DiluxOne Multisite User Sync

2.0.0

• The plugin is now called DiluxOne Multisite User Sync, in the DiluxOne family. Nothing else changes for your network: same settings, same screens, same slug.
• Requires PHP 8.0 or newer (it was 7.4). Tested with WordPress 7.1.
• Security: the new-site trigger gave each new site’s members the role they held on the main site, so main-site editors and administrators became editors and administrators of every new site. Every new membership now gets the new site’s own default role, and subscriber when that role does not exist there.
• Security: the role trigger copied any role, administrator included, to every site the user belonged to, even where the role does not exist. It now copies a role only to sites that define it, never copies administrator (a developer can allow it with the wpmus_replicate_role filter), leaves super admins alone and ignores changes that change nothing.
• Security: any site administrator could run the site-level “Sync from scratch” and pull every account of the network into their site. The site screens and their action are now for super admins only, and so are the network actions.
• People removed from a site were put back on it at their next sign-in, and by the new-user trigger and the manual sync. The plugin now remembers who was removed from which site and no sync adds them back, unless you tick “Also add back people who were removed from a site” on a manual sync. Adding someone back yourself clears the record.
• Removed: the catch-up sync that ran on every sign-in. Accounts created outside the normal flows (imports, SQL) are added with the manual network sync.
• Super admins are no longer added as members of every site, and archived, spam and deleted sites, and the sites of other networks on the same install, are left alone.
• The new-site trigger now listens on wp_initialize_site instead of the deprecated wpmu_new_blog, and the new-user trigger also covers accounts created with wp_insert_user() alone (some registration plugins), once per account.
• Turning a trigger on or off takes effect immediately instead of from the next page load.
• Big networks: syncs no longer load every user into memory, and a large one (a new site or a manual sync on a big network, a new user on a network with many sites) runs in the background through WP-Cron in batches, with its progress on the Network Sync Actions screen; the background runs commit their writes together about once a second instead of one at a time. Small syncs still finish at once.
• New filters for developers: wpmus_excluded_site_ids, wpmus_should_sync_user, wpmus_replicate_role, wpmus_sync_inline_limit, wpmus_sync_batch_size, wpmus_sync_time_limit and wpmus_sync_group_writes.
• On a site that is not a network, the plugin now only explains that it needs WordPress Multisite and deactivates itself; nothing else of it runs in the meantime.
• Uninstalling now also removes the background sync queue, its scheduled event and the record of removals.
• The plugin’s stylesheet loads only on its own screens instead of on every admin screen.
• Translations written for Spanish (Argentina, Spain, Mexico), Portuguese (Brazil, Portugal), French, German and Italian, to be contributed to translate.wordpress.org; WordPress installs them from there. The plugin no longer loads translations itself.

1.5.0 (2026-05-05)

• Description repositioned: leads with “Optimized for Microsoft Azure and Azure App Service” while explicitly noting compatibility with any WordPress Multisite host (DigitalOcean, AWS, dedicated servers, shared hosting, etc.).
• Security hardening: every admin save handler now requires manage_network_options (network forms) or manage_options (site form) on top of the existing nonce check. Previously only nonces were enforced.
• Output escaping: every admin page now escapes all dynamic output via esc_html, esc_attr, esc_url, or wp_kses with explicit allow-lists.
• Input sanitisation: every $_GET / $_POST access now goes through wp_unslash + the appropriate sanitize_* (with absint() on blog IDs).
• Re-entrancy guard in the sync engine: when role-sync is on, add_user_to_blog no longer cascades through set_user_role → on_role_changed → add_user_to_blog, which previously could mass-reset roles across the network.
• Better error messages on requirements failure: the wp_die shown when activated on single-site or below the minimum WP version is now translatable and clearer.
• Internal: full developer-experience stack: PHPCS+WPCS strict at zero violations, PHPStan level 8 (no baseline), Psalm taint analysis, 46 unit tests, 16 multisite integration tests on wp-env, Plugin Check enforced strict, CI matrix on PHP 7.4–8.3. None of this changes runtime behavior.
• Internal: procedural code refactored to OOP under the WPMUS\ namespace with PSR-4 autoloading. Legacy wpmus_* functions retained as @deprecated 1.5.0 thin wrappers for back-compat.

1.4 (2026-04-22)

• Added “Network: true” header flag (proper multisite-only declaration).
• Added uninstall.php: plugin options are cleaned up on uninstall. Users and roles are NOT touched.
• Added internationalization loading via load_plugin_textdomain (ready for translations).
• Added “Requires PHP” header and “License URI”.
• Updated compatibility with the latest WordPress versions.
• Aligned “Requires at least” between plugin header and readme.
• Minor typo corrections in readme and deduped a repeated entry in the Upgrade Notice.

1.3 (2024-10-28)

• Bug fixed: “Sync did not happen. You’re must select at least one site!”.

1.2 (2024-10-27)

• Bug fixed: AJAX responses – function wpmus_maybesync_newuser echo “maybe”.

1.1 (2020-04-11)

• Bug fixed: user sync when end-user register in the network.
• Performance improved adding some conditional during triggers.