impress-org /
give
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | /** |
||
| 3 | * Email Template |
||
| 4 | * |
||
| 5 | * @package Give |
||
| 6 | * @subpackage Emails |
||
| 7 | * @copyright Copyright (c) 2016, GiveWP |
||
| 8 | * @license https://opensource.org/licenses/gpl-license GNU Public License |
||
| 9 | * @since 1.0 |
||
| 10 | */ |
||
| 11 | |||
| 12 | // Exit if accessed directly. |
||
| 13 | if ( ! defined( 'ABSPATH' ) ) { |
||
| 14 | exit; |
||
| 15 | } |
||
| 16 | |||
| 17 | /** |
||
| 18 | * Gets all the email templates that have been registered. The list is extendable |
||
| 19 | * and more templates can be added. |
||
| 20 | * |
||
| 21 | * This is simply a wrapper to Give_Email_Templates->get_templates() |
||
| 22 | * |
||
| 23 | * @since 1.0 |
||
| 24 | * @return array $templates All the registered email templates. |
||
| 25 | */ |
||
| 26 | function give_get_email_templates() { |
||
| 27 | $templates = new Give_Emails; |
||
| 28 | |||
| 29 | return $templates->get_templates(); |
||
| 30 | } |
||
| 31 | |||
| 32 | /** |
||
| 33 | * Email Template Tags. |
||
| 34 | * @todo Modify this function to remove payment id dependency. |
||
| 35 | * |
||
| 36 | * @since 1.0 |
||
| 37 | * |
||
| 38 | * @param string $message Message with the template tags. |
||
| 39 | * @param array $payment_data Payment Data. |
||
| 40 | * @param int $payment_id Payment ID. |
||
| 41 | * @param bool $admin_notice Whether or not this is a notification email. |
||
| 42 | * |
||
| 43 | * @return string $message Fully formatted message |
||
| 44 | */ |
||
| 45 | function give_email_template_tags( $message, $payment_data, $payment_id, $admin_notice = false ) { |
||
|
0 ignored issues
–
show
|
|||
| 46 | return give_do_email_tags( $message, $payment_id ); |
||
| 47 | } |
||
| 48 | |||
| 49 | /** |
||
| 50 | * Email Preview Template Tags. |
||
| 51 | * |
||
| 52 | * Provides sample content for the preview email functionality within settings > email. |
||
| 53 | * |
||
| 54 | * @since 1.0 |
||
| 55 | * |
||
| 56 | * @param string $message Email message with template tags. |
||
| 57 | * |
||
| 58 | * @return string $message Fully formatted message |
||
| 59 | */ |
||
| 60 | function give_email_preview_template_tags( $message ) { |
||
| 61 | |||
| 62 | $user = wp_get_current_user(); |
||
| 63 | $gateway = 'PayPal'; |
||
| 64 | $donation_id = rand( 1, 100 ); |
||
| 65 | $receipt_link = give_get_receipt_link( $donation_id ); |
||
| 66 | $receipt_link_url = give_get_receipt_url( $donation_id ); |
||
| 67 | $price = give_currency_filter( |
||
| 68 | give_format_amount( |
||
| 69 | 10.50, |
||
| 70 | array( |
||
| 71 | 'sanitize' => false, |
||
| 72 | ) |
||
| 73 | ) |
||
| 74 | ); |
||
| 75 | |||
| 76 | $message = str_replace( '{name}', $user->display_name, $message ); |
||
| 77 | $message = str_replace( '{fullname}', $user->display_name, $message ); |
||
| 78 | $message = str_replace( '{username}', $user->user_login, $message ); |
||
| 79 | $message = str_replace( '{user_email}', $user->user_email, $message ); |
||
| 80 | $message = str_replace( '{billing_address}', "123 Test Street, Unit 222\nSomewhere Town, CA, 92101", $message ); |
||
