5.16.4.0

New Features

Campaigns

  • Campaign Display Name - Campaigns can have an optional display name that affiliates see instead of the internal campaign name across grids, reports, banners, coupons, tracking codes, and emails. Merchants keep seeing the real name, with an optional Display name column and filter in the Campaigns grid, and the alias is available in REST API v3 (#13922)

Affiliates Manager

  • Bulk File Download - Files uploaded by affiliates to a file uploader field can be downloaded for selected affiliates as a single ZIP archive. Large downloads run in the background with a progress dialog and an optional email notification when the archive is ready (#16542)

Improvements

Security

  • Improved Output Escaping - Improved escaping of affiliate-entered data (#16596) (#16765)
  • Improved Access Control - Strengthened access control checks for account-scoped configuration data (#16764)
  • Site Replication Hardening - Hardened how replicated site content is served (#11880)

Performance

  • Clicks Report on Large Databases - The Clicks list no longer times out on installations with a very large click history when filtered by affiliate, campaign, or date range (#16730)

REST API v3

  • Consistent Date Parameters - Empty date and period parameters are now treated the same as absent ones across endpoints, and GET /reports/top-affiliates defaults to the current month instead of all-time data when no date parameters are given (#16639)

Network

  • Lifetime Referrals Access Control - Affiliate details in the Lifetime referrals grid are shown only to merchants allowed to read affiliates, and network merchants see only referrals of their own account (#16497)

Bug Fixes

Login

  • Google Sign-In Login Records - Signing in with Google is now recorded as a regular login: the What's new page no longer reappears on every login, last login date and login count are updated, and new-IP login notification emails are sent (#16711)
  • Login to Affiliate Panel Button - The Login to affiliate panel button no longer fails with "Can not login. User is not approved." when clicked right after opening an approved affiliate's profile (#16736)

User Interface

  • Color Picker Position - The color picker popup now opens next to its field, at the correct size and fully within the page, in both left-to-right and right-to-left languages (#16657)
  • Direct Links to Configuration Screens - URL anchors for Payouts Balance and eight other configuration screens now open the requested screen instead of redirecting to Home (#16645)

Site Replication

  • Tracking Code Placement - The click tracking code is now inserted after the page's real opening body tag, so replicated pages whose head scripts write a body tag in JavaScript no longer render broken (#13768)
  • Declined Click Redirect - Declined clicks on replicated pages are now redirected to the configured URL instead of failing with a server error (#16640)