XONIC 4.x Changelog: All Updates & Patches

Legal Information & Obligations

• EU Warranty Notice and Warranty Label: Mandatory information in the shopping cart, order summary, and order confirmation; the official information sheet can be attached if desired. Items with a manufacturer’s warranty of two years or more also display the EU warranty label—see the guide
• Display Locations and Layout Are Fully Customizable: You decide whether the notice appears only during checkout or also on the product page; by default, it is shown collapsed
• Checklist for warranty information: A backend overview displays all items with a manufacturer’s warranty and flags missing or invalid information—with search, sorting, and confirmation options for each item
• Correct shipping tax for marketplace orders: The shipping line item was sometimes shown with 0% tax on invoices and in the accounting export—the tax rate is now calculated correctly
• Correct tax for in-store pickup: The tax rate and net conversion may have originated from different locations; the selected store—or, alternatively, your company’s headquarters—is now the determining factor
• Duplicate tax zones detected and corrected: If a country appeared multiple times in the same tax zone, the tax rate was automatically doubled. Such entries are now rejected, existing ones are corrected, and overlaps are reported in the system check
• Country zones can be edited again: The protection of tax zones also blocked the editing of standard country zones—which, in established stores, applied to virtually all of them. The edit, sort, and statistics buttons are available again; now, only the country assignments on which tax calculation depends are specifically protected. As of version 4.9.4.
• Warranty notice can be disabled: Shops outside the EU’s scope of application—such as in Switzerland—can now completely disable the harmonized notice instead of merely switching to a shorter version. As of version 4.9.11.
• Warranty information is no longer lost: If the warranty period for an item was entered using a non-standard spelling, the product editor would display “no information” and delete the value the next time the item was saved—without any notification. The store now automatically recognizes such variations; a system check corrects existing products with the click of a button. As of version 4.9.31.
• Manage warranties for entire product lines: Information on product warranties and manufacturer warranties can now be imported via all methods—via spreadsheet, through the inventory management system, and via the API. Those who carry many items of the same type no longer need to edit them individually. As of version 4.9.31.
• Consent Records Fully Traceable: Although consent from support requests and availability notifications was saved, it could not be assigned in the audit log. It now appears correctly categorized—which is important in the event of an inquiry from a regulatory authority. As of version 4.9.17.
• Newsletters Always Include an Unsubscribe Link: Subscribers from earlier data imports received newsletters without an unsubscribe link and without the one-click unsubscribe feature required by major email providers. Confirmed subscriptions automatically receive the missing key, and new sign-ups no longer accept an empty value. As of version 4.9.47.
• Price information in the variant list is now complete: In the tile view of variants on the product page, “incl. sales tax,” “plus shipping costs,” and the note regarding pickup only—mandatory information under the Price Indication Regulation—were missing. They now appear again. As of version 4.9.47.
• Return button for consumers only: If the return option is disabled for business customers, the store now recognizes commercial customers even without a VAT ID—based on the selected account type “Company” or a net customer group. Previously, domestic business customers in particular were shown the button. As of version 4.9.85.
• Correct and Disableable Tax Note on Invoices: The note regarding a tax-exempt intra-Community supply no longer appears on invoices that show tax. Additionally, it can be hidden without the customer’s VAT ID number disappearing from the invoice—the e-invoice remains valid. As of version 4.9.81.
• E-invoice distinguishes between goods deliveries and services: The e-invoice now reports tax-exempt goods deliveries to another EU country as intra-Community deliveries, while services continue to be reported as reverse charge—just like the printed receipt. Shipping costs and discounts are assigned to the appropriate category. As of version 4.9.88.
• Statistics and tracking only with consent: The system’s own visitor statistics are tracked only after consent is given in the cookie dialog. PayPal loads its scripts only when a PayPal button is needed; email addresses are sent to Google only with consent for advertising; and even elements that load without JavaScript are subject to this consent. Sample addresses from form prompts are no longer transmitted to Google as customer data. As of version 4.9.89.
• Explanatory text on visitor statistics in the cookie dialog: The “Visitor Statistics” category now explains the purpose, processed data, and retention period directly in the dialog, even for existing stores. As of version 4.9.96.
• Unsubscribe link in every store newsletter: Even subscribers without a customer account receive the unsubscribe link. The newsletter is sent in the language of the subscription; for customers, it is in the language of their account. As of version 4.9.107.
• Confirmation of receipt of the notice of withdrawal pursuant to Section 356a(4) of the German Civil Code (BGB): The confirmation specifies the date and time of receipt and the address to which it was sent. The system check flags withdrawal instructions that do not yet mention the withdrawal function. As of version 4.9.114.
• E-invoices are now more comprehensive: cash discounts, rebates, loyalty discounts, and fees such as cash-on-delivery charges, payment method surcharges, minimum quantity surcharges, or packaging surcharges appear as deductions and surcharges by tax rate; a credit balance appears as an advance payment. Vouchers are correctly allocated when mixed tax rates apply. As of version 4.9.121, completed in version 4.9.123.
• Advertising opt-out remains in effect: Signing up via the newsletter form no longer tacitly revokes a previously declared opt-out. As of version 4.9.135.
• Consent to an early contract start date requires a click: The order confirmation and order history now only note consent to the expiration of the right of withdrawal for services and digital content if the customer has checked the box themselves. It is never preselected. The confirmation for B-grade goods pursuant to § 476 BGB can be deselected again, and the notices cite § 356 BGB in the version effective as of June 19, 2026. As of version 4.9.136.

Shop & Checkout

• Significantly faster category pages with filters: The number of results and price range are generated in a single pass—with over 14,000 items, the load time per page dropped to about one-third
• New news and advice section design throughout: Home page, overview, and article page now share a unified look, featuring featured images and a consistent sidebar box; the previous layout remains customizable
• Scheduled posts no longer appear too early: The “Latest News” box used to display posts before their publication date and linked to a page that didn’t yet exist—the date is now consistently applied everywhere
• Variant selection without interruption: For items with free-text fields in the variant selection, the cursor would jump out of the field while typing—custom text can now be entered in one go
• Quick entry in the active language: The quick entry feature for item numbers sometimes appeared in the default language for foreign-language customers; it now follows the selected store language; minor display errors in the gallery and labels have also been fixed
• Search results with base price and “Buy Now”: The advanced product search displays the base price as shown on the product page and allows items to be added to the shopping cart directly from the results list—with inventory information included if desired
• Redeeming Coupons as a Guest: If a non-logged-in customer entered a coupon code, the process would end on a page with no option to log in—thereby blocking the purchase. The process now reliably directs the user to the login page. As of version 4.9.7.
• Coupon code persists through login: The entered code is retained throughout the login process and is automatically redeemed afterward, including all standard validation checks. It does not need to be re-entered. As of version 4.9.8.
• Coupon box in the sidebar: Entering a code outside the shopping cart now also leads to the login page and subsequently redeems the code, instead of ending with a message with no follow-up action. As of version 4.9.9.
