Affiliate v5.0.6

Release Date: August 3, 2025
Tags: SECURITY, VALIDATION, PERFORMANCE

Changed

Commission percentage validation

• Changed the affiliate settings to refuse a configuration whose commission percentages total more than 100%, on both binary and unilevel structures. The total across every level is calculated as you configure it, and the error names the value you entered alongside the value allowed.
• Changed commission percentage changes to be recorded in the audit trail, and an invalid configuration attempt to raise an administrative alert.

MLM settings validation

• Changed MLM settings to be checked against a schema before they are used. Binary and unilevel structures each have their own check: the level count must be between 2 and 7, the level percentages must be a list, and each percentage must be between 0 and 100.
• Changed settings parsing to run through one shared routine for binary and unilevel alike, so the two can no longer accept different things.
• Changed a parsing or validation failure to say which value was wrong and what to do about it, rather than reporting a generic error.

Security

• Changed MLM settings parsing to detect and refuse dangerous content, with a size limit applied per settings type and protection against prototype pollution. A settings string is rejected on the first violation found, and the report names the violation.