Recently Published Versions

Security

Plugins

  • Password Field Protection - Plugin configuration password fields no longer reveal stored passwords; only a filled/empty indicator is shown (#7647)

New Features

Commissions & Tracking

  • Lifetime Commission Expiration by Purchase - New setting to extend lifetime referral relations by X days from each commission, keeping affiliates linked to actively purchasing customers (#7624)
  • Recurring Commission Cleanup - New option to automatically remove recurring commission rules when no commission has been generated for a configurable number of days (#7546)

Bug Fixes

Email System

  • Send Message Recipients Counter - Fixed recipient counter always showing 0 when sending messages to affiliates (#7658)

REST API v3

  • Invalid Endpoint Error Handling - Fixed API returning error 500 instead of proper 400 response for invalid or malformed endpoint requests (#7654)

Plugins

  • Hidden Commissions Visibility - Fixed commissions without campaign (extra bonus, signup bonus, referral) being incorrectly hidden when using the Hide Commissions plugin (#7633)

User Interface

  • Summer Theme Dark Mode - Improved styling of the Affiliate Panel Screens configuration section for dark mode (#7621)
  • FAQ Page Layout - Fixed empty space and mispositioned footer on FAQ page when using Summer theme (#7611)
  • HTML Banner Image List - Fixed broken alignment of attached images dropdown in HTML banner editor (#7637)

Security

  • Name Field Validation - Special characters like colons and slashes are now blocked in Name and Lastname fields to prevent hyperlink injection in emails (#7485)

Improvements

User Interface

  • Image Upload Progress Indicator - Added loading indicator during banner image uploads while compression is processing (#7618)

Plugins

  • Mandatory Plugin Settings - Added mandatory listbox field type for plugin configurations that require a value selection (#7628)

Bug Fixes

Banners & Promotional Materials

  • Animated Banner Conversion - Fixed animated GIF banners being converted to static WebP images instead of animated WebP (#7464)
  • HTML Banner Preview Editing - Fixed error when editing HTML banners with preview images (#7636)

REST API v3

  • Affiliate Creation Referral ID - Fixed referral ID parameter being ignored when creating new affiliates via API (#7631)

User Interface

  • Campaign Search Case Sensitivity - Fixed case-sensitive search in "Invite to campaign" and "Add to Commission Group" dialogs (#7607)
  • Commission Calculator Display - Fixed text overflow on Compute Commission dropdown values (#7589)

Plugins

  • Referring Affiliate Info Plugin - Fixed commission tracking failure when empty extra data field is selected in plugin settings (#7622)
  • Plugin Configuration Listboxes - Fixed duplicate empty values appearing in plugin configuration dropdown fields (#7625)
  • Infusionsoft Recurring Commissions - Recurring commission tracking now fetches order data from customer's latest order when IPN notification lacks order details (#7616)

New Features

  • Multiple General Affiliate Links - Merchants can now add multiple main site URLs in Configuration > Tracking settings, displaying each as a separate general affiliate link for multi-shop promotions without theme customization (#3929)
  • Cookie Overwrite Control - Added per-affiliate option to prevent cookie overwrites, allowing first-click attribution for specific affiliates while maintaining last-click for others (#7437)

Banners & Promotional Materials

  • Banner Download Auditing - ZIP and PDF banner downloads are now logged in the audit log, allowing merchants to monitor which affiliates download promotional materials (#7595)

Invoices

  • Country Code Variable - Added new variable for affiliate invoices that displays ISO country codes (e.g., "CA" instead of "Canada") for integration with accounting software (#7415)

User Interface

  • Summer Theme Dark Mode - Added automatic dark mode support for Summer theme that switches based on browser/device preferences (#7593)

Improvements

User Interface

  • Summer Theme Refinements - Improved avatar sizing, menu colors, and tree item styling for better consistency across light and dark modes (#7594)
  • Banner Destination URL Clarity - Added placeholder text to the Destination URL field clarifying that users can type URLs manually or select from the dropdown (#7157)

Developer Tools

  • Enhanced Debug Mode - Debug mode via URL parameter (PDebug=Y) now displays all debug log types when enabled, not just sale tracking logs (#7603)

Plugins

  • Infusionsoft Extra Data - Added configuration options to map customer and product details into transaction extra data fields (#7559)

Bug Fixes

Email System

  • SMTP HELO Hostname - Fixed SMTP connection failures on strict mail servers by sending the configured server hostname instead of "localhost" in HELO/EHLO commands (#7615)

Affiliate Manager

  • Payout Method Filter - Fixed SQL error when filtering affiliates by "No method" payout option (#7609)
  • Private Campaign Mass Actions - Fixed "Approved in private campaign ID" filter not applying correctly when using "Select All" for mass actions like inviting to campaigns (#7586)

Tracking & API

  • PHP Click Tracker Cookie Saving - Fixed PHP API click tracker save3rdPartyCookiesOnly() method not saving cookies (#7604)
  • API Session Language - Fixed PHP API error and success messages not respecting the language code specified in session login, now properly translated (#7489)
  • PayPal Non-UTF8 Characters - Fixed tracking failures when PayPal IPN sends customer names containing non-UTF8 characters like accented letters (#7602)

