← All changes | classes/usceshop.class.php +15 -16 2.12.1 → 2.12.4 View file →

		@@ -2133,9 +2133,9 @@
2133	2133	$value = $wpdb->get_var( $query );
2134	2134	if ( ! $value ) {
2135	2135	$res = null;
2136	2136	} else {
2137		- $res = @unserialize( $value );
	2137	+ $res = wel_safe_unserialize( $value );
2138	2138	}
2139	2139
2140	2140	return $res;
2141	2141	}
		@@ -2657,9 +2657,8 @@
2657	2657	<?php echo apply_filters( 'usces_filter_admin_uscesL10n', null ); ?>
2658	2658	'requestFile': "<?php echo site_url(); ?>/wp-admin/admin-ajax.php",
2659	2659	'USCES_PLUGIN_URL': "<?php echo USCES_PLUGIN_URL; ?>",
2660	2660	'version': "<?php echo USCES_VERSION; ?>",
2661		- 'wcid': "<?php echo get_option( 'usces_wcid' ); ?>",
2662	2661	'locale': '<?php echo get_locale(); ?>',
2663	2662	'cart_number': "<?php echo get_option( 'usces_cart_number' ); ?>",
2664	2663	'purchase_limit': "<?php echo esc_js( $this->options['purchase_limit'] ); ?>",
2665	2664	'point_rate': "<?php echo esc_js( $this->options['point_rate'] ); ?>",
		@@ -4840,9 +4839,9 @@
4840	4839	$_SESSION['usces_member']['address3'] = $member['mem_address3'];
4841	4840	$_SESSION['usces_member']['tel'] = $member['mem_tel'];
4842	4841	$_SESSION['usces_member']['fax'] = $member['mem_fax'];
4843	4842	$_SESSION['usces_member']['delivery_flag'] = $member['mem_delivery_flag'];
4844		- $_SESSION['usces_member']['delivery'] = ! empty( $member['mem_delivery'] ) ? unserialize( $member['mem_delivery'] ) : '';
	4843	+ $_SESSION['usces_member']['delivery'] = ! empty( $member['mem_delivery'] ) ? wel_safe_unserialize( $member['mem_delivery'] ) : '';
4845	4844	$_SESSION['usces_member']['registered'] = $member['mem_registered'];
4846	4845	$_SESSION['usces_member']['nicename'] = $member['mem_nicename'];
4847	4846	$_SESSION['usces_member']['country'] = $this->get_member_meta_value( 'customer_country', $member['ID'] );
4848	4847	$_SESSION['usces_member']['status'] = $member['mem_status'];
		@@ -4928,9 +4927,9 @@
4928	4927	$_SESSION['usces_member']['address3'] = $member['mem_address3'];
4929	4928	$_SESSION['usces_member']['tel'] = $member['mem_tel'];
4930	4929	$_SESSION['usces_member']['fax'] = $member['mem_fax'];
4931	4930	$_SESSION['usces_member']['delivery_flag'] = $member['mem_delivery_flag'];
4932		- $_SESSION['usces_member']['delivery'] = ! empty( $member['mem_delivery'] ) ? unserialize( $member['mem_delivery'] ) : '';
	4931	+ $_SESSION['usces_member']['delivery'] = ! empty( $member['mem_delivery'] ) ? wel_safe_unserialize( $member['mem_delivery'] ) : '';
4933	4932	$_SESSION['usces_member']['registered'] = $member['mem_registered'];
4934	4933	$_SESSION['usces_member']['nicename'] = $member['mem_nicename'];
4935	4934	$_SESSION['usces_member']['country'] = $this->get_member_meta_value( 'customer_country', $member['ID'] );
4936	4935	$_SESSION['usces_member']['status'] = $member['mem_status'];
		@@ -4987,9 +4986,9 @@
4987	4986	$_SESSION['usces_member']['address3'] = $member['mem_address3'];
4988	4987	$_SESSION['usces_member']['tel'] = $member['mem_tel'];
