Get WordPress

Plugin Directory

Changeset 3115823

Timestamp:
07/10/2024 05:13:04 PM (3 weeks ago)
Author:
minhgsvn
Message:

init v4.3.3

Location:
popup-builder/trunk
Files:
30 edited

Legend:

Unmodified
Added
Removed

  • popup-builder/trunk/com/classes/Actions.php

    r3096000 r3115823  
    7171       
    7272        add_filter( 'upload_mimes', array($this, 'popupbuilder_allow_csv_mime_types') );
    73        
     73        add_action( 'plugins_loaded' , array($this, 'popupbuilder_contrucst') );
     74    }
     75    public function popupbuilder_contrucst()
     76    {
    7477        new SGPBFeedback();
    7578        new SGPBReports();
    … …  
    7780        new Ajax();
    7881    }
    79    
    8082    public function popupbuilder_allow_csv_mime_types( $mimes ) {
    8183        $mimes['csv'] = 'text/csv';
    … …  
    8890        $currentPostType = AdminHelper::getCurrentPostType();
    8991        if(!empty($currentPostType) && ($currentPostType == SG_POPUP_POST_TYPE || $currentPostType == SG_POPUP_AUTORESPONDER_POST_TYPE || $currentPostType == SG_POPUP_TEMPLATE_POST_TYPE)) {
    90             wp_register_script( 'sgpb-actions-js-footer', '', array("jquery"), '', true );
     92            wp_register_script( 'sgpb-actions-js-footer', '', array("jquery"), , true );
    9193            wp_enqueue_script( 'sgpb-actions-js-footer'  );
    9294            wp_add_inline_script( 'sgpb-actions-js-footer', "jQuery(document).ready(function ($) {
    … …  
    418420    public function pluginNotices()
    419421    {
     422
    420423        if (function_exists('get_current_screen')) {
    421424            $screen = get_current_screen();
    … …  
    430433
    431434        $content = '';
    432 
     435        $scan_spam_code = AdminHelper::sgpbScanCustomJsProblem();
     436        if( $scan_spam_code !== false )
     437        {           
     438            $content.= AdminHelper::renderAlertCustomJsProblem( $scan_spam_code['marked_code'] );
     439        }
     440        else
     441        {           
     442            if (get_option('sgpb-disable-custom-js')) {
     443                $content.= AdminHelper::renderAlertEnableCustomJS();                   
     444            }           
     445        }   
     446       
    433447        // if popup builder has the old version
    434448        if (!get_option('SGPB_POPUP_VERSION')) {
    435             return $content;
    436         }
    437 
     449           
     450       
     451        }
    438452        $alertProblem = get_option('sgpb_alert_problems');
    439453        // for old users show alert about problems
    … …  
    441455            echo wp_kses(AdminHelper::renderAlertProblem(), AdminHelper::allowed_html_tags());
    442456        }
    443 
    444457        // Don't show the banner if there's not any extension of Popup Builder or if the user has clicked "don't show"
    445458        if (empty($extensions) || $updated) {
    446459            return $content;
    447460        }
    448 
    449         ob_start();
     461        ob_start();     
    450462        ?>
    451463        <div id="welcome-panel" class="update-nag sgpb-extensions-notices">
    … …  
    455467        </div>
    456468        <?php
    457         $content = ob_get_clean();
    458 
     469        $content .= ob_get_clean();
    459470        echo wp_kses($content, AdminHelper::allowed_html_tags());
    460471        return true;
    … …  
    766777            return false;
    767778        }
    768 
    769         $selectionQuery = 'SELECT id FROM '.$wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME.' WHERE';
    770         $selectionQuery = apply_filters('sgpbUserSelectionQuery', $selectionQuery);
    771         $sql = $wpdb->prepare($selectionQuery .' and subscriptionType = %d limit 1', $subscriptionFormId);
    772 
    773         $result = $wpdb->get_row($sql, ARRAY_A);//db call ok
     779        $table_subscription = $wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME;
     780        $selectionQuery = "SELECT id FROM $table_subscription WHERE";
     781        $selectionQuery = apply_filters('sgpbUserSelectionQuery', $selectionQuery);
     782       
     783        $result = $wpdb->get_row( $wpdb->prepare("$selectionQuery and subscriptionType = %d limit 1", $subscriptionFormId), ARRAY_A);//db call ok
    774784        $currentStateEmailId = (int)$result['id'];
    775         $getTotalSql = $wpdb->prepare('SELECT count(*) FROM '.$wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME.' WHERE unsubscribed = 0 and subscriptionType = %d', $subscriptionFormId);
    776         $totalSubscribers = $wpdb->get_var($getTotalSql);
     785        $;
     786        $totalSubscribers = $wpdb->get_var();
    777787
    778788        // $currentStateEmailId == 0 when all emails status = 1
    … …  
    801811        $getAllDataSql = 'SELECT id, firstName, lastName, email FROM '.$wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME.' WHERE';
    802812        $getAllDataSql = apply_filters('sgpbUserSelectionQuery', $getAllDataSql);
    803         $getAllDataSql = $wpdb->prepare($getAllDataSql .' and id >= %d and subscriptionType = %s limit %d', $currentStateEmailId, $subscriptionFormId, $emailsInFlow);
    804         $subscribers = $wpdb->get_results($getAllDataSql, ARRAY_A);
     813        $subscribers = $wpdb->get_results( $wpdb->prepare( "$getAllDataSql and id >= %d and subscriptionType = %s limit %d", $currentStateEmailId, $subscriptionFormId, $emailsInFlow), ARRAY_A);
    805814
    806815        $subscribers = apply_filters('sgpNewsletterSendingSubscribers', $subscribers);
    … …  
    845854            $mailStatus = wp_mail($subscriber['email'], $mailSubject, $emailMessageCustom, $headers);
    846855            if (!$mailStatus) {
    847                 $errorLogSql = $wpdb->prepare('INSERT INTO '. $wpdb->prefix .SGPB_SUBSCRIBERS_ERROR_TABLE_NAME.' (`popupType`, `email`, `date`) VALUES (%s, %s, %s)', $subscriptionFormId, $subscriber['email'], gmdate('Y-m-d H:i'));
    848                 $wpdb->query($errorLogSql);
    849                 continue;
     856                $table_sgpb_subscription_error_log = $wpdb->prefix.SGPB_SUBSCRIBERS_ERROR_TABLE_NAME;
     857                $wpdb->query( $wpdb->prepare("INSERT INTO $table_sgpb_subscription_error_log (`popupType`, `email`, `date`) VALUES (%s, %s, %s)", $subscriptionFormId, $subscriber['email'], gmdate('Y-m-d H:i')) );continue;
    850858            }
    851859
    … …  
    859867        }
    860868        // Update the status of all the sent mails
    861         $updateStatusQuery = $wpdb->prepare('UPDATE '.$wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME.' SET status = 1 where id >= %d and subscriptionType = %d limit %d', $currentStateEmailId, $subscriptionFormId, $emailsInFlow);
    862         $wpdb->query($updateStatusQuery);
     869        $;
     870        $wpdb->query();
    863871    }
    864872
    … …  
    14981506        }
    14991507        $content .= "\n";
     1508
    15001509        $subscribers = $wpdb->get_results($query, ARRAY_A);
    15011510
    … …  
    15631572            $enableDebugMode = 1;
    15641573        }
     1574
     1575
     1576
    15651577        if (isset($_POST['sgpb-disable-analytics-general'])) {
    15661578            $disableAnalytics = 1;
    … …  
    15771589        update_option('sgpb-enable-debug-mode', $enableDebugMode);
    15781590        update_option('sgpb-disable-analytics-general', $disableAnalytics);
     1591
    15791592
    15801593        AdminHelper::filterUserCapabilitiesForTheUserRoles('save');

