Zloj S3

Changelog

1.4.7

• Move the SDK trim script out of the plugin package into the separate builder repo.
• Drop vendor development files from the distribution, including format-check.py.

1.4.6

• Let WordPress.org load translations; do not ship locale files or call load_plugin_textdomain.
• Register settings with an explicit sanitize callback and check AJAX nonces via check_ajax_referer.
• Block direct HTTP access to the SDK trim script.

1.4.5

• Rewrite srcset, intermediate sizes, and MetaSlider crop URLs, not only wp_get_attachment_url.
• Upload MetaSlider custom crops that skip image_make_intermediate_size.

1.4.4

• Do not resume a bulk upload just because the settings page was opened.
• Clear a stale running flag when no sync lock is held.
• Do not stop a bulk upload when a step lock is still held; send the next request.
• Overwrite a sync lock older than twice the PHP max execution time.

1.4.3

• Lock public path-style with ZLOJ_S3_PUBLIC_PATH_STYLE, not ZLOJ_S3_PATH_STYLE.

1.4.2

• Retry failed sync batches with an idempotent request id and a single in-flight handler.
• Keep separate progress per mode and ask whether to continue or start over.
• Drop the 40-file batch cap; each request now uses most of the PHP time limit.
• Show a file progress bar counted once at job start when attachments change.
• Let the settings form, compatibility spoiler, and sync blocks use the full width.

1.4.1

• Do not treat a custom API endpoint as a bucket hostname.
• Drop empty request headers before signing.
• Show a fuller S3 error (headers, ArgumentName, which compatibility option to use).

1.4.0

• Load plugin classes via PSR-4 from src/ instead of WordPress-style includes/class-*.php files.
• Add a signing region setting and ZLOJ_S3_REGION (default us-east-1).
• Add optional compatibility workarounds behind a collapsed settings panel.
• Split API path-style into its own setting (ZLOJ_S3_API_PATH_STYLE, default on).
• Do not prepend the bucket as a subdomain when path-style is off; use the host field as entered.

1.3.3

• Rewrite attachment URLs when offload is enabled, without requiring the SDK.
• Build public URLs as host/key. Honor legacy ZLOJ_S3_HTTPS_URL.

1.3.2

• Optional object trash: checkbox and ZLOJ_S3_TRASH (default on). Off deletes objects immediately.

1.3.1

• Register media offload hooks even when idle.
• Primary attachment objects can be intercepted via zloj_s3_discard_object before delete.

1.3.0

• Split HTTPS into ZLOJ_S3_API_HTTPS and ZLOJ_S3_PUBLIC_HTTPS (default on). ZLOJ_S3_HTTPS_URL is ignored.
• Put the HTTPS toggles under the API and public host fields.
• Include the bucket in public URLs when path-style is enabled.

1.2.1

• Fix Find conflicts doing nothing when a cached script expected a separate Stop button.
• Turn the active job button into Stop; the current batch finishes, the next one does not start.

1.2.0

• Hide storage keys in the admin and encrypt them at rest.
• Document the configured S3 endpoint as an external service.
• Always verify TLS; tighten AJAX sanitization; keep Plugin Check notices on the settings screen.
• Add a find-conflicts scan that compares local files with storage without uploading.

1.1.0

• Add AJAX bulk upload of local uploads, with optional cleanup of identical local copies and a conflict resolver.

1.0.0

• Initial release.