13 versions
Modal Survey – Wordpress Poll Survey & Quiz Plugin history.
Every release of Modal Survey – Wordpress Poll Survey & Quiz Plugin is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.
11 of 13 releases scanned clean
June 1, 20266.2 MBScanned
Other
- Security & Bug Fixes:
- Critical: Fixed logic bug where assignment operator was used instead of equality check for survey style detection, causing all surveys to incorrectly use the 'click' branch.
- Critical: Fixed path traversal vulnerability in campaign module loader; allowed module names are now strictly whitelisted.
- Critical: Sanitized cookie-sourced survey_viewed arrays with absint() before use in SQL IN clauses to prevent injection via crafted cookie values.
- Security: All plugin cookies (ms-uid, ms-session, modal_survey) now set secure=is_ssl() and httponly=true, including legacy fallback setcookie() calls.
- Security: Replaced insecure mt_rand()-based session ID generation with cryptographically secure bin2hex(random_bytes(16)).
- Security: Escaped featured image URL with esc_url() in Open Graph meta output.
- Security: Fixed unsanitized direct $_COOKIE['ms-uid'] access in ajax_survey_back; now uses sanitize_text_field/wp_unslash with isset guard.
- Security: Reduced export directory permissions from 0777 to 0755.
Fixed
- Fixed incorrect number_format call in survey_answers average-score path; third argument was the decimal count instead of the decimal separator, producing garbled output.
- Fixed undefined variable warnings in survey_open_answers, survey_records, and survey_compare_chart shortcode handlers when results are absent or labels/sessions are not set.
v2.0.2.2.0Unavailable
May 25, 20266.2 MBScanned
Other
- Completion Flow & PDF Export Improvements:
- Implemented new `finalize` AJAX endpoint in settings.php to trigger mail and PDF exports after charts have been fully rendered on the client.
- Enhanced front-end chart initialization with MutationObserver fallback to handle late-injected markup and delayed script loading gracefully.
- Result charts in generated PDFs now display the exact chart rendered to the user, eliminating missing or placeholder images.
- Documentation & Compatibility:
- Split completion request into two lightweight phases, improving reliability on servers with stricter timeout limits.
- Chart images are now properly embedded in PDF exports by capturing rendered Chart.js canvases on the client side.
- Bootstrap logic for answer charts is now resilient to DOM delays and late script injection, common in page builders and AJAX-heavy themes.
Improved
- survey completion flow to separate lightweight answer saving from mail/PDF finalization, reducing timeout risk for large exports.
- modal_survey.js to track pending completion mail state and conditionally defer mail sending until after chart rendering completes.
- modal_survey_answer.js with `window.ModalSurveyCaptureChartData()` helper to extract chart canvases as base64 payloads for PDF embedding.
Added
- client-side canvas snapshot capture: survey result charts are now captured as base64 PNG data before mail/PDF generation begins.
v2.0.2.1.7Unavailable
April 18, 20266.2 MBScanned
Added
- a retry-based bootstrap loop (polling with timeout) instead of immediate execution.
- jQuery exists, plugin method exists (pmsresults or modalsurvey),
- graceful timeout with console warning instead of throwing hard errors.
- fallback mounting to body if .entry-content is missing (answer init).
Other
- localized params exist (ms_answer_init_params or ms_init_params),
- for answer init, waits for Chart only when chart styles are present,
- Kept DOMContentLoaded-safe startup for both scripts.
v2.0.2.1.6Unavailable
April 1, 20266.3 MBScanned
Added
- Introduced a utility to safely read server variables using wp_unslash for improved data handling.
Other
- Security Refactor: Replaced raw REQUEST_URI usage with the new helper method during constructor URL assembly to ensure consistent sanitization.
v2.0.2.1.5Unavailable
March 29, 20266.3 MBScanned
Improved
- Introduced helper methods to standardize $_REQUEST access.
Other
- Code Cleanup & Modernization: Replaced raw $_REQUEST reads with helper methods
- Security & Consistency: Implemented consistent wp_unslash() and string sanitization across touched paths.
- Logic Simplification: Streamlined sspcmd=displaychart conditionals for improved readability without altering functional behavior.
v2.0.2.1.1Unavailable
February 19, 20266.2 MBScanned
Improved
- participant cleanup
Other
- Hardened social meta handling
- Sanitaze inputs, post and other variables
- Replaced long OR chain with strict in_array(..., true) screen check.
- Replaced legacy var properties with protected typed properties.
- Standardized several loose comparisons (==) to strict (===) for options checks.
- Hardened server vars
Fixed
- dynamic-property issues on modern PHP.
- code standard issues
Why archive
Sometimes the latest release isn't the one you need. The archive lets you pin Modal Survey – Wordpress Poll Survey & Quiz Plugin to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.