| @@ -164,8 +164,25 @@ | ||
| 164 | 164 | return $results; |
| 165 | 165 | } |
| 166 | 166 | |
| 167 | 167 | /** |
| 168 | + * Get payments by a entry_id | |
| 169 | + * | |
| 170 | + * @param int $entry_id | |
| 171 | + * | |
| 172 | + * @return object | |
| 173 | + */ | |
| 174 | +function weforms_get_entry_payment( $entry_id ) { | |
| 175 | + global $wpdb; | |
| 176 | + | |
| 177 | + $query = 'SELECT transaction_id FROM ' . $wpdb->prefix . 'weforms_payments' . | |
| 178 | + ' WHERE entry_id = ' . $entry_id; | |
| 179 | + $payment = $wpdb->get_row( $query, $entry_id ); | |
| 180 | + | |
| 181 | + return $payment; | |
| 182 | +} | |
| 183 | + | |
| 184 | +/** | |
| 168 | 185 | * Get an entry by id |
| 169 | 186 | * |
| 170 | 187 | * @param int $entry_id |
| 171 | 188 | * |
| @@ -1082,9 +1099,9 @@ | ||
| 1082 | 1099 | 'message' => __( 'Thanks for contacting us! We will get in touch with you shortly.', 'weforms' ), |
| 1083 | 1100 | 'page_id' => '', |
| 1084 | 1101 | 'url' => '', |
| 1085 | 1102 | |
| 1086 | - 'submit_text' => __( 'Submit Query', 'weforms' ), | |
| 1103 | + 'submit_text' => __( 'Submit', 'weforms' ), | |
| 1087 | 1104 | 'submit_button_cond' => [ |
| 1088 | 1105 | 'condition_status' => 'no', |
| 1089 | 1106 | 'cond_logic' => 'any', |
| 1090 | 1107 | 'conditions' => [ |
| @@ -1114,8 +1131,9 @@ | ||
| 1114 | 1131 | 'respondent_can_see' => [ 'missed_questions', 'correct_answers', 'point_values' ], |
| 1115 | 1132 | 'total_points' => 0, |
| 1116 | 1133 | 'enable_multistep' => false, |
| 1117 | 1134 | 'multistep_progressbar_type' => 'progressive', |
| 1135 | + 'humanpresence_enabled' => false, | |
| 1118 | 1136 | |
| 1119 | 1137 | // payment |
| 1120 | 1138 | 'payment_paypal_images' => 'https://www.paypalobjects.com/webstatic/mktg/logo/AM_mc_vs_dc_ae.jpg', |
| 1121 | 1139 | |
| @@ -1203,26 +1221,26 @@ | ||
| 1203 | 1221 | } |
| 1204 | 1222 | |
| 1205 | 1223 | if ( is_array( $value ) ) { |
| 1206 | 1224 | $string_value = []; |
| 1225 | + foreach ( $value as $key => $single_value ) { | |
| 1226 | + if ( is_array( $single_value ) || is_serialized( $single_value ) ) { | |
| 1227 | + $single_value = weforms_get_pain_text( $single_value ); | |
| 1228 | + } | |
| 1207 | 1229 | |
| 1208 | - if ( is_array( $value ) ) { | |
| 1209 | - foreach ( $value as $key => $single_value ) { | |
| 1210 | - if ( is_array( $single_value ) || is_serialized( $single_value ) ) { | |
| 1211 | - $single_value = weforms_get_pain_text( $single_value ); | |
| 1212 | - } | |
| 1230 | + $single_value = ucwords( str_replace( [ '_', '-' ], ' ', $key ) ) . ': ' . ucwords( $single_value ); | |
| 1213 | 1231 | |
| 1214 | - $single_value = ucwords( str_replace( [ '_', '-' ], ' ', $key ) ) . ': ' . ucwords( $single_value ); | |
| 1232 | + $string_value[] = $single_value; | |
| 1233 | + } | |
| 1215 | 1234 | |
| 1216 | - $string_value[] = $single_value; | |
| 1217 | - } | |
| 1218 | - | |
| 1219 | - $value = implode( WeForms::$field_separator, $string_value ); | |
| 1220 | - } | |
| 1235 | + $value = implode( WeForms::$field_separator, $string_value ); | |
| 1221 | 1236 | } |
| 1222 | 1237 | |
| 1223 | 1238 | $value = trim( strip_tags( $value ) ); |
| 1224 | 1239 | |
| 1240 | + // escape spreadsheet special characters to prevent formula exploits. | |
| 1241 | + $value = preg_match( '/^[=+@-]/', $value ) ? '\'' . $value : $value; | |
| 1242 | + | |
| 1225 | 1243 | return $value; |
| 1226 | 1244 | } |
| 1227 | 1245 | |
| 1228 | 1246 | /** |
| @@ -1301,7 +1319,7 @@ | ||
| 1301 | 1319 | function weforms_clean( $var ) { |
| 1302 | 1320 | if ( is_array( $var ) ) { |
| 1303 | 1321 | return array_map( 'weforms_clean', $var ); |
| 1304 | 1322 | } else { |
| 1305 | - return is_scalar( $var ) ? sanitize_text_field( wp_unslash( $var ) ) : $var; | |
| 1323 | + return is_scalar( $var ) ? sanitize_textarea_field( wp_unslash( $var ) ) : $var; | |
| 1306 | 1324 | } |
| 1307 | 1325 | } |
