Changeset 3737024

Timestamp:

10/09/2026 03:50:41 PM (2 weeks ago)

Author:

axewww

Message:

FIx wrong commit

Location:

w3mypq/tags/3.2.6

Files:

• js/w3mypq.js (modified) (2 diffs)
• readme.txt (modified) (2 diffs)
• wp-w3mypq.php (modified) (4 diffs)

w3mypq/tags/3.2.6/js/w3mypq.js

@@ -859 +859 @@
       let sendMails = await recipientsSendEmails(uidsAry, sendToServer.download_link);
 
+      if (sendMails && sendMails.message) {
+       alert(sendMails.message);
+      } else {
+        alert("Operation processed: Notification routine completed.");
+      }
+
+
       dl.style.display = "block";
       dl.href = u;
@@ -948 +955 @@
         formData.append('total_chunks', totalChunks);
         formData.append('w3_encrypted_payload', blobSlice, 'data.w3mypq');
+        formData.append('totPayload_size', encryptedContent.size);
 
         if (progressTextEl) {

w3mypq/tags/3.2.6/readme.txt

@@ -5 +5 @@
 Requires at least: 6.2
 Tested up to: 7.1
-Stable tag: 3.2.5
+Stable tag: 3.2.6
 Requires PHP: 7.4
 License: GPLv2 or later
@@ -149 +149 @@
 
 = 3.2.6 =
-* Release Date: 08 Oct 2026
-Fix: Set drawer element .w3mypq-trigger as - display:none; - by default into w3mypq.css.
-
+* Release Date: 09 Oct 2026
+Fix: Update `wp-w3mypq.php` (and `w3mypq.js` ) to check that the full payload does not exceed the remaining daily quota, so as to prevent exhausting it unnecessarily, within the w3myPQ flow (previously only applied to BPQ endpoint).
+Note: If the `w3mypq.js` file is not updated due to browser caching, the `wp-w3mypq.php` code will fall back to its previous behavior, exhausting the user's quota in the event of a large and then failed payload.
+Security: Fix `function w3mypq_handle_incoming_rest_payload` on `wp-w3mypq.php`, avoid to send an empty metadata field to trigger a true match against an empty or expired database transient token.
+UI-Fix: Added server-response alert message handling to the Php send_emails callback inside `w3mypq.js`.
+Default theme: Set drawer element `.w3mypq-trigger` as - display:none; - by default into `w3mypq.css`.
 
 = 3.2.5 =

w3mypq/tags/3.2.6/wp-w3mypq.php

@@ -4 +4 @@
  * Plugin URI: http://www.axew3.com/w3
  * Description: Post-quantum encryption, decryption, ML-KEM, AES-GCM, ML-DSA, file sharing, keys vault, and WordPress shield.
- * Version: 3.2.5
+ * Version: 3.2.6
  * Author: axewww
  * Author URI: http://www.axew3.com
@@ -640 +640 @@
         $stored_token = get_transient($w3_session_key);
 
-        if (empty($stored_token) || $stored_token !== $provided_token) {
+        if ( empty($stored_token) || empty($provided_token) || $stored_token !== $provided_token ) {
             return new WP_REST_Response(array(
                 'status'  => 'error',
@@ -1132 +1132 @@
     $permalink = isset( $params['w3_mypqPermalink'] ) ? esc_url_raw( $params['w3_mypqPermalink'] ) : home_url();
     $uid       = absint( get_current_user_id() );
-    $totPayload_size = intval( $params['totPayload_size'] );
+    // Set to 0 by default, so if it not exist it will exhaust the user's daily quota, behaving exactly as it did before.
+    $totPayload_size = !empty( $params['totPayload_size'] ) ? intval( $params['totPayload_size'] ) : 0;
 
     // Extract Chunk Metadata Parameters Safely
@@ -1173 +1174 @@
                 $is_quota_exceeded = ( $current_usage_bytes_logged + $current_chunk_size ) > $quota_max_allowed_bytes;
             }
-            
+
+            // Check that the full payload does not exceed the remaining quota so as to prevent exhausting it with a failed upload.
+
+            $current_usage_bytes_logged = round($current_usage_bytes_logged / 1048576, 2);
+            $totPayload_size = round($totPayload_size / 1048576, 2);
+
             $remaining_quota = $daily_quota_setting_mb - $current_usage_bytes_logged;
-            
-            file_put_contents('D:\Edit1', "$daily_quota_setting_mb - $current_usage_bytes_logged - $totPayload_size");
-            
+
             if ( $totPayload_size > $remaining_quota )
             {