In terms of new features, I’ve added public key encryption for storage of CC details. With the recent news about WordPress blogs hacked on a shared host (http://blogcastfm.com/announcements/warning-massive-number-of-godaddy-wordpress-blogs-hacked-this-weekend/), and various comments about many people on shared web hosts who don’t secure their WP config files properly, it seems prudent to provide the facility for more security for users of the manual CC payment feature. YAK settings are now split into 4 separate screens (General, Shipping, Sales Tax, Advanced) — on the Advanced tab you’ll find a button for generating a public/private key. The public key can be used for encrypting CC numbers, and the private key for decrypting. I’ll be adding some more detail to the FAQ at some point soon.

I’ve also added the facility to require a login for certain products, added more values to the third-party-integration event, and also incrementing item quantity (rather than displaying an error message) when the customer clicks on the buy button for an item which is already in the cart (configurable, of course). The biggest feature addition is the first version of sales tax calculations. This works in a vaguely similar way to shipping (except without the zones), but also provides for federal and state based taxes for the US. If your country has a similar requirement (state versus federal taxes), let me know, and hopefully I can fit that into a subsequent release.

This release includes mainly bug fixes, including the following:

• Hopefully fix a problem with glob (on some PHP installs)
• Move order widget into separate file
• Change “Espana” into “Spain” in English files.
• Fix problem with country missing from shipping address in confirmation email and in order screen
• Add a new tag [phone] to confirmation email
• Fix a problem with address in order export
• Add message to Credit Card entry notifying the customer that they have a final chance to confirm/cancel the order
• Updated German translation, provided by Joern

This release has been tested on both WP and WPMU.

• Fixing a problem with Authorize.net url
• Add checkbox for Authorize.net test mode
• Separate PayPal Pro return url (from Standard)
• Refactor payment types into separate classes to allow for easier extensibility
• Minor change to ipaddress sent to PayPal (only affects internal testing)
• Add ‘demo’ payment gateway
• Fix promo date saving problem
• Fix promo price calculation (causing problems in PayPal)
• Automatically create the Checkout page on activation
• Automatically create the “products” and “default” categories on activation
• Fix (hopefully) an odd error_log problem in certain environments

Enjoy!

YAK is now (almost officially) a three year old project. I started the SourceForge project (March 06) about a month or so after I’d started mucking around with the code itself. It started, from a rather simple idea, and over time has turned into a product that, I believe, is reasonably competitive in terms of features. Not perfect, by any stretch of the imagination, but good enough for a part-time project that has only had time to evolve, rather than be properly designed.

YAK looks a bit like an “also-ran” compared to the number of downloads for the alternative cart plugins on WordPress, but when you look at the real figure (currently 11,635) it’s actually almost holding its own. Not quite so sure why it rates so low (I certainly haven’t received an enormous number of complaints, and I’ve attempted to fix most, if not all, of the bugs that have been reported) — could be the lack of free documentation, or something else I haven’t thought of.

Still, to the few thousand or so people (I’m guessing) who have amassed 11,000+ downloads over the last few years, to the (unfortunately smaller ) number who have bought the handbook, and the various contributors who have offered patches, bug fixes, translations, suggestions, etc — thanks for all your support.

• a basic xml feed for products
• remote function for retrieving the content of a product from another YAK store
• Accounts Receivable payment type
• Authorize.net payment type
• PayPal Payments Pro payment type
• fix zip code/state handing in PayPal for US addresses
• add state to address form (automatic switch between state and region depending upon country code)
• add more filtering to the order administration page
• Norwegian translation, provided by Tom Boersma
• updated French translation, provided by Romaric Drigon

Bug fixes include:

• price formatting in confirmation message
• minor problem in reports
• layout issue with out-of-stock message
• minor problem with 2.7 layout
• fix dodgy address handling, explicitly store country codes for PayPal address problem

Download as usual from the WordPress Extend site, here.

