Changeset 3484887

Timestamp:

03/17/2026 03:14:25 PM (13 days ago)

Author:

luzidmedia

Message:

Release 1.3.0

Location:

luzid-backup-to-nextcloud/trunk

Files:

• admin-page.php (modified) (13 diffs)
• howto-de.php (modified) (10 diffs)
• howto-en.php (modified) (9 diffs)
• luzid-backup-to-nextcloud.php (modified) (17 diffs)
• readme.txt (modified) (6 diffs)

luzid-backup-to-nextcloud/trunk/admin-page.php

@@ -1 +1 @@
 <?php
 /**
- * Admin Page Template for Luzid Backup to Nextcloud v1.2.9
+ * Admin Page Template for Luzid Backup to Nextcloud v1.3.0
  *
- * This file is included from Luzid_Backup_To_Nextcloud::render_admin_page(),
- * which already verifies current_user_can('manage_options').
  * Variables $lang, $options, $de_url, $en_url, $t, $active_tab are set by the caller.
  */
@@ -13 +11 @@
 
 $luzid_btn_source_names = array(
-    'updraftplus' => 'UpdraftPlus',
-    'backwpup'    => 'BackWPup',
-    'wpvivid'     => 'WPvivid',
-    'ai1wm'       => 'All-in-One WP Migration',
-    'duplicator'  => 'Duplicator',
-    'custom'      => 'Custom',
+    'updraftplus' => 'UpdraftPlus',
+    'backwpup' => 'BackWPup',
+    'wpvivid' => 'WPvivid',
+    'ai1wm' => 'All-in-One WP Migration',
+    'duplicator' => 'Duplicator',
+    'custom' => 'Custom'
 );
 
 // Check for test result – set via wp_safe_redirect after nonce-verified POST handlers.
 // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display flag set by redirect.
-$luzid_btn_show_test_modal = isset( $_GET['test_result'] );
+$luzid_btn_show_test_modal = isset($_GET['test_result']);
 // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display flag set by redirect.
 $luzid_btn_test_success = isset( $_GET['test_result'] ) && 'success' === sanitize_text_field( wp_unslash( $_GET['test_result'] ) );
 
-// Check for upload modal.
-// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display flag.
-$luzid_btn_show_upload_modal = isset( $_GET['show_upload_modal'] );
-
-// Check for settings saved modal.
-// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display flag set by redirect.
-$luzid_btn_show_settings_saved_modal = isset( $_GET['settings_saved'] );
-
-// Assets (logo + flags).
-$luzid_btn_flag_de  = LUZID_BACKUP_PLUGIN_URL . 'assets/img/ger.svg';
-$luzid_btn_flag_en  = LUZID_BACKUP_PLUGIN_URL . 'assets/img/uk.svg';
+// Check for upload modal
+// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Display flag only
+$luzid_btn_show_upload_modal = isset($_GET['show_upload_modal']);
+
+// Check for settings saved modal
+// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Display flag only
+$luzid_btn_show_settings_saved_modal = isset($_GET['settings_saved']);
+
+// Assets (logo + flags)
+$luzid_btn_flag_de = LUZID_BACKUP_PLUGIN_URL . 'assets/img/ger.svg';
+$luzid_btn_flag_en = LUZID_BACKUP_PLUGIN_URL . 'assets/img/uk.svg';
 $luzid_btn_logo_url = LUZID_BACKUP_PLUGIN_URL . 'assets/img/luzid-media-logo-plugins.svg';
 
 $luzid_btn_lang_switcher_html  = '<div class="lcs-lang-switcher">';
-$luzid_btn_lang_switcher_html .= '<a href="' . esc_url( $de_url ) . '" class="' . ( 'de' === $lang ? 'active' : '' ) . '">' . '<img src="' . esc_url( $luzid_btn_flag_de ) . '" alt="DE" title="Deutsch">' . '</a>';
-$luzid_btn_lang_switcher_html .= '<a href="' . esc_url( $en_url ) . '" class="' . ( 'en' === $lang ? 'active' : '' ) . '">' . '<img src="' . esc_url( $luzid_btn_flag_en ) . '" alt="EN" title="English">' . '</a>';
+$luzid_btn_lang_switcher_html .= '<a href="' . esc_url($de_url) . '" class="' . ($lang === 'de' ? 'active' : '') . '">' . '<img src="' . esc_url($luzid_btn_flag_de) . '" alt="DE" title="Deutsch">' . '</a>';
+$luzid_btn_lang_switcher_html .= '<a href="' . esc_url($en_url) . '" class="' . ($lang === 'en' ? 'active' : '') . '">' . '<img src="' . esc_url($luzid_btn_flag_en) . '" alt="EN" title="English">' . '</a>';
 $luzid_btn_lang_switcher_html .= '</div>';
 
-// Check for delete confirmation.
-// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display flag set by redirect.
-if ( isset( $_GET['all_deleted'] ) ) {
-    echo '<div class="lcs-notice success"><p>' . esc_html( $t['all_deleted'] ) . '</p></div>';
+// Check for delete confirmation
+// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Display flag only
+if (isset($_GET['all_deleted'])) {
+    echo '<div class="lcs-notice success"><p>' . esc_html($t['all_deleted']) . '</p></div>';
 }
 
-// Check for logs cleared.
-// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Read-only display flag set by redirect.
-if ( isset( $_GET['logs_cleared'] ) ) {
-    echo '<div class="lcs-notice success"><p>' . esc_html( $t['logs_cleared'] ) . '</p></div>';
+// Check for logs cleared
+// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Display flag only
+if (isset($_GET['logs_cleared'])) {
+    echo '<div class="lcs-notice success"><p>' . esc_html($t['logs_cleared']) . '</p></div>';
+}
+
+// Determine if any backup source is enabled (used for button visibility + hint).
+$luzid_btn_has_enabled_source = false;
+if ( ! empty( $options['sources'] ) && is_array( $options['sources'] ) ) {
+    foreach ( $options['sources'] as $luzid_btn_chk ) {
+        if ( ! empty( $luzid_btn_chk['enabled'] ) ) {
+            $luzid_btn_has_enabled_source = true;
+            break;
+        }
+    }
 }
 ?>
@@ -68 +77 @@
             <div class="lcs-header-right">
                 <div class="lcs-logo">
-                    <img class="lcs-logo-img" src="<?php echo esc_url( $luzid_btn_logo_url ); ?>" alt="Luzid">
+                    <img class="lcs-logo-img" src="<?php echo esc_url($luzid_btn_logo_url); ?>" alt="Luzid">
                 </div>
             </div>
@@ -81 +90 @@
                 <button class="lcs-tab-link <?php echo $active_tab === 'tab-howto' ? 'active' : ''; ?>" data-tab="tab-howto"><?php echo esc_html($t['tab_howto']); ?></button>
             </div>
-            <div class="lcs-tabs-nav__right"><?php echo wp_kses_post( $luzid_btn_lang_switcher_html ); ?></div>
+            <div class="lcs-tabs-nav__right"><?php echo wp_kses_post($luzid_btn_lang_switcher_html); ?></div>
         </div>
 
@@ -95 +104 @@
                         <th><?php echo esc_html($t['webdav_url']); ?></th>
                         <td>
-                            <input type="url" name="webdav_url" value="<?php echo esc_attr($options['webdav_url']); ?>" placeholder="https://cloud.example.com/remote.php/dav/files/USERNAME/">
+                            <input type="url" name="webdav_url" value="<?php echo esc_attr($options['webdav_url']); ?>">
                             <span class="lcs-description"><?php echo esc_html($t['webdav_url_desc']); ?></span>
                         </td>
@@ -108 +117 @@
                         <th><?php echo esc_html($t['password']); ?></th>
                         <td>
-                            <input type="password" name="webdav_password" placeholder="<?php echo !empty($options['webdav_password']) ? '••••••••' : ''; ?>">
+                            <div style="display: flex; align-items: center; gap: 6px;">
+                                <input type="password" name="luzid_btn_app_password" id="luzid_btn_app_password" autocomplete="new-password" placeholder="<?php echo !empty($options['webdav_password']) ? '••••••••' : ''; ?>" value="">
+                                <button type="button" id="luzid-btn-toggle-pw" class="button button-secondary" style="padding: 2px 8px; min-height: 30px; line-height: 28px;" title="<?php echo 'de' === $lang ? 'Passwort anzeigen/verbergen' : 'Show/hide password'; ?>">
+                                    <span class="dashicons dashicons-visibility" style="vertical-align: middle;"></span>
+                                </button>
+                            </div>
+                            <script>
+                            (function(){
+                                var btn = document.getElementById('luzid-btn-toggle-pw');
+                                if (btn) {
+                                    btn.addEventListener('click', function() {
+                                        var inp = document.getElementById('luzid_btn_app_password');
+                                        var ico = btn.querySelector('.dashicons');
+                                        if (inp.type === 'password') {
+                                            inp.type = 'text';
+                                            ico.classList.remove('dashicons-visibility');
+                                            ico.classList.add('dashicons-hidden');
+                                        } else {
+                                            inp.type = 'password';
+                                            ico.classList.remove('dashicons-hidden');
+                                            ico.classList.add('dashicons-visibility');
+                                        }
+                                    });
+                                }
+                            })();
+                            </script>
                             <span class="lcs-description"><?php echo esc_html($t['password_desc']); ?></span>
-                            <div class="lcs-checkbox-wrapper" style="margin-top: 10px;">
-                                <input type="checkbox" name="remove_password" value="1" id="remove_password">
-                                <label for="remove_password"><?php echo esc_html($t['remove_password']); ?></label>
-                            </div>
+
                         </td>
                     </tr>
@@ -164 +195 @@
 
                 <?php
-                // Show hint if no source has been selected yet.
-                $luzid_btn_has_enabled_source = false;
-                if ( ! empty( $options['sources'] ) && is_array( $options['sources'] ) ) {
-                    foreach ( $options['sources'] as $luzid_btn_s ) {
-                        if ( ! empty( $luzid_btn_s['enabled'] ) ) {
-                            $luzid_btn_has_enabled_source = true;
-                            break;
-                        }
-                    }
-                }
                 if ( ! $luzid_btn_has_enabled_source ) {
                     echo '<p style="margin-top: 20px;"><strong>' . esc_html( $t['select_source_hint'] ?? 'Bitte wähle eine Backup-Quelle' ) . '</strong></p>';
@@ -184 +205 @@
                 <h2><?php echo esc_html($t['sources_title']); ?></h2>
 
