Implementation von Sanitisierung und Validierung sämtlicher Benutzereingaben im Backend

git-svn-id: https://[internal]/wordpress/plugins/wpsg4@7398 0d5edaf7-2b12-4e95-93f4-047927463d4b

8 files changed, 24 insertions, 15 deletions

diff --git a/views/admin/licence.phtml b/views/admin/licence.phtml
index 9c5af5d..cd30bce 100644
--- a/views/admin/licence.phtml
+++ b/views/admin/licence.phtml
@@ -183,7 +183,6 @@
                         <br />

                         

                         <?php if (wpsg_isSizedArray($wpsg_update_data)) { ?>

-                        

                             <?php // Ich zeige hier nur die Aktiven Module an ?>

                             <?php foreach ($wpsg_update_data['modulinfo'] as $modul_key => $modul_info) { if ($modul_info['active'] !== true) unset($wpsg_update_data['modulinfo'][$modul_key]); } ?>

                             

diff --git a/views/mods/mod_statistics/settings_edit.phtml b/views/mods/mod_statistics/settings_edit.phtml
index ac7f7e9..4a4bbb8 100644
--- a/views/mods/mod_statistics/settings_edit.phtml
+++ b/views/mods/mod_statistics/settings_edit.phtml
@@ -5,7 +5,8 @@
         <li role="presentation" class="active"><a href="#tab1" aria-controls="home" role="tab" data-toggle="tab"><?php echo __('Auswertung Bestellstatus', 'wpsg'); ?></a></li>

         <li role="presentation"><a href="#tab2" aria-controls="profile" role="tab" data-toggle="tab"><?php echo __('Piwik', 'wpsg'); ?></a></li>

         <li role="presentation"><a href="#tab3" aria-controls="profile" role="tab" data-toggle="tab"><?php echo __('Google', 'wpsg'); ?></a></li>

-        <li role="presentation"><a href="#tab4" aria-controls="messages" role="tab" data-toggle="tab"><?php echo __('Sonstiges', 'wpsg'); ?></a></li>

+        <li role="presentation"><a href="#tab4" aria-controls="profile" role="tab" data-toggle="tab"><?php echo __('Social Media', 'wpsg'); ?></a></li>

+        <li role="presentation"><a href="#tab5" aria-controls="messages" role="tab" data-toggle="tab"><?php echo __('Sonstiges', 'wpsg'); ?></a></li>

     </ul>

 

 	<div class="tab-content" >

@@ -86,7 +87,11 @@
 			//echo wpsg_drawForm_Checkbox('wpsg_mod_statistics_google_enable_first_touch_tracking', __('Enable First Touch Tracking', 'wpsg'), $this->get_option('wpsg_mod_statistics_google_enable_first_touch_tracking'));

 			 

 			echo wpsg_drawForm_Checkbox('wpsg_mod_statistics_google_track_page_load_time', __('Ladegeschwindigkeit der Website erfassen', 'wpsg'), $this->get_option('wpsg_mod_statistics_google_track_page_load_time'), array('help' => 'wpsg_mod_statistics_google_track_page_load_time'));

-		?>	

+

+			echo wpsg_drawForm_Checkbox('wpsg_mod_statistics_google_opt_out', __('Google Opt Out', 'wpsg'), $this->get_option('wpsg_mod_statistics_google_opt_out'), array('help' => 'wpsg_mod_statistics_google_opt_out'));

+

+			echo wpsg_drawForm_Checkbox('wpsg_mod_statistics_google_enhanced_tracking_code', __('Enhanced Tacking Code', 'wpsg'), $this->get_option('wpsg_mod_statistics_google_enhanced_tracking_code'), array('help' => 'wpsg_mod_statistics_google_enhanced_tracking_code'));

+		?>

 			<h3><?php echo __('Zieleinrichtung in Google Analytics', 'wpsg'); ?></h3>

 			

 			<?php 

@@ -119,8 +124,15 @@
 		

 			<div class="wpsg_clearer"></div>

 		</div>

-		

-		<div role="tabpanel" class="tab-pane" id="tab4">

+

+		<div role="tabpanel" id="tab4" class="tab-pane">

+		<?php

+			echo wpsg_drawForm_input('wpsg_mod_statistics_socialmedia_fb_px', __('Facebook Pixel', 'wpsg'), $this->get_option('wpsg_mod_statistics_socialmedia_fb_px'), array('help' => 'wpsg_mod_statistics_socialmedia_fb_px'));

+		?>

+			<div class="wpsg_clearer"></div>

+		</div>

+

+		<div role="tabpanel" class="tab-pane" id="tab5">

 		<?php 

 			echo wpsg_drawForm_Input('wpsg_mod_statistics_line_chart_width', __('Liniendiagramm (Breite in px)', 'wpsg'), $this->get_option('wpsg_mod_statistics_line_chart_width'), array('help' => 'wpsg_mod_statistics_line_chart_width'));

 			echo wpsg_drawForm_Input('wpsg_mod_statistics_line_chart_height', __('Liniendiagramm (Hoehe in px)', 'wpsg'), $this->get_option('wpsg_mod_statistics_line_chart_height'), array('help' => 'wpsg_mod_statistics_line_chart_height'));

diff --git a/views/order/product_table.phtml b/views/order/product_table.phtml
index 88763c6..1f5d037 100644
--- a/views/order/product_table.phtml
+++ b/views/order/product_table.phtml
@@ -318,5 +318,5 @@
 	</tbody>

 </table>

 

