CHANGELOG.md

Rama craft-5 · réplica de lectura del repositorio original.

# Changelog

## 3.0.24 - 2026-11-10

### Fixed
- Fix “time ago” text for comments always showing in English, rather than the site’s language. ([#330](https://github.com/verbb/comments/issues/330))

## 3.0.23 - 2026-11-01

### Fixed
- Fixed a high-severity missing authorization vulnerability.
- Fix an error when saving or trashing a comment on the front-end while “Reply with GIFs” (GIPHY) support is enabled.
- Fix an error when rendering comments on assets, categories or users while “Auto-close Comments” is enabled.
- Fix an error when commenting on an asset while specific asset volumes are selected in the permissions settings.
- Fix a database error when filtering comments by more than one of owner type, owner section and owner entry type.
- Fix the Entry Section, Entry Type and Owner Type condition rules checking the comment instead of its owner when matching a comment.

## 3.0.22 - 2026-10-15

### Changed
- Updated Craft API usage to avoid deprecated calls.

## 3.0.21 - 2026-10-07

### Changed
- Require Verbb Base 3.0.20 or later so shared control-panel layouts use the current asset bundle namespace. ([verbb-base#3](https://github.com/verbb/verbb-base/issues/3))

## 3.0.20 - 2026-10-02

### Changed
- Updated the required version of `verbb/base` to 3.0.19.

## 3.0.19 - 2026-09-30

### Changed
- Route plugin settings through the plugin’s authorized settings controller.

### Fixed
- Fix template settings pages returning 404 errors and the default comment textarea not rendering when the field layout was not initialized. ([#329](https://github.com/verbb/comments/issues/329))

## 3.0.18 - 2026-09-23

### Fixed
- Render comment notification subjects and bodies in Twig sandbox.
- Fix saving one settings page or generating the comment structure resetting unrelated plugin settings.

## 3.0.17 - 2026-09-14

### Fixed
- Fix the front-end asset publishing button after settings normalization.

## 3.0.16 - 2026-09-13

### Changed
- Normalize plugin settings.

## 3.0.15 - 2026-06-20

### Added
- Add “Reply with GIFs” support, allowing commenters to search GIPHY and attach a GIF to a comment or reply.
- Add `giphyEnabled`, `giphyApiKey`, `giphyRating` and `giphyLimit` plugin settings.
- Add `gifUrl` field to the GraphQL Comment interface.
- Add per-user reputation score (net votes across a user’s approved comments) shown next to their name, with a `showAuthorScore` setting to toggle it.
- Add `assetBaseUrl` setting to serve the default front-end CSS/JS from a custom base URL (e.g. a CDN/file server) instead of publishing to `cpresources` — avoids per-server runtime publishing in multi-server setups.
- Add `assetBasePath` setting + a way to copy the front-end CSS/JS there: a `comments/base/publish-assets` console command, a “Publish now” button in the settings, and auto-publish on install.

### Changed
- Cache comment vote lookups per request (busting on vote save/delete) to avoid duplicate queries when rendering threads.

## 3.0.14 - 2026-04-29

### Fixed
- Fix an error when saving plugin settings and structure information not persisting.
- Fix comment permissions for entry types without a section (e.g. Matrix).

## 3.0.13 - 2026-03-03

### Fixed
- Fix an error when saving plugin settings and structure information not persisting.
- Fix an error when saving plugin setting in Craft 5.9+.

## 3.0.12 - 2026-02-07

### Fixed
- Fix return types for `hasDownVoted` and `hasUpVoted` functions.

## 3.0.11 - 2025-09-16

### Added
- Add Entry Type, Section and Element Type conditions for filtering comments in the control panel.
- Add the ability to query Comment elements via the `ownerEntryType` and `ownerEntryTypeId`.

### Fixed
- Fix Gravatar user check throwing an error for guests.

## 3.0.10 - 2025-09-02

### Changed
- Improve Gravatar handling.

## 3.0.9 - 2025-08-13

### Fixed
- Fix Feed Me lack of support for custom fields when resolving the owner element.
- Fix nested comment display for comments, when viewing in the control panel.

## 3.0.8 - 2025-07-18

### Changed
- Update English translations.

### Fixed
- Fix lack of handling for database column type for field.
- Fix an error when editing another users’ comment in some instances.

## 3.0.7 - 2025-04-17

### Added
- Add “Comments” sub-nav item in the control panel.

### Changed
- Improve performance of sidebar list of owner elements for large sites when viewing comments in the control panel.
- Custom fields now include a `data-role="comment-field"` attribute on their container. Consider including this in any custom templates of yours for the next major release.
- Validation errors for custom fields now target the `data-role="errors"` attribute of the custom field.

### Fixed
- Fix an error when eager loading owner and user for comments.
- Fix check of GraphQL Authentication plugin.
- Fix an error when eager loading owner and user for comments.
- Fix a JS error for guest comments (when guest comments are disabled).
- Fix deprecated `log()` function.
- Fix GraphQL resolvers to use `ElementCollection` correctly.
- Fix JS to handle whitespace in comment’s HTML.

## 3.0.6 - 2025-03-05

### Added
- Add support for `notificationAdmins` to be a Closure.

### Fixed
- Fix an issue creating comments for long URLs.
- Fix incorrect Unauthorized error caused by checking against random user.

## 3.0.5 - 2025-02-03

### Fixed
- Fix the `isFlagged` element query not working correctly.

## 3.0.4 - 2024-11-12

### Fixed
- Fix an XSS issue for comment excerpts.

## 3.0.3 - 2024-10-20

### Added
- Add French translation. (thanks @scandella).

### Changed
- Change JSON payload for `comment` when creating a comment from the front-end.

### Fixed
- Fix an error when calling `craft.comments.renderJs()`.
- Fix an error where it was possible to change the commenter email/name to an invalid value.