  • popup-builder/trunk/com/classes/Ajax.php

    r3096000 r3115823  
    342342
    343343        foreach($subscribersId as $subscriberId) {
    344             $prepareSql = $wpdb->prepare('DELETE FROM '.$wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME.' WHERE id = %d', $subscriberId);
    345             $wpdb->query($prepareSql);
     344            $;
     345            $wpdb->query();
    346346        }
    347347    }
    … …  
    370370            $item = sanitize_text_field($item);
    371371        });
    372 
    373         foreach($subscriptionPopupsId as $subscriptionPopupId) {
    374             $selectSql = $wpdb->prepare('SELECT id FROM '.$wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME.' WHERE email = %s AND subscriptionType = %d', $email, $subscriptionPopupId);
    375             $res = $wpdb->get_row($selectSql, ARRAY_A);
     372        $table_sgpb_subscribers = $wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME;
     373        foreach($subscriptionPopupsId as $subscriptionPopupId) {
     374           
     375            $res = $wpdb->get_row(, ARRAY_A);
    376376            // add new subscriber
    377377            if(empty($res)) {
    378                 $sql = $wpdb->prepare('INSERT INTO '.$wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME.' (firstName, lastName, email, cDate, subscriptionType) VALUES (%s, %s, %s, %s, %d) ', $firstName, $lastName, $email, $date, $subscriptionPopupId);
    379                 $res = $wpdb->query($sql);
     378                $res = $wpdb->query( $wpdb->prepare("INSERT INTO $table_sgpb_subscribers (firstName, lastName, email, cDate, subscriptionType) VALUES (%s, %s, %s, %s, %d) ", $firstName, $lastName, $email, $date, $subscriptionPopupId) );
    380379            } // edit existing
    381380            else {
    382                 $sql = $wpdb->prepare('UPDATE '.$wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME.' SET firstName = %s, lastName = %s, email = %s, cDate = %s, subscriptionType = %d, unsubscribered = 0 WHERE id = %d', $firstName, $lastName, $email, $date, $subscriptionPopupId, $res['id']);
    383                 $wpdb->query($sql);
     381                $wpdb->query( $wpdb->prepare("UPDATE $table_sgpb_subscribers SET firstName = %s, lastName = %s, email = %s, cDate = %s, subscriptionType = %d, unsubscribered = 0 WHERE id = %d", $firstName, $lastName, $email, $date, $subscriptionPopupId, $res['id']) );
    384382                $res = 1;
    385383            }
    … …  
    460458        // -1 it's mean saved from Subscription Plus
    461459        if($subscriptionPlusContent != -1) {
    462             foreach($csvFileArray as $csvData) {
    463                 global $wpdb;
    464                 $subscribersTableName = $wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME;
    465                 $sql = $wpdb->prepare('SELECT submittedData FROM '.$subscribersTableName);
     460           
     461           
     462           
     463                $);
    466464                if(!empty($mapping['date'])) {
    467465                    $date = $csvData[$mapping['date']];
    468466                    $date = gmdate('Y-m-d', strtotime($date));
    469467                }
    470                 if($sql) {
    471                     $sql = $wpdb->prepare('INSERT INTO '.$subscribersTableName.' (firstName, lastName, email, cDate, subscriptionType, status, unsubscribed) VALUES (%s, %s, %s, %s, %d, %d, %d) ', $csvData[$mapping['firstName']], $csvData[$mapping['lastName']], $csvData[$mapping['email']], $date, $formId, 0, 0);
     468                if() {
     469                    $);
    472470                } else {
    473                     $sql = $wpdb->prepare('INSERT INTO '.$subscribersTableName.' (firstName, lastName, email, cDate, subscriptionType, status, unsubscribed, submittedData) VALUES (%s, %s, %s, %s, %d, %d, %d, %s) ', $csvData[$mapping['firstName']], $csvData[$mapping['lastName']], $csvData[$mapping['email']], $csvData[$mapping['date']], $formId, 0, 0, '');
    474                 }
    475 
    476                 $wpdb->query($sql);
     471                    $wpdb->query( $wpdb->prepare("INSERT INTO $subscribersTableName (firstName, lastName, email, cDate, subscriptionType, status, unsubscribed, submittedData) VALUES (%s, %s, %s, %s, %d, %d, %d, %s) ", $csvData[$mapping['firstName']], $csvData[$mapping['lastName']], $csvData[$mapping['email']], $csvData[$mapping['date']], $formId, 0, 0, '') );
     472                }               
    477473            }
    478474        }
    … …  
    513509        }
    514510        $subscriptionFormId = (int)$newsletterData['subscriptionFormId'];
    515 
    516         $updateStatusQuery = $wpdb->prepare('UPDATE '.$wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME.' SET status = 0 WHERE subscriptionType = %d', $subscriptionFormId);
    517         $wpdb->query($updateStatusQuery);
     511        $subscribersTableName = $wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME;     
     512        $wpdb->query( $wpdb->prepare("UPDATE $subscribersTableName SET status = 0 WHERE subscriptionType = %d", $subscriptionFormId) );
    518513        $newsletterData['blogname'] = get_bloginfo('name');
    519514        $newsletterData['username'] = wp_get_current_user()->user_login;
    … …  
    633628
    634629        $subscribersTableName = $wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME;
    635 
    636         $getSubscriberQuery = $wpdb->prepare('SELECT id FROM '.$subscribersTableName.' WHERE email = %s AND subscriptionType = %d', $email, $popupPostId);
    637         $list = $wpdb->get_row($getSubscriberQuery, ARRAY_A);
     630        $list = $wpdb->get_row( $wpdb->prepare("SELECT id FROM $subscribersTableName WHERE email = %s AND subscriptionType = %d", $email, $popupPostId), ARRAY_A);
    638631
    639632        // When subscriber does not exist we insert to subscribers table otherwise we update user info
    640633        if(empty($list['id'])) {
    641             $sql = $wpdb->prepare('INSERT INTO '.$subscribersTableName.' (firstName, lastName, email, cDate, subscriptionType) VALUES (%s, %s, %s, %s, %d) ', $firstName, $lastName, $email, $date, $popupPostId);
    642             $res = $wpdb->query($sql);
     634            $res = $wpdb->query( $wpdb->prepare("INSERT INTO $subscribersTableName (firstName, lastName, email, cDate, subscriptionType) VALUES (%s, %s, %s, %s, %d) ", $firstName, $lastName, $email, $date, $popupPostId) );
    643635        } else {
    644             $sql = $wpdb->prepare('UPDATE '.$subscribersTableName.' SET firstName = %s, lastName = %s, email = %s, cDate = %s, subscriptionType = %d WHERE id = %d', $firstName, $lastName, $email, $date, $popupPostId, $list['id']);
    645             $wpdb->query($sql);
     636            $wpdb->query( $wpdb->prepare("UPDATE $subscribersTableName SET firstName = %s, lastName = %s, email = %s, cDate = %s, subscriptionType = %d WHERE id = %d", $firstName, $lastName, $email, $date, $popupPostId, $list['id']) );
    646637            $res = 1;
    647638        }
    … …  
    696687        $subscribersTableName = $wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME;
    697688
    698         $getSubscriberCountQuery = $wpdb->prepare('SELECT COUNT(id) as countIds FROM '.$subscribersTableName.' WHERE subscriptionType = %d', $popupPostId);
    699         $count = $wpdb->get_row($getSubscriberCountQuery, ARRAY_A);
     689        $count = $wpdb->get_row( $wpdb->prepare("SELECT COUNT(id) as countIds FROM $subscribersTableName WHERE subscriptionType = %d", $popupPostId), ARRAY_A);
    700690
    701691        $popupOptions = $popup->getOptions();

