Changeset 3177807
- Timestamp:
- 10/29/2024 09:02:49 AM (17 months ago)
- Location:
- zoho-crm-forms/trunk
- Files:
-
- 6 edited
-
Readme.txt (modified) (2 diffs)
-
includes/crmcontactformfieldsmapping.php (modified) (1 diff)
-
includes/crmcontactformgenerator.php (modified) (5 diffs)
-
includes/crmcustomfunctions.php (modified) (2 diffs)
-
includes/crminterfunction.php (modified) (1 diff)
-
index.php (modified) (1 diff)
Legend:
- Unmodified
- Added
- Removed
-
zoho-crm-forms/trunk/Readme.txt
r3142240 r3177807 7 7 Author: Zoho CRM 8 8 Tested up to: 6.5 9 Stable tag:1.7.9. 09 Stable tag:1.7.9.1 10 10 License: GPLv2 or later 11 Version: 1.7.9. 011 Version: 1.7.9.1 12 12 License URI: http://www.gnu.org/licenses/gpl-2.0.html 13 13 … … 287 287 1.7.9.0 288 288 Auto increment field issue fixed 289 1.7.9.1 290 Wordpress latest version compatibility check 291 292 289 293 290 294 == Upgrade notice == -
zoho-crm-forms/trunk/includes/crmcontactformfieldsmapping.php
r2864993 r3177807 37 37 <div class='exist_mapping col-md-4'> <select id='map_thirdparty_module' class='selectpicker form-control' data-live-search='false' name='map_thirdparty_module' onchange='selectThirdModule(this,$siteurl)'><option value=''>Select Module</option>"; 38 38 foreach ($layoutarray as $key => $value) { 39 $webform_layout_lists .= "<option value='" . $value->api_name. "'>" . $value->plural_label . "</option>";39 $webform_layout_lists .= "<option value='" . esc_html($value->api_name) . "'>" . $value->plural_label . "</option>"; 40 40 } 41 41 $webform_layout_lists .= "</select><span class='smaill-loading-image'></span></div></div><br><br>"; -
zoho-crm-forms/trunk/includes/crmcontactformgenerator.php
r2821154 r3177807 281 281 $htmlcontent1 .= ''; 282 282 $htmlcontent1 .= "'/><span class='crmforms_field_error' id='" . $config_fields[$i]['name'] . "error{$_SESSION["generated_forms"]}'>"; 283 if ( isset($_POST['submitcontactform']) && (intval($_POST['formnumber']) !='')) {283 if (sanitize_text_field(isset($_POST['submitcontactform'])) && (intval($_POST['formnumber']) !='')) { 284 284 if ($config_fields[$i]['zcf_mandatory'] == 1 && sanitize_text_field($_POST[$config_fields[$i]['name']]) == "") { 285 285 $htmlcontent1 .= $config_fields[$i]['display_label'] . " cannot be empty"; … … 426 426 } 427 427 elseif ($fieldtype == 'boolean') { 428 $htmlcontent1 .= '<td><input type="checkbox" class="boolean '.$M.'" name=' . $config_fields[$i]['name'] . ' id="' . $module_options . '_' . $config_fields[$i]['name'] . '" /><br/><span class="crmforms_field_error" id="' . $config_fields[$i]['name'] . 'error' . $_SESSION["generated_forms"]. '">';429 if (isset($_POST['submitcontactform']) && (intval($_POST['formnumber']) ==$_SESSION['generated_forms'])){428 $htmlcontent1 .= '<td><input type="checkbox" class="boolean '.$M.'" name=' . $config_fields[$i]['name'] . ' id="' . $module_options . '_' . $config_fields[$i]['name'] . '" /><br/><span class="crmforms_field_error" id="' . $config_fields[$i]['name'] . 'error' . sanitize_text_field($_SESSION["generated_forms"]) . '">'; 429 if(sanitize_text_field(isset($_POST['submitcontactform'])) && (sanitize_text_field(intval($_POST['formnumber']))) == sanitize_text_field($_SESSION['generated_forms'])){ 430 430 if ($config_fields[$i]['zcf_mandatory'] == 1 && sanitize_text_field($_POST[$config_fields[$i]['name']]) == "") { 431 431 $htmlcontent1 .= $config_fields[$i]['display_label'] . " cannot be empty"; … … 452 452 } elseif ($fieldtype == 'phone') { 453 453 $htmlcontent1 .= "<td><input type='text' class='phone{$M} crmforms_post_fields' name='{$config_fields[$i]['name']}' id='{$module_options}_{$config_fields[$i]['name']}' value='"; 454 if (sanitize_text_field(isset($_POST[$config_fields[$i]['name']])) && (sanitize_text_field(intval($_POST['formnumber'])) == $_SESSION['generated_forms']) && $count_error != 0)454 if (sanitize_text_field(isset($_POST[$config_fields[$i]['name']])) && (sanitize_text_field(intval($_POST['formnumber'])) ==sanitize_text_field($_SESSION['generated_forms'])) && $count_error != 0) 455 455 $htmlcontent1 .= sanitize_text_field($_POST[$config_fields[$i]['name']]); 456 456 else … … 495 495 $htmlcontent1 .= $htmlcontent2; 496 496 } else { 497 $htmlcontent1 .= "<td><input type='hidden' class='form-control dafalutvalue ss' name='{$config_fields[$i]['name']}' value='" . $config_fields[$i]['defaultvalue']. "'>";497 $htmlcontent1 .