Code: Select all
== Changelog ==
= 3.1.8 =
* Release Date - 28 Sep, 2026*
* Fixed: Removed (the infamous) inline styles injected by JavaScript on pubKeyState and privKeyState elements when keys are loaded. The script now dynamically applies classes (.pubKeyStateLoaded, .privKeyStateLoaded, .pubKeyStateNOTLoaded, .privKeyStateNOTLoaded), which have been added to the w3mypq.css file.
* Fixed: The default theme UI is currently under construction. Default colors have been subtly adjusted to better fit the native WordPress style. This is just an ongoing minor improvement.
* Add: Ghost Rider, an experimental w3myPQ Server Shield Panel. Detailed documentation and explanations are available on the new dedicated sub-page. Please note that this feature operates completely independently and is not linked to the w3myPQ core scope. Be sure to READ all hints on that page BEFORE enabling this option.
* Note: Report bugs, try to break the code, and suggest improvements! Dive in if you want to collaborate—w3myPQ will also be on GitHub soon.
* Coming Soon: All inline CSS currently injected by JavaScript (ex in the Cincia Keys screen) will be refactored to use dedicated CSS classes. The Drawer icon (located at the bottom right of the Decrypt screen) will be completely rewritten. The CSS will be cleaned up.
THE GHOST RIDER SHIELD IS ACTIVE: w3myPQ v3.1.8 is officially LIVE!
Shipped to sites in about 6 hours but already available at wp.org.
Hold onto your keyboards! Just minutes ago, we pushed version 3.1.8
to the global repository, introducing the ultimate edge protection layer:
The "Ghost Rider" Global Firewall Shield.
Why did we need this? Traditional plugin defenses only run inside the admin
dashboard. But modern cyber threats don't ask for permission, and they don't
log into your admin panel. They strike unauthenticated public read-state paths
on your front page before your standard security code even opens its eyes.
How the Ghost Rider Shield redefines absolute data sovereignty:
True Global Interception: Hooked directly into the earliest 'plugins_loaded'
execution bottleneck, the shield acts as a silent border guard, inspecting
100% of global site traffic across both the frontend public pages and the backend.
Instant Traversal Blocks: Just days ago, a massive Core WordPress threat
was patched (CVE-2026-87902) involving unauthenticated template path traversals.
The Ghost Rider engine is hardcoded to recognize these malicious request trajectories
instantly, dropping a flat Cryptographic Abort 403 wall on any attacker trying to cross
your directory boundaries.
Isolated Client Symbiosis: Combined with the local BennyPQ standalone client
loaded safely from your hard drive, your entire cryptographic trust boundary remains
perfectly sealed. Untrusted hosting providers or malicious admins cannot inject code,
cannot spoof keys, and cannot crack your files.