Ambikly – Sell Online: Cart, Checkout & Digital Downloads

Changelog

1.0.5

Makes the block-editor blocks usable, and corrects the documentation.

• Fix: all eight block-editor blocks were registered on the server only, so WordPress would render one already present in a page but never offered it in the inserter — no title, no icon, no category. Adding one meant hand-writing <!-- wp:ambikly/mini-cart /--> into the code editor. Each block now appears in the inserter under Widgets, with its own settings panel and a live server-rendered preview in the editor.
• Docs: the uninstall opt-in was documented as living under “Settings → Advanced”, a tab that no longer exists. It is under Settings → Features & Addons.
• Docs: coupons were described as supporting category restrictions. They restrict by product, by customer email, and by minimum/maximum spend — not by category.
• Docs: the email template preview opens in a new tab rather than rendering inline, and the description now says so.
• Docs: readme rewritten so every capability listed is one the plugin actually ships — variant images, local pickup, Net 7–90 terms, postcode and city tax rules, WP-CLI commands and CSV import/export were all present but undocumented.

1.0.4

Correctness and contrast fixes found in a full click-through audit of every screen.

• Fix: a manual order created in wp-admin attached to whichever customer record was linked to the logged-in administrator’s own account, not the customer the merchant picked. The chosen customer kept an empty order history, and the admin-linked record had its name and phone overwritten with the buyer’s details.
• Fix: on Reports, switching “Compare to previous period” on showed nothing at all when the previous period had no activity — a percentage change from zero is undefined, so the card rendered blank and the comparison looked broken. It now says so. (Regression introduced in 1.0.3.)
• Fix: wp ambikly recompute customer-totals counted orders differently from every screen that displays them — it excluded refunded orders, so a customer with one fully-refunded order was stored as having none while the admin and My Account both showed one. It also reported “0 customer(s)” on runs that had just reset a row.
• Fix: the “Explore Ambikly Pro” button rendered wp-admin’s dark grey on orange instead of white, and the “Unlock Ambikly Pro” heading rendered near-black on its orange banner. Both were losing a CSS cascade fight to wp-admin’s own unlayered element styles.
• Fix: in dark mode the selected tab on the Emails screen was effectively invisible (dark orange text on a dark orange fill). Several colours at the darker end of each palette had no dark-mode equivalent at all.
• Fix: the “Out of stock” and variant-count badges, and the short-description character counter, were below the AA contrast threshold.
• Fix: invoices showed only their own sequential number, with nothing tying them back to the order. Packing slips have always shown it.

1.0.3

Interface, accessibility, and refund-integrity fixes.

• Fix: every money figure in the admin was printed without thousands separators — the Dashboard and Reports headline numbers read “$2656383.23” instead of “$2,656,383.23”.
• Fix: the admin ignored the store’s “Currency position” setting, so a store configured for a right-hand symbol saw it on the left everywhere in wp-admin while the storefront showed it correctly.
• Fix: report chart axis labels were raw fractions of the largest value (“$2582617.78”); they now round to readable steps and abbreviate (“$2.6M”).
• Fix: chart gridlines, axis and tick labels were hardcoded light-theme greys and stayed light in dark mode.
• Fix: on the Products list the Actions column painted over the Status column — the header read “Sta” and every status pill was clipped to a single letter.
• Fix: Reports stat cards printed “vs previous period” under every figure even with comparison switched off.
• Fix: the Store Description field’s placeholder promised “Press Enter to save, Ctrl+Enter for new line”; no such handling existed.
• Fix: order emails, invoices and packing slips used indigo for links and buttons instead of the Ambikly brand colour.
• Fix: shop-grid cards let their buttons float at different heights when product names wrapped to different line counts; long titles also stretched the grid.
• Fix: the storefront was squeezed into the narrow reading-width container some themes apply to page content, rendering a three-column grid at a third of the available width. It now centres on the viewport, and does nothing on themes that already give it room.
• Fix: “7066 product(s)” and “3 review(s)” are now properly pluralised and digit-grouped (“7,066 products”, “3 reviews”).
• Fix: the “Out of stock” button was white text on a faded orange fill (~1.9:1) — the least readable text on the shop grid. It now uses a legible neutral disabled style.
• Fix: the missing-image placeholder was a 📦 emoji, which renders differently on every operating system. It is now a plain SVG icon.
• Fix: importing a CSV that omits optional columns — the documented, ordinary case — emitted around 22 PHP warnings per row, which on sites that display errors corrupted the import response and made a successful import report a failure.
• Fix: a webhook could be saved against an event name Ambikly never emits. It stayed “Active”, logged no deliveries and reported no error. Unknown events are now rejected at save time.
• Fix: 48 form controls across the Coupon, Company, Category, Order, Tools and digital-product screens had a visible label that was never associated with the field, so screen readers announced them as unnamed. The shared field wrappers now bind label to control automatically.
• Fix: refunds were capped by the order total rather than by the amount actually captured, so an unpaid bank-transfer or cheque order could be “refunded” — restoring stock and emailing the customer a refund notice for money they had never sent. The Refund button is now disabled on such orders, and the server refuses the request.
• Fix: the variant grid and the manual-order line-item table had header cells without scope, which is what associates the unlabelled per-variant price and stock inputs with their column.
• New: nine replacement plugin-directory screenshots taken from a clean store.

