ZT SMS-OTP Suite

Official Release Changelog
9Versions
25Implemented
22Improved
16Fixed
9Security
Implemented Improved Fixed Security
Version 2.7 04-11-2026 (03:54 AM) Latest
Implemented 2
  • Isolated Tab-Level Gateway Export & Import Suite: Added dedicated, scoped JSON export and backup restoration directly within each gateway tab (Textronix, WaClient, and Custom Gateway), featuring provider-specific standardized filenames and smart exclusion of volatile dynamic hardware profiles.
  • Universal Diagnostic Gateway Debug Logging Engine: Integrated comprehensive lifecycle tracking across all gateways whenever Debug Mode is enabled, capturing outbound payloads, connection test actions, live device discovery queries, and raw carrier responses in the OpenCart Error Log.
Improved 3
  • Universal Dual-Theme High-Contrast Dark Mode Revamp: Redesigned the dark theme across Settings, Gateways, and Template pages with semantic CSS tokens, delivering high-contrast readability for country rules, gateway banners, sub-cards, and the interactive shortcodes modal.
  • Standardized 5-Line Template Textbox Height & Native Resizing: Calibrated all notification template textareas across all 5 tabs to display exactly 5 complete lines of text by default, while restoring smooth vertical drag resizing.
  • Settings Field Hierarchy & Purge Order Calibration: Reordered the General Settings layout to place Debug Mode at the bottom following Manual Data Purge, and sorted the Message Report header purge dropdown in ascending numerical order (Keep Last 10 through Purge All).
Fixed 2
  • Template DLT Registration ID UI Persistence: Resolved a data-binding bug where saved DLT Template IDs were not displaying in the user interface across SMS Registration and OTP Verification tabs after clicking "Save & Stay".
  • WaClient Pre-Flight Number Verification Response Parsing: Enhanced the WhatsApp verification parser to interpret 6 distinct API response variations from WaClient, eliminating false-positive "number not on WhatsApp" error notices.
Security 1
  • Cross-Gateway Configuration Isolation Guard: Engineered backup signature validation into gateway tab imports, preventing cross-tab credential contamination by automatically rejecting backup files belonging to other providers.
Version 2.6 03-11-2026 (09:30 AM)
Implemented 3
  • Universal Custom HTTP Gateway: Transferred generic API credentials from Settings to a dedicated, permanent final "Custom Gateway" tab, delivering full dual-method support for both HTTP POST (JSON/Form payload) and HTTP GET query dispatches.
  • Automated Count-Based Report Retention & Instant Purge: Added an automated background cleanup engine that retains only the last 10, 20, 30, 40, 50, or 100 log records, paired with a manual "Purge Now" threshold control to keep the database lean and performant.
  • Automated Gateway Debug Logging Integration: Connected the Custom Gateway directly into the module's centralized diagnostic logger, capturing outbound endpoints, payload bodies, and carrier responses automatically when Debug Mode is active.
Improved 3
  • Horizontal Message Report Filter Layout: Redesigned the Send Message Report by converting the cumbersome right-hand sidebar into a compact horizontal filter panel above the table, expanding the report view to 100% full width.
  • Template Activation Engine & Guidance: Clarified the role of DLT Template ID as the master activation switch across all notification templates, replacing confusing legacy notes with clear guidance that entering any numeric ID activates the template while leaving it blank keeps it disabled.
  • Ergonomic Field Naming & Practical Help Notes: Clarified ambiguous gateway labels (e.g. "API Key / Bearer Token", "Master Key / Sender ID", "SSL Peer Verification") and added interactive placeholder tags ({mobileno}, {message}, {key}, {secretkey}, {masterkey}, {dltid}).
Fixed 2
  • Automatic JSON Payload Entity Sanitization: Resolved an issue where quotes in custom gateway payloads were encoded as HTML entities ("), implementing an automatic runtime decoding pipeline that guarantees 100% valid JSON syntax for all third-party providers.
  • HTTP 2xx Response Badge Recognition: Corrected report status classification so that HTTP 200 and HTTP 201 (Created) responses from custom gateways render as vibrant green "Custom Gateway Sent" success badges with checkmark icons.
Security 1
  • Isolated Endpoint SSL Peer Verification: Scoped SSL certificate validation strictly to custom third-party API endpoints, preserving strict TLS/SSL compliance for native carriers while allowing flexible testing on staging servers.
Version 2.5 03-11-2026 (04:18 AM)
Implemented 4
  • Dedicated Provider Tab Architecture: Replaced the generic "Gateways" container tab with a dedicated "WaClient" tab featuring an authentic WhatsApp brand icon, standardizing the platform so that every gateway provider possesses its own discrete configuration tab.
  • Hierarchical Dynamic Dimming Engine: Integrated smart visual dimming across settings and gateway panels that automatically dims dependent configuration fields when a parent toggle is disabled, including nested sub-channel controls for SMS and WhatsApp dispatch.
