounce 2s ease-in-out infinite;
+}
+
+@keyframes fae-icon-bounce {
+  0%, 100% { transform: translateY(0); }
+  50% { transform: translateY(-4px); }
+}
+
+.fae-review-notification-body {
+  flex: 1;
+  min-width: 0;
+}
+
+.fae-review-notification-header {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 12px;
+  margin-bottom: 6px;
+}
+
+.fae-review-notification-header h4 {
+  margin: 0;
+  font-size: 1.05em;
+  font-weight: 600;
+  color: #1f2937;
+  line-height: 1.3;
+}
+
+.fae-review-notification-dismiss {
+  flex-shrink: 0;
+  background: transparent;
+  border: none;
+  color: #9ca3af;
+  padding: 2px;
+  cursor: pointer;
+  transition: all 0.2s ease;
+  border-radius: 4px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+}
+
+.fae-review-notification-dismiss svg {
+  width: 18px;
+  height: 18px;
+}
+
+.fae-review-notification-dismiss:hover {
+  color: #ef4444;
+  background: #fee2e2;
+  transform: rotate(90deg);
+}
+
+.fae-review-notification-text {
+  margin: 0 0 10px 0;
+  font-size: 0.9em;
+  color: #6b7280;
+  line-height: 1.4;
+}
+
+.fae-review-notification-stars {
+  display: flex;
+  gap: 4px;
+  margin-bottom: 12px;
+}
+
+.fae-review-notification-stars svg {
+  width: 18px;
+  height: 18px;
+  color: #fbbf24;
+  fill: #fbbf24;
+  transition: transform 0.2s ease;
+  cursor: pointer;
+}
+
+.fae-review-notification-stars svg:hover {
+  transform: scale(1.2) rotate(-10deg);
+}
+
+.fae-review-notification-actions {
+  display: flex;
+  gap: 8px;
+  align-items: stretch;
+  flex-wrap: nowrap;
+}
+
+.fae-review-notification-btn {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  gap: 6px;
+  background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+  color: #fff;
+  padding: 10px 14px;
+  border-radius: 8px;
+  font-size: 0.85em;
+  font-weight: 600;
+  text-decoration: none;
+  transition: all 0.3s ease;
+  box-shadow: 0 4px 12px rgba(102, 126, 234, 0.3);
+  white-space: nowrap;
+  flex-shrink: 0;
+}
+
+.fae-review-notification-btn:visited {
+  color: #fff;
+}
+
+.fae-review-notification-btn:focus {
+  color: #fff;
+  outline: 2px solid #667eea;
+  outline-offset: 2px;
+}
+
+.fae-review-notification-btn:active {
+  color: #fff;
+}
+
+.fae-review-notification-btn svg {
+  width: 14px;
+  height: 14px;
+  transition: transform 0.3s ease;
+  flex-shrink: 0;
+}
+
+.fae-review-notification-btn:hover {
+  background: linear-gradient(135deg, #5568d3 0%, #6941a5 100%);
+  color: #fff;
+  transform: translateY(-2px);
+  box-shadow: 0 6px 20px rgba(102, 126, 234, 0.4);
+}
+
+.fae-review-notification-btn:hover svg {
+  transform: translateX(4px);
+}
+
+.fae-review-notification-later {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  background: transparent;
+  color: #6b7280;
+  border: 1px solid #e5e7eb;
+  padding: 10px 14px;
+  border-radius: 8px;
+  font-size: 0.85em;
+  font-weight: 600;
+  cursor: pointer;
+  transition: all 0.2s ease;
+  white-space: nowrap;
+  flex-shrink: 0;
+}
+
+.fae-review-notification-later:hover {
+  background: #f3f4f6;
+  color: #374151;
+  border-color: #d1d5db;
+}
+
+/* Responsive for mobile */
+@media (max-width: 480px) {
+  .fae-review-notification {
+    left: 10px;
+    right: 10px;
+    bottom: 10px;
+    width: auto;
+    max-width: none;
+  }
+  
+  .fae-review-notification-content {
+    padding: 16px;
+  }
+  
+  .fae-review-notification-icon {
+    width: 40px;
+    height: 40px;
+  }
+  
+  .fae-review-notification-icon svg {
+    width: 20px;
+    height: 20px;
+  }
 }
 