-                <?php foreach ( $luzid_btn_source_names as $luzid_btn_source_id => $luzid_btn_source_name ) :
-                    $luzid_btn_source  = isset( $options['sources'][ $luzid_btn_source_id ] ) ? $options['sources'][ $luzid_btn_source_id ] : array();
-                    $luzid_btn_enabled = ! empty( $luzid_btn_source['enabled'] );
+                <?php foreach ($luzid_btn_source_names as $luzid_btn_source_id => $luzid_btn_source_name): 
+                    $luzid_btn_source = isset( $options['sources'][ $luzid_btn_source_id ] ) ? $options['sources'][ $luzid_btn_source_id ] : array();
+                    $luzid_btn_enabled = !empty($luzid_btn_source['enabled']);
                 ?>
                 <div class="lcs-source-item">
                     <div class="lcs-source-header">
-                        <h3><?php echo esc_html( $luzid_btn_source_name ); ?></h3>
+                        <h3><?php echo esc_html($luzid_btn_source_name); ?></h3>
                         <div class="lcs-checkbox-wrapper">
-                            <input type="checkbox" name="sources[<?php echo esc_attr( $luzid_btn_source_id ); ?>][enabled]" value="1" id="source_<?php echo esc_attr( $luzid_btn_source_id ); ?>" <?php checked( $luzid_btn_enabled ); ?>>
-                            <label for="source_<?php echo esc_attr( $luzid_btn_source_id ); ?>"><?php echo esc_html( $t['source_enabled'] ); ?></label>
+                            <input type="checkbox" name="sources[<?php echo esc_attr($luzid_btn_source_id); ?>][enabled]" value="1" id="source_<?php echo esc_attr($luzid_btn_source_id); ?>" <?php checked($luzid_btn_enabled); ?>>
+                            <label for="source_<?php echo esc_attr($luzid_btn_source_id); ?>"><?php echo esc_html($t['source_enabled']); ?></label>
                         </div>
                     </div>
                     <div class="lcs-source-fields">
                         <div class="lcs-source-field">
-                            <label><?php echo esc_html( $t['source_path'] ); ?></label>
-                            <input type="text" name="sources[<?php echo esc_attr( $luzid_btn_source_id ); ?>][path]" value="<?php echo esc_attr( $luzid_btn_source['path'] ?? '' ); ?>">
+                            <label><?php echo esc_html($t['source_path']); ?></label>
+                            <input type="text" name="sources[<?php echo esc_attr($luzid_btn_source_id); ?>][path]" value="<?php echo esc_attr($luzid_btn_source['path'] ?? ''); ?>">
                         </div>
                         <div class="lcs-source-field">
-                            <label><?php echo esc_html( $t['source_extensions'] ); ?></label>
-                            <input type="text" name="sources[<?php echo esc_attr( $luzid_btn_source_id ); ?>][extensions]" value="<?php echo esc_attr( $luzid_btn_source['extensions'] ?? '' ); ?>">
+                            <label><?php echo esc_html($t['source_extensions']); ?></label>
+                            <input type="text" name="sources[<?php echo esc_attr($luzid_btn_source_id); ?>][extensions]" value="<?php echo esc_attr($luzid_btn_source['extensions'] ?? ''); ?>">
                         </div>
                         <div class="lcs-checkbox-wrapper">
-                            <input type="checkbox" name="sources[<?php echo esc_attr( $luzid_btn_source_id ); ?>][scan_real_files]" value="1" id="scan_<?php echo esc_attr( $luzid_btn_source_id ); ?>" <?php checked( ! empty( $luzid_btn_source['scan_real_files'] ) ); ?>>
-                            <label for="scan_<?php echo esc_attr( $luzid_btn_source_id ); ?>"><?php echo esc_html( $t['source_scan_real'] ); ?></label>
-                            <span class="lcs-description"><?php echo esc_html( $t['source_scan_real_desc'] ?? '' ); ?></span>
+                            <input type="checkbox" name="sources[<?php echo esc_attr($luzid_btn_source_id); ?>][scan_real_files]" value="1" id="scan_<?php echo esc_attr($luzid_btn_source_id); ?>" <?php checked(!empty($luzid_btn_source['scan_real_files'])); ?>>
+                            <label for="scan_<?php echo esc_attr($luzid_btn_source_id); ?>"><?php echo esc_html($t['source_scan_real']); ?></label>
+                            <span class="lcs-description"><?php echo esc_html($t['source_scan_real_desc'] ?? ''); ?></span>
                         </div>
                     </div>
@@ -300 +321 @@
                 <div class="lcs-log-container">
                     <?php
-                    $luzid_btn_logs = get_option( 'luzid_backup_logs', array() );
-                    if ( empty( $luzid_btn_logs ) ) {
+                    $luzid_btn_logs = get_option('luzid_backup_logs', array());
+                    if (empty($luzid_btn_logs)) {
                         echo '<div class="log-info">No logs yet</div>';
                     } else {
-                        foreach ( array_reverse( array_slice( $luzid_btn_logs, -50 ) ) as $luzid_btn_log ) {
-                            $luzid_btn_class = 'log-' . esc_attr( $luzid_btn_log['level'] );
-                            echo '<div class="' . esc_attr( $luzid_btn_class ) . '">[' . esc_html( $luzid_btn_log['time'] ) . '] ' . esc_html( $luzid_btn_log['message'] ) . '</div>';
+                        foreach (array_reverse(array_slice($luzid_btn_logs, -50)) as $luzid_btn_log) {
+                            $luzid_btn_class = 'log-' . esc_attr($luzid_btn_log['level']);
+                            echo '<div class="' . esc_attr($luzid_btn_class) . '">[' . esc_html($luzid_btn_log['time']) . '] ' . esc_html($luzid_btn_log['message']) . '</div>';
                         }
                     }
@@ -318 +339 @@
                     <?php
                     $luzid_btn_howto_file = LUZID_BACKUP_PLUGIN_DIR . 'howto-' . $lang . '.php';
-                    if ( file_exists( $luzid_btn_howto_file ) ) {
+                    if (file_exists($luzid_btn_howto_file)) {
                         include $luzid_btn_howto_file;
                     }
@@ -326 +347 @@
         </form>
 
-        <!-- Action Buttons - Always visible below tabs -->
-        <div style="padding: 20px 30px; border-top: 1px solid #e5e5e5; background: #fafafa;">
+        <!-- Action Buttons - Visibility depends on active tab -->
+        <div id="luzid-btn-actions" data-has-source="<?php echo $luzid_btn_has_enabled_source ? '1' : '0'; ?>" style="padding: 20px 30px; border-top: 1px solid #e5e5e5; background: #fafafa;">
             <div class="lcs-button-group">
-                <button type="submit" form="luzid-backup-form" class="lcs-button"><?php echo esc_html($t['save_settings']); ?></button>
+                <button type="submit" form="luzid-backup-form" class="lcs-button" id="luzid-btn-save"><?php echo esc_html($t['save_settings']); ?></button>
                 
-                <button type="button" onclick="luzidSaveAndTest()" class="lcs-button lcs-button-secondary"><?php echo esc_html($t['test_connection']); ?></button>
-
-                <button type="button" onclick="luzidStartUpload()" class="lcs-button lcs-button-secondary"><?php echo esc_html($t['manual_run']); ?></button>
+                <button type="button" onclick="luzidSaveAndTest()" class="lcs-button lcs-button-secondary" id="luzid-btn-test"><?php echo esc_html($t['test_connection']); ?></button>
+
+                <button type="button" onclick="luzidStartUpload()" class="lcs-button lcs-button-secondary" id="luzid-btn-upload"><?php echo esc_html($t['manual_run']); ?></button>
 
                 <a href="<?php echo esc_url(wp_nonce_url(add_query_arg(array('action' => 'luzid_backup_delete_all', 'luzid_lang' => $lang), admin_url('admin-post.php')), 'luzid_backup_delete_all')); ?>" 
-                   class="lcs-button lcs-button-secondary"
+                   class="lcs-button lcs-button-secondary" id="luzid-btn-delete"
                    onclick="return confirm('<?php echo esc_js($t['confirm_delete_all']); ?>')">
                     <?php echo esc_html($t['delete_all']); ?>
@@ -342 +363 @@
             </div>
         </div>
+        <script>
+        (function(){
+            function luzidUpdateButtons() {
+                var tabInput  = document.getElementById('active-tab-input');
+                var tab       = tabInput ? tabInput.value : 'tab-nextcloud';
+                var btnSave   = document.getElementById('luzid-btn-save');
+                var btnTest   = document.getElementById('luzid-btn-test');
+                var btnUpload = document.getElementById('luzid-btn-upload');
+                var btnDelete = document.getElementById('luzid-btn-delete');
+                var bar       = document.getElementById('luzid-btn-actions');
+                var hasSource = bar && bar.getAttribute('data-has-source') === '1';
+
+                if (tab === 'tab-nextcloud') {
+                    btnSave.style.display   = 'none';
+                    btnTest.style.display   = '';
+                    btnUpload.style.display = 'none';
+                    btnDelete.style.display = '';
+                    bar.style.display       = '';
+                } else if (tab === 'tab-howto') {
+                    bar.style.display = 'none';
+                } else {
+                    btnSave.style.display   = '';
+                    btnTest.style.display   = 'none';
+                    btnUpload.style.display = '';
+                    btnDelete.style.display = '';
+                    bar.style.display       = '';
+                }
+                // Upload button: disabled (greyed out) when no source is enabled
+                if (btnUpload) {
+                    if (!hasSource) {
+                        btnUpload.disabled = true;
+                        btnUpload.style.opacity = '0.5';
+                        btnUpload.style.cursor = 'not-allowed';
+                    } else {
+                        btnUpload.disabled = false;
+                        btnUpload.style.opacity = '';
+                        btnUpload.style.cursor = '';
+                    }
+                }
+            }
+            document.addEventListener('click', function(e) {
+                if (e.target.classList.contains('lcs-tab-link')) {
+                    setTimeout(luzidUpdateButtons, 10);
+                }
+            });
+            document.addEventListener('DOMContentLoaded', luzidUpdateButtons);
+        })();
+        </script>
     </div>
 </div>
@@ -363 +432 @@
 <div id="test-result-modal" class="lcs-overlay <?php echo $luzid_btn_show_test_modal ? 'active' : ''; ?>">
     <div class="lcs-overlay-content">
-        <h2><?php echo esc_html( $luzid_btn_test_success ? $t['test_success'] : $t['test_failed'] ); ?></h2>
+        <h2><?php echo esc_html($luzid_btn_test_success ? $t['test_success'] : $t['test_failed']); ?></h2>
         <p style="font-size: 48px; margin: 20px 0; text-align: center;"><?php echo $luzid_btn_test_success ? '✓' : '✗'; ?></p>
-        <p style="text-align: center;"><?php echo esc_html( $luzid_btn_test_success ? $t['test_success'] : $t['test_failed'] ); ?></p>
+        <p style="text-align: center;"><?php echo esc_html($luzid_btn_test_success ? $t['test_success'] : $t['test_failed']); ?></p>
         <div class="lcs-button-group">
             <button type="button" onclick="luzidCloseModal('test-result-modal')" class="lcs-button"><?php echo esc_html($t['close']); ?></button>

