Changeset 3376109
- Timestamp:
- 10/10/2025 07:59:44 AM (6 months ago)
- Location:
- netgsm
- Files:
-
- 8 edited
- 1 copied
-
tags/2.9.60 (copied) (copied from netgsm/trunk)
-
tags/2.9.60/includes/replacefunction.php (modified) (1 diff)
-
tags/2.9.60/index.php (modified) (12 diffs)
-
tags/2.9.60/pages/index.php (modified) (1 diff)
-
tags/2.9.60/readme.txt (modified) (4 diffs)
-
trunk/includes/replacefunction.php (modified) (1 diff)
-
trunk/index.php (modified) (12 diffs)
-
trunk/pages/index.php (modified) (1 diff)
-
trunk/readme.txt (modified) (4 diffs)
Legend:
- Unmodified
- Added
- Removed
-
netgsm/tags/2.9.60/includes/replacefunction.php
r3304876 r3376109 37 37 38 38 public function netgsm_replace_order_status_changes($data) 39 { 40 $istenmeyen = array('[siparis_no]', '[uye_adi]', '[uye_soyadi]', '[uye_telefonu]', '[uye_epostasi]','[kullanici_adi]', '[kargo_firmasi]', '[takip_kodu]' );41 $degisen = array($data['order_id'], $data['first_name'], $data['last_name'], $data['phone'], $data['user_email'], $data['user_login'], $data['trackingCompany'], $data['trackingCode'] );39 { 40 $istenmeyen = array('[siparis_no]', '[uye_adi]', '[uye_soyadi]', '[uye_telefonu]', '[uye_epostasi]','[kullanici_adi]', '[kargo_firmasi]', '[takip_kodu]','[siparis_tutar]'); 41 $degisen = array($data['order_id'], $data['first_name'], $data['last_name'], $data['phone'], $data['user_email'], $data['user_login'], $data['trackingCompany'], $data['trackingCode'], $data['siparis_tutar']); 42 42 $result = str_replace($istenmeyen, $degisen, $data['message']); 43 43 return $result; -
netgsm/tags/2.9.60/index.php
r3371174 r3376109 6 6 Author: Netgsm 7 7 Author URI: www.netgsm.com.tr 8 Version: 2.9. 598 Version: 2.9.60 9 9 10 10 … … 301 301 swal({ 302 302 title: "BAŞARILI!", 303 html: obje.mesaj + '<br><br><b>' + phone + '</b> numarasına ' + '"<b>' + message+ '</b>" gönderildi.',303 html: obje.mesaj + '<br><br><b>' + phone + '</b> numarasına ' + '"<b>' + sanitizeTextField(message) + '</b>" gönderildi.', 304 304 type: 'success' 305 305 }); … … 314 314 }); 315 315 } 316 316 317 function sanitizeTextField(str) { 318 // 1. Backslash temizle 319 str = str.replace(/\\/g, ''); 320 // 2. HTML tag'lerini sil 321 str = str.replace(/<[^>]*>?/gm, ''); 322 // 3. Trim (baş ve sondaki boşluklar) 323 str = str.trim(); 324 return str; 325 } 317 326 function netgsm_sendSMS_bulkTab(id = "",$phone=0) { 318 327 document.getElementById('bulkSMSbtn').disabled = true; … … 382 391 swal({ 383 392 title: "BAŞARILI!", 384 html: obje.mesaj + '<br><br><b>' + obje.phones + '</b> ' + numberstext + ' "<b>' + message+ '</b>" gönderildi.',393 html: obje.mesaj + '<br><br><b>' + obje.phones + '</b> ' + numberstext + ' "<b>' + sanitizeTextField(message) + '</b>" gönderildi.', 385 394 type: 'success' 386 395 }); … … 449 458 swal({ 450 459 title: "BAŞARILI!", 451 html: obje.mesaj + '<br><br><b>' + phone + '</b> numarasına ' + '"<b>' + message+ '</b>" gönderildi.',460 html: obje.mesaj + '<br><br><b>' + phone + '</b> numarasına ' + '"<b>' + sanitizeTextField(message) + '</b>" gönderildi.', 452 461 type: 'success' 453 462 }); … … 1073 1082 } 1074 1083 if (isset($_POST['users']) && isset($_POST['message'])) { 1075 $users = explode(',', rtrim(sanitize_text_field($_POST['users']), ',')); 