diff --git a/go-form-plugin/go-form-plugin.php b/go-form-plugin/go-form-plugin.php index 62b123d..e16d9cf 100644 --- a/go-form-plugin/go-form-plugin.php +++ b/go-form-plugin/go-form-plugin.php @@ -77,10 +77,10 @@ function go_form_get_forms() return $wpdb->get_results("SELECT * FROM {$wpdb->prefix}go_form_forms ORDER BY created_at DESC"); } -function go_form_get_form_name($id) { +function go_form_get_form_by_id($id) +{ global $wpdb; - $form = $wpdb->get_row($wpdb->prepare("SELECT name FROM {$wpdb->prefix}go_form_forms WHERE id = %d", $id)); - return $form ? $form->name : 'Unknown Form'; + return $wpdb->get_row($wpdb->prepare("SELECT * FROM {$wpdb->prefix}go_form_forms WHERE id = %d", intval($id))); } function go_form_get_entries($form_id) @@ -148,10 +148,16 @@ add_action('admin_post_go_form_handle_submission', 'go_form_handle_submission'); function go_form_shortcode($atts) { global $ranks; - $form_id = intval(shortcode_atts(['id' => 1], $atts)['id']); + $form_id = intval($atts['id']); + $form = go_form_get_form_by_id($form_id); ob_start(); - include 'templates/form-shortcode.php'; + if ($form) { + include 'templates/form-shortcode.php'; + } else { + echo '
WRONG FORM ID
'; + } + return ob_get_clean(); } add_shortcode('go_form', 'go_form_shortcode'); @@ -228,7 +234,8 @@ function go_form_export() } $form_id = intval($_POST['value_one']); - $form_name = go_form_get_form_name($form_id); + $form = go_form_get_form_by_id($form_id); + $form_name = $form ? $form->name : 'Unknown Form'; $entries = go_form_get_entries($form_id); header('Content-Type: text/csv; charset=utf-8'); @@ -269,69 +276,14 @@ function action_button($action, $name, $confirm_massage, $value_one) { echo ' '; } function go_form_settings_page() { - if (!current_user_can('manage_options')) - wp_die('No access.'); - - if (isset($_GET['deleted'])) - echo 'Deleted!
Form created!
[go_form id=' . esc_html($f->id) . ']Deleted!
'; +if (isset($_GET['created'])) + echo 'Form created!
[go_form id=' . esc_html($f->id) . ']