← All changes | includes/admin/settings/wppm_set_add_task_status.php +39 -31 1.0.3 → 6.0.6 View file →

		@@ -1,31 +1,39 @@
1		-<?php
2		-if ( ! defined( 'ABSPATH' ) ) {
3		- exit; // Exit if accessed directly
4		-}
5		-
6		-global $current_user, $wpdb;
7		-if (!($current_user->ID && $current_user->has_cap('manage_options'))) {exit;}
8		-
9		-$status_name = isset($_POST) && isset($_POST['status_name']) ? sanitize_text_field($_POST['status_name']) : '';
10		-if (!$status_name) {exit;}
11		-
12		-$status_color = isset($_POST) && isset($_POST['status_color']) ? sanitize_text_field($_POST['status_color']) : '';
13		-if (!$status_color) {exit;}
14		-
15		-$status_bg_color = isset($_POST) && isset($_POST['status_bg_color']) ? sanitize_text_field($_POST['status_bg_color']) : '';
16		-if (!$status_bg_color) {exit;}
17		-
18		-if ($status_color==$status_bg_color) {
19		- echo '{ "sucess_status":"0","messege":"'.__('Status color and background color should not be same.','taskbuilder').'" }';
20		- die();
21		-}
22		-$load_order = $wpdb->get_var("select max(load_order) from {$wpdb->prefix}wppm_task_statuses");
23		-$values=array(
24		- 'name'=>$status_name,
25		- 'color'=>$status_color,
26		- 'bg_color'=>$status_bg_color,
27		- 'load_order'=> ++$load_order
28		-);
29		-$wpdb->insert($wpdb->prefix.'wppm_task_statuses',$values);
30		-echo '{ "sucess_status":"1","messege":"'.__('Status added successfully.','taskbuilder').'" }';
31		-
	1	+<?php
	2	+if ( ! defined( 'ABSPATH' ) ) {
	3	+ exit; // Exit if accessed directly
	4	+}
	5	+
	6	+global $current_user, $wpdb;
	7	+if (!($current_user->ID && $current_user->has_cap('manage_options') || ($current_user->ID && $current_user->has_cap('wppm_admin')))) {exit;}
	8	+
	9	+if ( check_ajax_referer( 'wppm_set_add_task_status', '_ajax_nonce', false ) != 1 ) {
	10	+ wp_send_json_error( 'Unauthorised request!', 401 );
	11	+}
	12	+
	13	+$status_name = isset($_POST) && isset($_POST['status_name']) ? sanitize_text_field(wp_unslash($_POST['status_name'])) : '';
	14	+if (!$status_name) {exit;}
	15	+
	16	+$status_color = isset($_POST) && isset($_POST['status_color']) ? sanitize_text_field(wp_unslash($_POST['status_color'])) : '';
	17	+if (!$status_color) {exit;}
	18	+
	19	+$status_bg_color = isset($_POST) && isset($_POST['status_bg_color']) ? sanitize_text_field(wp_unslash($_POST['status_bg_color'])) : '';
	20	+if (!$status_bg_color) {exit;}
	21	+
	22	+if ($status_color==$status_bg_color) {
	23	+ echo '{ "sucess_status":"0","messege":"'.esc_html__('Status color and background color should not be same.','taskbuilder').'" }';
	24	+ die();
	25	+}
	26	+$load_order = $wpdb->get_var("select max(load_order) from {$wpdb->prefix}wppm_task_statuses");
	27	+$values=array(
	28	+ 'name'=>($status_name),
	29	+ 'color'=>($status_color),
	30	+ 'bg_color'=>($status_bg_color),
	31	+ 'load_order'=> absint(++$load_order)
	32	+);
	33	+$wpdb->insert($wpdb->prefix.'wppm_task_statuses',$values);
	34	+echo wp_json_encode( array(
	35	+ 'sucess_status' => 1,
	36	+ 'messege' => esc_html__( 'Status added successfully.', 'taskbuilder' ),
	37	+) );
	38	+wp_die();
	39	+