← All changes | includes/widgets/MailChimp/MailChimp_Ajax.php +81 -0 51.1.2 → 51.1.87 View file →

		@@ -1,0 +1,81 @@
	1	+<?php
	2	+
	3	+namespace King_Addons;
	4	+
	5	+if (!defined('ABSPATH')) {
	6	+ exit; // Exit if accessed directly.
	7	+}
	8	+
	9	+class MailChimp_Ajax
	10	+{
	11	+ public function __construct()
	12	+ {
	13	+ add_action('wp_ajax_king_addons_mailchimp_subscribe', [$this, 'mailchimp_subscribe']);
	14	+ add_action('wp_ajax_nopriv_king_addons_mailchimp_subscribe', [$this, 'mailchimp_subscribe']);
	15	+ }
	16	+
	17	+ public static function mailchimp_subscribe()
	18	+ {
	19	+ // Verify nonce
	20	+ if (!wp_verify_nonce($_POST['nonce'] ?? '', 'king_addons_mailchimp_nonce')) {
	21	+ return;
	22	+ }
	23	+
	24	+ // Retrieve API key from settings
	25	+ $api_key = get_option('king_addons_mailchimp_api_key', '');
	26	+ // Parse list ID
	27	+ $list_id = sanitize_text_field(wp_unslash($_POST['listId'] ?? ''));
	28	+
	29	+ // Parse form fields
	30	+ parse_str($_POST['fields'] ?? '', $fields);
	31	+
	32	+ // Prepare data
	33	+ $email = sanitize_text_field($fields['king_addons_mailchimp_email'] ?? '');
	34	+ $merge_fields = [
	35	+ 'FNAME' => sanitize_text_field($fields['king_addons_mailchimp_firstname'] ?? ''),
	36	+ 'LNAME' => sanitize_text_field($fields['king_addons_mailchimp_lastname'] ?? ''),
	37	+ 'PHONE' => sanitize_text_field($fields['king_addons_mailchimp_phone_number'] ?? ''),
	38	+ ];
	39	+
	40	+ // Build Mailchimp API endpoint
	41	+ $api_url = sprintf(
	42	+ 'https://%s.api.mailchimp.com/3.0/lists/%s/members/%s',
	43	+ explode('-', $api_key)[1],
	44	+ $list_id,
	45	+ wp_hash(strtolower($email))
	46	+ );
	47	+
	48	+ // Set up request args
	49	+ $api_args = [
	50	+ 'method' => 'PUT',
	51	+ 'headers' => [
	52	+ 'Content-Type' => 'application/json',
	53	+ 'Authorization' => 'apikey ' . $api_key,
	54	+ ],
	55	+ 'body' => json_encode([
	56	+ 'email_address' => $email,
	57	+ 'status' => 'subscribed',
	58	+ 'merge_fields' => $merge_fields,
	59	+ ]),
	60	+ ];
	61	+
	62	+ // Send request
	63	+ $response = wp_remote_post($api_url, $api_args);
	64	+
	65	+ // Check response
	66	+ if (!is_wp_error($response)) {
	67	+ $body = json_decode(wp_remote_retrieve_body($response));
	68	+
	69	+ if (!empty($body)) {
	70	+ if (isset($body->status) && $body->status === 'subscribed') {
	71	+ wp_send_json(['status' => 'subscribed']);
	72	+ } else {
	73	+ // Security fix: Sanitize title from remote API response to prevent XSS
	74	+ wp_send_json(['status' => esc_html($body->title ?? '')]);
	75	+ }
	76	+ }
	77	+ }
	78	+ }
	79	+}
	80	+
	81	+new MailChimp_Ajax();