## 3.0.2 - 2024-09-07

### Fixed
- Fix installation bug. (thanks @timkelty).
- Fix translations for emails.

## 3.0.1 - 2024-07-21

### Added
- Add author email to sidebar when editing a comment in the control panel.
- Add “Comments Order By” plugin setting to control the direction of comments.
- Add Craft Teams support for permissions.
- Add JS events for front-end functionality.

### Changed
- Update English translations.
- Update non-English translations.
- Improve reply/edit form cloning.

### Fixed
- Fix an error when viewing comment replies in the control panel.
- Fix a type error for a comment’s string representation.

## 3.0.0 - 2024-05-18

### Added
- Add element conditions to allow comments to be filtered in the control panel by custom sources.

### Changed
- Now requires PHP `8.2.0+`.
- Now requires Craft `5.0.0+`.

### Fixed
- Fix an error when selecting a “Placeholder Avatar” asset.

## 2.0.22 - 2026-06-20

### Added
- Add “Reply with GIFs” support, allowing commenters to search GIPHY and attach a GIF to a comment or reply.
- Add `giphyEnabled`, `giphyApiKey`, `giphyRating` and `giphyLimit` plugin settings.
- Add `gifUrl` field to the GraphQL Comment interface.
- Add per-user reputation score (net votes across a user’s approved comments) shown next to their name, with a `showAuthorScore` setting to toggle it.
- Add `assetBaseUrl` setting to serve the default front-end CSS/JS from a custom base URL (e.g. a CDN/file server) instead of publishing to `cpresources` — avoids per-server runtime publishing in multi-server setups.
- Add `assetBasePath` setting + a way to copy the front-end CSS/JS there: a `comments/base/publish-assets` console command, a “Publish now” button in the settings, and auto-publish on install.

### Changed
- Cache comment vote lookups per request (busting on vote save/delete) to avoid duplicate queries when rendering threads.

## 2.0.21 - 2026-04-29

### Fixed
- Fix an error when saving plugin settings and structure information not persisting.

## 2.0.20 - 2026-02-07

### Fixed
- Fix return types for `hasDownVoted` and `hasUpVoted` functions.

## 2.0.19 - 2025-07-18

### Fixed
- Fix lack of handling for database column type for field.
- Fix an error when editing another users’ comment in some instances.

## 2.0.18 - 2025-04-17

### Changed
- Improve performance of sidebar list of owner elements for large sites when viewing comments in the control panel.

### Fixed
- Fix an error when eager loading owner and user for comments.

## 2.0.17 - 2025-03-05

### Added
- Add support for `notificationAdmins` to be a Closure.

### Fixed
- Fix an issue creating comments for long URLs.
- Fix incorrect Unauthorized error caused by checking against random user.

## 2.0.16 - 2025-02-03

### Fixed
- Fix the `isFlagged` element query not working correctly.

## 2.0.15 - 2024-10-20

### Fixed
- Fix an error when calling `craft.comments.renderJs()`.

## 2.0.14 - 2024-10-03

### Changed
- Change JSON payload for `comment` when creating a comment from the front-end.

### Fixed
- Fix an error where it was possible to change the commenter email/name to an invalid value.

## 2.0.13 - 2024-07-21

### Added
- Add author email to sidebar when editing a comment in the control panel.
- Add “Comments Order By” plugin setting to control the direction of comments.

### Changed
- Update English translations.
- Update non-English translations.

## 2.0.12 - 2024-04-10

### Fixed
- Fix an error when selecting a “Placeholder Avatar” asset.

## 2.0.11 - 2024-03-04

### Fixed
- Fix some email message translation keys.
- Fix order of operations when uninstalling the plugin.
- Fix Emoji support and stripping out some valid special characters for comments.

## 2.0.10 - 2024-01-06

### Added
- Add “Exclude Moderator Comments” plugin setting to allow moderator comments to be excluded from moderation.
- Add “Moderator Edited Notifications” plugin setting to notify moderators when a comment is edited.

### Fixed
- Fix element index not dislaying some characters correctly for comments.
- Fix manually rendering JS not firing correctly in some instances.
- Fix max comments for user check for multi-site installs.
- Fix JS errors when no comment form is available (due to permissions).

## 2.0.9 - 2023-12-03

### Added
- Add action for Comments to determine state of saving or deleting.
- Add `inline` option for reCAPTCHA JS loading.

### Fixed
- Fix an error where trashed comments weren’t validated correctly.
- Fix custom email templates not working for notifications.
- Fix an error with `ownerSiteId` for multi-site installs.
- Fix lack of typecast for `siteId` when submitting comments.

## 2.0.8 - 2023-10-25

### Added
- Add support for Votes to Feed Me itegration. (thanks @JeroenOnstuimig).
- Add extra error-handling for some email notifications.

### Fixed
- Implement `Element::trackChanges()` for Blitz compatibility.
- Fix returning Vote user when both querying users and comments is allowed for GraphQL. (thanks @JeroenOnstuimig).

## 2.0.7 - 2023-03-09

### Changed
- Update system message headings for some email notifications.

### Fixed
- Fix an issue when installing the plugin, and automatically disabled.
- Fix an incompatibility with [Emails](https://github.com/ryssbowh/craft-emails) plugin.
- Fix incorrect return types for voting and flagging comments with GraphQL mutations.

## 2.0.6 - 2023-02-22

### Added
- Add `name` and `email` to available index columns for the control panel.

### Changed
- Update English translations.
- Only admins are now allowed to access plugin settings.
- Improve dutch translations. (thanks @jeroenlammerts).

### Fixed
- Fix a 404 error when trying to edit a non-primary site comment for a multi-site install.
- Fix HTML encoding for name, email and comment columns in the control panel element index.
- Fix compatibility with Craft 4 and guest names showing `User`.
- Fix an error when importing nested commerce with Feed Me.
- Fix email notifications not sending via the queue when comments are made from a non-primary site
- Fix custom sources not filtering by `$ownerSectionId`. (thanks @jeroenlammerts).

