| @@ -902,9 +902,15 @@ | ||
| 902 | 902 | $replace[ 'check_in_only_date' ] = $my_check_in_onlydate; |
| 903 | 903 | $replace[ 'check_out_only_date' ] = $my_check_out_onlydate; |
| 904 | 904 | |
| 905 | 905 | $replace[ 'check_out_plus1day'] = $my_check_out_plus1day; // FixIn: 6.0.1.11. |
| 906 | - $replace[ 'dates_count' ] = count( $my_dates4emeil_check_in_out ); | |
| 906 | + | |
| 907 | + $replace['dates_count'] = count( $my_dates4emeil_check_in_out ); | |
| 908 | + $replace['days_count'] = intval( $replace['dates_count'] ); // FixIn: 10.15.1.3. | |
| 909 | + $replace['nights_count'] = ( $replace['days_count'] > 1 ) ? intval( $replace['days_count'] - 1 ) : 1; | |
| 910 | + $replace['days_count_plus1day'] = intval( $replace['days_count'] + 1 ); | |
| 911 | + | |
| 912 | + | |
| 907 | 913 | $replace['cost'] = $booking_cost; |
| 908 | 914 | $replace['cost_digits_only'] = $booking_cost_digits_only; |
| 909 | 915 | $replace[ 'siteurl' ] = htmlspecialchars_decode( '<a href="' . esc_url( home_url() ) . '">' . home_url() . '</a>' ); |
| 910 | 916 | $replace[ 'resource_title'] = wpbc_lang( $bk_title ); |
| @@ -976,9 +982,9 @@ | ||
| 976 | 982 | function wpbc_send_email_deny( $deny_id_str, $is_send_emeils, $denyreason = '' ) { |
| 977 | 983 | |
| 978 | 984 | global $wpdb; |
| 979 | 985 | $sql = "SELECT * FROM {$wpdb->prefix}booking as bk WHERE bk.booking_id IN ({$deny_id_str})"; |
| 980 | - // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.NotPrepared | |
| 986 | + // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.NotPrepared, PluginCheck.Security.DirectDB.UnescapedDBParameter | |
| 981 | 987 | $result = $wpdb->get_results( $sql ); |
| 982 | 988 | |
| 983 | 989 | foreach ( $result as $res ) { |
| 984 | 990 | |