faecursor/trunk/faecursor.php

@@ -4 +4 @@
  */
 /*
-Plugin Name: FaeCursor
-Description: Lightweight WordPress custom cursor plugin — add cursor, keyboard, and screen effects like trails and sparkles.
-Version: 1.2
+Plugin Name: FaeCursor – Interaction Effects Toolkit
+Description: Bring your WordPress site to life with interactive cursor, keyboard, and screen effects — built for smooth performance and full control.
+Version: 1.2.1
 Author: FaeCursor Plugin Team
 Author URI: https://faecursor.com
@@ -105 +105 @@
 // Constants.
 define( 'FAE_CURSOR_PLUGIN_NAME', 'faecursor' ); // Updated to match text domain
-define( 'FAE_CURSOR_VERSION', '1.2' ); // Update this version as necessary
+define( 'FAE_CURSOR_VERSION', '1.2.1' ); // Update this version as necessary
 
 // Load plugin classes
 require_once FAE_CURSOR_DIR . '/includes/class-fae-cursor-loader.php';
+require_once FAE_CURSOR_DIR . '/includes/class-fae-cursor-review.php';
 
 // Initialize the plugin
 Fae_Cursor_Loader::init();
+
+// Initialize review system
+Fae_Cursor_Review::init();
 
 // Backward compatibility functions

faecursor/trunk/includes/class-fae-cursor-admin.php

@@ -86 +86 @@
         
         // Get preview background from cookie (set by JavaScript), default to 'dark'
-        $preview_bg = isset($_COOKIE['fae_preview_bg']) ? sanitize_text_field($_COOKIE['fae_preview_bg']) : 'dark';
+        $preview_bg = isset($_COOKIE['fae_preview_bg']) ? sanitize_text_field(wp_unslash($_COOKIE['fae_preview_bg'])) : 'dark';
         if (!in_array($preview_bg, array('dark', 'light'))) {
             $preview_bg = 'dark';
@@ -245 +245 @@
     public static function handle_preview_page() {
         // Embed preview (for iframe in dashboard)
+        // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Preview page for admin users only
         if (isset($_GET['fae_embed_preview']) && $_GET['fae_embed_preview'] === '1' && current_user_can('manage_options')) {
             include FAE_CURSOR_DIR . '/includes/views/preview-embed.php';
@@ -250 +251 @@
         }
         // Full preview page (legacy, can still be used)
+        // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Preview page for admin users only
         if (isset($_GET['fae_preview']) && $_GET['fae_preview'] === '1' && current_user_can('manage_options')) {
             include FAE_CURSOR_DIR . '/includes/views/preview-page.php';
@@ -261 +263 @@
     public static function ajax_save_preview_settings() {
         // Verify nonce
-        if (!isset($_POST['nonce']) || !wp_verify_nonce(sanitize_text_field($_POST['nonce']), 'fae_save_preview_settings')) {
+        if (!isset($_POST['nonce']) || !wp_verify_nonce(sanitize_text_field(wp_unslash($_POST['nonce'])), 'fae_save_preview_settings')) {
             wp_send_json_error('Invalid nonce');
         }
@@ -270 +272 @@
         }
         
-        $type = isset($_POST['type']) ? sanitize_text_field($_POST['type']) : 'cursor';
-        $color = isset($_POST['color']) ? sanitize_hex_color($_POST['color']) : '#667eea';
-        $speed = isset($_POST['speed']) ? sanitize_text_field($_POST['speed']) : 'normal';
-        $size = isset($_POST['size']) ? sanitize_text_field($_POST['size']) : '1.5rem';
-        $icon = isset($_POST['icon']) ? sanitize_file_name($_POST['icon']) : 'star.svg';
+        $type = isset($_POST['type']) ? sanitize_text_field(wp_unslash($_POST['type'])) : 'cursor';
+        $color = isset($_POST['color']) ? sanitize_hex_color(wp_unslash($_POST['color'])) : '#667eea';
+        $speed = isset($_POST['speed']) ? sanitize_text_field(wp_unslash($_POST['speed'])) : 'normal';
+        $size = isset($_POST['size']) ? sanitize_text_field(wp_unslash($_POST['size'])) : '1.5rem';
+        $icon = isset($_POST['icon']) ? sanitize_file_name(wp_unslash($_POST['icon'])) : 'star.svg';
         
