ubercart 7.x-3.13

Security update
Bug fixes

Security release to fix Ubercart - Moderately critical - Cross-site-scripting

Ubercart - Moderately critical - Cross site scripting - SA-CONTRIB-2019-070

Two minor compatibility fixes for PHP 7.1 and above are also included.

No other significant changes have been made since the 7.x-3.12 release.

ubercart 7.x-3.12

Security update
Insecure

Security release to fix Ubercart - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2019-03

This release also contains the patch from issue Support PHP 7.2, now that core Drupal does. That patch has been part of Ubercart 7.x-3.x-dev since July 2018, but this is the first fixed-point release to contain the patch since Drupal core became compatible with PHP 7.2 in November 2018.

ubercart 7.x-3.11

Bug fixes
Insecure

Drupal coding standards have changed, so this release contains over 5000 changes to conform to the new coding standards. In addition, the following issues have been fixed:

ubercart 8.x-4.0-alpha5

Bug fixes
New features

Fifth alpha release. Numerous bug fixes and minor improvements since alpha4.

Changes since 8.x-4.0-alpha4:

ubercart 8.x-4.0-alpha4

Fourth alpha release. Major changes in this release include:

  • Line items and tax rates are now plugins.
  • Order fulfilment has had further significant improvements.
  • PayPal IPN verification is fully working.

Changes since 8.x-4.0-alpha3:

ubercart 8.x-4.0-alpha3

Bug fixes

Third alpha release. Major changes in this release include:

  • PayPal Payments Standard can be successfully used to complete checkout.
  • Packaging and shipping has had a complete overhaul; uc_shipping is now uc_fulfillment.
  • File downloads and role assignment have had significant improvements.
  • Order panes have been converted to plugins.

Changes since 8.x-4.0-alpha2:

ubercart 8.x-4.0-alpha2

Second alpha release. The biggest changes are around payment and shipping systems which have been converted to use plugins, but many other fixes and improvements have been made as well.

Changes since 8.x-4.0-alpha1:

ubercart 7.x-3.9

Bug fixes
Insecure

This is a maintenance release for Ubercart 7.x-3.x, containing bug fixes but no new features. Users are also encouraged to test out Ubercart 8.x-4.x for Drupal 8 and let us know what they think!

Changes since 7.x-3.8:

ubercart 6.x-2.15

Bug fixes

This will likely be the last release of Ubercart for Drupal 6, which reaches end of life on February 24th, 2016. Users are encouraged to upgrade to Ubercart 7.x-3.x or contribute to the upgrade path to Ubercart 8.x-4.x.

Changes since 6.x-2.14:

ubercart 6.x-2.14

Security update
Bug fixes

Fixes SA-CONTRIB-2014-101 - Ubercart - Cross Site Request Forgery

Changes since 6.x-2.13:

  • #2332963 by drupalfever: Fixed uc_strip_form() from removing too many tags in some cases.
  • #2294773 by hejazee: New CIF file for Iran, with added province.
  • #2160941 by mfb: USPS country mapping contained a duplicate key for Serbia with the wrong information.

ubercart 6.x-2.12

New features
Bug fixes
Insecure

The 6.x-2.x branch of Ubercart will reach end of life when Drupal 8 is released and Drupal 6 is discontinued. You should consider upgrading your sites to 7.x-3.x.

New features since 6.x-2.11:

ubercart 7.x-3.4

Security update
New features
Bug fixes
Insecure

Fix for security issue DRUPAL-SA-CONTRIB-2013-020

New features since 7.x-3.3:

ubercart 7.x-3.2

New features
Bug fixes
Insecure

New features since 7.x-3.1:

Issue #1380772: Update product display via ajax when add-to-cart form data changes (e.g. attributes).
Issue #1533286: Add support for Variable module to allow translation of checkout messages.
Issue #1553700: Implement add to cart, print invoice and set order status as Views Bulk Operations.
Issue #1566306: Add setter callbacks for product node properties.
Issue #859724: Add help message explaining how to use PayPal in 2Checkout.
Issue #730120: Add dimensions and package quantity fields to Views.
Issue #1060810: Add shippable field and filter to Views.
Issue #1603740: Allow hook_uc_cart_pane_alter() to change weight and enabled values.
Issue #1655398: Add option to notify when bulk changing the order status.
Issue #1380772: Add identifying classes to replaceable product node elements.
Issue #1380772: Set Ajax ID on attribute subform.
Issue #998630: Add support for 2Checkout header redirect method.
Issue #1556368: Allow 'Notify customer when a role is revoked' conditions to check for role being revoked.
Issue #1744998: Add id to order total preview table.