1084 // Users input'unu temizle 1085 $users_raw = sanitize_text_field($_POST['users']); 1086 $users = array_map('sanitize_text_field', explode(',', rtrim($users_raw, ','))); 1087 1076 1088 $bulkBody = ""; 1089 $messageContent = sanitize_text_field(wp_unslash($_POST['message'])); 1090 $filter = sanitize_text_field(wp_unslash($_POST['filter'])); 1077 1091 $replace = new ReplaceFunction(); 1078 1092 foreach ($users as $userID) { … … 1081 1095 $sendPhone = isset($_POST['sendPhone']) ? $_POST['sendPhone'] : 0; 1082 1096 if($userID==0 && $sendPhone !=0){ 1083 $sendedPhone = $sendPhone;1097 $sendedPhone = sanitize_text_field($sendPhone); 1084 1098 } 1085 1099 $userinfo = get_userdata($userID); … … 1090 1104 'phone' => $sendedPhone, 1091 1105 'user_email' => $userinfo->user_email??"", 1092 'message' => wp_unslash($_POST['message']),1093 'filter' => wp_unslash($_POST['filter'])1106 'message' => $messageContent, 1107 'filter' => $filter 1094 1108 ); 1095 1109 $message = $replace->netgsm_replace_bulksms($data); … … 1117 1131 $replace = new ReplaceFunction(); 1118 1132 if (isset($_POST['phone']) && isset($_POST['message'])) { 1133 $message = sanitize_text_field(wp_unslash($_POST['message'])); 1134 $message = strip_tags($message); 1119 1135 $netgsm = new Netgsmsms(sanitize_text_field(get_option("netgsm_user")), sanitize_text_field(get_option("netgsm_pass")), sanitize_text_field(get_option('netgsm_input_smstitle')), sanitize_text_field(get_option("netgsm_trChar"))); 1120 $json = $netgsm->sendSMS(sanitize_text_field($replace->netgsm_spaceTrim($_POST['phone'])), wp_unslash($_POST['message']), $_POST['filter']);1136 $json = $netgsm->sendSMS(sanitize_text_field($replace->netgsm_spaceTrim($_POST['phone'])), $message, sanitize_text_field($_POST['filter'])); 1121 1137 //netgsm_setData($_POST['phone'], get_option('netgsm_input_smstitle'), get_option("netgsm_trChar"), $_POST['message'], 'ÖzelSMS', date('Y-m-d H:i:s'), $json['gorevid'], 0 ); 1122 1138 } else { … … 1376 1392 array( 1377 1393 'key' => 'billing_phone', 1378 'value' => trim($ _POST['phone'], '0'),1394 'value' => trim($phone, '0'), 1379 1395 'compare' => 'LIKE' 1380 1396 ) … … 1958 1974 if (isset($message) && !empty($message)) { 1959 1975 $order = new WC_Order($order_id); 1976 $orderPrice = $order->get_total(); 1960 1977 $userinfo = get_userdata($order->customer_id); 1961 1978 $trackingCode = ''; … … 2006 2023 'user_email' => $order->billing_email, 2007 2024 'message' => $message, 2025 'siparis_tutar' => $orderPrice, 2008 2026 'trackingCompany' => $replace->netgsm_replace_shipping_company($trackingCompany), 2009 2027 'trackingCode' => $trackingCode -
netgsm/tags/2.9.60/pages/index.php
r3313712 r3376109 838 838 [takip_kodu] 839 839 </mark> 840 <mark onclick="varfill('netgsm_order_status_text_'+jQuery('#activeStatus').attr('data'), 'siparis_tutar')"> 841 [siparis_tutar] 842 </mark> 840 843 <i class="fa fa-certificate" style="color: #681947;"></i> 841 844 </p> -
netgsm/tags/2.9.60/readme.txt
r3371174 r3376109 5 5 Requires at least: 3.0 6 6 Tested up to: 6.8 7 Stable tag: 2.9. 597 Stable tag: 2.9.60 8 8 Requires PHP: 7.4.33 9 9 License: GPLv2 or later … … 89 89 90 90 == Changelog == 91 = 2.9.60 = 92 * Sürüm revizasyonu 91 93 = 2.9.59 = 92 94 * Missing Authorization … … 130 132 ======= 131 133 == Changelog == 134 = 2.9.60 = 135 * Sürüm revizasyonu 132 136 = 2.9.59 = 133 137 * Missing Authorization … … 172 176 * Hata düzeltmesi yapıldı. 173 177 == Changelog == 178 = 2.9.60 = 179 * Sürüm revizasyonu 174 180 = 2.9.59 = 175 181 * Missing Authorization -
