assets\/js\/alpine.min.js<\/code><\/li>\n<\/ul>\n\nNo build tools are required. The minified file (alpine.min.js<\/code>) was downloaded directly from the Alpine.js CDN for v3.15.10. The full unminified source is available at the GitHub repository and release page linked above.<\/p>\n\n\n\n- Upload the
membermagix<\/code> folder to the \/wp-content\/plugins\/<\/code> directory, or install directly through the WordPress plugins screen.<\/li>\n- Activate the plugin through the 'Plugins' screen in WordPress.<\/li>\n
- Go to MemberMagix > Settings<\/strong> to configure your email sender, terms page URL, and overlay defaults.<\/li>\n
- Add the
[mmax_membership_form]<\/code> shortcode to any page to display the membership signup form.<\/li>\n- Edit any post or page and enable content protection in the Content Protection<\/strong> meta box.<\/li>\n<\/ol>\n\n
Recommended:<\/strong> Install an SMTP plugin (e.g., WP Mail SMTP) for reliable magic link email delivery.<\/p>\n\n\n\nHow do members log in?<\/h3><\/dt>\nMembers enter their email address in the membership form. MemberMagix sends them a secure, one-time magic link. Clicking the link logs them in instantly \u2014 no password required.<\/p><\/dd>\n
Is the protected content secure?<\/h3><\/dt>\nYes. MemberMagix uses server-side content protection. The full content is never sent to unauthorized browsers. Only a teaser preview is delivered, with the rest replaced before the page reaches the visitor.<\/p><\/dd>\n
Can I control what appears in the teaser?<\/h3><\/dt>\nYes. Place the [mmax_cutoff]<\/code> shortcode anywhere in your post to define the exact split point. Everything above the shortcode becomes the teaser. If no cutoff is set, MemberMagix auto-extracts the first few paragraphs.<\/p><\/dd>\nMagic link emails are delayed or never arrive \u2014 what's wrong?<\/h3><\/dt>\nThe most common cause is WordPress's \"pseudo-cron\" (wp-cron.php<\/code>). By default, WordPress only runs scheduled tasks \u2014 including sending emails \u2014 when someone visits the site via HTTP. On low-traffic or staging sites, this means magic link emails can be silently delayed for hours.<\/p>\n\nSymptoms:<\/strong> You submit the form, the plugin reports success, but the email doesn't arrive for a long time (or until someone else visits the site).<\/p>\n\nFix:<\/strong> Disable WP pseudo-cron and set up a real system crontab:<\/p>\n\n\n- Add to
wp-config.php<\/code>: define('DISABLE_WP_CRON', true);<\/code><\/li>\n- Add a system cron job:
*\/5 * * * * cd \/path\/to\/wordpress && php wp-cron.php<\/code><\/li>\n<\/ol>\n\nAlso recommended: install an SMTP plugin (e.g., WP Mail SMTP) for reliable email delivery.<\/p><\/dd>\n
Does MemberMagix require any external services?<\/h3><\/dt>\nNo. MemberMagix runs entirely on your own WordPress install \u2014 no third-party APIs, no external services, no data leaving your server. We recommend an SMTP plugin (like WP Mail SMTP) for reliable magic-link email delivery, which is a WordPress best practice independent of this plugin.<\/p><\/dd>\n
What happens when the plugin is uninstalled?<\/h3><\/dt>\nAll plugin data (custom tables, options, user meta, post meta, overlays, cron jobs, and transients) is fully removed when you delete the plugin through WordPress admin.<\/p><\/dd>\n\n<\/dl>\n\n\n
4.0.4<\/h4>\n\n\n- Content protection meta box now available on all public post types (was restricted to post\/page, flagged as trialware)<\/li>\n
- Removed check-email REST endpoint that leaked account existence (signup vs login mode)<\/li>\n
- Simplified membership form: single-step email + terms flow, no account enumeration possible<\/li>\n
- Terms acceptance now required for all magic link requests (new and returning users)<\/li>\n
- Updated Alpine.js from 3.13.10 to 3.15.10<\/li>\n
- Fixed register_setting sanitize_callback: use rest_sanitize_boolean instead of raw bool cast<\/li>\n<\/ul>\n\n
4.0.3<\/h4>\n\n\n- Overlay CPT now visible in admin menu (was hidden, flagged as locked feature)<\/li>\n
