1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201

202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406

407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452

$Id: $

osCMax Changelog
Copyright (c) 2007 osCMax
------------------------------------------------------------------------------
07/03/2007 osCommerce Online Merchant 2.2 RC1
------------------------------------------------------------------------------

* Remove additional slashes when editing a file in the Administration Tool ->
  Tools -> File Manager section.
  [r1652]

* Update Administration Tool pages. Introduce index summary modules
  (backported from v3.0).
  [r1633, r1634, r1635]

* Increase configuration_title and configuration_key field sizes
  [r1631]

* Update project version. Update osCommerce logo. Use standard store_logo.png
  image to easily allow the store logo to be changed.
  [r1626]

* New administrators page to create, edit, and delete administrators
  [r1625]

* Filter the parameters to not include any containing '_nh_dns' in the name so
  they do not get stored in the navigation history session file.
  [r1619, r1620]

* Add a public_title variable to the payment modules so the payment method can
  display "Credit Card" instead of the name of the payment service provider.
  [r1617, r1621]

* When editing reviews, strip additional slashes in the reviews text before
  storing it in the database.
  [r1614]

* PHP < 4.1 compatibility update.
  [r1612]

* Backport v3.0 installation procedure.
  [r1611, r1613, r1629]

* Add a simple administrator login routine to the Administrator Tool.
  [r1610, r1632]

* Process the order total modules earlier on the checkout confirmation page.
  [r1609]

* Fix typo in the products new page.
  [r1608]

* Add the session ID to the GET based forms as a hidden field value.
  [r1606, r1607]

* Updating category settings without selecting a category image was removing
  the previous category image.
  [r1603]

* Check the selected payment module radio field.
  [r1601]

* Load the payment modules after the order total modules to get the proper
  final order total value. This will break some payment modules duplicating
  the checkout_process.php logic (ie, PayPal IPN contribution).
  [r1600]

* Improve the logic of accepting state names.
  [r1598]

* Add a new configuration parameter to control the maximum quantity a product
  can be added to the shopping cart (99 by default).
  [r1596]

* The quantity is added to the database as an integer so the quantity in the
  shopping cart session should also be treated as an integer.
  [r1595]

* Fix the display of the country name on the order history page.
  [r1594]

* Don't calculate prices with tax by rounding the net value, as this brings
  down the default precision of 4 to the decimal places the selected currency
  has.
  [r1592, r1593]

* Fix sql injection vulnerability when sorting product listings.
  [r1591]

* Pass the connection identifier link to the mysql_insert_id() function.
  [r1590]

* Reset the array index counter after working through its elements.
  [r1589]

* Respect the Configuration -> Minimum Values settings.
  [r1587, r1588]

* Correct the display of the billing address on the invoice and packing slip
  pages.
  [r1586]

* Fix currency case-sensitivity bug.
  [r1585]

* Add a register_globals compatibility layer for PHP 4.3+ servers.
  [r1583, r1584, r1597, r1599, r1647]

* Allow payment modules to display input fields on the checkout confirmation
  page.
  [r1582]

* Add fulltext support into the database backup dumps.
  Don't backup the data from the sessions table nor the who's online table.
  Delete the contents of the sessions table and who's online table after a
  restoration has been performed.
  [r1274]

* Fix manufacturers caching block.
  [r726]

------------------------------------------------------------------------------
08/17/2006 osCommerce 2.2 Milestone 2 Update 060817
------------------------------------------------------------------------------

Please review the update-20060817.txt file for the important changes made.

------------------------------------------------------------------------------
11/13/2005 osCommerce 2.2 Milestone 2 Update 051113
------------------------------------------------------------------------------

 * Fixed bug 1662; update of customers address through the My Account page
   resulted in the country value not being stored properly and affected tax
   rate values.
 
------------------------------------------------------------------------------
11/12/2005 osCommerce 2.2 Milestone 2 Update 051112
------------------------------------------------------------------------------

Please review the update-20060817.txt file for the important changes made.

 * Index language definition: updated the Wiki link to point to the Knowledge
   Base site

 * Reviews Box: Renamed the following variables due to naming conflicts:

   $review_query -> $rand_review_query
   $review       -> $rand_review
   $review       -> $rand_review_text

 * Wrapped all input parameters with tep_output_string() in the tep_image()
   function on the administration tool
   (admin/includes/functions/html_output.php)

 * UPS shipping module removed due to it violating the UPS terms of service.
   An alternative module can be found here:
   http://www.oscommerce.com/community/contributions,1323

 * Updated codebase for PHP 5.0 compatibility

 * Updated database structure for MySQL 5.0 compatibility

------------------------------------------------------------------------------
12/07/2003 osCommerce 2.2 Milestone 2
------------------------------------------------------------------------------

 * Shared SSL servers are now properly supported with cookie parameters
   existing for both normal and secure servers.