netgsm/trunk/includes/replacefunction.php
r3304876 r3376109 37 37 38 38 public function netgsm_replace_order_status_changes($data) 39 { 40 $istenmeyen = array('[siparis_no]', '[uye_adi]', '[uye_soyadi]', '[uye_telefonu]', '[uye_epostasi]','[kullanici_adi]', '[kargo_firmasi]', '[takip_kodu]' );41 $degisen = array($data['order_id'], $data['first_name'], $data['last_name'], $data['phone'], $data['user_email'], $data['user_login'], $data['trackingCompany'], $data['trackingCode'] );39 { 40 $istenmeyen = array('[siparis_no]', '[uye_adi]', '[uye_soyadi]', '[uye_telefonu]', '[uye_epostasi]','[kullanici_adi]', '[kargo_firmasi]', '[takip_kodu]','[siparis_tutar]'); 41 $degisen = array($data['order_id'], $data['first_name'], $data['last_name'], $data['phone'], $data['user_email'], $data['user_login'], $data['trackingCompany'], $data['trackingCode'], $data['siparis_tutar']); 42 42 $result = str_replace($istenmeyen, $degisen, $data['message']); 43 43 return $result; -
netgsm/trunk/index.php
r3371174 r3376109 6 6 Author: Netgsm 7 7 Author URI: www.netgsm.com.tr 8 Version: 2.9. 598 Version: 2.9.60 9 9 10 10 … … 301 301 swal({ 302 302 title: "BAŞARILI!", 303 html: obje.mesaj + '<br><br><b>' + phone + '</b> numarasına ' + '"<b>' + message+ '</b>" gönderildi.',303 html: obje.mesaj + '<br><br><b>' + phone + '</b> numarasına ' + '"<b>' + sanitizeTextField(message) + '</b>" gönderildi.', 304 304 type: 'success' 305 305 }); … … 314 314 }); 315 315 } 316 316 317 function sanitizeTextField(str) { 318 // 1. Backslash temizle 319 str = str.replace(/\\/g, ''); 320 // 2. HTML tag'lerini sil 321 str = str.replace(/<[^>]*>?/gm, ''); 322 // 3. Trim (baş ve sondaki boşluklar) 323 str = str.trim(); 324 return str; 325 } 317 326 function netgsm_sendSMS_bulkTab(id = "",$phone=0) { 318 327 document.getElementById('bulkSMSbtn').disabled = true; … … 382 391 swal({ 383 392 title: "BAŞARILI!", 384 html: obje.mesaj + '<br><br><b>' + obje.phones + '</b> ' + numberstext + ' "<b>' + message+ '</b>" gönderildi.',393 html: obje.mesaj + '<br><br><b>' + obje.phones + '</b> ' + numberstext + ' "<b>' + sanitizeTextField(message) + '</b>" gönderildi.', 385 394 type: 'success' 386 395 }); … … 449 458 swal({ 450 459 title: "BAŞARILI!", 451 html: obje.mesaj + '<br><br><b>' + phone + '</b> numarasına ' + '"<b>' + message+ '</b>" gönderildi.',460 html: obje.mesaj + '<br><br><b>' + phone + '</b> numarasına ' + '"<b>' + sanitizeTextField(message) + '</b>" gönderildi.', 452 461 type: 'success' 453 462 }); … … 1073 1082 } 1074 1083 if (isset($_POST['users']) && isset($_POST['message'])) { 1075 $users = explode(',', rtrim(sanitize_text_field($_POST['users']), ',')); 1084 // Users input'unu temizle 1085 $users_raw = sanitize_text_field($_POST['users']); 1086 $users = array_map('sanitize_text_field', explode(',', rtrim($users_raw, ','))); 1087 1076 1088 $bulkBody = ""; 1089 $messageContent = sanitize_text_field(wp_unslash($_POST['message'])); 1090 $filter = sanitize_text_field(wp_unslash($_POST['filter'])); 1077 1091 $replace = new ReplaceFunction(); 1078 1092 foreach ($users as $userID) { … … 1081 1095 $sendPhone = isset($_POST['sendPhone']) ? $_POST['sendPhone'] : 0; 1082 1096 if($userID==0 && $sendPhone !