         // Get current options and update only appearance settings
@@ -303 +305 @@
     public static function ajax_save_cursor_settings() {
         // Verify nonce
-        if (!isset($_POST['nonce']) || !wp_verify_nonce(sanitize_text_field($_POST['nonce']), 'fae_cursor')) {
+        if (!isset($_POST['nonce']) || !wp_verify_nonce(sanitize_text_field(wp_unslash($_POST['nonce'])), 'fae_cursor')) {
             wp_send_json_error(array('message' => 'Invalid security token. Please refresh the page and try again.'));
         }
@@ -313 +315 @@
         
         // Get and sanitize all form data
-        $input = isset($_POST['fae_cursor_options']) ? $_POST['fae_cursor_options'] : array();
+        // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized, WordPress.Security.ValidatedSanitizedInput.MissingUnslash -- Array data sanitized via sanitize_options method
+        $input = isset($_POST['fae_cursor_options']) ? wp_unslash($_POST['fae_cursor_options']) : array();
         $sanitized = Fae_Cursor_Settings::sanitize_options($input);
         
@@ -392 +395 @@
     public static function ajax_save_keyboard_settings() {
         // Verify nonce
-        if (!isset($_POST['nonce']) || !wp_verify_nonce(sanitize_text_field($_POST['nonce']), 'fae_keyboard')) {
+        if (!isset($_POST['nonce']) || !wp_verify_nonce(sanitize_text_field(wp_unslash($_POST['nonce'])), 'fae_keyboard')) {
             wp_send_json_error(array('message' => 'Invalid security token. Please refresh the page and try again.'));
         }
@@ -402 +405 @@
         
         // Get and sanitize all form data
-        $input = isset($_POST['fae_keyboard_options']) ? $_POST['fae_keyboard_options'] : array();
+        // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized, WordPress.Security.ValidatedSanitizedInput.MissingUnslash -- Array data sanitized via sanitize_options method
+        $input = isset($_POST['fae_keyboard_options']) ? wp_unslash($_POST['fae_keyboard_options']) : array();
         $sanitized = Fae_Keyboard_Settings::sanitize_options($input);
         
@@ -481 +485 @@
     public static function ajax_save_particle_settings() {
         // Verify nonce
-        if (!isset($_POST['nonce']) || !wp_verify_nonce(sanitize_text_field($_POST['nonce']), 'fae_particle')) {
+        if (!isset($_POST['nonce']) || !wp_verify_nonce(sanitize_text_field(wp_unslash($_POST['nonce'])), 'fae_particle')) {
             wp_send_json_error(array('message' => 'Invalid security token. Please refresh the page and try again.'));
         }
@@ -491 +495 @@
         
         // Get and sanitize all form data
-        $input = isset($_POST['fae_particle_options']) ? $_POST['fae_particle_options'] : array();
+        // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized, WordPress.Security.ValidatedSanitizedInput.MissingUnslash -- Array data sanitized via sanitize_options method
+        $input = isset($_POST['fae_particle_options']) ? wp_unslash($_POST['fae_particle_options']) : array();
         $sanitized = Fae_Particle_Settings::sanitize_options($input);
         

faecursor/trunk/includes/class-fae-cursor-device.php

@@ -16 +16 @@
      */
     public static function detect() {
+        // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- User agent is used for device detection only, not output
         $ua = isset($_SERVER['HTTP_USER_AGENT']) ? strtolower(wp_unslash($_SERVER['HTTP_USER_AGENT'])) : '';
 

faecursor/trunk/includes/class-fae-cursor-enqueue.php

@@ -419 +419 @@
         );
         