• Product descriptions on mobile devices: Wide content such as tables used to be cut off at the edges and were inaccessible. The text is now fully readable again, highlighted text appears correctly in bold, and the position of the description is adjustable. As of version 4.9.6.
• Fully Configurable Callback Service: You can now set the days of the week and time slots for callback requests yourself—previously, these were fixed, and Sunday was not even an option. As of version 4.9.10.
• Product filters in customized layouts: In stores with custom-designed product lists, applying a filter could have no effect—the URL would change, but the list would not. The store now recognizes this and reliably reloads the list. As of version 4.9.11.
• Error pages retain the store layout: Under certain circumstances, pages that could not be found appeared without any design. Additionally, the store now specifically states that a news article does not exist, rather than generally referring to a missing page. As of version 4.9.12.
• Preview image when sharing: News and content pages without their own image now use a stored fallback image when shared on social media, instead of appearing without a preview. As of version 4.9.12.
• Search with the Camera: If image search is enabled, a camera icon appears in the search field: Your customers can take a photo of an item and find it in the product catalog without knowing its name. Also available on smartphones. As of version 4.9.27.
• Categories in Quick Search with Images: Quick Search now displays matching categories optionally as a grid with images—just like the product results. The order of the sections is fully customizable. As of version 4.9.27.
• Clearer Login and Registration: New customers can now choose right at the start between placing an order with or without a customer account. The labels automatically adapt to what you allow in your store—if “Guest Checkout” is available there, the option no longer says “Register.” As of version 4.9.27.
• Addresses with house numbers at the beginning: Formats such as “6 Altersberger Weg” were considered incomplete and blocked the order. The system now accepts house numbers at the beginning or end. As of version 4.9.21.
• Clean pagination for search engines: Requests beyond the last page returned an empty list, and sorting requests competed with regular URLs for the same ranking position. Both issues have been resolved—Google now ranks the correct page. As of version 4.9.26.
• Product attributes in the shopping cart in the selected language: If a customer changed the language after filling the shopping cart, attribute details such as “Color: Red” remained in the old language—all the way through to the order and the order confirmation. The shopping cart and wish list now follow the active language. As of version 4.9.33.
• Readable error page for unavailable items: Attempting to view an item from a disabled category previously displayed a barely legible page with no search field and no way to return to the previous page. It now uses the same “Page Not Found” view as the rest of the store—with a search function and a link to the main product page. As of version 4.9.34.
• SEO Redirects Also for Deactivated Content Pages: A redirect configured for a deactivated content page previously went unnoticed and resulted in a “Page Not Found” error. It now works the same way as for categories and products. As of version 4.9.34.
• Sitemap without redirecting categories: Categories that redirect to another page were still included in the sitemap—Google flags such entries as errors. They are now omitted; their subcategories remain included. As of version 4.9.34.
• Language links without dead ends, social previews on all pages: If a post lacked a translation, the store would still direct search engines to a nonexistent page—which weakens the ranking of all language versions. Such links are now omitted. In addition, all pages—including Contact, FAQ, News Overview, and Bestseller Lists—now provide a preview with a title and image when shared on social media. As of version 4.9.34.
• Item Number in Quick Search: Suggestions in the search field now display the item number below the product name—useful for models that differ only by their numbers; this feature can be disabled under Settings → General → Search. As of version 4.9.86.
• Forms on Translated Pages: On translated page URLs, entries in login, registration, and shipping forms were lost due to an internal redirect; customers saw an empty form with a message stating that all fields were incorrect. Multilingual stores were affected starting with version 4.9.26. Forms are now processed without redirection. As of version 4.9.45.
• Consistent behavior for products without images: Whether an item without an image displays a placeholder or omits the image area is now consistent across categories, sliders, search results, variant lists, and product browsing. On the product page, the placeholder can be selected intentionally; empty gallery areas are no longer displayed. As of version 4.9.38.
• Store language based on browser language: The setting “Adapt store language to browser language” was ineffective. First-time visitors now land on the page in their language—at a corresponding URL that can be shared. As of version 4.9.47.
• Clearly Labeled Redeemed Coupons: A coupon that had already been redeemed was marked as “invalid”—which customers could not distinguish from a typo. It now says “already redeemed” in all store languages. As of version 4.9.47.
• ZIP codes from London, Luxembourg, and Latvia: Correctly written ZIP codes from central London, Luxembourgish codes prefixed with “L-,” and Latvian codes with spaces were rejected. As of version 4.9.47.
• Duplicate system texts detected: If a system text was accidentally created twice, the cookie dialog, for example, would remain blank and could not be closed. The system check flags such duplicates, and the page management feature prevents new ones from being created when saving. As of version 4.9.47; fully implemented as of version 4.9.50.
• Accurate volume pricing for retailers: When displaying net prices, the unit price was rounded before being multiplied by the quantity—for large quantities, a retailer paid noticeably less than an end customer. A new setting calculates using the exact unit price if desired. As of version 4.9.47.
• Spam protection without false positives: The threshold for the reCAPTCHA check was fixed at 0.8, making it stricter than intended by Google. It is now adjustable (default 0.5), and rejected requests are logged—this makes it possible to determine why a customer was unable to submit a form. As of version 4.9.47.
• Search with a single keyword: Categories, content pages, and news now appear in order of relevance even with just one search term—previously, the best match was sometimes omitted entirely. The message “nothing found” no longer appears, even though results are displayed. As of version 4.9.57.
• Fewer duplicate URLs for search engines: The category selection in search results previously generated a separate URL for each click sequence, which Google indexed individually. Product links from lists no longer carry a pagination or sorting state; subsequent pages now include “– Page N” in their title and description; and the review overview has its own canonical URL and no longer appears empty in other store languages—reviews appear there in their original language. As of version 4.9.60, expanded in version 4.9.61.
• Sitemap and feeds without restricted items: Items restricted to guests were included in the sitemap, Google data source, and review feed—Google linked to pages that visitors couldn’t open, and merchant items were publicly promoted. Foreign-language content pages and news items also appear in the sitemap under their canonical URL. As of version 4.9.62.
• Improved meta descriptions and translations: Categories without their own meta description now display an excerpt from their text instead of a list of category names. News titles and descriptions are also translated, and if a translation changes the address of a foreign-language page, the old address redirects correctly. As of version 4.9.62.
• Filter window remains visible: After clicking on a lower entry, the filter window used to become empty in some browsers. As of version 4.9.62.
• Newsletter window on smartphones: The newsletter sign-up window can be scrolled on mobile devices, the sign-up button is always accessible, and the close icon is clearly visible. As of version 4.9.72.
• No purchase interruptions due to empty required fields: A required field without a selectable value did not appear on the product page but still required a selection during checkout—making the item unorderable without the user noticing. The store no longer requires a selection it does not offer, and the product form prevents new instances of this issue from occurring when saving. As of version 4.9.85.
