1.0.48
Dernière- Security: a product variant must belong to the product added to the cart, so a cheaper variant of another product can no longer set its price
- Security: version downloads need a paid order: an unpaid, refunded or cancelled order gives no download, also through a link sent before
- Security: the "max uses per user" limit of the coupons is enforced, by account and by billing email (cancelled and expired orders give their use back)
- Security: unpublished and scheduled products can no longer be bought
- Security: customers-only service plans need a purchase, wherever they are added from
- Security: the downloads of an order are only given to its account, or to the browser a guest order was placed in, and a signed-out visitor opening an account order is asked to sign in first
- Security: a gateway confirmation never reopens a refunded or cancelled order: only an admin can mark it paid again