1.0.2

• Fix: fatal error on PHP 7.4 whenever an order, product or other record was JSON-encoded or accessed as an array (mixed return types are PHP 8 only). Affects every 1.0.1 site on PHP 7.4.
• Fix: guest buyers returning from Stripe or PayPal landed on a generic thank-you page — their cart was never cleared and the order-completed event never fired. Both return URLs now carry the order key.
• Fix: a cart line could reference another product’s variation and, at order time, decrement that other product’s stock.
• Security: editing a customer linked to a WordPress account no longer lets a Store Manager change that account’s login email (administrators only).
• Fix: any REST route with an id in the URL could be pointed at a different record by adding an id to the request body (e.g. editing customer A saved customer B).
• Fix: a checkout billing name containing HTML/script landed unescaped in the order confirmation and admin notification emails.
• Fix: logging in with items in a guest cart deleted the account’s existing cart instead of merging it.
• Fix: two simultaneous checkout submissions for the same cart created two orders and decremented stock twice.
• Fix: an order’s status could be set straight to “Refunded” from the dropdown or API without any refund happening; a refunded order could later be moved to another status.
• Fix: tax-inclusive pricing charged tax on top of the inclusive price.
• Fix: digital products created from the quick-add modal, the REST API, CSV import or the sample importer were unpurchasable (“Out of stock”) by default.
• Fix: bulk-editing variations always failed with a database error; clearing a variation price saved 0 instead of empty.
• Fix: exporting products to CSV and re-importing the file cleared every SKU.
• Fix: Stripe refunds issued from the Stripe dashboard were recorded with the cumulative refunded amount; the second partial refund was over-recorded or rejected. Refunds are now idempotent per gateway refund id, so an admin refund echoed back by the gateway webhook is not recorded twice.
• Fix: cancelling and later reopening an order left stock overstated and B2B credit under-reserved; cancelled or failed orders kept their coupon usage forever.
• Fix: deleting an order left its refunds, coupon usage and still-working download links behind.
• Fix: Stripe/PayPal checkouts the buyer never finished held stock indefinitely — they now expire to “Failed” after 24 hours (filter ambikly_pending_gateway_order_ttl).
• Fix: a missing column on the categories table caused the upgrade routine to drop and recreate the table; columns are now added in place.
• Fix: paid card orders emailed the customer twice and declined attempts emailed the merchant a “new order”.
• Fix: variable-product cart lines never recorded which variation was chosen; sold-out variations kept “Add to Cart” enabled; the mobile cart clipped the totals and checkout button off-screen.
• Fix: logged-in customers’ cart actions failed with a 403 once their nonce went stale mid-session.
• Fix: a WordPress account checking out with a different billing email created a second, disconnected customer record and broke address prefill.
• Fix: the “Create an account during checkout” setting had no effect.
• Fix: duplicate canonical tags and a per-product meta title that never reached <title> on product pages; unstable product sort order across pages; plan-priced digital products sorted as $0.
• Fix: the setup wizard could create duplicate My Account / Order Received pages when re-run; wizard settings are now saved under the same keys the Settings screen reads.
• Fix: Install::create_tables() could reset the database version and re-run the full migration on every request.
• Security: hardened cart/checkout input (quantity ceiling, nested address payloads, client-controlled created_via), added a coupon brute-force throttle, sanitized customer name/phone/email at write time, and stopped a raw database error leaking on duplicate tag/brand slugs.
• Accessibility: product-editor drawers are keyboard-reachable, every form control has a label, visible focus rings, skip-to-content link, aria-current navigation markers, table header scopes, live region for add-to-cart, reduced-motion support, and contrast fixes throughout the admin and storefront.
• Add: Settings → Advanced → “Remove all data when the plugin is deleted” (the uninstall opt-in previously had no UI). Removed three Advanced toggles that had no effect.
• Add: manual orders support coupons; Stripe key format validation; name/SKU length and negative-stock validation with clear errors.
• Dev: 147 PHPUnit regression tests covering the fixes above; PHP 8.4 deprecation fixes.

1.0.1

• Fix: two admin links (the setup wizard’s “Add a product” button and the low-stock/out-of-stock email’s “Manage product” link) pointed at an unregistered admin page and returned a 403 instead of opening the product editor.
• Add: a “Add sample products” tool (Setup Wizard finish step and Tools screen) that creates 5 example products — simple, variable with real variations, digital download, digital with multiple pricing plans, and one on sale.
• Add: a “Rerun setup wizard” shortcut on the Tools screen.

1.0.0

• First stable release.