User Role Editor Pro version 3.14.1

After thorough testing of the free version available via WordPress.org User Role Editor Pro version 3.14.1 is available for download. If you registered member of with active subscription plan you are welcome to download the latest version of User Role Editor Pro.

What’s new in the 3.14 version, including the bug fix 3.14.1?

  • Interface update: role/capability add/remove stuff was removed from the page. Plugin has toolbar at the right side now. Click on the button opens needed dialog window.
  • New role may have different attributes “ID” and “Name”. While ID is still restricted by latin characters hyphen, underscore and digits only, Name could contain spaces and national languages characters.
  • General code cleanup and security enhancements: all data changes request are processed via POST instead of GET now. So its more difficult to send modified malicious request without special software. Presence of special nonce field is checked for all requests.
  • Setting up the ‘administrator’ role as default one for new registered users is prohibited at server side.
  • JavaScript code separated from PHP one whenever it’s possible.
  • User capabilities page: roles checkboxes are excluded from ‘Select All’, ‘Unselect All’, ‘Inverse’ operations. Only capabilities checkboxes are processed.

For this moment Pro version differs from the free one by just one item – it is absolutely free from the advertisement. Even ‘Donate’ link is removed. Functionality of Pro version will be extended in the nearest future.
What is going on? I work intensively on the old code refactoring. The main purpose is general code optimization and improvement. I wish to fully exclude usage of global variable except of WordPress global object as wpdb, etc. As I finish this stage I will start publishing new functionality modules, plan for which is declared on the Home page.

User Role Editor multisite issue fixed – version 3.12.1

User Role Editor multisite issue fixed with version 3.12.1 published at May 14th, 2013. While I continue work on version 3.14 and the good news that it is near to release, I had to release update for the current, 3.12, version. According to user obfuscated report at WordPress.org support forum (read this thread) that the feature “Apply to All Sites” stopped working after update to version 3.12. After quick check I confirmed the problem and published bug fix release 3.12.1 the same morning.
If you use User Role Editor under WordPress multisite environment and still sit on the version 3.12 or earlier, I have a strong recommendation for you – update to the latest version 3.12.1
Download link is here.
Additional change – starting from version 3.12.1 “Apply to All Sites” checkbox is available from the main site of the network only.

User Role Editor version 3.14 Beta – bbPress, S2Member compatibility fix

I’ve got a problem fix request for User Role Editor version 3.12 from topsitemakers user 2 days ago. He lost S2Members created capabilities after any role update with User Role Editor. More details are available here.
I found the reason and fixed the problem the same day. Updated code is available as version 3.14 Beta. You may download it from this link.
If you have bbPress and S2Member plugins installed together, if you use User Role Editor to manage WordPress roles, you may meet the same problem. So I recommend you to switch on version 3.14 Beta of User Role Editor until I commit it to WordPress repository.

Security Update: free version 3.12 is available

Free version 3.12 is available for download. It is security and vulnerability fix release generally:

  • Critical update: persistent cross-site scripting vulnerability is fixed.
  • WordPress built-in constants, like WP_PLUGIN_URL are not used in order to provide compatibility with sites which use SSL. plugin_dir_url(), plugin_dir_path() functions are used to define paths to the plugin’s files instead.
  • “Greetings” section is removed from the plugin’s main page. All that content is still available at (plugin page)[http://shinephp.com/user-role-editor-wordpress-plugin].

Hello World!

Yes, Hello Word! This is the 1st my post here, at role-editor.com, thus, as any 1st example on a new programming language, traditionally, 1st greetings at new blog from a programmer to public would be the same – Hello World!
This site is dedicated to User Role Editor WordPress plugin and this plugin users support.

Regards,
Vladimir Garagulya.