4989	4988	$_SESSION['usces_member']['fax'] = $member['mem_fax'];
4990	4989	$_SESSION['usces_member']['delivery_flag'] = $member['mem_delivery_flag'];
4991		- $_SESSION['usces_member']['delivery'] = ! empty( $member['mem_delivery'] ) ? unserialize( $member['mem_delivery'] ) : '';
	4990	+ $_SESSION['usces_member']['delivery'] = ! empty( $member['mem_delivery'] ) ? wel_safe_unserialize( $member['mem_delivery'] ) : '';
4992	4991	$_SESSION['usces_member']['registered'] = $member['mem_registered'];
4993	4992	$_SESSION['usces_member']['nicename'] = $member['mem_nicename'];
4994	4993	$_SESSION['usces_member']['country'] = $this->get_member_meta_value( 'customer_country', $member['ID'] );
4995	4994	$_SESSION['usces_member']['status'] = $member['mem_status'];
		@@ -5028,9 +5027,9 @@
5028	5027	$_SESSION['usces_member']['address3'] = $member['mem_address3'];
5029	5028	$_SESSION['usces_member']['tel'] = $member['mem_tel'];
5030	5029	$_SESSION['usces_member']['fax'] = $member['mem_fax'];
5031	5030	$_SESSION['usces_member']['delivery_flag'] = $member['mem_delivery_flag'];
5032		- $_SESSION['usces_member']['delivery'] = ! empty( $member['mem_delivery'] ) ? unserialize( $member['mem_delivery'] ) : '';
	5031	+ $_SESSION['usces_member']['delivery'] = ! empty( $member['mem_delivery'] ) ? wel_safe_unserialize( $member['mem_delivery'] ) : '';
5033	5032	$_SESSION['usces_member']['registered'] = $member['mem_registered'];
5034	5033	$_SESSION['usces_member']['nicename'] = $member['mem_nicename'];
5035	5034	$_SESSION['usces_member']['country'] = $this->get_member_meta_value( 'customer_country', $member['ID'] );
5036	5035	$_SESSION['usces_member']['status'] = $member['mem_status'];
		@@ -5115,9 +5114,9 @@
5115	5114	$query = $wpdb->prepare( "SELECT meta_key, meta_value FROM $table WHERE member_id = %d", $mid );
5116	5115	$metas = $wpdb->get_results( $query, ARRAY_A );
5117	5116
5118	5117	foreach ( $metas as $meta ) {
5119		- $infos[ $meta['meta_key'] ] = maybe_unserialize( $meta['meta_value'] );
	5118	+ $infos[ $meta['meta_key'] ] = wel_safe_maybe_unserialize( $meta['meta_value'] );
5120	5119	}
5121	5120	}
5122	5121	return $infos;
5123	5122	}
		@@ -5252,10 +5251,10 @@
5252	5251	}
5253	5252	$res = array(
5254	5253	'ID' => $value->ID,
5255	5254	'mem_id' => $value->mem_id,
5256		- 'cart' => unserialize( $value->order_cart ),
5257		- 'condition' => unserialize( $value->order_condition ),
	5255	+ 'cart' => wel_safe_unserialize( $value->order_cart ),
	5256	+ 'condition' => wel_safe_unserialize( $value->order_condition ),
5258	5257	'getpoint' => $value->order_getpoint,
5259	5258	'usedpoint' => $value->order_usedpoint,
5260	5259	'discount' => $value->order_discount,
5261	5260	'payment_name' => $value->order_payment_name,
		@@ -5284,9 +5283,9 @@
5284	5283	foreach ( $rows as $row ) {
5285	5284	if ( strpos( $row['order_status'], 'cancel' ) !== false || strpos( $row['order_status'], 'estimate' ) !== false ) {
5286	5285	continue;
5287	5286	} else {
5288		- $carts = unserialize( $row['order_cart'] );