• Street field matches the country: The labeling of the street field was based on the language rather than the country—French customers saw the house number and street in the wrong order and abandoned the checkout process. It now follows the country of the address. As of version 4.9.85.
• Category text with image: An image aligned to the left or right in the category description pushed the tiles below it to the edge. As of version 4.9.85.
• Product video in search engine data: The thumbnail of a product video appeared in the structured product data with an unreachable URL; Google therefore flagged the listing as incorrect. As of version 4.9.85.
• Quick Search Delivers Consistent Results: With Manticore Search, the search window and results page displayed different items when sorted alphabetically. Changed search settings take effect immediately; typos with duplicate letters find the correct brand; and search terms entered or dictated also trigger the search on a smartphone. As of version 4.9.85.
• Quick Search revamped: Variants can be grouped under the main item in the search window; the number of results per section—items, categories, manufacturers, content pages, news, FAQ—is freely adjustable; and Manticore Search sorts across all results. If the search finds no brand or category, it suggests similar-sounding ones. All search settings are grouped under Settings → General → Search. As of version 4.9.87.
• Donation price clearly broken down: If the store uses the voluntary contribution with a preselected donation amount, the price display now breaks down the total into the item price and the contribution. As of version 4.9.86.
• Faster homepage and product blocks: For large product ranges, “Specials,” “Bestsellers,” and other product blocks now load only the displayed items in full; in a store with over 110,000 items, the time to retrieve the “Specials” block dropped from over one second to just a few milliseconds. The product view counter is updated in batches instead of clearing the database cache with every product view. As of version 4.9.91.
• No more 0-euro line items due to old shopping carts: A shopping cart that had been saved for a long time could contain attributes that no longer exist—items with a price in that attribute would then be processed as 0.00 €. Such items are cleared upon login, and the checkout no longer allows invalid attribute selections; affected items are marked in the shopping cart. As of version 4.9.92.
• Express Purchase with an Existing Customer Account: The paid shopping cart is no longer lost if the buyer already has an account in the store. As of version 4.9.94.
• Product Configurator After Changing Variants: Images retain their size, and the attribute columns of your custom layout are preserved after a click. As of version 4.9.94.
• Variant names truncated correctly: Without a main item, the variant list now truncates common parts of names only by word. The first letter of a variant name is no longer truncated. As of version 4.9.94.
• Forgot Password: After requesting the link, the page displays a confirmation message again. As of version 4.9.94.
• Request a Quote: The button on the product page works even if the price inquiry feature is not enabled; the quote email is available in all languages. As of version 4.9.106.
• Random Sorting per Slider: Product sliders with random sorting now shuffle their contents individually rather than all at once for the entire page. As of version 4.9.106.
• Date fields in the checkout description: Placeholders for a date, such as the estimated delivery date, no longer cause an error in the shopping cart. As of version 4.9.114.
• Company information for search engines: The web address in the structured company data is always displayed in full. As of version 4.9.120.
• Automatic llms.txt for AI search services: The store provides one llms.txt file per domain. It summarizes the most important information about the store, product range, and company and helps AI assistants correctly categorize your offerings. This feature can be disabled; a custom file in the store takes precedence. As of version 4.9.122.
• Shipping Country Window with More Detailed Information: It displays the actual billing currency, hides empty fields, and—if desired—lists the VAT rate and the minimum order value for free shipping, including information from the shipping method’s tiered pricing structure. As of version 4.9.124, expanded in versions 4.9.126 and 4.9.135.
• More precise search for item numbers and dimensions: Such search terms no longer return irrelevant “similar” results. As of version 4.9.131.
• Dimensions in any notation: The search finds “M 8 x 16” even when “8x16” is entered. As of version 4.9.135.
• Search by manufacturer name: Items can once again be found by the manufacturer’s name, and the search for similar-sounding words is more accurate. As of version 4.9.135.
• Products without images at the end: Optionally, items without images appear at the end of product lists (with standard sorting) and product blocks. As of version 4.9.135.
• Clearer attribute selection: Values that cannot be combined are highlighted in light gray and remain clickable, even in the pop-up selection. For large variant families, the selection changes much faster. As of version 4.9.135.
• Slider: The arrows remain visible on touch devices. A slide whose destination has been deleted or deactivated appears without a link instead of disappearing. As of version 4.9.135.
• Attribute images: Links in the image viewer work again, and attribute images appear in the product PDF. As of version 4.9.135.
• Rating Stars: Stars are once again displayed as stars; the checkmarks and crosses that had disappeared are back. As of version 4.9.135.
• Trusted Shops review link: The link now passes the email address and order number again; customers do not need to re-enter them. As of version 4.9.135.
• Newsletter Signup: The signup popup no longer reappears after signup, and the messages in the signup block are now presented as readable text. As of version 4.9.135.
• Registration and Forms: Error messages state the actual reason; titles and the callback form are correctly translated in all languages. As of version 4.9.135.
• Improved search engine readability: The expandable sections on the product page are now true headings. Structured product data contains only identifiers with values, and special characters such as “×” or “é” appear correctly in titles, headings, and lists. As of version 4.9.135.

Backend & Workflows

• Order List: Hide Product Attributes: A toggle hides product attributes from both the view and the printout; with corrected column widths, the picking printout shrinks from thirteen pages to just a few
• Save items without any data loss: For very extensively maintained items, images, descriptions, product tabs, attributes, and download files could be lost when saving without any warning—the server received the form incompletely and interpreted the missing data as “removed by the editor.” The form now automatically detects an incomplete submission, aborts the process with a clear message, and leaves your data untouched. As of version 4.9.3.
• Profit calculation as a true Excel file: The export is now a proper Excel file with a header, color scheme, and fixed headings—no more garbled umlauts; there’s also a simple text export option
• Headings in the Page Editor text module: Previously, headings could not be set in the text module, and inserted ones disappeared without explanation—both now work, while all other fields remain unchanged
• More file formats as ticket attachments: Compressed archives can now be attached to tickets; if a file is rejected or too large, you’ll receive a clear message instead of a reply without an attachment
• Tasks no longer trigger customer emails: Internal tasks used to send a notification to the customer—a single click was enough to send an email about a process the customer couldn’t even access. Tasks now remain internal
• Product badges visible immediately: Changes to product badges appear instantly in the store without requiring you to clear the cache
• Streamlined supplier management: Fields and columns for payments to vendors now appear only if you use this payment feature
• Global search finds orders, customers, and items: Previously, the search in the header only returned menu items and settings. Now it also finds order numbers, customer names, companies, email addresses, and item numbers. As of version 4.9.6.
• Order list with unit prices: An additional toggle displays the gross unit price per line item—both in the view and on the printout. As of version 4.9.6.
• Creating a New Ticket: Sender, CC, and Suggestions: When creating a ticket, you can now select the sender under whose name the entry will appear; previously, there was a selection option that did not function. CC and BCC recipients can be entered directly during creation, and as you type, the shop suggests matching addresses from your customer database. As of version 4.9.16.