| 81 | $message = str_replace( '{date}', date( give_date_format(), current_time( 'timestamp' ) ), $message ); |
||
| 82 | $message = str_replace( '{amount}', $price, $message ); |
||
| 83 | $message = str_replace( '{price}', $price, $message ); |
||
| 84 | $message = str_replace( '{donation}', esc_html__( 'Sample Donation Form Title', 'give' ), $message ); |
||
| 85 | $message = str_replace( '{form_title}', esc_html__( 'Sample Donation Form Title - Sample Donation Level', 'give' ), $message ); |
||
| 86 | $message = str_replace( '{payment_method}', $gateway, $message ); |
||
| 87 | $message = str_replace( '{sitename}', get_bloginfo( 'name' ), $message ); |
||
| 88 | $message = str_replace( '{payment_id}', $donation_id, $message ); |
||
| 89 | $message = str_replace( '{receipt_link}', $receipt_link, $message ); |
||
| 90 | $message = str_replace( '{receipt_link_url}', $receipt_link_url, $message ); |
||
| 91 | $message = str_replace( '{pdf_receipt}', '<a href="#">Download Receipt</a>', $message ); |
||
| 92 | |||
| 93 | return wpautop( apply_filters( 'give_email_preview_template_tags', $message ) ); |
||
| 94 | } |
||
| 95 | |||
| 96 | |||
| 97 | |||
| 98 | /** |
||
| 99 | * Output Email Template Preview Buttons. |
||
| 100 | * |
||
| 101 | * @access private |
||
| 102 | * @since 1.0 |
||
| 103 | * @since 1.8 Field arguments param added. |
||
| 104 | * |
||
| 105 | * @param array $field Field arguments. |
||
| 106 | * |
||
| 107 | * @return array |
||
| 108 | */ |
||
| 109 | function give_email_preview_buttons_callback( $field ) { |
||
| 110 | $field_id = str_replace( '_preview_buttons', '', $field['id'] ); |
||
| 111 | |||
| 112 | ob_start(); |
||
| 113 | |||
| 114 | echo sprintf( |
||
| 115 | '<a href="%1$s" class="button-secondary" target="_blank">%2$s</a>', |
||
| 116 | wp_nonce_url( |
||
| 117 | add_query_arg( |
||
| 118 | array( 'give_action' => 'preview_email', 'email_type' => $field_id ), |
||
| 119 | home_url() |
||
| 120 | ), 'give-preview-email' |
||
| 121 | ), |
||
| 122 | $field['name'] |
||
| 123 | ); |
||
| 124 | |||
| 125 | echo sprintf( |
||
| 126 | ' <a href="%1$s" aria-label="%2$s" class="button-secondary">%3$s</a>', |
||
| 127 | wp_nonce_url( |
||
| 128 | add_query_arg( array( |
||
| 129 | 'give_action' => 'send_preview_email', |
||
| 130 | 'email_type' => $field_id, |
||
| 131 | 'give-messages[]' => 'sent-test-email', |
||
| 132 | ) ), 'give-send-preview-email' ), |
||
| 133 | esc_attr__( 'Send Test Email.', 'give' ), |
||
| 134 | esc_html__( 'Send Test Email', 'give' ) |
||
| 135 | ); |
||
| 136 | |||
| 137 | echo ob_get_clean(); |
||
| 138 | } |
||
| 139 | |||
| 140 | |||
| 141 | /** |
||
| 142 | * Give Preview Email Header. |
||
| 143 | * |
||
| 144 | * Displays a header bar with the ability to change donations to preview actual data within the preview. Will not display if |
||
| 145 | * |
||
| 146 | * @since 1.6 |
||
| 147 | * |
||
| 148 | */ |
||
| 149 | function give_get_preview_email_header() { |
||
| 150 | |||
| 151 | //Payment receipt switcher |
||
| 152 | $payment_count = give_count_payments()->publish; |
||
| 153 | $payment_id = give_check_variable( give_clean( $_GET ), 'isset', 0, 'preview_id' ); |
||
|
0 ignored issues
–
show
0 is of type integer, but the function expects a boolean.
