WordPress.org compliance: nonce + capability checks on all AJAX handlers, strict comparisons, no silenced errors, PHPCBF auto-fixes, BOM cleanup. 0 security violations across 178 PHP files.<\/p>","1.0.3.24":"
Important update: full WordPress.org compliance revision (T2+T3). WP_CONTENT_DIR replaced by wp_upload_dir(), inline scripts via wp_add_inline_script(), exec() removed. Removed EDD update system.<\/p>","1.0.3.15":"
Recommended update with important fixes and improvements.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3553743,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3553738,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3553757,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3553756,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0","1.0.1"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3553834,"resolution":"1","location":"assets","locale":"","width":1280,"height":720},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3553835,"resolution":"2","location":"assets","locale":"","width":1280,"height":720},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3553836,"resolution":"3","location":"assets","locale":"","width":1280,"height":720},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3553837,"resolution":"4","location":"assets","locale":"","width":1280,"height":720},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3553838,"resolution":"5","location":"assets","locale":"","width":1280,"height":720},"screenshot-6.png":{"filename":"screenshot-6.png","revision":3553911,"resolution":"6","location":"assets","locale":"","width":1280,"height":720}},"screenshots":[]},"plugin_section":[],"plugin_tags":[2209,12480,1764,975,286],"plugin_category":[43,45,50],"plugin_contributors":[264959],"plugin_business_model":[],"class_list":["post-286895","plugin","type-plugin","status-publish","hentry","plugin_tags-generator","plugin_tags-invoice","plugin_tags-pdf","plugin_tags-template","plugin_tags-woocommerce","plugin_category-customization","plugin_category-ecommerce","plugin_category-media","plugin_contributors-natsenack","plugin_committers-natsenack"],"banners":{"banner":"https:\/\/ps.w.org\/advanced-pdf-invoice-builder\/assets\/banner-772x250.png?rev=3553756","banner_2x":"https:\/\/ps.w.org\/advanced-pdf-invoice-builder\/assets\/banner-1544x500.png?rev=3553757","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/advanced-pdf-invoice-builder\/assets\/icon-128x128.png?rev=3553743","icon_2x":"https:\/\/ps.w.org\/advanced-pdf-invoice-builder\/assets\/icon-256x256.png?rev=3553738","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/advanced-pdf-invoice-builder\/assets\/screenshot-1.png?rev=3553834","caption":""},{"src":"https:\/\/ps.w.org\/advanced-pdf-invoice-builder\/assets\/screenshot-2.png?rev=3553835","caption":""},{"src":"https:\/\/ps.w.org\/advanced-pdf-invoice-builder\/assets\/screenshot-3.png?rev=3553836","caption":""},{"src":"https:\/\/ps.w.org\/advanced-pdf-invoice-builder\/assets\/screenshot-4.png?rev=3553837","caption":""},{"src":"https:\/\/ps.w.org\/advanced-pdf-invoice-builder\/assets\/screenshot-5.png?rev=3553838","caption":""},{"src":"https:\/\/ps.w.org\/advanced-pdf-invoice-builder\/assets\/screenshot-6.png?rev=3553911","caption":""}],"raw_content":"\n
Advanced PDF Invoice Builder lets you create, customise and generate PDF invoices or documents directly from your WordPress admin area. Build your own templates with a live drag-and-drop canvas and attach them to WooCommerce orders automatically.<\/p>\n\n
Free features:<\/strong><\/p>\n\n Pro edition<\/strong> (available separately at hub.threeaxe.fr):<\/p>\n\n This plugin contains minified\/compiled JavaScript and CSS files. The complete unminified source code is included in the plugin package under the Compiled assets and their sources:<\/strong><\/p>\n\n Third-party library bundled as-is:<\/strong>\n* This plugin collects anonymous deactivation feedback only when the user explicitly clicks \"Send and Deactivate\"<\/strong> in the optional feedback modal.<\/p>\n\n Data collected and sent to the developer (hub.threeaxe.fr):<\/p>\n\n No passwords, no personal data, no tracking without consent.