ZT Universal Payment Manager Pro

Official Release Changelog
8Versions
18Implemented
25Improved
20Fixed
12Security
Implemented Improved Fixed Security
Version 2.5 09-11-2026 (03:30 AM) Latest
Implemented 2
  • Automated License Activation Refresh: Resolved interface hang upon license key submission by adding immediate visual feedback ("Activated!" state) and an automated document reload that instantaneously renders all unlocked administrative controls.
  • Application Version Standardization (v2.5): Updated core manifest files, administrative branding badges, asset cache busters, and production archives to official Version 2.5.
Improved 4
  • Dual-Theme High-Contrast Badge System: Standardized the "Locked" verification badge and token pill with high-contrast slate styling in Light Mode (WCAG AAA compliant) and crisp slate-gray elevation in Dark Mode.
  • Defensive File Upload Hardening: Added strict 2MB maximum upload size limits and explicit .json / .txt file extension checks on configuration import endpoints.
  • cURL Connection Resilience & Timeouts: Enforced explicit 10-second connect and 20-second execution timeouts across external payment gateway requests to prevent worker thread starvation.
  • Universal POSIX Archive Compatibility: Standardized production distribution zip archives with POSIX forward-slash paths for flawless installation across Windows, Linux, and Alpine Docker.
Fixed 3
  • Activation Button State Hang: Fixed a routing condition where submitting a valid cryptographic license key remained stuck in "Activating..." by forcing an explicit page reload after backend confirmation.
  • OpenCart <base href> Session Logouts: Eliminated session token loss during license operations by preserving full path and query parameters in browser history states.
  • Alpine Linux / Musl libc Docker Compatibility: Removed brace pattern syntax in install.xml, guaranteeing 100% OCMOD modification parser compatibility in non-GNU container environments.
Security 4
  • Administrative Access Control Hardening: Enforced strict permission validation (hasPermission('modify') and hasPermission('access')) on all gateway import, export, and order transaction endpoints.
  • Autoloader Whitelist & Code Injection Neutralization: Replaced unconstrained class instantiation in OCMOD stub autoloaders with strict regex format validation and alphanumeric sanitization.
  • PCI-DSS Compliant Sensitive Data Masking: Implemented automated recursive redaction for diagnostic logs, masking sensitive tokens, keys, credentials, and customer financial identifiers.
  • Early-Exit Bot Noise Filter: Injected pre-flight validation on public webhook endpoints to immediately drop empty crawler requests before database model execution.
Version 2.4 08-11-2026 (10:21 PM)
Implemented 3
  • Stealth Licensing & Read-Only Preview Engine: Integrated autonomous cryptographic license verification and a non-disruptive Read-Only Preview Mode allowing full inspection of module settings, methods, and configurations while safely locking modifications until genuine activation.
  • Real-Time AJAX License Activation: Introduced instant license verification and deactivation directly within the administration interface with real-time feedback and dynamic state refresh without page lockouts.
  • Direct Navigation Shortcut to License Block: Added a quick-access action banner in Read-Only Preview Mode that seamlessly navigates directly to the License & Activation block under Global Settings > General.
Improved 4
  • Zaintech Technologies Master Theme Alignment: Refined the entire administrative interface with full dual-theme (Light/Dark mode) support, scoped strictly within the module container, standardized 40px input field heights with descender protection, and modern underline tabs.
  • Consistent Visual Branding & Iconography: Standardized the cube module icon across the administrative header, About & Support tab, and payment extension list, replacing legacy icons for a cohesive brand identity.
  • Tab Container Height & Responsive Layout: Adjusted container heights and overflow properties across multi-tab views, permanently eliminating unwanted vertical scrollbars and ensuring clean tab alignment across all monitor sizes.
  • MixPay.me Integration Screen Display in Dark Mode: Overhauled dark theme styling for third-party integration tables, parameter rows, and nested HTTP payloads for crystal-clear readability.
Fixed 3
  • Simultaneous Conflicting Toast Notifications: Eliminated a race condition where clicking action buttons in unlicensed mode produced conflicting success and warning notifications, ensuring strictly one concise warning toast is displayed.
  • License Card Interaction in Disabled State: Resolved a styling conflict where disabling "Module Status" inadvertently dimmed the License & Activation section, granting active immunity so the license card remains 100% responsive and accessible at all times.
  • Localhost MixPay Connection Resolution: Forced IPv4 address resolution (CURLOPT_IPRESOLVE => CURL_IPRESOLVE_V4) for MixPay payment sessions on local development environments, resolving timeout and connection failures.
Security 3
  • Cryptographic Offline Token Verification: Implemented decentralized mathematical signature verification with stealth system libraries, validating genuine licenses with zero external telemetry dependencies or third-party tracking.
  • Administrative Action & Mutation Guards: Enforced strict server-side validation across all save, copy, and delete endpoints, rejecting unauthorized configuration mutations whenever operating in unlicensed mode.
