# Changelog

## 1.0.4 - 2025-10-28
- wordpress.org changes recommended.
- plugin prefix gets Updated

## 1.0.3 - 2025-09-30
- Fixed security issues with nonces and sanitization
- Added proper permission checks (`current_user_can`)

## 1.0.2 - 2025-09-18
- Fixed security issues with nonces and sanitization
- Added proper permission checks (`current_user_can`)
- Replaced inline CSS/JS with proper `wp_enqueue_*` methods
- Updated version numbers for release

## 1.0.1 - Automated compliance pass
- Fixed `readme.txt` Contributors line to use WordPress.org username `changlee`.
- Moved inline `<style>` and `<script>` from PHP into `assets/css/codco-style.css` and `assets/js/codco-script.js`.
- Added proper asset loading via `wp_enqueue_scripts` with `wp_register_style/script`, and `wp_localize_script` for `ajaxurl` + `nonce`.
- Prefixed actions and methods (`codco_*`) and renamed class to `CODCO_Control` to avoid collisions.
- Added nonce checks with `check_ajax_referer( 'codco_email_nonce', 'security' )` in AJAX handler.
- Hardened `wp_verify_nonce()` inputs with `sanitize_text_field( wp_unslash( ... ) )`.
- Escaped output late using `esc_url`, `esc_js` for dynamic values.
- Added placeholder `ajax-loader.gif` if missing.