Changeset 3265917

Timestamp:

04/02/2025 09:49:44 PM (10 months ago)

Author:

hippooo

Message:

1.0.7 - Minor Improvements

Location:

hippoo-ticket/trunk

Files:

• app/config.php (modified) (8 diffs)
• app/hooks.php (modified) (11 diffs)
• app/utils.php (modified) (1 diff)
• app/web_api.php (modified) (1 diff)
• app/web_api_auth.php (modified) (6 diffs)
• assets/css/admin-style.css (added)
• assets/css/style.css (modified) (1 diff)
• assets/images/attach.svg (added)
• assets/images/chat.svg (added)
• assets/images/close.svg (added)
• assets/js/admin-script.js (added)
• assets/js/script.js (modified) (1 diff)
• hippoo-ticket.php (modified) (6 diffs)
• metabox/ticket_box.php (modified) (1 diff)
• metabox/ticket_box_html_template.php (modified) (4 diffs)
• readme.txt (modified) (2 diffs)
• shortcode/form-ticket.php (added)
• shortcode/ticket.php (modified) (3 diffs)

hippoo-ticket/trunk/app/config.php

@@ -1 @@
-<?php
+<?php // phpcs:disable PluginCheck.CodeAnalysis.ImageFunctions.NonEnqueuedImage
     if ( ! defined( 'ABSPATH' ) ) exit; // Exit if accessed directly     
 ?>
 <div class="wrap">
-    <h1 class="wh-heading"><?php esc_html_e( 'Hippoo Settings', 'hippoo' ); ?></h1>
+    <h1 class="wh-heading"><?php esc_html_e( 'Hippoo Settings', 'hippoo-ticket' ); ?></h1>
     
     <div class="settings">
@@ -9 +9 @@
         if ( isset( $_POST['save'] ) ) {
             // Verify nonce for security
-            if ( isset( $_POST['_wpnonce'] ) && wp_verify_nonce( $_POST['_wpnonce'], 'hippoo_nonce' ) ) {
+            if ( isset( $_POST['_wpnonce'] ) && wp_verify_nonce( sanitize_key( $_POST['_wpnonce'] ), 'hippoo_nonce' ) ) {
                 // Check user permissions here (if needed)
                 if ( current_user_can( 'manage_options' ) ) {
                     $opt = [
-                        'sms'        => sanitize_text_field( $_POST['sms'] ),
-                        'email'      => sanitize_text_field( $_POST['email'] ),
-                        'pg_ticket'  => sanitize_text_field( $_POST['pg_ticket'] ),
+                        'sms'       => isset( $_POST['sms'] ) ? sanitize_text_field( wp_unslash( $_POST['sms'] ) ) : '',
+                        'email'     => isset( $_POST['email'] ) ? wp_kses_post( wp_unslash( $_POST['email'] ) ) : '',
+                        'pg_ticket' => isset( $_POST['pg_ticket'] ) ? sanitize_text_field( wp_unslash( $_POST['pg_ticket'] ) ) : '',
                     ];
 
                     // Update options only if the user has the required permissions
                     update_option( 'hippoo_ticket', $opt );
-                    echo esc_html('<div class="updated"><p>' . __('Settings Saved.', 'hippoo') . '</p></div>');
+                    echo wp_kses_post('<div class="updated"><p>' . __( 'Settings Saved.', 'hippoo-ticket' ) . '</p></div>');
                 } else {
                     // Handle lack of permissions
-                    echo esc_html('<div class="error"><p>' . __( 'Unauthorized Access.', 'hippoo' ) . '</p></div>');
+                    echo wp_kses_post('<div class="error"><p>' . __( 'Unauthorized Access.', 'hippoo-ticket' ) . '</p></div>');
                 }
             } else {
                 // Nonce verification failed
-                echo esc_html('<div class="error"><p>' . __( 'Security check failed.', 'hippoo' ) . '</p></div>');
+                echo wp_kses_post('<div class="error"><p>' . __( 'Security check failed.', 'hippoo-ticket' ) . '</p></div>');
             }
         }
-
-
 
         $opt = get_option( 'hippoo_ticket', [] );
@@ -40 +38 @@
                 <thead>
                     <tr>
-                        <th colspan="2"><?php esc_html_e( 'Settings', 'hippoo' ); ?></th>
+                        <th colspan="2"><?php esc_html_e( 'Settings', 'hippoo-ticket' ); ?></th>
                     </tr>
                 </thead>
@@ -52 +50 @@
                         <?php wp_editor( ( isset( $opt['email'] ) ? $opt['email'] : '' ), 'email', [ 'media_buttons' => false, 'textarea_rows' => 5 ] ); ?>
                         <p>
-                            <small><?php esc_html_e( 'Use these values for Email %user%, Ticket Name %ticket%, Ticket URL %url%', 'hippoo' ); ?></small>
+                            <small>
+                                <?php esc_html_e( 'Use these values for Email %user%, Ticket Name %ticket%, Ticket URL %url%', 'hippoo-ticket' ); // phpcs:ignore ?>
+                            </small>
                         </p>
                     </td>
                 </tr>
                 <tr>
-                    <th colspan="2"><?php esc_html_e( 'Pages', 'hippoo' ); ?></th>
+                    <th colspan="2"><?php esc_html_e( 'Pages', 'hippoo-ticket' ); ?></th>
                 </tr>
                 <tr>
                     <td>Ticket Page</td>
-                    <td><?php wp_dropdown_pages( [ 'name' => 'pg_ticket', 'selected' => ( isset( $opt['pg_ticket'] ) ? $opt['pg_ticket'] : '' ) ] ); ?></td>
+                    <td><?php wp_dropdown_pages( [ 'name' => 'pg_ticket', 'selected' => esc_attr( isset( $opt['pg_ticket'] ) ? $opt['pg_ticket'] : '' ) ] ); ?></td>
                 </tr>
                 <tfoot>
@@ -74 +74 @@
             <thead>
                 <tr>
-                    <th><?php esc_html_e( 'Shortcode List', 'hippoo' ); ?></th>
+                    <th><?php esc_html_e( 'Shortcode List', 'hippoo-ticket' ); ?></th>
                 </tr>
             </thead>
@@ -83 +83 @@
     </div>
 
-
     <div class="short-desc">
         <div class="left">
-            <p><?php esc_html_e( "Hippoo! is not just a shop management app, it's also a platform that enables you to extend its capabilities. With the ability to install extensions, you can customize your experience and add new features to the app. Browse and purchase WooCommerce plugins from our shop to enhance your store's functionality.", 'Hippoo-Ticket' ); ?></p>
+            <p><?php esc_html_e( "Hippoo! is not just a shop management app, it's also a platform that enables you to extend its capabilities. With the ability to install extensions, you can customize your experience and add new features to the app. Browse and purchase WooCommerce plugins from our shop to enhance your store's functionality.", 'hippoo-ticket' ); ?></p>
             <a href="https://hippoo.app">
                 <img class="hippoo-download" src="<?php echo wp_kses_post( hippoo_ticket_url . 'images/play-store.png' ); ?>" alt="Play Store">
@@ -94 +93 @@
     
     <div class="extentions">
-        <strong><?php esc_html_e( 'Hippoo extensions', 'hippoo' ); ?></strong>
-        <p><?php esc_html_e( 'Customize Hippoo! with extensions! Browse and buy Hippoo plugins to add new features and enhance your experience. Download now and take your shop management to the next level!', 'hippoo' ); ?></p>
+        <strong><?php esc_html_e( 'Hippoo extensions', 'hippoo-ticket' ); ?></strong>
+        <p><?php esc_html_e( 'Customize Hippoo! with extensions! Browse and buy Hippoo plugins to add new features and enhance your experience. Download now and take your shop management to the next level!', 'hippoo-ticket' ); ?></p>
 
         <?php
@@ -133 +132 @@
                 ';
 
-                // echo wp_kses_post( $html );
-                echo ( $html );
+                echo wp_kses_post( $html );
             }
         }

hippoo-ticket/trunk/app/hooks.php

@@ -6 +6 @@
  *
  */
+
 function hippoo_ticket_wc_add_my_account_orders_column( $columns ) {
-
     $columns['ticket'] = 'Support';
     $columns['ticket_status'] = 'Status';
-
     return $columns;
 }
+
 add_filter( 'woocommerce_account_orders_columns', 'hippoo_ticket_wc_add_my_account_orders_column' );
-
 
 function hippoo_ticket_wc_custom_column_display( $order ) {
     global $wpdb;
     
-    if(in_array($order->get_status(),['completed','cancelled'])){
-        echo esc_html('-');
+    if ( in_array( $order->get_status(), [ 'completed', 'cancelled' ] ) ) {
+        echo esc_html( '-' );
         return;
     }
 
-    $opt = get_option('hippoo_ticket', []);
+    $opt = get_option( 'hippoo_ticket', [] );
     $url = esc_url( get_permalink( $opt['pg_ticket'] ) . '?oid=' . absint( $order->get_id() ) );
+
+    // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
     $tid = absint( $wpdb->get_var( $wpdb->prepare(
-        "SELECT ID FROM $wpdb->posts WHERE post_type = 'hippoo_ticket' AND post_status IN ('hippoo_waiting','hippoo_answered','hippoo_close') AND post_parent = %d",
+        "SELECT ID FROM {$wpdb->posts} WHERE post_type = 'hippoo_ticket' AND post_status IN ('hippoo_waiting','hippoo_answered','hippoo_close') AND post_parent = %d",
         absint( $order->get_id() )
     ) ) );
-
-    echo wp_kses_post("<a href='" . esc_url($url) . "' class='woocommerce-button wp-element-button button' target='_blank'>Ticket</a>");
-
-}
+    // phpcs:enable
+
+    echo wp_kses_post( "<a href='" . esc_url( $url ) . "' class='woocommerce-button wp-element-button button' target='_blank'>Ticket</a>" );
+}
+
 add_action( 'woocommerce_my_account_my_orders_column_ticket', 'hippoo_ticket_wc_custom_column_display' );
 
@@ -39 +41 @@
     global $wpdb;
 
-    if ( in_array( $order->get_status(), ['completed', 'cancelled'] ) ) {
-        echo esc_html('-');
+    if ( in_array( $order->get_status(), [ 'completed', 'cancelled' ] ) ) {
+        echo esc_html( '-' );
         return;
     }
 
+    // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
     $tid = absint( $wpdb->get_var( $wpdb->prepare(
-        "SELECT ID FROM $wpdb->posts WHERE post_type = 'hippoo_ticket' AND post_status IN ('hippoo_waiting','hippoo_answered','hippoo_close') AND post_parent = %d",
+        "SELECT ID FROM {$wpdb->posts} WHERE post_type = 'hippoo_ticket' AND post_status IN ('hippoo_waiting','hippoo_answered','hippoo_close') AND post_parent = %d",
         absint( $order->get_id() )
     ) ) );
+    // phpcs:enable
 
     echo wp_kses_post( hippoo_ticket_status( $tid ) );
 }
+
 add_action( 'woocommerce_my_account_my_orders_column_ticket_status', 'hippoo_ticket_wc_custom_column_display_status' );
 
@@ -56 +61 @@
  * add column to ticket post type
  *
-**/
-
-add_filter('manage_hippoo_ticket_posts_columns','hippoo_ticket_columns');
+ */
+
 function hippoo_ticket_columns( $columns ) {
     // this will add the column to the end of the array
@@ -67 +71 @@
 }
 
-add_action( 'manage_hippoo_ticket_posts_custom_column','hippoo_ticket_action_custom_columns_content', 10, 2 );
+add_filter( 'manage_hippoo_ticket_posts_columns', 'hippoo_ticket_columns' );
 
 function hippoo_ticket_action_custom_columns_content( $column_id, $post_id ) {
@@ -73 +77 @@
         $pid = absint( get_post_field( 'post_parent', $post_id ) );
         $url = esc_url( admin_url( "post.php?post=$pid&action=edit" ) );
-        echo wp_kses_post("<a href='$url' target='_blank'>#$pid</a>");
+        echo wp_kses_post( "<a href='$url' target='_blank'>#$pid</a>" );
     }
 
-    if ( $column_id == 'ticket_id' )
+    if ( $column_id == 'ticket_id' ) {
         echo wp_kses_post( $post_id );
-
-    if ( $column_id == 'ticket_status' )
+    }
+
+    if ( $column_id == 'ticket_status' ) {
         echo wp_kses_post( hippoo_ticket_status( $post_id ) );
-}
-
+    }
+}
+
+add_action( 'manage_hippoo_ticket_posts_custom_column','hippoo_ticket_action_custom_columns_content', 10, 2 );
 
 /**
  * init
- */
-add_action( 'init', 'hippoo_ticket_hook_init' );
+ * 
+ */
+
 function hippoo_ticket_hook_init() {
     $labels = array(
@@ -126 +134 @@
         'show_in_admin_all_list'    => true,
         'show_in_admin_status_list' => true,
-        'label_count'               => _n_noop( 'Waiting for reply <span class="count">(%s)</span>', 'Waiting for reply <span class="count">(%s)</span>' ),
+        /* translators: %s: number of tickets */
+        'label_count'               => _n_noop( 'Waiting for reply <span class="count">(%s)</span>', 'Waiting for reply <span class="count">(%s)</span>', 'hippoo-ticket' ),
     ) );
+
     register_post_status( 'hippoo_answered', array(
         'label'                     => 'Answered',
@@ -134 +144 @@
         'show_in_admin_all_list'    => true,
         'show_in_admin_status_list' => true,
-        'label_count'               => _n_noop( 'Answered <span class="count">(%s)</span>', 'Answered <span class="count">(%s)</span>' ),
+        /* translators: %s: number of tickets */
+        'label_count'               => _n_noop( 'Answered <span class="count">(%s)</span>', 'Answered <span class="count">(%s)</span>', 'hippoo-ticket' ),
     ) );
+
     register_post_status( 'hippoo_close', array(
         'label'                     => 'Closed',
@@ -142 +154 @@
         'show_in_admin_all_list'    => true,
         'show_in_admin_status_list' => true,
-        'label_count'               => _n_noop( 'Closed <span class="count">(%s)</span>', 'Closed <span class="count">(%s)</span>' ),
+        /* translators: %s: number of tickets */
+        'label_count'               => _n_noop( 'Closed <span class="count">(%s)</span>', 'Closed <span class="count">(%s)</span>', 'hippoo-ticket' ),
     ) );
 }
 
-
-add_action('admin_footer-post.php', 'hippoo_ticket_append_post_status_list');
-
-function hippoo_ticket_append_post_status_list(){
+add_action( 'init', 'hippoo_ticket_hook_init' );
+
+function hippoo_ticket_append_post_status_list() {
     global $post;
 
-    if($post->post_type == 'hippoo_ticket'){
+    if ( $post->post_type == 'hippoo_ticket' ) {
         $statuses = [
-            'hippoo_waiting' => 'Waiting for reply',
+            'hippoo_waiting'  => 'Waiting for reply',
             'hippoo_answered' => 'Answered',
-            'hippoo_close' => 'Closed'
+            'hippoo_close'    => 'Closed'
         ];
 
@@ -162 +174 @@
         $label = '';
 
-        foreach($statuses as $state => $text){
+        foreach ( $statuses as $state => $text ) {
             $selected = selected( $post->post_status, $state, false );
             $status_options .= "<option value='" . esc_attr($state) . "' $selected>" . esc_html($text) . "</option>";
 
-            if($post->post_status == $state){
+            if ( $post->post_status == $state ) {
                 $label = $text;
             }
@@ -175 +187 @@
                 var statusSelect = document.querySelector("select#post_status");
                 if (statusSelect) {
-                    statusSelect.innerHTML = "<?php echo esc_html($status_options); ?>";
+                    statusSelect.innerHTML = "<?php echo esc_html( $status_options ); ?>";
                 }
 
                 var statusDisplay = document.querySelector("#post-status-display");
                 if (statusDisplay) {
-                    statusDisplay.innerHTML += "<?php echo esc_html($label); ?>";
+                    statusDisplay.innerHTML += "<?php echo esc_html( $label ); ?>";
                 }
 
@@ -193 +205 @@
 }
 
+add_action( 'admin_footer-post.php', 'hippoo_ticket_append_post_status_list' );
 
 /**
  * manage ticket table list
- */
-    function hippoo_ticket_remove_quick_edit( $actions, $post ) {
-        if($post->post_type == 'hippoo_ticket') {
-            unset($actions['inline hide-if-no-js']);
+ * 
+ */
+
+function hippoo_ticket_remove_quick_edit( $actions, $post ) {
+    if ( $post->post_type == 'hippoo_ticket' ) {
+        unset( $actions['inline hide-if-no-js'] );
+    }
+
+    return $actions;
+}
+
+add_filter( 'post_row_actions', 'hippoo_ticket_remove_quick_edit', 10, 2 );
+
+
+function hippoo_ticket_custom_bulk_actions( $actions ) {
+    $actions['status_close'] = 'Close Ticket';
+    return $actions;
+}
+
+add_filter( 'bulk_actions-edit-hippoo_ticket', 'hippoo_ticket_custom_bulk_actions' );
+
+function hippoo_ticket_handle_bulk_actions( $redirect_url, $action, $post_ids ) {
+    if ( $action == 'status_close' ) {
+        foreach ( $post_ids as $post_id ) {
+            wp_update_post( [
+                'ID' => $post_id,
+                'post_status' => 'hippoo_close'
+            ] );
         }
-
-        return $actions;
-    }
-    add_filter('post_row_actions','hippoo_ticket_remove_quick_edit',10,2);
-
-
-    function hippoo_ticket_custom_bulk_actions($actions) {
-        $actions['status_close']='Close Ticket';
-        return $actions;
-    }
-    add_filter('bulk_actions-edit-hippoo_ticket','hippoo_ticket_custom_bulk_actions');
-
-    add_filter('handle_bulk_actions-edit-hippoo_ticket', function($redirect_url, $action, $post_ids) {
-        if ($action == 'status_close') {
-            foreach ($post_ids as $post_id) {
-                wp_update_post([
-                    'ID' => $post_id,
-                    'post_status' => 'hippoo_close'
-                ]);
-            }
-            $redirect_url = add_query_arg('status_close', count($post_ids), $redirect_url);
-        }
-        return $redirect_url;
-    }, 10, 3);
-
-
-    add_action( 'after_delete_post', 'hippoo_ticket_delete_ticket_hook', 10, 2 );
-    function hippoo_ticket_delete_ticket_hook( $post_id, $post ) {
-        if ( 'hippoo_ticket' !== $post->post_type )
-            return;
-        global $wpdb;
-        $wpdb->query($wpdb->prepare("DELETE FROM {$wpdb->prefix}hippoo_ticket WHERE pid = %d", $post_id));
-    }
-
-
-    function hippoo_ticket_change_the_author( $name ) {
-        if(is_admin()){
-            if ( !function_exists( 'get_current_screen' ) ) {
-               require_once ABSPATH . '/wp-admin/includes/screen.php';
-            }
-            $screen = get_current_screen();
-            if($screen->id != 'edit-hippoo_ticket')
-                return $name;
-
-            global $post;
-            return get_post_meta($post->post_parent,'_billing_first_name',true).' '.get_post_meta($post->post_parent,'_billing_last_name',true);
+        $redirect_url = add_query_arg( 'status_close', count( $post_ids ), $redirect_url );
+    }
+    return $redirect_url;
+}
+
+add_filter( 'handle_bulk_actions-edit-hippoo_ticket', 'hippoo_ticket_handle_bulk_actions', 10, 3 );
+
+function hippoo_ticket_delete_ticket_hook( $post_id, $post ) {
+    global $wpdb;
+    if ( 'hippoo_ticket' !== $post->post_type ) {
+        return;
+    }
+    // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
+    $wpdb->query( $wpdb->prepare( "DELETE FROM {$wpdb->prefix}hippoo_ticket WHERE pid = %d", $post_id ) );
+    // phpcs:enable
+}
+
+add_action( 'after_delete_post', 'hippoo_ticket_delete_ticket_hook', 10, 2 );
+
+function hippoo_ticket_change_the_author( $name ) {
+    global $post;
+
+    if ( is_admin() ) {
+        if ( ! function_exists( 'get_current_screen' ) ) {
+            require_once ABSPATH . '/wp-admin/includes/screen.php';
         }
-    }
-    add_filter( 'the_author', 'hippoo_ticket_change_the_author', 10, 1);
-
-    function hippoo_ticket_admin_footer(){
-        if(is_admin() && isset($_GET['post_type']) && $_GET['post_type'] == 'hippoo_ticket'){
-        ?>
-            <style type="text/css">
-                {
-                    display: none;
-                }
-            </style>
-            <script type="text/javascript">
-                jQuery('a[href="post-new.php?post_type=hippoo_ticket"]').hide();
-                jQuery('a.page-title-action').hide();
-            </script>
-        <?php
+
+        $screen = get_current_screen();
+        if ( $screen->id != 'edit-hippoo_ticket' ) {
+            return $name;
         }
-    }
-    add_action('admin_footer','hippoo_ticket_admin_footer');
-
-?>
+
+        return get_post_meta( $post->post_parent, '_billing_first_name', true ) . ' ' . get_post_meta( $post->post_parent, '_billing_last_name', true );
+    }
+}
+
+add_filter( 'the_author', 'hippoo_ticket_change_the_author', 10, 1 );

hippoo-ticket/trunk/app/utils.php

@@ -1 +1 @@
 <?php
-    function hippoo_add_ticket($post_id, $content, $media_ids, $type, $user_id=0){
-
-        # type:
-        #    1 User
-        #    2 Support
-        $user_id = !empty($user_id) ? $user_id : get_current_user_id();
-
-        // Check if $user_id is still empty or 0, then attempt to fetch author ID
-        global $wpdb;
-        if (empty($user_id)) {
-            $author_id = $wpdb->get_var(
-                $wpdb->prepare("SELECT post_author FROM $wpdb->posts WHERE ID = %d", esc_sql($post_id))
+
+function hippoo_add_ticket( $post_id, $content, $media_ids, $type, $user_id = 0 ) {
+    global $wpdb;
+
+    # type:
+    #    1 User
+    #    2 Support
+    $user_id = ! empty( $user_id ) ? $user_id : get_current_user_id();
+
+    // Check if $user_id is still empty or 0, then attempt to fetch author ID
+    if ( empty( $user_id ) ) {
+        // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
+        $author_id = $wpdb->get_var(
+            $wpdb->prepare(
+                "SELECT post_author FROM {$wpdb->posts} WHERE ID = %d",
+                esc_sql( $post_id )
+            )
+        );
+        // phpcs:enable
+
+        // Assign the retrieved author ID to $user_id only if it's not empty
+        if ( $author_id ) {
+            $user_id = $author_id;
+        }
+    }
+    
+    $post = get_post( $post_id );
+
+    if ( empty( $post ) ) {
+        return array(
+            "ticket_submited" => false,
+            "message"         => "The post_id is not found"
+        );
+    }
+    
+    // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
+    $ticket_id = $wpdb->get_var(
+        $wpdb->prepare(
+            "SELECT ID FROM {$wpdb->posts} WHERE post_type='hippoo_ticket' AND post_parent=%d",
+            esc_sql( $post_id )
+        )
+    );
+    // phpcs:enable
+        
+    if ( empty( $ticket_id ) ) {
+        $args = [
+            'post_title'  => "Ticket Number #$post_id",
+            'post_author' => $user_id,
+            'post_type'   => 'hippoo_ticket',
+            'post_status' => 'hippoo_waiting',
+            'post_parent' => $post_id
+        ];
+
+        $ticket_id = wp_insert_post( $args );
+    }
+        
+    if ( empty( $ticket_id ) ) {
+        return array(
+            "ticket_submited" => false,
+            "message"         => "Unable to insert ticket"
+        );
+    }
+        
+    wp_update_post( [ 'ID' => $ticket_id, 'post_status' => ( $type == 1 ? 'hippoo_waiting' : 'hippoo_answered' ) ] );
+    
+    if ( function_exists('parsidate') ) {
+        $date = parsidate( 'Y-m-d H:i:s', 'now', 'eng' );
+    } else {
+        $date = gmdate( 'Y-m-d H:i:s' );
+    }
+    
+    $args = [
+        'pid'       => $ticket_id,
+        'uid'       => $user_id,
+        'type'      => ( $type == 1 ? 'User' : 'Support' ),
+        'date'      => $date,
+        'content'   => esc_sql( $content ),
+        'media_ids' => esc_sql( $media_ids ),
+        'see'       => 0,
+    ];
+    
+    // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
+    $insert_result = $wpdb->insert( "{$wpdb->prefix}hippoo_ticket", $args );
+    // phpcs:enable
+
+    if ( $insert_result != true ) {
+        return array(
+            "ticket_submited" => false,
+            "message"         => "Unable to insert hippoo ticket"
+        );
+    }
+    
+    return array(
+        "ticket_submited" => true,
+        "message"         => "Ticket submited successfully"
+    ); 
+}
+
+function hippoo_ticket_status( $post_id, $item=3 ) {
+    $status = get_post_status( $post_id );
+    if ( ! in_array( $status, [ 'hippoo_waiting', 'hippoo_answered', 'hippoo_close' ] ) ) {
+        return '';
+    }
+    
+    if ( $item == 1 ) {
+        return $status;
+    }
+    
+    $label = get_post_status_object( $status )->label;
+    
+    if ( $item == 2 ) {
+        return $label;
+    }
+    
+    $color = $status == 'hippoo_answered' ? 'green' : ( $status == 'hippoo_close' ? 'red' : 'blue' );
+    return "<span class='hippoo-status status-$color' style='color:$color'>$label</span>";
+}
+
+function hippoo_ticket_sms( $ticket_id ){
+    $opt = get_option( 'hippoo_ticket',[] );
+}
+
+function hippoo_ticket_email( $ticket_id ) {
+    global $wpdb;
+
+    $opt  = get_option( 'hippoo_ticket', [] );
+    $url  = get_permalink( $opt['pg_ticket'] ) . "?oid=$ticket_id";
+    
+    // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
+    $row = $wpdb->get_row(
+        $wpdb->prepare(
+            "SELECT post_title, user_login, user_email FROM {$wpdb->posts} p JOIN {$wpdb->users} u ON u.ID = post_author AND p.ID = %d",
+            $ticket_id
+        )
+    );
+    // phpcs:enable
+
+    $subj  = 'Tickets reply URL ' . home_url();
+    $email = str_replace( [ '%user%', '%ticket%', '%url%' ], [ $row->user_login, $row->post_title, $url ], $opt['email'] );
+
+    wp_mail( $row->user_email, $subj, $email, [ 'Content-Type: text/html; charset=UTF-8' ] );
+}
+
+function hippoo_ticket_get_ticket_order( $order_id ) {
+    global $wpdb;
+
+    // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
+    return $wpdb->get_row(
+        $wpdb->prepare(
+            "SELECT * FROM {$wpdb->posts} WHERE post_type='hippoo_ticket' AND post_parent=%d AND post_status IN ('hippoo_waiting', 'hippoo_answered', 'hippoo_close')",
+            $order_id
+        )
+    );
+    // phpcs:enable
+}
+
+function hippoo_ticket_get_ticket( $ticket_id ) {
+    global $wpdb;
+
+    // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
+    return $wpdb->get_row(
+        $wpdb->prepare(
+            "SELECT * FROM {$wpdb->posts} WHERE post_type='hippoo_ticket' AND ID=%d",
+            $ticket_id
+        )
+    );
+    // phpcs:enable
+}
+
+function hippoo_ticket_get_media_urls( $media_ids ) {
+    $media_ids_array = explode( ',', $media_ids );
+    $media_urls = array();
+    foreach ( $media_ids_array as $media_id ) {
+        $attachment_metadata = wp_get_attachment_metadata( $media_id );
+        if ( $attachment_metadata ) {
+            $media_url = wp_get_attachment_url( $media_id );
+            $media_urls[] = $media_url;
+        }
+    }
+    return $media_urls;
+}
+
+function hippoo_ticket_get_media_urls_html( $media_ids ) {
+    // phpcs:disable PluginCheck.CodeAnalysis.ImageFunctions.NonEnqueuedImage
+    $html_img_template = "<li>
+                <a href='#URL' target='BLANK'>
+                    <img src='#URL' />
+                </a>
+                </li>";
+    // phpcs:enable
+    $html = "";
+    $media_urls = hippoo_ticket_get_media_urls( $media_ids );
+    foreach ( $media_urls as $media_url ) {
+        $html .= str_replace( "#URL", $media_url, $html_img_template );
+    }
+    return $html;
+}
+
+function hippoo_ticket_generate_tickets_table_body_html( $ticket_id ) {
+    global $wpdb;
+    $rows = null;
+    if ( ! empty( $ticket_id ) ) {
+        // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
+        $rows = $wpdb->get_results(
+            $wpdb->prepare(
+                "SELECT * FROM {$wpdb->prefix}hippoo_ticket WHERE pid = %d ORDER BY id DESC",
+                $ticket_id
+            )
+        );
+        // phpcs:enable
+
+        foreach ( $rows as $row ) {
+            $row->media_urls_html = hippoo_ticket_get_media_urls_html( $row->media_ids );
+            $row->content = str_replace( '\"', '"', $row->content );
+        }
+    }
+    return $rows;
+}
+                
+function hippoo_ticket_media_upload() {
+    // phpcs:ignore
+    if ( empty( $_FILES['file'] ) ) {
+        return new WP_Error( 'invalid_file', 'Invalid file.', [ 'status' => 400 ] );
+    }
+    
+    $attachment_ids = array();
+    $files = isset( $_FILES['file'] ) ? $_FILES['file'] : array(); // phpcs:ignore
+    
+    foreach ( $files['name'] as $index => $name ) {
+        $file = array(
+            'name'     => $name,
+            'type'     => $files['type'][$index],
+            'tmp_name' => $files['tmp_name'][$index],
+            'error'    => $files['error'][$index],
+            'size'     => $files['size'][$index]
+        );
+        
+        // Check file size
+        $file_size_limit = 350 * 1024; // 350 KB
+        if ( $file['size'] > $file_size_limit ) {
+            return new WP_Error( 'file_size_exceeded', 'File size exceeded the limit.', [ 'status' => 400 ] );
+        }
+        
+        // Check file extension
+        $allowed_extensions = array( 'png', 'jpg', 'jpeg' );
+        $file_extension = strtolower( pathinfo( $file['name'], PATHINFO_EXTENSION ) );
+        if ( ! in_array( $file_extension, $allowed_extensions ) ) {
+            return new WP_Error( 'invalid_extension', 'Invalid file extension.', [ 'status' => 400 ] );
+        }
+        
+        $upload = wp_upload_bits( $file['name'], null, file_get_contents( $file['tmp_name'] ) );
+        
+        if ( ! $upload['error'] ) {
+            $attachment = array(
+                'post_mime_type' => $upload['type'],
+                'post_title'     => sanitize_file_name( $upload['file'] ),
+                'post_content'   => '',
+                'post_status'    => 'inherit'
             );
             
-            // Assign the retrieved author ID to $user_id only if it's not empty
-            if ($author_id) {
-                $user_id = $author_id;
-            }
-        }
-        
-        $post = get_post($post_id);
-        if (empty($post))
-            return array(
-                "ticket_submited" => false,
-                "message" => "The post_id is not found"
-            );
-
-        $ticket_id = $wpdb->get_var(
-            $wpdb->prepare(
-                "SELECT ID FROM $wpdb->posts WHERE post_type='hippoo_ticket' AND post_parent=%d",
-                 esc_sql($post_id))
-            );
-
-        if(empty($ticket_id)){
-            $args = [
-                'post_title' =>"Ticket Number #$post_id",
-                'post_author'=>$user_id,
-                'post_type'  =>'hippoo_ticket',
-                'post_status'=>'hippoo_waiting',
-                'post_parent'=>$post_id
-                ];
-            $ticket_id = wp_insert_post($args);
-        }
-
-        if (empty($ticket_id))
-            return array(
-                "ticket_submited" => false,
-                "message" => "Unable to insert ticket"
-            );
-
-        wp_update_post(['ID' => $ticket_id,'post_status' => ($type==1?'hippoo_waiting':'hippoo_answered')]);
-        
-        if( function_exists('parsidate') ){
-            $date = parsidate('Y-m-d H:i:s','now','eng');
-        } else {
-            $date = date('Y-m-d H:i:s');
-        }
-        
-        $args = [
-            'pid'       =>$ticket_id,
-            'uid'       =>$user_id,
-            'type'      =>($type==1?'User':'Support'),
-            'date'      =>$date,
-            'content'   =>esc_sql($content),
-            'media_ids' =>esc_sql($media_ids),
-            'see'       => 0,
-            ];
-        
-        $insert_result = $wpdb->insert("{$wpdb->prefix}hippoo_ticket", $args);
-        if ($insert_result != true)
-            return array(
-                "ticket_submited" => false,
-                "message" => "Unable to insert hippoo ticket"
-        );
-
-        return array(
-                "ticket_submited" => true,
-                "message" => "Ticket submited successfully"
-        ); 
-    }
-
-    function hippoo_ticket_status($post_id, $item=3){
-        $status = get_post_status($post_id);
-        if(!in_array($status,['hippoo_waiting','hippoo_answered','hippoo_close']))
-            return '';
-        
-        if($item == 1)
-            return $status;
-        
-        $label = get_post_status_object($status)->label;
-        
-        if($item == 2)
-            return $label;
-        
-        $color = $status=='hippoo_waiting'?'green':($status=='hippoo_close'?'red':'blue');
-        return "<span style='color:$color'>$label</span>";
-    }
-
-    function hippoo_ticket_sms($ticket_id){
-        $opt = get_option('hippoo_ticket',[]);
-    }
-
-    function hippoo_ticket_email($ticket_id){
-
-        global $wpdb;
-        $opt  = get_option('hippoo_ticket',[]);
-        $url  = get_permalink($opt['pg_ticket'])."?oid=$ticket_id";
-        $row = $wpdb->get_row(
-            $wpdb->prepare(
-                "SELECT post_title, user_login, user_email FROM $wpdb->posts p JOIN $wpdb->users u ON u.ID = post_author AND p.ID = %d",
-                $ticket_id
-                )
-            );
-        $subj = 'Tickets reply URL '.home_url();
-        $email= str_replace(['%user%','%ticket%','%url%'],[$row->user_login,$row->post_title,$url],$opt['email']);
-        wp_mail($row->user_email,$subj,$email,['Content-Type: text/html; charset=UTF-8']);
-    }
-
-    function hippoo_ticket_get_ticket_order($order_id){
-        global $wpdb;
-        return $wpdb->get_row(
-                $wpdb->prepare(
-                    "SELECT * FROM $wpdb->posts WHERE post_type='hippoo_ticket' AND post_parent=%d AND post_status IN ('hippoo_waiting', 'hippoo_answered', 'hippoo_close')",
-                $order_id
-            )
-        );
-    }
-
-
-    function hippoo_ticket_get_ticket($ticket_id){
-        global $wpdb;
-        return $wpdb->get_row(
-                $wpdb->prepare(
-                    "SELECT * FROM $wpdb->posts WHERE post_type='hippoo_ticket' AND ID = %d",
-                    $ticket_id
-                    )
-                );
-    }
-
-    function hippoo_ticket_get_media_urls($media_ids) {
-        $media_ids_array = explode(',', $media_ids);
-        $media_urls = array();
-        foreach ($media_ids_array as $media_id) {
-            $attachment_metadata = wp_get_attachment_metadata($media_id);
-            if ($attachment_metadata) {
-                $media_url = wp_get_attachment_url($media_id);
-                $media_urls[] = $media_url;
-            }
-        }
-        return $media_urls;
-    }
-    
-    function hippoo_ticket_get_media_urls_html($media_ids) {
-        $html_img_template = "<li>
-                                <a href='#URL' target='BLANK'>
-                                    <img src='#URL' />
-                                </a>
-                             </li>";
-        $html = "";
-        $media_urls = hippoo_ticket_get_media_urls($media_ids);
-        foreach ($media_urls as $media_url) {
-            $html .= str_replace("#URL", $media_url, $html_img_template);
-        }
-        
-        return $html;
-    }
-
-    function hippoo_ticket_generate_tickets_table_body_html($ticket_id){
-        $rows = null;
-        global $wpdb;
-        $table_name = $wpdb->prefix . 'hippoo_ticket';
-        if (!empty($ticket_id)) {
-            $prepared_query = $wpdb->prepare(
-                "SELECT * FROM $table_name
-                WHERE pid = %d
-                ORDER BY id DESC",
-                $ticket_id
-            );
-
-            $rows = $wpdb->get_results($prepared_query);
-
-            foreach ($rows as $row) {
-                $row->media_urls_html = hippoo_ticket_get_media_urls_html($row->media_ids);
-                $row->content = str_replace('\"', '"', $row->content);
-            }
-        }
-        return $rows;
-    }
-
-    function hippoo_ticket_media_upload(){
-    if (empty($_FILES['file'])) {
-        return new WP_Error('invalid_file', 'Invalid file.', ['status' => 400]);
-    }
-
-    $attachment_ids = array();
-    $files = isset($_FILES['file']) ? $_FILES['file'] : array();
-
-    foreach ($files['name'] as $index => $name) {
-        $file = array(
-            'name' => $name,
-            'type' => $files['type'][$index],
-            'tmp_name' => $files['tmp_name'][$index],
-            'error' => $files['error'][$index],
-            'size' => $files['size'][$index]
-        );
-
-        // Check file size
-        $file_size_limit = 350 * 1024; // 350 KB
-        if ($file['size'] > $file_size_limit) {
-            return new WP_Error('file_size_exceeded', 'File size exceeded the limit.', ['status' => 400]);
-        }
-
-        // Check file extension
-        $allowed_extensions = array('png', 'jpg', 'jpeg');
-        $file_extension = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION));
-        if (!in_array($file_extension, $allowed_extensions)) {
-            return new WP_Error('invalid_extension', 'Invalid file extension.', ['status' => 400]);
-        }
-
-        $upload = wp_upload_bits($file['name'], null, file_get_contents($file['tmp_name']));
-
-        if (!$upload['error']) {
-            $attachment = array(
-                'post_mime_type' => $upload['type'],
-                'post_title' => sanitize_file_name($upload['file']),
-                'post_content' => '',
-                'post_status' => 'inherit'
-            );
-
-            $attachment_id = wp_insert_attachment($attachment, $upload['file']);
-
-            if (!is_wp_error($attachment_id)) {
-                $attachment_data = wp_generate_attachment_metadata($attachment_id, $upload['file']);
-                wp_update_attachment_metadata($attachment_id, $attachment_data);
+            $attachment_id = wp_insert_attachment( $attachment, $upload['file'] );
+            
+            if ( ! is_wp_error( $attachment_id ) ) {
+                $attachment_data = wp_generate_attachment_metadata( $attachment_id, $upload['file'] );
+                wp_update_attachment_metadata( $attachment_id, $attachment_data );
                 $attachment_ids[] = $attachment_id;
             }
         }
     }
-    $attachment_ids = implode(',', $attachment_ids);
+    $attachment_ids = implode( ',', $attachment_ids );
     return $attachment_ids;
-    }
-
-?>
+}

hippoo-ticket/trunk/app/web_api.php

@@ -2 +2 @@
 if ( ! defined( 'ABSPATH' ) ) exit; // Exit if accessed directly     
 
-add_action('rest_api_init', function () {
-    require_once __DIR__ . DIRECTORY_SEPARATOR .'web_api_auth.php';
+add_action( 'rest_api_init', function () {
+    require_once hippoo_ticket_path . 'app/web_api_auth.php';
     $controller = new HippooTicketControllerWithAuth();
     $controller->register_routes();
-});
-?>
+} );

hippoo-ticket/trunk/app/web_api_auth.php

@@ -3 +3 @@
 class HippooTicketControllerWithAuth extends WC_REST_Customers_Controller {
 
-    public function register_routes()
-    {
+    public function register_routes() {
         #
         $args_hippoo_ticket_insert = array(
@@ -17 +16 @@
         $args_hippoo_ticket_list = array(
             'methods'  => 'GET',
-            'callback' => array( $this, 'hippoo_ticket_list'),
+            'callback' => array( $this, 'hippoo_ticket_list' ),
             'permission_callback' => array( $this, 'hippo_edit_other_post_permissions_check' ),
             'args'                => array(
@@ -31 +30 @@
         $args_hippoo_ticket_get_ticket_info_by_ticket_id = array(
             'methods'  => 'GET',
-            'callback' => array( $this, 'hippoo_ticket_get_ticket_info_by_ticket_id'),
+            'callback' => array( $this, 'hippoo_ticket_get_ticket_info_by_ticket_id' ),
             'permission_callback' => array( $this, 'hippo_edit_other_post_permissions_check' ),
             'args'                => array(
                                             'id' => array(
                                                 'required' => true,
-                                                'validate_callback' => function ($param, $request, $key) {
-                                                    return is_numeric($param);
+                                                'validate_callback' => function ( $param, $request, $key ) {
+                                                    return is_numeric( $param );
                                                 }
                                             ),
@@ -46 +45 @@
         );
         register_rest_route( 'wc-hippoo/v1', 'wp/tickets/(?P<id>\d+)', $args_hippoo_ticket_get_ticket_info_by_ticket_id );
-
         
         #
         $args_hippoo_ticket_get_ticket_info_by_order = array(
             'methods'  => 'GET',
-            'callback' => array( $this, 'args_hippoo_ticket_get_ticket_info_by_order'),
+            'callback' => array( $this, 'args_hippoo_ticket_get_ticket_info_by_order' ),
             'permission_callback' => array( $this, 'hippo_edit_other_post_permissions_check' )
 
@@ -60 +58 @@
         $args_hippoo_ticket_delete = array(
             'methods'  => 'GET',
-            'callback' => array( $this, 'hippoo_ticket_delete'),
-            'permission_callback' => array( $this, 'hippo_edit_other_post_permissions_check' )
-
-        );
-        register_rest_route( 'wc-hippoo/v1', 'wp/tickets/(?P<id>\d+)/delete', $args_hippoo_ticket_delete);
+            'callback' => array( $this, 'hippoo_ticket_delete' ),
+            'permission_callback' => array( $this, 'hippo_edit_other_post_permissions_check' )
+
+        );
+        register_rest_route( 'wc-hippoo/v1', 'wp/tickets/(?P<id>\d+)/delete', $args_hippoo_ticket_delete );
         
         #
         $args_hippoo_ticket_update_status = array(
             'methods'  => 'POST',
-            'callback' => array( $this, 'hippoo_ticket_update_status'),
-            'permission_callback' => array( $this, 'hippo_edit_other_post_permissions_check' )
-
-        );
-        register_rest_route( 'wc-hippoo/v1', 'wp/tickets/(?P<id>\d+)/status', $args_hippoo_ticket_update_status);
-        
+            'callback' => array( $this, 'hippoo_ticket_update_status' ),
+            'permission_callback' => array( $this, 'hippo_edit_other_post_permissions_check' )
+
+        );
+        register_rest_route( 'wc-hippoo/v1', 'wp/tickets/(?P<id>\d+)/status', $args_hippoo_ticket_update_status );
         
         #
         $args_hippoo_ticket_count = array(
             'methods'  => 'GET',
-            'callback' => array( $this, 'hippoo_ticket_count'),
-            'permission_callback' => array( $this, 'hippo_edit_other_post_permissions_check' )
-
-        );
-        register_rest_route( 'wc-hippoo/v1', 'wp/tickets/count', $args_hippoo_ticket_count);
-    }
-
-    function hippo_edit_other_post_permissions_check(){
+            'callback' => array( $this, 'hippoo_ticket_count' ),
+            'permission_callback' => array( $this, 'hippo_edit_other_post_permissions_check' )
+
+        );
+        register_rest_route( 'wc-hippoo/v1', 'wp/tickets/count', $args_hippoo_ticket_count );
+    }
+
+    function hippo_edit_other_post_permissions_check() {
         return current_user_can( 'edit_posts' );
     }
 
-    function hippoo_ticket_delete($data){
-       
-        $ticket = hippoo_ticket_get_ticket_order($data['id']);
-        
-        if(empty($ticket))
+    function hippoo_ticket_delete( $data ) {
+        $ticket = hippoo_ticket_get_ticket_order( $data['id'] );
+        if ( empty( $ticket ) ) {
             $response =  array(
-                    'message' => 'No ticket found',
-                );
-            return new WP_REST_Response($response, 200);
-            
-
-        wp_delete_post($ticket->ID);
+                'message' => 'No ticket found',
+            );
+            return new WP_REST_Response( $response, 200 );
+        }
+        wp_delete_post( $ticket->ID );
         $response =  array(
-                    'message' => 'Ticket deleted',
-                    );
-        return new WP_REST_Response($response, 200);
-    }
-
-    function hippoo_ticket_update_status($data){
+            'message' => 'Ticket deleted',
+        );
+        return new WP_REST_Response( $response, 200 );
+    }
+
+    function hippoo_ticket_update_status( $data ) {
         $status = $data->get_json_params()['status'];
-        $ticket = hippoo_ticket_get_ticket_order($data['id']);
-        wp_update_post(['ID' => $ticket->ID,'post_status' => $status]);
+        $ticket = hippoo_ticket_get_ticket_order( $data['id'] );
+        wp_update_post( [ 'ID' => $ticket->ID, 'post_status' => $status ] );
         $response =  array(
-                    'message' => 'Ticket status updated',
-                    );
-        return new WP_REST_Response($response, 200);
-    }
-
-    function hippoo_ticket_insert($data){
-        global $wpdb,$hippoo_ticket_api_page;
-        $arr = $data->get_json_params();
-
-        $post_id    = $arr['post_id'];
-        $content    = $arr['content'];
-        $media_ids  = implode(',', $arr['media_ids']);
-        $user_id    = get_post_meta($post_id, '_customer_user', true);
-        $type       = 2;
-
-        $hippoo_add_ticket_submmited = hippoo_add_ticket($post_id, $content, $media_ids, $type, $user_id);
-
-        return new WP_REST_Response($hippoo_add_ticket_submmited, 200);
-    }
-
-    function hippoo_ticket_list($data){
-        global $wpdb,$hippoo_ticket_api_page;
-
-        if (!empty($data['page'])) {
-            $page = esc_sql($data['page']);
+            'message' => 'Ticket status updated',
+        );
+        return new WP_REST_Response( $response, 200 );
+    }
+
+    function hippoo_ticket_insert( $data ) {
+        global $wpdb, $hippoo_ticket_api_page;
+        $arr       = $data->get_json_params();
+        $post_id   = $arr['post_id'];
+        $content   = $arr['content'];
+        $media_ids = implode( ',', $arr['media_ids'] );
+        $user_id   = get_post_meta( $post_id, '_customer_user', true );
+        $type      = 2;
+        $hippoo_add_ticket_submmited = hippoo_add_ticket( $post_id, $content, $media_ids, $type, $user_id );
+        return new WP_REST_Response( $hippoo_add_ticket_submmited, 200 );
+    }
+
+    function hippoo_ticket_list( $data ) {
+        global $wpdb, $hippoo_ticket_api_page;
+
+        if ( ! empty( $data['page'] ) ) {
+            $page = esc_sql( $data['page'] );
         } else {
             $page = "1";
         }
+
         $page = --$page * $hippoo_ticket_api_page;
 
-        $hippoo_ticket_table_name = $wpdb->prefix . 'hippoo_ticket';
-        $query = $wpdb->prepare(
-            "SELECT p.*, (
-                SELECT content FROM $hippoo_ticket_table_name WHERE pid = p.id ORDER BY id DESC LIMIT 1
-            ) AS latest
-            FROM $wpdb->posts p 
-            WHERE p.post_type = 'hippoo_ticket' AND p.post_status IN ('hippoo_waiting', 'hippoo_answered', 'hippoo_close')
-            ORDER BY p.ID DESC 
-            LIMIT %d, %d",
-            $page,
-            $hippoo_ticket_api_page
-        );
-        $rows = $wpdb->get_results($query);
-        if(empty($rows))
-        {
-            $response =  array();
-            return new WP_REST_Response($response, 200);
-        }
+        // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
+        $rows = $wpdb->get_results(
+            $wpdb->prepare(
+                "SELECT p.*, (
+                    SELECT content FROM {$wpdb->prefix}hippoo_ticket WHERE pid = p.id ORDER BY id DESC LIMIT 1
+                ) AS latest
+                FROM $wpdb->posts p 
+                WHERE p.post_type = 'hippoo_ticket' AND p.post_status IN ('hippoo_waiting', 'hippoo_answered', 'hippoo_close')
+                ORDER BY p.ID DESC 
+                LIMIT %d, %d",
+                $page,
+                $hippoo_ticket_api_page
+            )
+        );
+        // phpcs:enable
+
+        if ( empty( $rows ) ) {
+            $response = array();
+            return new WP_REST_Response( $response, 200 );
+        }
+
         $out = [];
-        foreach($rows as $ticket){
-
+        foreach ( $rows as $ticket ) {
             $out[] = [
                 'ticket_id'=> $ticket->ID,
                 'order_id' => $ticket->post_parent,
-                'customer_name' => get_post_meta($ticket->post_parent,'_billing_first_name',true).' '.get_post_meta($ticket->post_parent,'_billing_last_name',true),
-                'customer_phone'=> get_post_meta($ticket->post_parent,'_billing_phone',true),
-                'customer_email'=> get_post_meta($ticket->post_parent,'_billing_email',true),
+                'customer_name' => get_post_meta( $ticket->post_parent, '_billing_first_name', true ) . ' '. get_post_meta( $ticket->post_parent, '_billing_last_name', true ),
+                'customer_phone'=> get_post_meta( $ticket->post_parent, '_billing_phone', true ),
+                'customer_email'=> get_post_meta( $ticket->post_parent, '_billing_email', true ),
                 'date'         => $ticket->post_date,
                 'latest_reply' => $ticket->latest,
@@ -175 +169 @@
             ];
         }
+        
         return new WP_REST_Response( $out, 200 );
     }
 
-    function hippoo_ticket_get_ticket_info_by_order_id($data){
-
-        $order   = wc_get_order( $data['id'] );
-        if(empty($order))
-        {
-            $response =  array();
-            return new WP_REST_Response($response, 200);
-        }
-
-        $ticket  = hippoo_ticket_get_ticket_order($data['id']);
-        return $this->hippoo_ticket_get_tickets_and_replies($ticket);
-    }
-
-    function hippoo_ticket_get_ticket_info_by_ticket_id($data){
-
-        if (empty($data['id'])) {
-            $response =  array(
-                    'message' => 'ticket_id not found',
+    function hippoo_ticket_get_ticket_info_by_order_id( $data ) {
+        $order = wc_get_order( $data['id'] );
+        if ( empty( $order ) ) {
+            $response = array();
+            return new WP_REST_Response( $response, 200 );
+        }
+        $ticket = hippoo_ticket_get_ticket_order( $data['id'] );
+        return $this->hippoo_ticket_get_tickets_and_replies( $ticket );
+    }
+
+    function hippoo_ticket_get_ticket_info_by_ticket_id( $data ) {
+        if ( empty( $data['id'] ) ) {
+            $response = array(
+                'message' => 'ticket_id not found',
             );
-            return new WP_REST_Response($response, 200);
+            return new WP_REST_Response( $response, 200 );
         }
         $ticket_id = $data['id'];
-        $ticket = hippoo_ticket_get_ticket($ticket_id);
-
-        if (empty($ticket)) {
-            $response =  array();
-            return new WP_REST_Response($response, 200);
-        }
-        return $this->hippoo_ticket_get_tickets_and_replies($ticket,$data);
-    }
-
-    function hippoo_ticket_get_tickets_and_replies($ticket, $data){
-        global $wpdb,$hippoo_ticket_api_page;
-
-        if (!empty($data['page'])) {
-            $page = esc_sql($data['page']);
+        $ticket = hippoo_ticket_get_ticket( $ticket_id );
+        if ( empty( $ticket ) ) {
+            $response = array();
+            return new WP_REST_Response( $response, 200 );
+        }
+        return $this->hippoo_ticket_get_tickets_and_replies( $ticket, $data );
+    }
+
+    function hippoo_ticket_get_tickets_and_replies( $ticket, $data ){
+        global $wpdb, $hippoo_ticket_api_page;
+
+        if ( ! empty( $data['page'] ) ) {
+            $page = esc_sql( $data['page'] );
         } else {
             $page = "1";
         }
+
         $page = --$page * $hippoo_ticket_api_page;
-        $query = $wpdb->prepare(
-            "SELECT id, date, type as uby, content as value, media_ids 
-            FROM {$wpdb->prefix}hippoo_ticket 
-            WHERE pid = %d 
-            ORDER BY id DESC 
-            LIMIT %d, %d",
-            $ticket->ID,
-            $page,
-            $hippoo_ticket_api_page
-        );
-        $replies = $wpdb->get_results($query);
-        foreach($replies as $i=>$rep){
-            if (property_exists($rep, 'media_ids') ) {
-                $media_urls =  hippoo_ticket_get_media_urls($rep->media_ids);
+
+        // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
+        $replies = $wpdb->get_results(
+            $wpdb->prepare(
+                "SELECT id, date, type as uby, content as value, media_ids 
+                FROM {$wpdb->prefix}hippoo_ticket 
+                WHERE pid = %d 
+                ORDER BY id DESC 
+                LIMIT %d, %d",
+                $ticket->ID,
+                $page,
+                $hippoo_ticket_api_page
+            )
+        );
+        // phpcs:enable
+
+        foreach ( $replies as $i=>$rep ) {
+            if ( property_exists( $rep, 'media_ids' ) ) {
+                $media_urls = hippoo_ticket_get_media_urls( $rep->media_ids );
                 $replies[$i]->media_urls = $media_urls;
             }
         }
+
         $out = [
-            'ticket_id'=> $ticket->ID,
-            'order_id' => $ticket->post_parent,
-            'customer_name' =>get_post_meta($ticket->post_parent,'_billing_first_name',true).' '.get_post_meta($ticket->post_parent,'_billing_last_name',true),
-            'customer_phone'=>get_post_meta($ticket->post_parent,'_billing_phone',true),
-            'customer_email'=>get_post_meta($ticket->post_parent,'_billing_email',true),
-            'status'  =>$ticket->post_status,
-            'replies' =>$replies
+            'ticket_id' => $ticket->ID,
+            'order_id'  => $ticket->post_parent,
+            'customer_name'  => get_post_meta( $ticket->post_parent, '_billing_first_name', true ) . ' ' . get_post_meta( $ticket->post_parent, '_billing_last_name', true ),
+            'customer_phone' => get_post_meta( $ticket->post_parent, '_billing_phone', true ),
+            'customer_email' => get_post_meta( $ticket->post_parent, '_billing_email', true ),
+            'status'  => $ticket->post_status,
+            'replies' => $replies
         ];
+
         return new WP_REST_Response( $out, 200 );
     }
 
-    function hippoo_ticket_count($data){
-        global $wpdb,$hippoo_ticket_api_page;
+    function hippoo_ticket_count( $data ) {
+        global $wpdb, $hippoo_ticket_api_page;
+
+        // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
         $cnt = $wpdb->get_var(
             $wpdb->prepare(
-                "SELECT COUNT(ID) FROM $wpdb->posts WHERE post_type = %s AND post_status = %s",
+                "SELECT COUNT(ID) FROM {$wpdb->posts} WHERE post_type = %s AND post_status = %s",
                 'hippoo_ticket',
                 'hippoo_waiting'
             )
         );
-        return new WP_REST_Response($cnt, 200);
-    }
-    }
+        // phpcs:enable
+
+        return new WP_REST_Response( $cnt, 200 );
+    }
+}

hippoo-ticket/trunk/assets/css/style.css

@@ -1 @@
-/* Style the barcode button */
-.barcode-button {
-    display: inline-block;
-    border: none;
+.hippoo-ticket-container {
+    display: flex;
+    flex-direction: column;
+    gap: 20px;
+}
+
+.hippoo-ticket-nav a {
+    display: inline-flex;
+    align-items: center;
+    gap: 5px;
+}
+
+.hippoo-ticket-nav a::before {
+    content: "";
+    display: inline-block;
+    width: 8px;
+    height: 8px;
+    border-left: 2px solid currentColor;
+    border-bottom: 2px solid currentColor;
+    transform: rotate(45deg);
+    margin-right: 4px;
+}
+
+.hippoo-ticket-head {
+    display: flex;
+    flex-direction: row;
+    justify-content: space-between;
+    gap: 20px;
+    padding: 15px 25px;
+    margin-bottom: 20px;
+    border: 1px solid #e7e7e7;
+    border-radius: 8px;
+}
+
+.hippoo-ticket-meta p {
+    flex: 1;
     margin: 0;
     padding: 0;
-    color: #0073aa;
-    border:1px solid #0073aa;
-    cursor: pointer;
-    border-radius: 3px;
-    font-size: 14px;
-    font-weight: 600;
-    padding: 5px 10px;
-    text-decoration: none;
+    box-sizing: border-box;
+    font-weight: bold;
+}
+
+.hippoo-ticket-form textarea {
+    resize: none;
+    outline: none;
+    box-shadow: none;
+    border: 1px solid #e7e7e7;
+    border-radius: 8px;
+    width: 100%;
+}
+
+.hippoo-upload-label {
+    cursor: pointer;
+}
+
+.hippoo-upload-label::before {
+    content: "";
+    display: inline-block;
+    width: 18px;
+    height: 18px;
+    margin-left: 8px;
+    background-image: url("../images/attach.svg");
+    background-size: contain;
+    background-repeat: no-repeat;
+    vertical-align: middle;
     position: relative;
-}
-.barcode-button img {
-    max-width: 100%;
-    height: auto;
+    top: -1px;
+}
+
+.hippoo-form-group {
+    margin-bottom: 20px;
+}
+
+.hippoo-form-actions {
+    display: flex;
+    flex-direction: row;
+    justify-content: space-between;
+    align-items: center;
+}
+
+.hippoo-file-upload {
+    flex: 1;
+    display: flex;
+    align-items: center;
+}
+
+.hippoo-upload-preview {
+    display: flex;
+    flex-direction: row;
+    gap: 10px;
+}
+
+.hippoo-upload-item {
+    width: 60px;
+    height: 40px;
+    position: relative;
+}
+
+.hippoo-upload-item img {
+    width: 100%;
+    max-height: 40px;
+    border-radius: 5px;
+}
+
+.hippoo-remove-file {
+    content: "";
+    display: inline-block;
+    width: 15px;
+    height: 15px;
+    background-color: #ffffff;
+    background-image: url("../images/close.svg");
+    background-size: contain;
+    background-repeat: no-repeat;
+    border: 1px solid #a8a8a8;
+    border-radius: 25px;
     vertical-align: middle;
-    width: 100px;
-}
-.hippoo-download{
-    display: inline-block;
-    width: 300px;
-    height: auto;
-}
-.barcode-ico{
-    display: block;
-    height: 24px !important;
-    width: 24px !important;
-    color: #0073aa;
-}
-
-/* Style the tooltip */
-.barcode-button span {
-    visibility: hidden;
     position: absolute;
-    top: -70px;
-    left: 50%;
-    transform: translateX(-50%);
-    background-color: #333;
-    color: #fff;
-    text-align: center;
-    padding: 20px;
-    border-radius: 5px;
-    font-size: 16px;
-    z-index: 1;
-}
-
-.barcode-button:hover span {
-    visibility: visible;
-}
-
-
-/* Style of the config page */
-.wh-heading{
-    font-weight: 700 !important;
-    font-size: 22px !important;
-    line-height: 30px !important;
-    color: #444444 !important;
-}
-
-.short-desc:after {
-    content:"";
-    display:block;
-    clear:both;
-}
-
-.short-desc .left{
-    width: 65%;
-    float: left;
-}
-
-.short-desc .left p{
-    font-weight: 400;
-    font-size: 19px;
-    line-height: 28px;
-    color: #000000;
-    padding-right: 80px;
-}
-
-.short-desc .right{
-    width: 35%;
-    float: right;
-}
-
-.short-desc .right div{
-    background: #FFFFFF;
-    border: 1px solid #DEDEDE;
-    border-radius: 16px;
-    text-align: center;
-    padding: 32px;
-    display: inline-block;
-    max-width: 320px;
-    font-weight: 600;
-    font-size: 18px;
-    line-height: 25px;
-    text-align: center;
-    color: #000000;
-    float: right
-}
-
-.short-desc .right div img{
-    display: block;
-    margin: 0 auto;
-    margin-bottom: 20px;
-    width: 200px;
-    height: auto;
-}
-
-.extentions{
-    border-top: 1px solid #D6D6D6;
-    margin-top: 35px;
-}
-
-.extentions > strong{
-    font-weight: 700;
-    font-size: 19px;
-    line-height: 26px;
-    color: #444444;
-    position: relative;
-    top: -15px;
-    background: #f0f0f1;
-    padding: 15px 15px 15px 0
-}
-
-.extentions > p{
-    font-weight: 400;
-    font-size: 18px;
-    line-height: 25px;
-    color: #000000;
-}
-
-.extentions .item{
-    width: 49%;
-    display: inline-block;
-    float: left
-}
-
-.extentions .item .item-inner{
-    background: #FFFFFF;
-    border: 1px solid #DEDEDE;
-    border-radius: 16px;
-    min-height: 200px;
-    margin: 15px 15px 15px 0;
-    padding: 30px;
-    position: relative
-}
-
-.extentions .item:nth-of-type(2n) .item-inner{
-    margin: 15px 0 15px 15px;
-}
-
-.extentions .item .item-inner strong{
-    font-weight: 700;
-    font-size: 16px;
-    line-height: 25px;
-    height: 75px;
-    color: #000000;
-    display: block
-}
-
-.extentions .item .item-inner p{
-    font-weight: 400;
+    top: -5px;
+    right: -5px;
+    z-index: 10000;
+    cursor: pointer;
+}
+
+.hippoo-empty-conversation {
+    display: flex;
+    flex-direction: column;
+    justify-content: center;
+    align-items: center;
+    padding: 15px 25px;
+    margin-bottom: 20px;
+    background-color: #fdfdfd;
+    border: 1px solid #e7e7e7;
+    border-radius: 8px;
+    min-height: 280px;
+}
+
+.hippoo-conversation-list {
+    display: flex;
+    flex-direction: column;
+    margin-bottom: 20px;
+    background-color: #fdfdfd;
+    border: 1px solid #e7e7e7;
+    border-radius: 8px;
+    min-height: 280px;
+}
+
+.hippoo-conversation-item {
+    display: flex;
+    flex-direction: column;
+    gap: 10px;
+    width: 100%;
+    padding: 25px;
+    border-bottom: 1px solid #eeeeee;
+}
+
+.hippoo-conversation-item:last-child {
+    border-bottom: none;
+}
+
+.hippoo-conversation-meta {
+    display: flex;
+    flex-direction: row;
+    align-items: center;
+    gap: 10px;
+}
+
+.hippoo-avatar img {
+    border-radius: 25px;
+}
+
+.hippoo-conversation-details {
+    display: flex;
+    flex-direction: column;
     font-size: 14px;
-    line-height: 22px;
-    color: #000000;
-}
-
-.extentions .item .item-inner a{
-    background: #5F238D;
-    border-radius: 60px;
-    padding: 10px 45px 12px;
-    font-weight: 700;
-    font-size: 14px;
-    color: #FFFFFF;
-    text-decoration: none;
-    float: left
-}
-
-.extentions .item .item-inner span{
-    float: right;
-    font-weight: 700;
-    font-size: 18px;
-    line-height: 25px;
-    color: #5F238D;
-    margin: 7px 0 0 0;
-}
-
-.extentions .item .item-inner img{
-    background: #CFCFCF;
-    border-radius: 8px;
-    position: absolute;
-    width: 75px;
-    height: auto;
-    top: 30px;
-    right: 30px;
-}
-
-@media only screen and (max-width: 480px) {
-
-    .short-desc .left,
-    .short-desc .right{
-        width: 100%;
-        float: none;
+}
+
+.hippoo-conversation-media .hippoo-attachments-label::before {
+    content: "";
+    display: inline-block;
+    width: 18px;
+    height: 18px;
+    margin-right: 8px;
+    background-image: url("../images/attach.svg");
+    background-size: contain;
+    background-repeat: no-repeat;
+    vertical-align: middle;
+    position: relative;
+    top: -1px;
+}
+
+.hippoo-conversation-media ul {
+    margin: 0 !important;
+    padding: 0 !important;
+    margin-top: 10px !important;
+    display: flex;
+    gap: 10px;
+}
+
+.hippoo-conversation-media li {
+    width: 60px;
+    height: 40px;
+    list-style-type: none !important;
+    margin: 0 !important;
+    padding: 0 !important;
+}
+
+.hippoo-conversation-media li img {
+    width: 100%;
+    max-height: 40px;
+    border-radius: 5px;
+}
+
+.hippoo-ticket-container .hippoo-status {
+    padding: 2px 10px;
+    border-radius: 8px;
+}
+
+.hippoo-ticket-container .hippoo-status.status-green {
+    background-color: #e8fbf6;
+    color: #1f9376;
+}
+
+.hippoo-ticket-container .hippoo-status.status-red {
+    background-color: #fbe9e8;
+    color: #93271f;
+}
+
+.hippoo-ticket-container .hippoo-status.status-blue {
+    background-color: #e8f0fb;
+    color: #1f5f93;
+}
+
+@media (max-width: 768px) {
+    .hippoo-ticket-head {
+        flex-direction: column;
+        gap: 10px;
     }
-    .short-desc .left p{
-        padding-right: 0;
-    }
-
-    .short-desc .right div{
-        display: block;
-        float: none;
-        margin: 20px auto
-    }
-
-    .extentions .item{
-        width: 100%;
-        display: block;
-        float: none
-    }
-    .extentions .item .item-inner{
-        margin: 15px !important;
-    }
-}
+}

hippoo-ticket/trunk/assets/js/script.js

@@ -1 @@
-// Generate barcodes and show them in tooltips
 jQuery(document).ready(function($) {
-    $('.barcode-button').hover(
-        function() {
-            var orderId = $(this).data('order-id');
-            var barcodeUrl = 'https://barcode.tec-it.com/barcode.ashx?data=' + orderId + '&code=Code128&dpi=96';
-            $(this).append('<span><img src="' + barcodeUrl + '"/></span>');
+    let fileCounter = 0;
 
-        },
-        function() {
-            $(this).find('span').remove();
+    // File upload handling
+    $('.hippoo-upload-input').on('change', function(e) {
+        e.preventDefault();
+        const files = this.files;
+        const previewContainer = $(this).parents('.hippoo-file-upload').find('.hippoo-upload-preview');
+        const form = $(this).closest('form');
+        
+        if (files.length > 5 || fileCounter >= 5) {
+            alert('Maximum 5 files allowed');
+            this.value = '';
+            return;
         }
-    );
+        
+        Array.from(files).forEach(file => {
+            if (file.size > 358400) {
+                alert('File too large: ' + file.name + ' \nImage size should not exceed 350KB');
+                return;
+            }
+            
+            if (file.type.match('image.*')) {
+                const reader = new FileReader();
+                const fileId = 'file-' + fileCounter++;
+                
+                reader.onload = function(e) {
+                    const previewElement = $(`
+                        <div class="hippoo-upload-item" data-file-id="${fileId}">
+                            <img src="${e.target.result}" alt="Preview">
+                            <span class="hippoo-remove-file"></span>
+                        </div>
+                    `);
+                    
+                    const fileInput = $(`
+                        <input type="file" name="file[]" id="${fileId}" 
+                               style="display: none;" data-file-name="${file.name}">
+                    `);
+                    
+                    const dataTransfer = new DataTransfer();
+                    dataTransfer.items.add(file);
+                    
+                    fileInput[0].files = dataTransfer.files;
+                    
+                    previewContainer.append(previewElement);
+                    form.append(fileInput);
+                };
+                
+                reader.readAsDataURL(file);
+            }
+        });
+    });
+    
+    // Remove file
+    $(document).on('click', '.hippoo-remove-file', function(e) {
+        e.preventDefault();
+        const item = $(this).parent();
+        const fileId = item.data('file-id');
+        
+        item.remove();
+        $('#' + fileId).remove();
+    });
 });

hippoo-ticket/trunk/hippoo-ticket.php

@@ -2 +2 @@
 /**
  * Plugin Name: Hippoo Ticket
- * Version: 1.0.1
+ * Version: 1.0.7
  * Plugin URI: https://Hippoo.app/
  * Description: A Free WooCommerce Plugin for Seamless Customer Support and support ticket.
  * Author: Hippoo team
+ * Author URI: https://Hippoo.app/
  * Text Domain: hippoo-ticket
  * Domain Path: /languages
@@ -27 +28 @@
 if ( ! defined( 'ABSPATH' ) ) exit; // Exit if accessed directly     
 
-define('hippoo_ticket_path',dirname(__file__).DIRECTORY_SEPARATOR);
-define('hippoo_ticket_url',plugins_url('hippoo-ticket').'/assets/');
+define( 'hippoo_ticket_version', '1.0.7' );
+define( 'hippoo_ticket_path', plugin_dir_path( __FILE__ ) );
+define( 'hippoo_ticket_url', plugin_dir_url( __FILE__ ) . 'assets/' );
+
 global $hippoo_ticket_api_page;
 $hippoo_ticket_api_page = 10;
 
-require_once(ABSPATH."wp-admin/includes/image.php");
+require_once ABSPATH . 'wp-admin/includes/image.php';
 
-include_once(hippoo_ticket_path.'app'.DIRECTORY_SEPARATOR.'utils.php');
-include_once(hippoo_ticket_path.'app'.DIRECTORY_SEPARATOR.'hooks.php');
-include_once(hippoo_ticket_path.'app'.DIRECTORY_SEPARATOR.'web_api.php');
-include_once(hippoo_ticket_path.'shortcode'.DIRECTORY_SEPARATOR.'ticket.php');
-include_once(hippoo_ticket_path.'metabox'.DIRECTORY_SEPARATOR.'ticket_box.php');
+require_once hippoo_ticket_path . 'app/utils.php';
+require_once hippoo_ticket_path . 'app/hooks.php';
+require_once hippoo_ticket_path . 'app/web_api.php';
+require_once hippoo_ticket_path . 'shortcode/ticket.php';
+require_once hippoo_ticket_path . 'metabox/ticket_box.php';
 
-register_activation_hook(__file__,'hippoo_ticket_register_hook');
+register_activation_hook( __file__, 'hippoo_ticket_register_hook' );
 
-function hippoo_ticket_register_hook(){
-    
-    require_once( ABSPATH . 'wp-admin/includes/upgrade.php' );
-    
+function hippoo_ticket_register_hook() {
+    require_once ABSPATH . 'wp-admin/includes/upgrade.php';
     global $wpdb;
+
     $hippoo_ticket_table_name = $wpdb->prefix . 'hippoo_ticket';
     $sql = "CREATE TABLE IF NOT EXISTS {$hippoo_ticket_table_name} (
@@ -59 +61 @@
         PRIMARY KEY (id)
         ) ENGINE=InnoDB DEFAULT CHARSET=utf8;";
-    $wpdb->query($sql);
+    dbDelta( $sql );
 
+    // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
     $pg_ticket = $wpdb->get_var(
         $wpdb->prepare(
-            "SELECT ID FROM $wpdb->posts WHERE post_type = %s AND post_content LIKE %s",
+            "SELECT ID FROM {$wpdb->posts} WHERE post_type = %s AND post_content LIKE %s",
             'page',
             '%[hippoo_ticket]%'
         )
     );
-    if(empty($pg_ticket)){
+    // phpcs:enable
+
+    if ( empty( $pg_ticket ) ) {
         $args = [
-        'post_title'  => 'Hippoo Ticket',
-        'post_type'   => 'page',
-        'post_content'=> '[hippoo_ticket]',
-        'post_status' =>'publish',
-        'post_author' => get_current_user_id(),];
-        $pg_ticket = wp_insert_post($args);
+            'post_title'  => 'Hippoo Ticket',
+            'post_type'   => 'page',
+            'post_content'=> '[hippoo_ticket]',
+            'post_status' => 'publish',
+            'post_author' => get_current_user_id(),
+        ];
+        $pg_ticket = wp_insert_post( $args );
     }
+
     $args = [
-    'sms'      => 'A message is sent to you.',
-    'email'    => '<p>Dear User %user%</p>
-    <p>A message is sent to you.</p>
-    <p><a url="%url%">%ticket%</a></p>',
-    'pg_ticket'=> $pg_ticket,
+        'sms'      => 'A message is sent to you.',
+        'email'    => '<p>Dear User %user%</p>
+        <p>A message is sent to you.</p>
+        <p><a url="%url%">%ticket%</a></p>',
+        'pg_ticket'=> $pg_ticket,
     ];
-    update_option('hippoo_ticket',$args);
+
+    update_option( 'hippoo_ticket', $args );
 }
 
-function hippoo_ticket_admin_menu(){
+function hippoo_ticket_admin_menu() {
+    global $menu, $wpdb;
 
     // add_submenu_page('edit.php?post_type=hippoo_ticket','Settings','Settings','administrator','hippoo_ticket_con_ticket','hippoo_ticket_con_ticket');
@@ -94 +103 @@
         __( 'Hippoo Ticket', 'hippoo-ticket' ),
         'manage_options',
-        'hippoo_ticket_con_ticket',
-        'hippoo_ticket_con_ticket',
-        ( HIPPOO_POPUP_URL . '/images/icon.svg' )
+        'hippoo_ticket',
+        'hippoo_ticket_config_page',
+        hippoo_ticket_url . 'images/icon.svg'
     );
 
-    global $menu,$wpdb;
+    // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
     $count = $wpdb->get_var(
         $wpdb->prepare(
-            "SELECT COUNT(ID) FROM $wpdb->posts WHERE post_type = %s AND post_status = %s",
+            "SELECT COUNT(ID) FROM {$wpdb->posts} WHERE post_type = %s AND post_status = %s",
             'hippoo_ticket',
             'hippoo_waiting'
         )
     );
-    if(!empty($count)){
-        foreach($menu as $i=>$men){
-            if($men[2] == 'edit.php?post_type=hippoo_ticket'){
+    // phpcs:enable
+
+    if ( ! empty( $count ) ) {
+        foreach ( $menu as $i => $men ){
+            if ( $men[2] == 'edit.php?post_type=hippoo_ticket' ) {
                 $menu[$i][0] .= " <span class='update-plugins count-$count'><span class='plugin-count'>$count</span></span>";
             }
@@ -115 +126 @@
     }
 }
-add_action('admin_menu','hippoo_ticket_admin_menu');
 
-function hippoo_ticket_con_ticket(){
-    include_once(hippoo_ticket_path.'app'.DIRECTORY_SEPARATOR.'config.php');
+add_action( 'admin_menu', 'hippoo_ticket_admin_menu' );
+
+function hippoo_ticket_config_page() {
+    require_once hippoo_ticket_path . 'app/config.php';
 }
-
 
 function hippoo_ticket_textdomain() {
     load_theme_textdomain( 'hippoo', get_template_directory() . '/languages' );
 }
+
 add_action( 'after_setup_theme', 'hippoo_ticket_textdomain' );
 
-function hippoo_ticket_page_style( $hook ) {
-    if ( in_array( $hook, array( 'hippoo_ticket_page_hippoo_ticket_con_ticket' ) ) ) {
-        wp_enqueue_style( 'hippoo_ticket_page_style', 
-            hippoo_ticket_url . "css/style.css", null, 1.0);
+function hippoo_ticket_admin_style( $hook ) {
+    if ( strpos( $hook, 'hippoo_ticket' ) !== false ) {
+        wp_enqueue_style( 'hippoo-ticket-style', hippoo_ticket_url . "css/admin-style.css", [], hippoo_ticket_version );
+    }
+
+    if ( get_post_type() == 'hippoo_ticket' ) {
+        wp_enqueue_script( 'hippoo-ticket-script', hippoo_ticket_url . "js/admin-script.js", [ 'jquery' ], hippoo_ticket_version, true );
     }
 }
 
-add_action( 'admin_enqueue_scripts', 'hippoo_ticket_page_style' );
+add_action( 'admin_enqueue_scripts', 'hippoo_ticket_admin_style' );
+
+function hippoo_ticket_public_style() {
+    wp_enqueue_style( 'hippoo-ticket-style', hippoo_ticket_url . "css/style.css", [], hippoo_ticket_version );
+    wp_enqueue_script( 'hippoo-ticket-script', hippoo_ticket_url . "js/script.js", [ 'jquery' ], hippoo_ticket_version, true );
+}
+
+add_action( 'wp_enqueue_scripts', 'hippoo_ticket_public_style' );
 
 /**
@@ -145 +167 @@
 
 add_action( 'add_meta_boxes', 'hippoo_ticket_register_meta_boxes');
-?>

hippoo-ticket/trunk/metabox/ticket_box.php

@@ -1 +1 @@
 <?php
 if ( ! defined( 'ABSPATH' ) ) exit; // Exit if accessed directly     
-
 
 function hippoo_ticket_display_callback( $post ) {
     # Generate the table
     $ticket_id = $post->ID;
-    $rows = hippoo_ticket_generate_tickets_table_body_html($ticket_id);
-    include(plugin_dir_path(__FILE__) . DIRECTORY_SEPARATOR . 'ticket_box_html_template.php');
+    $rows      = hippoo_ticket_generate_tickets_table_body_html( $ticket_id );
+    require_once hippoo_ticket_path . 'metabox/ticket_box_html_template.php';
 }
 
 add_action( 'save_post_hippoo_ticket', 'hippoo_ticket_save_meta_box' );
+
 function hippoo_ticket_save_meta_box( $post_id ) {
-    
-    // Verify nonce for security
-    if (!( isset( $_POST['hippoo_ticket_meta_box_nonce'] ) && wp_verify_nonce( $_POST['hippoo_ticket_meta_box_nonce'], 'hippoo_ticket_meta_box_nonce_action' ) )) {
+    if ( ! ( isset( $_POST['hippoo_ticket_meta_box_nonce'] ) && wp_verify_nonce( sanitize_key( $_POST['hippoo_ticket_meta_box_nonce'] ), 'hippoo_ticket_meta_box_nonce_action' ) ) ) {
         return;
     }
 
-    // Check it's not an auto save routine
-    if ( defined('DOING_AUTOSAVE') && DOING_AUTOSAVE ) return;
-    if (!is_admin()) return;
+    if ( defined( 'DOING_AUTOSAVE' ) && DOING_AUTOSAVE ) return;
 
-    if (!empty($_POST['scontent'])) {
+    if ( ! is_admin() ) return;
+
+    if ( ! empty( $_POST['scontent'] ) ) {
         global $wpdb;
+
+        // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
         $pid = $wpdb->get_var(
-            $wpdb->prepare("SELECT post_parent FROM $wpdb->posts WHERE ID = %d", $post_id)
+            $wpdb->prepare( "SELECT post_parent FROM {$wpdb->posts} WHERE ID = %d", $post_id )
         );
+        // phpcs:enable
 
-        if ($pid) {
-            remove_action('save_post_hippoo_ticket', 'hippoo_ticket_save_meta_box');
-            $scontent = isset( $_POST['scontent'] ) ? sanitize_text_field( $_POST['scontent'] ) : '';
+        if ( $pid ) {
+            remove_action( 'save_post_hippoo_ticket', 'hippoo_ticket_save_meta_box' );
+            $scontent = isset( $_POST['scontent'] ) ? sanitize_text_field( wp_unslash( $_POST['scontent'] ) ) : '';
             hippoo_add_ticket( $pid, $scontent, [], 2 );
             add_action( 'save_post_hippoo_ticket', 'hippoo_ticket_save_meta_box' );
-            hippoo_ticket_sms($post_id);
-            hippoo_ticket_email($post_id);
+            hippoo_ticket_sms( $post_id );
+            hippoo_ticket_email( $post_id );
         }
     }
 }
-
-?>

hippoo-ticket/trunk/metabox/ticket_box_html_template.php

@@ -1 +1 @@
 <?php
     if ( ! defined( 'ABSPATH' ) ) exit; // Exit if accessed directly
-    
 ?>
 <style type="text/css">
@@ -19 +18 @@
     <tr>
         <td>
-            <?php wp_editor('','scontent',['textarea_rows'=>5]); ?>
+            <?php wp_editor( '', 'scontent', [ 'textarea_rows' => 5 ] ); ?>
         </td>
     </tr>
@@ -26 +25 @@
     wp_nonce_field( 'hippoo_ticket_meta_box_nonce_action', 'hippoo_ticket_meta_box_nonce' ); ?>
     <tbody>
-        <?php if (empty($rows)) : ?>
+        <?php if ( empty( $rows ) ) : ?>
             <tr>
                 <td colspan="1">
@@ -32 +31 @@
                 </td>
             </tr>
-            <?php else : foreach ($rows as $row) : ?>
+            <?php else : foreach ( $rows as $row ) : ?>
                 <tr>
                     <td>
                         <p>
                             <strong>
-                                <?php echo wp_kses_post($row->type); ?> :
+                                <?php echo wp_kses_post( $row->type ); ?> :
                             </strong>
                             <br/>
-                            <?php echo wp_kses_post($row->content); ?>
+                            <?php echo wp_kses_post( $row->content ); ?>
                         </p>
-                        <ul><?php echo wp_kses_post($row->media_urls_html); ?></ul>
+                        <ul><?php echo wp_kses_post( $row->media_urls_html ); ?></ul>
                         <br/>
                         <p>
                             <strong>Date : </strong>
                             <bdi>
-                                <?php echo esc_html($row->date); ?>
+                                <?php echo esc_html( $row->date ); ?>
                             </bdi>
                         </p>

hippoo-ticket/trunk/readme.txt

@@ -1 @@
-=== Hippoo-Ticket ===
+=== Hippoo Ticket ===
 Contributors: Hippooo
 Donate link: https://Hippoo.app/
-Tags: Hippoo ticket, ticket, support ticket, Hippoo,customer support
+Tags: Hippoo ticket, ticket, support ticket, Hippoo, customer support
 Requires at least: 5.3
-Tested up to: 6.4
-Stable tag: 1.0.1
-License: GPLv2 or later
-License URI: https://www.gnu.org/licenses/gpl-2.0.html
+Tested up to: 6.7
+Stable tag: 1.0.7
+License: GPL3
+License URI: https://www.gnu.org/licenses/gpl-3.0.html
 
 == Description ==
@@ -91 +91 @@
 
 == Changelog ==
-
-= 1.0 =
-* Hippos-ticket launch
+* 1.0.7 - Minor Improvements.
+* 1.0.1 Hippoo app auth
+* 1.0 Hippos-ticket launch

hippoo-ticket/trunk/shortcode/ticket.php

@@ -2 +2 @@
 if ( ! defined( 'ABSPATH' ) ) exit; // Exit if accessed directly     
 
-add_action('init', 'hippoo_ticket_output_buffer');
-add_shortcode('hippoo_ticket','hippoo_short_ticket');
+add_action( 'init', 'hippoo_ticket_output_buffer' );
+add_shortcode( 'hippoo_ticket', 'hippoo_short_ticket' );
 
 function hippoo_ticket_output_buffer() {
@@ -9 +9 @@
 }
 
-function hippoo_short_ticket($atts=[]){
+function hippoo_short_ticket( $atts = [] ){
+    if ( defined( 'REST_REQUEST' ) )
+        return;
 
-    if(defined('REST_REQUEST'))
-        return;
-        
-    if( !is_admin() && (!is_user_logged_in() or empty($_GET['oid']) or !is_numeric($_GET['oid'])) ){
-        wp_redirect(home_url());
+    if ( ! is_admin() && ( ! is_user_logged_in() or empty( $_GET['oid'] ) or ! is_numeric( $_GET['oid'] ) ) ) {
+        wp_redirect( home_url() );
         exit();
     }
 
+    global $wpdb;
     
     ob_start();
-    
-    global $wpdb;
-    $order_id = absint($_GET['oid']); // Sanitize input
+
+    $order_id = absint( $_GET['oid'] );
+    $uid      = get_current_user_id();
+    $cid      = get_post_meta( $order_id, '_customer_user', true );
     $msg      = '';
-    $order    = $wpdb->get_row(
-                    $wpdb->prepare("SELECT * FROM $wpdb->posts WHERE ID = %d", $order_id)
-                );
-    $uid      = get_current_user_id();
-    $cid      = get_post_meta($order_id, '_customer_user', true);
-    
 
-    $ticket_id = $wpdb->get_var(
-                    $wpdb->prepare("SELECT ID FROM $wpdb->posts 
-                                    WHERE post_type='hippoo_ticket' AND post_parent= %d", $order->ID)
-                    );
-   
-   if(get_post_status($ticket_id) == 'trash'){
-        wp_redirect(wc_get_page_permalink( 'myaccount' ) . '/orders');
-        exit();
-    }
-    
-
-    if (isset($_POST['save']) && isset($_POST['csrf_token'])) {
-        if (wp_verify_nonce($_POST['csrf_token'], 'csrf_token_save')) {
+    if ( isset( $_POST['save'] ) && isset( $_POST['csrf_token'] ) ) {
+        if ( wp_verify_nonce( sanitize_key( $_POST['csrf_token'] ), 'csrf_token_save' ) ) {
 
             // Check if file upload was successful
-            if (
-                isset($_FILES['file']) &&
-                is_array($_FILES['file'])
-            ) {
+            if ( isset( $_FILES['file'] ) && is_array( $_FILES['file'] ) ) {
                 $media_ids = hippoo_ticket_media_upload();
             } else {
@@ -56 +37 @@
             }
 
-            // Sanitize and validate content
-            $tcontent = isset($_POST['tcontent']) ? sanitize_text_field($_POST['tcontent']) : '';
+            $tcontent = isset( $_POST['tcontent'] ) ? sanitize_text_field( wp_unslash( $_POST['tcontent'] ) ) : '';
 
-            if (!empty($tcontent)) {
-                hippoo_add_ticket($order_id, $tcontent, $media_ids, 1);
-                $msg = 'Ticket submitted.';
+            if ( ! empty( $tcontent ) ) {
+                hippoo_add_ticket( $order_id, $tcontent, $media_ids, 1 );
+                wc_add_notice( 'Ticket submitted.', 'success' );
             } else {
-                $msg = 'Error: Invalid ticket content.';
+                wc_add_notice( 'Error: Invalid ticket content.', 'error' );
             }
         }
     }
 
+    // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
+    $order = $wpdb->get_row(
+                    $wpdb->prepare( "SELECT * FROM {$wpdb->posts} WHERE ID = %d", $order_id )
+                );
+    // phpcs:enable
 
+    // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
+    $ticket_id = $wpdb->get_var(
+                    $wpdb->prepare( "SELECT ID FROM {$wpdb->posts} 
+                                    WHERE post_type='hippoo_ticket' AND post_parent= %d", $order_id )
+                    );
+    // phpcs:enable
+
+    if( get_post_status( $ticket_id ) == 'trash' ) {
+        wp_redirect( wc_get_page_permalink( 'myaccount' ) . '/orders' );
+        exit();
+    }
     
     # Generate the table
-    $rows = hippoo_ticket_generate_tickets_table_body_html($ticket_id);
-    $ticket_name = sanitize_text_field( str_replace( "Private:", "", get_the_title( absint( $_GET['oid'] ) ) ) );
-    $ticket_number = empty($ticket_id) ? '' : $ticket_id;
-    $ticket_status = empty($ticket_id) ? 'New Ticket' : wp_kses_post(hippoo_ticket_status($ticket_id));
-    include(plugin_dir_path(__FILE__) . DIRECTORY_SEPARATOR . 'ticket_html_template.php');
+    $conversations = hippoo_ticket_generate_tickets_table_body_html( $ticket_id );
+    $ticket_name   = sanitize_text_field( str_replace( "Private:", "", get_the_title( absint( $_GET['oid'] ) ) ) );
+    $ticket_number = empty( $ticket_id ) ? '' : $ticket_id;
+    $ticket_status = empty( $ticket_id ) ? 'New Ticket' : wp_kses_post( hippoo_ticket_status( $ticket_id ) );
+    
+    require_once wc_locate_template( 'form-ticket.php', 'hippoo-ticket', hippoo_ticket_path . 'shortcode/' );
 
     return ob_get_clean();
 }
-?>