DigitalM Inside SEO Agency

Changelog

1.35.121

• Own AI account: one failed request (time-out, a refused prompt) no longer marks the account as unavailable for 10 minutes. Only “no model found” does. The last error is kept so it can be shown.

1.35.120

• Near-duplicates: the finding is called “Series of near-duplicate products” and counts series. The make-unique list shows products and series.

1.35.119

• Own AI account: requests can carry images (image analysis) and ask for web search (fact checks), through the AI connection in WordPress (Settings → Connectors).

1.35.118

• Ads: a budget or export saved at the agency is no longer lost. If the client does not answer, the record waits and is sent again with the next check of the link; the next pull does not overwrite it. The uploaded export file stays linked. The screen says when the client did not answer.

1.35.117

• System info: how much data comes from Google per day at each client, and on how many days the limit was reached (needs DigitalM Inside SEO 0.294.91 at the client).

1.35.116

• Agency link: every write, queue and command request to the client is signed with the agency key. One-time number and 5-minute window – a copied request does not work twice.
• Make unique: the list shows analyses and proposals kept at the agency. New filter by state.
• Background work keeps its client: GEO steps, Asset Lab steps, the night queue and speed measurements run for the client they were started for, not for the last chosen one.

1.35.115

• Client queue: the counts on the screen refresh right after work is done. Before they could stay old for up to 15 minutes.

1.35.114

• Client queue: “Run” now works in the background, like at the client. It also runs series analysis (it showed 0 of 0 before) and writes each product with its series.
• Client queue: client and agency are in sync. When the client presses “Run”, the agency takes the tasks at its next check (about 30 minutes). The night run follows the client’s checkbox – one checkbox, at the client.
• Client queue: when the AI provider is out of credits or the limit is reached, the run stops and the tasks go back to waiting. The last run and its reason are shown above the queue.
• Series analysis from the agency screen is reported to the client, so the rewrite can be added to the queue.

1.35.113

• Make unique list: the column now shows how many products the series has (with the product itself), not how many others are similar.

1.35.112

• Actions on the client site: when the client refuses an action, the agency screen now shows the client’s own reason (for example that the text was changed after the check) instead of a bare “refused”.

1.35.111

• Change log: paging with First, Back, a page number box, Next and Last. Paging and filters now keep working past the first page.
• Change log: new filter “Effect in Google” – improved, worse, no difference, waiting (under 30 days), no Google data.
• Change log: shows its size. Rows older than 24 months are removed for each client during the daily pull.

1.35.110

• Each user of the agency site now keeps their own selected client. Two people no longer switch the client for each other. Background work still uses the last selected client.
• Uninstall also removes the agency signing keys, the agency notes on posts, the ads folder and each user’s selected client.

1.35.109

• The check for an AI model no longer sends a paid request. It only asks WordPress whether a text model is set up. If a real request fails, the plugin remembers this for 10 minutes.
• Questions on the audit screen are shown in the page with clear buttons, instead of the browser’s OK / Cancel window.
• The text-check screen shows each note on separate lines: the mistake, the sentence it is in, the kind and the reason, then the fix.
• The script data for the in-page questions has its own name (SEOHA_ASK_L10N), so it does not clash with the free plugin.
• The text-check screen loads the notes already found on the client site right away.
• Audit: “Only one internal link” and “Broken internal links” moved to “Slowing down ranking”.
• Index check: images, documents and theme or page-builder templates (for example Flatsome blocks under /blocks/) are no longer shown as pages.
• The agency’s public key is sent to the hub again (wrong class name), so the hub can pass it to approved clients.

1.35.108

• Speed test (PageSpeed): works without Action Scheduler, through WP-Cron.
• Screen scripts are passed straight to wp_add_inline_script(), with every value escaped in that call (esc_js() or wp_json_encode()). The helpers that took a ready-made string are removed.
• The print styles and the client status table styles moved into admin/css/seoh-admin.css.
• Removed the Author URI header. The Plugin URI stays.

1.35.107

• Table updates now go through dbDelta on each version change, for every client. No more manual ALTER TABLE, and no old-table cleanups.
• Uninstall deletes options through delete_option(), so the WordPress cache is cleared too.
• Every prepared query now passes its values one by one, so the number of placeholders can be checked.
• Queue items are saved one by one instead of one large multi-row query.
• The plugin no longer defines WordPress core file-permission constants; file writes give the permissions themselves.

1.35.106

• Removed code that no longer has any user: the multi-language helper for the agency’s own site and an unused hook for sending changes.

1.35.105

• New read-only helpers over the client data that was already pulled (one image, image search, page rows, titles by type, duplicate meta), for the paid add-on.
• Removed the old box that resent the agency’s own sales to the hub. The agency does not send its own data.
• Missing English translations added.

1.35.104

• Removed the old code that read or changed the agency’s own site. Every screen and action now reads from and sends to the selected client. The agency’s own site is followed as a client through the free plugin.
• FAQ blocks, saved schema, image texts, image renames and the menu tree now go to the client site.
• Uninstall no longer touches data that belongs to the free plugin on the same site.
• Faster cache clearing for client views (works with persistent object caches).

1.35.103

• Faster screens: reads from the plugin’s own tables go through the WordPress object cache. Any write to these tables clears it at once, so the screens always show the current data.

1.35.102

• Removed the unused background audit runner and the helpers only it used. The audit runs on the client’s site.

1.35.101

• File rules: the “keep only on chosen pages” list now shows the client’s own pages and finds where each form is used on the client’s site. It was not shown before.
• Removed an unused /llms.txt output and own-site page lookups (the client’s site serves its own llms.txt).

