← All changes | qcld_df_api.php +23 -29 8.6.5 → 5.2.5 View file →

		@@ -15,9 +15,9 @@
15	15	add_action('init', array($this, 'api'));
16	16	}
17	17	public function api(){
18	18
19		- if ( isset( $_GET['action'] ) && sanitize_text_field( wp_unslash( $_GET['action'] ) ) === 'qcld_dfv2_api' ) { // phpcs:ignore WordPress.Security.NonceVerification
	19	+ if(isset($_GET['action']) && $_GET['action']=='qcld_dfv2_api'){
20	20	$session_id = 'asd2342sde';
21	21	$language = get_option('qlcd_wp_chatbot_dialogflow_agent_language');
22	22	//project ID
23	23	$project_ID = get_option('qlcd_wp_chatbot_dialogflow_project_id');
		@@ -23,19 +23,19 @@
23	23	$project_ID = get_option('qlcd_wp_chatbot_dialogflow_project_id');
24	24	// Service Account Key json file
25	25	$JsonFileContents = get_option('qlcd_wp_chatbot_dialogflow_project_key');
26	26	if($project_ID==''){
27		- echo wp_json_encode(array('error'=>'Project ID is empty'));exit;
	27	+ echo json_encode(array('error'=>'Project ID is empty'));exit;
28	28	}
29	29	if($JsonFileContents==''){
30		- echo wp_json_encode(array('error'=>'Key is empty'));exit;
	30	+ echo json_encode(array('error'=>'Key is empty'));exit;
31	31	}
32		- if(!isset($_POST['dfquery']) || wp_unslash($_POST['dfquery'])==''){
33		- echo wp_json_encode(array('error'=>'Query text is not added!'));exit;
	32	+ if(!isset($_POST['dfquery']) || $_POST['dfquery']==''){
	33	+ echo json_encode(array('error'=>'Query text is not added!'));exit;
34	34	}
35		- $query = sanitize_text_field(wp_unslash($_POST['dfquery']));
36		- if(isset($_POST['sessionid']) && wp_unslash($_POST['sessionid'])!=''){
37		- $session_id = sanitize_text_field(wp_unslash($_POST['sessionid']));
	35	+ $query = sanitize_text_field($_POST['dfquery']);
	36	+ if(isset($_POST['sessionid']) && $_POST['sessionid']!=''){
	37	+ $session_id = sanitize_text_field($_POST['sessionid']);
38	38	}
39	39
40	40
41	41	if(file_exists(QCLD_wpCHATBOT_GC_DIRNAME.'/autoload.php')){
		@@ -58,19 +58,16 @@
58	58	'queryParams' => ['timeZone' => '']]
59	59	]);
60	60
61	61	$contents = $response->getBody()->getContents();
62		-
63		- echo esc_html( $contents );
64		-
65		- exit;
	62	+ echo $contents;exit;
66	63
67	64	}catch(Exception $e) {
68		- echo wp_json_encode(array('error'=>$e->getMessage()));exit;
	65	+ echo json_encode(array('error'=>$e->getMessage()));exit;
69	66	}
70	67
71	68	}else{
72		- echo wp_json_encode(array('error'=>'API client not found'));exit;
	69	+ echo json_encode(array('error'=>'API client not found'));exit;
73	70	}
74	71
75	72	}
76	73
		@@ -80,11 +77,11 @@
80	77
81	78	add_action('wp_ajax_qcld_wp_df_api_call', 'qcld_wp_df_api_call');
82	79	add_action('wp_ajax_nopriv_qcld_wp_df_api_call', 'qcld_wp_df_api_call');
83	80	function qcld_wp_df_api_call(){
84		- $nonce = sanitize_text_field(wp_unslash($_POST['nonce']));
	81	+ $nonce = sanitize_text_field($_POST['nonce']);
85	82	if ((! wp_verify_nonce($nonce,'wp_chatbot')) && ( ! wp_verify_nonce($nonce,'qcsecretbotnonceval123qc'))) {
86		- wp_send_json(array('success' => false, 'msg' => esc_html__('Failed in Security check', 'chatbot')));
	83	+ wp_send_json(array('success' => false, 'msg' => esc_html__('Failed in Security check', 'sm')));
87	84	wp_die();
88	85
89	86	}else{
90	87	$session_id = 'asd2342sde';
		@@ -93,19 +90,19 @@
93	90	$project_ID = get_option('qlcd_wp_chatbot_dialogflow_project_id');
94	91	// Service Account Key json file
95	92	$JsonFileContents = get_option('qlcd_wp_chatbot_dialogflow_project_key');
96	93	if($project_ID==''){
97		- echo wp_json_encode(array('error'=>'Project ID is empty'));exit;
	94	+ echo json_encode(array('error'=>'Project ID is empty'));exit;
98	95	}
99	96	if($JsonFileContents==''){
100		- echo wp_json_encode(array('error'=>'Key is empty'));exit;
	97	+ echo json_encode(array('error'=>'Key is empty'));exit;
101	98	}
102		- if(!isset($_POST['dfquery']) || wp_unslash($_POST['dfquery'])==''){
103		- echo wp_json_encode(array('error'=>'Query text is not added!'));exit;
	99	+ if(!isset($_POST['dfquery']) || $_POST['dfquery']==''){
	100	+ echo json_encode(array('error'=>'Query text is not added!'));exit;
104	101	}
105		- $query = sanitize_text_field(wp_unslash($_POST['dfquery']));
106		- if(isset($_POST['sessionid']) && wp_unslash($_POST['sessionid'])!=''){
107		- $session_id = sanitize_text_field(wp_unslash($_POST['sessionid']));
	102	+ $query = sanitize_text_field($_POST['dfquery']);
	103	+ if(isset($_POST['sessionid']) && $_POST['sessionid']!=''){
	104	+ $session_id = sanitize_text_field($_POST['sessionid']);
108	105	}
109	106
110	107
111	108	if(file_exists(QCLD_wpCHATBOT_GC_DIRNAME.'/autoload.php')){
		@@ -128,19 +125,16 @@
128	125	'queryParams' => ['timeZone' => '']]
129	126	]);
130	127
131	128	$contents = $response->getBody()->getContents();
	129	+ echo $contents;exit;
132	130
133		- echo wp_json_encode($contents);
134		-
135		- exit;
136		-
137	131	}catch(Exception $e) {
138		- echo wp_json_encode(array('error'=>$e->getMessage()));exit;
	132	+ echo json_encode(array('error'=>$e->getMessage()));exit;
139	133	}
140	134
141	135	}else{
142		- echo wp_json_encode(array('error'=>'API client not found'));exit;
	136	+ echo json_encode(array('error'=>'API client not found'));exit;
143	137	}
144	138	die();
145	139	}
146	140	}