	5287	+ $carts = wel_safe_unserialize( $row['order_cart'] );
5289	5288	foreach ( $carts as $cart ) {
5290	5289	if ( $post_id == $cart['post_id'] ) {
5291	5290	$res[] = $row['ID'];
5292	5291	break;
		@@ -7427,9 +7426,9 @@
7427	7426	if ( empty( $cart['advance'] ) ) {
7428	7427	$type = 'once';
7429	7428	} else {
7430	7429	if ( is_array( $cart['advance'] ) && array_key_exists( 'regular', $cart['advance'] ) ) {
7431		- $regular = maybe_unserialize( $cart['advance']['regular'] );
	7430	+ $regular = wel_safe_maybe_unserialize( $cart['advance']['regular'] );
7432	7431	} else {
7433	7432	$advance = $this->cart->wc_unserialize( $cart['advance'] );
7434	7433	$sku = urldecode( $cart['sku'] );
7435	7434	$sku_encoded = $cart['sku'];
		@@ -8725,9 +8724,9 @@
8725	8724
8726	8725	$data = array(
8727	8726	'ID' => $value->ID,
8728	8727	'cart' => $cart,
8729		- 'condition' => unserialize( $value->order_condition ),
	8728	+ 'condition' => wel_safe_unserialize( $value->order_condition ),
8730	8729	'getpoint' => $value->order_getpoint,
8731	8730	'usedpoint' => $value->order_usedpoint,
8732	8731	'discount' => $value->order_discount,
8733	8732	'shipping_charge' => $value->order_shipping_charge,
		@@ -9066,9 +9065,9 @@
9066	9065	return false;
9067	9066	}
9068	9067
9069	9068	foreach ( (array) $dbres as $carts ) {
9070		- $rows = unserialize( $carts );
	9069	+ $rows = wel_safe_unserialize( $carts );
9071	9070	foreach ( (array) $rows as $carts ) {
9072	9071	if ( 'publish' != get_post_status( $carts['post_id'] ) ) {
9073	9072	continue;
9074	9073	}
		@@ -9395,9 +9394,9 @@
9395	9394	if ( is_array( $meta ) ) {
9396	9395	$keys = array_keys( $meta );
9397	9396	foreach ( $keys as $key ) {
9398	9397	$csmb_key = 'csmb_' . $key;
9399		- $_SESSION['usces_member']['custom_member'][ $key ] = maybe_unserialize( $this->get_member_meta_value( $csmb_key, $member_id ) );
	9398	+ $_SESSION['usces_member']['custom_member'][ $key ] = wel_safe_maybe_unserialize( $this->get_member_meta_value( $csmb_key, $member_id ) );
9400	9399	}
9401	9400	}
9402	9401	}
9403	9402
		@@ -9531,9 +9530,9 @@
9531	9530	foreach ( $res as $value ) {
9532	9531	if ( in_array( $value['meta_key'], $meta_keys ) ) {
9533	9532	$meta_key = $value['meta_key'];
9534	9533	if ( 'settlement_id' == $meta_key ) {
9535		- $meta_values = maybe_unserialize( $value['meta_value'] );
	9534	+ $meta_values = wel_safe_maybe_unserialize( $value['meta_value'] );
9536	9535	if ( is_array( $meta_values ) ) {
9537	9536	foreach ( $meta_values as $key => $meta_value ) {
9538	9537	$fields[ $key ] = $meta_value;
9539	9538	}
		@@ -9549,9 +9548,9 @@
9549	9548	foreach ( $meta_values as $key => $meta_value ) {
9550	9549	$fields[ $key ] = $meta_value;
9551	9550	}
9552	9551	} else {
9553		- $meta_values = maybe_unserialize( $value['meta_value'] );
	9552	+ $meta_values = wel_safe_maybe_unserialize( $value['meta_value'] );
9554	9553	if ( is_array( $meta_values ) ) {
9555	9554	foreach ( $meta_values as $key => $meta_value ) {
9556	9555	$fields[ $key ] = $meta_value;
9557	9556	}