luzid-backup-to-nextcloud/trunk/howto-de.php

@@ -4 +4 @@
  */
 
-// Exit if accessed directly
-if (!defined('ABSPATH')) {
+if ( ! defined( 'ABSPATH' ) ) {
     exit;
 }
@@ -14 +13 @@
 
 <h3>Voraussetzungen</h3>
-
-<p>Bevor Sie beginnen, stellen Sie sicher, dass Sie folgendes haben:</p>
 
 <ul>
@@ -27 +24 @@
 <p>Aus Sicherheitsgründen sollten Sie ein <strong>App-Passwort</strong> verwenden, nicht Ihr Hauptpasswort.</p>
 
-<h4>So erstellen Sie ein App-Passwort:</h4>
-
 <ol>
     <li>Melden Sie sich in Ihrer Nextcloud an</li>
-    <li>Klicken Sie oben rechts auf Ihr Profilbild</li>
-    <li>Wählen Sie <strong>Einstellungen</strong></li>
-    <li>Navigieren Sie zu <strong>Sicherheit</strong> im linken Menü</li>
-    <li>Scrollen Sie zu <strong>Geräte & Sitzungen</strong></li>
+    <li>Klicken Sie oben rechts auf Ihr Profilbild → <strong>Einstellungen</strong></li>
+    <li>Navigieren Sie zu <strong>Sicherheit</strong> → <strong>Geräte & Sitzungen</strong></li>
     <li>Geben Sie einen App-Namen ein (z.B. "WordPress Backup")</li>
     <li>Klicken Sie auf <strong>Neues App-Passwort erstellen</strong></li>
@@ -40 +33 @@
 </ol>
 
-<p><strong>Wichtig:</strong> Bewahren Sie dieses Passwort sicher auf. Sie benötigen es für die Plugin-Konfiguration.</p>
-
 <h3>Schritt 2: WebDAV-URL herausfinden</h3>
-
-<p>Die WebDAV-URL ist die Adresse, über die das Plugin auf Ihre Nextcloud zugreift.</p>
-
-<h4>So finden Sie Ihre WebDAV-URL:</h4>
 
 <ol>
     <li>Melden Sie sich in Ihrer Nextcloud an</li>
     <li>Klicken Sie links unten auf das <strong>Einstellungen-Symbol</strong> (Zahnrad)</li>
-    <li>Gehen Sie zu <strong>Dateien</strong> → <strong>WebDAV</strong></li>
-    <li>Kopieren Sie die angezeigte WebDAV-URL</li>
+    <li>Die WebDAV-URL wird unter <strong>Dateien → WebDAV</strong> angezeigt</li>
 </ol>
 
-<p><strong>Die URL sollte so aussehen:</strong></p>
+<p><strong>Die URL sieht so aus:</strong></p>
 <pre>https://ihre-nextcloud.de/remote.php/dav/files/IHR-BENUTZERNAME/</pre>
 
-<p><strong>Wichtig:</strong> Die URL muss mit einem <code>/</code> (Schrägstrich) enden!</p>
+<p><strong>Wichtig:</strong> Die URL muss mit einem <code>/</code> enden!</p>
 
-<h3>Schritt 3: Plugin konfigurieren</h3>
-
-<h4>Nextcloud-Verbindung einrichten:</h4>
+<h3>Schritt 3: Verbindung einrichten</h3>
 
 <ol>
     <li>Gehen Sie in WordPress zu <strong>Luzid WP Tools → Backup to Nextcloud</strong></li>
-    <li>Im Tab <strong>Nextcloud</strong>:</li>
-    <ul>
-        <li><strong>WebDAV Base URL:</strong> Fügen Sie Ihre WebDAV-URL ein</li>
-        <li><strong>Benutzername:</strong> Ihr Nextcloud-Benutzername</li>
-        <li><strong>App-Passwort:</strong> Das in Schritt 1 erstellte App-Passwort</li>
-        <li><strong>Remote Ordner:</strong> Name des Zielordners in Nextcloud (z.B. "WP-Backups")</li>
-    </ul>
+    <li>Im Tab <strong>Setup</strong> füllen Sie alle Felder aus:
+        <ul>
+            <li><strong>WebDAV Base URL:</strong> Ihre WebDAV-URL</li>
+            <li><strong>Benutzername:</strong> Ihr Nextcloud-Benutzername</li>
+            <li><strong>App-Passwort:</strong> Das in Schritt 1 erstellte Passwort. Mit dem Auge-Symbol können Sie das Passwort sichtbar machen, um es zu überprüfen.</li>
+            <li><strong>Remote Ordner:</strong> Pfad zum Zielordner in Nextcloud (z.B. "/backups/wordpress")</li>
+        </ul>
+    </li>
     <li>Klicken Sie auf <strong>Speichern & Testen</strong></li>
-    <li>Wenn die Verbindung erfolgreich ist, sehen Sie eine Bestätigung</li>
+    <li>Bei erfolgreicher Verbindung erscheint eine Bestätigung mit ✓</li>
 </ol>
 
-<p><strong>Hinweis:</strong> Der Zielordner wird automatisch erstellt, falls er nicht existiert.</p>
+<p><strong>Hinweis:</strong> Der Zielordner wird automatisch erstellt, falls er nicht existiert. Im Setup-Tab gibt es nur den Button "Speichern & Testen" – damit werden Ihre Einstellungen gespeichert und die Verbindung gleichzeitig geprüft.</p>
 
 <h4>Email Reporting konfigurieren (Optional):</h4>
 
-<p>Im Bereich <strong>Reporting</strong> können Sie E-Mail-Benachrichtigungen einrichten:</p>
+<p>Im Bereich <strong>Reporting</strong> (ebenfalls im Setup-Tab) können Sie E-Mail-Benachrichtigungen einrichten:</p>
 
 <ol>
@@ -88 +73 @@
     <li>Wählen Sie aus:
         <ul>
-            <li><strong>Bei erfolgreichem Transfer:</strong> Benachrichtigung bei jedem erfolgreichen Backup-Upload</li>
+            <li><strong>Bei erfolgreichem Transfer:</strong> Benachrichtigung bei jedem erfolgreichen Upload</li>
             <li><strong>Bei fehlerhaftem Transfer:</strong> Benachrichtigung nur bei Fehlern (empfohlen)</li>
         </ul>
     </li>
-    <li>Klicken Sie auf <strong>Einstellungen speichern</strong></li>
 </ol>
 
-<h4>Backup-Quellen aktivieren:</h4>
+<h3>Schritt 4: Backup-Quellen aktivieren</h3>
 
 <ol>
     <li>Wechseln Sie zum Tab <strong>Backup-Quellen</strong></li>
     <li>Aktivieren Sie die Checkbox bei Ihrem Backup-Plugin (z.B. UpdraftPlus)</li>
-    <li>Überprüfen Sie den <strong>Lokalen Pfad</strong> (wird automatisch gesetzt)</li>
-    <li>Passen Sie die <strong>Dateiendungen</strong> an, falls nötig (z.B. <code>zip,gz,tar.gz</code>)</li>
-    <li>Optional: Aktivieren Sie <strong>Nur echte Dateien scannen</strong> (überspringt Dateien mit Berechtigungsproblemen)</li>
+    <li>Überprüfen Sie den <strong>Lokalen Pfad</strong> (wird automatisch vorausgefüllt)</li>
+    <li>Passen Sie die <strong>Dateiendungen</strong> an, falls nötig</li>
     <li>Klicken Sie auf <strong>Einstellungen speichern</strong></li>
 </ol>
 
-<p><strong>Unterstützte Backup-Plugins:</strong></p>
-<ul>
-    <li>UpdraftPlus</li>
-    <li>BackWPup</li>
-    <li>WPvivid</li>
-    <li>All-in-One WP Migration</li>
-    <li>Duplicator</li>
-    <li>Custom (für eigene Backup-Ordner)</li>
-</ul>
+<p><strong>Unterstützte Backup-Plugins:</strong> UpdraftPlus, BackWPup, WPvivid, All-in-One WP Migration, Duplicator sowie eigene Ordner (Custom).</p>
 
-<h3>Schritt 4: Zeitplan einrichten (Optional)</h3>
+<h3>Schritt 5: Ersten Upload testen</h3>
 