At the moment, this release includes: a basic xml feed and the facility to pull product details from those feeds into another YAK installation; an accounts receivable payment type; support for Authorize.net and PayPal Payments Pro; along with a few bug fixes.

Note: this is a beta release, so test well if you want to install on a production site.

If anyone is interested in testing this functionality, please let me know (see the Contact page). I can provide basic setup/configuration information, but you’ll probably need to read the requisite integration docs for whichever gateway you want to test.

REMOTE SERVER NOT SET is a new tag which can be used in a product post. This allows you to set up a store on one blog, then use the products (posts) on another. The basic idea is that you can have a central store with all your products, then separate (smaller) sites which pull in specific relevant products. When you click the buy button on the smaller site you are, of course, redirected to the central store.

There are 2 fundamental limitations:

1. it currently only works with libcurl (thus your PHP install must have curl enabled)
2. there is no way (at the moment) to redirect back to the original site. For example, the central store might be setup on site A, and 2 or 3 specific products linked on site B. A customer clicks the buy button on a product in site B, and is redirected to the shopping cart on A. At which point the cart should present a link to return the customer to the calling page.

Usage of the new function will be as follows:

1. On the Yak->Settings, under the Advanced tab, set a remote server and path. For example:

http://myserver.com

/myblog

2. In a post, use the tag: [yak_get_remote_n] where n is the id of the post in the remote store. For example:

[yak_get_remote_9]

Which will embed the content of post #9.

The new functionality does point toward a necessity for affiliate functionality (as briefly mentioned here) — but that’s a much larger effort that may need to wait. The new tag is currently in the repository, and will appear in the next release of YAK.

• Affiliates program – setup affiliates in YAK settings (select from registered users), then affiliates would be able to login to your WP admin panel and view their progress, perhaps setup keywords to manage a campaign? Not sure here. I favour a simple approach as much as possible, but it very much depends on whether a simple approach provides any value. This is probably one of those features that might have to wait until someone wants to fund the development, because it’s only a real user who’s going to come up with something that actually might be useful in the real world.
• Better address configuration — which fields should be included, how they should be labelled (over and above the i18n labelling). Which leads onto…
• Better WP integration — a registered user could enter their address, and this would be used when ordering. Which, as a by-product, should mean that a user could login and see their order details (i.e. order tracking).
• Multiple shipping options — at the very least provide for a configurable number of shipping options. Better yet, provide hooks for alternative shipping engines.
• Tax Calculation — calculating the Infernal Revenue Services’ cut of your sales isn’t something YAK does at all, at the moment, which has been a problem for some. At the very least, a simple tax calculation engine would allow you to specify a tax percentage for a country (have to add states, for the United States and Australia), but would this be enough? Feedback sort on this particular possibility.
• Workflow — at the moment we have “Send Stock”, “Cancel Order” and “Reset”. Are those enough? I started an email discussion with a user about a year ago about workflow, but they never replied after an initial couple of messages.
• Order filtering — the ability to specify date ranges, display today’s orders by default, etc (suggestions?)
• Product filtering — at the very least, a pick list of the alphabet for filtering at the top
• Export — csv(?) export of your orders, your customers, and perhaps your product list. The latter may not be necessary, if I come up with something reasonable in terms of an xml feed for products.
• WordPress MU compatibility — only if I find a step-by-step installation guide that’s any good…
• Cart widget — display the current basket contents (summary) on the page.
• More download options — one request has been to allow for a configurable email to be sent out (rather than a download link). I was also thinking about tokens for support activities (i.e. buy a support token), which lead me onto the idea of creating a semi-secure sub-page of the download product (in this case a “support product”) where customer and technician can discuss the job. Useful for me, and at least one other user I’ve talked to, but it’s a fairly limited domain, so not sure about adding it as a core feature.
• Checkout navigation breadcrumbs (suggested by Chris). Fairly easy to add, so this will go up the priority list.
• Related products — “other products you may be interested in” (again suggested by Chris). Displayed when a customer adds to their basket.
• Additional gateways — one of authorise.net or PayPal Payments Pro integration. And fix Google Checkout so that we have end-to-end integration.
• SKU — I added product code quite a while ago, intending to use it for SKU, but it doesn’t make sense in light of multiple product types (one product with multiple types will have multiple SKUs). Adding SKU support also means adding the facility to search by SKU with a suitably nice URL (obviously time to brush up those mod rewrite skillz).
• Rewrite! Tidy up the codebase. Or start again with lessons learned from the past couple of years, and spend more time in the WP codebase to make sure YAK is consistent. This will happen once I win the lottery (considering I buy a lottery ticket about once every 1-3 years, calculate the probability for yourself )

