| @@ -155,13 +155,13 @@ | ||
| 155 | 155 | |
| 156 | 156 | $order_id = isset( $_REQUEST['order_id'] ) ? (int) wp_kses( wp_unslash( $_REQUEST['order_id'] ), array() ) : 0; |
| 157 | 157 | $data = $this->get_order_data( $order_id, 'direct' ); |
| 158 | 158 | |
| 159 | - $deli = stripslashes_deep( maybe_unserialize( $data['order_delivery'] ) ); | |
| 160 | - $seriarized_cart = stripslashes_deep( maybe_unserialize( $data['order_cart'] ) ); | |
| 159 | + $deli = stripslashes_deep( wel_safe_maybe_unserialize( $data['order_delivery'] ) ); | |
| 160 | + $seriarized_cart = stripslashes_deep( wel_safe_maybe_unserialize( $data['order_cart'] ) ); | |
| 161 | 161 | $cart = usces_get_ordercartdata( $order_id ); |
| 162 | - $condition = stripslashes_deep( maybe_unserialize( $data['order_condition'] ) ); | |
| 163 | - $ordercheck = stripslashes_deep( maybe_unserialize( $data['order_check'] ) ); | |
| 162 | + $condition = stripslashes_deep( wel_safe_maybe_unserialize( $data['order_condition'] ) ); | |
| 163 | + $ordercheck = stripslashes_deep( wel_safe_maybe_unserialize( $data['order_check'] ) ); | |
| 164 | 164 | |
| 165 | 165 | if ( ! is_array( $ordercheck ) ) { |
| 166 | 166 | $ordercheck = array(); |
| 167 | 167 | } |
| @@ -208,9 +208,9 @@ | ||
| 208 | 208 | if ( is_array( $csod_meta ) ) { |
| 209 | 209 | $keys = array_keys( $csod_meta ); |
| 210 | 210 | foreach ( $keys as $key ) { |
| 211 | 211 | $csod_key = 'csod_' . $key; |
| 212 | - $csod_meta[ $key ]['data'] = maybe_unserialize( $this->get_order_meta_value( $csod_key, $order_id ) ); | |
| 212 | + $csod_meta[ $key ]['data'] = wel_safe_maybe_unserialize( $this->get_order_meta_value( $csod_key, $order_id ) ); | |
| 213 | 213 | } |
| 214 | 214 | } |
| 215 | 215 | // Start - Display data of the deleted order custom fields. |
| 216 | 216 | global $wpdb; |
| @@ -225,13 +225,13 @@ | ||
| 225 | 225 | foreach ( $order_meta_data as $order_meta ) { |
| 226 | 226 | $order_meta_key = str_replace( 'csod_', '', $order_meta['meta_key'] ); |
| 227 | 227 | $deleted = ! isset( $csod_meta[ $order_meta_key ] ); |
| 228 | 228 | if ( $deleted ) { |
| 229 | - $display_order_meta = maybe_unserialize( $order_meta['meta_value'] ); | |
| 229 | + $display_order_meta = wel_safe_maybe_unserialize( $order_meta['meta_value'] ); | |
| 230 | 230 | if ( is_array( $display_order_meta ) ) { |
| 231 | 231 | $display_order_meta = implode( ',', $display_order_meta ); |
| 232 | 232 | } |
| 233 | - $deleted_csod_meta_display .= '<tr><td class="label">' . $order_meta_key . '</td><td>' . $display_order_meta . '</td></tr>'; | |
| 233 | + $deleted_csod_meta_display .= '<tr><td class="label">' . esc_html( $order_meta_key ) . '</td><td>' . esc_html( $display_order_meta ) . '</td></tr>'; | |
| 234 | 234 | } |
| 235 | 235 | } |
| 236 | 236 | } |
| 237 | 237 | // End - Display data of the deleted order custom fields. |
| @@ -239,9 +239,9 @@ | ||
| 239 | 239 | if ( is_array( $cscs_meta ) ) { |
| 240 | 240 | $keys = array_keys( $cscs_meta ); |
| 241 | 241 | foreach ( $keys as $key ) { |
| 242 | 242 | $cscs_key = 'cscs_' . $key; |
| 243 | - $cscs_meta[ $key ]['data'] = maybe_unserialize( $this->get_order_meta_value( $cscs_key, $order_id ) ); | |
| 243 | + $cscs_meta[ $key ]['data'] = wel_safe_maybe_unserialize( $this->get_order_meta_value( $cscs_key, $order_id ) ); | |
| 244 | 244 | } |
| 245 | 245 | } |
| 246 | 246 | $csde_meta = usces_has_custom_field_meta( 'delivery' ); |
| 247 | 247 | if ( is_array( $csde_meta ) ) { |
| @@ -247,9 +247,9 @@ | ||
| 247 | 247 | if ( is_array( $csde_meta ) ) { |
| 248 | 248 | $keys = array_keys( $csde_meta ); |
| 249 | 249 | foreach ( $keys as $key ) { |
| 250 | 250 | $csde_key = 'csde_' . $key; |
| 251 | - $csde_meta[ $key ]['data'] = maybe_unserialize( $this->get_order_meta_value( $csde_key, $order_id ) ); | |
| 251 | + $csde_meta[ $key ]['data'] = wel_safe_maybe_unserialize( $this->get_order_meta_value( $csde_key, $order_id ) ); | |
| 252 | 252 | } |
| 253 | 253 | } |
| 254 | 254 | |
| 255 | 255 | $exopt = get_option( 'usces_ex', array() ); |
