| @@ -1,26 +1,35 @@ | ||
| 1 | -<?php | |
| 2 | -if ( ! defined( 'ABSPATH' ) ) { | |
| 3 | - exit; // Exit if accessed directly | |
| 4 | -} | |
| 5 | - | |
| 6 | -global $current_user, $wpdb; | |
| 7 | -if (!($current_user->ID && $current_user->has_cap('manage_options'))) {exit;} | |
| 8 | -$priority_name = isset($_POST) && isset($_POST['priority_name']) ? sanitize_text_field($_POST['priority_name']) : ''; | |
| 9 | -if (!$priority_name) {exit;} | |
| 10 | -$priority_color = isset($_POST) && isset($_POST['priority_color']) ? sanitize_text_field($_POST['priority_color']) : ''; | |
| 11 | -if (!$priority_color) {exit;} | |
| 12 | -$priority_bg_color = isset($_POST) && isset($_POST['priority_bg_color']) ? sanitize_text_field($_POST['priority_bg_color']) : ''; | |
| 13 | -if (!$priority_bg_color) {exit;} | |
| 14 | -if ($priority_color==$priority_bg_color) { | |
| 15 | - echo '{ "sucess_status":"0","messege":"'.__('Status color and background color should not be same.','taskbuilder').'" }'; | |
| 16 | - die(); | |
| 17 | -} | |
| 18 | -$load_order = $wpdb->get_var("select max(load_order) from {$wpdb->prefix}wppm_task_priorities"); | |
| 19 | -$values=array( | |
| 20 | - 'name'=>$priority_name, | |
| 21 | - 'color'=>$priority_color, | |
| 22 | - 'bg_color'=>$priority_bg_color, | |
| 23 | - 'load_order'=> ++$load_order | |
| 24 | -); | |
| 25 | -$wpdb->insert($wpdb->prefix.'wppm_task_priorities',$values); | |
| 26 | -echo '{ "sucess_status":"1","messege":"'.__('Priority added successfully.','taskbuilder').'" }'; | |
| 1 | +<?php | |
| 2 | +if ( ! defined( 'ABSPATH' ) ) { | |
| 3 | + exit; // Exit if accessed directly | |
| 4 | +} | |
| 5 | + | |
| 6 | +global $current_user, $wpdb; | |
| 7 | +if (!($current_user->ID && $current_user->has_cap('manage_options') || ($current_user->ID && $current_user->has_cap('wppm_admin')))) {exit;} | |
| 8 | + | |
| 9 | +if ( check_ajax_referer( 'wppm_set_add_priority', '_ajax_nonce', false ) != 1 ) { | |
| 10 | + wp_send_json_error( 'Unauthorised request!', 401 ); | |
| 11 | +} | |
| 12 | + | |
| 13 | +$priority_name = isset($_POST) && isset($_POST['priority_name']) ? sanitize_text_field(wp_unslash($_POST['priority_name'])) : ''; | |
| 14 | +if (!$priority_name) {exit;} | |
| 15 | +$priority_color = isset($_POST) && isset($_POST['priority_color']) ? sanitize_text_field(wp_unslash($_POST['priority_color'])) : ''; | |
| 16 | +if (!$priority_color) {exit;} | |
| 17 | +$priority_bg_color = isset($_POST) && isset($_POST['priority_bg_color']) ? sanitize_text_field(wp_unslash($_POST['priority_bg_color'])) : ''; | |
| 18 | +if (!$priority_bg_color) {exit;} | |
| 19 | +if ($priority_color==$priority_bg_color) { | |
| 20 | + echo '{ "sucess_status":"0","messege":"'.esc_html__('Status color and background color should not be same.','taskbuilder').'" }'; | |
| 21 | + die(); | |
| 22 | +} | |
| 23 | +$load_order = $wpdb->get_var("select max(load_order) from {$wpdb->prefix}wppm_task_priorities"); | |
| 24 | +$values=array( | |
| 25 | + 'name'=>($priority_name), | |
| 26 | + 'color'=>($priority_color), | |
| 27 | + 'bg_color'=>($priority_bg_color), | |
| 28 | + 'load_order'=> absint(++$load_order) | |
| 29 | +); | |
| 30 | +$wpdb->insert($wpdb->prefix.'wppm_task_priorities',$values); | |
| 31 | +echo wp_json_encode( array( | |
| 32 | + 'sucess_status' => 1, | |
| 33 | + 'messege' => esc_html__( 'Priority added successfully.', 'taskbuilder' ), | |
| 34 | + ) ); | |
| 35 | +wp_die(); | |