Deprixa Pro — Integrated Courier & Logistics System · What's New in Version 8.5.2 Latest

Released: 03 April 2026 — Security · UI Redesign · Bug Fixes

• ✅ Public Rate Calculator: New public-facing rate calculator at cotizar.php. Customers can get an instant shipping quote without logging in. Fixed fatal error caused by missing helpers/querys.php include, and resolved "No tariff found" issue caused by over-restrictive client_id filter.
• ✅ CSRF Global Protection: All AJAX calls now automatically inject the X-CSRF-TOKEN header via csrf_init.js using a $(document).ajaxSend() hook. Token is generated by csrf_token() in ajax_guard.php and rendered as a meta tag.
• ✅ Auto-Notification System: Badge counter is now correctly scoped per user. "Mark all read" now also clears system-level user_id=0 notifications for admins.
• ✅ UI Redesign — Public Pages: Full Bootstrap 5 redesign for login.php, sign-up.php, forgot-password.php, tracking.php, and track.php. Consistent two-column layout, local Bootstrap Icons, no CDN dependencies.
• ✅ Spectacular Tracking Result: track.php redesigned with status hero banner, dynamic CSS status color, 4-step visual progress stepper, route strip card, sticky timeline, and attachment table.
• ✅ Invoice Total Fix: Print invoice (print_inv_ship.php) now correctly reads the stored total_order instead of recalculating from value_weight, which produced wrong totals.
• ✅ Notification Badge Fix: Admin badge no longer counts all users' unread notifications. Added user_id filter to load_notifications.php for all roles.
• ✅ XSS & SQL Hardening: Batch-fixed 3 CSRF residue patterns across AJAX endpoints; applied htmlspecialchars() escaping on user-facing output; PDO named parameters in reports AJAX.

PHP 8.1–8.4 supported. Recommended: PHP 8.4. All assets served locally — no CDN required.