## 2.0.5 - 2022-12-30

### Fixed
- Fix an error when sending email notifications.

## 2.0.4 - 2022-12-25

### Changed
- Improve dutch translations. (thanks @jeroenlammerts).

### Fixed
- Fixed PHP errors that could occur when executing GraphQL queries.

## 2.0.3 - 2022-10-12

### Fixed
- Fix an error when upvoting immediately after downvoting.
- Fix avatars not working for logged-in users.

## 2.0.2.1 - 2022-09-17

### Fixed
- Fix a fatal PHP error introduced in `2.0.2`.

## 2.0.2 - 2022-09-17

### Added
- Add support for setting ReCAPTCHA API keys via .env variables.

### Fixed
- Fix template path not resetting when calling `commentsInclude()`.
- Fix an error when trying to edit a comment from the element index.
- Fix element index arrow for comment elements.
- Fix element action for setting status.
- Fix lack of permission support for managing other user’s comments.
- Fix being unable to set `id`, `uid` or `userId` for GraphQL mutations.
- Fix an error running `resave` console commands.

## 2.0.1 - 2022-08-27

### Added
- Added missing English Translations.

### Fixed
- Fix an error when viewing comments with an avatar image.
- Fix formatting for comments element index.
- Fix lack of proper error when trying to edit an invalid comment in the control panel.
- Fix the CP edit URL for comments to now no longer include the site ID.
- Fix an error when importing comments via Feed Me in some instances.
- Fix an error when uninstalling.
- Fix being unable to view comments in the control panel.

## 2.0.0 - 2022-06-02

### Added
- Add resave console command for elements.
- Add checks for registering events for performance.
- Add `archiveTableIfExists()` to install migration.

### Changed
- Now requires PHP `8.0.2+`.
- Now requires Craft `4.0.0+`.
- Now requires Comments `1.9.2` in order to update from Craft 3.
- Rename service classes.
- Rename base plugin methods.

### Fixed
- Fix an error with GraphQL.
- Fix typing for `placeholderAvatar` plugin setting.
- Un-bold title for comments in comments index.
- Fix an error when permissions exist for a no-longer-available element group.
- Fix setting a parent comment not working for Feed Me, due to `setParent()` changes.

### Removed
- Removed `craft.comments.all()` and `craft.comments.form()`.
- Removed `Comment::trashUrl`, `Comment::flagUrl`, `Comment::downvoteUrl`, `Comment::upvoteUrl`.

## 1.9.6 - 2023-03-09

### Changed
- Update system message headings for some email notifications.

### Fixed
- Fix an issue when installing the plugin, and automatically disabled.
- Fix an incompatibility with [Emails](https://github.com/ryssbowh/craft-emails) plugin.

## 1.9.5 - 2023-02-22

### Changed
- Improve dutch translations. (thanks @jeroenlammerts).

### Fixed
- Fix email notifications not sending via the queue when comments are made from a non-primary site
- Fix custom sources not filtering by `$ownerSectionId`. (thanks @jeroenlammerts).

## 1.9.4 - 2022-09-17

### Added
- Add support for setting ReCAPTCHA API keys via .env variables.

### Fixed
- Fix template path not resetting when calling `commentsInclude()`.

## 1.9.3 - 2022-06-02

### Added
- Add `Minimum Score` plugin setting for reCAPTCHA.

### Fixed
- Fix JS render variables being way too large.
- Fix an error saving a comment when the current site can’t be determined.
- Fix replies not showing in the correct order (latest first).

## 1.9.2 - 2022-02-27

### Added
- Add “Use Queue for Notifications” plugin setting (disabled by default).

### Fixed
- Fix SQL errors when ordering comments via "Votes" or "Flagged" in the control panel.
- Fix an error when sorting comments by their "flagged" column in the control panel.
- Fix an error when including "flagged" as a column when viewing comments in the control panel.

## 1.9.1 - 2021-12-31

### Fixed
- Fix Feed Me importing not taking into account trashed owners.

## 1.9.0 - 2021-12-04

### Changed
- Now requires Craft 3.7.24+.

### Fixed
- Fix an incompatibility error with Craft 3.7.24+.

## 1.8.12 - 2021-12-04

### Added
- Add `settings.commentingAvailable()`, which will provide more detailed information on why commenting is not available on an element. (thanks @adrienne).
- Add support for importing nested child comments for Feed Me.

### Fixed
- Fix an error when "Enable Admin Notifications" was enabled, but no "Comment Administrators" were defined.

## 1.8.11 - 2021-10-30

### Changed
- Now requires Craft 3.6.0+

### Fixed
- Fix not fetching the correct site-specific element when passing in the `siteId` param to the `render()` function.
- Fix `siteId` param for comment form not respecting overridden value when setting via Twig.

## 1.8.10 - 2021-10-06

### Added
- Add some missing NL translations. (thanks @arifje).
- Add `comments/comments/get-js-variables` controller endpoint to fetch necessary variables for rendering JS. Useful for headless setups. (thanks @arifje).

### Fixed
- Fix an error when using GraphQL mutations and "Auto-close Comments" is enabled.

## 1.8.9 - 2021-09-27

### Added
- Add support for "GraphQL Authentication" for all authenticated user functions when using GraphQL.
- Add `emailKey` as a variable to the `comments_subscriber_notification_comment` and `comments_subscriber_notification_element` email template.
- Update subscriber notification email defaults for replies.

## 1.8.8 - 2021-09-18

### Added
- Add `./craft comments/base/set-structure` console command for fixing comments that have lost their original structure.

### Changed
- Update status colours to Craft standard.
- Ensure reply and edit forms generate unique IDs, when an `id` attribute is set on the DOM element for a comment. (thanks @adrienne).

### Fixed
- Fix `userAgent` column in comments not having their default set to `null`.
- Fix incompatibility with Blitz and CSRF token refreshing.
- Fix CSRF token being added to form submissions twice.
- Fix Craft 2 migration and `commentDate` error.
- Fix error when trying to send author notification emails for comments made on assets.
- Fix `showCustomFields` deprecation warning.