  • Universal Modern iOS Toggle Switches: Modernized all administrative status controls across Settings, Gateways, and Template pages with high-contrast 58x32px iOS pill switches and live reactive status badges (ENABLED / DISABLED).
  • Restored Visual SSL Verification Control: Re-introduced the SSL peer verification switch on the Settings page, giving administrators direct control over SSL validation protocols for custom gateway endpoints while maintaining zero-risk default security.
Improved 4
  • Streamlined Direct Language Settings: Eliminated redundant nested sub-tab navigation under the Language tab, presenting all customer-facing verification and error messages directly on the main panel for faster, zero-click customization.
  • Ergonomic Layout & Proportional Field Widths: Balanced inner frame margins and established comfortable 620px field constraints, preventing input elements from stretching edge-to-edge while restoring crisp, theme-aware section divider lines.
  • Guided SMS Delivery Scope Workflow: Reordered core settings into an intuitive sequence (Module Status → SMS Delivery Scope → Method) and added an informative descriptive guide detailing domestic routing, international carrier rules, and WhatsApp independence.
  • Enhanced Input Height & Typography: Standardized input fields and dropdowns to an ergonomic 40px height with optimized line spacing, preventing descending characters (like "g" and "y") from being clipped.
Fixed 2
  • Restored Missing Field Titles: Resolved missing labels across administrative panels, adding clear headings for "Textronix Status", "Error Not Match", and "Invalid OTP Error Message".
  • Perfected Frame Geometry & Rounded Borders: Fixed bottom enclosure rendering issues across Settings, Gateway, and Template pages by cleanly integrating footer brand credits within the main module card container.
Security 1
  • Triple-Layer Default Values Synchronization: Codified safe, reliable defaults across installation models, controller handlers, and template fallbacks to ensure complete operational readiness and prevent unconfigured dispatch errors.
Version 2.4 02-11-2026 (08:03 PM)
Implemented 3
  • Integrated the official Zaintech Master Status Hero Card: Features a 58x32px iOS pill toggle switch, dynamic uppercase status pill (ENABLED/DISABLED), circular avatar icon badge, and real-time reactive sub-options dimming on the main module admin page.
  • Deployed a standardized "About & Support" tab: Features a top hero banner, direct 3-column support channels (Official Website, WhatsApp Instant Assistance, Telegram Community), and an automated technical environment specifications grid.
  • Restructured administrative navigation into 5 dedicated submenus: Organized under the main "ZT SMS-OTP Suite" left menu to cleanly separate Settings, Gateways, Templates, Message Reports, and Bulk SMS with zero clutter.
Improved 2
  • Rolled out the universal Master Dual-Theme UI Shell: Applied across all 6 administrative pages with elevated card styling, high-contrast dark mode support, and an inline FOUC-prevention engine for instantaneous, blink-free theme transitions.
  • Streamlined the primary module dashboard: Purged the redundant "Runtime Security & Health" block and wrapped gateway configurations in an elevated, focused callout panel.
Fixed 2
  • Resolved a dark mode scoping issue: Strictly isolated theme overrides to the inner module container (.zt-module-container), preventing dark styles from bleeding into OpenCart's native administrative canvas, breadcrumbs, page header, or footer.
  • Standardized OpenCart page headers and breadcrumbs: Restored 100% adherence to standard OpenCart administrative typography and visual alignment across all module views.
Security 1
  • Engineered an atomic array-merge persistence pattern: Implemented across all submenu controllers, eliminating cross-controller data collisions and safeguarding against accidental overwrites when saving gateway or template configurations.
Version 2.3 20-09-2026 (01:17 AM)
Implemented 2
  • Integrated the WaClient Gateway adapter: Added native support in the Gateways management panel, enabling cloud-based WhatsApp messaging with multi-channel fallback support.
  • Built an automated WhatsApp Number Existence Pre-Validation engine: Queries the validation API to verify a customer's phone number is actively registered on WhatsApp prior to generating verification codes.
Improved 2
  • Upgraded Admin connection testing: Added dynamic multi-state diagnostic alerts that clearly indicate network latency, verified active WhatsApp accounts, and invalid numbers.
  • Updated extension distribution packaging: Synchronized release to Version 2.3 with a standardized, clean identifier for seamless 1-click installation through OpenCart Extension Installer.
Fixed 2
  • Resolved a duplicate verification trigger issue: Implemented single-listener event unbinding and an active request lock that completely eliminates duplicate OTP codes and prevents rapid double-clicking.
  • Resolved a false-positive number validation issue: Supplied dual-format query payloads and engineered a multi-structure smart parser that accurately interprets all gateway response variations.
Security 1
  • Deployed intelligent two-phase anti-ban protection: Blocks message transmission to non-existent numbers during registration to safeguard business accounts from Meta suspension policies while bypassing checks on verified orders.
