Bizuno Accounting – ERP/Accounting/CRM (for WordPress)

7.4.5

• Fix: Shared-host “Database connection failed” (MySQL error 1203) — the plugin opened a MySQL connection on every WordPress request (storefront page views, unrelated AJAX) and double-connected on Bizuno AJAX. On hosts with a low max_user_connections cap this exhausted the pool and could take the whole site down. The connection is now opened lazily — only when Bizuno actually handles the request.
• Fix: /bizuno required a WordPress login first — reaching /bizuno now goes straight to Bizuno’s own sign-in screen (Bizuno authenticates independently of WordPress), instead of showing a “log into WordPress first” placeholder.
• Fix: /bizuno served a stale cached page — page-cache layers (Bluehost Endurance Page Cache, WP Super Cache, W3TC, etc.) could serve a cached copy of the /bizuno page without running PHP, so it never booted Bizuno. The /bizuno page and Bizuno AJAX responses are now marked non-cacheable.

7.4.3

• USPS v3 REST API — modernized USPS shipping integration: real-time rates, label generation, void/refund. The legacy v1 endpoints are deprecated by USPS; this brings Bizuno to the current API.
• Shipping manager — added a “track all” link on the shipping dashboard and FedEx Freight (LTL) tracking URL handling.
• Sales / PO journals — context-aware Due Date — the journal’s date field now relabels per type: “Ship Date” for sales invoices (defaults to today), “Expiration Date” for sales/vendor quotes (today + 30), “Expected Ship” for sales/purchase orders. Stays editable; preserves saved values on edit.
• Users Manager — admin password reset — administrators (security level 5) can now reset another user’s password from the Users Manager. Useful for help-desk scenarios where the user can’t reach the lost-password flow.
• Dashboard favicon — robust multi-source fetch with a local fallback when Gravatar is unreachable. No more broken-image icons on offline / firewalled sites.
• Fix: Authorize.net (and every CC gateway) stored-card sale was broken — charging a saved card silently failed because the dispatcher routed both “new card” and “stored card” radio selections to the same gateway action. Stored cards now dispatch to the wltCap action that uses the saved payment profile correctly.
• Fix: PhreeForm Notes/long-text box fields were clipping — text in box-style container fields (Notes on picking tickets, long descriptions, address blocks) rendered as one giant line that cut off at the right edge of the box. Text now wraps at word boundaries inside the box.
• Fix: Work-order PDFs lost task description formatting — HTML-wrapped task descriptions (<p>...</p> etc.) now render correctly in the PDF instead of as raw HTML.
• Fix: AJAX requests after session expiry returned the HTML login page — JSON-expecting callers now receive a JSON {auth: false} response so the client can re-auth cleanly instead of trying to parse HTML.
• Fix: Contacts deleteLog required the wrong permission level — was checking edit (3) but should require delete (4). Brings it in line with other delete operations.
• Security: Inventory + Contacts — closed five ungated public methods that wrote/repaired data without checking the caller’s ACL. Internal architecture: inventory and contacts now have model classes mirroring the journal class pattern for consistency.

7.4.2

• Fix: install/connection failed on locked-down managed MySQL hosts (GoDaddy and similar) with “1227 Access denied; you need … SESSION_VARIABLES_ADMIN”. The DB layer set server-global charset variables on connect, which shared hosts forbid. Now negotiates charset via the PDO DSN (no privileges needed) and uses a guarded SET NAMES. Fixes activation on restricted hosting.

7.4.1

• Fix: dashboard JavaScript broke on fresh 7.4.0 installs — the version string emitted into an inline script carried a trailing newline, producing an unterminated JS string literal that halted page scripts (bizID is not defined). Version is now trimmed before use. Upgrade strongly recommended for anyone on 7.4.0.

7.4.0

• First public release of the consolidated single-plugin architecture (the former bizuno-wp library plugin is now bundled inside this one — see the migration notice that appears in admin if bizuno-wp is still installed).
• In-app password change in the user profile editor, with current-password verification.
• Lost-password flow gains an inline-reset-link fallback when the site’s mail transport isn’t configured or send fails — survives cross-server DB restores where encrypted SMTP credentials become unreadable.
• Installer fix: admin passwords set during the first-run wizard now verify correctly on the next login (a key-drift bug in the installer’s portalCFG.php generation made the first set password unusable in some cases).
• Favicon + login-screen logo now serve from the plugin’s bundled src/view/images/ instead of pinging bizuno.com at every page load — better for air-gapped installs and reduces external dependencies.
• Plugin Check (WordPress.org review tool) compliance: scoped via phpcs.xml, security findings cleared, text domain corrected to match slug.
• bin/reset-bizuno-password.php — CLI emergency password reset for cases where the web UI can’t load.

7.3.9

• Self-contained plugin — folds the former bizuno-wp library plugin into this one. Single install, no sibling plugin required.
• Switched updates to the standard WordPress.org channel; the third-party update-checker library is gone.
• Bizuno path layout: src/, vendor/, scripts/ all live inside the plugin directory.
• Library upgrades: tFPDF replaces TCPDF; picqer barcode generator; FPDI for PDF import.