Raffle for WooCommerce

Changelog

1.0.7

Released February 2026.

Improvements:

• Improvement: Global pool skill-testing questions are now pinned per product. When a raffle uses the global question pool, a question is randomly assigned once on first page view and persists permanently — ensuring postal (free entry) participants always see the same question. Previously, a random question was selected on every page load.
• Improvement: New searchable “Pinned question” dropdown on the raffle product edit screen lets admins browse and select a specific question from the global pool, or leave it on auto-assign for automatic selection on first customer visit.
• Improvement: The free entry (postal) tab on the product page now displays the skill-testing question text so postal entrants know which question to answer in their mail entry.
• Improvement: New “Frontend Accent Color” setting under Display lets store owners customize the accent color for all raffle UI elements (countdown, progress bar, prize badges, tabs, buttons, etc.). All 20+ hardcoded color instances have been replaced with CSS custom properties for full flexibility.
• Improvement: The postal address in the free entry instructions is now automatically highlighted with bold text and a subtle green background tint for better visibility.

1.0.6

Released February 2026.

New Features:

• New: Skill-testing question system for Canadian and legal compliance. Configure a global question pool with text and multiple choice questions. Customers must answer correctly before adding raffle tickets to the cart.
• New: Free entry route with “Paid Entry” / “Free Entry” tab interface on the product page. Meets “no purchase necessary” requirements for jurisdictions that require an alternative entry method.
• New: Per-product compliance overrides. Enable or disable skill-testing questions and free entry on individual raffle products, with optional custom question pools per product.
• New: Store address auto-replacement in free entry instructions using the [Your Address] placeholder, pulling from WooCommerce store settings.

Bug Fixes:

• Fixed cart quantity enforcement when switching from regular purchase to gift at checkout — per-customer limits are now correctly bypassed for gift items.
• Fixed get_max_purchase_quantity() to skip per-customer limit when cart items are flagged as gift, preventing quantity cap from blocking multiple gift recipients.
• Fixed race condition in Block Checkout where updateCartQuantity() could fire before updateServerData() completed, causing the gift flag to be missing when the server enforced limits.
• Fixed gift flag propagation — handle_gift_data_update() now sets the rfwc_is_gift flag directly on cart item data, not just in the WC session.
• Fixed classic checkout AJAX handler — gift items are now explicitly flagged before cart quantity update to prevent enforcement hooks from blocking the change.
• Fixed cart quantity enforcement hooks (enforce_cart_item_quantity_limit and enforce_cart_item_quantity_display) with WC session fallback for gift data, guarding against race conditions between async API requests.
• Fixed PHPCS compliance: explicit esc_attr() at output point in settings page, collapsed multi-line ternary for proper nonce verification ignore coverage.

Improvements:

• Improved gift checkout flow: customers can now start a regular purchase and switch to gift mode at checkout with full support for adding multiple recipients and automatic quantity adjustment.
• Updated plugin documentation with comprehensive coverage of skill-testing questions, free entry route, shortcodes, per-ticket gift recipients, compliance settings, and all email configurations.

1.0.5

Released February 2026.

Bug Fixes:

• Fixed gift checkout race condition where recipient data could be lost with Block Checkout due to async session sync timing.
• Fixed gift data now embedded directly in checkout request body as a reliable alternative to session-based sync.
• Fixed “Other Tickets” label showing on admin order page for non-gift purchases — now shows “Raffle Tickets”.
• Fixed empty Gift Details rows appearing on Order Received / My Account when recipient data was missing.
• Fixed ticket generation fallback so partial recipient data still marks tickets as gifts using order-level data.
• Fixed cart quantity enforcement for non-gift purchases.

Improvements:

• Added three-layer data reliability for Block Checkout gift purchases (blocking sync, extension data, and server-side patching).
• Analytics page now gracefully handles Chart.js load failures — stats and tables still display when charts cannot render.
• Analytics AJAX now shows clear error messages instead of staying on “Loading…” forever when data fetch fails.

New Features:

• New: [raffle_cards] multi-card shortcode for displaying multiple raffle cards in a responsive grid.
  • [raffle_cards ids="123,456,789"] — Display specific raffles by ID.
  • [raffle_cards category="prizes" limit="4"] — Display raffles from a product category.
  • [raffle_cards status="active" limit="6" columns="3"] — Display active raffles in a 3-column grid.
  • Supports orderby (date, price, title, random), order (ASC/DESC), columns (1-4), and limit parameters.
  • Responsive grid automatically collapses to fewer columns on smaller screens.

