', '' ) . '
' . sprintf( __( 'Please check more %1$shere%2$s', 'booking' ), '', '.' ) // FixIn: 8.8.3.6. ) ); // Its prevent of showing '0' et the end of request. } } make_bk_action( 'wpbc_ajax_flex_timeline' ); wp_die( '' ); // Its prevent of showing '0' et the end of request. } function wpbc_ajax_CALCULATE_THE_COST() { if ( wpbc_is_use_nonce_at_front_end() ) { // FixIn: 10.1.1.2. // phpcs:ignore WordPress.Security.NonceVerification.Missing, WordPress.Security.ValidatedSanitizedInput.InputNotValidated, WordPress.Security.NonceVerification.Recommended, WordPress.Security.ValidatedSanitizedInput.MissingUnslash, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized if ( ! wpbc_check_nonce_in_admin_panel( $_POST['action'] ) ) { return false;// FixIn: 7.2.1.10. } } make_bk_action( 'wpdev_ajax_show_cost' ); } // FixIn: 9.6.3.5. function wpbc_ajax_UPDATE_APPROVE() { global $wpdb; if ( ! wpbc_check_nonce_in_admin_panel() ) { return false; // FixIn: 7.2.1.10. } // phpcs:ignore WordPress.Security.NonceVerification.Missing, WordPress.Security.ValidatedSanitizedInput.InputNotValidated, WordPress.Security.NonceVerification.Recommended, WordPress.Security.ValidatedSanitizedInput.InputNotValidated make_bk_action( 'check_multiuser_params_for_client_side_by_user_id', sanitize_text_field( wp_unslash( $_POST['user_id'] ) ) ); // Approve or Reject? // phpcs:ignore WordPress.Security.NonceVerification.Missing, WordPress.Security.ValidatedSanitizedInput.InputNotValidated $is_approve_or_pending = ( 1 == $_POST["is_approve_or_pending"] ) ? '1' : '0'; $booking_id = isset( $_POST['booking_id'] ) ? sanitize_text_field( wp_unslash( $_POST['booking_id'] ) ) : ''; /* phpcs:ignore WordPress.Security.NonceVerification.Missing, WordPress.Security.NonceVerification.Recommended */ /* FixIn: sanitize_unslash */ // Booking ID. $approved_id = explode( '|', $booking_id ); $approved_id = wpbc_clean_digit_or_csd( $approved_id ); // FixIn: 8.4.5.15. $denyreason = isset( $_POST['denyreason'] ) ? sanitize_textarea_field( wp_unslash( $_POST['denyreason'] ) ) : ''; /* phpcs:ignore WordPress.Security.NonceVerification.Missing, WordPress.Security.NonceVerification.Recommended */ /* FixIn: sanitize_unslash */ $is_send_emeils = isset( $_POST['is_send_emeils'] ) ? sanitize_text_field( wp_unslash( $_POST['is_send_emeils'] ) ) : ''; /* phpcs:ignore WordPress.Security.NonceVerification.Missing, WordPress.Security.NonceVerification.Recommended */ /* FixIn: sanitize_unslash */ if ( ( count( $approved_id ) > 0 ) && ( false !== $approved_id ) ) { $approved_id_str = join( ',', $approved_id ); $approved_id_str = wpbc_clean_digit_or_csd( $approved_id_str ); // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.NotPrepared, PluginCheck.Security.DirectDB.UnescapedDBParameter, WordPress.DB.PreparedSQL.InterpolatedNotPrepared if ( false === $wpdb->query( $wpdb->prepare( "UPDATE {$wpdb->prefix}bookingdates SET approved = %s WHERE booking_id IN ( {$approved_id_str} )", $is_approve_or_pending ) ) ) { ?> first_name . ' ' . $curr_user->last_name . ' (' . $curr_user->user_email . ')'; // get_user_meta( $curr_user->ID, 'nickname' ). wpbc_db__add_log_info( explode(',',$approved_id_str), ( ( $is_approve_or_pending == '1' ) ? __( 'Approved by:', 'booking' ) : __( 'Declined by:', 'booking' ) ) . ' ' . $user_info ); wpbc_db_update_number_new_bookings( explode(',', $approved_id_str) ); do_action( 'wpbc_booking_approved', $approved_id_str, $is_approve_or_pending ); // FixIn: 8.7.6.1. if ( $is_approve_or_pending == '1' ) { if ( ! empty( $is_send_emeils ) ) // FixIn: 7.0.1.5. { wpbc_send_email_approved( $approved_id_str, $is_send_emeils, $denyreason ); } $all_bk_id_what_canceled = apply_bk_filter( 'cancel_pending_same_resource_bookings_for_specific_dates', false, $approved_id_str ); } else { if ( ! empty( $is_send_emeils ) ) { wpbc_send_email_deny( $approved_id_str, $is_send_emeils, $denyreason ); } } ?