Release v7.6.2

.gitignore

@@ -12,4 +12,4 @@ coverage
 
 woocommerce-mercadopago.zip
 
-qit-env.json
+qit-env.yml

CHANGELOG.md

@@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [7.6.2] - 2024-07-16
+### Added:
+- Added validation on user permissions to download plugin logs.
+- Increased plugin wordpress tested version to the latest available.
+### Fix:
+- Addressed an issue where discount and commission calculations were not being shown correctly on order details.
+
 ## [7.6.1] - 2024-06-26
 ### Fix:
 - Addressed an funnel metrics issue 

changelog.log

@@ -1,6 +1,13 @@
 CHANGELOG:
 == Changelog ==
 
+= v7.6.2 (26/06/2024) =
+* Added:
+- Added validation on user permissions to download plugin logs.
+- Increased plugin wordpress tested version to the latest available.
+* Fix:
+- Addressed an issue where discount and commission calculations were not being shown correctly on order details.
+
 = v7.6.1 (26/06/2024) =
 * Fix:
 - Addressed an funnel metrics issue

composer.json

@@ -37,7 +37,7 @@
     "qit:comp": "./vendor/bin/qit run:phpcompatibility woocommerce-mercadopago --zip woocommerce-mercadopago.zip",
     "qit:sec": "./vendor/bin/qit run:security woocommerce-mercadopago --zip woocommerce-mercadopago.zip",
     "qit:api": "./vendor/bin/qit run:woo-api woocommerce-mercadopago --zip woocommerce-mercadopago.zip",
-    "qit:env-up": "./vendor/bin/qit env:up --config ./qit-env.json",
+    "qit:env-up": "./vendor/bin/qit --woo=8.9.0 env:up",
     "qit:env-down": "./vendor/bin/qit env:down"
   },
   "require": {
@@ -46,7 +46,7 @@
   "require-dev": {
     "squizlabs/php_codesniffer": "^3.7",
     "phpmetrics/phpmetrics": "^2.8",
-    "woocommerce/qit-cli": "^0.5.0",
+    "woocommerce/qit-cli": "^0.5.3",
     "dealerdirect/phpcodesniffer-composer-installer": "^1.0",
     "wp-coding-standards/wpcs": "^2.2.1"
   },

package.json

@@ -1,7 +1,7 @@
 {
   "name": "woocommerce-mercadopago",
   "description": "Woocommerce MercadoPago Payment Gateway",
-  "version": "7.6.1",
+  "version": "7.6.2",
   "main": "main.js",
   "repository": {
     "type": "git",

qit-env.sample.yml

@@ -0,0 +1,6 @@
+wp: 6.5.5
+php_version: 8.3
+themes:
+  - storefront
+# plugins:
+#   - really-simple-ssl

readme.txt

@@ -2,9 +2,9 @@
 Contributors:
 Tags: ecommerce, mercadopago, woocommerce
 Requires at least: 6.3
-Tested up to: 6.5
+Tested up to: 6.6
 Requires PHP: 7.4
-Stable tag: 7.6.1
+Stable tag: 7.6.2
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
 
@@ -136,7 +136,10 @@ Check out our <a href="https://www.mercadopago.com.br/developers/pt/plugins_sdks
 
 == Changelog ==
 
+* Added:
+- Added validation on user permissions to download plugin logs.
+- Increased plugin wordpress tested version to the latest available.
 * Fix:
-- Addressed an funnel metrics issue
+- Addressed an issue where discount and commission calculations were not being shown correctly on order details.
 
 [See changelog for all versions](https://github.com/mercadopago/cart-woocommerce/blob/main/CHANGELOG.md).

src/Dependencies.php

@@ -327,7 +327,6 @@ public function __construct()
         $this->requesterHelper         = $this->setRequester();
         $this->storeConfig             = $this->setStore();
         $this->logs                    = $this->setLogs();
-        $this->downloader              = $this->setDownloader();
         $this->sellerConfig            = $this->setSeller();
         $this->countryHelper           = $this->setCountry();
         $this->urlHelper               = $this->setUrl();
@@ -347,6 +346,7 @@ public function __construct()
         $this->noticesHelper           = $this->setNotices();
         $this->metadataConfig          = $this->setMetadataConfig();
         $this->currencyHelper          = $this->setCurrency();
+        $this->downloader              = $this->setDownloader();
         $this->settings                = $this->setSettings();
         $this->creditsEnabledHelper    = $this->setCreditsEnabled();
         $this->checkoutCustomEndpoints = $this->setCustomCheckoutEndpoints();
@@ -704,6 +704,6 @@ private function setHelpers(): Helpers
 
     private function setDownloader(): Downloader
     {
-        return new Downloader($this->logs);
+        return new Downloader($this->logs, $this->currentUserHelper);
     }
 }

src/Gateways/AbstractGateway.php

@@ -329,15 +329,17 @@ public function process_payment($order_id): array
         $this->mercadopago->orderMetadata->setUsedGatewayData($order, get_class($this)::ID);
 
         if ($this->discount != 0) {
+            $percentage = Numbers::getPercentageFromParcialValue((float) $discount, (float) $order->get_total());
             $translation = $this->mercadopago->storeTranslations->commonCheckout['discount_title'];
-            $feeText     = $this->getFeeText($translation, 'discount', $discount);
+            $feeText     = $this->getFeeText($translation, $percentage, $discount);
 