• News Articles and Facebook: The news list now shows in a separate column whether an article has already been published on Facebook. No posts are published for scheduled articles that have not yet been released. As of version 4.9.12.
• AI settings indicate what’s missing: Without the corresponding module, AI functions could be configured and saved without actually running—without any indication or notification. The section is now locked and explains what is required. As of version 4.9.10.
• Automation Based on Payment Status: Two new conditions in the marketing automation system respond to the outstanding invoice amount and to payment terms that have been exceeded. As of version 4.9.13.
• Product overview significantly faster: With large product ranges, the item list used to load noticeably slowly. It now opens in a fraction of the time, even with six-digit item counts. As of version 4.9.29.
• Comprehensive rights management: When saving a user group, the order and product editors would silently lose their access permissions because neither appeared in the dialog box. They are now visible, and a system check identifies and repairs affected groups. As of version 4.9.24.
• More Convenient Ticket Processing: Files can be attached directly to a ticket, customers can be assigned via live search, and copy recipients can be added during creation—with address suggestions from the customer database. As of version 4.9.21.
• Import locks in one place: The locks preventing overwriting by inventory management and file import were located on two tabs that reset each other when saved. Now there is a single tab—named after the interfaces you actually use. The tax class can now also be secured. As of version 4.9.29.
• More Reliable Price Changes: The tool for adjusting prices across entire product ranges has been revised and safeguarded against incorrect entries. As of version 4.9.27.
• Text modules protected against accidental deletion: A module that is still in use elsewhere can no longer be removed without being noticed. As of version 4.9.31.
• Update Wizard checks your scheduling: Before the update, the wizard alerts you to any ongoing scheduled tasks so that no imports or shipping requests interfere during the update. As of version 4.9.29.
• Page Editor for Layouts with Ten or More Elements: In layouts with ten or more elements, spacing settings were missing for some elements, and the first element could not be deleted. Both issues have been resolved; a button in the System Check now applies previously configured spacing. As of version 4.9.32.
• Content page with call-to-action box can be accessed again: A content page with a call-to-action box could no longer be opened in the backend after saving. As of version 4.9.32.
• No silent data loss with very large forms: If a content form (category, content page, news, FAQ, manufacturer) exceeded the server limit, the missing fields were interpreted as deleted—entire language versions could disappear. The shop now detects an incomplete transfer, aborts the save process, and reports the issue. As of version 4.9.32; fully implemented as of version 4.9.33.
• Attribute extensions relabeled: In the “Attributes” tab, the extensions (purchase price, MSRP, additional items) displayed technical keys instead of labels. As of version 4.9.34.
• New ticket interface without misleading classification: Without the license module, every ticket associated with a customer account was classified as “critical” and appeared in red; in addition, empty license counters were displayed. The color now conveys the correct status again. As of version 4.9.34.
• Ticket links open the corresponding task: Links from AI corrections and the form inbox led to the ticket list instead of the clicked ticket. As of version 4.9.34.
• Contract Management without duplicate log entries: Paid transactions were processed multiple times during automatic closure—visible as duplicate entries in the order history. As of version 4.9.34.
• Image Upload under PHP 8.5: The file manager would crash under PHP 8.5 when uploading, resizing, and editing images. As of version 4.9.47.
• Backend Login Without an Endless Loop: Automatic table optimization during login could cause the login process to abort on large stores—and every subsequent attempt would restart the process from the beginning while the store was down. It now runs at most once per interval. As of version 4.9.47.
• “Stock Level” marketing condition now works: The condition previously did not account for safety stock or additional warehouses, and selecting a warehouse had no effect. It now filters based on actual stock levels. As of version 4.9.47.
• Invoice numbers are never duplicated: If two invoices were generated at the exact same moment—for example, upon order completion and in the backend—both could receive the same number. Number assignment is now secured and follows the same rule across all instances. For custom number ranges, the setting now displays the next available number again. As of version 4.9.54.
• Exclude Items from Coupons: Individual items can now be excluded from coupon discounts—an excluded main item excludes its variants as well. The minimum order value continues to apply to the entire shopping cart. As of version 4.9.59.
• Event invitations in the new ticket design: The new ticket interface also displays recognized event invitations as a card with “Add to Calendar”; the time zone and event end time are correctly carried over. As of version 4.9.58.
• Notifications no longer hidden: Notifications in the backend appear below the header bar instead of behind it, and edit locks can now only be lifted by logged-in users with the appropriate permissions. As of version 4.9.75.
• Order Search and Scanner Find GTINs: The order overview now also finds orders via a scanned GTIN—with or without a leading zero, even for items without a saved EAN. The same applies in the scanner’s inventory mode; ambiguous codes are flagged instead of being silently assigned to an item. As of version 4.9.85.
• Upload product list without stock loss: Previously, if an EAN was accidentally entered in the quantity column when uploading a product list in the Order Editor, the inventory of the affected items was irretrievably lost. Invalid quantities are now rejected. As of version 4.9.85.
• Forwarded emails are fully preserved in tickets: The AI-powered processing of forwarded email chains keeps the sender, date, order, and embedded images in their original positions; if the result differs, the original text remains intact. As of version 4.9.85.
• Menu highlights the correct section: For settings in the fourth menu level—such as under “Interfaces”—the main menu item, breadcrumb trail, and the path in the backend search are now fully restored. As of version 4.9.85.
• Settings are saved correctly: The Yes/No toggle for advanced features was saving a value that the module did not recognize—it remained disabled despite selecting “Yes”; after resaving with “Yes,” it is now active. Additionally, shop-specific values can now only be stored where they are reliably verified. As of version 4.9.85.
• System Check: Hide Findings: Individual findings from the system check can be permanently ignored—such as an index that your store deliberately does not use. They are then marked as resolved, can be unhidden at any time, and apply to the database, navigation, and configuration checks. As of version 4.9.87.
• DeepL translation runs reliably: Very large text fields are translated in sections instead of keeping the data record open indefinitely. If there is a large backlog, the scheduled run divides the work into the available time window instead of aborting. As of version 4.9.61, fully implemented as of version 4.9.85.
• Payment text modules without duplicates: The button in the system check that creates missing text modules for payment methods uses the designated numbers and no longer generates duplicate entries; the preview shows exactly what will be created. As of version 4.9.62.
• xoScan: Document barcodes with a number range prefix open the correct order. As of version 4.9.94.
• Customer note remains intact: The customer’s note regarding the order is no longer replaced by messages from the payment provider. As of version 4.9.94.
• Configuration Labels Corrected: Settings once again display their labels and descriptions instead of internal identifiers, and the language selection in the login screen correctly displays “Français.” As of version 4.9.97.
• Automatic translation: Links with icons remain intact during translation; alternative text, titles, and labels for screen readers are also translated. As of version 4.9.98.
• File Manager: Images with harmless color profile warnings can once again be uploaded and displayed in the preview. As of version 4.9.106.
• System Check cleans up legacy payment data: One click removes outdated content blocks from previous payment methods, with a backup. The System Check flags blocks with their own content instead of deleting them. As of version 4.9.106.