-<p>Sie können automatische Uploads zu bestimmten Zeiten einrichten.</p>
+<ol>
+    <li>Stellen Sie sicher, dass Ihr Backup-Plugin mindestens ein Backup erstellt hat</li>
+    <li>Wechseln Sie zum Tab <strong>Backup-Quellen</strong> oder <strong>Zeitplan & Logs</strong></li>
+    <li>Klicken Sie auf <strong>Upload manuell starten</strong></li>
+    <li>Ein Fenster zeigt den Fortschritt an</li>
+    <li>Warten Sie, bis "Upload erfolgreich abgeschlossen!" erscheint</li>
+    <li>Prüfen Sie in Ihrer Nextcloud, ob die Dateien angekommen sind</li>
+</ol>
+
+<p><strong>Hinweis:</strong> Der Button "Upload manuell starten" wird erst aktiv, wenn mindestens eine Backup-Quelle aktiviert wurde. Große Dateien werden automatisch per Streaming hochgeladen, um Speicher- und Timeout-Probleme zu vermeiden.</p>
+
+<h3>Schritt 6: Zeitplan einrichten (Optional)</h3>
 
 <ol>
     <li>Gehen Sie zum Tab <strong>Zeitplan & Logs</strong></li>
     <li>Aktivieren Sie <strong>Zeitplan aktivieren</strong></li>
-    <li>Wählen Sie die <strong>Frequenz</strong>:</li>
-    <ul>
-        <li><strong>Täglich um:</strong> Upload jeden Tag zur gewählten Uhrzeit</li>
-        <li><strong>Wöchentlich am:</strong> Upload einmal pro Woche an einem bestimmten Wochentag</li>
-        <li><strong>Monatlich am:</strong> Upload einmal pro Monat an einem bestimmten Tag</li>
-    </ul>
-    <li>Wählen Sie die gewünschte <strong>Uhrzeit</strong> (z.B. 03:00 für 3 Uhr nachts)</li>
+    <li>Wählen Sie die <strong>Frequenz</strong>:
+        <ul>
+            <li><strong>Täglich um:</strong> Upload jeden Tag zur gewählten Uhrzeit</li>
+            <li><strong>Wöchentlich am:</strong> Upload einmal pro Woche</li>
+            <li><strong>Monatlich am:</strong> Upload einmal pro Monat</li>
+        </ul>
+    </li>
+    <li>Wählen Sie die gewünschte <strong>Uhrzeit</strong></li>
     <li>Klicken Sie auf <strong>Einstellungen speichern</strong></li>
 </ol>
 
-<p><strong>Wichtig:</strong> WordPress Cron ist traffic-abhängig. Die Ausführung erfolgt, wenn nach der eingestellten Zeit Ihre Website besucht wird. Bei wenig Traffic kann es zu Verzögerungen kommen.</p>
+<p><strong>Wichtig:</strong> WordPress Cron ist traffic-abhängig. Die Ausführung erfolgt, wenn nach der eingestellten Zeit Ihre Website besucht wird.</p>
 
 <h4>Rotation einrichten (Optional):</h4>
@@ -141 +128 @@
 <ol>
     <li>Aktivieren Sie <strong>Rotation aktivieren</strong></li>
-    <li>Geben Sie an, wie viele Backup-Sets pro Quelle behalten werden sollen (z.B. 10)</li>
-    <li>Ältere Backups werden automatisch gelöscht</li>
-</ol>
-
-<h3>Schritt 5: Ersten Upload testen</h3>
-
-<ol>
-    <li>Stellen Sie sicher, dass Ihr Backup-Plugin mindestens ein Backup erstellt hat</li>
-    <li>Klicken Sie auf <strong>Upload manuell starten</strong></li>
-    <li>Ein Fenster öffnet sich und zeigt den Fortschritt</li>
-    <li>Warten Sie, bis "Upload erfolgreich abgeschlossen!" angezeigt wird</li>
-    <li>Prüfen Sie in Ihrer Nextcloud, ob die Dateien angekommen sind</li>
+    <li>Geben Sie an, wie viele Backup-Sets pro Quelle behalten werden sollen</li>
+    <li>Ältere Backups werden bei jedem Upload-Durchlauf automatisch gelöscht</li>
 </ol>
 
@@ -160 +137 @@
 
 <pre>
-WP-Backups/
-├── ihre-domain_de/
+Ihr-Remote-Ordner/
+├── ihre_domain_de/
 │   ├── updraftplus/
-│   │   ├── 20250207-1430/
-│   │   │   ├── backup-database.zip
+│   │   ├── 2026-03-17-1430/
+│   │   │   ├── backup-database.gz
 │   │   │   ├── backup-plugins.zip
-│   │   │   └── backup-themes.zip
-│   │   └── 20250206-1430/
+│   │   │   ├── backup-themes.zip
+│   │   │   └── backup-uploads.zip
+│   │   └── 2026-03-16-1430/
 │   │       └── ...
 │   └── backwpup/
@@ -173 +151 @@
 </pre>
 
-<p>Jeder Backup-Durchlauf erhält einen eigenen Unterordner mit Zeitstempel.</p>
-
 <h3>Logs und Fehlerbehebung</h3>
 
-<h4>Logs anzeigen:</h4>
-
-<p>Im Tab <strong>Zeitplan & Logs</strong> finden Sie eine detaillierte Aufzeichnung aller Aktivitäten:</p>
-
-<ul>
-    <li><strong>Info:</strong> Normale Informationen (z.B. "Backup upload started")</li>
-    <li><strong>Success:</strong> Erfolgreiche Aktionen (z.B. "Uploaded: file.zip")</li>
-    <li><strong>Warning:</strong> Warnungen (z.B. "Source path not found")</li>
-    <li><strong>Error:</strong> Fehler (z.B. "Upload failed")</li>
-</ul>
+<p>Im Tab <strong>Zeitplan & Logs</strong> finden Sie eine detaillierte Aufzeichnung aller Aktivitäten.</p>
 
 <h4>Häufige Probleme:</h4>
 
-<p><strong>Problem: Verbindungstest schlägt fehl</strong></p>
+<p><strong>Verbindungstest schlägt fehl</strong></p>
 <ul>
     <li>Überprüfen Sie die WebDAV-URL (muss mit / enden)</li>
-    <li>Stellen Sie sicher, dass Sie Ihr <strong>App-Passwort</strong> verwenden, nicht Ihr Hauptpasswort</li>
+    <li>Stellen Sie sicher, dass Sie ein <strong>App-Passwort</strong> verwenden, nicht Ihr Hauptpasswort</li>
+    <li>Nutzen Sie das Auge-Symbol, um zu prüfen, ob Ihr Browser das Passwort-Feld automatisch mit einem falschen Passwort ausgefüllt hat</li>
     <li>Prüfen Sie, ob Ihre Nextcloud von außen erreichbar ist</li>
-    <li>Kontaktieren Sie ggf. Ihren Nextcloud-Administrator</li>
 </ul>
 
-<p><strong>Problem: Upload wird nicht gefunden</strong></p>
+<p><strong>Keine Backup-Dateien gefunden</strong></p>
 <ul>
     <li>Prüfen Sie im Tab "Backup-Quellen", ob der lokale Pfad korrekt ist</li>
     <li>Stellen Sie sicher, dass Ihr Backup-Plugin tatsächlich Backups erstellt hat</li>
-    <li>Überprüfen Sie die Dateiendungen (z.B. .zip, .gz)</li>
+    <li>Überprüfen Sie die Dateiendungen</li>
 </ul>
 
-<p><strong>Problem: Zeitplan wird nicht ausgeführt</strong></p>
+<p><strong>Upload bleibt hängen</strong></p>
 <ul>
-    <li>WordPress Cron benötigt Website-Traffic zur Ausführung</li>
-    <li>Prüfen Sie, ob "Zeitplan aktivieren" aktiviert ist</li>
-    <li>Testen Sie zunächst mit "Upload manuell starten"</li>
+    <li>Bei sehr großen Dateien (> 200 MB) kann der Upload einige Minuten dauern</li>
+    <li>Das Plugin verwendet für große Dateien automatisch Streaming-Uploads, die wenig RAM benötigen</li>
+    <li>Prüfen Sie die Logs auf Fehlermeldungen</li>
 </ul>
 
@@ -217 +184 @@
     <li>Verwenden Sie <strong>immer</strong> ein Nextcloud App-Passwort, nie Ihr Hauptpasswort</li>
     <li>Aktivieren Sie HTTPS/SSL für Ihre Nextcloud-Verbindung</li>
-    <li>Schützen Sie Ihren WordPress-Admin-Bereich</li>
     <li>Erstellen Sie regelmäßig Backups und testen Sie die Wiederherstellung</li>
-    <li>Löschen Sie alte App-Passwörter, wenn Sie sie nicht mehr benötigen</li>
-</ul>
-
-<h3>Tipps und Best Practices</h3>
-
-<ul>
-    <li><strong>Backup-Zeitplan:</strong> Führen Sie Backups nachts aus (geringere Last)</li>
-    <li><strong>Rotation:</strong> Behalten Sie mindestens die letzten 7-14 Backup-Sets</li>
-    <li><strong>Speicherplatz:</strong> Überwachen Sie Ihren Nextcloud-Speicher regelmäßig</li>
-    <li><strong>Test:</strong> Testen Sie die Wiederherstellung aus Nextcloud</li>
-    <li><strong>Mehrere Quellen:</strong> Sie können mehrere Backup-Plugins gleichzeitig verwenden</li>
 </ul>
 
@@ -238 +193 @@
 <ul>
     <li>Prüfen Sie die Logs im Tab "Zeitplan & Logs"</li>
-    <li>Schicken Sie eine Supportanfrage mit einer ausführlichen Fehlerbeschreibung an <a href="mailto:[email protected]">[email protected]</a></li>
+    <li>Schicken Sie eine Supportanfrage an <a href="mailto:[email protected]">[email protected]</a></li>
 </ul>
-
-<p><strong>Viel Erfolg mit Ihren Backups!</strong></p>

luzid-backup-to-nextcloud/trunk/howto-en.php

@@ -4 +4 @@
  */
 
-// Exit if accessed directly
-if (!defined('ABSPATH')) {
+if ( ! defined( 'ABSPATH' ) ) {
     exit;
 }
@@ -11 +10 @@
 <h2>Welcome to Luzid Backup to Nextcloud</h2>
 
-<p>This plugin allows you to automatically upload WordPress backup files to your Nextcloud. It is compatible with the most popular backup plugins and offers additional features such as scheduled uploads and automatic rotation of old backups.</p>
+<p>This plugin allows you to automatically upload WordPress backup files to your Nextcloud. It is compatible with the most popular backup plugins and offers features such as scheduled uploads and automatic rotation of old backups.</p>
 