And some additional stuff (not specifically related to development):

• Add discussion forums and move all the comments into the forums. I tried to do this before, but probably could’ve done it better, so might be worth trying again. Having 450 comments in General discussion is getting rather unwieldy.
• Site redesign — easier if WP properly supported multiple themes

I think that’s pretty much it. If there’s something I’ve missed that you think should be in this list, please leave a comment here. If anyone wants to fund development on one or more of these items, send me an email to discuss, otherwise you’ll have to wait until they trickle in over time.

Also included in this release is the facility to add promotions (i.e. discount codes that run for a specific period) — a custom piece of development paid for by a YAK user (thanks Chris!) — Czech translation provided by Frank, and Spanish translation provided by Josep (thanks guys).

The full changelog can be found here: http://www.briggs.net.nz/hg/yak/raw-file/tip/release_notes_1.1.2.txt.

As usual YAK can be downloaded from the WordPress Extend site.

Download it here.

This release includes the following changes:

• “Hard-code” the PayPal IPN page. This means you don’t need to create it manually. Instead just specify: http://yourdomain.com/wordpress/wp-content/plugins/yak-for-wordpress/yak-paypal-ipn.php
• Add Italian translation, provided by Roberto Mogliotti.
• Change the download message to use the tag [downloads] rather than a code.
• Change the email confirmation message to use tags rather than codes.
• Fix a nasty problem zeroing price and alternate title when commenting on a product.
• Fix a problem with the random order number.

I’ve also removed support for the old tags (the html comment form such as <!−−yak_buy−−>), so you’ll need to change your posts to use square brackets if you upgrade (e.g.

As usual, this release has only been fully tested by… well, me… so there may be some bugs I’ve missed — if you find something, please post on the Bugs page or email me directly.

Google Checkout integration requires https, but when testing I’m currently getting the dreaded error:

Protocol https not supported or disabled in libcurl

This despite the fact that curl -V gives:

curl 7.18.2 (i386-apple-darwin9.4.0) libcurl/7.18.2 OpenSSL/0.9.8h zlib/1.2.3
Protocols: tftp ftp telnet dict http file https ftps
Features: Largefile NTLM SSL libz

And port installed gives the following output (excerpted):

curl @7.18.2_0+ssl (active)
curl-ca-bundle @7.18.2_0 (active)
lighttpd @1.4.19_0 (active)
mysql5 @5.0.51a_0+server (active)
php5 @5.2.6_1+fastcgi+macosx+mysql5 (active)

I’m obviously missing something, but no idea what. Hoping that any Mac gurus who happen to come across this might have a suggestion or two…?

If you’re using 1.0.3d, I recommend you upgrade immediately.

The experimental release (1.1.0-exp) is still unpatched, and will be replaced by version 1.1.1 in a few days.

It’s fixed in trunk (in source control), and I’ll be releasing an updated 1.1.1 version shortly which includes the fix. I’ll also be releasing a patched version of 1.0.3d just in case people don’t want to upgrade to the latest and greatest.

In the meantime, if you’re running either of those versions, I recommend you disable comments on those products for the moment.

