VDot Crypto Gateway for WooCommerce

2.0.1

• SECURITY: API keys are now stored as salted hashes and validated against per-endpoint scopes (read/write/admin) with rate limiting
• SECURITY: REST v2 payment creation is idempotent via idempotency_key — duplicate requests no longer create duplicate transactions
• SECURITY: Webhook deliveries are HMAC-signed with per-endpoint secrets and protected against replay via unique delivery keys
• SECURITY: Hardened wallet CSV import — upload verification, header validation, row limits, and per-address validation
• SECURITY: Reset/import/export AJAX handlers now enforce capability checks, nonces, and explicit confirmation
• SECURITY: External price/explorer requests now use HTTPS, bounded timeouts, and strict response validation
• Fixed: legacy duplicate plugin files under admin/ removed (single canonical codebase)
• Fixed: database migration for API key lifecycle (expiry, last-used IP) and webhook replay protection
• Improved: decimal-safe crypto amount handling and exchange-rate math
• Improved: prepared-statement coverage for direct database queries

2.0.0

• Setup Wizard — guided 7-step onboarding to configure coins, wallets, payment settings, and price feeds
• Health Monitor — live dashboard with 10 checks (Cron, wallets, explorer API, price API, PHP, WooCommerce, SSL, REST API, memory, cache)
• Notification Center — smart notifications for cron failures, price feed outages, explorer errors, and wallet balance drops
• Analytics — full analytics page with period tabs (today/week/month/year), revenue charts, coin distribution chart, and detailed metrics
• Enhanced Dashboard — weekly/yearly revenue cards, success/failure doughnut chart, top wallets list
• Search Everywhere — Ctrl+K shortcut with AJAX search across transactions, wallets, coins, logs, payments, and WooCommerce orders
• WordPress Dashboard Widget — today’s revenue, pending, failed, and total revenue in a 2×2 grid
• Settings UX refactor — accordion sections, live search filter, inline validation hints, drag-reorder price API priority
• Fixed: Base58 decode crash in gmp_mul() — kept GMP resources during loop, converted to hex at end only
• Fixed: Validator signature mismatch — accept $network parameter in validate() method

1.1.2

• SECURITY: Fixed false “PAYMENT DETECTED – CONFIRMING” showing when no real payment was sent — complete rewrite of blockchain transaction verification logic
• Fixed: Direction validation (ETH/BSC/Polygon/Arbitrum/Optimism) — now verifies the transaction to field matches the wallet address; previously ANY transaction on the address (including outgoing) triggered false payment detection
• Fixed: Time filtering (all coins) — transactions that occurred before the order was created are now skipped (with 5-minute grace for clock skew), preventing old/historic transactions from triggering false positives
• Fixed: Amount validation (all coins) — zero-value, dust, and clearly wrong amounts (below 50% of expected) are now rejected during verification
• Fixed: TXID uniqueness (all coins) — the same blockchain transaction can no longer be credited to multiple orders; duplicate txid reuse across orders is now blocked
• Fixed: Failed transaction rejection (ETH/TRON) — checks isError, txreceipt_status, and contractRet fields to skip failed/reverted blockchain transactions
• Fixed: BTC confirmation count — previously used raw block_height (800,000+) as the confirmation count, causing instant false completion; now correctly calculates confirmations as current_height - tx_block_height + 1 via cached blockchain.info/blockstream API
• Fixed: Explorer response caching — changed from caching the parsed result (reused incorrectly across different orders on the same wallet) to caching raw API responses and re-parsing fresh per transaction
• Added: TRON destination validation with tron_address_matches() and tron_hex_to_base58() helpers to verify TRX/TRC20 transfer recipients across hex and Base58 address formats
• Added: Verified transaction logging — each confirmed match now logs coin type, txid, value, and confirmation count for audit trail
• Improved: TRC20 token transfer parsing — now decodes a9059cbb method data to extract recipient address and amount for proper validation

