Beispiel #1
0
    if ($_POST['select_type'] == 'radio' || $_POST['select_type'] == 'checkbox') {
        $finaloptionvalues = rtrim(implode(',', $_POST['optionvalue']), ',');
    } else {
        $finaloptionvalues = $_POST['field_Options'];
    }
    if ($_POST['select_type'] == 'pricing') {
        $_POST['field_value'] = $_POST['field_Pricing'];
    }
    if ($_POST['select_type'] == 'profile') {
        $_POST['field_value'] = $_POST['field_profile'];
    }
    $id = $wpdb->query($wpdb->prepare("INSERT INTO {$crf_fields} (`Form_Id`,`Type`,`Name`,`Value`,`Class`,`Max_Length`,`Cols`,`Rows`,`Option_Value`,`Description`,`Require`,`Readonly`,`Visibility`,`Ordering`)\r\n\t\tVALUES ( %d, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %d )", array($_POST['form_id'], $_POST['select_type'], sanitize_text_field($_POST['field_name']), sanitize_text_field($_POST['field_value']), sanitize_html_class($_POST['field_class']), sanitize_text_field($_POST['field_maxLenght']), sanitize_text_field($_POST['field_cols']), sanitize_text_field($_POST['field_rows']), sanitize_text_field($finaloptionvalues), sanitize_text_field($_POST['field_Des']), sanitize_text_field($_POST['field_require']), sanitize_text_field($_POST['field_readonly']), sanitize_text_field($_POST['field_visibility']), $ordering)));
    $lastid = $wpdb->get_var("select Id from {$crf_fields} order by Id desc limit 1");
    $array = array('Type' => $_POST['select_type'], 'Name' => sanitize_text_field($_POST['field_name']), 'Id' => $lastid);
    $new_field = (object) $array;
    $key = $crf_basic_options->crf_get_field_key($new_field);
    $wpdb->query($wpdb->prepare("update {$crf_fields} set Field_Key=%s where Id=%d", array($key, $lastid)));
    wp_redirect('admin.php?page=crf_manage_form_fields&form_id=' . $_POST['form_id']);
    exit;
}
if (isset($_POST['field_submit']) && !empty($_POST['field_id'])) {
    $retrieved_nonce = $_REQUEST['_wpnonce'];
    if (!wp_verify_nonce($retrieved_nonce, 'save_crf_add_field')) {
        die('Failed security check');
    }
    if ($_POST['select_type'] == 'radio' || $_POST['select_type'] == 'checkbox') {
        $finaloptionvalues = implode(',', $_POST['optionvalue']);
    } else {
        $finaloptionvalues = $_POST['field_Options'];
    }
    if ($_POST['select_type'] == 'pricing') {