 * The installation/upgrade procedure was simplified with a new layout.

 * Internally set PHPs error reporting to E_ALL to remove all notice messages
   on the Catalog module.

 * Renamed default.php to index.php.

 * Sanitize all user input on the Catalog module before inserting it into the
   database.

 * Updated the layout of the shopping cart page.

 * Fixed linefeed issues with emails.

 * Modules are now installed at the Administration Tool via Install/Remove
   buttons located in the infobox; no longer through clicking on the status
   icons. This is to be consistent with other areas of the Administration
   Tool.

 * Updated the layout of the product listing page.

 * Updated the splitPageResults class to use the benefits a class provides.

 * Realized the My Account Proposal as discussed on the developers forum
   channel.

 * Introduced the message stack class used on the Administration Tool to the
   Catalog module. It has been extended to store messages in groups allowing
   to display the messages in groups at separate sections of the page.

 * Removed old European currencies (Deutsche Mark and Spanish Peseta)

 * Update the default configuration parameters to meet the needs of USA (it
   was previously meeting a mix of USA and European regulations)

 * IP Address and Client Browser User Agent validations implemented for the
   Security And Privacy Proposal.

 * Session ID Regeneration feature implemented as part of the Security And
   Privacy Proposal.

 * New file upload class implemented.

 * Search Engine Spider Session Prevention feature implemented as part of the
   Security And Privacy Proposal.

 * Manually round numbers in the tep_round() function, bypassing PHPs round()
   and number_format() functions.

   The PHP round() and number_format() functions return different results when
   strings or floats are being processed.

 * Added data validation to the Customers section on the Administration Tool.

 * Tax Compounding logic corrected.

 * Cross site scripting vulnerabilities fixed.

 * Moved filename and database table definitions from application_top.php to
   their own files.

 * The Tax Priority can now be inserted when creating new tax rates in the
   Administration Tool.

 * Implement the force cookie usage and ssl_session_id validations features
   from the Security and Privacy Proposal.

 * Virtual products tax update (virtual products were not being updated as no
   shipping address is in use. Instead, the billing address is used to base
   the taxes on.

------------------------------------------------------------------------------
02/17/2003 osCommerce 2.2 Milestone 1
------------------------------------------------------------------------------

*** The changelog entry for the 2.2 Milestone releases will be updated     ***
*** throughout the Milestone release path. The information here is         ***
*** currently old.                                                         ***

 * Manufacturer now saved when adding products. (bug fix)

 * Added .htaccess file in the 'includes' directory for some security (blocks
   direct http requests to .php files).
   ie, http://server/catalog/includes/application_top.php

 * New cache class added for the categoies box (only for PHP4)
   - Note, this is disabled by default due to our run out-of-the-box approach.
     Can also be used in other areas of the catalog.

 * New Who's Online section in the administration tool.

 * Updated payment and shipping modules structure - no longer has multiple
   include statements - and are now classes.

 * Administration Tool sections now with opened/closed box approach (the list
   of functions was getting too long!).

 * New login and create account option page (ala Amazon style)

 * Click on the products image (in products details) and a new browser window
   will open and resize itself to the image shown - used to display larger
   pictures of the product.

 * All font styles are now in stylesheets.

 * Full locaization support (ie, categories title, products descriptions,
   image buttons, etc)

 * Table names now as constants (variables)

 * Banner support functionality

 * Products expected now as normal products (with descriptions)

 * Stock control functionality

 * Products with different attributes can now be added to the shopping cart.
   (feature fix)

 * Authorize.net support added

 * Sessions can now be stored in the database

 * Tell-A-Friend function for products

 * Information box, with all informations about shipping & returns, privacy
   notice and conditions of use

 * Newsletter function in the administration tool.

 * New zones for germany, swiss and austria.

 * Prices can now be handled with/without tax. The tax would be correct
   calculated.

 * Prices in all countries which joined the euro currency, displays the prices
   in euro and national currency. This is a european guideline which is now
   support by TEP.

