Includes the following changes 0.7.2...79c3641
- Make
wp_login_failed
action call compatible with the WP core argument count and types. Reported in #471 by @dziudek and fixed in #478 by @dd32. - Use
hash_equals()
for nonce comparison to improve security. Reported in #458 and fixed in #458 by @calvinalkan. - Improve compatibility with PHP 8.1 by replacing all instances of
FILTER_SANITIZE_STRING
usage. Reported and fixed in #428 by @sjinks. - Add automated checks for PHP 8 compatibility in #465 and #466 by @kasparsd.
- Improve accessibility of two-factor settings in the user profile by introducing a label that links the method names with the associated checkboxes. Reported and fixed in #387 by @r-a-y.
- Improve TOTP autocomplete behaviour by setting the
autocomplete
attribute toone-time-code
. Reported and fixed in #420 by @squaredpx.