ZT Bulk Order Delete Pro

Official Release Changelog
4Versions
17Implemented
13Improved
8Fixed
6Security
Implemented Improved Fixed Security
Version 2.0 25-10-2026 (10:33 PM) Latest
Implemented 6
  • Freemium Marketplace Architecture: Introduced a two-tier model enabling store owners to utilize core bulk order deletion tools for up to 5 orders per batch across 6 standard core tables completely free of charge.
  • 1-Click Status Purge Wizard: Delivered a high-speed status purging wizard to target and eliminate orders matching specific statuses (Canceled, Failed, Expired, Denied) across the entire store with live scan calculations.
  • Smart Date-Range Filters: Integrated smart order age presets (All Time, 30, 60, 90, 180, 365 days) and custom calendar date pickers to quickly clean out old test transactions and abandoned records.
  • Automatic Pre-Delete Safety Backup (Excel/CSV Export): Added an automated streaming export utility generating Microsoft Excel-compatible CSV files with UTF-8 BOM encoding and full customer, order total, and item details before purging.
  • Automated Scheduled Cleanup (Cron Tasks): Introduced automated background task execution via a standalone catalog route with secret token authentication, configurable age thresholds, batch safety limits, and live activity logging.
  • Missing Orders Special Status Support (order_status_id = 0): Added a dedicated "Missing Orders" option at the bottom of both status filter grids, styled with a distinct sunset-amber highlight card and "ID 0" badge to easily purge abandoned checkout sessions.
Improved 4
  • 4-Tab Administrative Dashboard: Reorganized settings into 4 dedicated navigation tabs (General Settings, Status & Date Purge Wizard, Automated Scheduled Cleanup, and About & Support) with URL state memory.
  • Interactive Live Order Scanner: Integrated a real-time order calculation engine allowing administrators to scan and preview exact matching order counts before confirming deletions.
  • High-Visibility Status Indicators: Added subtle amber PRO badges and preview mode banners guiding freemium users while keeping all settings fully customizable.
  • Missing Orders CSV Formatting: Formatted the safety backup export to automatically label status ID 0 records as "Missing Orders" rather than blank values.
Fixed 2
  • Status Filter Zero-ID Preservation: Fixed array filtering logic across query builders and background endpoints to preserve order_status_id = 0 without skipping or array pruning.
  • Package Archive Integrity: Rebuilt package archiving process to guarantee complete directory entry records for seamless OpenCart installer extraction.
Security 2
  • Pro Feature Route Lockdown: Enforced dual server-side authorization checks verifying both administrative modify permissions and cryptographic Pro license validity on all purge and automation endpoints.
  • Cryptographic Background Token Verification: Secured background cron webhook and CLI triggers using a 24-character hexadecimal authorization token to prevent unauthorized access.
Version 1.2 15-10-2026 (08:15 PM)
Implemented 7
  • Stealth Licensing Framework (Aerospace Coexistence): Integrated offline-capable cryptographic licensing engine (upload/system/library/zt_bulk_order_delete_pro/) with zero shared files, runtime namespace isolation (ZtRegistry_zt_bulk_order_delete_pro), and database key isolation (config_zt_bulk_order_delete_pro).
  • Standardized 4-Column License Card: Implemented pixel-perfect license verification card with live status badges (Active & Verified vs Preview Mode), locked key indicator pill, and metadata grid (Order ID, Order Email, Authorized Domain, Expiry Date).
  • Instant AJAX License Activation: Created dedicated activateLicense endpoint supporting real-time HMAC-SHA256 signature verification, CSRF user_token validation, non-blocking toast feedback, and safe URL redirect preventing session loss.
  • Read-Only Preview Mode: Delivered graceful, non-crashing inspection mode when unlicensed or expired, disabling configuration modifications while keeping the interface completely functional for previewing.
  • Master Status Hero Toggle Card: Added a dedicated master switch hero card featuring a circular avatar, dynamic uppercase status pill (ENABLED vs DISABLED), and an iOS-style glowing toggle switch.
  • Dynamic Sub-Options Dimming: Integrated automated real-time opacity and grayscale dimming for dependent settings when the master switch is disabled.
