OrderKrab for WooCommerce

সলনি-পঞ্জী

1.2.6

• The API Base URL field on the Connection tab is now read-only by default. The default production endpoint (https://api.orderkrab.com) is shown but cannot be edited through the normal UI, protecting store owners from accidentally pointing the plugin at a different host.

1.2.5

• Added an orientation card and prominent “Open OrderKrab admin” button at the top of the Connection tab so store owners can reach the OrderKrab dashboard (admin.orderkrab.com) where fulfillment is actually managed.

1.2.4

• Fixed: “Connect to OrderKrab” still failed in 1.2.3 because wc_rest_generate_keys() is not actually a public WooCommerce function in all installations. The plugin now falls back to inserting the WooCommerce REST API key row directly when WooCommerce’s helper is unavailable, mirroring how WC’s own admin UI generates keys internally.
• The fallback no longer introspects the WooCommerce API keys table with SHOW COLUMNS — it writes only the core columns and lets the database default any optional fields.

1.2.3

• Fixed: “WooCommerce REST helper unavailable” error when clicking Connect to OrderKrab. The plugin now loads wc-rest-functions.php on demand via WooCommerce’s own WC()->plugin_path() getter (or WC_ABSPATH as a fallback). WooCommerce only auto-includes this file during REST API requests, not on every admin request, so a manual require_once is needed before calling wc_rest_generate_keys() from an admin context.

1.2.2

• Removed code that filtered another plugin’s admin notices, per WordPress.org Guideline 11.
• Added an uninstall.php handler that removes the integration user, the WooCommerce REST API key row, and all plugin options when the plugin is deleted.
• Added a per-IP transient rate limit to the public /orderkrab/v1/shipping-points REST endpoint to protect against abuse of the merchant’s upstream API.
• Replaced inline file_get_contents() SVG output in the parcel locker search with <img> tags pointing at the bundled asset URLs, in line with WordPress’s escape-on-output rule.
• Wrapper, style, and method-id attributes in the parcel locker search are now built and escaped at the point of output rather than passed through pre-baked attribute strings.
• Removed the manual WooCommerce REST API key fallback (and its SHOW COLUMNS introspection queries). With WooCommerce now declared as a hard dependency, wc_rest_generate_keys() is always available.
• Removed the diagnostic error_log() call that ran when WooCommerce REST helpers were unavailable.
• Excluded screenshots from the production ZIP; they live in the WordPress.org /assets/ SVN folder instead.

1.2.1

• Declared WooCommerce as a formal plugin dependency via the Requires Plugins header.
• Removed an unreliable hardcoded fallback to WP_PLUGIN_DIR . 'woocommerce/' when locating WooCommerce REST helper files; the plugin now relies on WooCommerce’s own getters and WC_ABSPATH constant.
• Renamed the main plugin file to match the plugin slug (orderkrab-for-woocommerce.php).
• Excluded the development-only wp-stubs.php shim from the published build.

1.2.0

• Activated the batch order sync (hourly reconciliation of pending/on-hold/processing orders).
• Refactored admin assets to use wp_enqueue_style / wp_enqueue_script / wp_add_inline_style / wp_localize_script instead of inline <style> and <script> blocks.
• Fixed: API access tokens are now preserved verbatim instead of being passed through sanitize_text_field(), which could silently corrupt valid tokens.
• Modernized register_setting() registration with explicit type and sanitize_callback keys.
• Removed the call to load_plugin_textdomain(). WordPress automatically loads translations for plugins hosted in the directory since WordPress 4.6.
• Added defined( 'ABSPATH' ) guard to template files that execute code on inclusion.
• Removed the self-hosted plugin updater. Updates are now delivered through the WordPress.org plugin directory.
• Removed the test-weight-logic.php development test harness from the published plugin.

1.1.5

• Previous internally distributed release.