> 0 ) && ( $approved_id != false ) && ( $approved_id != '' ) ) { $approved_id_str = join( ',', $approved_id); $approved_id_str = wpbc_clean_like_string_for_db( $approved_id_str ); do_action( 'wpbc_booking_trash', $booking_id, $is_trash ); // FixIn: .8.7.6.2. if ( $is_trash ) { if ( ! empty( $is_send_emeils ) ) { // FixIn: 8.1.3.35. wpbc_send_email_trash( $approved_id_str, $is_send_emeils, $denyreason ); } } else { if ( ! empty( $is_send_emeils ) ) { // FixIn: 8.1.3.35. // wpbc_send_email_approved($approved_id_str, $is_send_emeils,$denyreason); // FixIn: 8.1.2.7. } } // FixIn: 10.12.1.5. // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.NotPrepared, PluginCheck.Security.DirectDB.UnescapedDBParameter, WordPress.DB.PreparedSQL.InterpolatedNotPrepared if ( false === $wpdb->query( "UPDATE {$wpdb->prefix}booking SET trash = {$is_trash} WHERE booking_id IN ({$approved_id_str})" ) ) { ?> 0) && ($approved_id !=false) && ($approved_id !='')) { $approved_id_str = join( ',', $approved_id); $approved_id_str = wpbc_clean_like_string_for_db( $approved_id_str ); do_action( 'wpbc_booking_delete', $approved_id_str ); // FixIn: 8.7.6.3. if ( ! empty( $is_send_emeils ) ) { // FixIn: 8.1.3.35. wpbc_send_email_deleted( $approved_id_str, $is_send_emeils, $denyreason ); } // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.NotPrepared, PluginCheck.Security.DirectDB.UnescapedDBParameter, WordPress.DB.PreparedSQL.InterpolatedNotPrepared if ( false === $wpdb->query( "DELETE FROM {$wpdb->prefix}bookingdates WHERE booking_id IN ({$approved_id_str})" ) ) { ?> query( "DELETE FROM {$wpdb->prefix}booking WHERE booking_id IN ({$approved_id_str})" ) ) { ?> add_booking_calendar_options [data_value] => calendar_months_count=1&calendar_months_num_in_1_row=1&calendar_width=500px&calendar_cell_height */ // "&" was set by jQuery.param( data_params ) in client side. $my_user_id = isset( $_POST['user_id'] ) ? intval( $_POST['user_id'] ) : ''; /* phpcs:ignore WordPress.Security.NonceVerification.Missing */ $my_data_name = isset( $_POST['data_name'] ) ? sanitize_textarea_field( wp_unslash( $_POST['data_name'] ) ) : ''; /* phpcs:ignore WordPress.Security.NonceVerification.Missing */ $my_data_value = isset( $_POST['data_value'] ) ? sanitize_textarea_field( wp_unslash( $_POST['data_value'] ) ) : ''; /* phpcs:ignore WordPress.Security.NonceVerification.Missing */ $post_param = explode( '&', $my_data_value ); $data_to_save = array(); foreach ( $post_param as $param ) { $param_data = explode( '=', $param ); $data_to_save[ $param_data[0] ] = ( isset( $param_data[1] ) ) ? esc_attr( $param_data[1] ) : ''; } /* Exmaple: Array ( [calendar_months_count] => 1 [calendar_months_num_in_1_row] => 1 [calendar_width] => 500px [calendar_cell_height] => ) */ // Save Custom User Data. update_user_option( $my_user_id, 'booking_custom_' . $my_data_name, serialize( $data_to_save ) ); ?> 'both' //FixIn: Flex TimeLine 1.0 ,'CALCULATE_THE_COST' => 'both' ,'UPDATE_APPROVE' => 'admin' ,'DELETE_APPROVE' => 'admin' ,'DELETE_BY_VISITOR' => 'both' ,'TRASH_RESTORE' => 'admin' // FixIn: 6.1.1.10. ,'DELETE_BK_FORM' => 'admin' ,'USER_SAVE_WINDOW_STATE' => 'admin' ,'USER_SAVE_CUSTOM_DATA' => 'admin' ,'BOOKING_SEARCH' => 'both' ,'CHECK_BK_NEWS' => 'admin' ,'CHECK_BK_FEATURES' => 'admin' ,'CHECK_BK_VERSION' => 'admin' , 'WPBC_IMPORT_ICS_URL' => 'admin' //FixIn: 7.3 ); $wpbc_booking_actions_list = apply_filters( 'wpbc_ajax_action_list', $wpbc_booking_actions_list ); foreach ( $wpbc_booking_actions_list as $wpbc_action_name => $wpbc_action_where) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended, WordPress.Security.NonceVerification.Missing if ( ( isset($_POST['action']) ) && ( $_POST['action'] == $wpbc_action_name ) ){ if ( ( $wpbc_action_where == 'admin' ) || ( $wpbc_action_where == 'both' ) ) add_action( 'wp_ajax_' . $wpbc_action_name, 'wpbc_ajax_' . $wpbc_action_name); // Admin & Client (logged in usres) if ( ( $wpbc_action_where == 'both' ) || ( $wpbc_action_where == 'client' ) ) add_action( 'wp_ajax_nopriv_' . $wpbc_action_name, 'wpbc_ajax_' . $wpbc_action_name); // Client (not logged in) } } }