  • Dedicated Administrative Settings Interface: Delivered a full module administration interface with dual save controls ("Save and Stay" & "Save and Exit") and a comprehensive "About & Support" tab.
Improved 6
  • Universal OpenCart 3 Token Routing: Implemented universal token polyfill handling across administrative controllers, breadcrumbs, and AJAX CSRF handlers to ensure seamless compatibility across all OpenCart 3 releases and PHP 8.1+ environments.
  • RTL Language Layout Support: Added full Right-To-Left (html[dir="rtl"]) stylesheet adaptations for OpenCart 3.0.3.8+ compatibility.
  • Top-Right Toolbar Placement: Repositioned the "Bulk Delete" button to the far right of the order list action toolbar, placing it cleanly as the final button in the list.
  • Prominent Button Labeling: Added a distinct <i class="fa fa-trash-o"></i> Bulk Delete label to ensure clarity and immediate discoverability on the orders page.
  • Opt-In Safety Default: Configured initial installation settings so the module defaults to Disabled (0), giving administrators full control over activation.
  • Expanded 18-Table Cascade Purge & Dynamic Schema Verification: Enhanced database cleanup to purge across 18 core OpenCart tables (including order history, digital downloads, shipments, RMA returns, and activity logs) with high-performance in-memory table existence caching to prevent SQL errors.
Fixed 3
  • MySQL Strict Mode Recurring Purge: Refactored recurring profile deletion to sequential single-table operations, preventing multi-table deletion syntax conflicts and lock contention.
  • Toolbar Container Escaping: Resolved an OCMOD layout issue where the bulk delete button was injected outside the .pull-right container, permanently eliminating the top-left float glitch.
  • Session Logout Prevention: Configured safe module_url redirection on license activation to defend against OpenCart <base href> session stripping.
Security 2
  • HMAC-SHA256 Cryptographic Verification: Cryptographic token authentication using secret-salted HMAC-SHA256 hashing to validate licenses offline with zero remote telemetry.
  • Strict Conditional Route Protection: Wrapped deletion triggers and toolbar components in dual server-side authorization checks tied to both the master status toggle and active license verification.
Version 1.1 29-09-2026 (10:44 PM)
Implemented 3
  • In-DOM Center-Screen Modal: Integrated a custom center-screen confirmation dialog replacing the default browser popup, eliminating "localhost says" alerts and preventing browser popup suppression.
  • Dynamic Selected Orders Counter: Embedded a live counter pill inside the dialog that displays the exact count of orders queued for deletion.
  • Empty Selection Warning Modal: Added a dedicated warning prompt that alerts administrators when the delete button is clicked without selecting any orders.
Improved 3
  • Centered Action Button Alignment: Positioned both Cancel and Yes Delete buttons side-by-side in the center bottom of the modal for optimal ergonomics.
  • Active Submission State Guard: Added an animated loading spinner (Deleting...) that disables the confirm button upon click to eliminate accidental duplicate requests.
  • Cascade Database Purge: Expanded model deletion logic across 11 associated tables including order_voucher, customer_transaction, customer_reward, coupon_history, and recurring profiles to prevent orphaned database records.
Fixed 2
  • Token Session Invalidation Bug: Fixed OpenCart HTML entity encoding (&amp; vs &) on user token query strings that previously triggered "Invalid token session. Please login again." logouts.
  • Form Submission Isolation: Decoupled order deletion submission logic from standard bulk actions to ensure Print Invoice and Print Shipping List buttons remain completely undisturbed.
Security 2
  • Strict Permission Verification: Added administrative access rights verification ensuring only users with modify privileges on sale/order can initiate bulk deletions.
  • Strict Type Sanitization: Enforced explicit integer casting (int)$order_id on all order identifiers across database deletion queries to safeguard against SQL manipulation.
Version 1.0 01-01-2020 (12:00 AM) Initial Release
Implemented 1
  • Basic Bulk Order Deletion: Added ability to select multiple orders from the admin order list and trigger bulk removal.
Fixed 1
  • Legacy Order Removal: Provided basic deletion queries for core order tables in older OpenCart setups.