1.1.0-exp includes features from the not (publically) released 1.0.4:

1. Add new non-unique order id
2. Move javascript on cart off page and into separate script. split javascript into generic and admin specific files — to stop problems with (missing) jquery on the wp pages.
3. Add warning message for people with session.auto_start turned on.
4. Integrate YAK back into the WordPress menu structure. The top-level menu was a nice idea, but it’s inconsistent with all other plugins (plus isn’t recommended, according to the WP devs). You can now get to YAK’s options through Settings->Yak, and to Orders/Products/Sales Reports from the Manage menu.
5. Fix PHP4 problem with the view products screen

Along with a few additional features:

1. Add https support
2. Add first cut of Google Checkout integration.
3. Tidy up setting payment types (drop downs now rather than input boxes). Add setting of a credit card landing page.
4. Add support for tags with square brackets [ ]. The html-comment version of tags will be removed in an upcoming release

Google support is minimal so far. It’s one-way integration at the moment (allowing customers to submit an order through Google Checkout) — with no automated return path for handling purchase. That will come with a later release.

These updates hopefully make configuration a lot more user-friendly — particularly the changes to the Payment Types. Note that if you decide to upgrade, please make sure you backup your installation, and you double-check all your configuration options after upgrading.

YAK version 1.1.0-experimental can be downloaded from the WordPress Extend site.

Please backup your existing installation before upgrading. Deactivate, remove the current yak-for-wordpress directory, then copy the new version into the plugins dir and re-activate. You’ll need to double-check the configuration settings, because many input boxes have changed to drop-down selects (for category and page selection for example… see below). This upgrade will also require you to go through your products and set the price in the “YAK Product Details” tab (see point 5 in the changes below) — the custom fields are no longer required.

This release includes the following bug fixes:

1. Problem with table creation.
2. Country options not saving properly.
3. Fix an odd problem with globals.
4. The return URL appears to be broken with PayPal IPN. PDT works fine, but IPN seems to wind up back at the home page of the blog. Added a fix to cleanup the order from the shopping cart when this happens.

And the following changes:

1. Frank Malina’s new look-and-feel.
2. French translation (provided by Charles Dixon-Spain).
3. Change money format and currency format to be simpler drop down boxes.
4. Change the download url from the settings screen so it is now an override (i.e. optional).
5. Add new data input on the post/page edit screen for yak price and title (replacing the old method of using custom fields).
6. Remove the “Auto Set Price” option (doesn’t make a huge amount of sense now).
7. Fix the Auto Set Quantity so it works with selected categories.
8. Tidy up the stylesheet.
9. Add a hidden link to the checkout and to the buy button form — vain hope that this might drive more search engine traffic to the YAK plugin page — if you don’t want the link included, it can be switched off on the Basic settings page.
10. Change the product category (settings page) from an input box to a dropdown.
11. Change the redirect on buy (setting page) from an input box to a dropdown.
12. Change the return and cancel urls on the PayPal settings page to a dropdown so you can select a page rather than having to type a url.

First problem: The return URL doesn’t appear to work (cancel return URL works fine). PayPal keeps sending me back to the index page of my test site.

Second problem: When trying to save the Website Payment Preferences (in PayPal Profile) I get a “Page Not Found” error. So there’s no way to change between IPN and PDT. This has been broken now for at least 5 days.

If anyone is using YAK and PayPal and is willing (and able) to test both IPN and PDT integration, please let me know. Worst case scenario, I’ll release this version as unstable, and wait for PayPal to fix their problems…

UPDATE: Problem solved. PayPal have updated their site, but this has somehow corrupted old test accounts. Deleting the old account and creating a new one fixes the problem.

Or, possibly, there are dozens. There’s no way to tell since LinkedIn’s Group directory isn’t open and also isn’t searchable. Unless you’re lucky enough to find the relevant group on someone’s profile, you’re stuck with creating your own.

So that’s what I’ve done. If anyone is interested in joining, the invitation link is in the groups section of my profile.

And let’s hope LinkedIn develops a really good ratification process for merging millions of one-member groups…