Description

Brendigo Sidrena Cijena is an independently developed plugin for WooCommerce stores that need tools for recording and publishing reference-price and price-list data.

WooCommerce remains the source of products and variations. The plugin adds price records and publication tools around the existing catalogue and does not create a second WooCommerce product catalogue.

Features include:

reference-price fields for products and variations
a separate 30-day reference for sale-price situations when applicable
price and availability data by physical location
unit-price calculation and publication tools
public CSV and XML price lists
a searchable public HTML price-list page
archives of previous successful publications
JSON manifest and public REST endpoints for published price-list data
validation before replacing the last successful publication
scheduled generation, publication monitoring and optional email alerts
bulk editing of Brendigo Sidrena Cijena fields
WooCommerce CSV import/export integration
stored file size, row count and SHA-256 integrity metadata

Scope and legal notice

The plugin is designed to assist merchants with technical price-record and publication workflows. It does not provide legal certification, guarantee legal compliance, or replace the merchant’s source records or professional legal advice.

The plugin generates both CSV and XML by design for interoperability. This does not claim that every merchant is legally required to publish both formats at the same time.

This release models the currently published Croatian rules for the additional/reference price, public price lists, unit-price display and 30-day sale-price reference. The future base price (bazna cijena) layer introduced by the 2026 consumer-law amendment is kept separate and is not auto-filled from the additional/reference price. Its exact reference day, affected products and display method must follow the applicable implementing rules before that feature can be relied on.

Independence and trademarks

Brendigo Sidrena Cijena is independently developed by Brendigo. It is not affiliated with Automattic or WooCommerce, and it is not an official WooCommerce product.

The WooCommerce name is used only to describe compatibility, the declared plugin dependency and integration behavior.

All original code, bundled documentation and bundled brand images in this package are distributed under the plugin’s declared GPLv2-or-later license.

Included Croatian documentation

The installable package includes local documentation and does not need to fetch a remote manual:

docs/UPUTE.md – detailed Croatian text guide

Support and optional setup

Support email: sidrena@brendigo.com

WhatsApp support: +385 91 901 0092

Optional paid setup support is available from the author. It is not required and does not unlock, restrict, or change any plugin functionality.

External services and user-initiated links

The plugin does not require a Brendigo account, remote API or SaaS connection for its core functionality. It does not send telemetry or usage analytics to Brendigo.

When an administrator explicitly starts the public-access check, the plugin uses the WordPress HTTP API to request public price-list URLs generated on that same WordPress site. This is a user-initiated diagnostic request and does not send product or customer personal data to Brendigo. If WordPress safe-URL validation cannot resolve the site’s own public hostname because the host maps it to a private/loopback address, the diagnostic may retry the same safe request with a temporary host allowance restricted to that exact, already validated same-origin uploads host. It never allows an arbitrary remote host.

The administration screens and bundled documentation contain optional links. The plugin does not contact these services merely because the plugin is installed or an admin screen is opened.

Brendigo – plugin information, support and optional setup. Terms: https://brendigo.com/uvjeti-koristenja/ Privacy: https://brendigo.com/politika-privatnosti/
WhatsApp – the support button opens wa.me only after the administrator clicks it. WhatsApp then receives the normal request data generated by the browser and handles it under its own terms and privacy policy. Terms: https://www.whatsapp.com/legal/terms-of-service?lang=hr Privacy: https://www.whatsapp.com/legal/privacy-policy?lang=hr
Croatian legal and information sources – links to Narodne novine, the Ministry of Economy and the Croatian Chamber of Trades and Crafts are provided for manual reference. The plugin does not fetch those pages in the background.

Privacy

Brendigo Sidrena Cijena does not add tracking pixels, analytics SDKs or background telemetry. Data entered into plugin fields is stored on the WordPress site and used to generate the site’s own published price-list output.

The local administrative audit log may record the WordPress user ID associated with an administrative action. Audit entries are pruned after 400 days and capped at 5,000 rows. The plugin also adds suggested disclosure text to WordPress’s Privacy Policy Guide.

The optional email alert feature uses the site’s configured WordPress mail transport. The optional WhatsApp link is opened only after an administrator clicks it.

Installation

Install and activate WooCommerce.
In WordPress, open Plugins > Add New Plugin > Upload Plugin.
Upload brendigo-sidrena-cijena-1.0.34.zip.
Activate Brendigo Sidrena Cijena.
Open SIDRENA > Settings.
Configure locations and verify any suggested store address before saving.
Open an existing product or the SIDRENA bulk catalogue and complete the required price data.
Open the built-in technical check screen and review data warnings relevant to your store.
Generate the first publication under Price Lists.
Verify the public CSV/XML output, archive and audit log.

Detailed Croatian instructions are included in docs/UPUTE.md and in the built-in Help screen.