 <h3>Prerequisites</h3>
-
-<p>Before you begin, make sure you have:</p>
 
 <ul>
@@ -25 +22 @@
 <h3>Step 1: Create Nextcloud App Password</h3>
 
-<p>For security reasons, you should use an <strong>App Password</strong>, not your main password.</p>
-
-<h4>How to create an App Password:</h4>
+<p>For security reasons, use an <strong>App Password</strong>, not your main password.</p>
 
 <ol>
     <li>Log in to your Nextcloud</li>
-    <li>Click on your profile picture in the top right</li>
-    <li>Select <strong>Settings</strong></li>
-    <li>Navigate to <strong>Security</strong> in the left menu</li>
-    <li>Scroll to <strong>Devices & Sessions</strong></li>
+    <li>Click your profile picture (top right) → <strong>Settings</strong></li>
+    <li>Navigate to <strong>Security</strong> → <strong>Devices & Sessions</strong></li>
     <li>Enter an app name (e.g. "WordPress Backup")</li>
     <li>Click <strong>Create new app password</strong></li>
-    <li>Copy the generated password (you'll only see it once!)</li>
+    <li>Copy the generated password (you will only see it once!)</li>
 </ol>
-
-<p><strong>Important:</strong> Keep this password safe. You'll need it for the plugin configuration.</p>
 
 <h3>Step 2: Find Your WebDAV URL</h3>
 
-<p>The WebDAV URL is the address through which the plugin accesses your Nextcloud.</p>
-
-<h4>How to find your WebDAV URL:</h4>
-
 <ol>
     <li>Log in to your Nextcloud</li>
-    <li>Click on the <strong>Settings icon</strong> (gear) in the bottom left</li>
-    <li>Go to <strong>Files</strong> → <strong>WebDAV</strong></li>
-    <li>Copy the displayed WebDAV URL</li>
+    <li>Click the <strong>Settings icon</strong> (gear) in the bottom left</li>
+    <li>The WebDAV URL is shown under <strong>Files → WebDAV</strong></li>
 </ol>
 
-<p><strong>The URL should look like this:</strong></p>
+<p><strong>The URL looks like this:</strong></p>
 <pre>https://your-nextcloud.com/remote.php/dav/files/YOUR-USERNAME/</pre>
 
-<p><strong>Important:</strong> The URL must end with a <code>/</code> (slash)!</p>
+<p><strong>Important:</strong> The URL must end with a <code>/</code>!</p>
 
-<h3>Step 3: Configure the Plugin</h3>
-
-<h4>Set up Nextcloud connection:</h4>
+<h3>Step 3: Set Up Connection</h3>
 
 <ol>
     <li>In WordPress, go to <strong>Luzid WP Tools → Backup to Nextcloud</strong></li>
-    <li>In the <strong>Nextcloud</strong> tab:</li>
-    <ul>
-        <li><strong>WebDAV Base URL:</strong> Paste your WebDAV URL</li>
-        <li><strong>Username:</strong> Your Nextcloud username</li>
-        <li><strong>App Password:</strong> The app password created in Step 1</li>
-        <li><strong>Remote Folder:</strong> Name of the target folder in Nextcloud (e.g. "WP-Backups")</li>
-    </ul>
+    <li>In the <strong>Setup</strong> tab, fill in all fields:
+        <ul>
+            <li><strong>WebDAV Base URL:</strong> Your WebDAV URL</li>
+            <li><strong>Username:</strong> Your Nextcloud username</li>
+            <li><strong>App Password:</strong> The password from Step 1. Use the eye icon to reveal the password and verify it.</li>
+            <li><strong>Remote Folder:</strong> Path to the target folder in Nextcloud (e.g. "/backups/wordpress")</li>
+        </ul>
+    </li>
     <li>Click <strong>Save & Test</strong></li>
-    <li>If the connection is successful, you'll see a confirmation</li>
+    <li>A successful connection shows a ✓ confirmation</li>
 </ol>
 
-<p><strong>Note:</strong> The target folder will be created automatically if it doesn't exist.</p>
+<p><strong>Note:</strong> The target folder is created automatically if it does not exist. The Setup tab only has the "Save & Test" button, which saves your settings and tests the connection in one step.</p>
 
 <h4>Configure Email Reporting (Optional):</h4>
 
-<p>In the <strong>Reporting</strong> section, you can set up email notifications:</p>
+<p>In the <strong>Reporting</strong> section (also in the Setup tab), you can set up email notifications:</p>
 
 <ol>
@@ -88 +73 @@
     <li>Choose:
         <ul>
-            <li><strong>On successful transfer:</strong> Notification for every successful backup upload</li>
+            <li><strong>On successful transfer:</strong> Notification for every successful upload</li>
             <li><strong>On failed transfer:</strong> Notification only for errors (recommended)</li>
         </ul>
     </li>
-    <li>Click <strong>Save Settings</strong></li>
 </ol>
 
-<h4>Activate backup sources:</h4>
+<h3>Step 4: Activate Backup Sources</h3>
 
 <ol>
     <li>Switch to the <strong>Backup Sources</strong> tab</li>
     <li>Check the box for your backup plugin (e.g. UpdraftPlus)</li>
-    <li>Verify the <strong>Local Path</strong> (set automatically)</li>
-    <li>Adjust <strong>File Extensions</strong> if needed (e.g. <code>zip,gz,tar.gz</code>)</li>
-    <li>Optional: Enable <strong>Scan real files only</strong> (skips files with permission issues)</li>
+    <li>Verify the <strong>Local Path</strong> (pre-filled automatically)</li>
+    <li>Adjust <strong>File Extensions</strong> if needed</li>
     <li>Click <strong>Save Settings</strong></li>
 </ol>
 
-<p><strong>Supported backup plugins:</strong></p>
-<ul>
-    <li>UpdraftPlus</li>
-    <li>BackWPup</li>
-    <li>WPvivid</li>
-    <li>All-in-One WP Migration</li>
-    <li>Duplicator</li>
-    <li>Custom (for your own backup folders)</li>
-</ul>
+<p><strong>Supported backup plugins:</strong> UpdraftPlus, BackWPup, WPvivid, All-in-One WP Migration, Duplicator, and custom folders.</p>
 
-<h3>Step 4: Set Up Schedule (Optional)</h3>
+<h3>Step 5: Test First Upload</h3>
 
-<p>You can set up automatic uploads at specific times.</p>
+<ol>
+    <li>Make sure your backup plugin has created at least one backup</li>
+    <li>Switch to the <strong>Backup Sources</strong> or <strong>Schedule & Logs</strong> tab</li>
+    <li>Click <strong>Start Manual Upload</strong></li>
+    <li>A window shows the upload progress</li>
+    <li>Wait until "Upload completed successfully!" is displayed</li>
+    <li>Check your Nextcloud to verify the files arrived</li>
+</ol>
+
+<p><strong>Note:</strong> The "Start Manual Upload" button only becomes active once at least one backup source has been enabled. Large files are automatically uploaded via streaming to avoid memory and timeout issues.</p>
+
+<h3>Step 6: Set Up Schedule (Optional)</h3>
 
 <ol>
     <li>Go to the <strong>Schedule & Logs</strong> tab</li>
     <li>Enable <strong>Enable Schedule</strong></li>
-    <li>Choose the <strong>Frequency</strong>:</li>
-    <ul>
-        <li><strong>Daily at:</strong> Upload every day at the chosen time</li>
-        <li><strong>Weekly on:</strong> Upload once per week on a specific weekday</li>
-        <li><strong>Monthly on:</strong> Upload once per month on a specific day</li>
-    </ul>
-    <li>Select the desired <strong>Time</strong> (e.g. 03:00 for 3 AM)</li>
+    <li>Choose the <strong>Frequency</strong>:
+        <ul>
+            <li><strong>Daily at:</strong> Upload every day at the chosen time</li>
+            <li><strong>Weekly on:</strong> Upload once per week</li>
+            <li><strong>Monthly on:</strong> Upload once per month</li>
+        </ul>
+    </li>
+    <li>Select the desired <strong>Time</strong></li>
     <li>Click <strong>Save Settings</strong></li>
 </ol>
 
-<p><strong>Important:</strong> WordPress Cron is traffic-based. Execution occurs when your website is visited after the set time. With low traffic, delays may occur.</p>
+<p><strong>Important:</strong> WordPress Cron is traffic-based. Execution occurs when your website is visited after the scheduled time.</p>
 
-<h4>Set up rotation (Optional):</h4>
+<h4>Set Up Rotation (Optional):</h4>
 
 <p>Rotation automatically deletes old backups in Nextcloud to save storage space.</p>
@@ -141 +128 @@
 <ol>
     <li>Enable <strong>Enable Rotation</strong></li>
-    <li>Specify how many backup sets per source should be kept (e.g. 10)</li>
-    <li>Older backups will be automatically deleted</li>
-</ol>
-
-<h3>Step 5: Test First Upload</h3>
-
-<ol>
-    <li>Make sure your backup plugin has created at least one backup</li>
-    <li>Click <strong>Start Manual Upload</strong></li>
-    <li>A window opens showing the progress</li>
-    <li>Wait until "Upload completed successfully!" is displayed</li>
-    <li>Check in your Nextcloud if the files have arrived</li>
+    <li>Specify how many backup sets per source should be kept</li>
+    <li>Older backups are automatically deleted during each upload run</li>
 </ol>
 
@@ -160 +137 @@
 
 <pre>
-WP-Backups/
-├── your-domain_com/
+Your-Remote-Folder/
+├── your_domain_com/
 │   ├── updraftplus/
-│   │   ├── 20250207-1430/
-│   │   │   ├── backup-database.zip
+│   │   ├── 2026-03-17-1430/
+│   │   │   ├── backup-database.gz
 │   │   │   ├── backup-plugins.zip
-│   │   │   └── backup-themes.zip
-│   │   └── 20250206-1430/
+│   │   │   ├── backup-themes.zip
+│   │   │   └── backup-uploads.zip
+│   │   └── 2026-03-16-1430/
 │   │       └── ...
 │   └── backwpup/
@@ -173 +151 @@
 </pre>
 
