Aims Infosoft LMS

Aims Infosoft LMS turns WordPress into a paid-course platform:

• Course catalog and curriculum builder (sections and lessons)
• Secure, per-user video and PDF lesson delivery
• Sequential lesson unlocking with per-student progress tracking
• Checkout with Stripe, PayPal, and Razorpay
• Order history and downloadable invoices
• Auto-generated, verifiable completion certificates
• Student accounts with login, registration, and a My Account dashboard

Payments Stripe, PayPal, and Razorpay are supported for one-time course purchases. Configure API keys and webhook secrets under Aims Infosoft LMS → Settings → Payments. Certificates Students can download a certificate once a course reaches 100% completion. Every issued certificate gets a unique, stored certificate ID that can be checked at /?aimslms_verify_certificate=1&certificate_id=YOUR-ID.

1.0.0

• Initial release: course catalog and curriculum builder, secure video/PDF lesson delivery, sequential progress tracking, Stripe/PayPal/Razorpay checkout, order history and invoices, student accounts, and downloadable completion certificates (3 selectable designs).
• Security: Stripe webhook signatures are verified; secure lesson file links expire; CSRF nonce checks on bulk order/student admin actions; the manual cron-reconciliation endpoint is capability-gated; a duplicate, unauthenticated PayPal cancel-order handler was removed in favor of the existing ownership-checked one; the secure lesson-file download path is resolved and verified against the uploads directory; nonce and login checks were added to the admin chart-data and profile-update endpoints.
• Performance: PHP sessions are only started for the checkout flow and related AJAX/redirect endpoints, not on every page load, so full-page caching isn't bypassed site-wide.
• Discloses all third-party/external service usage (Stripe, PayPal, Razorpay, Frankfurter, Gravatar) in an "External services" section below.
• Certificates get a real, unique, stored certificate ID with a public verification page.
• Only the My Account and Courses pages are added to site navigation on activation; other auto-created pages remain accessible by URL but aren't linked in menus.
• Deactivating (or deleting) the plugin shows a "plugin is not available" notice on its pages instead of a broken shortcode; reactivating restores the original content. No data is deleted.
• General front-end visual polish (spacing, typography, responsiveness) across course, lesson, checkout, dashboard, and auth pages.
• Consolidated all function, class, define, option, post type, and shortcode names onto a single unique aimslms_/AIMSLMS_ prefix, replacing the previous inconsistent naming, to avoid any conflicts with other plugins.
• The admin menu no longer uses a fixed position, so it no longer competes with core WordPress menu items for placement.
• Replaced hardcoded <link>/<script> tags on the secure PDF viewer and certificate verification pages with proper wp_enqueue_style()/wp_enqueue_script() calls.
• Removed non-essential development files (CI configs, test suites, changelogs, editor configs) from the bundled third-party libraries.
• Fixed a bug that could prevent the bundled payment/PDF libraries from loading correctly.
• Fixed the Certificate Settings page's assets (styles/scripts) not loading due to an incorrect internal reference.
• Redesigned the Settings page, Certificate Settings page, and course editor's "Course Settings" panel for visual consistency with the rest of the admin UI.
• Fixed the front-end "Profile Updated" confirmation popup rendering with broken spacing/layout.