It seems like the type of the argument is not accepted by the function/method which you are calling. In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug. We suggest to add an explicit type cast like in the following example: function acceptsInteger($int) { }
$x = '123'; // string "123"
// Instead of
acceptsInteger($x);
// we recommend to use
acceptsInteger((integer) $x);
Loading history...
|
|||
| 154 | |||
| 155 | if ( $payment_count <= 0 ) { |
||
| 156 | return false; |
||
| 157 | } |
||
| 158 | |||
| 159 | //Get payments. |
||
| 160 | $donations = new Give_Payments_Query( array( |
||
| 161 | 'number' => 100, |
||
| 162 | 'output' => '', |
||
| 163 | 'fields' => 'ids' |
||
| 164 | ) ); |
||
| 165 | $donations = $donations->get_payments(); |
||
| 166 | $options = array(); |
||
| 167 | |||
| 168 | // Default option. |
||
| 169 | $options[0] = esc_html__( 'No donations found.', 'give' ); |
||
| 170 | |||
| 171 | //Provide nice human readable options. |
||
| 172 | if ( $donations ) { |
||
|
0 ignored issues
–
show
The expression
$donations of type array is implicitly converted to a boolean; are you sure this is intended? If so, consider using ! empty($expr) instead to make it clear that you intend to check for an array without elements.
This check marks implicit conversions of arrays to boolean values in a comparison. While in PHP an empty array is considered to be equal (but not identical) to false, this is not always apparent. Consider making the comparison explicit by using Loading history...
|
|||
| 173 | $options[0] = esc_html__( '- Select a donation -', 'give' ); |
||
| 174 | foreach ( $donations as $donation_id ) { |
||
| 175 | |||
| 176 | $options[ $donation_id ] = sprintf( |
||
| 177 | '#%1$s - %2$s - %3$s', |
||
| 178 | $donation_id, |
||
| 179 | give_get_donation_donor_email( $donation_id ), |
||
| 180 | get_the_title( $donation_id ) |
||
| 181 | ); |
||
| 182 | } |
||
| 183 | } |
||
| 184 | |||
| 185 | //Start constructing HTML output. |
||
| 186 | $transaction_header = '<div style="margin:0;padding:10px 0;width:100%;background-color:#FFF;border-bottom:1px solid #eee; text-align:center;">'; |
||
| 187 | |||
| 188 | // Remove payment id query param if set from request url. |
||
| 189 | $request_url_data = wp_parse_url( $_SERVER['REQUEST_URI'] ); |
||
| 190 | $query = $request_url_data['query']; |
||
| 191 | $query = remove_query_arg( array( 'preview_id' ), $query ); |
||
| 192 | |||
| 193 | $request_url = home_url( '/?' . str_replace( '', '', $query ) ); |
||
| 194 | |||
| 195 | $transaction_header .= '<script> |
||
| 196 | function change_preview(){ |
||
| 197 | var transactions = document.getElementById("give_preview_email_payment_id"); |
||
| 198 | var selected_trans = transactions.options[transactions.selectedIndex]; |
||
| 199 | if (selected_trans){ |
||
| 200 | var url_string = "' . $request_url . '&preview_id=" + selected_trans.value; |
||
| 201 | window.location = url_string; |
||
| 202 | } |
||
| 203 | } |
||
| 204 | </script>'; |
||
| 205 | |||
| 206 | $transaction_header .= '<label for="give_preview_email_payment_id" style="font-size:12px;color:#333;margin:0 4px 0 0;">' . esc_html__( 'Preview email with a donation:', 'give' ) . '</label>'; |
||
| 207 | |||
| 208 | //The select field with 100 latest transactions |
||
| 209 | $transaction_header .= Give()->html->select( array( |
||
| 210 | 'name' => 'preview_email_payment_id', |
||
| 211 | 'selected' => $payment_id, |
||
| 212 | 'id' => 'give_preview_email_payment_id', |
||
| 213 | 'class' => 'give-preview-email-payment-id', |
||
| 214 | 'options' => $options, |
||
| 215 | 'chosen' => false, |
||
| 216 | 'select_atts' => 'onchange="change_preview()"', |
||
| 217 | 'show_option_all' => false, |
||
| 218 | 'show_option_none' => false, |
||
| 219 | ) ); |
||
| 220 | |||
| 221 | //Closing tag |
||
| 222 | $transaction_header .= '</div>'; |
||
| 223 | |||
| 224 | return apply_filters( 'give_preview_email_receipt_header', $transaction_header ); |
||
| 225 | |||
| 226 | } |
||
| 227 |
This check looks from parameters that have been defined for a function or method, but which are not used in the method body.