ravinderk /
Give
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | /** |
||
| 3 | * Front-end Actions |
||
| 4 | * |
||
| 5 | * @package Give |
||
| 6 | * @subpackage Functions |
||
| 7 | * @copyright Copyright (c) 2016, GiveWP |
||
| 8 | * @license https://opensource.org/licenses/gpl-license GNU Public License |
||
| 9 | * @since 1.0 |
||
| 10 | */ |
||
| 11 | |||
| 12 | // Exit if accessed directly. |
||
| 13 | if ( ! defined( 'ABSPATH' ) ) { |
||
| 14 | exit; |
||
| 15 | } |
||
| 16 | |||
| 17 | /** |
||
| 18 | * Hooks Give actions, when present in the $_GET superglobal. Every give_action |
||
| 19 | * present in $_GET is called using WordPress's do_action function. These |
||
| 20 | * functions are called on init. |
||
| 21 | * |
||
| 22 | * @since 1.0 |
||
| 23 | * |
||
| 24 | * @return void |
||
| 25 | */ |
||
| 26 | View Code Duplication | function give_get_actions() { |
|
| 27 | |||
| 28 | $get_data = give_clean( $_GET ); // WPCS: input var ok, sanitization ok, CSRF ok. |
||
| 29 | |||
| 30 | $_get_action = ! empty( $get_data['give_action'] ) ? $get_data['give_action'] : null; |
||
| 31 | |||
| 32 | // Add backward compatibility to give-action param ( $_GET ). |
||
| 33 | if ( empty( $_get_action ) ) { |
||
| 34 | $_get_action = ! empty( $get_data['give-action'] ) ? $get_data['give-action'] : null; |
||
| 35 | } |
||
| 36 | |||
| 37 | if ( isset( $_get_action ) ) { |
||
| 38 | /** |
||
| 39 | * Fires in WordPress init or admin init, when give_action is present in $_GET. |
||
| 40 | * |
||
| 41 | * @since 1.0 |
||
| 42 | * |
||
| 43 | * @param array $_GET Array of HTTP GET variables. |
||
| 44 | */ |
||
| 45 | do_action( "give_{$_get_action}", $get_data ); |
||
| 46 | } |
||
| 47 | |||
| 48 | } |
||
| 49 | |||
| 50 | add_action( 'init', 'give_get_actions' ); |
||
| 51 | |||
| 52 | /** |
||
| 53 | * Hooks Give actions, when present in the $_POST super global. Every give_action |
||
| 54 | * present in $_POST is called using WordPress's do_action function. These |
||
| 55 | * functions are called on init. |
||
| 56 | * |
||
| 57 | * @since 1.0 |
||
| 58 | * |
||
| 59 | * @return void |
||
| 60 | */ |
||
| 61 | View Code Duplication | function give_post_actions() { |
|
| 62 | |||
| 63 | $post_data = give_clean( $_POST ); // WPCS: input var ok, sanitization ok, CSRF ok. |
||
| 64 | |||
| 65 | $_post_action = ! empty( $post_data['give_action'] ) ? $post_data['give_action'] : null; |
||
| 66 | |||
| 67 | // Add backward compatibility to give-action param ( $_POST ). |
||
| 68 | if ( empty( $_post_action ) ) { |
||
| 69 | $_post_action = ! empty( $post_data['give-action'] ) ? $post_data['give-action'] : null; |
||
| 70 | } |
||
| 71 | |||
| 72 | if ( isset( $_post_action ) ) { |
||
| 73 | /** |
||
| 74 | * Fires in WordPress init or admin init, when give_action is present in $_POST. |
||
| 75 | * |
||
| 76 | * @since 1.0 |
||
| 77 | * |
||
| 78 | * @param array $_POST Array of HTTP POST variables. |
||
| 79 | */ |
||
| 80 | do_action( "give_{$_post_action}", $post_data ); |
