ویژه [DBTech] DragonByte Shop 7.2.4

Update highlights​

This version fixes a couple regressions from v7.2.3 caused by the new caching system implemented in that version, primarily centered around stock updates.


Fix: Fix cache generator potentially causing edits appearing as if they did not save
Fix: Fix issues with stock updates not being reflected in the cache

Update highlights

This version makes a change to support the internal change in DB Credits v5.8.3+ so integrated events are no longer subject to frequency / maximum currency limits.


Complete Change Log

Change: DB Credits integrated events can no longer be blocked by frequency / maximum earned (requires DB Credits v5.8.3+)

Update highlights

This version updates the Infinite Scroll library to reduce its size, thus reducing load time for first time visitors. Furthermore, a bug has been resolved with the Infinite Scroll integration where it would not work correctly when the item display style was set to "Grid" in the style properties.

Lastly, an issue has been resolved with the Create Forum item where it had not been updated for the changes in XenForo 2.2.


Complete Change Log

Change: Update Infinite Scroll library to reduce its file size
Fix: The "Create Forum" item was not fully updated for the changes in XF 2.2
Fix: Infinite Scroll would not work correctly when the item display style was set to Grid

Update highlights

This version fixes an XSS issue affecting thread titles and post messages.

Please see this thread for more information:

An XSS security issue has been discovered affecting all versions of DragonByte Shop from v6.1.0 to v6.4.6. This issue is critical in nature and you should patch your site immediately. This affects XenForo 2.0, 2.1 and 2.2 versions.

All affected versions of DragonByte Shop have been patched, so even if your license has expired or you cannot update for whatever, you can still login and download a fixed version of the version you're currently running.

If you cannot login or download, you can open src/addons/DBTech/Shop/Listener.php and find:
public static function templaterFilterRichThreadTitle(

Replace its contents with:

PHP:

        if (!$thread->thread_id
            || !$thread->User
        ) {
            return $value;
        }

        /** @var \DBTech\Shop\XF\Entity\User $user */
        $user = $thread->User;

        $styleProps = [];

        /** @var \DBTech\Shop\Entity\Purchase[]|ArrayCollection $purchases */
        $purchases = \XF::repository('DBTech\Shop:Purchase')->filterActivePurchasesForUser($user);
        foreach ($purchases as $purchase)
        {
            $handler = $purchase->handler;
            $handler->fire('thread_title_markup', [$thread, &$styleProps], $thread->thread_id);
        }

        if ($styleProps)
        {
            $escape = false;

            // Ensure we only add the span if needed
            return '<span style="' . implode('; ', $styleProps) . '">' . htmlspecialchars($value) . '</span>';
        }

        return $value;

Complete Change Log

Fix: Fix a security issue affecting thread titles and post messages

Update highlights

This version implements multiple changes to deal with IP logging, in order to prevent the IP log from being "tainted" with incorrect entries.

Furthermore, it includes a few other miscellaneous bugfixes. Thanks to our community for reporting the issues!


Complete Change Log

Change: Disable IP logging for items created in the AdminCP
Change: Disable IP logging by default for purchases
Fix: Older transactions would sometimes cause a server error
Fix: Prefix quick set in the AdminCP would not work as intended
Fix: Ensure the username style cache doesn't break if the purchase belongs to a deleted user or deleted item
Fix: Creating or editing an item will now associate the IP address log with the visitor, not the assigned owne

Update highlights

This version fixes a regression from 6.4.4 that could cause glitches in configurable items, as well as fixes an issue with copying items.


Complete Change Log

Fix: Copying items would produce a server error in certain circumstances
Fix: Fix an issue where item configuration would be incorrectly cached, leading to glitches in things like user name colours

Update highlights

This version adds a few features requested by the community. Administrators have more control than ever over purchases, as the buyer can now be edited when ticking the "Is gifted" box. For users with a lot of purchased items, inline moderation is now available to quickly manage purchases with common actions such as discard, activate / deactivate, and hide / show.

A few issues reported by the community have also been resolved. See the changelog for further details.


Complete Change Log

Feature: Ability to edit a purchase's buyer via the AdminCP
Feature: Item names are now shown in the tooltip in the postbit
Feature: Leverage inline moderation to mass apply inventory actions
Change: Remove IP logging for trading
Fix: Ensure buyer user name is saved correctly when manually assigning a purchase in the AdminCP
Fix: Ensure buyer user ID and buyer user name are correctly updated when they are renamed
Fix: Removed IP logging for discard action when this action was done automatically