## 1.8.7 - 2021-05-30

### Added
- Add support for GraphQL mutations. (thanks @mattstein).

### Changed
- Update reply notifications disabled warning message.
- Remove `showCustomFields` config setting.

### Fixed
- Fix reply email notifications not working correctly, when comment moderation was enabled.
- Fix subscriber notification emails not being sent after a moderated comment was approved.
- Fix subscriber notification emails being sent for comments that require moderation.
- Fix admin notifications not sending when new comments are made.

## 1.8.6 - 2021-04-11

### Added
- Add `getUserVotes()` variable functions.

### Fixed
- Fix an error when editing a comment, for a comment from a deleted user.
- Fix “under review” text not being translated properly.
- Fix an error in `hasDownVoted()` and `hasUpVoted()`.

## 1.8.5 - 2021-03-20

### Fixed
- Fix all email notifications not being supplied with a `user` variable.
- Fix an error being thrown for subscriber email notifications for guests.
- Fix widget throwing an error when a commented-on element was deleted.

## 1.8.4 - 2021-02-19

### Fixed
- Fix an error when flagging a comment, “Enable Flagged Notifications” is checked and no admin emails are defined.

## 1.8.3 - 2021-02-13

### Fixed
- Fix JS error thrown when flags encountered an error.
- Remove flags and votes memoization due to ongoing issues.

## 1.8.2 - 2021-02-03

### Changed
- Update JS to not rely on `.cc-i-body` for message.
- Improve Flag and Vote queries for large amount of comments/votes/flags.

### Fixed
- Fix a recursion error when trying to send subscribe email notifications.
- Fix error with `comment.parent` not returning the correct element.
- Fix some unsupported emoji’s included in comment text throwing errors.

## 1.8.1 - 2021-01-19

### Fixed
- Fix comments’ field layout not being deleted when uninstalling the plugin.
- Fix field layout for comments form being deleted incorrectly.

## 1.8.0 - 2021-01-18

### Added
- Add Gravatar support to automatically fetch commenter avatars.
- Add comments widget to show summary of comments in the Dashboard.
- Add `votes` param to `orderBy` comment queries, allowing you to order comments by their total number of votes.
- Add `isFlagged` comment query param.
- Add `maxUserComments` plugin setting to control the maximum number of comments each user can add, for each owner element.
- Add `securityMatchExact` plugin setting to allow security keywords to be exact word matches.
- Add `notificationAdmins` plugin setting, allowing you to add emails for administrators to get email notifications on every comment.
- Add `templateEmail` plugin setting to provide your own template for email notifications.
- Add `maxReplyDepth` plugin setting to control how many levels of replies a comment can have - even disable replies altogether.
- Add `notificationAdmin` to provide a collection of emails for certainly admin-centric notifications.
- Add `notificationAdminEnabled` to notify nominated admins whenever a comment is made.
- Add `notificationFlaggedEnabled` to notify nominated admins whenever a comment is flagged.
- Add “Votes” column to comment index in control panel.
- Add “Flagged” column to comment index in control panel.
- Add native Feed Me support.
- Add custom field support for Feed Me importing.
- Add `commentsSiteInclude()` Twig function to allow template include resolution to site templates.
- Add `jsSettings` optional parameter to `craft.comments.render()` to supply JS with extra settings.
- Add `trashAction` and `trashActionMessage` to JS render variables.
- Add comment caching for parent comments.
- Add caching for avatars, to prevent fetching the same avatar multiple times.

### Changed
- Improved database query performance, lowering average queries by 30%.
- Replace class selectors with attributes for javascript. (thanks @jsunsawyer).
- Comments now requires Craft 3.5.8+.
- Memoize flags and votes for performance.

### Fixed
- Fix eager-loading comments more than 2 levels deep.
- Fix comment replies not appearing in the control panel when editing a comment, if the replies were trashed.
- Fix guest avatars not caching correctly for comment elements.
- Fix comment owner not being cached properly for comment elements.
- Fix missing `<p>` tags when editing a comment and closing a comment on the front-end.

### Removed
- Removed `showCustomFields` config setting.

## 1.7.5 - 2020-12-12

### Fixed
- Fix comments form layout not saving custom fields.

## 1.7.4 - 2020-12-11

### Fixed
- Ensure a field layout for comments is created when plugin settings are save in the control panel.
- Fix error when trying to check avatar existence on non-local volumes.
- Fix pending status icon when “Use shapes to represent statuses” was set to true.

## 1.7.3 - 2020-12-07

### Changed
- Comment queries via GraphQL are now no longer automatically included in the public schema.
- Update comments to only support being saved in a single site.

### Fixed
- Fix potential error thrown during migrations run via console commands.
- Fix error when a reply failed on a multi-site.

## 1.7.2.1 - 2020-11-24

### Fixed
- **Really** fix an issue where the field layout may not exist.

## 1.7.2 - 2020-11-24

### Fixed
- Fix an issue where the field layout may not exist.

## 1.7.1 - 2020-11-23

### Fixed
- Fix field layout for comments not getting created correctly for new installs.

## 1.7.0 - 2020-11-22

> {warning} If you are using any custom fields, you will need to re-order your fields. The comment textarea field is now content-managed, but added to the top of your form, instead of the bottom as is currently the case. Simply re-order your form fields in Settings > Comments Form after the update.

> {tip} If you are using custom templates, consider reading the new [Custom Templates](https://verbb.io/craft-plugins/comments/docs/template-guides/custom-templates) documentation. There are no breaking changes in this release, but you may find the new method of overriding template partials much less heavy-handed and modular to implement. You might be able to clean up your templates a little!

### Added
- The comment form now makes use of Craft's 3.5+ field layout designer.
- The comment textarea can now be moved freely in the comment form, and optionally un-required.
- Add `commentsInclude` to front-end templates, allowing for easier resolution to default or custom templates.
- Add ability to override only a single included template partial for custom templates, rather than overriding all. For example, you can override _just_ the comment form, or even just a custom field.
- Add `user` to GraphQL comment interface. (thanks @jaydensmith).
- Add `guestNotice` setting to define a notice when guest commenting is not allowed, and the user is a guest.
- Add control panel scenario for Comment elements, to allow front-end and control panel differentiation for validation.