Bug fixes since 7.x-3.1:

Issue #1587336: uc_order depends on uc_product.
Issue #1487268: Fix entity creation callback for orders.
Issue #1621410 by jacksinn: Remove $ from in front of variable_get
Issue #658176: Remove inline CSS.

ubercart 6.x-2.10

New features
Bug fixes
Insecure

New features since 6.x-2.9:

Issue #436684: Allow translation of attribute names, labels, help text and option values.
Issue #730120: Add dimensions and package quantity fields to Views.
Issue #1060810: Add shippable field and filter to Views.
Issue #1603740: Allow hook_cart_pane_alter() to change weight and enabled values.
Issue #998630: Add support for 2Checkout header redirect method.
Issue #1556368: Allow 'Notify customer when a role is revoked' conditions to check for role being revoked.
Backport 'uc_quantity' form element from 7.x-3.x.
Issue #1744998: Add id to order total preview table.
Issue #657734: Make uc_payment_get_totals() use a theme function.
Issue #1690466: Add CyberSource transaction request ID to payment data.
Issue #464578: Add <label> tags to checkout address fields for accessibility.
Issue #464578: Add <label> tags to credit card fields for accessibility.

Bug fixes since 6.x-2.9:

Issue #1547810: Mention security issues around 'administer conditional actions' in README.txt.
Issue #1555082: Bad query in tax reports.
Prevent PHP Notices when visiting Attributes and Options tabs on products that don't have attributes.
Issue #1558528 by AntoineSolutions: Missing return array() in uc_ups_update_6201().
Issue #1571116 by balloon: db_query() wrong in papua_new_guinea_598_1.cif.

ubercart 6.x-2.9

Bug fixes
Insecure

Fixes an error when running update.php.

See http://drupal.org/node/1547506 for 6.x-2.8 release notes.

ubercart 6.x-2.8

Security update
New features
Bug fixes
Insecure

Security advisory: SA-CONTRIB-2012-064 - Ubercart - Multiple vulnerabilities.

Upgrade notes:

Ensure that only trusted users have roles that have been granted the "administer conditional actions" permission.

Changes since 6.x-2.7:

ubercart 7.x-3.0

Bug fixes
Insecure

Changes since 7.x-3.0-rc4:

  • Use theme_image instead of outputting raw HTML for UPS logo.
  • Use theme_image instead of outputting raw HTML for USPS logo.
  • #1407246 by sah62: Name change for USPS service.
  • #1420116 by jonathan_hunt: Typo in description field for uc_roles_products table schema.

ubercart 7.x-3.0-rc3

New features
Bug fixes
Insecure

Changes since Ubercart 7.x-3.0-rc2:

API:

  • Issue #1285818: Remove uc_cart_exit() and cache safe cart block.
  • Issue #1290000 by wodenx, longwave: Add 'prepare' checkout pane callback.
  • Issue #1295526: Implement hook_prepare() in uc_product_kit to avoid errors when using Devel Generate.
  • Issue #852458: Save order comments before triggering a status update.
  • Issue #1307900: Allow shipping quote methods to specify a description and operations links to be displayed on the quote admin page.
  • Issue #1305516: Add uc_store_email() function to standardize store email address.
  • Add new 'uc_price' form element for price inputs.
  • Add new 'uc_quantity' form element for quantity inputs.
  • Change uc_encryption_class to UbercartEncryption and re-write to remove all the old PHP 4 style code.
  • Improve UcAddress. Make comparison of physical addresses more robust by ignoring capitalization and whitespace.
  • Remove deprecated uc_add_js().
  • Issue #1308692: Shipping quote methods no longer control their own enabled and weight settings.
  • Remove deprecated {uc_order_products}.manufacturer column.
  • Remove deprecated code that was used to support uc_recurring 6.x-1.x.
  • Issue #1316776: Move "customers" code to uc_order.
  • Issue #976318: Keep attribute option IDs available after checkout.

ubercart 6.x-2.7

New features
Bug fixes
Insecure

Some of the changes since 6.x-2.6:

ubercart 7.x-3.0-rc2

Bug fixes
Insecure

Ubercart 7.x-3.0-rc1 was released with errors that affected the order-edit page and the use of attribute options to change the price of products. Since these errors were so wide-reaching and detrimental to the working of Ubercart, a new release with these fixes has been created.

See the 7.x-3.0-rc1 release notes for the changes since 3.0-beta4.

ubercart 7.x-3.0-rc1

Bug fixes
Insecure

Known issue:

#1118036-8: add weight_unit to {uc_order_products} table was committed accidentally right when the release was tagged. That was an in-progress patch that causes problems on the order-edit form. See that issue for a small patch to fix that problem.

