stefandev

Hi Dennis,

Thank you so much for the quick and detailed reply! I really appreciate the time you take to support this plugin.

Regarding Bug 1:
You are 100% right. After doing some deeper digging i found out that this is actually caused by a custom CSS override on my end hiding the proper button state. I sincerely apologize for the false alarm—you can completely scratch that one off your list!

Regarding Bug 2:
Thanks for clarifying the logic behind open requests. I went back and did some more extensive testing, and I managed to narrow down the exact edge cases where the bypass occurs.

When a withdrawal is rejected, the customer correctly gets the error message (“We’re sorry, but this order cannot be canceled. Please contact support for assistance.”) and cannot proceed.

However, here are the two specific edge cases I found where the system can still be bypassed:

Edge Case A (Page Refresh): If a customer submits the form and then simply refreshes the page, the form renders again and allows them to resubmit as many times as they want.

Edge Case B (Logged-out / Guest View): Once an admin approves a withdrawal, the logic works correctly for logged-in users: the specific order number is successfully removed from the eligible orders dropdown. However, if the customer logs out and manually enters that exact same order number into the guest withdrawal form, they can still submit a request for it.

Best regards,
Stefan

Hi Janilyn,
I see that u fixed it on 7.4.1. Thanks!
Best regards!

@munirkamal Yes,i can confirm it’s fixed!

All good. Now it works!

Great! Tnx a lot for that info.

Hi,
That’s great!
Can you tell me what hook should i use? Can u share documentation link with me?

Ye,i understand that. However text not showing on archive pages.
I ‘m using Oxygen builder and add to cart button is called by this peace of code:

<?php echo do_shortcode ( ‘[add_to_cart id=”‘ . get_the_ID() . ‘” show_price=”true” style=””]’ ); ?>