- Applied kses sanitization to teaser and overlay content in the_content filter and REST responses<\/li>\n
- Removed dead Pro-only methods (inject\/remove cutoff shortcode) and helper meta reads<\/li>\n
- Removed Pro-only table drops from uninstall.php (base only creates mmax_tokens)<\/li>\n
- Added SVG stroke attributes to kses allowlist for success checkmark icon<\/li>\n
- Added specific Alpine.js release URL to Third-Party Libraries documentation<\/li>\n<\/ul>\n\n
4.0.2<\/h4>\n\n\n- Fixed membership form not rendering on protected posts (wp_kses_post was stripping form HTML and Alpine.js attributes)<\/li>\n
- Removed user ID from check-email REST response to prevent user enumeration<\/li>\n
- Added Alpine.js x-cloak support to prevent flash of unstyled form steps<\/li>\n<\/ul>\n\n
4.0.1<\/h4>\n\n\n- Fixed auto-submit magic link for returning users (skip intermediate \"Welcome back\" step)<\/li>\n
- Refined HTML sanitization: overlay content no longer passed through wp_kses_post<\/li>\n
- Added escaping throughout for WP.org compliance (round 2 review feedback)<\/li>\n
- Added Alpine.js third-party library attribution in readme.txt<\/li>\n<\/ul>\n\n
4.0.0<\/h4>\n\n\n- Freemium architecture: prefix rename mmx to mmax for WP.org uniqueness<\/li>\n
- Plugin split: commercial features extracted to MemberMagix Pro add-on<\/li>\n
- 18 extension points (filters and actions) for Pro add-on integration<\/li>\n
- Database migration from mmx_ and ssm_ prefixes to mmax_<\/li>\n
- All inline scripts and styles moved to enqueued files for WP.org compliance<\/li>\n
- GPL license headers added to all files<\/li>\n<\/ul>\n\n
3.4.1<\/h4>\n\n\n- Email template restyled to match overlay\/form brand palette (amber CTA, teal accents, warm neutrals)<\/li>\n
- Email colors now read from Style tab settings with brand defaults<\/li>\n
- Extracted email template to dedicated file for maintainability<\/li>\n
- Configurable email button text (default: \"View Blog\") in General tab settings<\/li>\n
- Send Test Email button on General tab for delivery verification<\/li>\n
- Fixed email expiry notice: removed incorrect \"single use\" claim, respects token expiry filter with proper pluralization<\/li>\n<\/ul>\n\n
3.4.0<\/h4>\n\n\n- Reusable magic link tokens: both login and portal links in emails now work regardless of click order<\/li>\n
- One-session-at-a-time: each magic link login destroys all previous sessions, enforcing single-device access<\/li>\n
- Session replacement notification: dismissible toast informs users when a prior session was replaced<\/li>\n
- Token usage analytics: new used_count column tracks how many times each token is used within its TTL<\/li>\n
- Passwordless subscriber role: all password functionality disabled for subscribers (profile fields, password reset, wp-login.php password auth, REST API, users list reset action)<\/li>\n
- Subscribers authenticate exclusively via magic links \u2014 role change to editor\/admin restores password functionality<\/li>\n<\/ul>\n\n
3.3.1<\/h4>\n\n\n- Removed \"Coming Soon\" badges from Stripe Integration and Paid Subscriptions in feature table<\/li>\n
- Moved blur settings from per-post meta box to Style tab (global Overlay Blur section)<\/li>\n
- Added Membership Level and Subscription Status columns to CSV export<\/li>\n
- Added Membership Level column and Edit Tier action to Members admin table<\/li>\n
- Manual tier override: admins can assign membership levels independent of Stripe subscriptions<\/li>\n
- License activation now redirects to Dashboard tab so newly unlocked tabs are immediately visible<\/li>\n
- License notices display via admin_notices (visible on any tab)<\/li>\n
- Left-aligned post-upgrade welcome screen to match admin panel layout<\/li>\n
- Hardened Stripe settings fields against browser autofill (autocomplete, data-lpignore, data-1p-ignore)<\/li>\n
- Added debug logging to Stripe portal redirect for troubleshooting broken email links<\/li>\n<\/ul>\n\n
3.3.0<\/h4>\n\n\n- REST protocol unification: all frontend API calls now use REST endpoints with wp_rest nonce<\/li>\n
