Encoder / Decoder
New encodings

Selective URL Encode – only encodes characters that typically break SQLi payloads (' " < > and similar), leaving the rest readable
Triple URL Encode – extra encoding layer for stricter WAFs
SQL CHAR (hex) – CHAR(0x41,0x42,…)
SQL CONCAT(CHAR…) – MySQL-style reconstruction: CONCAT(CHAR(97),CHAR(98))
Hex (0xAA,0xBB) – comma-separated hex bytes
Fullwidth Unicode – e.g. SELECT → ＳＥＬＥＣＴ (common WAF bypass)
JWT Decode – proper header / payload / signature view as formatted JSON

UX

Live preview – encode/decode updates as you type (toggleable)
Swap (⇅) – move Output ↔ Input for easy chaining
2-step chain – optional second encoding stage (e.g. URL → Base64 in one go)
→ Payload / → URL / → Body – push the result straight into the tester fields
Clear button and status line (length / errors)
Encode-only types disable Decode (and vice versa for JWT)
Grouped type list (URL, Base64, Hex, SQL, Unicode, Other)

Reliability

Correct UTF-8 handling for Base64 (no more broken non-ASCII)
More tolerant hex/binary parsers (spaces, commas, 0x prefixes)
SQL CHAR() / CONCAT values can be decoded back to text
Clearer error messages instead of silent failures

Languages

Added Français (fr), Português (pt), and 日本語 (ja)
Full UI translations for all new encoder strings
Language dropdown order: English · Deutsch · Español · Français · Português · Русский · 日本語 · 中文
Default remains English