= "<td><input type='hidden' class='form-control dafalutvalue ss' name='{$config_fields[$i]['name']}' value='" . esc_html($config_fields[$i]['defaultvalue']) . "'>"; 498 498 } 499 499 $htmlcontent1 .= '</tr>'; … … 529 529 } 530 530 $htmlcontent .= "</td></tr></table>"; 531 $htmlcontent .= "<input type='hidden' value='" . $module . "' name='moduleName' /><input type='hidden' name='layoutId' value='" . $config_fields[0] ['layoutId']. "'/></div></form>";532 533 if (sanitize_text_field(isset($_POST['submitcontactform'])) && (sanitize_text_field(intval($_POST['formnumber'])) == $_SESSION['generated_forms'])) {531 $htmlcontent .= "<input type='hidden' value='" . esc_html($module) . "' name='moduleName' /><input type='hidden' name='layoutId' value='" . esc_html($config_fields[0] ['layoutId']) . "'/></div></form>"; 532 533 if (sanitize_text_field(isset($_POST['submitcontactform'])) && (sanitize_text_field(intval($_POST['formnumber'])) == sanitize_text_field($_SESSION['generated_forms']))) { 534 534 if ($count_error == 0) { 535 535 $htmlcontent .= zcf_callcontactform7mapping($formtype); -
zoho-crm-forms/trunk/includes/crmcustomfunctions.php
r2823087 r3177807 98 98 $content = "<option value=''>Select Layout</option>"; 99 99 foreach ($layoutarray as $key => $value) { 100 $content .= "<option value='" . $value->layoutID. "'>" . $value->Layoutname . "</option>";100 $content .= "<option value='" . esc_html($value->layoutID) . "'>" . $value->Layoutname . "</option>"; 101 101 } 102 102 $allowedposttags = zcf_allowed_tag(); … … 178 178 include(ZCF_BASE_DIR_URI . 'includes/crmshortcodefunctions.php'); 179 179 $fields = new zcfManageShortcodesActions(); 180 $all_fields = $fields->zcfCrmManageFieldsLists(sanitize_text_field($_REQUEST['shortcode']), sanitize_text_field($_REQUEST['crmtype']), sanitize_text_field($_REQUEST['module']), sanitize_text_field($_REQUEST['bulkaction']), sanitize_text_field($_REQUEST['chkarray']), sanitize_text_field($_REQUEST['labelarray']), sanitize_text_field($_REQUEST['orderarray']), $_REQUEST['defaultvalue'], sanitize_text_field($_REQUEST['inputtype']));180 $all_fields = $fields->zcfCrmManageFieldsLists(sanitize_text_field($_REQUEST['shortcode']), sanitize_text_field($_REQUEST['crmtype']), sanitize_text_field($_REQUEST['module']), sanitize_text_field($_REQUEST['bulkaction']), sanitize_text_field($_REQUEST['chkarray']), sanitize_text_field($_REQUEST['labelarray']), sanitize_text_field($_REQUEST['orderarray']), sanitize_text_field($_REQUEST['defaultvalue']), sanitize_text_field($_REQUEST['inputtype'])); 181 181 $moduleslug = rtrim(strtolower($module), "s"); 182 182 $config_fields = get_option("crmforms_crmformswpbuilder_{$moduleslug}_fields-tmp"); -
zoho-crm-forms/trunk/includes/crminterfunction.php
r2823084 r3177807 181 181 $user = wp_get_current_user(); 182 182 $allowed_roles = array( 'editor', 'administrator', 'author' ); 183 if ( isset( $_REQUEST['action'])&& (wp_verify_nonce( $_POST['nonce'],$action.'_nonce' ) && array_intersect( $allowed_roles, $user->roles ))){183 if (sanitize_text_field(isset($_REQUEST['action']) )&& (wp_verify_nonce( $_POST['nonce'],$action.'_nonce' ) && array_intersect( $allowed_roles, $user->roles ))){ 184 184 $thirdparty_title_key = sanitize_text_field($_REQUEST['tp_title_key']); 185 185 $thirdparty_title_value = sanitize_text_field($_REQUEST['tp_title_val']); -
zoho-crm-forms/trunk/index.php
r3142240 r3177807 4 4 * Plugin Name: Zoho CRM Lead Magnet 5 5 * Description: Websites are one of the most important sources of leads for your business. That means your CRM system should be well integrated with your website to contextually capture each and every visitor to turn them into a lead.Introducing the Zoho CRM Lead Capture plugin for Wordpress. This lets you create webforms, embed them in your website, and automatically capture leads directly into your CRM with zero attenuation.Not only is the integration easy to set-up but it's also easy on your wallet. 6 * Version: 1.7.9. 06 * Version: 1.7.9.1 7 7 * ***************************************************************************************** */ 8 8 if (!defined('ABSPATH')) 9 9 exit; 10 10 11 define( 'ZCF_VERSION', '1.7.9. 0' );11 define( 'ZCF_VERSION', '1.7.9.1' ); 12 12 define( 'ZCF_LBPLUGINFILE', __FILE__ ); 13 13 define( 'ZCF_LBPLUGIN_URL', untrailingslashit( plugins_url( '', ZCF_LBPLUGINFILE ) ) );
Note: See TracChangeset
for help on using the changeset viewer.