| 1 |
<?php |
| 2 |
if ( ! defined( 'ABSPATH' ) ) { |
| 3 |
exit; // Exit if accessed directly |
| 4 |
} |
| 5 |
|
| 6 |
global $current_user, $wpscfunction ,$wp; |
| 7 |
|
| 8 |
if ( |
| 9 |
check_ajax_referer('set_edit_thread', '_ajax_nonce', false) != 1 |
| 10 |
) wp_send_json_error('Unauthorised request!', 400); |
| 11 |
|
| 12 |
if (!($current_user->ID && $current_user->has_cap('wpsc_agent'))) { |
| 13 |
exit; |
| 14 |
} |
| 15 |
|
| 16 |
$ticket_id = isset($_POST['ticket_id']) ? sanitize_text_field($_POST['ticket_id']) : 0 ; |
| 17 |
$thread_id = isset($_POST['thread_id']) ? sanitize_text_field($_POST['thread_id']) : 0 ; |
| 18 |
$thread_body= isset($_POST['body']) ? wp_kses_post(htmlspecialchars_decode($_POST['body'], ENT_QUOTES)) : ''; |
| 19 |
|
| 20 |
$update_thread_body = array( |
| 21 |
'ID' => $thread_id, |
| 22 |
'post_content' => $thread_body, |
| 23 |
); |
| 24 |
|
| 25 |
wp_update_post( $update_thread_body ); |
| 26 |
?> |