-        // Load seasonal themes (Valentine's Day, Christmas, etc.)
-        self::enqueue_seasonal_assets();
-        
         // Enqueue admin scripts
         wp_enqueue_script(
@@ -443 +440 @@
             FAE_CURSOR_URL . 'assets/js/fae-cursor-admin.js',
             array('jquery', 'fae-cursor-effects-config', 'fae-particle-effects-config'),
+            FAE_CURSOR_VERSION,
+            true
+        );
+        
+        // Enqueue review notification script
+        wp_enqueue_script(
+            'fae-cursor-review-script',
+            FAE_CURSOR_URL . 'assets/js/fae-cursor-review.js',
+            array('jquery'),
             FAE_CURSOR_VERSION,
             true
@@ -476 +482 @@
         );
     }
-    
-    /**
-     * Enqueue seasonal theme assets (Valentine's Day, Christmas, etc.)
-     * Only loads CSS when the seasonal event is active
-     */
-    private static function enqueue_seasonal_assets() {
-        // Valentine's Day (Feb 7-14)
-        $valentines_php = FAE_CURSOR_DIR . '/assets/seasonal/valentines/valentines.php';
-        if (file_exists($valentines_php)) {
-            require_once $valentines_php;
-            
-            if (function_exists('fae_is_valentines_week') && fae_is_valentines_week()) {
-                wp_enqueue_style(
-                    'fae-seasonal-valentines',
-                    FAE_CURSOR_URL . 'assets/seasonal/valentines/valentines.css',
-                    array('fae-cursor-admin-styles'),
-                    FAE_CURSOR_VERSION
-                );
-            }
-        }
-        
-        // Add more seasonal themes here:
-        // - Christmas (Dec 20-26)
-        // - Halloween (Oct 28-31)
-        // - New Year (Dec 31 - Jan 2)
-        // etc.
-    }
 }
-

faecursor/trunk/includes/class-fae-cursor-pro.php

@@ -113 +113 @@
     public static function get_upgrade_notice($feature_name = '') {
         $message = !empty($feature_name) 
+            /* translators: %s: Feature name (e.g., "Custom Cursors", "Particle Effects") */
             ? sprintf(__('Get %s with FaeCursor Pro.', 'faecursor'), $feature_name)
             : __('Get advanced features with FaeCursor Pro.', 'faecursor');

faecursor/trunk/includes/views/admin-page.php

@@ -12 +12 @@
 <div class="wrap fae-cursor-dashboard">
     <!-- Header Section -->
-    <div class="fae-dashboard-header<?php echo function_exists('fae_get_valentines_header_classes') ? fae_get_valentines_header_classes() : ''; ?>">
-        <?php 
-        // Render seasonal elements (Valentine's, Christmas, etc.)
-        if (function_exists('fae_render_valentines_elements')) {
-            fae_render_valentines_elements();
-        }
-        ?>
+    <div class="fae-dashboard-header">
         <div class="fae-header-content">
             <div class="fae-header-main">
@@ -24 +18 @@
                     <span class="fae-title-group">
                         <span class="fae-title-name">
-                            FaeCursor <span class="fae-version-badge">v1.2</span>
-                            <?php 
-                            // Render seasonal badge (Valentine's, Christmas, etc.)
-                            if (function_exists('fae_render_valentines_badge')) {
-                                fae_render_valentines_badge();
-                            }
-                            ?>
+                            FaeCursor <span class="fae-version-badge">v1.2.1</span>
                         </span>
                         <span class="fae-tagline">Move with Magic</span>
@@ -114 +102 @@
                     echo 'None';
                 } elseif ($active_count === 1) {
-                    echo $active_effects[0];
+                    echo esc_html($active_effects[0]);
                 } else {
                     // Multiple effects - show count
-                    echo $active_count . ' Active';
+                    echo esc_html($active_count) . ' Active';
                 }
                 ?>
             </p>
             <?php if ($active_count > 1) : ?>
-            <p class="fae-stat-detail"><?php echo implode(', ', $active_effects); ?></p>
+            <p class="fae-stat-detail"><?php echo esc_html(implode(', ', $active_effects)); ?></p>
             <?php endif; ?>
         </div>
         <div class="fae-stat-card">
             <h3>Effects Available</h3>
-            <p class="fae-stat-value"><?php echo $total_effects; ?></p>
+            <p class="fae-stat-value"><?php echo esc_html($total_effects); ?></p>
             <?php if ($pro_count > 0) : ?>
-            <p class="fae-stat-detail"><?php echo $free_count; ?> Free<?php echo $pro_count > 0 ? ' + ' . $pro_count . ' Pro' : ''; ?></p>
+            <p class="fae-stat-detail"><?php echo esc_html($free_count); ?> Free<?php echo $pro_count > 0 ? ' + ' . esc_html($pro_count) . ' Pro' : ''; ?></p>
             <?php endif; ?>
         </div>
     </div>
+
+    <!-- Review Request Notification -->
+    <?php Fae_Cursor_Review::render_notification(); ?>
 