\nThe modal includes a \"Skip and Deactivate\" button that sends no data at all.<\/p>\n\n This plugin connects to the following third-party services. By using this plugin, you agree to their respective terms of service and privacy policies.<\/p>\n\n Used to generate PDF documents from your templates. Your template data and order information may be sent to this service for rendering. This service is provided by Threeaxe and is required for all PDF generation. The generated HTML uses local\/system font stacks and does not load Google Fonts.\n* Service URL: https:\/\/pdf.threeaxe.fr\n* Privacy Policy: https:\/\/hub.threeaxe.fr\/privacy-policy\/\n* Terms of Service: https:\/\/hub.threeaxe.fr\/conditions-dutilisation<\/p>\n\n Used to activate, deactivate, and periodically verify your premium license key. This server is operated by Threeaxe, the plugin author.\n* Data sent: license key, site URL, plugin name, item ID.\n* When: (1) when you manually activate or deactivate a license key in the plugin settings; (2) automatically once per day on admin pages, but only when an active license key has been entered \u2014 no data is sent if no license key is configured.\n* Service URL: https:\/\/hub.threeaxe.fr\n* Privacy Policy: https:\/\/hub.threeaxe.fr\/privacy-policy\/\n* Terms of Service: https:\/\/hub.threeaxe.fr\/conditions-dutilisation<\/p>\n\n Used to check for plugin updates through the standard WordPress update mechanism.\n* Service URL: https:\/\/api.wordpress.org\n* Privacy Policy: https:\/\/automattic.com\/privacy\/\n* Terms of Service: https:\/\/wordpress.org\/about\/license\/<\/p>\n\n Optional integration to export generated PDFs directly to Google Drive. Only activated when you configure Google Drive integration in the plugin settings.\n* Service URL: https:\/\/oauth2.googleapis.com \/ https:\/\/www.googleapis.com\n* Privacy Policy: https:\/\/policies.google.com\/privacy\n* Terms of Service: https:\/\/developers.google.com\/terms<\/p>\n\n Optional integration to export generated PDFs directly to Dropbox. Only activated when you configure Dropbox integration in the plugin settings.\n* Service URL: https:\/\/api.dropboxapi.com\n* Privacy Policy: https:\/\/www.dropbox.com\/privacy\n* Terms of Service: https:\/\/www.dropbox.com\/terms<\/p>\n\n Optional integration to export generated PDFs to OneDrive. Only activated when you configure OneDrive integration in the plugin settings.\n* Service URL: https:\/\/graph.microsoft.com\n* Privacy Policy: https:\/\/privacy.microsoft.com\/en-us\/privacystatement\n* Terms of Service: https:\/\/www.microsoft.com\/en-us\/servicesagreement<\/p>\n\n Optional integration to send PDF notifications to Slack channels. Only activated when you configure Slack integration in the plugin settings.\n* Service URL: https:\/\/api.slack.com\n* Privacy Policy: https:\/\/slack.com\/privacy-policy\n* Terms of Service: https:\/\/slack.com\/terms-of-service<\/p>\n\n Optional CRM integration to attach generated PDFs to HubSpot contacts and deals. Only activated when you configure HubSpot integration in the plugin settings.\n* Service URL: https:\/\/api.hubapi.com\n* Privacy Policy: https:\/\/legal.hubspot.com\/privacy-policy\n* Terms of Service: https:\/\/legal.hubspot.com\/terms-of-service<\/p>\n\n Optional CRM integration to attach generated PDFs to Salesforce records. Only activated when you configure Salesforce integration in the plugin settings.\n* Service URL: https:\/\/login.salesforce.com\n* Privacy Policy: https:\/\/www.salesforce.com\/company\/privacy\/\n* Terms of Service: https:\/\/www.salesforce.com\/company\/legal\/sfdc-website-terms-of-service\/<\/p>\n\n When you deactivate the plugin, a modal dialog may appear and invite you to optionally share the reason for deactivation. If you choose to submit feedback, the following data is sent by email directly to the plugin author:\n* Data sent: deactivation reason, optional comment, site URL, site admin email address, server software, date\/time.\n* When: only if you click the \"Send feedback\" button in the deactivation modal. No data is sent if you skip the modal or close it.