=0){ 1083 $sendedPhone = $sendPhone;1097 $sendedPhone = sanitize_text_field($sendPhone); 1084 1098 } 1085 1099 $userinfo = get_userdata($userID); … … 1090 1104 'phone' => $sendedPhone, 1091 1105 'user_email' => $userinfo->user_email??"", 1092 'message' => wp_unslash($_POST['message']),1093 'filter' => wp_unslash($_POST['filter'])1106 'message' => $messageContent, 1107 'filter' => $filter 1094 1108 ); 1095 1109 $message = $replace->netgsm_replace_bulksms($data); … … 1117 1131 $replace = new ReplaceFunction(); 1118 1132 if (isset($_POST['phone']) && isset($_POST['message'])) { 1133 $message = sanitize_text_field(wp_unslash($_POST['message'])); 1134 $message = strip_tags($message); 1119 1135 $netgsm = new Netgsmsms(sanitize_text_field(get_option("netgsm_user")), sanitize_text_field(get_option("netgsm_pass")), sanitize_text_field(get_option('netgsm_input_smstitle')), sanitize_text_field(get_option("netgsm_trChar"))); 1120 $json = $netgsm->sendSMS(sanitize_text_field($replace->netgsm_spaceTrim($_POST['phone'])), wp_unslash($_POST['message']), $_POST['filter']);1136 $json = $netgsm->sendSMS(sanitize_text_field($replace->netgsm_spaceTrim($_POST['phone'])), $message, sanitize_text_field($_POST['filter'])); 1121 1137 //netgsm_setData($_POST['phone'], get_option('netgsm_input_smstitle'), get_option("netgsm_trChar"), $_POST['message'], 'ÖzelSMS', date('Y-m-d H:i:s'), $json['gorevid'], 0 ); 1122 1138 } else { … … 1376 1392 array( 1377 1393 'key' => 'billing_phone', 1378 'value' => trim($ _POST['phone'], '0'),1394 'value' => trim($phone, '0'), 1379 1395 'compare' => 'LIKE' 1380 1396 ) … … 1958 1974 if (isset($message) && !empty($message)) { 1959 1975 $order = new WC_Order($order_id); 1976 $orderPrice = $order->get_total(); 1960 1977 $userinfo = get_userdata($order->customer_id); 1961 1978 $trackingCode = ''; … … 2006 2023 'user_email' => $order->billing_email, 2007 2024 'message' => $message, 2025 'siparis_tutar' => $orderPrice, 2008 2026 'trackingCompany' => $replace->netgsm_replace_shipping_company($trackingCompany), 2009 2027 'trackingCode' => $trackingCode -
netgsm/trunk/pages/index.php
r3313712 r3376109 838 838 [takip_kodu] 839 839 </mark> 840 <mark onclick="varfill('netgsm_order_status_text_'+jQuery('#activeStatus').attr('data'), 'siparis_tutar')"> 841 [siparis_tutar] 842 </mark> 840 843 <i class="fa fa-certificate" style="color: #681947;"></i> 841 844 </p> -
netgsm/trunk/readme.txt
r3371174 r3376109 5 5 Requires at least: 3.0 6 6 Tested up to: 6.8 7 Stable tag: 2.9. 597 Stable tag: 2.9.60 8 8 Requires PHP: 7.4.33 9 9 License: GPLv2 or later … … 89 89 90 90 == Changelog == 91 = 2.9.60 = 92 * Sürüm revizasyonu 91 93 = 2.9.59 = 92 94 * Missing Authorization … … 130 132 ======= 131 133 == Changelog == 134 = 2.9.60 = 135 * Sürüm revizasyonu 132 136 = 2.9.59 = 133 137 * Missing Authorization … … 172 176 * Hata düzeltmesi yapıldı. 173 177 == Changelog == 178 = 2.9.60 = 179 * Sürüm revizasyonu 174 180 = 2.9.59 = 175 181 * Missing Authorization
Note: See TracChangeset
for help on using the changeset viewer.