  • reCAPTCHA v2 Explicit Clarification & Setup Link: Explicitly clarified Google reCAPTCHA v2 compatibility throughout the Security Shield tab and added a direct setup link to OpenCart's native captcha settings.
Version 2.3 08-11-2026 (06:22 PM)
Implemented 2
  • Unified Autonomous Debug Logging: Transitioned real-time diagnostic log tracking exclusively to zt_upm_pro.log with dedicated retrieval and isolated session storage, completely eliminating legacy log traces.
  • Interactive Security & Control Toggles: Introduced sleek, one-click Enable/Disable toggle switches across the General and Security & Shield administrative tabs for instant feature control.
Improved 3
  • Namespace Architecture Modernization: Systematically streamlined the codebase to use the native ZT Universal Payment Manager Pro namespace, completely removing legacy author references and outdated aliases.
  • Live Debug Viewer Experience: Refined the administrative Live Debug Log modal popup with single-instance execution controls to permanently eliminate recurring notification toast loops.
  • Visual Status Hierarchy & Dimming: Positioned the primary module status switch directly at the top of the General settings tab, with dynamic visual dimming across all secondary configuration options when the module is disabled.
Fixed 3
  • Checkout Progression & Step Advancement: Resolved checkout sequence hang-ups under Step 3 and ensured smooth, deterministic step transitions to Step 4 Confirm Order.
  • Anti-Robot reCAPTCHA Layout Alignment: Standardized Google reCAPTCHA v2 placement cleanly to the left above the Confirm Order button, eliminating layout clipping and right-side displacement.
  • Storefront Token Validation Flow: Fixed order confirmation checks to properly validate anti-robot verification tokens and prevent premature submission errors.
Security 2
  • Multi-Layer Zero-Trust Shield: Hardened storefront defenses with automated invisible bot honeypot detection, rapid flood request throttling, and Google reCAPTCHA v2 challenge verification.
  • Credential Inheritance Guidance: Added clear administrative guidance and security defaults for Google reCAPTCHA site and secret keys to ensure seamless storewide credential inheritance.
Version 2.2 25-09-2026 (05:45 PM)
Implemented 2
  • Instant Real-Time Search Filtering: Added quick live-search inputs across all Generic Rules multi-select selection panels, allowing administrators to find and filter currencies, stores, geo zones, and countries instantly.
  • Extendable Multi-Select & Bulk Input Windows: Enabled vertical drag-resizing on multi-select boxes, customer selection autofill containers, and criteria textareas, providing expansive multi-row visibility for high-volume store catalogs.
Improved 3
  • Clutter-Free Default-Collapsed Layout: Restored clean automatic collapsing for multi-select rules whenever “For All” is selected, eliminating vertical page clutter and only expanding options when “For All” is unchecked.
  • Non-Blocking Toast Notification System: Modernized the administration user experience by replacing intrusive browser alert popups with accessible, non-blocking toast notifications with progress timers and clear status badges.
  • Clarified Configuration Naming & Guidance: Refined ambiguous terminology by distinguishing “Admin Internal Method Label” from customer-facing “Checkout Display Title”, while clarifying multi-select logic with intuitive tooltips.
Fixed 3
  • Single-Click “Show Selected” Filter Conflict: Resolved an event bubbling collision where duplicate click listeners caused the “Show Selected” button to toggle on and immediately off, ensuring rock-solid single-click filtering of checked items with active visual feedback.
  • PHP 8.1–8.5 Runtime Compatibility: Fixed undefined array key warnings and deprecation notices across administrative controllers, order view hooks, and form elements, guaranteeing clean AJAX JSON communication and zero log clutter.
  • HTML Entity & Quotation Escaping in Settings: Corrected escaping issues in admin form generation that caused stray quotation marks and prevented form fields from breaking when editing method descriptions.
Security 1
  • Integration Driver Key Guard & Safety Alerts: Introduced prominent protective warning alerts in the Integration tab to safeguard critical driver keys from accidental alterations that could disrupt storefront checkout routing.
Version 2.1 24-09-2026 (05:47 PM)
Implemented 2
  • Dual-Path Payment Settlement: Enabled instant, automated order verification upon customer return from the hosted crypto payment screen, ensuring orders transition immediately to processing without waiting for background notifications.
  • Universal Payload Field Resolver: Added comprehensive field detection for incoming JSON payment data, automatically recognizing transaction identifiers across diverse naming styles.
Improved 2
  • Full Blockchain Transaction Logging: Enhanced the order activity recorder to capture and display complete on-chain transaction hashes (TxID) and settled cryptocurrency amounts directly within customer and administrative order histories.
  • Resilient Reverse-Proxy Ingress: Upgraded network verification to seamlessly inspect client IP headers across Cloudflare and reverse-proxy hosting environments, preventing legitimate notifications from being dropped.
Fixed 2
  • Silent Webhook Processing Drop: Resolved an issue where background payment notifications formatted in modern JSON were bypassed, ensuring all legitimate webhook callbacks update store order statuses reliably.