     <!-- Main Content -->
@@ -222 +213 @@
                                             <span class="fae-effect-name"><?php echo esc_html($config['display_name']); ?></span>
                                             <?php if ($is_pro_effect) : ?>
-                                                <?php echo Fae_Cursor_Pro::get_pro_badge(); ?>
+                                                <?php echo Fae_Cursor_Pro::get_pro_badge(); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
                                             <?php endif; ?>
                                         </div>
@@ -308 +299 @@
                                 <input type="hidden" name="fae_cursor_options[scope_pages]" value="">
                                 <input type="hidden" name="fae_cursor_options[scope_css_selector]" value="">
-                                <?php echo Fae_Cursor_Pro::get_upgrade_notice('Advanced scoping options require Pro.'); ?>
+                                <?php echo Fae_Cursor_Pro::get_upgrade_notice('Advanced scoping options require Pro.'); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
                             <?php endif; ?>
                                     </div>
@@ -383 +374 @@
                                 <input type="hidden" name="fae_cursor_options[user_roles]" value="">
                                 <input type="hidden" name="fae_cursor_options[include_logged_out]" value="0">
-                                <?php echo Fae_Cursor_Pro::get_upgrade_notice('User role restrictions require Pro.'); ?>
+                                <?php echo Fae_Cursor_Pro::get_upgrade_notice('User role restrictions require Pro.'); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
                             <?php endif; ?>
                                 </div>
@@ -503 +494 @@
                                                             $is_selected = ($selected_flag === $flag_file) ? 'selected' : '';
                                                             $flag_url = FAE_CURSOR_URL . 'assets/flags/' . $flag_file;
-                                                            echo '<div class="fae-flag-dropdown-item ' . $is_selected . '" data-flag="' . esc_attr($flag_file) . '" data-name="' . esc_attr($flag_name) . '" data-country-name="' . esc_attr(strtolower($country_name)) . '">';
+                                                            echo '<div class="fae-flag-dropdown-item ' . esc_attr($is_selected) . '" data-flag="' . esc_attr($flag_file) . '" data-name="' . esc_attr($flag_name) . '" data-country-name="' . esc_attr(strtolower($country_name)) . '">';
                                                             echo '<img src="' . esc_url($flag_url) . '" alt="' . esc_attr($country_name) . '" class="fae-flag-preview-img">';
                                                             echo '</div>';
@@ -561 +552 @@
                                         <label>
                                             <input type="checkbox" name="fae_cursor_options[multi_color]" value="1" disabled id="fae-cursor-multi-color">
-                                            Multi-Color <?php echo Fae_Cursor_Pro::get_pro_badge(); ?>
+                                            Multi-Color <?php echo Fae_Cursor_Pro::get_pro_badge(); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
                                         </label>
                                         <!-- Hidden input to always force multi_color to 0 (Pro feature protection) -->
@@ -594 +585 @@
                                                     $selected_icon_path = FAE_CURSOR_DIR . '/assets/ionicons/' . $selected_icon;
                                                     if (file_exists($selected_icon_path)) {
-                                                        echo file_get_contents($selected_icon_path);
+                                                        echo file_get_contents($selected_icon_path); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Local SVG file content
                                                     }
                                                     ?>
@@ -613 +604 @@
                                                         $is_selected = ($icon_file === $selected_icon) ? 'selected' : '';
                                                     ?>
-                                                    <div class="fae-icon-dropdown-item <?php echo $is_selected; ?>" data-icon="<?php echo esc_attr($icon_file); ?>">
-                                                        <?php echo file_get_contents($icon_path); ?>
+                                                    <div class="fae-icon-dropdown-item <?php echo esc_attr($is_selected); ?>" data-icon="<?php echo esc_attr($icon_file); ?>">
+                                                        <?php echo file_get_contents($icon_path); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped, WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents ?>
                                                     </div>
                                                     <?php endforeach; ?>
@@ -625 +616 @@
                                                         $is_selected = ($icon_file === $selected_icon) ? 'selected' : '';
                                                     ?>
