Official Release Changelog
4Versions
17Implemented
13Improved
8Fixed
6Security
Implemented
Improved
Fixed
Security
-
Freemium Marketplace Architecture: Introduced a two-tier model enabling store owners to utilize core bulk order deletion tools for up to 5 orders per batch across 6 standard core tables completely free of charge.
-
1-Click Status Purge Wizard: Delivered a high-speed status purging wizard to target and eliminate orders matching specific statuses (Canceled, Failed, Expired, Denied) across the entire store with live scan calculations.
-
Smart Date-Range Filters: Integrated smart order age presets (All Time, 30, 60, 90, 180, 365 days) and custom calendar date pickers to quickly clean out old test transactions and abandoned records.
-
Automatic Pre-Delete Safety Backup (Excel/CSV Export): Added an automated streaming export utility generating Microsoft Excel-compatible CSV files with UTF-8 BOM encoding and full customer, order total, and item details before purging.
-
Automated Scheduled Cleanup (Cron Tasks): Introduced automated background task execution via a standalone catalog route with secret token authentication, configurable age thresholds, batch safety limits, and live activity logging.
-
Missing Orders Special Status Support (
order_status_id = 0): Added a dedicated "Missing Orders" option at the bottom of both status filter grids, styled with a distinct sunset-amber highlight card and "ID 0" badge to easily purge abandoned checkout sessions.
-
4-Tab Administrative Dashboard: Reorganized settings into 4 dedicated navigation tabs (General Settings, Status & Date Purge Wizard, Automated Scheduled Cleanup, and About & Support) with URL state memory.
-
Interactive Live Order Scanner: Integrated a real-time order calculation engine allowing administrators to scan and preview exact matching order counts before confirming deletions.
-
High-Visibility Status Indicators: Added subtle amber PRO badges and preview mode banners guiding freemium users while keeping all settings fully customizable.
-
Missing Orders CSV Formatting: Formatted the safety backup export to automatically label status ID 0 records as "Missing Orders" rather than blank values.
-
Status Filter Zero-ID Preservation: Fixed array filtering logic across query builders and background endpoints to preserve
order_status_id = 0 without skipping or array pruning.
-
Package Archive Integrity: Rebuilt package archiving process to guarantee complete directory entry records for seamless OpenCart installer extraction.
-
Pro Feature Route Lockdown: Enforced dual server-side authorization checks verifying both administrative modify permissions and cryptographic Pro license validity on all purge and automation endpoints.
-
Cryptographic Background Token Verification: Secured background cron webhook and CLI triggers using a 24-character hexadecimal authorization token to prevent unauthorized access.
-
Stealth Licensing Framework (Aerospace Coexistence): Integrated offline-capable cryptographic licensing engine (
upload/system/library/zt_bulk_order_delete_pro/) with zero shared files, runtime namespace isolation (ZtRegistry_zt_bulk_order_delete_pro), and database key isolation (config_zt_bulk_order_delete_pro).
-
Standardized 4-Column License Card: Implemented pixel-perfect license verification card with live status badges (
Active & Verified vs Preview Mode), locked key indicator pill, and metadata grid (Order ID, Order Email, Authorized Domain, Expiry Date).
-
Instant AJAX License Activation: Created dedicated
activateLicense endpoint supporting real-time HMAC-SHA256 signature verification, CSRF user_token validation, non-blocking toast feedback, and safe URL redirect preventing session loss.
-
Read-Only Preview Mode: Delivered graceful, non-crashing inspection mode when unlicensed or expired, disabling configuration modifications while keeping the interface completely functional for previewing.
-
Master Status Hero Toggle Card: Added a dedicated master switch hero card featuring a circular avatar, dynamic uppercase status pill (
ENABLED vs DISABLED), and an iOS-style glowing toggle switch.
-
Dynamic Sub-Options Dimming: Integrated automated real-time opacity and grayscale dimming for dependent settings when the master switch is disabled.