-<?php wpsg_debug($arCalculation);  ?>

+<?php //wpsg_debug($arCalculation);  ?>

 	
\ No newline at end of file
diff --git a/views/order/view.phtml b/views/order/view.phtml
index 5908c22..e275f50 100644
--- a/views/order/view.phtml
+++ b/views/order/view.phtml
@@ -46,7 +46,7 @@
             <span class="list-group-head list-group-item"><?php echo wpsg_translate(__('Bestellung ID:#1#', 'wpsg'), $this->view['data']['id']); ?></span>

 

             <?php $i = 0; foreach ($this->view['arSubAction'] as $k => $v) { $i ++; ?>

-            

+

             	<a class="list-group-item <?php echo ((wpsg_getStr($_COOKIE['wpsg_order_view_tab'], 'general') == $k)?'active':''); ?>" wpsg-data-target="<?php echo $k; ?>" href="#"><?php echo $v['title']; ?></a>

             

             <?php } ?>

diff --git a/views/order/view_alternativeDesign.phtml b/views/order/view_alternativeDesign.phtml
index 37005bf..0fe1911 100644
--- a/views/order/view_alternativeDesign.phtml
+++ b/views/order/view_alternativeDesign.phtml
@@ -6,8 +6,6 @@
 

 ?>

 

-<?php //wpsg_debug(print_r($this->view['arSubAction'])); ?>

-

 <style>.orderdetail-alternative-left:active, .orderdetail-alternative-right:active { cursor: move; }</style>

 

 <div class="wpsg_order_view wpsg_order_view_alternativedesign" id="wpsg-bs">

diff --git a/views/produkt/addedit.phtml b/views/produkt/addedit.phtml
index 0af087c..c937817 100644
--- a/views/produkt/addedit.phtml
+++ b/views/produkt/addedit.phtml
@@ -72,7 +72,7 @@
 		</div>

 		

 		<div class="wpsg_admin_content form-horizontal">

-		

+

 			<?php $i = 0; foreach ($this->view['arSubAction'] as $k => $v) { $i ++; ?>

 			<div id="<?php echo $k; ?>" style="display:<?php echo ((wpsg_getStr($_COOKIE['wpsg_product_addedit_tab'], 'general') === $k)?'block':'none'); ?>;" class="wpsg_product_tab_content">

 				

diff --git a/views/produkt/select.phtml b/views/produkt/select.phtml
index 2fd0f31..b4ef1e1 100644
--- a/views/produkt/select.phtml
+++ b/views/produkt/select.phtml
@@ -14,10 +14,10 @@
 	 	<?php } ?>

 	 

 		<script language="javascript" type="text/javascript" src="<?php echo get_option('siteurl'); ?>/wp-admin/load-scripts.php?c=1&load[]=jquery-core"></script>

-		<script language="javascript" type="text/javascript" src="<?php echo get_option('siteurl'); ?>/wp-content/plugins/".WPSG_FOLDERNAME."/views/js/bootstrap-3.3.6-dist/js/bootstrap.min.js"></script>		

+		<script language="javascript" type="text/javascript" src="<?php echo get_option('siteurl'); ?>/<?php echo WPSG_CONTENTDIR_WP; ?>/plugins/".WPSG_FOLDERNAME."/views/js/bootstrap-3.3.6-dist/js/bootstrap.min.js"></script>

 		

-		<link rel='stylesheet' id='wpsg-bscss-css'  href='<?php echo get_option('siteurl'); ?>/wp-content/plugins/'.WPSG_FOLDERNAME.'/views/js/bootstrap-3.3.6-dist/css/bootstrap.css?ver=4.7.5' type='text/css' media='all' />

-		<link rel='stylesheet' id='wpsg-bs-theme-css-css'  href='<?php echo get_option('siteurl'); ?>/wp-content/plugins/'.WPSG_FOLDERNAME.'/views/js/bootstrap-3.3.6-dist/css/bootstrap-theme.css?ver=4.7.5' type='text/css' media='all' />

+		<link rel='stylesheet' id='wpsg-bscss-css'  href='<?php echo get_option('siteurl'); ?>/<?php echo WPSG_CONTENTDIR_WP; ?>/plugins/'.WPSG_FOLDERNAME.'/views/js/bootstrap-3.3.6-dist/css/bootstrap.css?ver=4.7.5' type='text/css' media='all' />

+		<link rel='stylesheet' id='wpsg-bs-theme-css-css'  href='<?php echo get_option('siteurl'); ?>/<?php echo WPSG_CONTENTDIR_WP; ?>/plugins/'.WPSG_FOLDERNAME.'/views/js/bootstrap-3.3.6-dist/css/bootstrap-theme.css?ver=4.7.5' type='text/css' media='all' />

 		

 		<link rel="stylesheet" href="<?php echo $this->getRessourceURL('css/admin.css'); ?>" type="text/css" media="all" />

 				

diff --git a/views/produkttemplates/standard_redirect.phtml b/views/produkttemplates/standard_redirect.phtml
index 58bdad2..ffa4047 100644
--- a/views/produkttemplates/standard_redirect.phtml
+++ b/views/produkttemplates/standard_redirect.phtml
@@ -13,7 +13,7 @@
 ?>

 

 <div class="wpsg_produkt_wrapper">

-	

+

 	<input type="hidden" name="wpsg_post_id" value="<?php echo get_the_ID(); ?>" />

 	<input type="hidden" name="titleDisplayed" value="<?php echo $this->titleDisplayed; ?>" />

 	

@@ -261,7 +261,7 @@
 		<?php /* Varianten ENDE */ ?>

 		

 		<?php $this->callMods('product_bottom', array(&$this->view['data']['id'], $this->getTemplateIndex())); ?>

-		

+

 		<div class="wpsg_product_buttonarea">

 			<div class="wpsg_product_buttons_add_basket">

 				<?php if ($this->view['oProduct']->canOrder()) { ?>