wpdev 29adb05567 fix(2meet-data-optimizer): alter an existing flat table in one process at a time; keep a deferred group native until its drift fix ...

- security review H1: anonymous /wp-cron.php requests pass ddl_allowed(),
  and dbDelta on an existing table had no lock, so concurrent requests each
  ran the ALTER on a large table. The upgrade now runs under the same MySQL
  GET_LOCK as the index DDL (skipped when another process holds it) and
  re-checks the stored hash once locked; this covers aeav_only too. The table
  build moves unchanged to write_table(); lock()/unlock() are shared
- security review M1: after a deferred upgrade the group stays native until
  tmdo_drift_resync has rebuilt the rows written meanwhile
  (TMDO_Schema_Manager::resynced() from run_scheduled_fix()); with no flat
  writes (disabled) it is released at once
- Verify: SchemaUpgradeDeferralTest (lock held elsewhere, resync release),
  integration 585, unit 702, phpcs, stan
- PR: PR-111 (2.3 acceptance security review)

2026-09-27 17:22:57 +08:00

..

class-tmdo-cli-member.php

feat(2meet-data-optimizer): set an entity bridge mode from the CLI under the Promotion Guard

2026-09-26 23:36:55 +08:00

class-tmdo-cli-post.php

chore(2meet-data-optimizer): clean HivePress transients left in wp_options

2026-09-27 09:06:19 +08:00

class-tmdo-cli-term-comment.php

fix(2meet-data-optimizer): stop false alarms in doctor, term-comment-diagnose and bridge-status

2026-09-27 01:00:13 +08:00

class-tmdo-cli-v2.php

fix(2meet-data-optimizer): stop false alarms in doctor, term-comment-diagnose and bridge-status

2026-09-27 01:00:13 +08:00

class-tmdo-cli.php

fix(2meet-data-optimizer): alter an existing flat table in one process at a time; keep a deferred group native until its drift fix

2026-09-27 17:22:57 +08:00