Add Product Frontend for WooCommerce

Änderungsprotokoll

1.0.0

• First release.

1.0.1

• Tested up to wordpress: 6.4
• Tested up to php: 8.1

1.0.2

• Tested up to wordpress: 6.5
• Refining the plugin backend design to be more user-friendly

1.0.3

• Refining the plugin backend design to be more user-friendly

1.0.4

• The product list layout has been redesigned to improve user experience and visual appeal.
• Users can now sort products by both title and price columns, facilitating easier organization and navigation.
• Pagination layout has been revamped for improved navigation through product pages.
• A search functionality has been implemented to facilitate quick and efficient product searches based on product name.
• Users now have the option to filter products based on user role and specific users, providing better organization and customization.
• The product list now displays only items that have been added from the frontend interface, streamlining the display and management process.
• Bulk delete functionality has been added for products, allowing administrators to efficiently remove multiple items at once.
• Product listing screen now includes product SKU and image for improved product identification and management

1.0.5

• Added an option to ON or OFF email notifications when creating or editing a product for User and Administrator

1.0.6

• Users with specific roles can now delete only their own created products directly from the „My Account“ product list page.
• Improved the layout of the product edit page and Removed the sidebar for better focus and added a convenient button to navigate back to the product list page.
• Enhanced security by restricting product editing capabilities. Users with other roles can now only edit their own created products.

1.0.7

• Fixed a critical security vulnerability to prevent unauthenticated users from deleting arbitrary content (as reported by Wordfence).
• Added a new option to select specific product categories to display on the frontend product creation form.
• Tested compatibility with WordPress 6.8.1.
• Confirmed compatibility with WooCommerce 9.9.5.

1.0.8

• Made user role selection dynamic using get_editable_roles().
• No more hardcoded roles – plugin now automatically lists all available roles.

1.0.9

• Fixed: The 1.0.7 fix only blocked logged-out users from deleting products. Any logged-in user, regardless of role, could still delete or trash any product on the site by calling the delete action directly, bypassing the plugin entirely. Both the frontend and admin delete actions now require a valid nonce and verify the current user is either an administrator or the product’s original author.
• Fixed: The „which user roles can add/edit products“ setting was only enforced by hiding the form in the UI. Any logged-in user could still create or edit any product (including products they don’t own) by submitting directly to the save/edit action. Both actions now verify the role restriction and, for edits, that the user owns the product (or is an administrator) server-side.
• Fixed: The product-attributes endpoints used while building the product form were reachable by completely logged-out visitors and had no permission checks at all; they now require login, a valid nonce, and the same role restriction as the rest of the form.
• Fixed: A serious unintended side effect where visiting the site as a logged-in user permanently added the upload_files capability to that user’s entire ROLE in the database (site-wide, for every user of that role, and never reverted even after deactivating this plugin). The capability is now granted only for the current request, only on the plugin’s own product form pages, and is never written to the database.
• Fixed: A PHP fatal error („Call to a member function on null“) and a related bug where, if the page you configured for the frontend product form was later deleted, every single page on the site would silently start rendering the product form template instead of its own content.
• Fixed: The Edit Product page rendered a duplicate copy of the site header/footer around its content (reported as the page layout „merging with the footer“), because the template called get_header()/get_footer() while already rendering inside the My Account page.
• Fixed: Submitting a product with no custom attributes could trigger a PHP fatal error on PHP 8 (max(): Argument #1 must contain at least one element).
• Fixed: An admin notice about missing WooCommerce was being read from the wrong stored option due to a typo, so it could fail to accumulate correctly.
• Fixed: On WordPress’s modern block themes (e.g. the current default, Twenty Twenty-Five), the product form page printed a „Theme without header.php is deprecated“ PHP notice at the very top of the page. Styling and scripts still load exactly as before on every theme; only the stray notice text is suppressed.
• Fixed: Submitting the product form with an empty Tags field triggered a PHP warning („Undefined array key term_exists“) on every save.
• Fixed: A fatal error („in_array(): Argument #2 must be of type array, string given“) on both the Settings page and the frontend product form’s Categories box. This happened whenever the „Select Product Categories“ setting was saved with every checkbox unchecked — WordPress’s Settings API stored a non-array value with no sanitization in place, which then crashed on the next page load and silently cut off everything rendered after it (including the „Select user role“ and email settings further down the page). The three affected settings (categories, additional fields, user roles) now always sanitize to an array on save, and the two places that read the categories setting no longer assume it’s an array.
• Improved: Modernized the „My Account“ product list and admin settings screens with clearer, more readable styling (rounded cards, better spacing and table styling) — no changes to existing shortcodes, option names, or database structure, so nothing about how the plugin stores or looks up data has changed.
• Improved: Redesigned the frontend Add/Edit Product page layout. It previously reused WooCommerce’s raw wp-admin metabox styling directly on the frontend, laid out with a fragile percentage-based float split that looked cramped and broken on most themes‘ content widths. It’s now a responsive card-based layout (switches to a single column on narrower screens) with modern spacing, typography and button styling. This is a new stylesheet layered on top of the existing one — no HTML, shortcodes, or JS hooks changed, so nothing about how the form works is different, only how it looks.
• Added: Declared compatibility with WooCommerce High-Performance Order Storage (HPOS) and the Requires Plugins header.
• No data is deleted or restructured by this update. Existing products, settings, and the frontend page assignment all carry over unchanged.
• Tested with WordPress 7.1.
• Tested with WooCommerce 11.0.1.