| @@ -116,8 +116,18 @@ | ||
| 116 | 116 | } |
| 117 | 117 | |
| 118 | 118 | $submission = fluentFormApi('submissions')->find($transaction->submission_id); |
| 119 | 119 | |
| 120 | + // A trashed entry's receipt must not render on the public route. | |
| 121 | + if ($submission && 'trashed' === $submission->status) { | |
| 122 | + if ($echo) { | |
| 123 | + status_header(200); | |
| 124 | + echo esc_html__('Sorry no transaction found', 'fluentform'); | |
| 125 | + exit(200); | |
| 126 | + } | |
| 127 | + return ''; | |
| 128 | + } | |
| 129 | + | |
| 120 | 130 | if ($transaction->transaction_type == 'subscription') { |
| 121 | 131 | $transaction->subscription = fluentFormApi('submissions')->getSubscription($transaction->subscription_id); |
| 122 | 132 | } |
| 123 | 133 | |