- New REST endpoint: POST \/mmax\/v1\/check-email (email check for progressive form flow)<\/li>\n
- Full implementation of POST \/mmax\/v1\/magic-link (honeypot, bot detection, rate limiting, user creation, token, email)<\/li>\n
- Removed legacy AJAX handlers (mmax_magic_link_request, mmax_check_email) \u2014 single protocol, single nonce<\/li>\n
- Simplified frontend JS: removed AJAX FormData helpers, added restPost() utility<\/li>\n<\/ul>\n\n
3.2.0<\/h4>\n\n\n- Stripe-first checkout: removed identity step from premium flow \u2014 Stripe Checkout handles email + payment in one screen<\/li>\n
- User creation moved to webhook handler \u2014 eliminates orphan users from abandoned checkouts<\/li>\n
- Removed mmax_premium_create_user AJAX endpoint (no longer needed)<\/li>\n
- Terms acceptance moved to pricing step with \"By subscribing\" consent pattern<\/li>\n
- Subscription status polling now supports session_id for anonymous checkout tracking<\/li>\n
- Premium flow reduced from 6 screens to 3: pricing \u2192 checkout \u2192 success<\/li>\n<\/ul>\n\n
3.1.0<\/h4>\n\n\n- Cleanup: removed dead templates (membership-form.php, overlay.php, overlay-css.php)<\/li>\n
- Cleanup: replaced inline style attributes in premium panel with CSS classes<\/li>\n
- Cleanup: moved payment warning hardcoded colors to CSS variables<\/li>\n
- Updated health check file list to reflect current template structure<\/li>\n<\/ul>\n\n
3.0.0<\/h4>\n\n\n- Premium content: three-state content model (Public \/ Protected \/ Premium) with per-post access control<\/li>\n
- Stripe Embedded Checkout: in-page subscription flow \u2014 visitors never leave the article<\/li>\n
- Premium overlay panel with pricing toggle (monthly\/annual), identity step, and checkout state machine<\/li>\n
- Automatic magic-link email after payment via webhook \u2014 seamless onboarding for new subscribers<\/li>\n
- Subscription status polling endpoint for real-time checkout confirmation<\/li>\n
- Subscriber footer on premium posts: plan status, renewal date, and \"Manage subscription\" portal link<\/li>\n
- Past-due payment banner: non-blocking warning with \"Update payment method\" link, content remains accessible<\/li>\n
- [mmax_manage_billing] shortcode for site owners who want a dedicated billing page<\/li>\n
- Magic-link emails now include \"Manage your subscription\" link for paid subscribers<\/li>\n
- Stripe tab: Premium Content section with level name, Price ID configuration, and verify button<\/li>\n
- Bulk protection supports Premium access level alongside Public and Protected<\/li>\n
- Dashboard shows active subscriber count<\/li>\n
- New AJAX handler for premium user creation (email + Stripe Customer in one step)<\/li>\n
- Active subscription short-circuit: returning subscribers skip checkout, get a login link instead<\/li>\n<\/ul>\n\n
2.1.0<\/h4>\n\n\n- Extracted MMAX_Admin class: admin menu, tab shell, enqueue logic, and Dashboard tab now owned by dedicated module<\/li>\n
- Modules register admin tabs via mmax_admin_tabs filter with priority sorting and conditional visibility<\/li>\n
- Bulk Protection moved from submenu to tab (gated behind Personal+ tier)<\/li>\n
- Removed duplicate Settings submenu entry<\/li>\n
- Stripe tab now self-registered by MMAX_Stripe module<\/li>\n
- License and Upgrade tabs now self-registered by MMAX_License module<\/li>\n<\/ul>\n\n
2.0.1<\/h4>\n\n\n- Fixed license tier detection: Business licenses were incorrectly displayed as Personal<\/li>\n
- Added policy inclusion in Keygen API validation requests<\/li>\n
- Added policy ID fallback for tier resolution<\/li>\n<\/ul>\n\n
2.0.0<\/h4>\n\n\n- In-plugin checkout: purchase a license directly from the Upgrade tab using Stripe Embedded Checkout<\/li>\n
- Auto-activation: license key is automatically retrieved and activated after payment \u2014 zero redirects, zero copy-paste<\/li>\n
- New Upgrade tab with pricing table, billing toggle (monthly\/annual), and inline checkout<\/li>\n
- Welcome screen with license key display, copy-to-clipboard, and email confirmation<\/li>\n
