← All changes | includes/replace_macro.php +3 -17 5.0.1 → 3.0.0 View file →

		@@ -6,10 +6,9 @@
6	6	global $current_user, $wppmfunction,$wpdb;
7	7	$current_user_data = get_userdata($current_user->ID);
8	8	$project_id = intval(sanitize_text_field($project_id));
9	9	$wppm_project_data = $wppmfunction->get_project($project_id);
10		-$orderby_sql = esc_sql(sanitize_sql_orderby( "id DESC" ));
11		-$wppm_proj_comment = $wpdb->get_row("SELECT * FROM {$wpdb->prefix}wppm_project_comment where proj_id='".esc_sql($project_id)."' ORDER BY $orderby_sql LIMIT 1;");
	10	+$wppm_proj_comment = $wpdb->get_row("SELECT * FROM {$wpdb->prefix}wppm_project_comment where proj_id='".$project_id."' ORDER BY id DESC LIMIT 1;");
12	11	$attachments = array();
13	12	$auth_id = $wppmfunction->get_project_meta($project_id,'project_auth_code',true);
14	13	if(!empty($wppm_proj_comment)){
15	14	$attachments = explode(',',$wppm_proj_comment->attachment_ids);
		@@ -16,10 +15,8 @@
16	15	}
17	16	preg_match_all("/{[^}]*}/" ,$str,$matches);
18	17	$matches = array_unique($matches[0]);
19	18	$flag =false;
20		-$page_setting = get_option( 'wppm-page-settings' );
21		-$view = $page_setting['project-url-page'];
22	19	foreach($matches as $match){
23	20	switch($match){
24	21	//Current User Name
25	22	case '{user_name}':
		@@ -82,24 +79,14 @@
82	79	break;
83	80	//Last comment body
84	81	case '{proj_comment_body}':
85	82	$flag= true;
86		- if(!empty($this->get_proj_comment_body($project_id))){
87		- $str = preg_replace('/{proj_comment_body}/', $this->get_proj_comment_body($project_id), $str);
88		- } else{
89		- $str = "";
90		- }
	83	+ $str = preg_replace('/{proj_comment_body}/', $this->get_proj_comment_body($project_id), $str);
91	84	break;
92	85
93	86	// Project Description
94	87	case '{project_description}':
95		- $str = preg_replace('/{project_description}/', sanitize_text_field($wppm_project_data['description']), $str);
96		- break;
97		- case '{project_url}':
98		- $project_url = '<a class="wppm_link" href="' . $this->get_project_url($project_id,$view) . '" target="_blank">' . $this->get_project_url($project_id,$view) . '</a>';
99		- $str = preg_replace('/{project_url}/', $project_url, $str);
100		- break;
101		-
	88	+ $str = preg_replace('/{project_description}/', sanitize_text_field($wppm_project_data['description']), $str);
102	89	}
103	90	}
104	91	if($flag == true){
105	92	if(!empty($attachments)){
		@@ -104,9 +91,8 @@
104	91	if($flag == true){
105	92	if(!empty($attachments)){
106	93	foreach($attachments as $attach_id){
107	94	$upload_dir = wp_upload_dir();
108		- $attach_id = esc_sql($attach_id);
109	95	$attachment = $wpdb->get_row("select * from {$wpdb->prefix}wppm_attachments where id='".$attach_id."'");
110	96	if(!empty($attachment)){
111	97	$updated_time = sanitize_text_field($attachment->date_created);
112	98	$time = strtotime(sanitize_text_field($updated_time));