-                                                    <div class="fae-icon-dropdown-item <?php echo $is_selected; ?>" data-icon="<?php echo esc_attr($icon_file); ?>">
-                                                        <?php echo file_get_contents($icon_path); ?>
+                                                    <div class="fae-icon-dropdown-item <?php echo esc_attr($is_selected); ?>" data-icon="<?php echo esc_attr($icon_file); ?>">
+                                                        <?php echo file_get_contents($icon_path); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped, WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents ?>
                                                     </div>
                                                     <?php endforeach; ?>
@@ -675 +666 @@
                                             <span class="fae-effect-name"><?php echo esc_html($config['display_name']); ?></span>
                                             <?php if ($is_pro_effect) : ?>
-                                                <?php echo Fae_Cursor_Pro::get_pro_badge(); ?>
+                                                <?php echo Fae_Cursor_Pro::get_pro_badge(); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
                                             <?php endif; ?>
                                         </div>
@@ -726 +717 @@
                                 <input type="hidden" name="fae_keyboard_options[scope_pages]" value="">
                                 <input type="hidden" name="fae_keyboard_options[scope_css_selector]" value="">
-                                <?php echo Fae_Cursor_Pro::get_upgrade_notice('Advanced scoping options require Pro.'); ?>
+                                <?php echo Fae_Cursor_Pro::get_upgrade_notice('Advanced scoping options require Pro.'); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
                             <?php endif; ?>
                                     </div>
@@ -801 +792 @@
                                 <input type="hidden" name="fae_keyboard_options[user_roles]" value="">
                                 <input type="hidden" name="fae_keyboard_options[include_logged_out]" value="0">
-                                <?php echo Fae_Cursor_Pro::get_upgrade_notice('User role restrictions require Pro.'); ?>
+                                <?php echo Fae_Cursor_Pro::get_upgrade_notice('User role restrictions require Pro.'); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
                             <?php endif; ?>
                                 </div>
@@ -882 +873 @@
                                         <label>
                                             <input type="checkbox" name="fae_keyboard_options[multi_color]" value="1" disabled id="fae-keyboard-multi-color">
-                                            Multi-Color <?php echo Fae_Cursor_Pro::get_pro_badge(); ?>
+                                            Multi-Color <?php echo Fae_Cursor_Pro::get_pro_badge(); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
                                         </label>
                                         <!-- Hidden input to always force multi_color to 0 (Pro feature protection) -->
@@ -937 +928 @@
                                             <span class="fae-effect-name"><?php echo esc_html($config['display_name']); ?></span>
                                             <?php if ($is_pro_effect) : ?>
-                                                <?php echo Fae_Cursor_Pro::get_pro_badge(); ?>
+                                                <?php echo Fae_Cursor_Pro::get_pro_badge(); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
                                             <?php endif; ?>
                                         </div>
@@ -985 +976 @@
                                 <input type="hidden" name="fae_particle_options[scope_type]" value="entire_website">
                                 <input type="hidden" name="fae_particle_options[scope_pages]" value="">
-                                <?php echo Fae_Cursor_Pro::get_upgrade_notice('Advanced scoping options require Pro.'); ?>
+                                <?php echo Fae_Cursor_Pro::get_upgrade_notice('Advanced scoping options require Pro.'); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
                             <?php endif; ?>
                                     </div>
@@ -1060 +1051 @@
                                 <input type="hidden" name="fae_particle_options[user_roles]" value="">
                                 <input type="hidden" name="fae_particle_options[include_logged_out]" value="0">
-                                <?php echo Fae_Cursor_Pro::get_upgrade_notice('User role restrictions require Pro.'); ?>
+                                <?php echo Fae_Cursor_Pro::get_upgrade_notice('User role restrictions require Pro.'); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>
                             <?php endif; ?>
                                 </div>
@@ -1172 +1163 @@
         </div>
     </div>
-    <p class="fae-dashboard-footer-version"><?php echo esc_html(__('FaeCursor v1.2', 'faecursor')); ?></p>
+    <p class="fae-dashboard-footer-version"><?php echo esc_html(__('FaeCursor v1.2.1', 'faecursor')); ?></p>
 </div>
 

