MiraQlum Image Optimizer

MiraQlum Image Optimizer was created to remove a recurring manual step from real WordPress work: preparing every incoming image before upload. Site owners, maintainers and agencies often receive mixed image files from phones, cameras, clients or suppliers. Preparing them for the web can mean resizing, converting formats, removing privacy metadata, normalizing color handling, cleaning up filenames and optionally preparing ALT text. Repeating those steps image by image costs time and is easy to do inconsistently. The plugin turns that repetitive preparation into a local, automatic workflow at upload time. Its value is not only compression: it is designed to make new uploads consistently web-ready while reducing manual preparation. The approach is intentionally narrow:

• It processes only new uploads and does not bulk-modify the existing Media Library.
• It does not require a cloud optimization service, CDN or external image-processing API for its core workflow.
• It is verification-first: generated output is checked for real file type, privacy metadata state and sRGB state where applicable.
• It is fail-closed: when a safe result cannot be verified, the plugin does not silently treat the operation as successful.
• It keeps the workflow inside WordPress instead of requiring a chain of separate converters, metadata tools and image-preparation steps. Main features:
• JPG/JPEG -> WebP.
• JFIF validation and conversion -> WebP.
• HEIC/HEIF and Canon HIF -> WebP where the environment can decode them.
• TIFF/TIF -> WebP where the WordPress image editor supports the format.
• PNG: ask / keep PNG / convert to WebP.
• PNG size guard: if WebP is not smaller, a freshly re-encoded PNG is kept instead.
• WebP re-encoding and optimization.
• Static GIF -> WebP; animated GIFs are left unchanged to preserve animation.
• Configurable WebP quality and maximum image dimension.
• Configurable filename suffix; on new installations the default is derived from the site domain.
• Optional ALT prefill from the final normalized filename, only when ALT is empty, with generic camera/screenshot names skipped.
• EXIF/GPS/IPTC/XMP and text/privacy metadata removal with output verification.
• Mandatory sRGB normalization. With Imagick + LCMS the output is converted to the bundled standard sRGB ICC profile and only that known profile is re-embedded.
• Real MIME validation plus input-file and pixel-count safety limits.
• Media Library processing report so site administrators can see what happened to an upload.

0.6.5

• WordPress.org manual-review packaging fix: removed the internal CHECKSUMS.sha256 manifest from the production plugin archive because it is not a permitted/necessary runtime plugin file.
• No image-processing, MIME, privacy, sRGB, ALT, PNG, parser, admin, security, or translation behavior changed.

0.6.4

• Aligned translation loading with the WordPress.org language-pack system: removed the explicit load_plugin_textdomain() loader, custom locale-family fallback and bundled PO/MO/POT files from the directory release package.
• Clarified the plugin's purpose: saving time by turning repetitive pre-upload image preparation into a local, verification-first upload-time workflow.
• Clarified the distinct scope: new uploads only, no bulk Media Library rewrite, no external optimization service requirement, and fail-closed output verification.
• Removed the separate DISCLAIMER.md production file; the essential legal/liability notice remains in the plugin admin and readme, eliminating the previous Plugin Check unexpected-markdown warning.
• Image-processing, MIME, privacy, sRGB, ALT, PNG decision, parser and safety-limit logic are unchanged.

0.6.3

• WordPress.org submission metadata fix: removed the duplicate Plugin URI header because it was identical to the Author URI.
• Author URI remains https://miraqlum.com. No image-processing, security, privacy, sRGB, ALT, PNG, or admin behavior changed.

0.6.2

• Fixed WebP privacy verification so valid RIFF/WebP files end cleanly at the declared RIFF boundary instead of being misclassified as parser failures.
• Added strict RIFF declared-size validation while preserving fail-closed handling of truncated, oversized, or trailing-data WebP containers.
• This restores JPG/JPEG, JFIF and PNG-to-WebP uploads that share the WebP verification path.
• Clarified the interactive PNG choice text: convert to WebP vs keep PNG.
• No changes to MIME allowlists, privacy policy, sRGB normalization, ALT behavior, admin appearance, or PNG non-interactive fallback.

0.6.1

• Fix the interactive PNG decision in WordPress Plupload-based media uploaders, including the Media Library grid and Media > Add New, by using Plupload pre-initialization hooks instead of patching a non-existent prototype method.
• Preserve the existing safe fallback: upload paths without an interactive decision keep PNG as PNG.
• No changes to MIME validation, privacy cleanup, sRGB normalization, ALT prefill, image conversion, size guard, or admin appearance.

0.6.0

• WordPress.org preparation release with no intended image-processing or security-model behavior changes.
• English source strings for WordPress.org/GlotPress compatibility; bundled Hungarian, German and Slovak translations preserved.
• English WordPress.org readme and tag list reduced to five entries.
• Added translator comments for placeholder strings and output-point escaping for reusable status labels.
• Documented intentional bounded streaming parser filesystem exceptions for Plugin Check/PHPCS.
• Internal project documentation is distributed separately from the WordPress.org plugin ZIP.

0.5.0

• MiraQlum admin branding: logo, current version, author Márkus Péter and clickable miraqlum.com link.
• Complete bundled Hungarian, English, German and Slovak PO/MO translations with locale-family fallback.
• Domain-derived default filename suffix on new installations.
• Admin legal/liability notice without a mandatory checkbox plus multilingual DISCLAIMER.md.
• Settings and MiraQlum.com links in the plugin row.
• The 0.4.1 image-processing and security logic remained unchanged.

0.4.1

• WordPress gettext/i18n preparation and translatable admin/error messages.
• /languages domain path and translation template.
• JavaScript PNG prompts receive translated strings from PHP.
• Improved ALT heuristics for camera filenames such as DSC00001 and IMG1234.
• Screenshot-style filenames are skipped for automatic ALT prefill.
• Binary WebP/PNG/JPEG parser hardening with bounded payload reads, remaining-file checks and fail-closed behavior for malformed/truncated chunks.
• Versioned external release ZIP while keeping the internal plugin slug/folder unchanged.

0.4.0

• Optional ALT prefill from the final filename, enabled by default.
• Existing ALT text is never overwritten.
• File extension, configured suffix and WordPress uniqueness number after the suffix are excluded from ALT text.
• Generic camera and screenshot filenames are skipped.
• Media Library optimization report includes ALT-prefill status.

0.3.0

• Mandatory sRGB-normalization layer.
• Bundled known sRGB ICC profile.
• Profile-based sRGB conversion with Imagick + LCMS and safe ICC re-embedding.
• Fail-closed behavior for non-sRGB/unknown ICC input on GD-only environments.
• LCMS environment status in admin.
• Output report includes sRGB-normalization and standard sRGB ICC status.
• Binary ICC verification for WebP, PNG and JPEG output.
• Explicit Canon .HIF support as a HEIF still-image extension.

0.2.0

• Author URI and Plugin URI added.
• Processing restricted to new uploads; global Core image filters removed.
• Output metadata verification for EXIF/XMP/IPTC/text blocks.
• Verified privacy report in Media Library.
• ICC/sRGB color-profile status reporting.
• TIFF/TIF -> WebP support.
• PNG -> WebP size-increase guard.
• HEIC source companion cleanup restricted to attachments processed by this plugin.
• Same-format re-encoding filename handling fixed.
• WebP quality explanation clarified.

0.1.0

• Initial development release.