User Interface

  • Integration Code Display - Fixed broken code formatting in Tools > Integration > Sales/Leads Tracking section, now properly styled like the Clicks tracking section (#7555)
  • Summer Theme Campaign Lists - Fixed narrow width of campaign and commission group selection lists in Affiliate Manager when using Summer theme (#7606)

Improvements

REST API v3

  • API Key Permission Synchronization - API keys now automatically update their scopes when user permissions or roles change. When custom role permissions are modified, unauthorized scopes are removed (#7557)

System Monitoring

  • Enhanced Tracking Error Visibility - Invalid sale/action format errors in tracking requests are now logged as critical events instead of debug-level messages. These errors trigger application notifications in the merchant panel. Previously, malformed tracking requests could go unnoticed in regular logs (#7570)

Bug Fixes

Audit Logs

  • Parent Affiliate Assignment Tracking - Fixed missing audit log entries when parent affiliates are automatically assigned from cookies after signup (#7579)

User Management

  • Custom Role Deletion Messages - Improved error message when attempting to delete a custom role that is currently assigned to users. The system now displays a clear, user-friendly message (#7567)

Affiliate Payments

  • Campaign Name Filter - Fixed "Campaign name" custom filter in the "Pay affiliates" section that was returning incorrect results and showing data from all campaigns instead of filtering by the selected campaign. The filter now works correctly, matching the behavior in the Transactions section (#7551)

Background Tasks

  • Session Management - Fixed issue where manually executing the "Visit log processor" task from Pending Background Tasks would unexpectedly log users out. The task now properly maintains user session during execution (#7549)

Forms & Validation

  • Password Reset Security - Added maximum length validation for username and captcha fields on password reset forms. Username field is now limited to 255 characters (SMTP standard), captcha field limited to 4 characters (#7493)

User Interface

  • Affiliate Promotion Screen Layout - Fixed layout and styling issues on the Promotion screen in affiliate panel (#7568)

Security

  • Possible XSS vulnerability (#7540)

Improvements

REST API v3

  • Transaction Filtering - Added filter support for id and data1-data5 columns in /api/v3/transactions endpoint, allowing more precise transaction queries. Transaction responses now include data field values (#7532)
  • API Key Management - API keys now persist when users change their password or activate two-factor authentication. Previously, all API keys were automatically deleted during these security actions. The system now displays a notification about managing keys in the API v3 settings (#7522)
  • Affiliate Form Fields - Introduced new /api/v3/affiliate/form-fields endpoint that returns form field configuration available to affiliates. This complements the merchant endpoint with affiliate-specific field access (#7501)

User Experience

  • ListBox Empty Values - ListBox profile fields now support empty values as a valid option. Merchants can configure listboxes with an empty line, allowing affiliates to select "no value" instead of being forced to choose from predefined options (#7531)
  • Banner Cloning - Added ability to set new description and image alt text when cloning multiple banners simultaneously (#7509)
  • Password Change Validation - Users can no longer reuse their current password when changing it, ensuring actual password changes for improved security (#7486)
  • Theme Discovery - Added "NEW" badge next to the Theme settings button and Summer theme option in Design settings, making it easier for existing users to discover the newly released modern theme (#7475)

Bug Fixes

Email System

  • Inline Image Display - Fixed issue where inline images in email templates weren't displayed in recipients' inboxes. Images embedded in automated notification emails (like Affiliate - New User Signup Approved) now appear correctly (#7530)

User Interface

  • Country List Scrolling - Fixed scrolling issues in country selection dialogs for SmartLinks and Fraud Protection features (#7519, #7533)
  • Save Button Position - Fixed "Save modified rows" button overlapping tooltips in Affiliate Manager when using Summer or Coupe themes with minimized left menu (#7478)
  • QR Code Logo Support - Fixed "Logo source not found or invalid" error when using the default system logo in QR codes. New customers can now use the QR code logo feature immediately without uploading a custom logo (#7514)

Tracking System

  • Sale Parameters - Fixed critical tracking issue where ChangedCommission and DoNotDeleteCookies parameters in direct calls to /scripts/sale.php were completely ignored. These parameters now work correctly (#7548)

Theme Management

  • Import Validation - Added validation to theme import process to prevent importing themes with missing or invalid original theme references. System now properly validates themes before import, preventing errors when viewing Design configuration screens (#7544)

Affiliate Signup Fields

  • Referral ID Validation - Fixed incorrect validation on "Configure Referral ID" screen where switching between pattern options would incorrectly validate the previous option's settings. The system now only validates the currently selected pattern type (#7538)

Data Privacy

  • Callback Anonymization - Fixed Anonymize transaction data fields plugin to properly mask data in affiliate callbacks. Transaction data fields are now anonymized in callback notifications, matching the masking behavior shown in the affiliate panel (#7484)