Profiles

Badges

CODE
1 badge
Plugin Developer
PRACTICE
1 badge
Support Contributor '26
POLYGLOTS
1 badge
Translation Contributor '25

Current Job

Software Engineer
Present
Christof Servit

Recent impact

Score weights high-impact work (commits, releases, approved translations, props) at 3x routine activity.

Last 30 days
10contributions
high7
medium3
score24
Last 90 days
24contributions
high21
medium3
score66
Last 12 months
48contributions
high41
medium7
score130

Contributions

Type
October 2026
Oct 14 Wed · 08:41
Plugins high
Committed [3745737] to Plugins SVN:
Copied reputify/trunk to reputify/tags/1.1.0.
Oct 13 Tue · 12:04
Forums med
Posted a reply to Bildproxy: Bild-URLs mit Dateiendung und kompatible Behandlung alter URLs, on the site WordPress.org Forums:
Danke für die gründliche Vorlage. Ich habe sie aufgeteilt, weil darin zwei sehr unterschiedliche Dinge…
Oct 13 Tue · 12:01
Forums med
Posted a reply to Shop-Liste braucht ewig bis zum vollständigen Laden, on the site WordPress.org Forums:
Danke, beide Ursachen bestätigt und behoben.             Statistik-Spalte: Die Zahlen für…
Oct 13 Tue · 11:59
Forums med
Posted a reply to Templates crashen trotz aktiviertem PHP-Opt-in, on the site WordPress.org Forums:
Danke für die präzise Fehlersuche — die Diagnose stimmt, und die Ursache ist genau die…
Oct 13 Tue · 11:54
Plugins high
Committed [3743803] to Plugins SVN:
Copied affiliate-toolkit-starter/trunk to affiliate-toolkit-starter/tags/3.9.2.
Oct 13 Tue · 11:51
Plugins high
Committed [3743795] to Plugins SVN:
SECURITY: Fixed an information disclosure in the AJAX render endpoint. The endpoint takes the product and list ids to render straight from the request and is reachable without a login whenever AJAX loading or the AJAX handler is enabled, but it only checked the post status of products that came from a list - a product id passed directly was loaded and rendered no matter what. A visitor could therefore read the title, prices, offers and affiliate urls of a product the site owner had not published (private, pending or scheduled), and the same held for the contents of a private list. Product and list ids from the request are now resolved through the same guard that was introduced for templates: an id only resolves when it belongs to the expected post type and its status is publish or draft, which is exactly what the shortcode output (atkp_output::get_product_output) has always enforced - the AJAX path only lazy-loads that same output. The same guard was added to the "prefer local product info" branch of a list, where a product is resolved by asin through the product table: that table carries no post status, so an unpublished product could be rendered through a published list on the normal output path as well. The shop data of the list is used in that case. Reported by levanduy181.
Oct 13 Tue · 11:08
Plugins high
Committed [3743683] to Plugins SVN:
SECURITY: Fixed an information disclosure in the AJAX render endpoint. The endpoint takes the product and list ids to render straight from the request and is reachable without a login whenever AJAX loading or the AJAX handler is enabled, but it only checked the post status of products that came from a list - a product id passed directly was loaded and rendered no matter what. A visitor could therefore read the title, prices, offers and affiliate urls of a product the site owner had not published (private, pending or scheduled), and the same held for the contents of a private list. Product and list ids from the request are now resolved through the same guard that was introduced for templates: an id only resolves when it belongs to the expected post type and its status is publish or draft, which is exactly what the shortcode output (atkp_output::get_product_output) has always enforced - the AJAX path only lazy-loads that same output. The same guard was added to the "prefer local product info" branch of a list, where a product is resolved by asin through the product table: that table carries no post status, so an unpublished product could be rendered through a published list on the normal output path as well. The shop data of the list is used in that case. Reported by levanduy181.
Oct 13 Tue · 06:12
Plugins high
Committed [3742991] to Plugins SVN:
First public release.
Oct 06 Tue · 07:37
Plugins high
Committed [3730227] to Plugins SVN:
Copied affiliate-toolkit-starter/trunk to affiliate-toolkit-starter/tags/3.9.1.
Oct 06 Tue · 07:35
Plugins high
Committed [3730222] to Plugins SVN:
IMPROVED: An error page that a CDN returns with status 200 instead of an error code is no longer stored as a product image. The response has to be an image by content type or by content, otherwise the download counts as failed.

Developer

3 plugins

Translations

3 locales
de_CH Deutsch (Schweiz) (German) Translation Contributor