### Changed
- Now requires Craft 3.5+.
- Improve query performance when using a placeholder avatar.
- Improve reliability of getting author’s avatars, adding checks if it exists.
- The reply and comments form are no longer shown when guest commenting is off, and the user is a guest.
- Update example templates.
- “Custom Fields” settings are now replaced by “Comments Form”.
- Provide better handling when custom templates cannot be found. Comments will now fallback to default templates if the custom template cannot be found.
- Front-end templates are now much more modular, allowing for greater flexibility with custom override templates. Hopefully this will help customising templates without having to main the entire set of front-end templates.

### Fixed
- Fix minor alignment issue with field layout designer in plugin settings.
- Fix asset fields and other multi-value fields not showing errors correctly on the front-end.
- Fix custom fields for comments not showing correctly for non-English sites.
- Fix minor sidebar layout issue when editing a comment.
- Fix comments not validating correctly when editing in the control panel.
- Ensure required custom fields are validated from the control panel and front-end for a comment.
- Ensure comments form is properly reset after submission (JS).

### Deprecated
- The `showCustomFields` is deprecated, as it no longer had any effect.

## 1.6.6 - 2020-08-14

### Added
- Add `craft.comments.getJsVariables()`, to allow manual initialisation of front-end JS.
- Add `loadInline` option to `craft.comments.renderJs()`, to disable immediate initialisation.
- Add notice in settings for Structure info regeneration.

## 1.6.5 - 2020-08-10

### Fixed
- Fix visual bug for Craft 3.5 in comments index.

## 1.6.4 - 2020-06-22

### Fixed
- Fix JS error when using `craft.comments.renderJs`. (thanks @john-henry).

## 1.6.3 - 2020-06-22

> {warning} If you are using `securityBlacklist` in your config files, please rename it to `securitySpamlist`.

### Added
- Add `craft.comments.renderCss` and `craft.comments.renderJs`.

### Changed
- Change 'securityBlacklist' to 'securitySpamlist'.

## 1.6.2 - 2020-06-15

### Fixed
- Fix JS error when deleting a comment from the front-end.

## 1.6.1 - 2020-06-04

### Fixed
- Fix error trying to comment when using recaptcha.

## 1.6.0 - 2020-05-30

> {warning} If you are using the default JS, but are using your own custom templates (or vice-versa), please update your custom templates to use POST forms for flagging, voting and deleting a comment. If you do not have custom templates, this does not apply to you.

### Changed
- Flagging, voting and deleting a comment is now triggered through POST forms instead of links. Please ensure you update any custom templates to reflect this change.
- Flagging, voting and deleting a comment can now only be done via POST requests.

### Fixed
- Fix CSRF issue with delete, flag and vote URLs.

### Deprecated
- `comment.trashUrl` is now deprecated. Use a POST form instead. See [docs](https://verbb.io/craft-plugins/comments/docs/developers/comment).
- `comment.flagUrl` is now deprecated. Use a POST form instead. See [docs](https://verbb.io/craft-plugins/comments/docs/developers/flag).
- `comment.upvoteUrl` is now deprecated. Use a POST form instead. See [docs](https://verbb.io/craft-plugins/comments/docs/developers/vote).
- `comment.downvoteUrl` is now deprecated. Use a POST form instead. See [docs](https://verbb.io/craft-plugins/comments/docs/developers/vote).

## 1.5.6 - 2020-05-29 [CRITICAL]

### Fixed
- Properly fix XSS vulnerability.
- Fix an error for PHP 7.4.

## 1.5.5 - 2020-05-28 [CRITICAL]

### Fixed
- Fix XSS issue for guest names containing potentially malicious values. Credit to Paweł Hałdrzyński [Limpid Security](https://limpidsecurity.pl).
- Fix XSS issue for asset volume names containing potentially malicious values. Credit to Paweł Hałdrzyński [Limpid Security](https://limpidsecurity.pl).
- Fix CSRF issue for trashing a comment. Credit to Paweł Hałdrzyński [Limpid Security](https://limpidsecurity.pl).

## 1.5.4 - 2020-05-19

### Fixed
- Improve `comments/base/resave-structure` by trying to find an existing comments structure

## 1.5.3 - 2020-05-18

### Fixed
- Fix some Ajax actions (vote, flag) not working in some instances.
- Fix `allowAnonymous` error, thrown when trying to comment.

## 1.5.2 - 2020-05-18

### Added
- Add `comments/base/resave-structure` console command.

## 1.5.1 - 2020-05-18

### Added
- Add read-only structure info to settings. Useful for debugging.

## 1.5.0 - 2020-05-15

### Added
- Add `showCustomFields` config settings. This is default to off, so as not to cause any breaking changes.
- Add support for basic Craft fields, automatically rendering HTML for some fields. see [custom fields](https://verbb.io/craft-plugins/comments/docs/template-guides/custom-fields).
- Add docs with regards to [custom fields](https://verbb.io/craft-plugins/comments/docs/template-guides/custom-fields).
- Fix uploading assets from the front-end. They now work.

### Changed
- Use `FormData` JS to serialise comment form data. Check your site's [browser compatibility](https://caniuse.com/#search=formdata). We think you'll be fine, unless you need to support IE9.

### Fixed
- Fix error when a commenter has no name.

## 1.4.1.1 - 2020-05-13

### Fixed
- Fix name/email fields appearing when `allowGuest` is off.

## 1.4.1 - 2020-05-13

### Fixed
- Fix name/email fields not appearing on templates when being required, but not shown.

## 1.4.0 - 2020-05-11

### Added
- Add `guestShowEmailName` config option.
- Add performance improvements, with an 70% reduction in the number of database queries.
- Add eager-loading for owner element, author element (and photo).
- Add eager-loading for comment structure. Only applicable for default templates.