1.35.100

• File-rule preview links for a client carry the client’s own public nonce, so they keep working with the free plugin 0.294.72 or newer.

1.35.99

• Clean-up: removed the old copies of the screen actions that now always run on the client’s site, the front-end test load and the slowdown tool (the agency does not measure its own site), and several unused classes. About 12,700 lines less; screens work as before.

1.35.98

• What you set for a client is saved on the client’s site: the file rules in Speed (and their preview links use the client’s own key), the llms.txt selection, and the ads figures. Needs the free plugin 0.294.71 or newer on the client site.
• Suggested questions and schema: the agency’s AI writes the suggestion from the client’s page, and it waits for approval on the client’s site.
• “Search Console reasons” in Errors are shown again, from the client’s data.

1.35.97

• A client is always selected while the agency has clients: with none chosen yet, or after the chosen one is removed, the first client in the list is picked — the same one the menu shows.
• The agency no longer measures or changes its own website: the monthly speed check and its email, the admin load timing, the file rules and the test load on the front end are off. The agency’s own website is followed as a client, with the free plugin.
• Addresses on the screens (content, structure, links, PageSpeed suggestions, page inspector) are built from the selected client’s site.
• The “Check in Search Console” and “Rewrite breakdowns back” buttons are back; they run on the client.

1.35.96

• Removed the agency’s own Google connection. Search Console and Analytics figures always come from the selected client’s site, where Google is connected. The agency’s own website is followed as a client, with the free plugin.
• Removed the unused set-up wizard and the key check address that only the Google connection needed.
• A short address in the page report now opens on the selected client’s site.

1.35.95

• Fixed a fatal error when another plugin reads the time zone or builds an admin address while plugins are still loading.

1.35.94

• No output buffering anywhere: ob_start() is gone. Screen parts are built as strings and returned.
• Every screen address that carries a choice (month, page, sort, search, tab) now carries a nonce for the logged-in user, checked with wp_verify_nonce() before any of it is read. Without a valid nonce the screen opens with its defaults.
• Front-end requests for the speed probe and the asset rules preview carry a nonce checked with wp_verify_nonce(), in addition to the short-lived secret key.
• The Google connection return is posted as a nonce-protected form to admin-post.php, with a capability check.
• No change in behaviour.

1.35.93

• All file operations go through WP_Filesystem (moving, deleting folders, write checks, writing and reading files) or wp_delete_file(). The ads CSV is read through WP_Filesystem and parsed in PHP.
• The HTTP/2 check no longer touches cURL: it reads the protocol agreed during the TLS handshake (ALPN), with the WordPress HTTP API response as fallback.
• Removed every phpcs:ignore / phpcs:disable comment from the code.
• No change in behaviour.

1.35.92

• Review follow-up: every table and column name in SQL now goes through the %i placeholder, including names returned by a method and schema queries (SHOW COLUMNS, ALTER, DROP, TRUNCATE, CREATE). IN lists and bulk inserts use placeholders built with array_fill(); filters are fixed SQL with placeholders instead of strings assembled in PHP.
• Request input is sanitised where it is read with WordPress functions (sanitize_text_field, sanitize_textarea_field, esc_url_raw, map_deep, absint). Data from json_decode() is cleaned value by value.
• The standalone consent page loads its CSS from a file through wp_register_style() / wp_print_styles() instead of a style tag.
• Every output buffer is closed in a finally block in the same function, so nothing can skip the close.
• No change in behaviour.

1.35.91

• Review follow-up: added a nonce to the client picker; the HTTP protocol check now uses the WordPress HTTP API instead of a direct call; passed all the plugin’s own table names through prepared queries (the %i placeholder). No change in behaviour.

1.35.89

• New: a “Status by client” table in Settings. For every client it shows four checks — structure, crawl, speed and console/analytics — each with a word (current/stale) in the right gender and the client’s own last-run date. A per-check refresh arrow starts the check on the client (crawl/structure as a command, both speed tests like the Speed tab) and the cell shows “refreshing” until the client’s timestamp moves, then downloads only what changed; the wait continues in a 5-minute background task. Name search, pagination of 25, a “Refresh all stale” button and a per-client download arrow. The clients list is merged into this table.
• Fixes: freshness dates now come from the client’s handshake (so speed no longer shows a stale date); the print layout of the overview report no longer overlaps on a narrow page; removed an unused minified script; speed reads past days from the downloaded data and asks live only for today.

1.35.73

• Review follow-up: the wp-config helper no longer keeps a copy of wp-config.php on disk and uses WP_Filesystem; moved “Tested up to” to the readme only; sanitised a few request keys and the request URI; moved all inline admin scripts and styles to wp_add_inline_script / wp_add_inline_style. No change in behaviour.

1.35.71

• Code quality: cleared all Plugin Check findings — removed a few no-op translation wrappers, used a literal text domain in the menu, passed a LIKE pattern through a parameter, annotated the internal database queries in the data layers, and noted that the agency REST endpoints verify a signed key inside their guard. No change in behaviour.

1.35.69

• New: “Your site” – follow the agency’s own website with one button, without taking a client slot.
• New: a “More of our plugins” page that lists our other free plugins from WordPress.org; nothing is installed without your click.
• New: “Something not working?” form on the Guide screen, sent only on click; with your account email and consent it becomes a support ticket.
• Fixed: connecting Google for the agency’s own website when the client plugin is on the same site.
• Improved: clearer texts, full English interface, and all browser pop-up dialogs replaced with on-page messages.