             $this->mercadopago->orderMetadata->setDiscountData($order, $feeText);
         }
 
         if ($this->commission != 0) {
+            $percentage = Numbers::getPercentageFromParcialValue((float) $comission, (float) $order->get_total());
             $translation = $this->mercadopago->storeTranslations->commonCheckout['fee_title'];
-            $feeText     = $this->getFeeText($translation, 'commission', $commission);
+            $feeText     = $this->getFeeText($translation, $percentage, $commission);
 
             $this->mercadopago->orderMetadata->setCommissionData($order, $feeText);
         }

src/Helpers/Numbers.php

@@ -76,4 +76,20 @@ public static function calculateByCurrency(string $currency, float $value, float
 
         return self::format($value * $ratio * 100) / 100;
     }
+
+    /**
+     * Returns the percentage of parcialValue on the sum with the paid value
+     *
+     * @param float $parcialValue
+     * @param float $paidValue
+     *
+     * @return float
+     */
+    public static function getPercentageFromParcialValue(float $parcialValue, $paidValue)
+    {
+        $total = $paidValue + $parcialValue;
+        $percentage = ($parcialValue / $total) * 100;
+
+        return self::format($percentage);
+    }
 }

src/IO/Downloader.php

@@ -5,6 +5,7 @@
 use MercadoPago\Woocommerce\Entities\Files\Log as LogFile;
 use MercadoPago\Woocommerce\Libraries\Logs\Logs;
 use MercadoPago\Woocommerce\Helpers\Form;
+use MercadoPago\Woocommerce\Helpers\CurrentUser;
 
 if (!defined('ABSPATH')) {
     exit;
@@ -23,9 +24,14 @@ class Downloader
 
     public $pluginLogs;
 
+    /**
+     * @var CurrentUser
+     */
+    private $currentUser;
 
-    public function __construct(Logs $logs)
+    public function __construct(Logs $logs, CurrentUser $currentUser)
     {
+        $this->currentUser  = $currentUser;
         $this->logs     = $logs;
         $this->pluginLogs = $this->getNameOfFileLogs();
     }
@@ -99,7 +105,7 @@ private function singleFileDownload(array $selectedFile): void
     {
         $filename = reset($selectedFile);
 
-        if (!$this->validateFilename($filename)) {
+        if (!$this->validatesDownloadSecurity($filename)) {
             throw new \Exception('attempt to download the file ' . $filename . 'on ' .  __METHOD__);
         }
 
@@ -128,7 +134,7 @@ private function multipleFileDownload(array $selectedFiles): void
 
         if ($zip->open($temp_file, \ZipArchive::CREATE) === true) {
             foreach ($selectedFiles as $filename) {
-                if (!$this->validateFilename($filename)) {
+                if (!$this->validatesDownloadSecurity($filename)) {
                     continue;
                 }
 
@@ -152,14 +158,16 @@ private function multipleFileDownload(array $selectedFiles): void
     }
 
     /**
-     * Validates a filename to prevent path traversal attempts and ensure expected format.
+     * Validates a filename and user permissions to prevent path traversal attempts and ensure expected format.
      *
      * @param string $filename The filename to be validated
      *
      * @return bool True if the filename is valid, false otherwise
      */
-    private function validateFilename(string $filename): bool
+    private function validatesDownloadSecurity(string $filename): bool
     {
+        $this->currentUser->validateUserNeededPermissions();
+
         return $this->hasAllowedExtension($filename) &&
             $this->hasNoDisallowedCharacters($filename) &&
             $this->containsExpectedTerms($filename);
@@ -168,7 +176,7 @@ private function validateFilename(string $filename): bool
     private function hasAllowedExtension(string $filename): bool
     {
         $allowed_pattern = '/\.log$/';
-        return (bool)preg_match($allowed_pattern, $filename);
+        return  (bool)preg_match($allowed_pattern, $filename);
     }
 
     private function hasNoDisallowedCharacters(string $filename): bool

src/WoocommerceMercadoPago.php

@@ -33,7 +33,7 @@ class WoocommerceMercadoPago
     /**
      * @const
      */
-    private const PLUGIN_VERSION = '7.6.1';
+    private const PLUGIN_VERSION = '7.6.2';
 
     /**
      * @const

woocommerce-mercadopago.php

@@ -4,13 +4,13 @@
  * Plugin Name: Mercado Pago
  * Plugin URI: https://github.com/mercadopago/cart-woocommerce
  * Description: Configure the payment options and accept payments with cards, ticket and money of Mercado Pago account.
- * Version: 7.6.1
+ * Version: 7.6.2
  * Author: Mercado Pago
  * Author URI: https://developers.mercadopago.com/
  * Text Domain: woocommerce-mercadopago
  * Domain Path: /i18n/languages/
  * WC requires at least: 5.5.2
- * WC tested up to: 8.1.0
+ * WC tested up to: 9.0.2
  * Requires PHP: 7.4
  *
  * @package MercadoPago