  • popup-builder/trunk/com/classes/ConvertToNewVersion.php

    r3085485 r3115823  
    130130    {
    131131        global $wpdb;
    132         $subscribersSql = 'SELECT `id`, `firstName`, `lastName`, `email`, `subscriptionType`, `status` from '.$wpdb->prefix.'sg_subscribers';
    133         $subscribers = $wpdb->get_results( $wpdb->prepare( $subscribersSql ), ARRAY_A);
     132        $oldsubscribersTableName = $wpdb->prefix.'sg_subscribers';
     133        $subscribersTableName = $wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME;
     134        $subscribers = $wpdb->get_results( $wpdb->prepare( "SELECT `id`, `firstName`, `lastName`, `email`, `subscriptionType`, `status` from $oldsubscribersTableName" ), ARRAY_A);
    134135
    135136        if (empty($subscribers)) {
    … …  
    139140        foreach ($subscribers as $subscriber) {
    140141            $subscriber['subscriptionType'] = $this->getPostByTitle($subscriber['subscriptionType']);
    141 
    142142            $date = gmdate('Y-m-d');
    143             $sql = $wpdb->prepare('INSERT INTO '.$wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME.' (`firstName`, `lastName`, `email`, `cDate`, `subscriptionType`, `unsubscribed`) VALUES (%s, %s, %s, %s, %d, %d) ', $subscriber['firstName'], $subscriber['lastName'], $subscriber['email'], $date, $subscriber['subscriptionType'], 0);
    144             $wpdb->query($sql);
     143            $wpdb->query( $wpdb->prepare("INSERT INTO $subscribersTableName (`firstName`, `lastName`, `email`, `cDate`, `subscriptionType`, `unsubscribed`) VALUES (%s, %s, %s, %s, %d, %d) ", $subscriber['firstName'], $subscriber['lastName'], $subscriber['email'], $date, $subscriber['subscriptionType'], 0) );
    145144        }
    146145    }
    … …  
    222221    {
    223222        global $wpdb;
    224 
    225         $query = 'SELECT `id`, `type`, `title`, `options` from '.$wpdb->prefix.'sg_popup ORDER BY id';
    226         $popups = $wpdb->get_results( $wpdb->prepare( $query ), ARRAY_A);
     223        $oldsg_popupsTableName = $wpdb->prefix.'sg_popup';
     224        $popups = $wpdb->get_results( $wpdb->prepare("SELECT `id`, `type`, `title`, `options` from $oldsg_popupsTableName ORDER BY id" ), ARRAY_A);
    227225
    228226        return $popups;
    … …  
    517515        $popupId = $popup->getId();
    518516        global $wpdb;
    519 
    520         $addonsOptionSqlString = 'SELECT options FROM '.$wpdb->prefix.'sg_popup_addons_connection WHERE popupId = %d and extensionType = "option"';
    521         $addonsSql = $wpdb->prepare($addonsOptionSqlString, $popupId);
    522         $results = $wpdb->get_results($addonsSql, ARRAY_A);
     517        $sg_popup_addons_connectionTableName = $wpdb->prefix.'sg_popup_addons_connection';     
     518        $results = $wpdb->get_results($wpdb->prepare( "SELECT options FROM $sg_popup_addons_connectionTableName WHERE popupId = %d and extensionType = 'option'", $popupId) , ARRAY_A);
    523519
    524520        if (empty($results)) {
    … …  
    728724        switch ($type) {
    729725            case 'image':
    730                 $query = $wpdb->prepare('SELECT `url` FROM '.$wpdb->prefix.'sg_image_popup WHERE id = %d', $arr['id']);
    731                 $result = $wpdb->get_row($query, ARRAY_A);
     726                $
     727                $result = $wpdb->get_row(, ARRAY_A);
    732728
    733729                if (!empty($result['url'])) {
    … …  
    736732                break;
    737733            case 'html':
    738                 $query = $wpdb->prepare('SELECT `content` FROM '.$wpdb->prefix.'sg_html_popup WHERE id = %d', $arr['id']);
    739                 $result = $wpdb->get_row($query, ARRAY_A);
     734                $
     735                $result = $wpdb->get_row(, ARRAY_A);
    740736
    741737                if (!empty($result['content'])) {
    … …  
    744740                break;
    745741            case 'fblike':
    746                 $query = $wpdb->prepare('SELECT `content`, `options` FROM '.$wpdb->prefix.'sg_fblike_popup WHERE id = %d', $arr['id']);
    747                 $result = $wpdb->get_row($query, ARRAY_A);
     742                $
     743                $result = $wpdb->get_row(, ARRAY_A);
    748744
    749745                if (!empty($result['content'])) {
    … …  
    758754                break;
    759755            case 'shortcode':
    760                 $query = $wpdb->prepare('SELECT `url` FROM '.$wpdb->prefix.'sg_shortCode_popup WHERE id = %d', $arr['id']);
    761                 $result = $wpdb->get_row($query, ARRAY_A);
     756                $
     757                $result = $wpdb->get_row(, ARRAY_A);
    762758
    763759                if (!empty($result['url'])) {
    … …  
    766762                break;
    767763            case 'iframe':
    768                 $query = $wpdb->prepare('SELECT `url` FROM '.$wpdb->prefix.'sg_iframe_popup WHERE id = %d', $arr['id']);
    769                 $result = $wpdb->get_row($query, ARRAY_A);
     764                $
     765                $result = $wpdb->get_row(, ARRAY_A);
    770766                if (!empty($result['url'])) {
    771767                    $options['iframe-url'] =  $result['url'];
    … …  
    773769                break;
    774770            case 'video':
    775                 $query = $wpdb->prepare('SELECT `url`, `options` FROM '.$wpdb->prefix.'sg_video_popup WHERE id = %d', $arr['id']);
    776                 $result = $wpdb->get_row($query, ARRAY_A);
     771                $
     772                $result = $wpdb->get_row(, ARRAY_A);
    777773                if (!empty($result['url'])) {
    778774                    $options['video-url'] =  $result['url'];
    … …  
    787783                break;
    788784            case 'ageRestriction':
    789                 $query = $wpdb->prepare('SELECT `content`, `yesButton` as `yesButtonLabel`, `noButton` as `noButtonLabel`, `url` as `restrictionUrl` FROM '.$wpdb->prefix.'sg_age_restriction_popup WHERE id = %d', $arr['id']);
    790                 $result = $wpdb->get_row($query, ARRAY_A);
     785                $
     786                $result = $wpdb->get_row(, ARRAY_A);
    791787                if (!empty($result['content'])) {
    792788                    $this->setContent($result['content']);
    … …  
    798794                break;
    799795            case 'social':
    800                 $query = $wpdb->prepare('SELECT `socialContent`, `buttons`, `socialOptions` FROM '.$wpdb->prefix.'sg_social_popup WHERE id = %d', $arr['id']);
    801                 $result = $wpdb->get_row($query, ARRAY_A);
     796                $
     797                $result = $wpdb->get_row(, ARRAY_A);
    802798
    803799                if (!empty($result['socialContent'])) {
    … …  
    813809                break;
    814810            case 'subscription':
    815                 $query = $wpdb->prepare('SELECT `content`, `options` FROM '.$wpdb->prefix.'sg_subscription_popup WHERE id = %d', $arr['id']);
    816                 $result = $wpdb->get_row($query, ARRAY_A);
     811                $;
     812                $result = $wpdb->get_row(, ARRAY_A);
    817813
    818814                if (!empty($result['content'])) {
    … …  
    828824                break;
    829825            case 'countdown':
    830                 $query = $wpdb->prepare('SELECT `content`, `options` FROM '.$wpdb->prefix.'sg_countdown_popup WHERE id = %d', $arr['id']);
    831                 $result = $wpdb->get_row($query, ARRAY_A);
     826                $
     827                $result = $wpdb->get_row(, ARRAY_A);
    832828
    833829                if (!empty($result['content'])) {
    … …  
    842838                break;
    843839            case 'contactForm':
    844                 $query = $wpdb->prepare('SELECT `content`, `options` FROM '.$wpdb->prefix.'sg_contact_form_popup WHERE id = %d', $arr['id']);
    845                 $result = $wpdb->get_row($query, ARRAY_A);
     840                $;
     841                $result = $wpdb->get_row(, ARRAY_A);
    846842
    847843                if (!empty($result['content'])) {
    … …  
    856852                break;
    857853            case 'mailchimp':
    858                 $query = $wpdb->prepare('SELECT `content`, `options` FROM '.$wpdb->prefix.'sg_popup_mailchimp WHERE id = %d', $arr['id']);
    859                 $result = $wpdb->get_row($query, ARRAY_A);
     854                $;
     855                $result = $wpdb->get_row(, ARRAY_A);
    860856
    861857                if (!empty($result['content'])) {
    … …  
    871867                break;
    872868            case 'aweber':
    873                 $query = $wpdb->prepare('SELECT `content`, `options` FROM '.$wpdb->prefix.'sg_popup_aweber WHERE id = %d', $arr['id']);
    874                 $result = $wpdb->get_row($query, ARRAY_A);
     869                $;
     870                $result = $wpdb->get_row(, ARRAY_A);
    875871
    876872                if (!empty($result['content'])) {