FAQ

Does the plugin duplicate WooCommerce products?: No. Existing WooCommerce products and variations remain the source of truth.
Does the plugin guarantee legal compliance?: No. It provides technical tools intended to assist with recording, checking and publishing price data. The site owner remains responsible for confirming which requirements apply to the business and whether published data is correct.
Does the plugin send telemetry to Brendigo?: No. Core functionality runs on the WordPress site. The optional external links are opened only after an administrator clicks them.
Why is there a WhatsApp link?: It is an optional support shortcut. Clicking it opens WhatsApp with a pre-filled support message. The plugin does not contact WhatsApp in the background.
Is paid setup required?: No. Setup support is optional and is not required to install, configure or use any feature included in the plugin.
Are products hidden from the WooCommerce catalogue omitted from the public price list?: Not automatically. A published, publicly accessible product remains included even when its WooCommerce catalogue visibility is hidden. Use the SIDRENA public-price-list setting to explicitly exclude an item only when that exclusion is appropriate for the real offer. Private, draft and password-protected products are not published.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“Brendigo Sidrena Cijena” is open source software. The following people have contributed to this plugin.

Brendigo

Translate “Brendigo Sidrena Cijena” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

1.0.34

Restored the WordPress administration menu, submenus and admin bar to the active native WordPress admin color scheme; SIDRENA no longer recolors WordPress chrome.
Replaced the custom image menu icon with the native dashicons-tag icon so its color and active/hover states are controlled by WordPress.
Removed the unused custom menu SVG and narrowed admin styling to SIDRENA-owned interface content.
Scoped SIDRENA form-control styling to the plugin application container so WordPress-owned controls keep their native admin styling.
Limited the service editor stylesheet to the SIDRENA-owned sidrena_service_price metabox instead of restyling WordPress core postboxes.

1.0.33

Added WordPress Privacy Policy Guide disclosure for the local administrative audit log, its bounded retention, public price-list data and optional site-local email alerts.
Removed the WooCommerce package runtime branch for an unshipped standalone catalogue class, reducing dead distribution-only code and static-analysis ambiguity.
Corrected the installation filename in readme.txt so all distributed version references consistently point to 1.0.33.
Re-audited activation, external requests, admin asset scope, REST permissions, mutable requests and direct-access guards against the current WordPress.org common-issues checklist.

1.0.32

Added an explicit WooCommerce 8.0+ runtime guard to match the declared compatibility metadata and fail safely if an unsupported WooCommerce version is active.
Hardened activation-time upload-directory protection so a non-writable uploads directory is skipped without attempting a file write.
Retained the 1.0.31 translation-timing fix that defers WooCommerce CSV translated labels until init.

1.0.31

Deferred WooCommerce CSV import/export hook registration until init so translated column labels cannot trigger WordPress just-in-time translation loading notices during plugins_loaded.
Hardened plugin activation schema definitions to use WordPress dbDelta() primary-key formatting while retaining $wpdb->prefix and $wpdb->get_charset_collate().
Kept the WordPress.org package slug/text domain brendigo-sidrena-cijena and display name Brendigo Sidrena Cijena unchanged.

1.0.30

Hardened multidimensional POST and uploaded-file metadata handling so values are recursively sanitized before shape-specific processing.
Rejected array-shaped values on scalar GET/POST fields before sanitization to avoid malformed-request TypeError failures on PHP 8.x.
Tightened output escaping for dynamic admin/public CSS classes and conditional HTML attributes.
Reduced normal-request overhead by running schema, role, storage and option repair work only when the stored plugin/schema version requires an upgrade.
Marked the plugin’s own JavaScript bundles for deferred loading on supported WordPress versions.
Replaced the bundled PDF manual with built-in administration help and the GPL-compatible text documentation included in the package.
Removed unused release assets and internal-only notes so the distributable ZIP contains only production/runtime documentation and referenced assets.
Simplified optional setup messaging so it is clearly separate from plugin functionality and does not present a feature unlock or requirement.
Cleaned uninstall compatibility matching, removed a dead bootstrap reference to an unshipped standalone class, and revalidated current WordPress 7.1 / WooCommerce 11.1 compatibility metadata.

1.0.29

Kept the final WordPress.org slug, plugin directory, main PHP filename and text domain aligned to brendigo-sidrena-cijena only.
Removed the remaining raw-array shape checks from the service editor that could trigger ValidatedSanitizedInput findings in WordPress Plugin Check.
Kept service saves behind the dedicated nonce plus edit_post capability check and sanitizes every scalar or array leaf before storage.
Re-audited mutable request handling, REST route permissions, external links, filesystem calls, updater hooks, inline assets and production error-reporting patterns for WordPress.org submission readiness.
Re-ran package integrity, PHP syntax and text-domain consistency checks against the final new slug.