1.1.1

• Premium UI redesign — complete admin interface and frontend payment templates redesigned to commercial-quality appearance
• Modern design system with CSS custom properties, 8px spacing system, premium typography, and consistent color palette
• Premium card layouts with soft shadows, rounded corners (10–14px), hover animations, and proper spacing
• Redesigned dashboard with stat cards, hero section, quick actions, and system health indicators
• Premium coin management with slide-over panel, subtabs (General, Wallets, Networks, Fees, Advanced), and drag-and-drop reorder
• Premium wallet management with card-based layout, status chips, and inline actions
• Redesigned transactions table with sticky header, status pills, coin icons, filters, and bulk actions
• Premium checkout settings page with toggle switches and grouped settings cards
• Premium payment page inspired by Stripe and Coinbase Commerce with animated status bar and QR code
• Modern toast notification system with progress bars and auto-dismiss
• Command palette (Ctrl+K) for quick navigation between admin pages
• Modal system with backdrop blur, focus trapping, and confirmation dialogs
• Animated toggle switches replacing plain checkboxes
• Empty state illustrations with friendly text and action buttons
• Responsive design for desktop, laptop, tablet, and mobile
• Accessibility improvements: keyboard navigation, focus states, ARIA labels, WCAG AA compliance
• Fixed: Resume payment failing with “RESUME FAILED” when timer expired (transaction still pending in DB while cron hasn’t run)
• Fixed: Resume payment API now auto-expires pending transactions when timeout has elapsed before creating new session
• Fixed: allow_resume_expired setting default mismatch — API treated unset value as disabled while UI defaulted to enabled
• Fixed: Transactions bulk actions calling non-existent update_status() method causing fatal PHP error (now uses update_status_atomic)
• Fixed: Transactions bulk selection using hidden inputs instead of checkboxes (all items always submitted)
• Fixed: Checkout settings “Display Mode” (method) field not saved to database
• Fixed: Checkout toggle settings (display_coin_logos, show_exchange_rate, show_countdown, auto_cancel, auto_complete, reduce_stock, allow_resume_expired) could never be turned off — unchecked checkboxes defaulted to “yes” instead of “no”
• Fixed: Price Feeds page broken HTML rendering due to duplicate closing table tag
• Fixed: Coin slide-over panel save could not disable coins or toggle test_mode — jQuery serializes boolean false as string “false” which PHP !empty() treats as truthy (now uses filter_var with FILTER_VALIDATE_BOOLEAN)
• Fixed: Duplicate bpCopy() function definition in payment.js
• Improved: Real blockchain verification confirmed — payment status only changes based on actual blockchain explorer API responses (blockchain.info, etherscan, bscscan, trongrid, etc.)
• Improved: VDot plugin icon SVG fixed (was corrupted with invalid characters)

1.1.0

• Performance optimization engine with multi-level caching, query batching, and background processing
• Security dashboard with threat monitoring and health checks
• Full import/export system with JSON backup and restore
• WooCommerce Subscriptions support (renewals, payment meta, method updates)
• Multi-vendor marketplace support (Dokan, WCFM, MVX) with vendor wallets and payouts
• Duplicate payment protection with idempotency keys and atomic status updates
• Database performance indexes on transactions, logs, and webhook logs
• AJAX lazy loading for wallet admin pages
• WordPress.org compliance: accessibility (ARIA labels), security hardening, uninstall cleanup
• 30+ admin interface improvements with design system
• Comprehensive test suite (unit, integration, WooCommerce)
• Detailed performance, security, and compatibility reports

1.0.0

• Initial release
• Support for 12+ cryptocurrencies
• Automatic payment detection and confirmation
• QR code generation
• Wallet rotation (sequential and random)
• WooCommerce Cart & Checkout Blocks support
• WooCommerce HPOS compatibility
• Comprehensive admin interface with analytics dashboard
• Secure REST API (v1 + v2)
• Email notifications (instructions, received, confirmed, expired)
• CSV/JSON wallet import/export
• Payment receipt downloads
• Translation ready