||
| 81 | } |
||
| 82 | |||
| 83 | } |
||
| 84 | |||
| 85 | add_action( 'init', 'give_post_actions' ); |
||
| 86 | |||
| 87 | /** |
||
| 88 | * Connect WordPress user with Donor. |
||
| 89 | * |
||
| 90 | * @param int $user_id User ID. |
||
| 91 | * @param array $user_data User Data. |
||
| 92 | * |
||
| 93 | * @since 1.7 |
||
| 94 | * |
||
| 95 | * @return void |
||
| 96 | */ |
||
| 97 | function give_connect_donor_to_wpuser( $user_id, $user_data ) { |
||
| 98 | /* @var Give_Donor $donor */ |
||
| 99 | $donor = new Give_Donor( $user_data['user_email'] ); |
||
| 100 | |||
| 101 | // Validate donor id and check if do nor is already connect to wp user or not. |
||
| 102 | if ( $donor->id && ! $donor->user_id ) { |
||
| 103 | |||
| 104 | // Update donor user_id. |
||
| 105 | if ( $donor->update( array( 'user_id' => $user_id ) ) ) { |
||
| 106 | $donor_note = sprintf( esc_html__( 'WordPress user #%d is connected to #%d', 'give' ), $user_id, $donor->id ); |
||
| 107 | $donor->add_note( $donor_note ); |
||
| 108 | |||
| 109 | // Update user_id meta in payments. |
||
| 110 | // if( ! empty( $donor->payment_ids ) && ( $donations = explode( ',', $donor->payment_ids ) ) ) { |
||
| 111 | // foreach ( $donations as $donation ) { |
||
| 112 | // give_update_meta( $donation, '_give_payment_user_id', $user_id ); |
||
| 113 | // } |
||
| 114 | // } |
||
| 115 | // Do not need to update user_id in payment because we will get user id from donor id now. |
||
| 116 | } |
||
| 117 | } |
||
| 118 | } |
||
| 119 | |||
| 120 | add_action( 'give_insert_user', 'give_connect_donor_to_wpuser', 10, 2 ); |
||
| 121 | |||
| 122 | |||
| 123 | /** |
||
| 124 | * Processing after donor batch export complete |
||
| 125 | * |
||
| 126 | * @since 1.8 |
||
| 127 | * |
||
| 128 | * @param $data |
||
| 129 | */ |
||
| 130 | function give_donor_batch_export_complete( $data ) { |
||
| 131 | // Remove donor ids cache. |
||
| 132 | if ( |
||
| 133 | isset( $data['class'] ) |
||
| 134 | && 'Give_Batch_Donors_Export' === $data['class'] |
||
| 135 | && ! empty( $data['forms'] ) |
||
| 136 | && isset( $data['give_export_option']['query_id'] ) |
||
| 137 | ) { |
||
| 138 | Give_Cache::delete( Give_Cache::get_key( $data['give_export_option']['query_id'] ) ); |
||
| 139 | } |
||
| 140 | } |
||
| 141 | |||
| 142 | add_action( 'give_file_export_complete', 'give_donor_batch_export_complete' ); |
||
| 143 | |||
| 144 | /** |
||
| 145 | * Print css for wordpress setting pages. |
||
| 146 | * |
||
| 147 | * @since 1.8.7 |
||
| 148 | */ |
||
| 149 | function give_admin_quick_css() { |
||
| 150 | /* @var WP_Screen $screen */ |
||
| 151 | $screen = get_current_screen(); |
||
| 152 | |||
| 153 | if ( ! ( $screen instanceof WP_Screen ) ) { |
||
| 154 | return false; |
||
| 155 | } |
||
| 156 | |||
| 157 | switch ( true ) { |
||
| 158 | case ( 'plugins' === $screen->base || 'plugins-network' === $screen->base ): |
||
| 159 | ?> |
||
| 160 | <style> |
||
| 161 | tr.active.update + tr.give-addon-notice-tr td { |
||