  • Transaction Receipt Note Propagation: Fixed order history comment assignment so cryptocurrency settlement amounts, coin symbols, and verification timestamps are permanently recorded on order records.
Security 1
  • Authoritative Server-to-Server Confirmation: Integrated cryptographic cross-verification directly with payment gateway headquarters, preventing payment spoofing, incorrect payee routing, and underpayment attempts.
Version 2.0 23-09-2026 (11:55 PM)
Implemented 3
  • MixPay Web3 Cryptocurrency Gateway Suite: Delivered a standalone integration driver addon (upmpro_mixpay.php) featuring automatic one-time session creation, hosted payment redirection, and authoritative 5-step webhook verification.
  • Adaptive Multi-Gateway Horizontal Grid: Transformed the checkout interface into a responsive horizontal card layout with automatic wrapping, allowing multiple payment gateways to align cleanly side-by-side with top baseline alignment.
  • Comprehensive Gateway Integration Blueprints: Authored three zero-code architectural integration guides covering form redirection, server-initiated checkout sessions, and direct server-to-server API calls.
Improved 3
  • Direct Payer Email Forwarding: Optimized customer parameter transmission to strictly forward payerEmail into the hosted checkout URL, ensuring customer receipts and notifications are linked seamlessly.
  • Modular Gateway Architecture: Decoupled third-party gateway drivers into standalone OCMOD archives (Package/upmpro_mixpay.ocmod.zip) with 1-click import presets, keeping the core platform lightweight and modular.
  • Entity-Immune Custom CSS Engine: Modernized checkout CSS selectors to be completely quote-free and descendant-based, permanently protecting style rules from HTML entity escaping during administration edits.
Fixed 2
  • CSS Entity Corruption & Recursive Decoder: Resolved checkout presentation failures by implementing an automated recursive entity decoder in the core engine, guaranteeing valid stylesheet output regardless of prior encoding passes.
  • Gateway Badge Alignment & Spacing: Eliminated horizontal collisions and card overlap across accordion checkout steps with dedicated spacing safeguards and zero-overlap radio positioning.
Security 1
  • Authoritative 5-Step Webhook Verification: Secured cryptocurrency payment notifications with a multi-factor verification algorithm validating dispatcher IP, merchant payee UUID, quote asset, and transaction total before updating order states.
Version 1.1 23-09-2026 (05:19 PM)
Implemented 1
  • Dynamic Centered Multi-Line Layout: Structured checkout payment methods into an elegant 3-tier vertical stack (Logo, centered Title, and centered Description) fully isolated via scoped CSS to prevent interfering with other checkout steps.
Improved 3
  • Unconstrained Logo Presentation: Enabled full-resolution, natural-dimension display for payment logos without fixed height or width limits, adding flexbox anti-shrink safeguards when title or description text is omitted.
  • Zero-Overlap Radio Button Alignment: Re-anchored the checkout radio button outside the logo boundary, providing clean 44px clearance with zero visual clipping or overlap across all screen sizes.
  • Native Custom CSS Persistence: Applied all layout refinements through the module's native Custom CSS engine, eliminating hardcoded template modifications and ensuring clean upgradability.
Fixed 2
  • Checkout Title Visibility Control: Resolved core issue where the "Don't show title in the description" setting was bypassed, allowing merchants to hide titles cleanly on checkout while preserving names on customer invoices and admin orders.
  • Untitled Item Fallback Removal: Eliminated default placeholder labels so payment methods without titles display cleanly without unwanted system strings.
Version 1.0 23-09-2026 (05:04 AM) Initial Release
Implemented 3
  • Universal Payment Architecture: Deployed a fully autonomous, offline-capable payment management platform supporting dynamic sub-methods, multi-currency routing, and custom merchant gateways without external server locks.
  • Clean Namespace & Modular Routing: Completely restructured and decoupled application routes, controllers, and models under the dedicated upmpro identifier for optimal OpenCart compatibility.
  • Automated Payment File Generator: Built resilient file generation routines for merchant-configured payment gateways with comprehensive permission checks and directory safety fallbacks.
Improved 3
  • Modern White-Label Interface: Fully refreshed the administration panel with Zaintech Technologies branding, removing legacy promotional clutter, third-party ads, and redundant menu links.
  • PHP 8.5 Syntax & Engine Modernization: Thoroughly refactored and certified the entire codebase for flawless execution across PHP 7.4 through PHP 8.5 with zero runtime warnings or deprecation notices.
  • Optimized Frontend Assets: Refined storefront payment scripts and modal stylesheets to guarantee rapid checkout page rendering, smooth UI transitions, and zero layout shift.
Fixed 2
  • Sub-Payment Method Duplication: Resolved OpenCart payment extension list pollution by filtering dynamically generated sub-methods (upmpro*) from duplicate administrative listings.
  • Fallback Title Assignment: Fixed missing title fallbacks for untitled custom payment methods, guaranteeing descriptive labels across all customer checkout sessions.

Universal Payment Manager Pro — Official Release Changelog