-<p>Each backup run gets its own subfolder with timestamp.</p>
-
 <h3>Logs and Troubleshooting</h3>
 
-<h4>View logs:</h4>
+<p>In the <strong>Schedule & Logs</strong> tab you will find a detailed record of all activities.</p>
 
-<p>In the <strong>Schedule & Logs</strong> tab you'll find a detailed record of all activities:</p>
+<h4>Common Issues:</h4>
 
+<p><strong>Connection test fails</strong></p>
 <ul>
-    <li><strong>Info:</strong> Normal information (e.g. "Backup upload started")</li>
-    <li><strong>Success:</strong> Successful actions (e.g. "Uploaded: file.zip")</li>
-    <li><strong>Warning:</strong> Warnings (e.g. "Source path not found")</li>
-    <li><strong>Error:</strong> Errors (e.g. "Upload failed")</li>
+    <li>Check the WebDAV URL (must end with /)</li>
+    <li>Make sure you are using an <strong>App Password</strong>, not your main password</li>
+    <li>Use the eye icon to check whether your browser auto-filled the password field with the wrong password</li>
+    <li>Check if your Nextcloud is accessible from the internet</li>
 </ul>
 
-<h4>Common issues:</h4>
-
-<p><strong>Issue: Connection test fails</strong></p>
-<ul>
-    <li>Check the WebDAV URL (must end with /)</li>
-    <li>Make sure you're using your <strong>App Password</strong>, not your main password</li>
-    <li>Check if your Nextcloud is accessible from outside</li>
-    <li>Contact your Nextcloud administrator if necessary</li>
-</ul>
-
-<p><strong>Issue: Upload not found</strong></p>
+<p><strong>No backup files found</strong></p>
 <ul>
     <li>Check in the "Backup Sources" tab if the local path is correct</li>
     <li>Make sure your backup plugin has actually created backups</li>
-    <li>Verify the file extensions (e.g. .zip, .gz)</li>
+    <li>Verify the file extensions</li>
 </ul>
 
-<p><strong>Issue: Schedule not executing</strong></p>
+<p><strong>Upload gets stuck</strong></p>
 <ul>
-    <li>WordPress Cron requires website traffic to execute</li>
-    <li>Check if "Enable Schedule" is enabled</li>
-    <li>Test first with "Start Manual Upload"</li>
+    <li>Very large files (> 200 MB) may take several minutes to upload</li>
+    <li>The plugin automatically uses streaming uploads for large files, which require very little RAM</li>
+    <li>Check the logs for error messages</li>
 </ul>
 
@@ -217 +184 @@
     <li><strong>Always</strong> use a Nextcloud App Password, never your main password</li>
     <li>Enable HTTPS/SSL for your Nextcloud connection</li>
-    <li>Protect your WordPress admin area</li>
     <li>Create regular backups and test restoration</li>
-    <li>Delete old app passwords when you no longer need them</li>
-</ul>
-
-<h3>Tips and Best Practices</h3>
-
-<ul>
-    <li><strong>Backup schedule:</strong> Run backups at night (lower load)</li>
-    <li><strong>Rotation:</strong> Keep at least the last 7-14 backup sets</li>
-    <li><strong>Storage:</strong> Monitor your Nextcloud storage regularly</li>
-    <li><strong>Test:</strong> Test restoration from Nextcloud</li>
-    <li><strong>Multiple sources:</strong> You can use multiple backup plugins simultaneously</li>
 </ul>
 
@@ -238 +193 @@
 <ul>
     <li>Check the logs in the "Schedule & Logs" tab</li>
-    <li>Send a support request with a detailed error description to <a href="mailto:[email protected]">[email protected]</a></li>
+    <li>Send a support request to <a href="mailto:[email protected]">[email protected]</a></li>
 </ul>
-
-<p><strong>Good luck with your backups!</strong></p>

luzid-backup-to-nextcloud/trunk/luzid-backup-to-nextcloud.php

@@ -3 +3 @@
  * Plugin Name: Luzid Backup to Nextcloud
  * Description: Upload WordPress backup files to Nextcloud via WebDAV with rotation and retention management
- * Version: 1.2.10
+ * Version: 1.3.0
  * Author: Luzid Media
  * Text Domain: luzid-backup-to-nextcloud
@@ -16 +16 @@
 
 // Define plugin constants
-define('LUZID_BACKUP_VERSION', '1.2.9');
+define('LUZID_BACKUP_VERSION', '1.3.0');
 define('LUZID_BACKUP_PLUGIN_FILE', __FILE__);
 define('LUZID_BACKUP_PLUGIN_DIR', plugin_dir_path(__FILE__));
@@ -376 +376 @@
                 sanitize_text_field($input['webdav_username']) : '';
 
-            if (isset($input['remove_password']) && $input['remove_password']) {
-                $sanitized['webdav_password'] = '';
-            } elseif (isset($input['webdav_password']) && !empty($input['webdav_password'])) {
+            if (isset($input['webdav_password']) && !empty($input['webdav_password'])) {
                 // Store as entered (app password)
                 $sanitized['webdav_password'] = $input['webdav_password'];
@@ -409 +407 @@
                 $sanitized['sources'][$source_id] = array(
                     'enabled' => !empty($posted['enabled']) ? 1 : 0,
-                    'path' => isset($posted['path']) ? sanitize_text_field($posted['path']) : $default_config['path'],
-                    'extensions' => isset($posted['extensions']) ? sanitize_text_field($posted['extensions']) : $default_config['extensions'],
+                    'path' => !empty($posted['path']) ? sanitize_text_field($posted['path']) : $default_config['path'],
+                    'extensions' => !empty($posted['extensions']) ? sanitize_text_field($posted['extensions']) : $default_config['extensions'],
                     'scan_real_files' => !empty($posted['scan_real_files']) ? 1 : 0,
                 );
@@ -480 +478 @@
         $lang = $this->get_current_lang();
         $options = get_option('luzid_backup_options', $this->get_default_options());
+        // Ensure sources always contain default paths and extensions.
+        $default_sources = $this->get_default_sources();
+        if ( empty($options['sources']) || ! is_array($options['sources']) ) {
+            $options['sources'] = $default_sources;
+        } else {
+            foreach ( $default_sources as $src_id => $src_defaults ) {
+                if ( ! isset($options['sources'][$src_id]) ) {
+                    $options['sources'][$src_id] = $src_defaults;
+                } else {
+                    $options['sources'][$src_id] = wp_parse_args($options['sources'][$src_id], $src_defaults);
+                }
+            }
+        }
         
         $current_url = remove_query_arg('luzid_lang');
@@ -492 +503 @@
         
         if (isset($_POST['luzid_backup_save']) && check_admin_referer('luzid_backup_save')) {
-            // Extract only plugin-specific fields to avoid processing entire $_POST
+            // Extract only plugin-specific fields to avoid processing entire $_POST.
+            $luzid_btn_pw_field = isset($_POST['luzid_btn_app_password']) ? sanitize_text_field(wp_unslash($_POST['luzid_btn_app_password'])) : '';
             $input = array(
                 'active_tab'             => isset($_POST['active_tab']) ? sanitize_text_field(wp_unslash($_POST['active_tab'])) : '',
                 'webdav_url'             => isset($_POST['webdav_url']) ? esc_url_raw(wp_unslash($_POST['webdav_url'])) : '',
                 'webdav_username'        => isset($_POST['webdav_username']) ? sanitize_text_field(wp_unslash($_POST['webdav_username'])) : '',
-                'webdav_password'        => isset($_POST['webdav_password']) ? sanitize_text_field(wp_unslash($_POST['webdav_password'])) : '',
-                'remove_password'        => isset($_POST['remove_password']) ? sanitize_text_field(wp_unslash($_POST['remove_password'])) : '',
+                'webdav_password'        => $luzid_btn_pw_field,
                 'remote_folder'          => isset($_POST['remote_folder']) ? sanitize_text_field(wp_unslash($_POST['remote_folder'])) : '',
                 'email_reporting_enabled' => isset($_POST['email_reporting_enabled']) ? absint($_POST['email_reporting_enabled']) : 0,
@@ -504 +515 @@
                 'email_on_success'       => isset($_POST['email_on_success']) ? absint($_POST['email_on_success']) : 0,
                 'email_on_error'         => isset($_POST['email_on_error']) ? absint($_POST['email_on_error']) : 0,
-                'sources'                => isset($_POST['sources']) && is_array($_POST['sources']) ? map_deep(wp_unslash($_POST['sources']), 'sanitize_text_field') : array(),
+                // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Nested array; each value is sanitized individually in sanitize_options().
+                'sources'                => isset($_POST['sources']) && is_array($_POST['sources']) ? wp_unslash($_POST['sources']) : array(),
                 'schedule_enabled'       => isset($_POST['schedule_enabled']) ? absint($_POST['schedule_enabled']) : 0,
                 'schedule_frequency'     => isset($_POST['schedule_frequency']) ? sanitize_text_field(wp_unslash($_POST['schedule_frequency'])) : '',
@@ -549 +561 @@
             'webdav_username' => '',
             'webdav_password' => '',
-            'remote_folder' => 'WP-Backups',
+            'remote_folder' => '',
             'email_reporting_enabled' => 0,
             'email_address' => '',
@@ -631 +643 @@
                 'username' => 'Benutzername',
                 'password' => 'App-Passwort',
-                'password_desc' => 'Leer lassen = Passwort behalten. Verwenden Sie ein Nextcloud App-Passwort.',
-                'remove_password' => 'Passwort entfernen',
+                'password_desc' => 'Verwenden Sie ein Nextcloud App-Passwort.',
                 'remote_folder' => 'Remote Ordner',
                 'remote_folder_desc' => 'Zielordner in Nextcloud, z.B. WP-Backups',
@@ -649 +660 @@
                 'source_scan_real' => 'Nur echte Dateien scannen',
                 'source_scan_real_desc' => 'Wenn aktiv, werden nur lesbare Dateien berücksichtigt (überspringt Dateien mit Berechtigungsproblemen).',
-                'select_source_hint' => 'Bitte wähle eine Backup-Quelle',
+                'select_source_hint' => 'Fülle alle Felder aus und drücke anschließend "Speichern & Testen". Wenn die Verbindung erfolgreich ist, wähle anschließend eine Backup-Quelle.',
                 'schedule_title' => 'Zeitplan',
                 'schedule_enabled' => 'Zeitplan aktivieren',
@@ -703 +714 @@
                 'username' => 'Username',
                 'password' => 'App Password',
-                'password_desc' => 'Leave empty to keep existing. Use Nextcloud app password.',
-                'remove_password' => 'Remove password',
+                'password_desc' => 'Use a Nextcloud app password.',
                 'remote_folder' => 'Remote Folder',
                 'remote_folder_desc' => 'Target folder in Nextcloud, e.g. WP-Backups',
@@ -721 +731 @@
                 'source_scan_real' => 'Scan real files only',
                 'source_scan_real_desc' => 'If enabled, only readable files are included (skips files with permission issues).',
-                'select_source_hint' => 'Please select a backup source',
+                'select_source_hint' => 'Fill in all fields and press "Save & Test". Once the connection is successful, select a backup source.',
                 'schedule_title' => 'Schedule',
                 'schedule_enabled' => 'Enable Schedule',
@@ -777 +787 @@
         }
         