\n* Recipient: threeaxe.france@gmail.com (plugin author, Threeaxe)\nThis is entirely optional. You can deactivate the plugin without submitting any feedback.<\/p>\n\n Note:<\/strong> All third-party integrations are strictly opt-in and require explicit configuration by the site administrator. No data is sent to any third-party service without your consent and active configuration.<\/p>\n\n This plugin also includes outbound links to author-owned pages for product information, purchase, support, and documentation.\nThese links are navigational only and do not automatically send site data to any external service.<\/p>\n\n Advanced PDF Invoice Builder requires WordPress 6.2 or later.<\/p><\/dd>\n Yes, Advanced PDF Invoice Builder provides native WooCommerce integration for automatic order PDF generation.<\/p><\/dd>\n The plugin generates standard PDF files compatible with all modern document readers.<\/p><\/dd>\n\n<\/dl>\n\n\n\n
\/languages<\/code>)<\/li>\n\n
Source Code<\/h3>\n\n
sources\/<\/code> directory, as required by WordPress.org guidelines.<\/p>\n\n\n
sources\/js\/<\/code> and sources\/css\/<\/code><\/li>\nsources\/webpack.config.cjs<\/code>)<\/li>\nnpm install && npm run build:free<\/code><\/li>\n\n
assets\/js\/pdf-builder-react.min.js<\/code> \u2190 sources\/js\/react\/<\/code> (TypeScript\/JSX)<\/li>\nassets\/js\/vendors.min.js<\/code> \u2190 webpack vendor bundle (React, ReactDOM, etc.)<\/li>\nassets\/js\/notifications.min.js<\/code> \u2190 sources\/js\/admin\/notifications.js<\/code><\/li>\nassets\/js\/settings-tabs.min.js<\/code> \u2190 sources\/js\/admin\/settings-tabs.js<\/code><\/li>\nassets\/js\/canvas-settings.min.js<\/code> \u2190 sources\/js\/admin\/canvas-settings.js<\/code><\/li>\nassets\/css\/pdf-builder-react.min.css<\/code> \u2190 sources\/css\/pdf-builder-react.css<\/code><\/li>\nassets\/css\/pdf-builder-admin-css.min.css<\/code> \u2190 sources\/css\/pdf-builder-admin.css<\/code><\/li>\n<\/ul>\n\nassets\/js\/html2canvas.min.js<\/code> \u2014 html2canvas v1.4.1 (MIT) \u2014 https:\/\/github.com\/niklasvh\/html2canvas<\/p>\n\nPrivacy Policy<\/h3>\n\n
\n
External Services<\/h3>\n\n
PDF Generation Service (pdf.threeaxe.fr)<\/h4>\n\n
License Validation Server (hub.threeaxe.fr)<\/h4>\n\n
WordPress.org API (api.wordpress.org)<\/h4>\n\n
Google Drive (oauth2.googleapis.com \/ www.googleapis.com)<\/h4>\n\n
Dropbox (api.dropboxapi.com \/ www.dropbox.com)<\/h4>\n\n
Microsoft OneDrive (graph.microsoft.com \/ login.microsoftonline.com)<\/h4>\n\n
Slack (slack.com \/ api.slack.com)<\/h4>\n\n
HubSpot (api.hubapi.com)<\/h4>\n\n
Salesforce (login.salesforce.com \/ .salesforce.com)<\/h4>\n\n
Deactivation Feedback (threeaxe.france@gmail.com)<\/h4>\n\n
Author Links<\/h3>\n\n
\n
\n
\/wp-content\/plugins\/<\/code> directory.<\/li>\n\n
Which WordPress versions are supported?<\/h3><\/dt>\n
Is this compatible with WooCommerce?<\/h3><\/dt>\n
What PDF formats are supported?<\/h3><\/dt>\n
1.0.0<\/h4>\n\n
\n
pdf-builder-react-editor<\/code>) always accessible, no hidden sub-menu trick<\/li>\npdfib_predefined_templates_manager<\/code> filter<\/li>\npdfib_admin_menu_after_home<\/code>, pdfib_predefined_templates_manager<\/code>, pdfib_can_use_feature<\/code>, pdfib_license_manager_instance<\/code>, pdfib_premium_templates<\/code><\/li>\nremove_submenu_page()<\/code> call<\/li>\nreact_editor_page()<\/code> prevents double render when PRO is active<\/li>\n1.3.27<\/h4>\n\n
\n
phpcs:ignore<\/code> removed from the cron test AJAX handler; nonce validation now uses check_ajax_referer()<\/code><\/li>\ntemplates\/admin\/settings-loader.php<\/code> now uses admin_enqueue_scripts<\/code> instead of wp_enqueue_scripts<\/code><\/li>\nwp-element<\/code>; empty react<\/code> \/ react-dom<\/code> sources removed<\/li>\nPDFIB_PLUGIN_FILE<\/code> is defined once in advanced-pdf-invoice-builder.php<\/code>; loader\/constants use that single source of truth<\/li>\nsources\/js\/<\/code> and sources\/css\/<\/code>, matching the documented source mappings for compiled JS and CSS assets<\/li>\n1.3.26<\/h4>\n\n
\n
