SendSMS for WooCommerce

Changelog

2.0.3

• Plugin prefix changed to rosendsms_ (PHP namespace Rosendsms\\ForWooCommerce, settings option rosendsms_options, history table {prefix}rosendsms_history, order opt-out meta key rosendsms_optout, AJAX actions wp_ajax_rosendsms_campaign / wp_ajax_rosendsms_single, extensibility hooks rosendsms_should_send / rosendsms_message / rosendsms_recipient_phone / rosendsms_after_send).
• Migration now handles two earlier naming schemes: v1.x (wc_sendsms_* / wcsendsms_history / wc_sendsms_optout) and v2.0.2 (sendsmsro_* / sendsmsro_history / sendsmsro_optout). Both are migrated to the current rosendsms_* names on activation.

2.0.2

• Renamed every stored name (PHP namespace, settings option, history table, order opt-out meta key, AJAX action names, extensibility hooks) to a single prefix to satisfy WordPress.org Plugin Directory naming conventions.
• Added an activation-time migration that copies the v1.x stored data (settings option, price cache, history table, order opt-out meta) into the new names. Upgrading from a v1.x install carries over every setting and SMS-history row automatically.
• register_setting() sanitize callback now applies per-field sanitization (sanitize_text_field, sanitize_textarea_field, sanitize_key, and recursive sanitization for the per-status template/flag arrays).
• readme.txt now includes an == External services == section disclosing every sendsms.ro endpoint used, the data sent, and links to the gateway’s terms / privacy / ISO certification.
• Added sendsms (the plugin’s WordPress.org owner account) to the Contributors line.

2.0.1

• Settings page: fixed a bug where saving any tab wiped the values stored on the other tabs. Each tab now merges into the existing option instead of overwriting it.
• Order metabox: the Phone field is now pre-filled with the order’s billing phone, and is no longer cleared after a successful send so follow-up messages don’t require retyping the number.
• Settings page: added cell padding on the per-status template table so column headers and labels are no longer flush against the edges.

2.0.0

Full architectural rewrite. The plugin now follows modern WordPress conventions while preserving every existing setting and the SMS history database table — upgrading from 1.x is transparent.

• Code reorganised into a PSR-4 namespace tree (SendSMS\\ForWooCommerce\\…) with one class per responsibility (API client, settings reader, order listeners, admin pages, AJAX handlers).
• Settings page redesigned with three tabs: Account, Customer notifications, Owner notification. The per-status template list is now a single table.
• Admin scripts moved to assets/js/ and enqueued only on the relevant pages.
• New extensibility hooks for third-party developers: sendsms_for_woocommerce_should_send, sendsms_for_woocommerce_message, sendsms_for_woocommerce_recipient_phone, and sendsms_for_woocommerce_after_send.
• Continued from the 1.4.3 security baseline (legacy repository now archived):
  • Single-send AJAX endpoint guarded with nonce + manage_woocommerce capability.
  • Test-send form CSRF-protected.
  • Stored password never rendered back into the settings form.
  • Stored-XSS escaping on every column of the History page.
  • HPOS-aware throughout (declared via FeaturesUtil::declare_compatibility).
  • In-memory CSV for campaign sends (no batches/ filesystem write).
• Minimum PHP raised to 7.4; verified on PHP 7.4 and PHP 8.3.

1.0.0

Internal mirror of the legacy 1.4.3 release. Not distributed via WordPress.org.