esc_html__( 'Error: Invalid nonce verification.', 'easy-hotel' ) ) ); } ob_start(); $icon_library = ( apply_filters( 'eshb_fa4', false ) ) ? 'fa4' : 'fa5'; ESHB::include_plugin_file( 'fields/icon/'. $icon_library .'-icons.php' ); $icon_lists = apply_filters( 'eshb_field_icon_add_icons', eshb_get_default_icons() ); if ( ! empty( $icon_lists ) ) { foreach ( $icon_lists as $list ) { echo ( count( $icon_lists ) >= 2 ) ? '
'. esc_attr( $list['title'] ) .'
' : ''; foreach ( $list['icons'] as $icon ) { echo ''; } } } else { echo '
'. esc_html__( 'No data available.', 'easy-hotel' ) .'
'; } $content = ob_get_clean(); wp_send_json_success( array( 'content' => $content ) ); } add_action( 'wp_ajax_eshb-get-icons', 'eshb_get_icons' ); } /** * * Export * * @since 1.0.0 * @version 1.0.0 * */ if ( ! function_exists( 'eshb_export' ) ) { function eshb_export() { $nonce = ( ! empty( $_GET[ 'nonce' ] ) ) ? sanitize_text_field( wp_unslash( $_GET[ 'nonce' ] ) ) : ''; $unique = ( ! empty( $_GET[ 'unique' ] ) ) ? sanitize_text_field( wp_unslash( $_GET[ 'unique' ] ) ) : ''; if ( ! wp_verify_nonce( $nonce, 'eshb_backup_nonce' ) ) { die( esc_html__( 'Error: Invalid nonce verification.', 'easy-hotel' ) ); } if ( empty( $unique ) ) { die( esc_html__( 'Error: Invalid key.', 'easy-hotel' ) ); } // Export header('Content-Type: application/json'); header('Content-disposition: attachment; filename=backup-'. gmdate( 'd-m-Y' ) .'.json'); header('Content-Transfer-Encoding: binary'); header('Pragma: no-cache'); header('Expires: 0'); echo wp_json_encode( get_option( $unique ) ); die(); } add_action( 'wp_ajax_eshb-export', 'eshb_export' ); } /** * * Import Ajax * * @since 1.0.0 * @version 1.0.0 * */ if ( ! function_exists( 'eshb_import_ajax' ) ) { function eshb_import_ajax() { $nonce = ( ! empty( $_POST[ 'nonce' ] ) ) ? sanitize_text_field( wp_unslash( $_POST[ 'nonce' ] ) ) : ''; $unique = ( ! empty( $_POST[ 'unique' ] ) ) ? sanitize_text_field( wp_unslash( $_POST[ 'unique' ] ) ) : ''; //$data = ( ! empty( $_POST[ 'data' ] ) ) ? wp_kses_post_deep( wp_json_decode( trim( wp_unslash( $_POST[ 'data' ] ) ), true ) ) : array(); $data = array(); if ( ! empty( $_POST['data'] ) ) { // Sanitize $_POST['data'] immediately after retrieving it $post_data = sanitize_text_field( wp_unslash( $_POST['data'] ) ); // Decode the sanitized JSON data $decoded_data = wp_json_decode( trim( $post_data ), true ); // Sanitize the decoded data deeply using wp_kses_post_deep to allow safe HTML if ( is_array( $decoded_data ) ) { $data = wp_kses_post_deep( $decoded_data ); } } if ( ! wp_verify_nonce( $nonce, 'eshb_backup_nonce' ) ) { wp_send_json_error( array( 'error' => esc_html__( 'Error: Invalid nonce verification.', 'easy-hotel' ) ) ); } if ( empty( $unique ) ) { wp_send_json_error( array( 'error' => esc_html__( 'Error: Invalid key.', 'easy-hotel' ) ) ); } if ( empty( $data ) || ! is_array( $data ) ) { wp_send_json_error( array( 'error' => esc_html__( 'Error: The response is not a valid JSON response.', 'easy-hotel' ) ) ); } // Success update_option( $unique, $data ); wp_send_json_success(); } add_action( 'wp_ajax_eshb-import', 'eshb_import_ajax' ); } /** * * Reset Ajax * * @since 1.0.0 * @version 1.0.0 * */ if ( ! function_exists( 'eshb_reset_ajax' ) ) { function eshb_reset_ajax() { $nonce = ( ! empty( $_POST[ 'nonce' ] ) ) ? sanitize_text_field( wp_unslash( $_POST[ 'nonce' ] ) ) : ''; $unique = ( ! empty( $_POST[ 'unique' ] ) ) ? sanitize_text_field( wp_unslash( $_POST[ 'unique' ] ) ) : ''; if ( ! wp_verify_nonce( $nonce, 'eshb_backup_nonce' ) ) { wp_send_json_error( array( 'error' => esc_html__( 'Error: Invalid nonce verification.', 'easy-hotel' ) ) ); } // Success delete_option( $unique ); wp_send_json_success(); } add_action( 'wp_ajax_eshb-reset', 'eshb_reset_ajax' ); } /** * * Chosen Ajax * * @since 1.0.0 * @version 1.0.0 * */ if ( ! function_exists( 'eshb_chosen_ajax' ) ) { function eshb_chosen_ajax() { $nonce = ( ! empty( $_POST[ 'nonce' ] ) ) ? sanitize_text_field( wp_unslash( $_POST[ 'nonce' ] ) ) : ''; $type = ( ! empty( $_POST[ 'type' ] ) ) ? sanitize_text_field( wp_unslash( $_POST[ 'type' ] ) ) : ''; $term = ( ! empty( $_POST[ 'term' ] ) ) ? sanitize_text_field( wp_unslash( $_POST[ 'term' ] ) ) : ''; $query = ( ! empty( $_POST[ 'query_args' ] ) ) ? wp_kses_post_deep( array_map( 'sanitize_text_field', wp_unslash($_POST[ 'query_args' ])) ) : array(); if ( ! wp_verify_nonce( $nonce, 'eshb_chosen_ajax_nonce' ) ) { wp_send_json_error( array( 'error' => esc_html__( 'Error: Invalid nonce verification.', 'easy-hotel' ) ) ); } if ( empty( $type ) || empty( $term ) ) { wp_send_json_error( array( 'error' => esc_html__( 'Error: Invalid term ID.', 'easy-hotel' ) ) ); } $capability = apply_filters( 'eshb_chosen_ajax_capability', 'manage_options' ); if ( ! current_user_can( $capability ) ) { wp_send_json_error( array( 'error' => esc_html__( 'Error: You do not have permission to do that.', 'easy-hotel' ) ) ); } // Success $options = ESHB_Fields::field_data( $type, $term, $query ); wp_send_json_success( $options ); } add_action( 'wp_ajax_eshb-chosen', 'eshb_chosen_ajax' ); }