| 162 | box-shadow: none; |
||
| 163 | -webkit-box-shadow: none; |
||
| 164 | } |
||
| 165 | |||
| 166 | tr.active + tr.give-addon-notice-tr td { |
||
| 167 | position: relative; |
||
| 168 | top: -1px; |
||
| 169 | } |
||
| 170 | |||
| 171 | tr.active + tr.give-addon-notice-tr .notice { |
||
| 172 | margin: 5px 20px 15px 40px; |
||
| 173 | } |
||
| 174 | |||
| 175 | tr.give-addon-notice-tr .dashicons { |
||
| 176 | color: #f56e28; |
||
| 177 | } |
||
| 178 | |||
| 179 | tr.give-addon-notice-tr td { |
||
| 180 | border-left: 4px solid #00a0d2; |
||
| 181 | } |
||
| 182 | |||
| 183 | tr.give-addon-notice-tr td { |
||
| 184 | padding: 0 !important; |
||
| 185 | } |
||
| 186 | |||
| 187 | tr.active.update + tr.give-addon-notice-tr .notice { |
||
| 188 | margin: 5px 20px 5px 40px; |
||
| 189 | } |
||
| 190 | </style> |
||
| 191 | <?php |
||
| 192 | } |
||
| 193 | } |
||
| 194 | |||
| 195 | add_action( 'admin_head', 'give_admin_quick_css' ); |
||
| 196 | |||
| 197 | |||
| 198 | /** |
||
| 199 | * Set Donation Amount for Multi Level Donation Forms |
||
| 200 | * |
||
| 201 | * @param int $form_id Donation Form ID. |
||
| 202 | * |
||
| 203 | * @since 1.8.9 |
||
| 204 | * |
||
| 205 | * @return void |
||
| 206 | */ |
||
| 207 | function give_set_donation_levels_max_min_amount( $form_id ) { |
||
| 208 | if ( |
||
| 209 | ( 'set' === $_POST['_give_price_option'] ) || |
||
| 210 | ( in_array( '_give_donation_levels', $_POST ) && count( $_POST['_give_donation_levels'] ) <= 0 ) || |
||
| 211 | ! ( $donation_levels_amounts = wp_list_pluck( $_POST['_give_donation_levels'], '_give_amount' ) ) |
||
| 212 | ) { |
||
| 213 | // Delete old meta. |
||
| 214 | give_delete_meta( $form_id, '_give_levels_minimum_amount' ); |
||
| 215 | give_delete_meta( $form_id, '_give_levels_maximum_amount' ); |
||
| 216 | |||
| 217 | return; |
||
| 218 | } |
||
| 219 | |||
| 220 | // Sanitize donation level amounts. |
||
| 221 | $donation_levels_amounts = array_map( 'give_maybe_sanitize_amount', $donation_levels_amounts ); |
||
| 222 | |||
| 223 | $min_amount = min( $donation_levels_amounts ); |
||
| 224 | $max_amount = max( $donation_levels_amounts ); |
||
| 225 | |||
| 226 | // Set Minimum and Maximum amount for Multi Level Donation Forms. |
||
| 227 | give_update_meta( $form_id, '_give_levels_minimum_amount', $min_amount ? give_sanitize_amount_for_db( $min_amount ) : 0 ); |
||
| 228 | give_update_meta( $form_id, '_give_levels_maximum_amount', $max_amount ? give_sanitize_amount_for_db( $max_amount ) : 0 ); |
||
| 229 | } |
||
| 230 | |||
| 231 | add_action( 'give_pre_process_give_forms_meta', 'give_set_donation_levels_max_min_amount', 30 ); |
||
| 232 | |||
| 233 | |||
| 234 | /** |
||
| 235 | * Save donor address when donation complete |
||
| 236 | * |
||
| 237 | * @since 2.0 |
||
| 238 | * |
||
| 239 | * @param int $payment_id |
||
| 240 | */ |
||
| 241 | function _give_save_donor_billing_address( $payment_id ) { |
||
| 242 | $donor_id = absint( give_get_payment_donor_id( $payment_id )); |
||
| 243 | |||
| 244 | // Bailout |