-        // Extract only plugin-specific fields to avoid processing entire $_POST
+        // Extract only plugin-specific fields to avoid processing entire $_POST.
+        $luzid_btn_pw_field = isset($_POST['luzid_btn_app_password']) ? sanitize_text_field(wp_unslash($_POST['luzid_btn_app_password'])) : '';
         $input = array(
             'active_tab'             => isset($_POST['active_tab']) ? sanitize_text_field(wp_unslash($_POST['active_tab'])) : '',
             'webdav_url'             => isset($_POST['webdav_url']) ? esc_url_raw(wp_unslash($_POST['webdav_url'])) : '',
             'webdav_username'        => isset($_POST['webdav_username']) ? sanitize_text_field(wp_unslash($_POST['webdav_username'])) : '',
-            'webdav_password'        => isset($_POST['webdav_password']) ? sanitize_text_field(wp_unslash($_POST['webdav_password'])) : '',
-            'remove_password'        => isset($_POST['remove_password']) ? sanitize_text_field(wp_unslash($_POST['remove_password'])) : '',
+            'webdav_password'        => $luzid_btn_pw_field,
             'remote_folder'          => isset($_POST['remote_folder']) ? sanitize_text_field(wp_unslash($_POST['remote_folder'])) : '',
             'email_reporting_enabled' => isset($_POST['email_reporting_enabled']) ? absint($_POST['email_reporting_enabled']) : 0,
@@ -866 +876 @@
         }
         
-        delete_option('luzid_backup_options');
+        // Remove logs, state and cron schedule.
         delete_option('luzid_backup_state');
         delete_option('luzid_backup_logs');
+        wp_clear_scheduled_hook('luzid_backup_cron_hook');
+
+        // Reset options to defaults (preserves source paths and file extensions).
+        update_option('luzid_backup_options', $this->get_default_options());
         
         $lang = $this->get_current_lang();
@@ -1185 +1199 @@
         $remote_url = $options['webdav_url'] . ltrim($remote_path, '/') . $filename;
         $auth = base64_encode($options['webdav_username'] . ':' . $options['webdav_password']);
-        $this->log('info', "Uploading: {$filename}");
-        
-        // phpcs:ignore WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents -- Large file streaming needed for WebDAV PUT
+        $filesize = filesize($local_path);
+        $filesize_mb = round($filesize / 1048576, 1);
+        $this->log('info', "Uploading: {$filename} ({$filesize_mb} MB)");
+        
+        // Attempt to extend PHP limits for large uploads.
+        // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged, Squiz.PHP.DiscouragedFunctions.Discouraged -- Graceful timeout extension for large file uploads.
+        @set_time_limit(600);
+        
+        // Large files (>2 MB): use cURL streaming to avoid loading entire file into RAM.
+        if ($filesize > 2 * 1048576 && function_exists('curl_init')) {
+            return $this->upload_file_curl($local_path, $remote_url, $auth, $filename);
+        }
+        
+        // Small files: use wp_remote_request (keeps full WP compatibility).
+        // phpcs:ignore WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents -- Reading local backup file for WebDAV PUT.
         $file_data = file_get_contents($local_path);
         if ($file_data === false) {
@@ -1201 +1227 @@
             ),
             'body' => $file_data,
-            'timeout' => 300, // 5 minutes for large files
+            'timeout' => 300,
         ));
         
@@ -1212 +1238 @@
         if ($http_code >= 200 && $http_code < 300) {
             $this->log('success', "Uploaded: {$filename}");
+            return true;
+        } else {
+            $this->log('error', "Upload failed: {$filename} (HTTP {$http_code})");
+            return false;
+        }
+    }
+    
+    /**
+     * Upload a file via cURL with streaming (reads from disk, never loads entire file into RAM).
+     */
+    private function upload_file_curl($local_path, $remote_url, $auth, $filename) {
+        // phpcs:ignore WordPress.WP.AlternativeFunctions.curl_curl_init -- Required for streaming large files that exceed PHP memory limits.
+        $ch = curl_init();
+        
+        // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_fopen -- Opening local backup file for streaming upload.
+        $fh = fopen($local_path, 'rb');
+        if ( ! $fh ) {
+            $this->log('error', "Cannot open file for streaming: {$filename}");
+            return false;
+        }
+        
+        $filesize = filesize($local_path);
+        
+        // phpcs:ignore WordPress.WP.AlternativeFunctions.curl_curl_setopt_array -- Required for streaming PUT upload with CURLOPT_INFILE; no wp_remote_request equivalent.
+        curl_setopt_array($ch, array(
+            CURLOPT_URL            => $remote_url,
+            CURLOPT_PUT            => true,
+            CURLOPT_INFILE         => $fh,
+            CURLOPT_INFILESIZE     => $filesize,
+            CURLOPT_RETURNTRANSFER => true,
+            CURLOPT_TIMEOUT        => 600,
+            CURLOPT_CONNECTTIMEOUT => 30,
+            CURLOPT_HTTPHEADER     => array(
+                'Authorization: Basic ' . $auth,
+                'Content-Type: application/octet-stream',
+            ),
+            CURLOPT_SSL_VERIFYPEER => true,
+        ));
+        
+        // phpcs:ignore WordPress.WP.AlternativeFunctions.curl_curl_exec
+        $result = curl_exec($ch);
+        // phpcs:ignore WordPress.WP.AlternativeFunctions.curl_curl_getinfo
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        // phpcs:ignore WordPress.WP.AlternativeFunctions.curl_curl_error
+        $curl_error = curl_error($ch);
+        // phpcs:ignore WordPress.WP.AlternativeFunctions.curl_curl_close
+        curl_close($ch);
+        fclose($fh); // phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_fclose -- Closing file handle opened for cURL streaming.
+        
+        if ( ! empty($curl_error) ) {
+            $this->log('error', "Upload failed (cURL): {$filename} - {$curl_error}");
+            return false;
+        }
+        
+        if ($http_code >= 200 && $http_code < 300) {
+            $this->log('success', "Uploaded: {$filename} (streamed)");
             return true;
         } else {

luzid-backup-to-nextcloud/trunk/readme.txt

@@ -5 +5 @@
 Tested up to: 6.9
 Requires PHP: 7.4
-Stable tag: 1.2.10
+Stable tag: 1.3.0
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -17 +17 @@
 It is designed for two main workflows:
 
-1) **Automate offsite copies**: upload backup archives on a schedule (WordPress Cron)
-2) **Manual runs + monitoring**: start uploads manually and follow progress + logs
+1. **Automate offsite copies**: upload backup archives on a schedule (WordPress Cron).
+2. **Manual runs + monitoring**: start uploads manually and follow progress + logs.
 
 Typical use cases:
 
 * Keep an offsite copy of backup archives generated by popular backup plugins.
-* Upload backups to a structured Nextcloud folder (per source).
+* Upload backups to a structured Nextcloud folder (per source, per domain).
 * Reduce storage usage with optional rotation (keep only the last N backup sets per source).
 
 Core concepts:
 
-* **Sources**: each source represents a folder where backup files are created (UpdraftPlus, BackWPup, … or custom).
-* **Upload**: the plugin scans sources for backup files and uploads them to Nextcloud.
-* **Schedule**: optional daily/weekly/monthly runs at a fixed time (WordPress Cron; traffic-dependent).
-* **Rotation**: keep the newest N backup sets and remove older ones on Nextcloud.
-* **Email Reporting**: get notified on successful or failed transfers.
+* **Sources** – each source represents a folder where backup files are created (UpdraftPlus, BackWPup, WPvivid, All-in-One WP Migration, Duplicator, or custom).
+* **Upload** – the plugin scans sources for backup files and uploads them to Nextcloud via WebDAV PUT.
+* **Streaming** – files larger than 2 MB are uploaded via cURL streaming (reads from disk, never loads the entire file into RAM). This prevents memory and timeout issues on shared hosting.
+* **Schedule** – optional daily/weekly/monthly runs at a fixed time (WordPress Cron; traffic-dependent).
+* **Rotation** – keep the newest N backup sets and remove older ones on Nextcloud.
+* **Email Reporting** – get notified on successful or failed transfers.
 
 == Features ==
 
-* Nextcloud WebDAV connection (URL, username, app password)
-* Multiple backup sources (known plugins + custom)
+* Nextcloud WebDAV connection with one-click Save & Test
+* Password field with visibility toggle and browser autofill protection
+* Multiple backup sources (known plugins + custom folders)
 * File filters by extension
+* Streaming uploads for large files (low RAM usage)
 * Manual upload with progress modal
 * Scheduled runs: Daily, Weekly, or Monthly (WordPress Cron)
 * Email notifications for successful/failed transfers
-* Logs viewer + clear logs
+* Log viewer with clear function
 * Rotation / retention (keep last N backup sets)
-* German / English admin UI
+* Context-aware action buttons per tab
+* German and English admin UI with integrated How-To guide
 
 == Installation ==
@@ -54 +58 @@
 == Usage ==
 
-= Configure Nextcloud =
+= 1. Setup (connection) =
 
-1. Enter your WebDAV base URL (must end with `/`).
-2. Enter username + **Nextcloud App Password**.
-3. Set a target folder name.
-4. Click **Save & Test**.
+1. Fill in WebDAV URL, username, app password, and remote folder.
+2. Click **Save & Test** – this saves settings and tests the connection in one step.
 