### Changed
- Clarify Anonymous commenting to be Guest commenting.

### Deprecated
- Deprecated plugin setting `allowAnonymous`. Use `allowGuest`.
- Deprecated plugin setting `allowAnonymousVoting`. Use `allowGuestVoting`.
- Deprecated plugin setting `allowAnonymousFlagging`. Use `allowGuestFlagging`.

## 1.3.12 - 2020-04-16

### Fixed
- Fix logging error `Call to undefined method setFileLogging()`.

## 1.3.11 - 2020-04-15

### Changed
- File logging now checks if the overall Craft app uses file logging.
- Log files now only include `GET` and `POST` additional variables.

## 1.3.10 - 2020-04-06

### Fixed
- Fix error when sending subscribe notifications.
- Fix error when sending reply notifications.
- Fix errors with missing structure when moving environments with a project.yaml file.
- Add structure checks in project config rebuild.

## 1.3.9 - 2020-04-05

### Added
- Add `beforeSendSubscribeEmail` event.

### Changed
- Allow all notification events to have `isValid` set to prevent sending.

### Fixed
- Ensure plugin project config is removed when uninstalling.

## 1.3.8 - 2020-03-30

### Added
- Add `notificationSubscribeAuto` to allow user to auto-subscribe to all comments on an element.

### Fixed
- Fix wrong plural in german translation. (thanks @FabianWildgrube).
- Fix incorrect logic and recipient for moderator approved emails.

## 1.3.7 - 2020-03-14

### Added
- Add `hideVotingForThreshold`.

### Fixed
- Fix custom fields not saving in settings.
- Fix custom fields no appearing for GQL queries.
- Fix incorrect `getVotes()` function. Change to `getAllVotes()`.

## 1.3.6 - 2020-02-29

### Added
- Add votes, upvotes, downvotes and flags to GQL queries.
- Add support for anonymous flag/voting.

### Fixed
- Fix layout and error of replies table in the CP.
- Fix notification checking for two guest users.
- Ensure we check for moderation when sending reply notifications.
- Ensure reply/author notifications are sent when moderation approved.
- Fix lack of IE support for `:scope`, throwing JS errors.
- Fix SVG avatar placeholder.

## 1.3.5 - 2020-02-14

### Fixed
- Fix SQL error thrown in Postgres when viewing the comments index.

## 1.3.4 - 2020-02-11

### Fixed
- PHP error when installing via console.

## 1.3.3 - 2020-02-03

### Fixed
- Fix error when deleting fields, in some circumstances.

## 1.3.2 - 2020-02-02

### Fixed
- Fix comments not saving on multi-sites, in some circumstances.
- Fix error when posting a new comment.

## 1.3.1 - 2020-01-30

### Added
- Add support for custom fields on comments.

### Fixed
- Fix structure not being setup correctly when installing plugin.

## 1.3.0 - 2020-01-29

### Added
- Craft 3.4 compatibility.

## 1.2.2 - 2020-01-09

### Fixed
- Fix subscribe to singular comment notifications. (thanks @frank-rocketpark).

## 1.2.1 - 2020-01-07

### Fixed
- Fixed issue causing new comments to not be submitted.

## 1.2.0 - 2020-01-06

### Added
- Add GraphQL support. See [docs](https://verbb.io/craft-plugins/comments/docs/developers/graphql).
- Add ability to subscribe to comment threads, or individual comments.
- Add ability to save additional custom fields content to comments (when using custom templates). Just add your fields with `fields[myHandle]`.
- Allow passing of custom comment url with a comment submission.
- Add name of user to comment heading, when replying.
- Add dutch translation for notifications messages. (thanks @skoften).
- Add notification for "someone made a comment on element x". (thanks @skoften).
- Add notification for "someone replied to your comment". (thanks @skoften).
- Add `ownerSection` and `ownerSectionId` comment query params. See [docs](https://verbb.io/craft-plugins/comments/docs/getting-elements/comment-queries).
- Add `indexSidebarGroup` and `indexSidebarIndividualElements` config settings. See [docs](https://verbb.io/craft-plugins/comments/docs/get-started/configuration).
- The comments element index sidebar now groups comments made on entries into their sections.
- Add `defaultQueryStatus` to control default query status for comment element queries.
- Add moderator notifications. Includes two new moderator notification settings, and a user group to define who your moderators are.
- Add `EVENT_BEFORE_SEND_AUTHOR_EMAIL` event.
- Add `EVENT_BEFORE_SEND_REPLY_EMAIL` event.
- Add `EVENT_BEFORE_SEND_MODERATOR_EMAIL` event.
- Add `EVENT_BEFORE_SEND_MODERATOR_APPROVED_EMAIL` event.

### Changed
- Notifications will skip sending to the currently logged in user. (thanks @skoften).

### Fixed
- Fix being unable to edit the content of a comment in the CP.
- Fix project config using non-uid’s for structure and permissions.
- Fix incorrect date comparison for `autoCloseDays`.

## 1.1.10 - 2019-09-18

### Fixed
- Fix incorrect variables being passed to JS.

## 1.1.9 - 2019-08-31

### Added
- Added `guestRequireEmailName`, to control whether guests email and name should be required. True by default.
- Add some example no-JS templates.

### Fixed
- Fix lack of returning comment/flag/vote models when performing actions on them.

## 1.1.8 - 2019-08-06

### Added
- Update missing translations. (thanks @skoften).

### Fixed
- Improve security keyword checking. (thanks @skoften).
- Ensure actual comment content was being checked against security keywords. (thanks @skoften).
- Fix error when anonymous commenting was enabled.
- Fix error when deleting comment from CP.

## 1.1.7.1 - 2019-05-25

### Fixed
- Add debugging to email notifications.

## 1.1.7 - 2019-05-23

### Fixed
- Fix SQL error for Postgres when viewing comments in the CP.
- Update link for email messages.

## 1.1.6 - 2019-04-27 [CRITICAL]

### Fixed
- Fix comment-saving always assuming comments are from the current user.
- Fix lack of validation for editing a comment from another user.
- Fix JS bug where a user could act on another users’ comment from the front-end in some cases.