  • popup-builder/trunk/com/classes/Feedback.php

    r3085485 r3115823  
    105105                        <div class="col-md-12">
    106106                            <h4 class="sgpb-feedback-descritpion">
    107                                 <?php esc_html_e('If you have a moment, please share why you are deactivating <b>Popup Builder</b>', 'popup-builder')?>:
     107                                <?php esc_html_e('If you have a moment, please share why you are deactivating >:
    108108                            </h4>
    109109                            <p class="sgpb-feedback-error-message sg-hide-element"><?php esc_html_e('Please, select an option.', 'popup-builder')?></p>

  • popup-builder/trunk/com/classes/Filters.php

    r3085485 r3115823  
    234234    public function popupContentLoadToPage($content, $popupId)
    235235    {
     236
    236237        $customScripts = AdminHelper::renderCustomScripts($popupId);
     238
     239
     240
     241
     242
    237243        $content .= $customScripts;
    238244
    … …  
    872878        $cssFiles[] = array('folderUrl' => SG_POPUP_CSS_URL, 'filename' => 'select2.min.css', 'dep' => array(), 'ver' => SGPB_POPUP_VERSION, 'inFooter' => false);
    873879        $cssFiles[] = array('folderUrl' => SG_POPUP_CSS_URL, 'filename' => 'popupAdminStyles.css', 'dep' => array(), 'ver' => SGPB_POPUP_VERSION, 'inFooter' => false);
    874         $cssFiles[] = array('folderUrl' => SG_POPUP_CSS_URL, 'filename' => 'newDesignFromBuild.css', 'dep' => array(), 'ver' => rand(1, 10000), 'inFooter' => false);
     880        $cssFiles[] = array('folderUrl' => SG_POPUP_CSS_URL, 'filename' => 'newDesignFromBuild.css', 'dep' => array(), 'ver' => rand(1, 10000), 'inFooter' => false);
    875881
    876882        return $cssFiles;