Version 2.2 19-09-2026 (05:52 PM)
Implemented 3
  • Integrated a universal {link} smart shortcode engine: Dynamically generates context-aware destination links—such as direct live order tracking for customers, account login for new registrations, affiliate portal access, and one-click admin management links.
  • Added clean store domain resolution ({store_url}): Inserts protocol-free store domain names into SMS and WhatsApp templates automatically across all notifications.
  • Modernized the admin Shortcodes reference guide: Transformed into an interactive card layout featuring click-to-copy tags with instant toast confirmation for effortless message template creation.
Improved 2
  • Upgraded customer storefront WhatsApp input: Enhanced with a compact multi-country placeholder (+923.. / +1.. / +44..) and an interactive info tooltip (ⓘ) that guides visitors on entering their country code on desktop and mobile.
  • Extended multi-theme compatibility for phone hints: Built seamless styling support across default OpenCart, Journal 2, and Journal 3 storefronts with full English and Arabic localization.
Fixed 1
  • Resolved notification whitespace formatting: Prevented line breaks and paragraphs from being stripped in Order Status, Registration, Affiliate, and Password Reset messages, ensuring clean spacing upon delivery.
Security 2
  • Built a centralized fail-safe shortcode dispatcher: Intercepts unhandled shortcodes before transmission and falls back to clean store URLs, guaranteeing raw code tags never leak to customer phones.
  • Enhanced legacy custom gateway dispatches: Applied safe URL encoding to prevent multi-line message strings from corrupting HTTP query parameters during carrier transmission.
Version 2.1 19-09-2026
Implemented 2
  • Introduced 1-Click JSON Template Backup and Restore: Allows administrators to export and import all notification templates and DLT registration IDs across all tabs in one unified action.
  • Added visual pulse animations during template imports: Highlights newly populated fields with a subtle green pulse so store owners can review loaded messages before saving.
Improved 2
  • Redesigned template controls into a clean two-button ribbon: Positioned "Export All Templates" and "Import All Templates" directly inside each template section to keep header actions focused.
  • Enhanced admin tab navigation with flexible wrapping: Ensures smooth, responsive viewing across all display sizes and prevents horizontal layout shifting.
Fixed 3
  • Resolved admin container alignment: Fixed layout overflow that previously caused settings panels to slide behind the navigation sidebar on smaller viewports.
  • Corrected front-end verification button binding: Ensured custom language settings (such as "Verify & Continue") reflect immediately on customer checkout and login pages.
  • Standardized report headings and breadcrumbs: Unified report alerts and navigation titles to consistently display "ZT SMS Message Report".
Security 1
  • Hardened gateway dispatch payloads: Enforced strict parameter isolation and mutual exclusivity between GSM SIM hardware and WhatsApp profile channels, eliminating carrier API validation exceptions.
Version 2.0 19-09-2026
Implemented 4
  • Added dedicated SMS Delivery Scope selectors: Configurable across all gateway channels, allowing administrators to restrict dispatch strictly to domestic destinations or enable global international messaging.
  • Integrated a complete Country Management dashboard: Full capabilities to add, edit, delete, and instantly toggle country routing rules, national trunk prefixes, and valid number lengths.
  • Built an automated E.164 phone normalization pipeline: Cleans formatting symbols, strips national trunk prefixes, resolves missing plus signs, and converts local inputs into standardized international numbers.
  • Integrated native dual-channel hardware support: Connect physical Android SIM cards and official WhatsApp profiles with real-time connection diagnostic testing and profile discovery.
Improved 2
  • Introduced a self-healing database architecture: Automatically provisions required configuration tables upon visiting settings, removing the need to uninstall or reinstall the module during updates.
  • Redesigned the management experience: Upgraded with modern, non-blocking modals, live one-click status toggle switches, and sleek toast alerts instead of disruptive browser popups.
Fixed 1
  • Enhanced customer phone recognition across login and checkout: Returning shoppers are matched seamlessly whether typing numbers with or without trunk prefixes, country dial codes, or plus signs.
Security 1
  • Enforced strict pre-dispatch scope validation: Prevents accidental or costly out-of-scope messages from leaving the server, recording clear audit notices in the delivery report.
Version 1.0 18-09-2026 Initial Release
Implemented 2
  • Added dedicated WhatsApp number verification and login support: Streamlined registration and verification steps for improved customer recognition and trust.
  • Pre-configured polished customer-centric defaults: Default button texts and intuitive status alerts across all one-time password login and checkout verification workflows.
Improved 2
  • Re-engineered package architecture: Optimized for smooth performance and native compatibility across PHP 7.4 through PHP 8.5 environments.
  • Enhanced network delivery routines: Intelligent timeout limits prevent checkout lag or delays during SMS gateway communication.
Fixed 1
  • Resolved error messaging fallbacks: Shoppers receive precise, helpful guidance if a mobile number is unlinked or an OTP verification code has expired.