Notas da versão 1.9.4: 6 novidades 10 melhorias 26 correções 1 reforço de segurança
Novidade
- NEW • A way back from "Mark as spam": "Not spam" removes the mark, and can unblock the sender and restore the ticket from trash. Also as a bulk action.
- NEW • Spam Quarantine: "Unblock Sender" takes a sender off the spam blocklist.
- NEW • AweCommerce portal Support tab.
- NEW • AweCommerce license keys shown in the ticket sidebar, matching the EDD view.
- NEW • AweCommerce license keys are recognised and routed to the AweCommerce store.
- NEW • 12 new languages: Chinese (Simplified), Dutch, French, German, Hungarian, Indonesian, Italian, Japanese, Polish, Portuguese (Brazil), Russian and Turkish. Spanish is now complete.
Melhoria
- IMP • Plugin update payload now carries product icons, banners and tested/requires metadata.
- IMP • The license notice can be dismissed, with a daily per-admin snooze.
- IMP • The mobile app shows Awedesk in the app's language, even when WordPress has no language pack for it.
- IMP • E-mails are written entirely in the site's language, whoever triggers them.
- IMP • Dates and times are translated without a WordPress language pack.
- IMP • Regional languages (e.g. de_CH, es_MX, pt_PT) fall back to the nearest shipped translation.
- IMP • A site's own partial translation in wp-content/languages/plugins replaces only the strings it has; the rest come from Awedesk's own translation instead of turning English.
- IMP • Marking a ticket as spam remembers what it changed, so it can be undone, and no longer shows a success popup afterwards.
- IMP • Repeated failed logins from the mobile app are throttled.
- IMP • Removed the unused "Needs attention" flag and the dashboard's "Overdue" figures that depended on it.
Correção
- FIX • Security: customers can only reach their own tickets, messages, private notes and attachments; actions are always attributed to the logged-in user; ticket queries are fully parameterised; visitors can no longer change tickets.
- FIX • Security: REST requests are always checked against the user WordPress authenticated, so a crafted link can no longer act with a logged-in admin's or manager's rights.
- FIX • Security: managers can no longer grant the admin or manager role, or change or remove admins and managers.
- FIX • Security: only an administrator can reset the e-mail templates, and ticket preferences (spam marks, locks) can no longer be wiped from a link.
- FIX • Security: only managers and admins can empty the trash.
- FIX • Security: the agents list is staff-only, and customers see only basic department details.
- FIX • Security: values from licensing and store data are escaped in the staff ticket sidebar.
- FIX • Security: e-mail piping no longer writes user details to the PHP error log.
- FIX • Agents only see tickets from their departments in ticket lists, counts, direct links and assignment.
- FIX • Customers can no longer close or reopen tickets through the app when the settings forbid it.
- FIX • Guest accounts are only created when guest tickets are enabled.
- FIX • Close and reopen e-mails respect the recipient's e-mail preferences.
- FIX • Spam marks are no longer cut short and lost on sites first installed before 1.9.3.
- FIX • Fatal error on the Better Messages 3 settings screen, caused by a helper being re-declared when another plugin re-ran wp_head.
- FIX • Agent-only system messages are no longer shown to the customer.
- FIX • The license expiry date is no longer rendered as today's date.
- FIX • Plugin updates are detected from cron and every dashboard visit, without a wordpress.org request on each Plugins screen load.
- FIX • Mobile push tokens record their platform, so de-registering a device works.
- FIX • Logging out of the mobile app removes only that phone's push notifications (requires app 3.1.0).
- FIX • The schema self-heal no longer ran dbDelta on every request.
- FIX • The AweCommerce and WooCommerce integrations no longer rebuild the page cache on every request.
- FIX • Messages with more than 10 links no longer have some links replaced by others.
- FIX • A confirmation dialog no longer stays unclickable after "Mark as spam" is cancelled, and Spam Quarantine's Delete stays available after another action.
- FIX • Links inside messages keep their underline.
- FIX • Fresh installs use the green Awedesk accent color.
- FIX • Assorted styling fixes for popular WordPress themes across the ticket view, navbar, sidebar and form inputs.
Segurança
- Please update as soon as possible.