• Invoices and delivery slips with commas in customer names: The PDF files now open again in all browsers. As of version 4.9.106.
• Ticket Transfer: The destination ticket is now found even if a “T” precedes the number. As of version 4.9.106.
• Coupon promotions: Coupons can be approved individually for each design; the coupon PDF once again displays the code and amount and is in a fixed A4 format. As of version 4.9.108; A4 format as of version 4.9.123.
• Ticket System: Replies with a ticket number in the subject line are routed to the existing ticket; the confirmation of receipt includes a link to the ticket; tickets from guest orders appear in the “Tickets” tab of the order; and tasks can be created even without a customer. As of version 4.9.111.
• Link an invoice to a contract retroactively: An invoice that has already been created can be assigned to a contract. A preview shows in advance what will change. As of version 4.9.116.
• Order Editor: Negative quantities—such as credit lines for returns—can now be saved again. If a cash discount applies to all payment methods, an order without a cash discount line will not receive one retroactively. As of version 4.9.118; cash discount as of version 4.9.121.
• Tickets on the smartphone: The latest reply, summary, and stores are displayed above the history. As of version 4.9.125.
• Affiliate Program with Per-Partner Rights: Marketing materials and tracking via affiliate links can be disabled on a per-partner basis; in that case, only the coupon code counts. Partner links are effective only for approved partners; a coupon code takes precedence, and the commission is determined at the time of purchase—even for orders that a payment provider subsequently restores. As of version 4.9.128; restoration as of version 4.9.135.
• Mailbox in xoCRM (Premium): Read, reply to, and compose emails from one or more mailboxes directly in the backend, with drafts and a sent items folder. Replies remain assigned to the corresponding ticket. As of version 4.9.133.
• Billing annual prices on a monthly basis: Contract items with an annual price can be billed in monthly installments. The initial order covers the first billing period; subsequent invoices use the appropriate unit. As of version 4.9.134.
• Missing contracts detected more accurately: The check is performed per invoice line item. Invoices linked retroactively and consolidated invoices are correctly accounted for. As of version 4.9.135.
• Ticket System and xoCRM: Numerous fixes. Among other things, a reply remains intact even when preceded by a short quote; the sidebar in the ticket view is accessible; appointments can be created without reloading the page; and projects, files, and links follow a uniform access policy. As of version 4.9.135.
• Reports: “Reorder” filters based on the displayed inventory; the quantity filter for “Viewed Products” now works. As of version 4.9.135.
• SEO names remain unchanged: Unmodified SEO names are no longer rewritten when saving. As of version 4.9.135.
• Full IPv6 addresses: The customer’s IP address is now stored in full in orders, even for IPv6. For very large databases in existing stores, the system check offers a one-click conversion option. As of version 4.9.135.

Interfaces & Marketplaces

• Inventory Management no longer overwrites shipping profiles: The inventory reconciliation process used to reset items with special shipping profiles—such as “discontinued” or “special order” —to the default setting with every run, affecting over 21,000 items in a single store. It now only modifies what it recognizes
• Correctly close pickup orders on eBay: Pickup orders could not be marked as shipped because a tracking number was required—they are now properly closed
• Import language prevents data proliferation: If the import language was set to a language not used in the system, each run would create new units, categories, and manufacturers—in one case, nearly 25,000 entries for 15 product names. This can no longer happen
• Import files from the server are now prepared: Files stored via FTP are also checked for character set and line endings—older file formats and umlauts process without requiring manual correction
• Product export no longer fails: The XML product export would fail completely as soon as an item had a supplier assignment, a video, or an editor description—it now runs through successfully
• Retrieve documents via the interface: Invoices, packing slips, order confirmations, and other documents associated with an order are now available as PDFs via the interface
• Affiliate referrals are now reported only once: For payment methods that redirect to an external site for payment, an order referred via Adtraction could be reported a second time if another order was placed during the same session—resulting in a double commission charged to you. A single click now reliably counts toward exactly one order. As of version 4.9.5.
• Inventory levels via the interface: The product export provides inventory levels per warehouse, and the fields for the main warehouse can now also be imported. As of version 4.9.16.
• Data source for local inventory: For local ads and free store listings, the shop provides a separate data source for each branch and item—including availability and optional pickup options. As of version 4.9.15.
• Order export to the inventory management system: If an order contained no line items, the export would abort midway, and the receiving system would receive incomplete data. Such orders are now skipped, and you will be notified. As of version 4.9.6.
• Warranty data via the interface: This information can now be transferred in both directions. Previously, the export included this data, but it could not be written back—making reconciliation with the inventory management system impossible. As of version 4.9.31.
• Inventory Levels in the Export: The export now includes inventory levels for each warehouse, using the same field set as the import. As of version 4.9.16.
• Deleted appointments also disappear from the interface: An appointment deleted in the calendar was still being exported. Anyone who checked the deletion via the interface assumed it had failed. As of version 4.9.27.
• Local Inventory for Google: New data source for “Available Nearby”: You can report to Google which items are in stock at which store—including pickup options. As of version 4.9.15.
• Renew eBay Connection Yourself: If the connection to eBay expired or was revoked, order imports and shipping notifications would stop—visible only in the log. Now the store clearly notifies you of this, and the connection can be renewed with a single click. As of version 4.9.26.
• Secure inventory management import: A price containing a comma permanently disabled item import, and inventory feeds could delete categories, images, or attributes that they didn’t actually include. Both issues have been resolved: Anything not contained in the feed remains untouched. As of version 4.9.29.
• TikTok Pixel in the browser: In addition to transmission from the server, the store now also reports events via the TikTok pixel in the browser—after consent is granted and without double counting. This allows the connection to be verified using TikTok’s own verification tool. As of version 4.9.35.
• Ticket Recipient Copies via API: CC and BCC recipients of a ticket can now also be added, replaced, or removed via the API—using the same address validation as in the backend. As of version 4.9.39.
• eBay synchronization is fully operational again: Since version 4.9.26, shipping notifications to eBay, uploads, inventory exports, and eBay details in the order search had stopped working—even when the configuration was correct. This has been fixed. Additionally, imports now set the modification date only when actual changes are made, so that eBay does not receive the entire inventory again after every run. As of version 4.9.40.
• eBay variant listings remain stable: If updating a variant listing failed, the store would relist it daily—resulting in a loss of ranking and followers. This behavior has been mitigated. As of version 4.9.46.
• eBay shipping notification even without a tracking number: If no tracking number was available for an order—for example, because the inventory management system did not report one—eBay rejected the entire shipping notification, and the order remained marked as “not shipped” there. It is now reported correctly. In addition, a single unprocessable item no longer causes the eBay upload and inventory synchronization to fail. As of version 4.9.47.
• No duplicate eBay listings: Simultaneous uploads could result in the same item being listed multiple times. The system now prevents new listings from being created in such cases; existing duplicate listings can be selectively removed; “Match Unique Items” processes large inventories in stages with a progress indicator; and the upload now transfers four items per run instead of one. As of version 4.9.51, fully implemented in version 4.9.53.
