Ghazascanner_2019runbot

/var/www/html/wp-content/plugins/wpestate-crm/libs/metaboxes.php

<?php

function wpestate_crm_return_post_type_items($key,$item){
     
    global $post;
    $args = array(
            'post_type'        =>  $item['source'],
            'posts_per_page'    => -1,
            'post_status'      =>  array( 'any' )
    );
    
 
    $select_value   =   '<option value=""></option>';
    $return         =   '';
    $value  =   get_post_meta($post->ID,$key,true);
    $agent_selection =  get_posts($args);
    
    
    foreach ( $agent_selection as $agent ) :
        $select_value.='<option value="'. $agent->ID.'" ';
        if($value==$agent->ID){
            $select_value.=' selected ';
        }
        $select_value.= ' >'.$agent->post_title.'</option>';
    endforeach;

$return.=   '<label for="'.$key.'">'.esc_html($item['label']).'</label>';
    $return.=   '<select id="'.esc_attr($key).'" name="'.esc_attr($key).'"> ';
    $return.=   $select_value;
    $return.=   '</select>';
    return $return;
}

function wpestate_crm_return_input_metabox($key,$item){
    global $post;
    $return         =   '';
    $value  =   get_post_meta($post->ID,$key,true);
    $return.=   '<label for="'.$key.'">'.esc_html($item['label']).'</label>';
    $return.=   '<input id="'.esc_attr($key).'" name="'.esc_attr($key).'" value="'.esc_attr($value).'" >';
    
    return $return;
}

function wpestate_crm_return_textarea_metabox($key,$item){
    global $post;
    $return         =   '';
    $value  =   get_post_meta($post->ID,$key,true);
    $return.=   '<label for="'.$key.'">'.esc_html($item['label']).'</label>';
    $return.=   '<textarea id="'.esc_attr($key).'" name="'.esc_attr($key).'"> '.esc_attr($value).'</textarea>';
    
    return $return;
}

function wpestate_crm_return_taxonomy_metabox($key,$item){
    global $post;
    $select_value   =  '<option value=""></option>';
    $return         =   '';
    
    $terms = get_terms( array(
        'taxonomy' => $item['source'],
        'hide_empty' => false,
    ));
    
    foreach($terms as $term){
        $select_value.='<option value="'.$term->name.'">'.$term->name.'</option>';
    }
    
    $value  =   get_post_meta($post->ID,$key,true);
    $return.=   '<label for="'.$key.'">'.esc_html($item['label']).'</label>';
    $return.=   '<select id="'.esc_attr($key).'" name="'.esc_attr($key).'"> ';
    $return.=   $select_value;
    $return.=   '</select>';
    
    return $return;
}

function wpestate_crm_display_add_note($post_id){
    $return='';
    $current_user       = wp_get_current_user();
    $return .='<div class="add_comments_wrapper">'
            . '<h2>'.esc_html__('Add a new comment','wpestate-crm').'</h2>';
    $return.='<textarea id="crm_new_commnet"></textarea>';
    $return.='<div  id="crm_insert_comment" data-who="'.$current_user->user_nicename.'" data-date="'.current_time('mysql').'" data-postid="'.intval($post_id).'">'.esc_html__('Add Comment','wpestate-crm').'</div>';        
   
    $ajax_nonce = wp_create_nonce( "wpestate_crm_insert_note" );
    $return.='<input type="hidden" id="wpestate_crm_insert_note" value="'.esc_html($ajax_nonce).'" />    ';
    
    $return .='</div>';
    return $return;
}

function wpestate_show_lead_per_contact($contact_id){
    $lead_id= get_post_meta($contact_id,'lead_contact',true);
    
    $return = '<div class="lead_content"><h2>'.esc_html__('Lead','wpestate-crm').'</h2>'. get_post_field('post_content', $lead_id).'</div>';
    return $return;
    
      
}

function wpestate_crm_show_notes($post_id){
    $return='<div id="show_notes_wrapper">';
    $all_comments = get_comments( array(
                            'post_id'   => $post_id,
                            )
                    );
  
    if(is_array($all_comments)):
        foreach($all_comments as $item){
            $return.= '<div class="comment_item">';
                $return.= '<i data-delete="'.$item->comment_ID.'" class="fa fa-trash-o wpestate-crm_delete" aria-hidden="true"></i>';
                $return.= '<div class="comment_name">'.$item->comment_author.'</div>';
                $return.= '<div class="comment_date">on '.$item->comment_date.'</div>';
                $return.= '<div class="comment_content">'.$item->comment_content.'</div>';
            $return.= '</div>';
        }
    endif;
    $return.='</div>';
    
    return $return;
    
}

add_action( 'wp_ajax_wpestate_crm_add_comment', 'wpestate_crm_add_comment' );
function wpestate_crm_add_comment(){
    check_ajax_referer( 'wpestate_crm_insert_note', 'security' );
    if ( !is_user_logged_in() ) {   
        exit('out pls');
    }
        
    $current_user       = wp_get_current_user();
    $content    = esc_html($_POST['content']);
    $post_id    = intval($_POST['item_id']);
        
    $comment_arg = array(
            'comment_post_ID'      => $post_id,
            'user_id'              => $current_user->ID,
            'comment_author'       => $current_user->user_nicename,
            'comment_author_email' => $current_user->user_email,
            'comment_content'      => $content,
            'comment_date'         => current_time('mysql'),
            'comment_approved'     => 1,
    );
        
    wp_insert_comment( $comment_arg );
    die();
}

add_action( 'wp_ajax_wpestate_crm_delete_comment', 'wpestate_crm_delete_comment' );
function wpestate_crm_delete_comment(){
     check_ajax_referer( 'wpestate_crm_insert_note', 'security' );
    if ( !is_user_logged_in() ) {   
        exit('out pls');
    }
        
    $current_user       = wp_get_current_user();
    $item_id            = intval($_POST['item_id']);
        
    $comment = get_comment($item_id);
   
    
    if($comment_author_email->email != $current_user->email){
        print'no rights';
    }else{
      wp_delete_comment($item_id,true);
    }
    
    die();
}