  • popup-builder/trunk/com/classes/Installer.php

    r3085485 r3115823  
    1313
    1414        foreach ($tables as $table) {
    15             $createTable = 'CREATE TABLE IF NOT EXISTS ';
    16             $createTable .= $wpdb->prefix.$blogId;
    17             $createTable .= $table;
    18             $wpdb->query($createTable);
     15            $pbsgTableName = $wpdb->prefix.$blogId.$table;         
     16            $wpdb->query( $wpdb->prepare( "CREATE TABLE IF NOT EXISTS $pbsgTableName") );
    1917        }
    2018
    … …  
    143141        delete_option('sgpb-enable-debug-mode');
    144142        delete_option('sgpb-disable-analytics-general');
     143
    145144
    146145        // Trigger popup data delete action
    … …  
    185184    {
    186185        global $wpdb;
    187 
    188         $customTermsQuery = 'SELECT t.name, t.term_id
    189             FROM '.$wpdb->terms . ' AS t
    190             INNER JOIN ' . $wpdb->term_taxonomy . ' AS tt
    191             ON t.term_id = tt.term_id
    192             WHERE tt.taxonomy =  %s';
    193 
    194         $terms = $wpdb->get_results( $wpdb->prepare( $customTermsQuery , esc_sql($taxonomy) ) );
     186       
     187        $terms = $wpdb->get_results( $wpdb->prepare( "SELECT t.name, t.term_id  FROM $wpdb->terms AS t  INNER JOIN $wpdb->term_taxonomy AS tt ON t.term_id = tt.term_id WHERE tt.taxonomy =  %s" , esc_sql($taxonomy) ) );
    195188
    196189        $terms = apply_filters('sgpbDeleteTerms', $terms);
    … …  
    249242
    250243        foreach ($allTableNames as $tableName) {
    251             $deleteTable = $wpdb->prefix.$blogId.$tableName;
    252             $deleteTableSql = 'DROP TABLE '.$deleteTable;
    253 
    254             $wpdb->query($deleteTableSql);
     244            $deleteTable = $wpdb->prefix.$blogId.$tableName;           
     245            $wpdb->query( "DROP TABLE $deleteTable" );
    255246        }
    256247

  • popup-builder/trunk/com/classes/RegisterPostType.php

    r3085485 r3115823  
    4141
    4242        return true;
     43
    4344    }
    4445
    … …  
    252253    public function sgpbPopupTypeMainViewMetaboxes($metaboxes)
    253254    {
    254         $popupTypeObj = $this->getPopupTypeObj();
     255       
     256        $popupTypeObj = $this->getPopupTypeObj();
     257       
     258       
     259       
    255260        $optionsView = $popupTypeObj->getPopupTypeMainView();
    256261        $typeView = array();

  • popup-builder/trunk/com/classes/ScriptsLoader.php

    r3085485 r3115823  
    7373        $popupOptions = array_merge($popupOptions, $extraOptions);
    7474        $popupOptions['sgpbConditions'] = apply_filters('sgpbRenderCondtions',  $popupCondition);
     75
     76
     77
     78
     79
     80
     81
     82
     83
     84
     85
     86
     87
     88
    7589        // JSON_UNESCAPED_UNICODE does not exist since 5.4.0
    7690        if (PHP_VERSION < '5.4.0'){

  • popup-builder/trunk/com/classes/popups/FblikePopup.php

    r3085485 r3115823  
    9090            <div id="fb-root"></div>
    9191            <?php echo wp_kses_post($buttonConfig); ?>
    92             <?php echo $scripts; ?>
     92            <?php
     93                echo $scripts; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
     94            ?>
    9395        </div>
    9496        <?php

  • popup-builder/trunk/com/classes/popups/SGPopup.php

    r3096000 r3115823  
    17711771        global $wpdb;
    17721772        // 7, 12, 13 => exclude close, subscription success, contact success events
    1773         $stmt = $wpdb->prepare('SELECT COUNT(*) FROM '.$wpdb->prefix.'sgpb_analytics WHERE target_id = %d AND event_id NOT IN (7, 12, 13)', $popupId);
    1774         $popupAnalyticsData = $wpdb->get_var($stmt);
     1773        $;
     1774        $popupAnalyticsData = $wpdb->get_var();
    17751775        return $popupAnalyticsData;
    17761776    }
    … …  
    17791779    {
    17801780        global $wpdb;
    1781         $prepareSql = $wpdb->prepare('DELETE FROM '.$wpdb->prefix.'sgpb_analytics WHERE target_id = %d AND  event_id NOT IN (7, 12, 13) LIMIT 100', $popupId);
    1782         $wpdb->query($prepareSql);
     1781        $;
     1782        $wpdb->query();
    17831783    }
    17841784

  • popup-builder/trunk/com/classes/popups/SubscriptionPopup.php

    r3085485 r3115823  
    439439    private function getSubscriptionValidationScripts($validateObj)
    440440    {       
    441         wp_register_script( 'sgpb-subscriptionpopup-js-footer', '', array("jquery"), '', true );
     441        wp_register_script( 'sgpb-subscriptionpopup-js-footer', '', array("jquery"), , true );
    442442        wp_enqueue_script( 'sgpb-subscriptionpopup-js-footer'  );
    443443        wp_add_inline_script( 'sgpb-subscriptionpopup-js-footer', $validateObj);
    … …  
    637637    {
    638638        global $wpdb;
    639         $count = $wpdb->get_var('SELECT COUNT(*) FROM '.$wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME);
     639        $subscribersTableName = $wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME;
     640        $count = $wpdb->get_var("SELECT COUNT(*) FROM $subscribersTableName");
    640641
    641642        return (int)$count;
    … …  
    674675        $subsDateList = array();
    675676        global $wpdb;
    676        
    677         $subscriptionPopups = $wpdb->get_results( $wpdb->prepare('SELECT id, cDate FROM %i', $wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME), ARRAY_A);
     677       
     678        $subscriptionPopups = $wpdb->get_results( , ARRAY_A);
    678679
    679680        foreach ($subscriptionPopups as $subscriptionForm) {

  • popup-builder/trunk/com/config/config-free.php

    r3096000 r3115823  
    44}
    55
    6 define('SGPB_POPUP_VERSION', '4.3.2');
     6define('SGPB_POPUP_VERSION', '4.3.');
    77define('SGPB_POPUP_PKG', SGPB_POPUP_PKG_FREE);
    88define('SGPB_POPUP_BUILDER_BASENAME', 'popupbuilder-platinum/popup-builder.php');

  • popup-builder/trunk/com/config/config-gold.php

    r3096000 r3115823  
    77define('SGPB_ITEM_ID', 84579);
    88
    9 define('SGPB_POPUP_VERSION', '4.3.2');
     9define('SGPB_POPUP_VERSION', '4.3.');
    1010// for popup builder license version
    1111define('SGPB_VERSION_POPUP_BUILDER', SGPB_POPUP_VERSION);

  • popup-builder/trunk/com/config/config-platinum.php

    r3096000 r3115823  
    77define('SGPB_ITEM_ID', 84595);
    88
    9 define('SGPB_POPUP_VERSION', '4.3.2');
     9define('SGPB_POPUP_VERSION', '4.3.');
    1010// for popup builder license version
    1111define('SGPB_VERSION_POPUP_BUILDER', SGPB_POPUP_VERSION);