 * All address information is now stored in the address_book table only. This
   change was made to reduce redundancy and allow more feautures in the
   checkout part (e.g. selection of different BillTo and SendTo addresses)  

------------------------------------------------------------------------------
03/06/2001 The Exchange Project Preview Release 2.1
------------------------------------------------------------------------------

 * Payment methods are now modules, makes it easier to implement other payment
   methods. Supported methods COD, Credit Card, Paypal. CC also supports
   storing only part of the CC# in the DB with the other digits being emailled
   to a specific email address.

 * Shipping Modules - Modular shipping methods with support for UPS, USPS,
   FEDEX(Ground), Per Item and Flat rate shipping.

 * Db query clean up a few AS clauses were added for earlier MySQL versions.
   Error checking added for when no records exist.

 * Added languages box - customers can now choose their language anywhere
   except during the checkout procedure (due to POST variables in forms)

 * Added currencies box - customers can now choose their currency independent
   from the language chosen

 * Currencies can be added/deleted/modified through the administration tool -
   no longer through individual language files in the include directory

 * Added a 'Contact Us' Page.

 * Added COMMENTS field to Orders table - an order history
   Need to ALTER TABLE orders ADD comments TEXT not null;

 * Selectable columns in 'Product Listings'.

 * Added a delete button to the orders in the admin tool.

 * Solved a problem with the session id not being passed to the secure server.

 * Countries added to the admin tool.

 * The 'Add a Quickie' box now uses the model number instead of the product
   id.

 * The 'Search' box and the 'Advanced Search' now use the same engine.

 * Backup in the admin tool.

 * Numerous bugs fixed.

 * Categories box has been updated to display path taken in bold, and display
   the parent categories (tree navigation)

 * Font styles implemented

 * tep_image now optionally calculates image size if omitted

 * products_to_manufacturers table removed. Manufacturers are now directly
   link to products, via manufacturers_id record in the products table

 * tep_href_link now removes extra & and ? characters in the URL

 * Products with no manufacturers are now listed in the catalog module

 * New DIR_* definitions for easier understanding ->
   FS = Filesystem (physical)
   WS = Webserver (virtual)

------------------------------------------------------------------------------
12/13/2000 The Exchange Project Preview Release 2.0a
------------------------------------------------------------------------------

 * Added FedEx shipping module
 * Bugfixes

------------------------------------------------------------------------------
12/02/2000 The Exchange Project Preview Release 2.0
------------------------------------------------------------------------------

 * Manufacturers pull-down select box
 * Number of products in each category displayed
 * Bestsellers box
 * See what other customers have brought (linked to current product displayed)
 * Administration Tool now user-friendlier via new layout
 * Categories-to-Categories structure
 * Spanish added to the official languages supported
 * Dynamic product attributes
 * Tax zones, classes, and rates
 * Now PHP3/PHP4 compatible
 * Some configuration parameters now in database
 * Manufacturers now directly linked to products
 * Status of orders can now be modified
 * New advanced search page
 * Order confirmation emails can now be sent to multiple addresses
 * Address formating function implemented
 * PayPal payments implemented
 * Currencies are now formated to the selected locale

------------------------------------------------------------------------------
05/14/2000 The Exchange Project Preview Release 1.1
------------------------------------------------------------------------------

 * Customization variables and constants
 * English and German localization
 * New products and upcoming products modularized
 * Added custom tep_db_* database functions
 * Added custom tep_session_* session functions
 * Added tep_href_link function
 * Added tep_image function
 * Added tep_image_submit function
 * Added tep_black_line function
 * Added tep_break_string function
 * Added tep_products_in_cart function
 * Added tep_exit function
 * Added tep_number_format function
 * Reviews-Box now displays a random review
 * account_edit_process.php updated
 * Review-Box: text now broken to avoid exceeding box width
 * address_book_add.php updated, also combined with
   address_book_add_process.php
 * login.php updated, also combined with login_process.php
 * login_forgotten.php and login_forgotten_process.php now combined to
   password_forgotten.php
 * Added products image to reviews info
 * products_reviews_write.php and products_reviews_write_process.php combined
 * shopping_cart.php updates
 * shopping_cart.php now displays proper price on special for nonsess cart
 * Fixed misalignment of checkout information
 * New directory structure for includes
 * application_top.php and application_bottom.php implemented for application
   wide parameters
 * column_left.php and column_right.php structure implemented
 * Display parse time of pages
 * SQL queries optimized
 * tep_number_format function implemented, but not in use
 * Fixed add a quickie bug - when product did not exist in catalog, it
   inserted a null entry in the cart

------------------------------------------------------------------------------
03/12/2000 The Exchange Project Preview Release 1.0
------------------------------------------------------------------------------

 * Initial Release