## 1.1.5 - 2019-04-24

### Added
- Add support for max length. (thanks @ilicmarko).

### Changed
- Prevent whitespace being submitted as comments. (thanks @ilicmarko).
- Clear form if comment or reply was successful. (thanks @ilicmarko).
- Comments from a deleted user now show as from '[Delete User]'.

### Fixed
- Fix error when showing a comment from a deleted user.

## 1.1.4 - 2019-04-21

### Changed
- Use Craft's date utilities for getting translatable time diff.
- Remove Carbon dependancy.

### Fixed
- Fix error with `sql_mode=only_full_group_by`.
- Fix error with auto close days enabled.

## 1.1.3 - 2019-04-07

### Added
- Add Dutch language file. (thanks @skoften).

### Changed
- Improve comments sidebar (Don’t include deleted elements, Add config limiter, Use group-by query).

## 1.1.2 - 2019-03-19

### Added
- Add override notice for settings fields.

### Changed
- Allow `render()` to override comments query properly.

### Fixed
- Fix commentDate not being set in some cases.

## 1.1.1 - 2019-03-02

### Fixed
- Fixed more migration cases from Craft 2.

## 1.1.0 - 2019-03-01

### Added
- Add Google reCAPTCHA v3 for better spam protection.
- Add better support for multi-site and the owner element (the commented-upon element).

### Fixed
- Fixed some migration cases from Craft 2.

## 1.0.7.1 - 2019-02-25

### Fixed
- Add more checks to migrations.

## 1.0.7 - 2019-02-24

### Fixed
- Add limit to comments index for large amounts of comments.
- Fix forcing the current time on any new comment’s `commentDate`.
- Add more checks to migrations.

## 1.0.6.3 - 2019-02-21

### Fixed
- Fix validation being triggered when comments re-saved through queue

## 1.0.6.2 - 2019-02-20

### Fixed
- Fix migration from 1.0.6 (again).

## 1.0.6.1 - 2019-02-20

### Fixed
- Fix migration from 1.0.6.

## 1.0.6 - 2019-02-20

### Added
- Add email/name to sort in the CP.
- Add searching for comment, name and email in the CP.

### Changed
- Template now produces `#cc-w-{{ elementId }}` as opposed to a random number. (thanks @skoften).

### Fixed
- Fix only being able to vote on a comment once.
- Fix only being able to flag a comment once.
- Fix missing `owner` query function.
- Refactor CP routes and fix “save and continue route”, fixing an error.
- Fix error in the CP when trying to refer to an element has been deleted.

## 1.0.5 - 2019-01-23

### Added
- Added support for Emoji's in comments.

### Fixed
- Fix incorrect commentDate column in flags and votes tables.
- Fix error thrown when author emails couldn’t be sent.
- Fix comment not being cleared once submitted (thanks @skoften).
- Fix error in the CP when trying to refer to an element has been deleted.

## 1.0.4 - 2018-11-06

### Fixed
- Fix SQL error when trying to order by `commentDate`.
- Fix error with multisite saving edit form (thanks @colinmeinke).

## 1.0.3 - 2018-10-25

### Fixed
- Improve comments index to show each commented-on element.
- Fix SQL bug in comments index.
- Fix error on settings for Craft Solo.
- Properly minify in-built JS.
- Refactor and improve translations in front-end JS.
- Fix not passing in siteId for front-end requests, meaning multisite wasn't working.
- Fix author photo not working (thanks @stevenvandemoortele).
- Added try/catch block to prevent server error (thanks @skoften).
- Fix template bug (thanks @stevenvandemoortele).

## 1.0.2 - 2018-09-17

### Fixed
- Fix missing element methods
- Fix missing elementId in query for `render()`
- Fix `commentDate` not being set after new comment is created (causing an error to be thrown)
- Add flag user feedback
- Fix migration for Craft 2 not renaming `comments` table

## 1.0.1 - 2018-08-26

### Changed
- Switch from `dateCreated` to `commentDate`
- Remove on-delete cascades for owner users and elements. If a user or owner element is deleted, their respective comments won't also be deleted.

### Fixed
- Ensure structure is cleaned up after uninstall
- Removed craft 2 plugin that stuck around (wha?)

## 1.0.0 - 2018-08-25

### Added
- Craft 3 release, major refactor and rewrite from the ground up.
- Brand new, single-line include via `craft.comments.render()` which renders comments and form. Includes front-end CSS and Ajax-driven vanilla JS and is designed to be a drop-in solution to add comments to your site. You can of course still override or replace all aspects of the front end resources.

### Changed
- `craft.comments.all()` has been deprecated. Use `craft.comments.fetch()` instead.
- `craft.comments.form()` has been deprecated. Use `craft.comments.render()` instead.
- Simplified templates - find them in `comments/src/templates/_special`.
- Countless bug fixes, and improvements!

## 0.4.9 - 2017-11-04

### Fixed
- Minor fix for sidebar icon.

## 0.4.8 - 2017-10-17

### Added
- Verbb marketing (new plugin icon, readme, etc).
- Add plugin settings variable.

### Changed
- Improved `onTrashComment` and `onBeforeTrashComment` events.
- Swap comment output macro for native `{% nav %}` tag - better supports element queries such as level.

## 0.4.7 - 2016-10-09

### Fixed
- Fixed template error for permissions settings for Craft Personal/Client versions.
- Fixed `EntryModel.owner` issue where checking for non-entry elements being commented on.

## 0.4.6 - 2016-09-23

### Added
- Added ability to disable spam checks.

### Fixed
- Fixed support for adding comments to non-entry elements.
- Fixed typo in edit comment controller action.

## 0.4.5 - 2016-09-02

### Added
- Added support to permanently delete comment from within the CP.
- Added user permissions to allow edit or trash of comments for other users.
- Added `canEdit()` and `canTrash()` method to Comment Model.