  • popup-builder/trunk/com/config/config-silver.php

    r3096000 r3115823  
    77define('SGPB_ITEM_ID', 4146);
    88
    9 define('SGPB_POPUP_VERSION', '4.3.2');
     9define('SGPB_POPUP_VERSION', '4.3.');
    1010// for popup builder license version
    1111define('SGPB_VERSION_POPUP_BUILDER', SGPB_POPUP_VERSION);

  • popup-builder/trunk/com/config/configPackage.php

    r3096000 r3115823  
    44}
    55
    6 define('SGPB_POPUP_VERSION', '4.3.2');
     6define('SGPB_POPUP_VERSION', '4.3.');
    77define('SGPB_POPUP_PKG', SGPB_POPUP_PKG_FREE);
    88define('SGPB_POPUP_BUILDER_BASENAME', 'popupbuilder-platinum/popup-builder.php');

  • popup-builder/trunk/com/helpers/AdminHelper.php

    r3096000 r3115823  
    11<?php
    22namespace sgpb;
     3
    34use \DateTime;
    45use \DateTimeZone;
    … …  
    325326    {
    326327        global $wpdb;
    327 
    328         $prepareSql = $wpdb->prepare('DELETE FROM '.$wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME.' WHERE subscriptionType = %s', $popupId);
    329         $wpdb->query($prepareSql);
     328        $subscribersTableName = $wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME;
     329        $wpdb->query( $wpdb->prepare("DELETE FROM $subscribersTableName WHERE subscriptionType = %s", $popupId) );
    330330    }
    331331
    … …  
    381381        if ($searchQuery != '') {
    382382            $query .= " WHERE $searchQuery";
    383         }       
     383        }
     384        // phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared -- No applicable variables for this query.
    384385        return $wpdb->prepare( $query, $array_mapping_search );
    385386    }
    … …  
    881882            $popup = $params['popup'];
    882883        }
    883 
    884         $prepareSql = $wpdb->prepare('SELECT id FROM '.$wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME.' WHERE email = %s && subscriptionType = %s', $email, $popup);
    885         $res = $wpdb->get_row($prepareSql, ARRAY_A);
     884        $subscribersTableName = $wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME;
     885        $res = $wpdb->get_row( $wpdb->prepare("SELECT id FROM $subscribersTableName WHERE email = %s && subscriptionType = %s", $email, $popup), ARRAY_A);
    886886        if (!isset($res['id'])) {
    887887            $noSubscriber = false;
    … …  
    925925        // send email to admin about user unsubscription
    926926        self::sendEmailAboutUnsubscribe($params);
    927 
    928         $prepareSql = $wpdb->prepare('UPDATE '.$wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME.' SET unsubscribed = 1 WHERE id = %s ', $params['subscriberId']);
    929         $wpdb->query($prepareSql);
     927        $subscribersTableName = $wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME;
     928        $wpdb->query( $wpdb->prepare("UPDATE $subscribersTableName SET unsubscribed = 1 WHERE id = %s ", $params['subscriberId']) );
    930929        /* translators: Home page URL */
    931930        printf( '<span>%1$s <a href="%2$s">click here</a> %3$s</span>' ,
    … …  
    962961    {
    963962        global $wpdb;
    964 
    965         $sql = 'ALTER TABLE '.$wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME.' ADD COLUMN unsubscribed INT NOT NULL DEFAULT 0 ';
    966         $wpdb->query($sql);
     963        $subscribersTableName = $wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME;
     964        $wpdb->query( "ALTER TABLE $subscribersTableName ADD COLUMN unsubscribed INT NOT NULL DEFAULT 0 " );
    967965    }
    968966
    … …  
    11451143        global $wpdb;
    11461144
    1147         $query = $wpdb->prepare('SELECT table_name, create_time FROM information_schema.tables WHERE table_schema=%s AND table_name=%s', DB_NAME, $wpdb->prefix.'sgpb_subscribers');
    1148         $results = $wpdb->get_results($query, ARRAY_A);
     1145        $results = $wpdb->get_results( $wpdb->prepare('SELECT table_name, create_time FROM information_schema.tables WHERE table_schema=%s AND table_name=%s', DB_NAME, $wpdb->prefix.'sgpb_subscribers'), ARRAY_A);
    11491146        if (empty($results)) {
    11501147            return 0;
    … …  
    14011398        global $wpdb;
    14021399        $subscriber = array();
    1403 
    1404         $prepareSql = $wpdb->prepare('SELECT * FROM '.$wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME.' WHERE email = %s AND subscriptionType = %d ', $subscriberEmail, $list);
    1405         $subscriber = $wpdb->get_row($prepareSql, ARRAY_A);
    1406         if (!$list) {
    1407             $prepareSql = $wpdb->prepare('SELECT * FROM '.$wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME.' WHERE email = %s ', $subscriberEmail);
    1408             $subscriber = $wpdb->get_results($prepareSql, ARRAY_A);
     1400        $subscribersTableName = $wpdb->prefix.SGPB_SUBSCRIBERS_TABLE_NAME;
     1401        $subscriber = $wpdb->get_row( $wpdb->prepare("SELECT * FROM $subscribersTableName WHERE email = %s AND subscriptionType = %d ", $subscriberEmail, $list), ARRAY_A);
     1402        if (!$list) {           
     1403            $subscriber = $wpdb->get_results( $wpdb->prepare("SELECT * FROM $subscribersTableName WHERE email = %s ", $subscriberEmail), ARRAY_A);
    14091404        }
    14101405
    … …  
    19791974    public static function userCanAccessTo()
    19801975    {
    1981         // if this is not admin side screen we don't need to check roles and capabilities
    1982         if (!is_admin()) {
    1983             return true;
    1984         }
    1985 
     1976       
    19861977        $allow = false;
    19871978
    … …  
    20632054
    20642055        global $wpdb;
    2065         $getAllDataSql = $wpdb->prepare('SELECT id FROM '.$wpdb->prefix.'posts WHERE post_type = %s', SG_POPUP_POST_TYPE);
    2066         $popupsId = $wpdb->get_results($getAllDataSql, ARRAY_A);
     2056        $
     2057        $popupsId = $wpdb->get_results(, ARRAY_A);
    20672058        if (empty($popupsId)) {
    20682059            return true;
    … …  
    24032394        return $allowedPostTags;
    24042395    }
     2396
     2397
     2398
     2399
     2400
     2401
     2402
     2403
     2404
     2405
     2406
     2407
     2408
     2409
     2410
     2411
     2412
     2413
     2414
     2415
     2416
     2417
     2418
     2419
     2420
     2421
     2422
     2423
     2424
     2425
     2426
     2427
     2428
     2429
     2430
     2431
     2432
     2433
     2434
     2435
     2436
     2437
     2438
     2439
     2440
     2441
     2442
     2443
     2444
     2445
     2446
     2447
     2448
     2449
     2450
     2451
     2452
     2453
     2454
     2455
     2456
     2457
     2458
     2459
     2460
     2461
     2462
     2463
     2464
     2465
     2466
     2467
     2468
     2469
     2470
     2471
     2472
     2473
     2474
     2475
     2476
     2477
     2478
     2479
     2480
     2481
     2482
     2483
     2484
     2485
     2486
     2487
     2488
     2489
     2490
     2491
     2492
     2493
     2494
     2495
     2496
     2497
     2498
     2499
     2500
     2501
     2502
     2503
     2504
     2505
     2506
     2507
     2508
     2509
     2510
     2511
     2512
     2513
     2514
     2515
     2516
     2517
     2518
     2519
     2520
     2521
     2522
     2523
     2524
     2525
     2526
     2527
     2528
     2529
     2530
     2531
     2532
     2533
     2534
     2535
     2536
     2537
     2538
     2539
     2540
     2541
     2542
     2543
     2544
     2545
    24052546}