1.0.28

Hardened the public-file availability diagnostic against false failures caused by loopback restrictions, private-origin DNS, CDN cache, immediately cached 404 responses, and site/domain migrations.
Public and archive URLs are now reconstructed from the current WordPress uploads base and stored filenames, preventing stale pre-migration hostnames from breaking the public check or manifest.
Added local file, size and SHA-256 verification before HTTP probing so missing or corrupted publications are distinguished from transport-only problems.
Added a same-origin fallback request only for plugin-generated upload URLs after strict scheme/host/port/path validation; arbitrary remote URLs remain rejected.
Added cache-busting and no-cache request headers to reduce stale CDN/proxy results after a newly generated publication.
Added separate success, warning/indeterminate and confirmed-failure outcomes with richer audit-log diagnostics instead of treating every server-side loopback error as a public-access failure.
Keeps the final package directory, main plugin filename and text domain aligned to brendigo-sidrena-cijena.
Extended uninstall compatibility to recognize the pending WordPress.org main filename.

1.0.26

Hardened WooCommerce product and variation request handling so scalar values are sanitized inline and variation arrays are recursively sanitized before use.
Hardened service-editor text, textarea and exemption inputs so submitted values are sanitized at the point they enter plugin code.
Removed the four real ValidatedSanitizedInput warnings reported by WordPress Plugin Check.
Final new-slug package uses the brendigo-sidrena-cijena text domain consistently with its directory and main plugin filename.

1.0.25

Changed the public additional/reference-price label to the neutral customer-facing form Cijena na <datum> while keeping SIDRENA terminology in administration and documentation.
Fixed variable-product reference-price ranges so variations with different reference dates no longer inherit and display an unrelated default date.
Changed public price-list and real-time REST inclusion so a published product hidden only from the WooCommerce catalogue stays included unless SIDRENA explicitly excludes it.
Updated the bulk editor and product-field help text to make public price-list inclusion behavior explicit.
Added REST availability to the technical-readiness issue count because the published Croatian price-list rules require a technical solution for automated retrieval of current prices.
Added six WordPress.org screenshot captions matching real plugin screens and clarified the future base-price scope without inventing implementing-rule values.
Kept the bundled PDF manual, optional email/WhatsApp support and all existing local privacy protections unchanged.

1.0.24

Renamed the WordPress.org-facing plugin package to Brendigo Sidrena Cijena with the matching brendigo-sidrena-cijena slug and text domain.
Restricted WooCommerce product-save input handling to an explicit allowlist instead of returning the complete submitted request payload.
Added scalar validation for product and variation values before field-specific sanitization to avoid malformed-array warnings during WooCommerce saves.
Hardened service-editor scalar input handling and normalized bulk-editor request unslashing before sanitization.
Kept the bundled PDF manual and optional WhatsApp support while documenting both as local/user-initiated functionality with no background WhatsApp requests.
Clarified compliance wording so the plugin is described as an assistance tool rather than a legal guarantee.
Changed technical readiness checks to read-only reporting: they no longer silently re-enable outputs, overwrite reference dates, create public pages or repair schedules.
Restored administrator control over CSV/XML, public HTML, REST, manifest, price-history, display and alert settings instead of forcing them on during every save.
Updated WordPress.org readme metadata, privacy/external-service disclosure, installation instructions and trademark wording.
Removed the stale bundled POT catalogue so WordPress.org can extract translations directly from the current source strings.
Updated package/uninstall compatibility for the renamed plugin file while retaining recognition of previous SIDRENA edition filenames.
Removed automatic deactivation of other SIDRENA editions; conflict handling now leaves plugin activation state under the administrator’s control.
Updated the bundled Croatian documentation and WordPress.org release assets for the 1.0.24 package.

1.0.23

Removed duplicate legacy registration of the [sidrena_cjenici] shortcode from the REST class so the public renderer has a single owner.
Added runtime regression coverage that verifies the public download shortcode cannot be silently overwritten by another SIDRENA component.
Removed a repository-level compliance marketing claim and tightened release QA wording without changing the technical legal model.
Updated PDF visual QA for current Pillow APIs so release validation runs without the deprecated Image.getdata() path.
Strengthened source metadata detection and cleaned stale test metadata while preserving lowercase brendigo in public plugin headers.

1.0.22

Simplified the Croatian end-user settings screen and locked publication-critical safeguards to automatic safe defaults.
Added safe WooCommerce store-address onboarding for empty webshop locations without overwriting saved data.
Improved variation reference-price hydration so the standard variation payload works without an additional request, with REST retained only as a compatibility fallback.
Added public file integrity metadata, improved archive/download layouts, and edition-specific detailed Croatian PDF instructions.
Added validated unit/alias extension hooks while preserving existing built-in conversions.
Updated WordPress.org-facing naming, slugs, branding, admin notices, readme copy, and trademark handling based on reviewer feedback.
Expanded PHP 7.4/8.3/8.4 CI, distribution/admin/legal, Plugin Check, and real WordPress/WooCommerce runtime regression coverage for the 1.0.22 release.

1.0.21

Stabilized integration with existing store products and variations.
Improved variation reference-price output without an extra request in the standard WooCommerce flow.
Improved digital price lists, archives, locations, and integrity metadata.
Added detailed Croatian end-user documentation.
Strengthened CI, Plugin Check, and production regression guards.

1.0.20

Improved price history, 30-day references, and unit-price handling.
Improved CSV import/export, location data, and public publication.