- Graceful error handling: payment success always preserved, manual activation fallback<\/li>\n
- Updated third-party services disclosure for Stripe and bridge service<\/li>\n<\/ul>\n\n
1.0.5<\/h4>\n\n\n- Migrated plugin licensing from Lemon Squeezy to Keygen CE (self-hosted)<\/li>\n
- Updated third-party services disclosure for Keygen<\/li>\n
- License key format updated to match Keygen key structure<\/li>\n<\/ul>\n\n
1.0.4<\/h4>\n\n\n- Removed external Google Fonts CDN dependency \u2014 uses system font stack<\/li>\n
- Added Third-Party Services disclosure section (Lemon Squeezy, Stripe)<\/li>\n
- Dashboard redesign: onboarding-focused \"Get Started\" steps replace feature cards<\/li>\n
- WordPress.org submission release<\/li>\n<\/ul>\n\n
1.0.3<\/h4>\n\n\n- Email-first progressive form: email step determines signup vs login flow<\/li>\n
- Returning users skip nickname and terms \u2014 just email and one click<\/li>\n
- Resend magic link with 60-second cooldown on success screen<\/li>\n
- Logged-in users without access see upgrade panel instead of signup form<\/li>\n
- Removed redundant \"Already a member?\" overlay footer<\/li>\n<\/ul>\n\n
1.0.2<\/h4>\n\n\n- Rebranded icon from lock to groups \u2014 community over restriction<\/li>\n
- Updated admin menu, dashboard header, feature cards, and free-tier branding footer<\/li>\n<\/ul>\n\n
1.0.1<\/h4>\n\n\n- Improved WordPress.org plugin check compliance<\/li>\n
- Added readme.txt for WordPress.org submission<\/li>\n
- Fixed escaping and sanitization throughout<\/li>\n
- Added translator comments for all translatable strings with placeholders<\/li>\n
- Added sanitize_callback to all register_setting calls<\/li>\n<\/ul>\n\n
1.0.0<\/h4>\n\n\n- Tier restructure: 3 tiers (free, personal, business)<\/li>\n
- Bulk protection gated behind personal tier<\/li>\n
- CPT protection gated behind business tier<\/li>\n
- WordPress.org submission preparation<\/li>\n<\/ul>\n\n
0.9.7<\/h4>\n\n\n- Bulk cutoff shortcode injection and removal<\/li>\n
- Protect & Add Cutoff \/ Unprotect & Remove Cutoff bulk actions<\/li>\n<\/ul>\n\n
0.9.6<\/h4>\n\n\n- Content protection v2: inline blur and panel overlay system<\/li>\n
- Author-controlled teasers via [mmax_cutoff] shortcode<\/li>\n<\/ul>\n\n
0.9.5<\/h4>\n\n\n- Unified admin hub with tabbed settings<\/li>\n
- Brand customization via Style tab<\/li>\n
- Official lock icon logo<\/li>\n<\/ul>\n\n
0.9.0<\/h4>\n\n\n- Initial beta release<\/li>\n
- Passwordless magic-link authentication<\/li>\n
- Server-side content protection with teaser extraction<\/li>\n
- Member management with CSV export<\/li>\n
- Stripe integration wiring<\/li>\n
- Lemon Squeezy plugin licensing<\/li>\n<\/ul>","raw_excerpt":"A lightweight membership plugin with passwordless magic-link authentication, server-side content protection, and elegant subscriber onboarding.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/hi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/289082","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/hi.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/hi.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=289082"}],"author":[{"embeddable":true,"href":"https:\/\/hi.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/surfstyk"}],"wp:attachment":[{"href":"https:\/\/hi.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=289082"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/hi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=289082"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/hi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=289082"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/hi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=289082"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/hi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=289082"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/hi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=289082"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}