Yindle Share Cart
| 开发者 | yindle |
|---|---|
| 更新时间 | 2026年9月29日 01:54 |
| PHP版本: | 8.1 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPL-2.0+ |
| 版权网址: | 版权信息 |
详情介绍:
- Share Cart button on the classic cart and the WooCommerce Cart Block.
- Capability links. The public link is a 64-character random capability. Only a purpose-separated HMAC-SHA-256 hash of it is ever stored, so a database copy does not hand anyone a working link.
- Current-price preview. Prices and availability come from live product objects at the moment the link is opened, not from the snapshot.
- Deliberate replace or merge. A GET request only ever renders the preview. Importing needs a WordPress nonce, an explicit mode choice and a signed single-use intent.
- Guest revocation. Creating a link also hands the sender a separate management capability. It can revoke the link but cannot read the cart, and the read capability cannot revoke anything.
- Expiry. 1–365 days, 30 by default, rechecked in the database on every request rather than relying on a cron run.
- Atomic import. The whole plan is validated before the cart is touched. A failure restores the previous cart, its coupons and its session data.
- Stock and purchase rules. Product existence, published state, variation ownership, purchasability, sold-individually, maximum quantity and combined merge quantities are all revalidated at import time.
- Privacy. Registered with WordPress's personal-data eraser, and user deletion removes the matching rows.
- Classic and Blocks. One server-side service behind both cart renderers.
yindle-share-cart.
This is a manual replacement: the older share-cart-by-yindle installation
cannot receive an automatic update across the folder change.
- Back up your database and plugin files.
- In WooCommerce settings, turn off Delete data on uninstall before removing the old installation. Keep it off when removing an older Pro installation too; older uninstall scripts do not recognize this new folder.
- Install Yindle Share Cart, then deactivate the old Free copy without deleting it and activate the new copy. If both remain active, the new copy stands by until the old Free copy is deactivated. Pro takes precedence when active.
- Verify your existing share links and settings. Delete it only after confirming deletion is disabled. Keeping it inactive is also safe. Do not reset capability secrets or remove shared database tables.
安装:
- Upload the plugin folder to
/wp-content/plugins/, or install the ZIP under Plugins → Add New → Upload Plugin. - Install and activate WooCommerce 8.0 or later, then activate this plugin.
- Configure it under WooCommerce → Settings → Yindle Share Cart.
常见问题:
Does the link contain prices?
No. The stored snapshot holds product IDs, variation IDs, quantities and the selected variation attributes. Prices, coupons, totals, tax, customer details and session data are rejected by the schema before anything is saved.
Can a recipient's cart be changed just by opening the link?
No. Opening the link renders a preview and changes nothing. The cart is only modified by a POST that carries a valid nonce, an explicit replace/merge choice and a signed single-use import intent.
What happens if a product sold out after the link was created?
The preview reports that the shared cart can no longer be imported, and nothing is added. Partial imports are not possible: the plan is validated in full first.
Does an expired licence disable anything?
This edition has no licence client at all. In the Pro edition, a licence governs updates and support only and never disables an installed feature.
Is any data sent anywhere?
Sharing and importing contact only the current shop. This edition has no external service, telemetry, Yindle account, licence check or custom updater. Fonts, styles, scripts and icons are bundled locally. WordPress itself can contact WordPress.org for normal plugin updates and translations.
Which product types are supported?
Simple and variable WooCommerce products are supported. Extensions that add custom cart item data need a compatible adapter. An unsupported cart is rejected with an explanation; its extra selections are not silently discarded.
How should I configure caching?
Exclude the configured share URL path (by default /cart/<share-key>/) from
full-page and CDN caching. The plugin sends private, no-store and noindex
headers for these pages. Verify that your cache honors them with two separate
guest sessions. Treat a share URL as a secret: anyone with it can preview and
import its product selections until it expires or is revoked.
What happens when I deactivate or delete the plugin?
Deactivation retains data. Deleting the plugin also retains data by default. The optional Delete data on uninstall setting enables permanent cleanup. Free preserves shared data if Pro is installed or saved cart/licence data indicates a Pro installation, even when that setting is enabled.
更新日志:
- Security: stop retaining a copy of the WordPress AUTH key and salt. The capability
key moves to a new random
yindle_cart_capability_keyoption. Both earlieryindle_cart_capability_pepperoptions are deleted by name on first load. Their values are never read or written into queries. Loading fails closed if they cannot be removed. - Remove the verification fallback to a retired key. Share and revoke links created by every earlier version, including 1.0.3, no longer resolve. Stored carts, expiry and revocations are unchanged. Unmigrated plaintext 1.x links still migrate.
- Make first capability-key creation, legacy rotation and rate admission atomic.
- Reject exhausted peers before creating new identity counters and expire database counters when a persistent object cache is active.
- Add paged personal-data exports and durable deletion across relevant sites, including former memberships and an unloaded network-hook fallback.
- Isolate Free implementation functions and constants as well as classes.
- Preserve shared privacy and expiry jobs when another edition remains.
- Verify separate native WordPress activation, real two-process MySQL/Redis races, multisite rollback/retry and independently composed runtime packages.
- Use the distinctive Yindle Share Cart name and yindle-share-cart directory.
- Remove unused saved-cart creation, issuance, account and paid styling code.
- Use standard WordPress language packs instead of bundled catalogues/loaders.
- Protect old/new edition transitions and document safe removal of older copies.
- Clarify that bundled asset provenance does not restrict modification rights.
- Give all nine Free runtime classes the distinctive YindleShareCart_ prefix.
- Register bundled translations at init for older supported WordPress versions.
- Compile bundled catalogues compatibly with the WordPress 6.4 translation reader.
- Link the plugin header to the verified public product page.
- Preserve shared storage, hooks and capability links; Pro files are unchanged.
- Initial free release of Yindle Share Cart.
- Declares WooCommerce as a plugin dependency.
- Documents local privacy, browser storage, caching and edition changes.
- Contains the complete share service: capability links, current-price preview, deliberate replace/merge, guest revocation, expiry, rate limiting, atomic import and the privacy eraser.
- Contains no licence client, no update client and no paid feature code.