||
| 245 | if ( ! $donor_id ) { |
||
| 246 | return; |
||
| 247 | } |
||
| 248 | |||
| 249 | |||
| 250 | /* @var Give_Donor $donor */ |
||
| 251 | $donor = new Give_Donor( $donor_id ); |
||
| 252 | |||
| 253 | // Save address. |
||
| 254 | $donor->add_address( 'billing[]', give_get_donation_address( $payment_id ) ); |
||
| 255 | } |
||
| 256 | |||
| 257 | add_action( 'give_complete_donation', '_give_save_donor_billing_address', 9999 ); |
||
| 258 | |||
| 259 | |||
| 260 | /** |
||
| 261 | * Update form id in payment logs |
||
| 262 | * |
||
| 263 | * @since 2.0 |
||
| 264 | * |
||
| 265 | * @param array $args |
||
| 266 | */ |
||
| 267 | function give_update_log_form_id( $args ) { |
||
| 268 | $new_form_id = absint( $args[0] ); |
||
| 269 | $payment_id = absint( $args[1] ); |
||
| 270 | $logs = Give()->logs->get_logs( $payment_id ); |
||
| 271 | |||
| 272 | // Bailout. |
||
| 273 | if ( empty( $logs ) ) { |
||
| 274 | return; |
||
| 275 | } |
||
| 276 | |||
| 277 | /* @var object $log */ |
||
| 278 | foreach ( $logs as $log ) { |
||
| 279 | Give()->logs->logmeta_db->update_meta( $log->ID, '_give_log_form_id', $new_form_id ); |
||
| 280 | } |
||
| 281 | |||
| 282 | // Delete cache. |
||
| 283 | Give()->logs->delete_cache(); |
||
| 284 | } |
||
| 285 | |||
| 286 | add_action( 'give_update_log_form_id', 'give_update_log_form_id' ); |
||
| 287 | |||
| 288 | /** |
||
| 289 | * Verify addon dependency before addon update |
||
| 290 | * |
||
| 291 | * @since 2.1.4 |
||
| 292 | * |
||
| 293 | * @param $error |
||
| 294 | * @param $hook_extra |
||
| 295 | * |
||
| 296 | * @return WP_Error |
||
| 297 | */ |
||
| 298 | function __give_verify_addon_dependency_before_update( $error, $hook_extra ) { |
||
| 299 | // Bailout. |
||
| 300 | if ( |
||
| 301 | is_wp_error( $error ) |
||
| 302 | || ! array_key_exists( 'plugin', $hook_extra ) |
||
| 303 | ) { |
||
| 304 | return $error; |
||
| 305 | } |
||
| 306 | |||
| 307 | $plugin_base = strtolower( $hook_extra['plugin'] ); |
||
| 308 | $licensed_addon = array_map( 'strtolower', Give_License::get_licensed_addons() ); |
||
| 309 | |||
| 310 | // Skip if not a Give addon. |
||
| 311 | if ( ! in_array( $plugin_base, $licensed_addon ) ) { |
||
| 312 | return $error; |
||
| 313 | } |
||
| 314 | |||
| 315 | // Load file. |
||
| 316 | if( ! class_exists( 'Give_Readme_Parser' ) ) { |
||
| 317 | require_once GIVE_PLUGIN_DIR . 'includes/class-give-readme-parser.php'; |
||
| 318 | } |
||
| 319 | |||
| 320 | $plugin_base = strtolower( $plugin_base ); |
||
| 321 | $plugin_slug = str_replace( '.php', '', basename( $plugin_base ) ); |
||
| 322 | |||
| 323 | /** |
||
| 324 | * Filter the addon readme.txt url |
||
| 325 | * |
||
| 326 | * @since 2.1.4 |
||
| 327 | */ |
||
| 328 | $url = apply_filters( |
||
| 329 | 'give_addon_readme_file_url', |
||
| 330 | "https://givewp.com/downloads/plugins/{$plugin_slug}/readme.txt", |
||
| 331 | $plugin_slug |
||
| 332 | ); |
||
| 333 | |||
| 334 | $parser = new Give_Readme_Parser( $url ); |
||