• eBay Upload with In-Stock Items Only: A new toggle uploads only items that are in stock, rather than listing them and ending them again during the next synchronization. Variant listings are counted based on their variants during automatic termination; paused variant listings no longer sell accidentally; and if eBay reports a duplicate listing, the shop automatically links the existing listing itself. As of version 4.9.64.
• Faster eBay Synchronization: After temporary eBay errors, an item waits one hour instead of one day, and newly linked or reactivated listings are prioritized for synchronization. eBay tasks are running again on servers with MySQL 8; they are no longer rejected by hosts with strict access controls; and price markups via an additional field are working again. As of version 4.9.68, fully implemented as of version 4.9.88.
• eBay manufacturer information in the new integration: The new eBay integration now transmits the manufacturer and the responsible person in the EU (GPSR), as required by eBay. Incomplete information only prevents the creation of a new listing; it never prevents inventory synchronization. As of version 4.9.70.
• Product feeds available again: Since version 4.8.9, a protection rule had inadvertently blocked public product feeds as well: Google Merchant Center, Doofinder, and the data source for local inventory received “Access Denied” errors, even though the feeds were generated daily. As of version 4.9.49.
• XML import is more reliable: Product downloads no longer double with every import, full synchronizations no longer delete return labels, and packaging units are no longer recreated with every run. Feeds containing invalid control characters are now cleaned up instead of being silently processed as empty; unreadable files are placed in a separate error folder. As of version 4.9.47, expanded in version 4.9.65.
• API significantly expanded: The REST API now also allows you to read and manage attributes and option values, configurator rules, traffic light profiles, gift cards and coupons, ticket departments, category page filters, shared settings, and the CSV Porter. Orders provide their status history, invoice numbers can be assigned, and videos, tracking numbers, and individual history entries can be removed. As of version 4.9.54.
• Lossless data synchronization via the interface: Exported data can be sent back unchanged without losing categories, images, special prices, or additional fields. Products can be precisely identified by number or ID, lists can be sorted, and an optional strict mode ensures that nothing is written if a field is unknown. Replaced images appear immediately in the store, and special prices without a description are no longer missing from the export. As of version 4.9.54.
• Custom Porter fields are preserved: Fields added via custom programming in CSV-Porter survive updates and the saving of column mappings. As of version 4.9.54.
• CSV export calculates correctly: Column options no longer get pushed behind image and video columns, and a calculation option on an empty field no longer causes the entire export to fail. As of version 4.9.85.
• CleverReach sync: Names, titles, and languages are now also transferred to German-language CleverReach accounts; data is transferred in batches rather than recipient by recipient. If CleverReach reports an error—such as a deleted list—the sync stops cleanly instead of continuing indefinitely. As of version 4.9.63; fully implemented as of version 4.9.90.
• Inventory Management Status Notifications: For selected statuses—such as “Ready for Pickup” for partial deliveries—a repeat notification is sent to the customer. This is configurable; the default setting remains unchanged. As of version 4.9.66.
• Google Analytics with clean data: Landing pages report the actual item number; all events use the same price basis with amounts rounded to two decimal places; multiple tax rates are added together; and product names are transmitted without formatting. Consent data reliably reaches Google even with accelerated script delivery. As of version 4.9.46, expanded in version 4.9.89.
• CSV import now modifies only the data contained in the file: A partial import no longer clears fields that were not included in the file at all, such as inventory or storage location. As of version 4.9.94.
• Google Merchant Center: The feed retrieval from Google works even when country restrictions are active. As of version 4.9.102.
• Import Analysis with Error Report: Rejected rows appear in a clear table and can be downloaded as a CSV file for further editing. As of version 4.9.106.
• Attribute Import: The sort order from the file is now applied again; otherwise, the sort order in the store remains unchanged. As of version 4.9.106.
• OpenXE and Xentral: Imports run in the background with a progress bar. The image name is set only if an image file exists; if a product family image is missing, the store uses one from a variant. As of version 4.9.106.
• News via Interface: Missing languages are created based on the primary language so that automatic translation takes effect. As of version 4.9.106.
• Mailchimp: Unsubscriptions from Mailchimp are transferred to the store; the store does not resubscribe unsubscribed recipients. As of version 4.9.123.
• Cancellations from Billbee are imported: Orders canceled in Billbee are canceled in the store, and shipping for canceled orders is blocked. Tracking numbers are retransmitted after an error, the order date is correct in local time, and credit orders are handled correctly. As of version 4.9.127, expanded in version 4.9.130.
• Change customer address via the interface: A partial update changes only the fields that were sent; the country remains unchanged. As of version 4.9.132.
• Surcharges based on formulas and shipping costs: When importing or uploading item lists, these are calculated correctly even when net prices are provided. As of version 4.9.134.
• Kaufland: Manufacturer information on product safety: The information is transmitted via Kaufland’s contact interface, with street and house number listed separately, and includes the EU representative for manufacturers outside the EU. As of version 4.9.135.
• OTTO: Cancellations by the marketplace set the order status in the store. As of version 4.9.135.
• OpenXE and Xentral: Category synchronization no longer overwrites settings made in the store. In addition, there is a dedicated order export with a selectable storage directory and an overview of the export files. As of version 4.9.135.
• Product feeds: Descriptions appear as clean text without run-together words. The new “Content” field provides the quantity and unit for the base price. As of version 4.9.135.
• Order Language for Imports: Orders from Billbee, Shopify, and the API now use the customer’s language instead of a fixed German setting. As of version 4.9.135.
• Inventory Reconciliation in the Inventory Management System: Individual items with family names no longer disappear from the store after updates. As of version 4.9.135.

Payment & Shipping

• Protection against double charges: If a customer restarts the purchase process after paying, the shop redirects them to the existing payment instead of charging them a second time; if a payment is made without an order being placed, you will be notified. Applies to redirecting payment methods
• Payment Confirmations Are Received Again: Confirmations from the payment service provider—including those regarding refunds—were being silently discarded on some stores, particularly for payments that did not redirect back to the store. They are now reliably processed
• Correct shipping methods for pickup: For Click & Collect, shipping methods were determined based on the store location instead of the customer’s address—as a result, ZIP-code-specific shipping methods were missing or incorrectly offered. The delivery address is now once again the determining factor
• Shipment tracking and label export: During synchronization with the marketplace service, shipment tracking entries were generated without a service provider, which overrode existing return labels. Additionally, the label export now correctly accounts for the selected shipping method
• Faster payment reconciliation: Previously, searching for an invoice number required scanning through all orders—twice daily during automatic reconciliation of bank transactions and every time a search was performed in the backend. With an additional search key, the result is found immediately. As of version 4.9.2.
• SEPA Direct Debit for outstanding invoices: Customers set up a direct debit authorization in their customer account or via an invitation link; the store then automatically collects due invoices. You can manage all authorizations in the backend under “Contracts.” While a direct debit is in progress, the dunning process is paused. Available As of version 4.9.13.