Changes since Ubercart 7.x-3.0-beta4:

  • API:
    • uc_order_load_line_items() returns stored and calculated line items together.
    • Product nodes have display_price and display_price_suffix, which show price changes that are ultimately calculated during checkout (e.g., VAT).
    • Added currency field to orders.
    • Added default values to uc_payment_enter().
    • Removed uc_strip_form().
  • Database:
    • Increased size of {uc_payment_receipts}.comment.
  • Theme:
    • Invoice templates can use $shippable variable.
    • Added theme_uc_checkout_pane_cart_review().
    • Removed theme_uc_cart_view_price().
    • Removed theme_uc_address_pane().
  • UI:
    • Converted "View orders" page to a View.
    • Address field settings moved from checkout settings to country settings.
  • Misc:
    • Added dependence on Views to Orders.

ubercart 6.x-2.6

New features
Bug fixes
Insecure

Changes since Ubercart 6.x-2.5 (not released, due to a bug discovered after tagging):

  • #552774 by Jody Lynn: Allow uc_paypal_ec_form form to be used programatically.
  • #1225582: uc_file_action_order_renew() uses undefined $user variable.
  • Remove references to 'manufacturer' product field which has been gone a long time.
  • #1014782: Use CSS instead of <strong> tag.
  • #1209084 by TR: array_key_exists(): The second argument should be either an array or an object in uc_catalog.module on line 888.
  • #615702: Don't set width: 100% on <div>s with borders.
  • #465536: Customer and product reports are unusable with large datasets.
  • #834676: Save only numeric shipping quote overrides.

New features since Ubercart 6.x-2.4:

  • API:
    • #751490 by killes: Add alter hook for UC messages.

ubercart 7.x-3.0-beta4

New features
Bug fixes
Insecure

Some of the changes since 7.x-3.0-beta3 are listed here. A complete list may be found in the Git logs:

ubercart 7.x-3.0-beta2

Bug fixes
Insecure

Changes since 7.x-3.0-beta1:

API:

  • Add support for HTML emails.
  • Google Checkout integration:
    • Updated to API v2.5.
    • Notifications require "Serial Number Content" setting in the Merchant Center.
    • Merchant-calculated shipping quotes use Ubercart shipping quotes. Set a default shipping address to get a fallback rate before actual rates are calculated.
    • With google_analytics.module enabled, Google Analytics data is recorded for Google Checkout orders.
  • Removed deprecated uc_stock_decrement_product_stock().
  • Removed unused uc_store_tables().
  • USPS integration updated to RateV4 and IntlRateV2 APIs.

Fields:

  • Product, product classes, and product kits have body fields after D7 upgrade like they should.

Theme:

  • Credit card icons have specific CSS classes.

UI:

  • Added setting to show or hide credit card form on PayPal Express Checkout landing page.
  • Changed "Remove" checkbox on cart page to a button.
  • Hide options and adjustments tab on product edit page if the product does not have attributes.
  • Improved country settings pages.

ubercart 5.x-1.11

Bug fixes

Final release of Ubercart for Drupal 5.x. No further changes are anticipated; this is a minor release to include the last set of fixes committed to this branch. Please consider upgrading your sites to Drupal 6 or 7.

Changes since DRUPAL-5--1-10:

ubercart 7.x-3.0-beta1

Bug fixes
Insecure

Ubercart 3.0-beta1, 2010-12-09

  • API:
    • Implemented entity features for orders:
      • Added $reset parameter to uc_order_load().
      • Added uc_order_load_multiple().
      • Fields saved and loaded.
    • Order pane callbacks also changed signatures:
      uc_order_pane_PANE_ID($op, $order, &$form = NULL, &$form_state = NULL)
      • This signature applies to all ops, including those defined in 'edit-ops'.
    • Quote method callbacks no longer need to return formatted rates.
    • uc_currency_format() changed signature:
      uc_currency_format($value, $sign = NULL, $thou = NULL, $dec = NULL)
    • Removed uc_price().
    • Removed hook_uc_price_handler().
    • theme_uc_price() takes one parameter: 'price', a float.
    • theme_uc_product_price() expects a render element with a #value and optional #title and #attributes. Element children may be used to display text after the price.
    • 'view' $op added to hook_uc_cart_item()
      • Allows modules to modify items before they are shown on the cart page.
  • Database:
    • Dropped {cache_uc_price}.
    • Added {uc_taxed_product_types}.

ubercart 6.x-2.4

Security update
Insecure

2010-08-11

The following bugs have been fixed, including the security updates outlined in SA-2010-083.