faecursor/trunk/includes/views/preview-embed.php

@@ -10 +10 @@
 
 // Get parameters
-$effect_type = isset($_GET['type']) ? sanitize_text_field($_GET['type']) : 'cursor';
-$effect_name = isset($_GET['effect']) ? sanitize_text_field($_GET['effect']) : 'none';
-$color = isset($_GET['color']) ? sanitize_hex_color($_GET['color']) : '#667eea';
-$speed = isset($_GET['speed']) ? sanitize_text_field($_GET['speed']) : 'normal';
-$size = isset($_GET['size']) ? sanitize_text_field($_GET['size']) : '1.5rem';
-$icon = isset($_GET['icon']) ? sanitize_file_name($_GET['icon']) : 'star.svg';
-$flag = isset($_GET['flag']) ? sanitize_file_name($_GET['flag']) : '';
-$flag_position = isset($_GET['flag_position']) ? sanitize_text_field($_GET['flag_position']) : 'center';
-$multi_color = isset($_GET['multi_color']) ? sanitize_text_field($_GET['multi_color']) : '0';
-$bg = isset($_GET['bg']) ? sanitize_text_field($_GET['bg']) : 'dark';
+// phpcs:disable WordPress.Security.NonceVerification.Recommended -- Preview embed for admin users only, checked in handle_preview_page
+// phpcs:disable WordPress.Security.ValidatedSanitizedInput.MissingUnslash -- Simple GET parameters unslashed below
+$effect_type = isset($_GET['type']) ? sanitize_text_field(wp_unslash($_GET['type'])) : 'cursor';
+$effect_name = isset($_GET['effect']) ? sanitize_text_field(wp_unslash($_GET['effect'])) : 'none';
+$color = isset($_GET['color']) ? sanitize_hex_color(wp_unslash($_GET['color'])) : '#667eea';
+$speed = isset($_GET['speed']) ? sanitize_text_field(wp_unslash($_GET['speed'])) : 'normal';
+$size = isset($_GET['size']) ? sanitize_text_field(wp_unslash($_GET['size'])) : '1.5rem';
+$icon = isset($_GET['icon']) ? sanitize_file_name(wp_unslash($_GET['icon'])) : 'star.svg';
+$flag = isset($_GET['flag']) ? sanitize_file_name(wp_unslash($_GET['flag'])) : '';
+$flag_position = isset($_GET['flag_position']) ? sanitize_text_field(wp_unslash($_GET['flag_position'])) : 'center';
+$multi_color = isset($_GET['multi_color']) ? sanitize_text_field(wp_unslash($_GET['multi_color'])) : '0';
+$bg = isset($_GET['bg']) ? sanitize_text_field(wp_unslash($_GET['bg'])) : 'dark';
+// phpcs:enable WordPress.Security.NonceVerification.Recommended
+// phpcs:enable WordPress.Security.ValidatedSanitizedInput.MissingUnslash
 