• Foreign-currency amounts on documents: If an order lacked a conversion rate, all amounts appeared as 0.00 on the invoice, packing slip, and receipt, and the totals block was missing. The exchange rate is now secured; the system check flags affected orders. As of version 4.9.6.
• Outstanding Amount Correctly Accounts for Reversals: After a credit memo, the reversal was deducted twice. As a result, the suggested amount in the incoming payments screen was too low—and anyone who accepted it marked the purchase order as “paid” even though there was still an outstanding balance. As of version 4.9.31.
• Incoming payments via direct debit are now traceable: The overview now shows which invoice was settled by which direct debit. As of version 4.9.29.
• No more false alarms with Apple Pay: A check incorrectly flagged the Apple Pay setup as outdated, even though everything was configured correctly. As of version 4.9.25.
• Payment method on receipts with payment type: Invoices and other receipts now optionally display the payment method using the selected payment type—such as “Datatrans (Twint)” or “Stripe (credit card)”—in the language of the order. Previously, only the module name appeared there. The display can be customized; the default remains the same as before. As of version 4.9.34.
• Payment terms by payment method: Payment terms on the invoice can now be activated specifically for individual payment methods—for example, only for “Invoice” and not for prepayment. Purchases on account via a service provider are intentionally excluded. As of version 4.9.34.
• Stripe Fees in Profit Calculation: The actual fee for each Stripe payment is posted to the order and included in the profit calculation—previously, it was completely omitted there. At the same time, the credit confirmation now reliably reaches the store, so that for direct debits, the expected payment receipt appears on the order. As of version 4.9.34.
• SEPA Direct Debit without double collection: If the connection to the payment service is lost during a collection, the transaction is now marked as “unresolved” rather than “failed”—the next run will not attempt the collection a second time. Confirmations for such transactions are assigned to the correct collection, even if multiple stores share a Stripe account, and a revocation of the mandate by the bank is no longer lost. As of version 4.9.41, fully implemented as of version 4.9.43.
• No unintended direct debits or cancellations: A recalculation in the order editor could, in the case of PayPal, collect or refund a payment without the status changing, and in the case of Klarna, the store might cancel orders that had already been shipped. Both issues have been resolved. As of version 4.9.47.
• Paid orders are no longer lost: If a customer using Datatrans returned to the browser via “Cancel” after paying in the app—for example, with TWINT—the store would discard the order data. It now checks the actual payment status. Restored orders retain their items, guest account, and order emails, and the restoration preview no longer reports complete data as incomplete. As of version 4.9.47; fully implemented as of version 4.9.85.
• Total reconciliation before payment processing: If a customer completed a purchase in the old window after navigating back to an earlier step, the posted amount and the amount collected could differ. The store now compares the posted amount with the confirmed amount, logs any discrepancies, and can block the transaction if desired. The backend displays the amount actually collected, with discrepancies highlighted. As of version 4.9.47.
• Invoice Purchase with Ratepay: The invoice purchase option via PayPal is now called “Invoice Purchase with Ratepay” and specifies the assignment and payment deadline. If the transaction is declined, the text required by PayPal appears, and the payment method is only offered if PayPal’s terms and conditions are met. As of version 4.9.47.
• DHL return label with house number first: If the house number precedes the street name—which is standard in France—the street name would end up in the house number field of the return label. As of version 4.9.47.
• Shipping costs calculated correctly: If only one shipping method was available, its description text might have been included in the calculation instead of the amount—resulting in an error in the shopping cart or when clicking the “Buy Now” buttons, or in shipping costs being calculated too low. As of version 4.9.56.
• Credit card via PayPal: Card payments now use PayPal’s current card fields; previously, the browser’s autofill feature would truncate the card number and expiration date, causing PayPal to reject the transaction. Error messages now appear clearly on the form, and on smartphones, the input fields utilize the full width. As of version 4.9.71.
• Redirects from payment providers: After reloading the confirmation page, Amazon Pay lost previously authorized payments, and a SEPA mandate issued via the invitation link did not reach the store. The redirect URLs to payment providers, including Klarna, PayPal, and payever, are now consistently correct, and an Amazon Pay payment is logged even before the order is created. As of version 4.9.76; fully implemented as of version 4.9.88.
• Planzer Returns: Returns labels via Planzer use the store’s own returns department and retain the same addresses as for shipping; the return’s package number and tracking information are carried over. As of version 4.9.74, fully implemented as of version 4.9.77.
• Express Purchase with a Full-Fledged Customer Account: Customer accounts created through Express Purchase using PayPal, Stripe, or Amazon Pay were set up without a password—making it impossible to log in. New accounts now receive a password via email. Restored PayPal orders once again include the buyer’s address and send their confirmation. As of version 4.9.82.
• DHL Easylog with Packstation: The Easylog export now includes, if desired, the address suffix and postal code for Packstations; the columns are placed at the end of the row so that existing import profiles remain compatible. As of version 4.9.84.
• DHL International Shipments and Label Notes: DHL rejected international shipments due to a rounding discrepancy in the customs form—weights are now rounded to the nearest gram. Notifications from DHL regarding labels that were generated despite issues—such as a missing ZIP code—appear in the backend. As of version 4.9.85, expanded in version 4.9.86.
• DHL return label following cancellation: After a cancellation, a link takes registered customers directly to their DHL return label in the order view; guests receive a notification. A maximum of one label is generated per order ex-factory (configurable). An existing label is offered again instead of creating another one that incurs a fee. As of version 4.9.86.
• Minimum-quantity surcharge can be disabled for pickup: For Click & Collect, the minimum-quantity surcharge can now be disabled; the default setting remains unchanged. As of version 4.9.86.
• VR Payment: Registration directly in the module: Users who have installed the payment module but do not yet have a contract will find the registration link for VR Payment at the top of the module screen. As of version 4.9.86.
• VR Payment: The preliminary check of payment methods calculates based on the total order value. As of version 4.9.94.
• Amazon Pay: Buyers with a customer account receive the prices for their customer group. As of version 4.9.103.
• Express payments verified: For Stripe and PayPal, the store verifies each express payment directly with the provider before creating the order. Orders that are not fully paid are never considered paid. As of version 4.9.105.
• SEPA Notices in Recurring Invoices: Depending on the mandate, recurring invoices specify the debit date or the process for granting a mandate. Funds are not debited until after the invoice is sent and never for invoices issued before the mandate was granted. As of version 4.9.116.
• Wallet payments: Apple Pay and Google Pay charge exactly the amount displayed at checkout. As of version 4.9.121.
• Klarna: Cash discounts and other discounts are applied according to the applicable tax rate. As of version 4.9.135.
• Redirected payment methods: After a session change during payment, paid orders without customer data no longer occur. As of version 4.9.135.
• Stripe: When creating the webhook, the signature key is automatically applied. As of version 4.9.135.
