Kybernaut IČO DIČ

1.11.2 (2026-08-07)

• Compatibility: Declared compatibility with WordPress 7.0.3 and WooCommerce 11.0.0.
• Fix: The admin order-save handler no longer performs a full $order->save() on every order save. IČO/DIČ/IČ DPH meta is now written only when the submitted values actually changed, and persisted via save_meta_data() instead of a full order save. This keeps the plugin out of the multi-plugin save cascade on woocommerce_process_shop_order_meta that — combined with other plugins calling $order->save() on the same hook — could inflate order totals recalculated by WooCommerce core.

1.11.1 (2026-07-27)

• Performance: ARES and VIES lookup results are now cached for 24 hours, so a checkout no longer queries ARES twice for the same IČO and logged-in EU B2B customers no longer trigger a VIES request on every page load. Only definitive answers are cached — registry outages are retried on the next request. Cache duration is filterable via woolab_icdic_ares_cache_ttl and woolab_icdic_vies_cache_ttl.
• Security: The admin order-save handler now requires the edit_shop_orders capability and properly unslashes submitted values before saving order/user meta.
• Security: Company identifiers (IČO, DIČ, IČ DPH) are now HTML-escaped in formatted addresses and PDF invoice output.
• Fix: Slovak DIČ validation now returns a proper boolean — previously an all-zero DIČ passing the format check was wrongly treated as invalid.
• Fix: ARES address parsing no longer causes errors when address fields (street, postcode, city) are missing in the registry response.
• Fix: The legacy WooCommerce < 2.7 AJAX customer-details handler now sanitizes the user_id parameter.
• Fix: SuperFaktura compatibility (thanks @lukasprelovsky)

1.11.0 (2026-06-29)

• Maintenance: Internal code refactoring and added automated tests. No change to checkout behaviour, validation messages, or settings.
• Fix: The SK-only “VAT reg. no.” (IČ DPH) field now shows only for Slovak orders on the admin order edit screen. Two issues were fixed: an off-by-one country comparison ($country[0] only checked the first character) in the field definition, and the country-based show/hide script not loading on HPOS order edit screens, which left the field visible on Czech orders.
• Fix: Fatal error on every page load for logged-in EU B2B customers when VIES was unavailable — ViesException was re-thrown from the init hook and the update_order_review AJAX call; the exception is now caught, logged, and treated as “not exempt” instead.
• Fix: ARES mismatch notice for Tax ID field incorrectly reported the field as “Business ID”.
• Fix: Leftover debug get_user_meta() call appended stray text to the Settings link in the admin notice.
• Fix: Admin script/style enqueue arguments — wp_enqueue_style() received the plugin URL as its dependencies parameter; admin-edit.js and admin.js shared the same handle so one silently failed to load; version parameter was missing from all admin enqueues.
• Fix: ARES autofill checkbox setting default changed from the invalid 'false' to the correct 'no'.
• Security: ajaxAres endpoint now verifies a nonce and sanitizes the ico request parameter.
• Security: Notice-dismiss AJAX endpoint is restricted to authenticated users with the manage_woocommerce capability and now requires a nonce.
• Security: Raw $_POST reads in checkout validation wrapped in wc_clean( wp_unslash() ), consistent with the rest of the codebase.

1.10.5 (2026-03-25)

• Feature: Added a setting to disable the DIČ / IČ DPH match validation for Slovakia. Useful for non-profit organizations where IČ DPH does not match “SK” + DIČ. Go to WooCommerce > Settings > General > Kybernaut IČO DIČ options.

1.10.4 (2026-03-19)

• Fix: VAT exemption not applied when “Buying as a company” toggle is disabled. When the toggle was off (fields always visible), the VAT exempt check silently failed because it required a non-existent checkbox to be checked.

1.10.3 (2026-03-18)

• Fix: “Trying to access array offset on null” error on checkout when shipping_country or ship_to_different_address POST fields are not set (e.g. when shipping to billing address).
• Fix: Added missing isset() checks in VAT exempt validation for parsed POST data.