  • popup-builder/trunk/com/helpers/Functions.php

    r3085485 r3115823  
    187187        global $wpdb;
    188188        $dbName = $wpdb->dbname;   
    189         $engine = 'InnoDB';
    190         $engineCheckSql = "SELECT ENGINE FROM information_schema.TABLES WHERE TABLE_SCHEMA = %s";
    191         $result = $wpdb->get_results( $wpdb->prepare( $engineCheckSql , $dbName), ARRAY_A);
     189        $engine = 'InnoDB';     
     190        $result = $wpdb->get_results( $wpdb->prepare( "SELECT ENGINE FROM information_schema.TABLES WHERE TABLE_SCHEMA = %s" , $dbName), ARRAY_A);
    192191        if (!empty($result)) {
    193             $engineCheckSql = "SHOW TABLE STATUS WHERE Name = '".$wpdb->prefix."users' AND Engine = %s";
    194             $result = $wpdb->get_results( $wpdb->prepare( $engineCheckSql, 'MyISAM' ), ARRAY_A);
     192            $
     193            $result = $wpdb->get_results( $wpdb->prepare( , 'MyISAM' ), ARRAY_A);
    195194            if (isset($result[0]['Engine']) && $result[0]['Engine'] == 'MyISAM') {
    196195                $engine = 'MyISAM';

  • popup-builder/trunk/com/libs/ListTable.php

    r3085485 r3115823  
    13261326            )
    13271327        );
    1328         wp_register_script( 'sgpb-listtable-js-footer', '', array("jquery"), '', true );
     1328        wp_register_script( 'sgpb-listtable-js-footer', '', array("jquery"), , true );
    13291329        wp_enqueue_script( 'sgpb-listtable-js-footer'  );
    13301330        wp_add_inline_script( 'sgpb-listtable-js-footer', printf( "list_args = %s;", wp_json_encode( $args ) ));       

  • popup-builder/trunk/com/libs/Table.php

    r3096000 r3115823  
    9797        $table = $this->tablename;
    9898       
    99         $columns_name_placeholders = implode( ', ', array_fill( 0, count( $this->columns ), '%i' ) );       
    100          
    101         $query = $wpdb->prepare( "SELECT $table.$columns_name_placeholders FROM `$table`", str_replace( $table.'.', '', $this->columns ) );     
     99        $columns_name_placeholders = implode( ', ', array_fill( 0, count( $this->columns ), '%i' ) );   
    102100       
    103         $this->customizeQuery($query);     
    104        
    105         $totalItems = count( $wpdb->get_results( $query ) ); //return the total number of affected rows
     101        $totalItems = count( $wpdb->get_results( $wpdb->prepare( "SELECT $table.$columns_name_placeholders FROM `$table`", str_replace( $table.'.', '', $this->columns ) ) ) ); //return the total number of affected rows
    106102       
    107103        if ($this->previewPopup) {
    … …  
    146142        $sortable = $this->get_sortable_columns();
    147143        $this->_column_headers = array($columns, $hidden, $sortable);
     144
    148145        $items = $wpdb->get_results( $query, ARRAY_N);
    149146        /*Remove popup data when its class does not exist.*/

  • popup-builder/trunk/com/libs/parsers.php

    r3085485 r3115823  
    6666            $old_value = libxml_disable_entity_loader( true );
    6767        }
    68         $success = $dom->loadXML( file_get_contents( $file ) );
     68       
     69        $success = $dom->loadXML( file_get_contents( $file ) );// phpcs:ignore WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents
    6970        if ( ! is_null( $old_value ) ) {
    7071            libxml_disable_entity_loader( $old_value );
    … …  
    308309        xml_set_character_data_handler( $xml, 'cdata' );
    309310        xml_set_element_handler( $xml, 'tag_open', 'tag_close' );
    310 
    311         if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {
     311       
     312        if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {
    312313            $current_line = xml_get_current_line_number( $xml );
    313314            $current_column = xml_get_current_column_number( $xml );
    … …  
    701702        if ( $this->has_gzip )
    702703            return gzopen( $filename, $mode );
    703         return fopen( $filename, $mode );
     704        return fopen( $filename, $mode );
    704705    }
    705706
    … …  
    719720        if ( $this->has_gzip )
    720721            return gzclose( $fp );
    721         return fclose( $fp );
     722        return fclose( $fp );
    722723    }
    723724}

  • popup-builder/trunk/popup-builder.php

    r3096000 r3115823  
    44* Plugin URI: https://popup-builder.com
    55* Description: The most complete popup plugin. Html, image, iframe, shortcode, video and many other popup types. Manage popup dimensions, effects, themes and more.
    6 * Version: 4.3.2
     6* Version: 4.3.
    77* Author: Looking Forward Software Incorporated.
    88* Author URI: https://popup-builder.com

  • popup-builder/trunk/public/views/allMetaboxesView.php

    r3085485 r3115823  
    3030</div>
    3131<?php
    32     wp_register_script( 'sgpb-allmetaboxesview-js-footer', '', array("jquery"), '', true );
     32    wp_register_script( 'sgpb-allmetaboxesview-js-footer', '', array("jquery"), , true );
    3333    wp_enqueue_script( 'sgpb-allmetaboxesview-js-footer'  );
    3434    wp_add_inline_script( 'sgpb-allmetaboxesview-js-footer', "let hash = window.location.hash.replace(/^#/,'');

  • popup-builder/trunk/public/views/conditionsView.php

    r3085485 r3115823  
    6868    </div>
    6969    <?php
    70     wp_register_script( 'sgpb-conditions-views-js-footer', '', array("jquery"), '', true );
     70    wp_register_script( 'sgpb-conditions-views-js-footer', '', array("jquery"), , true );
    7171    wp_enqueue_script( 'sgpb-conditions-views-js-footer'  );
    7272    wp_add_inline_script( 'sgpb-conditions-views-js-footer', "jQuery('.sgpb-pro-conditions-pro-url-show-js').click(function() {

