BuddyPilot Withdrawal (Easy Returns)

Changelog

1.0.13

• Feature: Operators can now close a declaration as “Reject all items” or “Partial resolution” directly from the declaration detail page. Previously only full acceptance was available from that screen.
• Feature: Partial resolution mode allows a per-item accept/reject decision with a mandatory rejection reason for each rejected item, so the customer receives an itemised outcome rather than a single blanket decision.
• Feature: Rejection and partial resolution emails now include the EU ODR (Online Dispute Resolution) platform link (ec.europa.eu/consumers/odr) as required for cross-border dispute notifications under Article 11a.
• Feature: The customer-facing withdrawal form now shows per-item resolution badges for fully-resolved declarations: accepted items display a confirmation badge, rejected items display the rejection reason and an ODR platform link. Previously the form showed a generic “order not eligible” message.
• Improved: Reopening a declaration now resets the resolution type and operator note to null, so the operator starts with a clean slate when correcting an erroneous decision.
• Security: Financial snapshot fields in the declaration record (item total, subtotal, tax) are immutable; they cannot be overwritten by POST manipulation during the resolution step.
• Security: Resolution type is validated against a strict server-side whitelist (accepted / rejected / partial); arbitrary values are rejected before reaching the database.
• Security: Already-closed declarations reject stale resolution attempts with an explicit error, preventing accidental overwrites in concurrent operator sessions.

1.0.12

• Fixed: Article 16(m) consent checkbox was not displayed at checkout on stores using WooCommerce 8.6 or later with a classic shortcode-based checkout (e.g. Blocksy theme). The plugin now correctly detects whether the block checkout is in use before routing consent collection through the Additional Checkout Fields API.
• Improved: Guest withdrawal session is now time-limited to 15 minutes after clicking the magic link, reducing the window in which a shared or inactive browser session could be misused.
• Improved: Magic link redemption endpoint now applies rate limiting per order per IP, consistent with the email verification endpoint.
• Improved: Declaration detail and status toggle in the admin panel now verify that the current user has access to the linked order, providing correct access control on multi-vendor setups.
• Improved: Operator-customised consent label text is sanitised when saved, so stored option value is always clean HTML.
• Improved: Plugin no longer collects or stores the browser user-agent string with withdrawal declarations. The field served no active purpose and its removal reduces the personal data footprint. Existing installations will have the column dropped automatically on first load after updating (no data loss; the legal declaration record is preserved in full).

1.0.11

• Reparatie: Pluginemailklassregistratie is nu geïsoleerd per klasse. Een constructorfout in één klasse verspreidt zich niet meer in de e-mailverzending van WooCommerce en blokkeert niet langer alle transactionele e-mails van WooCommerce (nieuwe bestelling, klantverwerking, enz.).

1.0.10

• Fixed: Attempting to bulk-change orders in withdrawal status to Completed or Processing now triggers an admin notice informing the operator how many orders were skipped because the status change is not permitted for them, and that those orders must be handled individually.

1.0.9

• Feature: Guest verification form now accepts custom order numbers from third-party renumbering plugins (e.g. WebToffee Advanced Order Numbers, Custom Order Numbers for WooCommerce by Tyche Softwares). Guests can enter the formatted number shown in their confirmation email instead of the internal numeric order ID.
• Feature: Order number input on the guest verification form no longer forces a numeric-only keyboard on mobile devices, allowing guests to type prefixed order numbers such as ORD-2024-1042.
• Security: Input length on the guest verification form is now capped before order resolution, preventing crafted requests from triggering full-table database scans on stores with custom order number plugins installed.

1.0.8

• Feature: Withdrawal information page is now created as native WordPress blocks, allowing the operator to freely edit the legal wording directly in the block editor.
• Feature: New [buddypilot_withdrawal_info_block] shortcode renders the dynamic sections (trader contact details, return address, CTA button) independently so they always reflect current settings, even after manual edits to the surrounding text.
• Feature: New “Overwrite information page content” button in WooCommerce > Settings > Withdrawal > Customer refreshes the page with the latest model notice wording at any time.
• Fixed: Orders imported via the WooCommerce REST API (e.g. BaseLinker) were being re-imported in a loop because the plugin was writing unnecessary consent meta to every new order. The plugin no longer writes any meta to API-created orders that contain no digital items.

1.0.7

• Improved: Delivery tracking now uses a dedicated database table instead of order meta, preventing third-party order-sync integrations (e.g. BaseLinker) from re-importing orders on every delivery status update.
• Improved: Confirmation screen now reads the configured withdrawal period dynamically instead of using a hardcoded value.
• Improved: Rate limiting is now handled with a single atomic database operation.
• Improved: Reduced database queries on the withdrawals list page.
• Fixed: Several coding standards issues and minor security hardening.

1.0.6

• Feature: guest (non-logged-in) customers can now submit a withdrawal declaration directly from a dedicated form page. After entering their order number and billing email, a secure one-time magic-link is sent to the billing address; clicking it opens the full interactive withdrawal form with no account required.
• Functie: nieuwe shortcode [buddypilot_withdrawal_guest_form] voor de gastherroepingsformulierpagina. De pagina en shortcode kunnen met een enkele klik worden gemaakt vanuit WooCommerce > Instellingen > Herroeping > Klant.
• Feature: [buddypilot_withdrawal_information] shortcode now shows an optional “Submit withdrawal form online” call-to-action button linking to the guest form page when the form page is configured. Existing information pages are not modified.
• Feature: new “Withdrawal form access link (guest)” transactional email containing the magic-link; configurable under WooCommerce > Settings > Emails.