1.0.4

Released February 2026.

Bug Fixes:

• Fix: Progress bar now counts both active and winner tickets as “sold.” Previously, winning tickets were excluded from the count after a draw, making the bar appear to go backwards.
• Fix: Countdown timer now stops immediately when winners are selected early (before the scheduled end date). Previously it kept ticking until the original end date.

New Features:

• New: Compact countdown badge on shop/archive pages. Enable in WooCommerce > Settings > Raffle > Display > “Show Countdown on Shop Pages.” Displays a slim inline “Ends in: 18d 4h 26m” pill under the price for raffle products.
• New: Five shortcodes for embedding raffle data on any page or post:
  • [raffle_card id="123"] — Full product card with image, countdown, prize, and CTA button.
  • [raffle_countdown id="123"] — Live countdown timer (compact or format="full").
  • [raffle_progress id="123"] — Ticket sales progress bar.
  • [raffle_prize id="123"] — Prize information display.
  • [raffle_status id="123"] — Status badge (Active / Ended / Winner Selected / Coming Soon / Sold Out).
  • All shortcodes support id="latest" and id="active" keywords.
• New: Winner management tabs on the Raffle Tickets page. Three tabs — All Tickets, Winners, Claimed — give a cross-raffle overview without navigating to individual product pages. Includes quick “Mark Claimed” and “Resend Notification” buttons, bulk claim action, and raffle filter.
• New: Prize Claimed Confirmation email. When an admin marks a winner’s prize as claimed, the winner receives a confirmation email. Configurable in WooCommerce > Settings > Raffle > Emails and customizable in WooCommerce > Settings > Emails.
• New: All mark-claimed actions (single, bulk, and product metabox) are logged to the activity trail and trigger the prize claimed email notification.

1.0.3

Released February 2026.

Security:

• Security: Fixed XSS vulnerability in QR scanner JavaScript where unescaped raffle and holder names could execute scripts in admin context.
• Security: Fixed XSS vulnerability in analytics JavaScript where raffle and purchaser names were injected via raw HTML concatenation.
• Security: QR code verification hashes are now computed locally using wp_hash(). No ticket data beyond the validation URL is sent to the QR image API.
• Security: Public QR validation page now masks ticket holder names for GDPR compliance. Full names only shown in admin scanner.

New Features:

• New: Admin Winner Alert email notification. Sends email to admin when a winner is drawn. Uses the existing setting in Raffle > Emails, now fully wired.
• New: Admin Draw Failed Alert email notification. Sends email to admin when an automatic draw fails. New setting added in Raffle > Emails.
• New: Ticket search in admin. Search box on the Raffle Tickets page searches across ticket number, recipient name, recipient email, purchaser name, and purchaser email. Works with status tabs and CSV export.
• New: Activity Log section on the Analytics page showing recent raffle events like ticket generation, winner draws, and errors.
• New: Per-ticket gift recipient assignment. Each raffle ticket can now have its own unique recipient with separate name, email, and personal gift message.
• New: Full gift checkout support for WooCommerce Classic (shortcode) Checkout, matching the Block Checkout experience with dynamic add/remove recipient fields.

Enhancements:

• Enhancement: Adding or removing gift recipients in Classic Checkout now automatically updates the order summary and totals via AJAX.
• Enhancement: Theme-aware styling for gift checkout fields. Interactive elements inherit the theme primary color via CSS custom properties across both checkout types.
• Enhancement: Admin orders list Gift column now shows recipient count or single recipient name instead of a basic flag.
• Enhancement: Contextual empty state messages for ticket tabs (e.g., “No winners have been drawn yet” for Winners tab).
• Enhancement: Search respects current status tab filter. Tab highlighting stays active during search. Clear search on tab click.

Bug Fixes:

• Fix: Winners tab always showed 0 results because winner selection set ticket status to ‘won’ instead of the valid ‘winner’ status.
• Fix: Raffle email settings (ticket confirmation, gift notification, winner notification) were dead checkboxes with no implementation. All three are now wired to their email classes.
• Fix: Duplicate ticket generation from concurrent order status transitions. Added transient-based mutex lock.
• Fix: No availability check during ticket generation. Quantity is now clamped if raffle capacity is exceeded.
• Fix: Winner save failure was silently ignored. Now rolls back the transaction and returns an error.
• Fix: Winner transaction used a non-locking read allowing concurrent draws to both succeed. Added SELECT FOR UPDATE.
• Fix: Completed and failed raffles still showed “Buy Ticket” button. Now checks raffle status in is_active().
• Fix: Cancelling an order overwrote winner ticket status. Winner tickets are now skipped during cancellation.
• Fix: Cart quantity update on cart page bypassed raffle validation. Added woocommerce_update_cart_validation hook.
• Fix: No date validation on product save. Added format validation, range checks, and end-after-start cross-field validation.
• Fix: Resend winner notification also triggered a duplicate admin alert. Now calls the email directly.
• Fix: Failed auto-draws no longer cause infinite retry loops. Raffle is marked as failed after draw failure.
• Fix: Timezone handling uses wp_timezone() consistently for raffle start/end times.
• Fix: Audit logging now writes to the correct database column.
• Fix: Manual winner selection now properly marks the raffle as completed.
• Fix: Server-side cart validation enforces raffle status, ticket availability, and per-customer limits.
• Fix: Tickets reactivate when an order is restored from cancelled status.
• Fix: schedule_draw() uses correct timezone conversion for WP-Cron scheduling.
• Fix: Random.org fallback proof metadata is preserved in the audit trail.
• Fix: Deleted orders now cancel their associated tickets for both legacy and HPOS storage.
• Fix: Analytics CSV exports via Blob download instead of server-side file, avoiding PII files left on disk.
• Fix: Order received page, My Account order details, and admin order metabox now display all gift recipients with their assigned ticket numbers instead of only the first.
• Fix: Gift recipient emails are now sent per unique recipient with only their specific tickets, instead of all tickets going to the first recipient.
• Fix: Block Checkout race condition resolved. Recipient data is synced immediately on add/remove and verified before order submission.
• Fix: Removed “(optional)” label from the gift checkbox in Classic Checkout.
• Fix: Hidden raw order item meta from the admin order items display.
• Fix: Fuzzy LIKE lookup in QR validation now uses LIMIT 1 to prevent matching wrong tickets.
• Fix: Broken HTML in recent validations table from misuse of esc_attr() on inline styles.
• Fix: Missing public_scan source label in validation log.

Developer / Code Quality:

• Dev: Duplicate QR hash generation logic consolidated into a single method.
• Dev: Removed duplicate RFWC_Settings and RFWC_Admin_Notices instantiations.
• Dev: Removed dead code: show_if_raffle() empty method and get_bulk_print_url() unused method.
• Dev: Removed phantom rfwc_daily_cleanup dead code.
• Dev: Added missing purchaser_email database index for ticket lookups.
• Dev: Added request-level caching for get_tickets_sold() to avoid repeated COUNT queries.
• Dev: Ticket meta no longer set to autoload in wp_options for better scalability.
• Dev: Expired ticket status now has proper UI support with badge, counts, and translatable labels.
• Dev: Accessibility improvement for analytics filter dropdowns with proper labels.
• Dev: Hardcoded i18n strings in JavaScript moved to wp_localize_script objects.
• Dev: uninstall.php cleans up all new options and meta including HPOS order meta.
• Dev: Deactivation now clears individual raffle draw cron events.
• Dev: WordPress coding standards compliance with translators comments, nonce verification handling, and output escaping.

1.0.2

Released February 2026.

• Fix: Draw Winners success and error messages were not visible (message box stayed hidden). Messages now display correctly.
• Improvement: Draw Winners “Number of winners” reflects the value from product settings; helper text now says “X ticket(s) in the draw” for clarity.

1.0.1

Released February 2026.

• Fix: “Draw Winners” button and related winner UI not working due to class name mismatch (rfw- vs rfwc-).
• Fix: Align all admin and frontend class prefixes to rfwc- for gift checkout, ticket list, order metabox, analytics, ticket generator, and QR validator.
• Fix: QR ticket scanner “Start Camera” and manual validation form not responding (JS selectors now match HTML IDs).

1.0.0

Released January 2026.

• First public release.
• Raffle product type for WooCommerce.
• Gift ticket purchasing with recipient email notifications.
• Printable ticket generation with unique numbers and QR codes.
• QR code validation and event check in system.
• Winner selection with manual, automatic, and Random.org options.
• Multiple winner support for raffles with several prizes.
• Countdown timer widget.
• Progress bar showing tickets sold.
• Customer ticket management in My Account.
• Admin ticket management with filters and export.
• Email notifications through WooCommerce email system.
• Analytics dashboard with charts and statistics.
• Prize fulfillment for product prizes and store credit.
• Full audit trail for compliance.
• GDPR compliant with data export and erasure.
• Works with WooCommerce HPOS.
• Works with WooCommerce block checkout.