• VR Payment: Restoring orders via notification works again and checks the transaction and amount. As of version 4.9.135.
• Free shipping only where enabled: The “free shipping” product label and the qualifying threshold apply only in the zones and stores where they are enabled, just as in the checkout. As of version 4.9.135.
• Shipping Costs Based on Order Value: When the net total is displayed, the shipping tiers are compared to the displayed net subtotal. As of version 4.9.135.

Security & Stability

• Reduced unnecessary server load: If the small icon file that browsers request for tab titles was missing, the store would respond to each of these requests by loading the entire page—approximately 49,000 times per day on a monitored store. The file is now automatically provided. As of version 4.9.1.
• No external display of technical error messages: An error in the app integration could reveal technical details, including server paths, to visitors—such errors are now silently logged
• Internal files no longer publicly accessible: Additional internal file and documentation formats are now blocked from being accessed via the browser; existing stores will be automatically updated
• Prepared for upcoming PHP versions: Obsolete calls have been replaced so that your store will run without warnings even on the next generation of servers
• Securely renumber country zones: The tool for changing zone numbers processed the wrong assignment and crashed in the process—the zone retained its old number, while tax rates and settings already pointed to the new one. It now addresses the correct locations and updates all references accordingly. As of version 4.9.6.
• Update log without access data: The Update Wizard’s log recorded far more information than necessary and was also accessible to the public. It now contains only the necessary information, is stored outside the web’s reach, and existing legacy files are automatically moved to a secure location during the update. As of version 4.9.29.
• Database Tool Now Restricted to Administrators: Direct database access was previously available to any logged-in backend user. It is now restricted to the administrators group. As of version 4.9.29.
• Order Management with Permission Checks: Individual processes in order management could be triggered without the appropriate permissions—including shipping orders that incur charges. Each of these actions now checks the user’s permissions. As of version 4.9.25.
• Files Only for Authorized Users: Internal documents associated with orders, customers, and projects are now delivered only to users with the appropriate permissions and exclusively from the designated storage location. As of version 4.9.25.
• Update no longer crashes the store: Under certain circumstances, the Update Wizard would remove program components that the update package only partially included—rendering the store inaccessible afterward. The wizard now performs a triple check for completeness and retains the old version until the new one is verified to be working. As of version 4.9.29.
• More reliable error reporting: If a central service failed, the store reported a misleading error. It now distinguishes between a connection problem and a genuine error. As of version 4.9.22.
• Two-factor authentication without false alarms: The code prompt would already trigger an alert upon opening, as if an incorrect entry had been made. If the code is incorrect, the prompt now stops instead of forcing you to re-enter your password. As of version 4.9.34.
• Import folder in the inventory management system inaccessible: Import files (products, prices, customer data) stored via FTP were accessible through the browser using their known filenames. The folder is now locked; existing stores will be automatically updated. As of version 4.9.34.
• System check on secure servers: If the server blocks certain system functions, the server information and system check could no longer be opened in the backend. As of version 4.9.36.
• Additional layers of protection: Passwords for directory protection in the backend and interface are now stored using a more secure method; existing passwords remain valid. Access to additional internal directories via the browser is blocked. As of version 4.9.47.
• Database failure reported correctly: If the database is unreachable, the store responds with “temporarily unavailable”—search engines thus do not include the error page in their index. Additionally, an internal cleanup process no longer runs with every page view. As of version 4.9.47.
• Reduced database load during high traffic: Previously, cleaning up the visitor list would search the entire table with every page view, which could cause the store to freeze under heavy load. Visitor statistics now query via indexes and no longer create duplicate entries, which previously caused the tables to grow indefinitely. As of version 4.9.47, expanded in version 4.9.67.
• Marketing conditions secured: Comparison criteria in the marketing automation conditions are checked server-side against a fixed list. As of version 4.9.47.
• Permission checks also applied to XML export: The interface’s XML export checks a user’s permissions just as strictly as the JSON export. As of version 4.9.54.
• Stricter validation of checkout data: Data entered during checkout is validated more strictly on the server side. As of version 4.9.56.
• Old XML interface can be disabled: A master switch disables the old XML interface—connected via key or IP address—when it is no longer needed. New stores start without it; existing stores retain it. As of version 4.9.78.
• Logs with Fixed Retention: Logs that are continuously updated are recreated daily and rotated once they reach 20 MB; old files in the entire log folder are deleted after the set retention period. An empty retention value no longer causes imports to abort. Available As of version 4.9.88.
• Interface access protection is maintained: With every update, the store checks the configured password and IP protection for the secure interface area and automatically restores it if necessary—security is never relaxed. As of version 4.9.93.
• Settings: A security vulnerability related to saving settings has been fixed. As of version 4.9.99.
• Logs without login credentials: Login credentials are completely masked in logs; the shop cleans up older logs during updates. As of version 4.9.100.
• Internal Notifications Remain Internal: Verification notifications, such as those regarding restored orders or from marketplaces, no longer reach the customer. As of version 4.9.101.
• Customer groups protected: During registration, the customer group is checked against the available groups; product feeds no longer change a session’s customer group. As of version 4.9.103.
• Notifications from payment providers: These run separately from visitor sessions. As of version 4.9.104.
• No Session IDs in Emails and URLs: Session IDs no longer appear in emails, page URLs, forms, or page source code. Shared links can no longer be used to take over another user’s session. As of version 4.9.109; fully implemented as of version 4.9.135.
• Country blocking allows known services to pass through: Google’s text-to-speech feature and image preview in Gmail, OpenAI’s ad crawler, and Anthropic’s crawler can access the store despite country blocking. As of version 4.9.109; Anthropic as of version 4.9.135.
• Internal ticket files: They are never sent as attachments to customers and are blocked in the customer portal. As of version 4.9.117.
• Deleting Customer Accounts and Customer Exports: Account deletion via email now works only with a secure link. Bank account information and password checksums no longer appear in the interface’s customer export. As of version 4.9.123.
• Visitor statistics available only after logging in: Reports are now accessible only after logging into the backend and having the appropriate permissions. As of version 4.9.123.
• Secure Output: The subject and name on ticket confirmation pages, as well as names in reviews, are displayed securely. As of version 4.9.129; reviews as of version 4.9.135.
• Secure integrations: The Billbee store connector operates only with a key and does not log any customer data. Newsletter synchronization as well as logins to eBay and OTTO are additionally protected. As of version 4.9.131, expanded in version 4.9.135.
• Significantly faster data backups: Even very large tables are backed up quickly, rather than being re-sorted for each block. As of version 4.9.106.
• Error messages and attack attempts: Only logged-in administrators can view details about database errors. Typical scan requests targeting other software are blocked early on; invalid page requests no longer result in server errors; and the calendar feed checks its access permissions first. As of version 4.9.135.
• Update Wizard: New directories inherit the permissions of their parent directory. This is important for hosting packages where the FTP account is only allowed to write via the group. As of version 4.9.135.

Frequently Asked Questions