Release v7.6.73
WPDiscuz v7.6.73
What's new in v7.6.73
WPDiscuz v7.6.73 was released on . AJAX realtime comment system with custom comment form and fields. See the full changelog below and compare with the complete version history.
Release details
Released
6.8 MB
File available
Changelog
Fixed
- The Facebook login button signed a visitor in through a client-side flow that trusted a Facebook user ID sent with the request, which was not tied to the access token it arrived with. Because an account's Facebook ID doubles as its user name and the account's email address was derived from that ID when Facebook returned none, this could sign a request in as another visitor's account. Facebook login now always uses the server-side OAuth2 flow, which reads the account from the token's own owner, and social accounts are matched by their verified provider user ID rather than by an email address built from it. The legacy flow and the "Use Facebook OAuth2" setting have been removed. Sites that used the legacy flow must add their site's OAuth redirect URI, wp-admin/admin-ajax.php?action=wpd_login_callback&provider=facebook, to the Valid OAuth Redirect URIs of their Facebook app for the button to keep working.
Improved
- On the settings page, the preview of an addon that isn't installed described its rating structured data and one shortcode attribute as they used to work. It now matches the current addon.
Other
- [See the changelog for all versions](https://plugins.svn.wordpress.org/wpdiscuz/trunk/changelog.txt)
Compatibility
- Requires WordPress
- 6.0
- Tested up to
- 7.1
- Requires PHP
- 7.4