-
Dedicated Administrative Settings Interface: Delivered a full module administration interface with dual save controls ("Save and Stay" & "Save and Exit") and a comprehensive "About & Support" tab.
-
Universal OpenCart 3 Token Routing: Implemented universal token polyfill handling across administrative controllers, breadcrumbs, and AJAX CSRF handlers to ensure seamless compatibility across all OpenCart 3 releases and PHP 8.1+ environments.
-
RTL Language Layout Support: Added full Right-To-Left (
html[dir="rtl"]) stylesheet adaptations for OpenCart 3.0.3.8+ compatibility.
-
Top-Right Toolbar Placement: Repositioned the "Bulk Delete" button to the far right of the order list action toolbar, placing it cleanly as the final button in the list.
-
Prominent Button Labeling: Added a distinct
<i class="fa fa-trash-o"></i> Bulk Delete label to ensure clarity and immediate discoverability on the orders page.
-
Opt-In Safety Default: Configured initial installation settings so the module defaults to Disabled (
0), giving administrators full control over activation.
-
Expanded 18-Table Cascade Purge & Dynamic Schema Verification: Enhanced database cleanup to purge across 18 core OpenCart tables (including order history, digital downloads, shipments, RMA returns, and activity logs) with high-performance in-memory table existence caching to prevent SQL errors.
-
MySQL Strict Mode Recurring Purge: Refactored recurring profile deletion to sequential single-table operations, preventing multi-table deletion syntax conflicts and lock contention.
-
Toolbar Container Escaping: Resolved an OCMOD layout issue where the bulk delete button was injected outside the
.pull-right container, permanently eliminating the top-left float glitch.
-
Session Logout Prevention: Configured safe
module_url redirection on license activation to defend against OpenCart <base href> session stripping.
-
HMAC-SHA256 Cryptographic Verification: Cryptographic token authentication using secret-salted HMAC-SHA256 hashing to validate licenses offline with zero remote telemetry.
-
Strict Conditional Route Protection: Wrapped deletion triggers and toolbar components in dual server-side authorization checks tied to both the master status toggle and active license verification.
-
In-DOM Center-Screen Modal: Integrated a custom center-screen confirmation dialog replacing the default browser popup, eliminating "localhost says" alerts and preventing browser popup suppression.
-
Dynamic Selected Orders Counter: Embedded a live counter pill inside the dialog that displays the exact count of orders queued for deletion.
-
Empty Selection Warning Modal: Added a dedicated warning prompt that alerts administrators when the delete button is clicked without selecting any orders.
-
Centered Action Button Alignment: Positioned both Cancel and Yes Delete buttons side-by-side in the center bottom of the modal for optimal ergonomics.
-
Active Submission State Guard: Added an animated loading spinner (
Deleting...) that disables the confirm button upon click to eliminate accidental duplicate requests.
-
Cascade Database Purge: Expanded model deletion logic across 11 associated tables including
order_voucher, customer_transaction, customer_reward, coupon_history, and recurring profiles to prevent orphaned database records.
-
Token Session Invalidation Bug: Fixed OpenCart HTML entity encoding (
& vs &) on user token query strings that previously triggered "Invalid token session. Please login again." logouts.
-
Form Submission Isolation: Decoupled order deletion submission logic from standard bulk actions to ensure Print Invoice and Print Shipping List buttons remain completely undisturbed.
-
Strict Permission Verification: Added administrative access rights verification ensuring only users with
modify privileges on sale/order can initiate bulk deletions.
-
Strict Type Sanitization: Enforced explicit integer casting
(int)$order_id on all order identifiers across database deletion queries to safeguard against SQL manipulation.
-
Basic Bulk Order Deletion: Added ability to select multiple orders from the admin order list and trigger bulk removal.
-
Legacy Order Removal: Provided basic deletion queries for core order tables in older OpenCart setups.