-= Configure sources =
+= 2. Backup Sources =
 
-1. Enable one or more sources.
-2. Adjust local paths (if needed).
-3. Set file extensions to include (comma-separated).
+1. Switch to the **Backup Sources** tab.
+2. Enable one or more sources (paths and extensions are pre-filled).
+3. Click **Save Settings**.
 
-= Schedule + rotation =
+= 3. Manual Upload =
 
-* Enable the schedule and set a time.
+1. Click **Start Manual Upload** (available once a source is enabled).
+2. A progress modal shows the upload status.
+
+= 4. Schedule + Rotation =
+
+* Enable the schedule, choose frequency and time, then save.
 * Enable rotation and choose how many backup sets to keep.
 
@@ -84 +91 @@
 = Should I use a normal password or an app password? =
 
-Use a Nextcloud **App Password**.
+Always use a Nextcloud **App Password** (Settings → Security → Devices & Sessions).
+
+= My upload gets stuck on large files =
+
+The plugin streams files larger than 2 MB via cURL to avoid PHP memory limits. If uploads still time out, check your hosting provider's PHP `max_execution_time` setting.
+
+= The password field is filled with the wrong password =
+
+Click the eye icon next to the password field to reveal and verify the content. The field uses `autocomplete="new-password"` to prevent browser autofill, but some browsers may still fill it. Clear the field and enter your Nextcloud app password manually.
 
 == License ==
@@ -90 +105 @@
 This plugin is licensed under the **GNU General Public License v2.0 or later**.
 
-Assets:
+== Changelog ==
 
-* Logo + flag icons are shipped as SVG assets in `assets/img/`.
-
-== Screenshots ==
-
-1. Settings: Configure your Nextcloud WebDAV connection and select auto-detected backup sources.
-2. Backup Sources: See which backup plugin folders/files were found and what will be uploaded.
-3. Logs / Status: Review upload results, last run, and any errors.
-
-== Changelog ==
+= 1.3.0 =
+* **Streaming uploads**: Files > 2 MB are now uploaded via cURL streaming (reads from disk, never loads entire file into RAM). Solves timeout and memory issues on shared hosting with large backup files.
+* **Context-aware buttons**: Each tab shows only the relevant action buttons. Setup shows only "Save & Test"; Backup Sources and Schedule show "Save Settings"; How-To hides all buttons.
+* **Upload button gating**: "Start Manual Upload" is disabled (greyed out) until at least one backup source is enabled.
+* **Password field improvements**: Visibility toggle (eye icon), `autocomplete="new-password"` to prevent browser autofill, renamed form field name to avoid browser recognition.
+* **Removed "Remove password" checkbox**: Passwords are now simply replaced by entering a new one.
+* **Default source paths**: Backup source paths and file extensions always fall back to sensible defaults (even after reset). Empty fields are never saved – defaults are restored automatically.
+* **"Delete All Settings" preserves defaults**: Resetting the plugin now keeps default source paths and extensions intact, only clears user configuration, logs, and schedule.
+* **Guided setup flow**: New hint text on Setup tab guides users through the configuration process.
+* **Updated How-To guides**: German and English documentation rewritten to match current UI and features.
+* **Fixed**: `$log` / `$source` / `$s` variable reference bugs from prefix renaming.
+* **Fixed**: Sources tab fields (path, extensions) now save correctly.
 
 = 1.2.9 =
@@ -106 +124 @@
 * Fixed: Removed invalid Author URI (luzid.app)
 * Fixed: Contributors changed from "luzid" to "luzidmedia"
-* Fixed: Replaced `WP_CONTENT_DIR` constant with `wp_normalize_path( dirname( wp_upload_dir()['basedir'] ) )`
-* Fixed: `$_POST` is no longer processed as a whole; explicit field extraction in render_admin_page() and save_and_test_connection()
-* Fixed: JavaScript object name `luzidBackup` renamed to `luzid_backup_data` (prefixed)
+* Fixed: Replaced `WP_CONTENT_DIR` constant with `wp_normalize_path( dirname() )`
+* Fixed: Explicit field extraction from `$_POST` instead of processing the whole stack
+* Fixed: JS object name `luzidBackup` renamed to `luzid_backup_data` (prefixed)
 * Fixed: All global variables in admin-page.php prefixed with `luzid_btn_`
-* Fixed: Added proper `phpcs:ignore` annotations with justifications for display-only `$_GET` usage
-* Fixed: `$_GET['test_result']` now sanitized with `sanitize_text_field( wp_unslash() )`
-* Security: `webdav_password` sanitized via `sanitize_text_field()` before processing
-* Security: Nested `$_POST['sources']` array sanitized via `map_deep()` with `sanitize_text_field`
 
 = 1.2.4 =
-* **CRITICAL FIX:** Settings now save correctly on first install
-* Fixed: active_tab defaults to 'tab-nextcloud' instead of empty string
-* Fixed: WebDAV credentials and settings persist after "Save & Test"
-* Improved: Better fallback handling for tab detection
+* Settings now save correctly on first install
+* WebDAV credentials persist after "Save & Test"
+* Better fallback handling for tab detection
 
 = 1.2.3 =
-* **CRITICAL:** Replaced cURL with wp_remote_request() for WordPress compliance
-* Fixed: parse_url() replaced with wp_parse_url()
-* Fixed: File upload now uses WordPress HTTP API instead of cURL/fopen
-* Fixed: Added phpcs:ignore for remaining display-only $_GET usage
-* Performance: Increased timeout to 300s for large file uploads
-* Compliance: 100% WordPress.org Plugin Check compliant (no ERRORs)
+* Replaced cURL with wp_remote_request() for WordPress compliance
+* All PHPCS warnings resolved
 
 = 1.2.2 =
-* Fixed: All date() replaced with gmdate() for timezone safety
-* Fixed: All wp_redirect() replaced with wp_safe_redirect()
-* Fixed: Added wp_unslash() before sanitize_text_field() everywhere
-* Fixed: Added phpcs:ignore comments for legitimate nonce-free $_GET usage
-* Compliance: Fully WordPress.org Plugin Check compliant
+* All date() replaced with gmdate()
+* All wp_redirect() replaced with wp_safe_redirect()
+* Proper wp_unslash() + sanitize everywhere
 
 = 1.2.1 =
-* Initial public release
-* **Core Features:**
-  - Automatic backup uploads to Nextcloud via WebDAV
-  - Multiple backup source support (UpdraftPlus, BackWPup, etc.)
-  - Schedule options: Daily, Weekly, Monthly with custom times
-  - Automatic rotation/retention: Keep last N backups
-  - Email notifications for successful/failed transfers
-  - Real-time upload progress tracking
-  - Comprehensive logging system
-* **Security & Compliance:**
-  - WordPress.org coding standards compliant
-  - Proper nonce verification and data sanitization
-  - Secure credential storage
-  - ABSPATH protection on all files
-* **User Experience:**
-  - German and English interface
-  - Detailed HowTo guides with screenshots
-  - Conflict resolution for backup files
-  - Easy WebDAV configuration and testing
+* Initial public release with full feature set
 
 = 1.2.0 =
-* Beta release for testing
-* Changed: Tab "Nextcloud" renamed to "Setup"
-* Added: Email Reporting feature with success/error notifications
-* Changed: "Rotation" heading renamed to "Anzahl Backups" (DE) / "Backup Retention" (EN)
-* Fixed: Cron scheduling now properly reschedules after each run (important for weekly/monthly)
-* Fixed: Rotation now logs detailed information for troubleshooting
-* Updated: Support email changed to [email protected]
-
-= 1.2.8 =
-* Added: Schedule frequency options (Daily, Weekly, Monthly)
-* Fixed: Upload modal now shows "You can close the window now" when complete
-* Added: Complete German and English HowTo documentation
-* Fixed: JavaScript code compliance for WordPress.org (wp_add_inline_script)
-* Improved: Schedule Cron calculations for weekly and monthly backups
-
-= 1.2.7 =
-* Fixed: Checkbox values (Sources/Schedule/Rotation) are now parsed robustly, so only selected options are stored (no accidental “all enabled”).
-
-= 1.2.6 =
-* Fixed: “Settings saved” modal is now styled like the Content Scheduler modal (OK button, backdrop click, ESC to close).
-* Fixed: Tab selection is now persisted correctly (active_tab), preventing unintended resets when saving.
-* Fixed: Backup sources, schedule and rotation checkboxes are now reliably saved (unchecked stays off).
-* Changed: Backup source fields are no longer greyed out when a source is inactive (only “Aktiviert” controls whether it is used).
-
-= 1.2.4 =
-* Fixed: Backup sources are now disabled by default on first install.
-* Fixed: Source enable/disable state is now reliably persisted after saving.
-* Added: Hint in the Nextcloud tab if no backup source has been selected yet.
-* Improved: Clarified what “Scan real files only” does.
-* Improved: Settings saved feedback now uses a centered modal (consistent with other Luzid plugins).
-* Improved: Form field styling (select/input) adjusted to avoid clipped text.
-
-= 1.2.2 =
-* Changed: Admin UI branding aligned with other Luzid WP Tools plugins (header, tabs, styling).
-* Changed: Language switcher uses SVG assets from `assets/img/` (no inline data-URI).
-* Changed: Unified admin CSS to shared `assets/css/luzid.css`.
-* Added: WordPress-standard `readme.txt`.
-
-= 1.2.1 =
-* Previous release.
+* Beta release
 
 == Upgrade Notice ==
 
-= 1.2.6 =
-No breaking changes. UI improvements + bugfixes for source selection.
+= 1.3.0 =
+Streaming uploads for large files, improved UI with context-aware buttons, password field improvements. Recommended update for all users.
 
-= 1.2.2 =
-No breaking changes. UI/branding update only.
+= 1.2.9 =
+WordPress.org review compliance. Required for plugin directory submission.