### Changed
- Changed current 'delete' terminology to 'trashed', which is technically more correct.
- `onBeforeDeleteComment` event changed to `onBeforeTrashComment`.
- `onDeleteComment` event changed to `onTrashComment`.
- `deleteActionUrl` template action is now `trashActionUrl`.
- `comments/delete` controller action is now `comments/trash`. Raises a deprecation notice.
- Commenting permissions now only support native Craft elements.

### Fixed
- Fixed case where another logged in user could edit/save/delete comments from another user.
- Fixed permissions errors when checking for elements.

## 0.4.4 - 2016-06-24

### Fixed
- Fixed issue with comments index showing comment id, not user name.
- Move Save Comment button above content on edit comment page (for consistent Craft behaviour).

## 0.4.3 - 2016-06-23

### Added
- Permissions to control when elements are comment-able.
- New fieldtype to provide element-specific control on commenting.
- Added support for [craft.spamguard](https://github.com/selvinortiz/craft.spamguard).

### Fixed
- Fixed error in comments element index - introduced in 0.4.2.

## 0.4.2 - 2016-04-02

### Added
- Added `element` attribute to CommentModel.
- Added `parent` attribute to CommentModel.
- Added `comment` attribute to FlagModel.
- Added `user` attribute to FlagModel.
- Added `comment` attribute to VoteModel.
- Added `user` attribute to VoteModel.

### Changed
- Code formatting.

## 0.4.1 - 2016-04-02

### Added
- Added `author` attribute to CommentModel.
- Added `isGuest()` method to CommentModel.
- Added email notifications for element authors and for other commenters when replying.

### Changed
- Comments are now a little tidier in the element index table.
- Filter via Status in control panel.

## 0.4.0 - 2016-03-16

### Added
- Craft 2.5+ support, including release feed and icons.
- Comments can now be edited through the front-end.
- Added support for querying comments via votes
- Added `onBeforeSaveComment` hook.
- Added `onSaveComment` hook.
- Added `onBeforeDeleteComment` hook.
- Added `onDeleteComment` hook.
- Added `onBeforeFlagComment` hook.
- Added `onFlagComment` hook.
- Added `onBeforeVoteComment` hook.
- Added `onVoteComment` hook.

### Changed
- Reorganise settings pages - separate flag/voting.
- Flagging comments and voting can be enabled/disabled altogether.
- Comments now require moderation by default.
- Lots of refactoring and reorganising.
- Removed Comments fieldtype.
- Comments are shown in hierarchical structure when in control panel.
- Full ajax and non ajax support for endpoints.
- Renamed `comments/add` to `comments/save`.
- Simplified and improved templates for single template tag.
- Simplified example code for ajax and non ajax handling.
- Comment forms handle validation properly, actual error messages and remembers text on validation.

### Fixed
- Fixed `comments/edit` endpoint to include validation/security.

## 0.3.8 - 2015-12-31

- Fixes for field settings messing things up. **Notice** The Comments fieldtype will soon be removed in favour of centralized permissions.
- Other bugfixes and improvements.
- Ensure works well on Craft Client/Craft Personal.

## 0.3.7 - 2015-12-31

- Added the ability to get total comments per element id using `{{ craft.comments.total(elementId) }}`.

## 0.3.6 - 2015-12-31

- Added security measures. You can now provide values to check against _all_ attributes of a comment and action accordingly. Comments can be marked as pending, spam, or simply not allowed to be submitted. See [Security](https://github.com/verbb/comments/wiki/Security)
- Support sorting comments by votes.
- Added optional flood-control settings. Enforces minimum time to wait between posts. Works for anonymous and logged-in users.

## 0.3.5 - 2015-12-31

- Added Schema Tags to templates (see [#19](https://github.com/verbb/comments/issues/19)).

## 0.3.4 - 2015-12-31

- Added threshold for downvotes - if over specified limit, `isPoorlyRated` will be true.
- Comments can be set to auto-close after a defined amount of days since the elements creation.

## 0.3.3 - 2015-12-31

- Altered settings pane - now with multiple tabs.
- Updated permissions UI.
- Comments can be closed, disabling editing, deleting and replies. Accessible through `isClosed`.

## 0.3.2 - 2015-12-31

- Added basic sharing comment options. Provides permalink, Twitter and Facebook sharing.

## 0.3.1 - 2015-12-31

- Organise examples seperately. Better testing locally (symlinks).
- Added standard, non-Ajax example.
- Cleanup Ajax example - refactor.
- Checked all routes perform either via Ajax, or standard POST.

## 0.3.0 - 2015-12-31

- Added edit/delete (trashing) for users. Anonymous users can't do either.
- Added new set of templates for different comment statuses, allowing different templates for pending, approved, trashed and spam comments.
- Cleaned up comments UI to include dropdown options. Better user-handling.
- Alter Ajax example, ajax for voting, flagging, editing, deleting.
- Fixed, users could vote on their own comments.
- Fixed, remove voting arrows when unable to vote.
- Added `canVote`, `canUpVote`, `canDownVote` variables for better handling in templates. Checks are also done server-side.
- Some serious spelling mistakes for voting functions :)
- Added back `voteCount`.

## 0.2.1 - 2015-12-31

- Seperated plugin settings to its own 'real' tab. Bad UX being directed off to plugin settings, then being redirected to plugins screen.
- Added Permissions to control elements (and element types) comments are allowed to be made on. More convenient/centralised that custom field for each element.

## 0.2.0 - 2015-12-31

- Preserve comment formatting. Changed comment field to textarea in templates.
- Comments have access to objects for [flags](https://github.com/verbb/comments/wiki/Comment-ElementType#flags) and [votes](https://github.com/verbb/comments/wiki/Comment-ElementType#votes). Removed flagCount and votesCount in favour of using `length` Twig filter.

## 0.1.2 - 2015-12-31

- Added support for comments to be made on any element type (entries, users, assets, etc).

## 0.1.1 - 2015-12-31

- Added support for voting on comments.
- Added support for flagging inappropriate comments.
- After set amount of flags made against a comment, the 'isFlagged' property on the comment is true. Configurable through settings.

## 0.1.0 - 2015-12-31

- Initial beta release.