Compatible with OXID eShop 7.1 through 7.5 (Twig)

This update includes several security enhancements, full integration of the JS-SDK 1.14.5, and numerous bug fixes, particularly for the APEX theme.

Improvements

• API Key Secured: Communication with the endereco API now takes place on the server side. The API key is no longer sent to the browser.
• JS-SDK 1.14.5 Fully Integrated: Address validation now works correctly for countries with and without a state selection option. Outdated validation statuses are detected and corrected when the page is loaded.
• Smart Autofill removed: This feature has been permanently disabled and removed from the plugin configuration because it led to incorrect entries in practice.
• Name verification defined more clearly: The setting was previously called „Title Check,“ even though it controls the entire name verification process. The name has been updated.
• OXID 7.4 and 7.5: The plugin now officially supports the latest versions of OXID as well.
• Referrer Secured: Previously, if the Referer header was missing, the server path was sent to the endereco API. Now, the store URL is used instead.
• Unnecessary code removed: Outdated components from the OXID 6 era and unused code have been removed. PHP warnings in various areas have been resolved.

Bug fixes

• 502 Error During Address Validation: If no country was selected during registration or the „No title“ option was used, the address validation might have failed with a 502 error. This has been fixed.
• Special Characters in Country Names: Country names containing apostrophes (e.g., Côte d’Ivoire) could cause the address validation to fail to initialize correctly. Character processing now works reliably.
• The test status was not saved: For newly created shipping addresses, guest orders, and checkout registrations, the validation status was not saved correctly and was reset every time the page was loaded. The status is now saved correctly the first time it is saved.
• Address Correction on the Order Page: Users who clicked „Edit“ in the correction dialog were redirected to the address entry page, but the form did not open there. The form now opens correctly after the redirection.
• Checkout Buttons in the APEX Theme: The „Continue“ button in the checkout process did not trigger the address validation. The „Edit“ button closed the form again after the validation. Both buttons now work as intended.
• Name Verification with an Incorrect Name: If a new shipping address was created in the APEX theme, the name validation might have used the name of the previous address. The cached name is now reset when a new address is created.
• Suggestions for countries were ignored: If the address validation suggested a country other than the one entered, the suggestion was not accepted. Country corrections are now processed correctly
• Suggested corrections in the admin area: Suggested corrections were not displayed on the customer master data and address pages in the admin panel. This has been fixed.

Notes on the Update

After the update, run the database migrations, clear the cache, and rebuild the database views.

Addresses that have already been verified will be re-verified once after the update, since the internal calculation of the address hash has changed. This happens automatically the next time the address is used.

Shops with customizations should note: The endereco API is now accessed via its own proxy controller instead of directly from the browser. And saving an address now requires a POST request from the logged-in owner of the address.

We recommend that you first perform the update in a test environment.