set_error_handler()<\/code> calls<\/li>\npdf<\/code> (3 chars) to pdfib<\/code> (5 chars) across 176 PHP files and 16 JS\/TS source files \u2014 namespaces PDF_Builder\\<\/code> \u2192 PDFIB\\<\/code>, constants PDF_BUILDER_<\/code> \u2192 PDFIB_<\/code>, hooks\/options pdf_builder_<\/code> \u2192 pdfib_<\/code><\/li>\nwp_register_script('wp-preferences')<\/code> replaced with wp_deregister_script()<\/code> \u2014 no longer re-registering WordPress core script handles<\/li>\n1.0.3.25<\/h4>\n\n
\n
current_user_can('manage_options')<\/code> to pdf_builder_test_roles<\/code> handler; added check_ajax_referer()<\/code> to pdf_builder_verify_canvas_settings_consistency<\/code> handler; defined missing pdf_builder_get_allowed_roles_ajax_handler<\/code> function with nonce and capability checks (was registered but never defined \u2013 would cause fatal PHP error)<\/li>\ncheck_ajax_referer('pdf_builder_ajax', 'nonce')<\/code> to handle_generate_pdf()<\/code>, handle_generate_image()<\/code>, and handle_get_preview_html()<\/code> (had capability checks but no nonce verification)<\/li>\nnonce<\/code> parameter to direct PDF generation URL; webpack rebuild<\/li>\n$_GET<\/code> \/ $_REQUEST<\/code> \/ $_POST<\/code> inputs across 34 files (wp_unslash + sanitize_text_field \/ absint \/ sanitize_key as appropriate)<\/li>\nphpcs:ignore<\/code> removed from the cron test AJAX handler; nonce validation now uses check_ajax_referer()<\/code><\/li>\ntemplates\/admin\/settings-loader.php<\/code> now uses admin_enqueue_scripts<\/code> instead of wp_enqueue_scripts<\/code><\/li>\nwp-element<\/code>; empty react<\/code> \/ react-dom<\/code> sources removed<\/li>\nPDFIB_PLUGIN_FILE<\/code> is defined once in advanced-pdf-invoice-builder.php<\/code>; loader\/constants use that single source of truth<\/li>\nsources\/js\/<\/code> and sources\/css\/<\/code>, matching the documented source mappings for compiled JS and CSS assets<\/li>\n$_POST<\/code> array deep-accesses across 16 files<\/li>\nABSPATH<\/code> direct-access guard to 43 PHP files missing the standard protection<\/li>\n$wpdb<\/code> DirectDatabaseQuery and PreparedSQL calls reviewed (100+ occurrences)<\/li>\npdfb_free_pdf_slots<\/code> \u2192 pdf_builder_free_pdf_slots<\/code> to comply with WP.org prefix requirements<\/li>\nWP_DEBUG<\/code> constant<\/li>\n\n
pdfBuilderCanvasSettingsUpdated<\/code> \u2192 pdf_builder_canvas_settings_updated<\/code> (WP naming convention: lowercase snake_case)<\/li>\nmanage_woocommerce<\/code> and edit_shop_orders<\/code> declared as known custom capabilities \u2013 removes 30 false-positive warnings<\/li>\n@<\/code> error suppression documented in 6 files (FileSystemHelper, MU_Plugin_Blocker, Backup_Restore_Manager, WooCommerce_Integration, settings-helpers)<\/li>\nWordPress.PHP.StrictInArray<\/code> \u2013 added true<\/code> as strict third argument to all in_array()<\/code> and array_search()<\/code> calls across 51 files (116+ occurrences) \u2013 prevents type-coercion bypass<\/li>\n==<\/code>\u2192===<\/code>, !=<\/code>\u2192!==<\/code>, line endings, indentation, string quoting, spacing)<\/li>\n_show_<\/code> (boolean) and _margin_<\/code> (intval clamped 0-500)<\/li>\nPDF_Builder_Templates_Ajax<\/code> now reads pdf_builder_canvas_dpi<\/code> CSV instead of legacy pdf_builder_available_dpi<\/code><\/li>\nname.slice(0,-2)<\/code> stripping in FormData loop; []<\/code> suffix now preserved so PHP receives an array<\/li>\npdf_builder_canvas_dpi<\/code>, pdf_builder_canvas_formats<\/code>, pdf_builder_canvas_orientations<\/code> from save_content_settings()<\/code> foreach; removed duplicate canvas_dpi<\/code> from $general_settings<\/code><\/li>\nhandle_generate_image()<\/code> now accepts both pdf_builder_ajax<\/code> and pdf_builder_order_actions<\/code> nonces; added manage_options<\/code> fallback in permission check<\/li>\napply_filters('pdf_builder_feedback_email', ...)<\/code> instead of site admin email; disclosed in readme (wp.org data collection transparency)<\/li>\n<\/ul>\n\n1.0.3.24<\/h4>\n\n
\n
plugins_loaded<\/code> hook<\/li>\n1.0.3.23<\/h4>\n\n
\n
1.0.3.22<\/h4>\n\n
\n
1.0.3.21<\/h4>\n\n
\n
1.0.3.20<\/h4>\n\n
\n
1.0.3.15<\/h4>\n\n
\n
1.0.0<\/h4>\n\n
\n