| @@ -115,12 +115,14 @@ | ||
| 115 | 115 | $table_name = $wpdb->prefix . 'fluentform_forms'; |
| 116 | 116 | $limit = 10; |
| 117 | 117 | // Prepare the query with a WHERE condition |
| 118 | 118 | $query = $wpdb->prepare( |
| 119 | + // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- False positive: the query is prepared via $this->wpdb->prepare(), which this sniff does not recognise, and only $wpdb->prefix table names are interpolated. Audited 2026-07-16. | |
| 119 | 120 | "SELECT id, title FROM {$table_name} WHERE status = %s LIMIT %d", |
| 120 | 121 | 'published', $limit |
| 121 | 122 | ); |
| 122 | 123 | // Execute the query and retrieve the results |
| 124 | + // phpcs:ignore PluginCheck.Security.DirectDB.UnescapedDBParameter, WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.NotPrepared -- False positive: the query is prepared via $this->wpdb->prepare(), which this sniff does not recognise, and only $wpdb->prefix table names are interpolated. Audited 2026-07-16. | |
| 123 | 125 | $form_result = $wpdb->get_results($query); |
| 124 | 126 | |
| 125 | 127 | if (!empty($form_result)) { |
| 126 | 128 | foreach ($form_result as $form) { |
| @@ -142,12 +144,14 @@ | ||
| 142 | 144 | if (!empty($args['inputValue'])) { |
| 143 | 145 | $limit = 10; |
| 144 | 146 | // Prepare the query with a LIKE condition |
| 145 | 147 | $query = $wpdb->prepare( |
| 148 | + // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared -- False positive: the query is prepared via $this->wpdb->prepare(), which this sniff does not recognise, and only $wpdb->prefix table names are interpolated. Audited 2026-07-16. | |
| 146 | 149 | "SELECT id, title FROM {$table_name} WHERE title LIKE %s AND status = %s LIMIT %d", |
| 147 | 150 | '%' . $wpdb->esc_like($args['inputValue']) . '%','published',$limit |
| 148 | 151 | ); |
| 149 | 152 | // Execute the query and retrieve the results |
| 153 | + // phpcs:ignore PluginCheck.Security.DirectDB.UnescapedDBParameter, WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, WordPress.DB.PreparedSQL.NotPrepared -- False positive: the query is prepared via $this->wpdb->prepare(), which this sniff does not recognise, and only $wpdb->prefix table names are interpolated. Audited 2026-07-16. | |
| 150 | 154 | $form_result = $wpdb->get_results($query); |
| 151 | 155 | if (!empty($form_result)) { |
| 152 | 156 | foreach ($form_result as $form) { |
| 153 | 157 | $key = $this->key($form->id); |
| @@ -276,10 +280,10 @@ | ||
| 276 | 280 | $form_list = explode('_',$data['__form_list']['value']); |
| 277 | 281 | if( !empty( $form_list[1] ) ) { |
| 278 | 282 | $form = wpFluent()->table('fluentform_forms')->where('id', $form_list[1])->first(); |
| 279 | 283 | // $valueFrom = date('Y-m-d',strtotime('-'.$data['display_from'].' days',time())); |
| 280 | - $valueFrom = date('Y-m-d H:i:s', Helper::generate_time_string($data)); | |
| 281 | - $valueTo = date('Y-m-d',strtotime('1 days',time())); | |
| 284 | + $valueFrom = gmdate('Y-m-d H:i:s', Helper::generate_time_string($data)); | |
| 285 | + $valueTo = gmdate('Y-m-d',strtotime('1 days',time())); | |
| 282 | 286 | $query = wpFluent()->table('fluentform_submissions') |
| 283 | 287 | ->where('form_id', $form->id); |
| 284 | 288 | // define('FLUENTFORM_VERSION', '5.0.6') |
| 285 | 289 | if( version_compare(FLUENTFORM_VERSION, '5.0.0', '>=')){ |
| @@ -400,8 +404,9 @@ | ||
| 400 | 404 | } |
| 401 | 405 | |
| 402 | 406 | |
| 403 | 407 | public function doc() { |
| 408 | + /* translators: %1$s: Fluent Forms installed and configured link URL, %2$s: documentation link URL, %3$s: video tutorial link URL, %4$s: Display Fluent Forms Submission Alert link URL */ | |
| 404 | 409 | return sprintf(__(' |
| 405 | 410 | <p>To use the campaign & form subscription data, make sure that you have <a target="_blank" href="%1$s">Fluent Forms installed and configured</a> on your website. For detailed guidelines, follow this <a target="_blank" href="%2$s">documentation</a>.</p> |
| 406 | 411 | |
| 407 | 412 | <p>🎥 Learn quickly from the <a target="_blank" href="%3$s">video tutorial</a>.</p> |