 // Effect paths
@@ -158 +162 @@
     <?php if ($effect_name !== 'none') : ?>
         <?php if (file_exists($css_path)) : ?>
+        <?php // phpcs:ignore WordPress.WP.EnqueuedResources.NonEnqueuedStylesheet -- Preview embed page with inline styles ?>
         <link rel="stylesheet" href="<?php echo esc_url($css_url); ?>">
         <?php elseif (file_exists($css_path_alt)) : ?>
+        <?php // phpcs:ignore WordPress.WP.EnqueuedResources.NonEnqueuedStylesheet -- Preview embed page with inline styles ?>
         <link rel="stylesheet" href="<?php echo esc_url($css_url_alt); ?>">
         <?php endif; ?>
@@ -223 +229 @@
     </script>
     <?php if (file_exists($js_path)) : ?>
+    <?php // phpcs:ignore WordPress.WP.EnqueuedResources.NonEnqueuedScript -- Preview embed page with inline scripts ?>
     <script src="<?php echo esc_url($js_url); ?>"></script>
     <?php endif; ?>

faecursor/trunk/includes/views/preview-page.php

@@ -9 +9 @@
 
 // Get parameters
-$effect_type = isset($_GET['type']) ? sanitize_text_field($_GET['type']) : 'cursor';
-$effect_name = isset($_GET['effect']) ? sanitize_text_field($_GET['effect']) : 'none';
+// phpcs:disable WordPress.Security.NonceVerification.Recommended -- Preview page for admin users only, checked in handle_preview_page
+// phpcs:disable WordPress.Security.ValidatedSanitizedInput.MissingUnslash -- Simple GET parameters unslashed below
+$effect_type = isset($_GET['type']) ? sanitize_text_field(wp_unslash($_GET['type'])) : 'cursor';
+$effect_name = isset($_GET['effect']) ? sanitize_text_field(wp_unslash($_GET['effect'])) : 'none';
 $display_name = ucwords(str_replace('-', ' ', $effect_name));
 
 // Check for URL overrides (for live preview)
-$url_color = isset($_GET['color']) ? sanitize_hex_color($_GET['color']) : null;
-$url_speed = isset($_GET['speed']) ? sanitize_text_field($_GET['speed']) : null;
-$url_size = isset($_GET['size']) ? sanitize_text_field($_GET['size']) : null;
-$url_icon = isset($_GET['icon']) ? sanitize_file_name($_GET['icon']) : null;
+$url_color = isset($_GET['color']) ? sanitize_hex_color(wp_unslash($_GET['color'])) : null;
+$url_speed = isset($_GET['speed']) ? sanitize_text_field(wp_unslash($_GET['speed'])) : null;
+$url_size = isset($_GET['size']) ? sanitize_text_field(wp_unslash($_GET['size'])) : null;
+$url_icon = isset($_GET['icon']) ? sanitize_file_name(wp_unslash($_GET['icon'])) : null;
+// phpcs:enable WordPress.Security.NonceVerification.Recommended
+// phpcs:enable WordPress.Security.ValidatedSanitizedInput.MissingUnslash
 
 // Effect paths
@@ -332 +336 @@
     </style>
     <?php if (file_exists($css_path)) : ?>
+    <?php // phpcs:ignore WordPress.WP.EnqueuedResources.NonEnqueuedStylesheet -- Preview page with inline styles ?>
     <link rel="stylesheet" href="<?php echo esc_url($css_url); ?>">
     <?php elseif (file_exists($css_path_alt)) : ?>
+    <?php // phpcs:ignore WordPress.WP.EnqueuedResources.NonEnqueuedStylesheet -- Preview page with inline styles ?>
     <link rel="stylesheet" href="<?php echo esc_url($css_url_alt); ?>">
     <?php endif; ?>
@@ -393 +399 @@
                         $is_selected = ($icon_file === $icon) ? 'selected' : '';
                     ?>
-                    <div class="fae-icon-item <?php echo $is_selected; ?>" data-icon="<?php echo esc_attr($icon_file); ?>">
-                        <?php echo file_get_contents($icon_path); ?>
+                    <div class="fae-icon-item <?php echo esc_attr($is_selected); ?>" data-icon="<?php echo esc_attr($icon_file); ?>">
+                        <?php echo file_get_contents($icon_path); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Local SVG file content ?>
                     </div>
                     <?php endforeach; ?>
@@ -565 +571 @@
     </script>
     <?php if (file_exists($js_path)) : ?>
+    <?php // phpcs:ignore WordPress.WP.EnqueuedResources.NonEnqueuedScript -- Preview page with inline scripts ?>
     <script src="<?php echo esc_url($js_url); ?>"></script>
     <?php endif; ?>