| 335 | $give_min_version = $parser->requires_at_least(); |
||
| 336 | |||
| 337 | |||
| 338 | if ( version_compare( GIVE_VERSION, $give_min_version, '<' ) ) { |
||
| 339 | return new WP_Error( |
||
| 340 | 'Give_Addon_Update_Error', |
||
| 341 | sprintf( |
||
| 342 | __( 'Give version %s is required to update this add-on.', 'give' ), |
||
| 343 | $give_min_version |
||
| 344 | ) |
||
| 345 | ); |
||
| 346 | } |
||
| 347 | |||
| 348 | return $error; |
||
| 349 | } |
||
| 350 | |||
| 351 | add_filter( 'upgrader_pre_install', '__give_verify_addon_dependency_before_update', 10, 2 ); |
||
| 352 | |||
| 353 | /** |
||
| 354 | * Function to add suppress_filters param if WPML add-on is activated. |
||
| 355 | * |
||
| 356 | * @since 2.1.4 |
||
| 357 | * |
||
| 358 | * @param array WP query argument for Total Goal. |
||
| 359 | * |
||
| 360 | * @return array WP query argument for Total Goal. |
||
| 361 | */ |
||
| 362 | function __give_wpml_total_goal_shortcode_agrs( $args ) { |
||
| 363 | $args['suppress_filters'] = true; |
||
| 364 | |||
| 365 | return $args; |
||
| 366 | } |
||
| 367 | |||
| 368 | /** |
||
| 369 | * Function to remove WPML post where filter in goal total amount shortcode. |
||
| 370 | * |
||
| 371 | * @since 2.1.4 |
||
| 372 | * @global SitePress $sitepress |
||
| 373 | */ |
||
| 374 | function __give_remove_wpml_parse_query_filter() { |
||
| 375 | global $sitepress; |
||
| 376 | remove_action('parse_query', array($sitepress, 'parse_query')); |
||
| 377 | } |
||
| 378 | |||
| 379 | |||
| 380 | /** |
||
| 381 | * Function to add WPML post where filter in goal total amount shortcode. |
||
| 382 | * |
||
| 383 | * @since 2.1.4 |
||
| 384 | * @global SitePress $sitepress |
||
| 385 | */ |
||
| 386 | function __give_add_wpml_parse_query_filter() { |
||
| 387 | global $sitepress; |
||
| 388 | add_action('parse_query', array($sitepress, 'parse_query')); |
||
| 389 | } |
||
| 390 | |||
| 391 | /** |
||
| 392 | * Action all the hook that add support for WPML. |
||
| 393 | * |
||
| 394 | * @since 2.1.4 |
||
| 395 | */ |
||
| 396 | function give_add_support_for_wpml() { |
||
| 397 | if ( ! function_exists( 'is_plugin_active' ) ) { |
||
| 398 | include_once( ABSPATH . 'wp-admin/includes/plugin.php' ); |
||
| 399 | } |
||
| 400 | |||
|
0 ignored issues
–
show
Coding Style
introduced
by
Loading history...
|
|||
| 401 | |||
| 402 | if ( is_plugin_active( 'sitepress-multilingual-cms/sitepress.php' ) ) { |
||
| 403 | |||
| 404 | add_filter( 'give_totals_goal_shortcode_query_args', '__give_wpml_total_goal_shortcode_agrs' ); |
||
| 405 | |||
| 406 | // @see https://wpml.org/forums/topic/problem-with-query-filter-in-get_posts-function/#post-271309 |
||
| 407 | add_action( 'give_totals_goal_shortcode_before_render', '__give_remove_wpml_parse_query_filter', 99 ); |
||
| 408 | add_action( 'give_totals_goal_shortcode_after_render', '__give_add_wpml_parse_query_filter', 99 ); |
||
| 409 | } |
||
| 410 | } |
||
| 411 | |||
| 412 | add_action( 'give_init', 'give_add_support_for_wpml', 1000 ); |
||
| 413 |