Skip to content

v3.4.3: fix Requires PHP mismatch, disclose third-party services, drop non-commercial geo API - #7

Merged
miyanialkesh7 merged 1 commit into
nikvalani96:mainfrom
miyanialkesh7:fix/composer-lock-php-compat
Aug 21, 2026
Merged

v3.4.3: fix Requires PHP mismatch, disclose third-party services, drop non-commercial geo API#7
miyanialkesh7 merged 1 commit into
nikvalani96:mainfrom
miyanialkesh7:fix/composer-lock-php-compat

Conversation

@miyanialkesh7

Copy link
Copy Markdown
Collaborator

Summary

  • Fixes a real regression: readme.txt said Requires PHP: 7.3 (left over from an unresolved merge-conflict marker that got committed, then "fixed" to the wrong side in a follow-up commit) while composer.json requires >=8.0. Both now say 8.0.
  • Adds Requires at least: 6.3 / Requires PHP: 8.0 to the plugin's own header (online-active-users.php), not just readme.txt, so WP core's own compatibility gate sees them.
  • Drops calls to ip-api.com: its free tier explicitly prohibits commercial use, which conflicts with this plugin's advertised WooCommerce support, and the calls were also made over plain HTTP. Country, country code, and timezone are now all resolved from a single cached HTTPS call to ipwho.is (already used for country) — fewer external requests, one commercially-permitted HTTPS provider instead of two mixed providers.
  • Adds a == Third-Party Services == section to readme.txt disclosing ipwho.is, ipify, and flagcdn.com, per WordPress.org policy.
  • Bumps Tested up to: 7.1.
  • Version bumped to 3.4.3 everywhere (plugin header, WPOAU_VERSION, phpstan-bootstrap.php, Stable tag), with changelog/upgrade-notice entries.

Verification

  • phpcs --standard=phpcs.xml.dist (WordPress-Extra + WordPress-Docs + PHPCompatibilityWP): 0 errors
  • composer compat (PHPCompatibilityWP, testVersion 8.0-): 0 errors
  • phpstan analyse: 0 errors
  • phpunit (incl. VersionConsistencyTest, which checks Version: == Stable tag: and text domain match): passing

Test plan

  • Confirm CI (PHPCS/PHPStan/PHPCompatibility/PHPUnit/CodeQL) is green on this PR
  • Manually verify the "Online Active Users" admin list table still shows country/timezone/flag correctly after the geolocation provider consolidation

…es, drop non-commercial geo API

- Fix Requires PHP: readme.txt said 7.3 (left over from a botched merge
  conflict resolution) while composer.json says >=8.0; both now say 8.0.
- Add Requires at least / Requires PHP to the plugin's own header, not
  just readme.txt, so WP core's compatibility checks see them directly.
- Consolidate IP geolocation onto a single cached HTTPS call to ipwho.is
  (country, country code, timezone). Removes calls to ip-api.com, whose
  free tier prohibits commercial use -- a conflict with this plugin's
  advertised WooCommerce support -- and which was requested over plain
  HTTP.
- Add a Third-Party Services section to readme.txt disclosing ipwho.is,
  ipify, and flagcdn.com.
- Bump Tested up to 7.1.
@miyanialkesh7
miyanialkesh7 merged commit 4b7d811 into nikvalani96:main Aug 21, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant