Changeset 1079176

Timestamp:

01/30/2015 07:20:57 PM (11 years ago)

Author:

Ansr

Message:

updating to work with newest version of wordpress

Location:

hangouts-cosmoquest/trunk

Files:

• readme.txt (modified) (3 diffs)
• wp_hangouts.php (modified) (8 diffs)

hangouts-cosmoquest/trunk/readme.txt

@@ -3 +3 @@
 Donate link: http://cosmoquest.org/x/donate/
 Tags: hangout, hangouts, cosmoquest, ansr, live
-Requires at least: 3.9
-Tested up to: 3.9
+Requires at least: 4.1
+Tested up to: 4.1
 Stable tag: trunk
 License: GPLv2
@@ -22 +22 @@
 can set your channel Settings, Add/Edit recurring show descriptions, and add an upcoming
 show description or embed code for a live event. Embed the plugin output on a post or page
-with the code [hangouts] and use the Widget options in your Appearance menu to add to your sidebar. 
+with the code [hangout] and use the Widget options in your Appearance menu to add to your sidebar. 
 
 
@@ -37 +37 @@
 
 == Changelog ==
-
+= 1.1 =
+*updated the code to work with most recent versions of wordpress
 = 1.0 =
 *first version
 == Upgrade Notice ==
-
+= 1.1 = 
+upgrade if using 4.0 or higher certain database calls this plugin made stopped working after 3.9
 = 1.0 =
 not an upgrade

hangouts-cosmoquest/trunk/wp_hangouts.php

@@ -155 +155 @@
                 array('%d') 
             );
-            $show_id = mysql_real_escape_string($_POST['show']);
-            $show_description = mysql_real_escape_string($_POST['show_description']);
-            $get_show = $wpdb->get_results("SELECT * FROM $hangout_shows WHERE id = $show_id",ARRAY_A);
+            $show_id = $_POST['show'];
+            $show_description = $_POST['show_description'];
+            $query = $wpdb->prepare("SELECT * FROM $hangout_shows WHERE id = %s",$show_id);
+            $get_show = $wpdb->get_results($query,ARRAY_A);
             if (count($get_show) == 0){
                 echo "Invalid show number"; die(); 
@@ -184 +185 @@
             }//starting the hangout 
             else if ($_POST['task'] == "start") {                 
-                    $orig = $_POST['embed'];
-                    $embed = mysql_real_escape_string($orig);           
+                    $embed = $_POST['embed'];           
                     // Get the hashtag for twitter
-                    $hashtag = mysql_real_escape_string($_POST['tag']);
+                    $hashtag = $_POST['tag'];
                     $results = $wpdb->get_results("SELECT id FROM $hangouts order by id desc limit 1",ARRAY_A); 
-                    $show_id = mysql_real_escape_string($_POST['show']);                
+                    $show_id = $_POST['show'];              
                     $wpdb->update( 
                     $hangouts, 
@@ -321 +321 @@
     if(isset($_POST['hangout_action'])){        
         if($_POST['hangout_action'] =='add_show'){ 
-            $name = mysql_real_escape_string($_POST['show_name']);
-            $url = mysql_real_escape_string($_POST['show_url']); 
-            $description = mysql_real_escape_string($_POST['description']);
+            $name = $_POST['show_name'];
+            $url = $_POST['show_url']; 
+            $description = $_POST['description'];
             $wpdb->insert( $table_name, 
             array( 'name' => $name,'url' => $url,'description' => $description),  
@@ -332 +332 @@
         }
         else if ($_POST['hangout_action'] =='update_show'){
-          $description = mysql_real_escape_string($_POST['description']);
-          $delete = mysql_real_escape_string($_POST['delete']);
-          $name = mysql_real_escape_string($_POST['show_name']);
-          $url = mysql_real_escape_string($_POST['show_url']);
-          $id = mysql_real_escape_string($_POST['show_id']);
+          $description = $_POST['description'];
+          $delete = $_POST['delete'];
+          $name = $_POST['show_name'];
+          $url = $_POST['show_url'];
+          $id = $_POST['show_id'];
           if($delete =="delete"){
             $wpdb->delete( $table_name, array('id'=>$id), array( '%d' ) );
@@ -391 +391 @@
         if($_POST['hangout_action'] =='link_channel'){
             $table_name = $wpdb->prefix . "hangout_data"; 
-            $youtube_channel_name = mysql_real_escape_string($_POST['youtube_channel_name']);
-            $youtube_channel_url = mysql_real_escape_string($_POST['youtube_channel_url']);
-            $youtube_channel = mysql_real_escape_string($_POST['youtube_embed']);
-            $link_channel = mysql_real_escape_string($_POST['link_channel']);
-            $link_text = mysql_real_escape_string($_POST['link_text']);
-            $width = mysql_real_escape_string($_POST['width']);
+            $youtube_channel_name = $_POST['youtube_channel_name'];
+            $youtube_channel_url = $_POST['youtube_channel_url'];
+            $youtube_channel = $_POST['youtube_embed'];
+            $link_channel = $_POST['link_channel'];
+            $link_text = $_POST['link_text'];
+            $width = $_POST['width']; 
             if(is_numeric($width)){
                 if($width < 1 || $width > 5000)
@@ -402 +402 @@
             }
             else
-                die("WIDTH IS NOT A NUMBER");
-            $delete = $wpdb->query("TRUNCATE TABLE '$table_name'"); 
-            $wpdb->insert($table_name, 
+                die("WIDTH IS NOT A NUMBER"); 
+            $wpdb->replace($table_name, 
                 array( 
+                'id' => 1,
                 'youtube_channel_name' => $youtube_channel_name, 
                 'youtube_channel_url' => $youtube_channel_url,
@@ -413 +413 @@
                 'width' => $width
                 ),  
-                array('%s','%s','%s','%s','%d','%d')
+                array('%d','%s','%s','%s','%s','%d','%d')
                 ); 
                 echo"<script>alert('Information Updated')</script>";
@@ -444 +444 @@
             }
             else{
-                embed.value = temp.src;
+                embed.value = temp.src; 
                 document.getElementById("update_settings").submit();
             }