• Hi there,
    I’m happy that the developer released a new version. Sadly he just fixed these 2 errors:

    Line 268 from
    $order = wp_kses( $_POST["list_item"] );
    to
    $order = wp_kses( $_POST["list_item"], array() );

    and

    Line 324 from
    $order = wp_kses( $_POST["list_item"] );
    to
    $order = wp_kses( $_POST["list_item"], array() );

    As there is at least one more real error:

    Line 369
    if ( isset( $_POST[ 'mimo_shipment_tracking_nonce' ] ) && wp_verify_nonce( $_POST[ 'mimo_shipment_tracking_nonce' ], 'mimo_shipment_tracking_data' ) ) return;

    This code is inside the save_meta_boxes function and its purpose is to save the tracking data when one hits update (and not save & send) on the WC-admin-order-detail page. It does not make any sense to return (and not save the data) if the nonce is valid. That should be the opposite.
    There are other weaknesses in the code (like using general add_meta_boxes and not the specific add_meta_boxes_shop_order action, which is a waste of resources or the use of deprecated functions.

    For these reasons I advise everybody to use the fixed version from here until the developer has updated the official plugin.

    Best, Rado

  • The topic ‘1.0.2 still buggy’ is closed to new replies.