1.0.5

• Plugin renamed to BuddyPilot Withdrawal (Easy Returns) for better discoverability.
• Volledige vertalingen toegevoegd voor alle 24 officiële EU-talen: bg, cs, da, de (de_DE, de_AT, de_CH), el, es, et, fi, fr (fr_FR, fr_BE, fr_CH), ga, hr, hu, it, lt, lv, mt, nl (nl_NL, nl_BE), pl, pt, ro, sk, sl, sv.
• Vertaalkwaliteit: alle 24 EU-taalbestanden gecontroleerd over drie ronden; juridische terminologie geverifieerd aan officiële nationale gazetten (EU-richtlijn 2011/83/EU Bijlage I), diakritische markeringen hersteld, formeel register overal afgedwongen, meervoudige vormen gecorrigeerd en interne consistentie verbeterd.

1.0.4

• Functie: gebroken producthoeveelheden worden nu gedetecteerd en gemeld in de herroepingsverklaring. Volledige verwerking van gebroken hoeveelheden (correcte naar-rato-berekening, berekening van terugbetaling) is beschikbaar in BuddyPilot Herroeping Pro.
• Feature: added “Upgrade to Pro” action link in the Plugins list, shown only when the Pro version is not active.

1.0.3

• Getest en compatibiliteit met WordPress 7.0 bevestigd.
• Beveiliging: nonce wordt nu geverifieerd voor het innemen van een rate-limit slot, zodat CSRF sondes het uurbudget van een gebruiker niet kunnen uitputten.
• Beveiliging: anonieme (gast) rate-limit buckets zijn nu per gehashed IP-adres gescheiden in plaats van een gedeelde user_id=0 bucket.
• Beveiliging: sealed_map en GET voorverzegelde ID’s worden gevalideerd tegen de bestelling voor gebruik, zodat geconstrueerde verzoeken geen verzegelde bevestigingen kunnen koppelen aan gewone artikelen.
• Beveiliging: de uitvoer van apply_filters('buddypilot_withdrawal_declaration_items_payload') wordt opnieuw gevalideerd: vermeldingen met item_id=0, negatieve hoeveelheden of niet-array-waarden worden verwijderd.
• Beveiliging: PermissionChecker blokkeert nu expliciet user_id=0 ongeacht de customer_id van de bestelling.
• Beveiliging: OperatorRegistration controleert EXCLUDED_STATUSES bij het betreden van de handler en wist de rechtencode na het opslaan van de bestelling.
• Security: DeclarationRepository validates filing_date format and rejects zero-date strings.
• Beveiliging: RateLimit::tally() geeft PHP_INT_MAX terug wanneer de rate-limittabel ontbreekt, zodat de begrenzer niet stilzwijgend inactief wordt.
• Correctie: round(qty, 10) in get_declared_quantities() voorkomt IEEE-754-epsilonaccumulatie bij gebroken producthoeveelheden.
• Fix: removed spurious user_register hook from Privacy Manager; only woocommerce_created_customer is used.

1.0.2

• Code: renamed all short bpw_ / bpw- identifiers to the full buddypilot_withdrawal_ / buddypilot-withdrawal- prefix throughout (affects AJAX/admin-post action names, script handles, localized JS object, metabox ID, WooCommerce field type, nonce field names, lock keys and GET parameters). Resolves WordPress.org unique-prefix review requirement.

1.0.1

• Beveiliging: alle handlers voor beheerder en AJAX verzoeken verifiëren nu eerst gebruikersrechten voor nonce verificatie, conform de beveiligingsrichtlijnen van WordPress.
• Beveiliging: het AJAX pad in de registratiehandler van de ondernemer gebruikt nu check_ajax_referer() in plaats van check_admin_referer(), wat een correcte AJAX foutreactie geeft bij een nonce-fout.
• Beveiliging: toegevoegd current_user_can() poort naar de beheerdernoticehandler voor status van het maken van infopagina’s.
• Beveiliging: valutasymbool en scheidingsteken waarden uit gelokaliseerde prijsformaatgegevens worden nu aan de JavaScript-kant ge-escaped voor invoeging in de DOM.
• Code: verplaatste inline JavaScript van de handelsregistratiesjabloon naar een geplaatst bestand (assets/js/admin/operator-registration.js); strings doorgegeven via wp_localize_script().
• Code: aanroep van load_plugin_textdomain() verwijderd; WordPress 4.6 en hoger laadt vertalingen automatisch voor plugins op WordPress.org.

1.0.0

• Eerste stabiele release. Volledige implementatie van de herroepingsfunctie van artikel 11a: tweestapsformulier, gastverificatie, handmatige registratie door de ondernemer, beheerderslijst met verklaringen, instelbare termijn en statussen “geleverd”, vastleggen van toestemming conform artikel 16(m), paginagenerator voor Bijlage I(A)/(B), e-mails voor klant en beheerder, herroepingsgeschiedenis in Mijn account, HPOS-ondersteuning, AVG-hooks, naleving van WCAG 2.2 AA, Poolse en Engelse vertalingen.