MyLiveChat - Live Chat Plugin for WordPress

MyLiveChat adds a live chat widget to your WordPress site. Visitors click the chat button and reach you directly; you answer from a browser, desktop app or mobile app. The plugin stores your MyLiveChat Site ID and outputs the chat code on your pages. Chat itself runs on MyLiveChat's servers, so there is nothing to host and nothing to keep patched. What you get

• Live chat on every page, or only the pages you choose
• Visitor monitoring - see who is on the site, which page, and where they came from
• Proactive chat invitations by page, time on page or scroll depth
• An optional AI assistant trained on your own content, with handoff to a human
• Transcripts and offline messages for anything that arrives out of hours

Pricing One agent is free forever, with unlimited chats and unlimited websites. Paid plans start at $15 per month and add seats, remove the "Powered by MyLiveChat" badge, and allow a custom chat icon and header. The AI assistant is an optional add-on. External service This plugin is a client for the MyLiveChat hosted service at https://www.mylivechat.com. Activating the widget loads a script from mylivechat.com and, once a chat starts, from the MyLiveChat subdomain assigned to your account. Chat messages and the visitor context shown to your agents are processed by that service.

• Terms of service: https://www.mylivechat.com/terms.aspx
• Privacy policy: https://www.mylivechat.com/privacy.aspx

An account is required. You can create one from the plugin's settings screen or at https://www.mylivechat.com/register.aspx

1. Install the plugin through the WordPress Plugins screen, or upload the my-live-chat-for-wp folder to /wp-content/plugins/.
2. Activate the plugin through the Plugins menu.
3. Open the MyLiveChat menu in the WordPress admin.
4. Enter your MyLiveChat Site ID, or create an account from that screen.
5. Choose a display type. The default floating Chat Widget suits most sites.

The chat button appears on your site as soon as the Site ID is saved. If you use a caching or optimisation plugin, purge the cache after saving.

2.1.5

• Fixes a fatal error that made the plugin unusable on PHP 8. Version 2.1.4 registered the email-confirmation reminder against admin_notices but never shipped the method it pointed at; the 2.1.4 rewrite of the settings screen removed the method and left the registration behind. 2.1.2 and 2.1.3 are not affected -- both were checked on PHP 8.2 and neither raises the error. On PHP 7 an invalid callback was only a warning, so the reminder simply never appeared; on PHP 8 it raises a TypeError, and because admin_notices runs on every admin page the whole WordPress dashboard showed "There has been a critical error on this website". If you installed the plugin and your admin went blank, this was why -- updating fixes it, and nothing on your site or your MyLiveChat account was affected.
• The reminder described in 2.1.3 works again: administrators see it on admin pages until the account email is confirmed, and it can be dismissed.

2.1.4

• The settings screen is now fully translatable. Every visible string goes through the text domain and a languages/my-live-chat-for-wp.pot template ships with the plugin, so it can be localised the way the chat widget already is.
• Removed the inline onclick attributes and the inline script that fixed up the two dropdowns after the page rendered. The selected option is now marked server-side, so there is no flash of the wrong value and the screen works under a Content Security Policy that disallows inline script.
• Accessibility: the settings table used td scope="row" for its row headers, where scope has no effect. They are th scope="row" now, so screen readers announce the label with each field.

2.1.3

• New accounts created from the settings screen are inactive until the emailed link is clicked, but the chat widget goes live immediately -- so visitors could start chats that nobody was able to answer, with only a one-line hint on a screen the admin had already left. A reminder now appears on every admin page until the email is confirmed, explaining what is and is not working and how to get a fresh link. It is dismissible, and only administrators see it.

2.1.2

• Fixed: MyLiveChatAdmin shared its singleton storage with its parent class, so whichever ran first decided the type both returned. Any request that touched the admin and front-end paths together could get the wrong object back.
• Added a "Settings" link to the plugin's row on the Plugins screen. The previous attempt was registered against the global plugin_action_links filter, which would have added the link to every other plugin's row, and had been left disabled; it now uses the per-plugin hook.
• Added uninstall cleanup, so deleting the plugin removes its six options instead of leaving them in the database forever. Multisite deletes are handled per site.
• Fixed: the MYLIVECHAT_VERSION constant still said 2.1.1 while the plugin header said 2.1.2. It is used to bust the cache on the admin CSS and JavaScript, so an upgrade could leave stale assets loaded.
• Output escaping is now applied at every point of use rather than when the value is assigned, so the escaping is visible where the output happens.
• Added the missing text domain to a translatable string, and a guard around a superglobal index read.
• Documented why the two request reads on the settings screen need no nonce: they only choose which confirmation notice to display.
• The plugin header name now matches the name in readme.txt, so the two can no longer drift.

2.1.1

• Request data is now unslashed and passed through sanitize_text_field() before the existing digit filter and whitelists are applied.
• The Site ID is escaped on output as well as being restricted to digits on input.
• Removed a debug-only call that changed PHP's global error_reporting() level.
• Admin permission messages are now translatable.
• Minimum supported PHP raised to 7.4.

2.1.0

• Security: the settings-save and settings-reset handlers now require the manage_options capability and a valid nonce. Previously either action could be triggered by any authenticated user, or cross-site against an administrator.
• Security: the admin menu is registered against the manage_options capability instead of the administrator role name.
• Hardening: the Site ID is restricted to digits and length-capped; display type and position are validated against a fixed list before they are stored.
• Hardening: added direct-access guards so plugin files cannot execute when requested directly.
• Housekeeping: completed the plugin header (License, Requires at least, Requires PHP, Text Domain), moved all URLs to https, and rewrote this readme.

2.0.4

• New installations default to the visible floating Chat Widget so a successful setup never appears blank.
• Account creation is single-flight and preserves the exact password entered while explaining the no-spaces policy.

2.0.3

• Prevented duplicate Chat Widget bootstraps, made asset URLs work when the plugin folder is renamed, and moved front-end CSS into the WordPress enqueue system.

2.0.2

• Restored the settings-page signup controls, kept signup passwords out of URLs, and explained email verification after account creation.

2.0.1

• Improved readme. Added the support forum link.

2.0.0

• In-page chat window UI. Web and Mac agent consoles.

1.0.2

• Rewrote the plugin code.

1.0.0

• First release.