Changes since Ubercart 6.x-2.3 (-r 2130..2135):

ubercart 5.x-1.10

Security update

The following bugs have been fixed, including the security updates outlined in SA-2010-083.

ubercart 7.x-3.0-alpha3

New features
Bug fixes
Insecure

Changes since Ubercart 7.x-3.0-alpha2:

RULES INTEGRATION

#736770: Replace Conditional Actions with Rules Integration

Also, the new features and bug fixes introduced in 6.x-2.3 have been forward-ported.

ubercart 6.x-2.3

New features
Bug fixes
Insecure

2010-07-16
Changes since Ubercart 6.x-2.2:

Change summary

Additional country files
Payment method improvements
Printable packing slips
Stock management improvements
Separate node permissions for product kits
Colorbox support for product images
Alter hooks for cart and checkout panes
Themeable order invoices*
Numerous bugs fixed

Special update instructions

* IMPORTANT:
Because of the changes to order invoices, any customizations made to the invoice template files need to be made as template overrides in the theme layer. Copy uc_order.tpl.php, uc_order-customer.tpl.php, and any other templates you wish to change from uc_order/templates to your theme's folder. uc_order.tpl.php is basically a blank file, but it is necessary for the theme overrides to work correctly. Rename your {template}.itpl.php files to the format uc_order-{template}.tpl.php and change the tokens to PHP variables. See the documentation page for more details.

Detailed changes

ubercart 7.x-3.0-alpha2

Bug fixes
Insecure
  • API:
    • Changed payment method callback signature:
      uc_payment_method_METHOD($op, &$order, $form = NULL, &$form_state = NULL)
    • Changed checkout pane callback signature:
      uc_checkout_pane_PANE_ID($op, &$order, $form = NULL, &$form_state = NULL)
    • Use $form_state['values']['panes'][PANE_ID] instead of $arg2 during the 'process' $op.
    • New UcAddress class to initialize address data.
    • New UcOrder class to initialize order data.

ubercart 7.x-3.0-alpha1

Here's the "first draft" of the 3.x release of Ubercart. It has been ported to the Drupal 7 APIs and should have the same basic functionality as the 2.x branch. This should be enough to allow Ubercart contrib modules to be ported to Drupal 7, as very little of the existing APIs have changed. If you find something that hasn't been documented in CHANGELOG.txt, please file an issue.

ubercart 6.x-2.2

Bug fixes
Insecure

2009-11-18
The following bugs have been fixed since Ubercart 6.x-2.0 (-r 2001..2016), including two security updates outlined in SA-CONTRIB-2009-107:

  • #610664 by Island Usurper: fix the country_id column in uc_countries to be an integer without auto_increment.
  • #609444 by Island Usurper: Make countries that don't have different names work for USPS again.
  • #611044 by Carsten Müller: Avoid conflict with date_order().
  • #613498 by Island Usurper: Let product features affect product shippability correctly.
  • #622998 by FiNeX: supply a missing t() in an order pane.
  • #622998 by FiNeX: supply a missing t() in an order pane (again).
  • Updating the version number for the next release.
  • #618932 by Island Usurper: Remove predicate locking entirely.
  • u#14100 by Lyle: Allow product nodes to have titles with 255 characters.

ubercart 6.x-2.1

Security update
Bug fixes
Insecure

2009-11-18
The following bugs have been fixed since Ubercart 6.x-2.0 (-r 2001..2015), including two security updates outlined in SA-CONTRIB-2009-107:

  • #610664 by Island Usurper: fix the country_id column in uc_countries to be an integer without auto_increment.
  • #609444 by Island Usurper: Make countries that don't have different names work for USPS again.
  • #611044 by Carsten Müller: Avoid conflict with date_order().
  • #613498 by Island Usurper: Let product features affect product shippability correctly.
  • #622998 by FiNeX: supply a missing t() in an order pane.
  • #622998 by FiNeX: supply a missing t() in an order pane (again).
  • Updating the version number for the next release.
  • #618932 by Island Usurper: Remove predicate locking entirely.
  • u#14100 by Lyle: Allow product nodes to have titles with 255 characters.

ubercart 5.x-1.9

Security update
Bug fixes
Insecure

The following bugs have been fixed, including two security updates outlined in SA-CONTRIB-2009-107.

ubercart 6.x-2.0

Bug fixes
Insecure

Changes since Ubercart 6.x-2.0-rc7 (-r 1975..2001):

  • #333086 by Island Usurper: Update the link in README.txt to the correct version of the installation docs.
  • #589590 by Island Usurper: Remove obsolete function call when setting up default image fields.
  • #562506 by Island Usurper: Fix translation errors found by localize.drupal.org.
  • #532480 by lesmana: Let new product attributes inherit labels from class attributes.
  • Fix alphabetical order of a few hooks.
  • #578334 by hanoii: Add numeric formatting options to the price and weight Views fields.
  • #580266 by CrashTest_: Show credit card policy even when the payment settings form has not been saved.
  • #587572 by longwave: Load uc_price.inc immediately because some contrib modules try to load orders before uc_store_init() is called.
  • #587200 by Island Usurper: Delete empty products.

Pages

Subscribe with RSS Subscribe to Releases for Ubercart