Heads up: Update Bit Form to 3.4.0 first. This release needs the free plugin at 3.4.0; on an older one Pro shows an update notice and waits.; PHP 8.0 is now the minimum.; For developers, admin AJAX replies changed shape. Custom code that calls Bit Form Pro's admin AJAX actions now receives { status, code, data } instead of { success, data }. Payment, file upload, email OTP and REST API (payment webhook) replies are unchanged, and so are hook and filter names and arguments.; For developers…
Rebuilt Plugin Core: Bit Form Pro's server side now runs on the Bit Apps plugin framework, matching Bit Form 3.4.0. Existing payments, PDF templates, integrations and settings carry over as they are, there is no database change.
Stricter Request Handling: Every Bit Form Pro AJAX action now answers only to its exact name, and the theme gallery's admin actions now also check a security token.
Correção
Payment Forms: No more PHP 8.1 deprecation notice in the error log when a payment is recorded.
Email OTP Delivery Hooks: Developers can send the code another way (for example SMS or WhatsApp) with the bitform_email_otp_send filter, or forward it after the email goes out with the bitform_email_otp_sent action.
Melhoria
Heads up: Update Bit Form to 3.3.2 first. This release needs the free plugin at 3.3.2; on an older one Pro shows an update notice.; Password Values Are No Longer Stored: Entries created or edited through the REST API now save Password fields as " (encrypted)". Leaving a password blank or masked when editing an entry keeps the stored one, and the edit log only records that it changed. WooCommerce gives new customers a random password they can reset.
Shortcode Content Filter: Developers can use the correctly spelled bitform_filter_shortcode_content. The old bitform_filter_sortcode_content still works but is deprecated.
Correção
Payment Fields: Stripe, Razorpay and Mollie no longer take a second payment for an entry that is already paid, for example when the form failed to submit after payment and the customer tried again. Needs Bit Form 3.3.2.
Double Opt-In with Bit CRM: Leads created after a visitor confirms their email keep their custom field values.
Submission Limits: The Submission Period date range applies only when Custom Date is selected, per minute, hour and day limits count in your site's timezone, and the per-user IP limit works for IPv6 visitors.
Save Draft: Logged-in visitors get their own draft back instead of entry #1's answers, guest drafts keep every later change, and a submitted or deleted draft starts a new one.
REST API Entries: Deleting an entry removes its uploaded files too, and hCaptcha and Turnstile tokens are no longer saved as entry fields.
Field Settings: A Repeater Maximum Row of 0 means no limit instead of one row, Advanced File Upload Readonly and Disabled apply on the form, and the Signature pen width matches the builder.
User Registration and Password Reset: Registration stops with a clear error when WordPress can't create the user, the reset link works when the page URL has parameters (such as ?lang=fr), and activation or approval shows the result message when no redirect page is set.
Segurança
Blocked IP Message: The visitor's IP address in the blocked-IP message is now escaped.
Forgot Password: The form gives the same answer whether or not an account exists, so it can no longer reveal which usernames and emails are registered. No email is sent for unknown accounts.
Admin Approval Emails: The Approve and Reject links now open a confirmation page, and nothing happens until you click its button. Email security scanners that open every link could otherwise approve or reject an account before you read the email.
Mollie Return Page: Each customer now sees their own payment after returning from Mollie. With several customers paying at once, one could see another's payment.
Posts Narrowed by Taxonomy and Term: A field filled from your posts now syncs only the posts in the taxonomy and term chosen in the builder, instead of the whole post type. A term that can no longer be read returns nothing rather than every post. Fields with no filter behave exactly as before. Developers can narrow the list further with the new bitform_dynamic_post_options filter.
Melhoria
Heads up: Update Bit Form to 3.3.1 first. This release needs the free plugin at 3.3.1; on an older one Pro shows an update notice and waits.
Correção
Payment Forms: A verified transaction no longer goes missing from the entry's emails and integrations on sites with a persistent object cache (Redis, Memcached, W3 Total Cache, SG Optimizer). Writing the transaction back could also empty the pending submission, which then failed with an expired-token error, or stop the request entirely on PHP 8.
Hardened Hosts: Bit Form Pro no longer breaks with a fatal "Call to undefined function ignore_user_abort" on hosts such as RunCloud, where that PHP function is disabled. Admin screens, payments and form abandonment are all affected on PHP 8.
Smart Tags in Downloaded PDF Names: The PDF file name setting now resolves smart tags when a PDF is downloaded, matching how PDFs attached to emails already behaved.
PDF Developer Filters: Added bitform_filter_pdf_filename and bitform_filter_pdf_body for adjusting a generated PDF's name and contents. Both apply to downloaded PDFs and to PDFs attached to email notifications.
Melhoria
Heads up: WordPress 6.5 is now the minimum. Translations now ship as compiled catalogs, which older WordPress versions cannot read. On WordPress 6.4 the plugin still runs, but every string stays in English.
Bit Form Pro is now translated at runtime, and every user-facing string is translatable. The 33 bundled languages now apply. Because Pro ships outside WordPress.org it receives no language packs, so this is the only way its translations load. Developers can switch it off with the bitform_filter_allow_translation filter, the same one that controls Bit Form's own catalogs.
Data Views: A front-end data view now loads its settings together with the script that reads them, so caching and optimisation plugins can no longer separate the two and leave the table empty.
Correção
PDF File Names: Fixed PDF generation failing when the file name contained a date field or any other value with a slash in it.
Admin Actions: Fixed Clone Integration and Auth Settings running twice on every request, and fixed a request with an expired security token returning an empty response instead of a clear error.
File Uploads: Fixed upload error messages being shown incorrectly.
Segurança
WooCommerce Product Images: A product image imported from a submitted URL can no longer be fetched from an internal network address or a local file. Images hosted on your own site still work.
API Key: The Bit Form API key is now generated from a cryptographically secure random source, and changing it requires a Bit Form management capability.
License Screen: The license screen now makes a single request to the license server per page load instead of two.
Correção
License Activation: Fixed the Recheck and Disconnect buttons re-running license activation, which could re-add a site to your subscription after it had been removed.
Versão 3.2.1
2 melhorias2 correções4 reforços de segurança
Melhoria
License Screen: Redesigned the license status screen and added one-click plugin updating.
Update Notices: Made Pro update detection and its admin notices more reliable.
Correção
Email OTP: Fixed OTP verification not being tied to the address the code was sent to.
Free/Pro Version Mismatch: Fixed fatal errors that could occur when Bit Form and Bit Form Pro were on different versions, and removed a cron job that ran on every request.
Segurança
Payment Endpoints: Payment confirmation requests are now checked against the form, entry, and payment field they claim to belong to, and Razorpay transactions are verified with Razorpay before being recorded. Previously a crafted request could attach payment records or field values to any entry.
File Uploads: Temporary upload file names are now unguessable and deletion requests are confined to the temporary folder, so one visitor can no longer remove another visitor's pending upload. Also fixed an error triggered by an upload request naming a field that does not exist.
REST API: The Bit Form API key is now compared in constant time and the API returns a proper authorization error instead of ending the request early.
PDF Fonts: Font download requests are now restricted to the bundled font list.
Advanced Conditional Logic: Added Advanced Conditional Logic process handler code.
Individual Conditional Logic: Added conditional logic process handler for individual features (Success Message, Redirect URL, Email Notification, and Integrations).
Conditional Email Routing: Added support for conditional routing in the "Send To Email" setting of Email Notifications.
PDF Header & Footer: Added support for configuring PDF headers and footers in the PDF Template settings.
Multiple PDF Attachments: Added support for attaching multiple PDF templates to email notifications.