  • popup-builder/trunk/public/views/customEditor.php

    r3085485 r3115823  
    44    exit;
    55}
     6
    67$popupId = !empty($_GET['post']) ? (int)sanitize_text_field($_GET['post']) : 0;
    78$editorModeJs = htmlentities('text/javascript');
    … …  
    3435
    3536            <?php foreach ($jsDefaultData['helperText'] as $key => $value) {?>
    36                     <div class="formItem"><span class="formItem__title"><?php echo wp_kses($value, 'post'); ?></span>
    37                         <textarea   class="wp-editor-area formItem__textarea sgpb-margin-top-20"
    38                                     data-attr-event="<?php echo esc_attr($key); ?>"
     37                    <div class="formItem">
     38                        <span class="formItem__title"><?php echo wp_kses($value, 'post'); ?></span>
     39                        <?php                       
     40                        if (!empty($savedData['js']['sgpb-'.$key])) {
     41                            if( AdminHelper::sgpbScanCustomJsStr( $savedData['js']['sgpb-'.$key] ) == true )
     42                            {
     43                                ?>
     44                                <span class="notice notice-warning">We have detected this snippet that is insecure and may compromise the security of your site. Please remove it and save your Popup data again.</span>
     45                                <?php
     46                            }   
     47                        }
     48                        ?>                     
     49                        <textarea class="wp-editor-area formItem__textarea sgpb-margin-top-20"
     50                                    data-attr-event="<?php echo esc_attr($key);?>"
    3951                                    placeholder=" #... type your code"
    4052                                    mode="<?php echo esc_attr($editorModeJs); ?>"
    … …  
    4254                                    if (!empty($savedData['js']['sgpb-'.$key])) {
    4355                                        echo esc_html($savedData['js']['sgpb-'.$key]);
    44                                         }
    45                                     ?></textarea>
     56                                    }                                   
     57                                    ?>
     58                        </textarea>
     59                        <?php
     60                        //Ted-fix : we stopped the render custom js code into front-end page to fix HACKER attack
     61                       
     62                        /* 
     63                        if( AdminHelper::getOption('sgpb-disable-custom-js') )
     64                        {
     65                            ?>
     66                            <span class="notice notice-warning">We disabled this option for this version to remove hacker's attack code.</span>
     67                            <textarea   class="wp-editor-area formItem__textarea sgpb-margin-top-20"
     68                                        data-attr-event="<?php echo esc_attr($key);?>"
     69                                        placeholder=" #... type your code"
     70                                        mode="<?php echo esc_attr($editorModeJs); ?>"
     71                                        name="sgpb-<?php echo esc_attr($key); ?>" readonly><?php
     72                                        if (!empty($savedData['js']['sgpb-'.$key])) {
     73                                            echo esc_html($savedData['js']['sgpb-'.$key]);
     74                                        }                                   
     75                                        ?>
     76                            </textarea>
     77                            <?php
     78                        }
     79                        else
     80                        {
     81                            ?>
     82                            <textarea   class="wp-editor-area formItem__textarea sgpb-margin-top-20"
     83                                        data-attr-event="<?php echo esc_attr($key);?>"
     84                                        placeholder=" #... type your code"
     85                                        mode="<?php echo esc_attr($editorModeJs); ?>"
     86                                        name="sgpb-<?php echo esc_attr($key); ?>"><?php
     87                                        if (!empty($savedData['js']['sgpb-'.$key])) {
     88                                            echo esc_html($savedData['js']['sgpb-'.$key]);
     89                                        }                                   
     90                                        ?>
     91                            </textarea>
     92                            <?php
     93                        } */
     94                        ?>
    4695                    </div>
    4796            <?php } ?>

  • popup-builder/trunk/public/views/debugReport.php

    r3085485 r3115823  
    99?>
    1010<?php
    11     wp_register_script( 'sgpb-debugReport-js-footer', '', array("jquery"), '', true );
     11    wp_register_script( 'sgpb-debugReport-js-footer', '', array("jquery"), , true );
    1212    wp_enqueue_script( 'sgpb-debugReport-js-footer'  );
    1313    wp_add_inline_script( 'sgpb-debugReport-js-footer', "function debugModeInit()

  • popup-builder/trunk/public/views/mainActionButtons.php

    r3085485 r3115823  
    3636        display: none !important;
    3737    }
     38
     39
     40
     41
    3842</style>

  • popup-builder/trunk/public/views/popupTypes.php

    r3085485 r3115823  
    7373</div>
    7474<?php
    75     wp_register_script( 'sgpb-popup-types-js-footer', '', array("jquery"), '', true );
     75    wp_register_script( 'sgpb-popup-types-js-footer', '', array("jquery"), , true );
    7676    wp_enqueue_script( 'sgpb-popup-types-js-footer'  );
    7777    wp_add_inline_script( 'sgpb-popup-types-js-footer', "jQuery(document).ready(function() {

  • popup-builder/trunk/public/views/settings.php

    r3085485 r3115823  
    1616    $enableDebugMode = 'checked';
    1717}
     18
     19
     20
     21
    1822
    1923$systemInfo = AdminHelper::getSystemInfoText();
    2024$userSavedRoles = get_option('sgpb-user-roles');
     25
     26
     27
     28
     29
    2130?>
    2231
    … …  
    3241                        <input type="checkbox" name="sgpb-enable-debug-mode" class="sgpb-onOffSwitch-checkbox" id="sgpb-enable-debug-mode" <?php echo esc_attr($enableDebugMode); ?>>
    3342                        <label class="sgpb-onOffSwitch__label" for="sgpb-enable-debug-mode">
     43
     44
     45
     46
     47
     48
     49
     50
     51
     52
    3453                            <span class="sgpb-onOffSwitch-inner"></span>
    3554                            <span class="sgpb-onOffSwitch-switch"></span>

  • popup-builder/trunk/readme.txt

    r3096000 r3115823  
    77Tags: popup, pop up, wordpress popup, popup maker, exit popup, popup builder, wordpress popup plugin
    88Requires at least: 4.2
    9 Tested up to: 6.4
     9Tested up to: 6.
    1010Requires PHP: 5.3.3
    11 Stable tag: 4.3.2
     11Stable tag: 4.3.
    1212License: GPLv2 or later
    1313License URI: http://www.gnu.org/licenses/gpl-2.0.html
    … …  
    147147== Changelog ==
    148148
     149
     150
     151
     152
     153
    149154= Version 4.3.2 =
    150155* Fix ulnerabilities issue of Missing Authorization and Nonce Exposure.
Note: See TracChangeset for help on using the changeset viewer.