Changeset 3435885

Timestamp:

01/09/2026 12:13:53 PM (6 weeks ago)

Author:

coursebox

Message:

Update handle import

Location:

course-box

Files:

• tags/1.0.4 (added)
• tags/1.0.4/assets (added)
• tags/1.0.4/assets/admin.css (added)
• tags/1.0.4/assets/admin.js (added)
• tags/1.0.4/course-box.php (added)
• tags/1.0.4/includes (added)
• tags/1.0.4/includes/class-course-box-admin.php (added)
• tags/1.0.4/includes/class-course-box-api.php (added)
• tags/1.0.4/includes/class-course-box-core.php (added)
• tags/1.0.4/includes/class-course-box-importer.php (added)
• tags/1.0.4/includes/index.php (added)
• tags/1.0.4/includes/traits (added)
• tags/1.0.4/includes/traits/class-course-box-helper.php (added)
• tags/1.0.4/includes/traits/class-course-box-logger.php (added)
• tags/1.0.4/index.html (added)
• tags/1.0.4/languages (added)
• tags/1.0.4/languages/course-box.pot (added)
• tags/1.0.4/readme.txt (added)
• tags/1.0.4/uninstall.php (added)
• trunk/course-box.php (modified) (2 diffs)
• trunk/readme.txt (modified) (1 diff)

course-box/trunk/course-box.php

@@ -4 +4 @@
  * Plugin URI: 
  * Description: A WordPress plugin that integrates with WooCommerce to import products from an external API with advanced features like pagination, search, and import.
- * Version: 1.0.3
+ * Version: 1.0.4
  * Author: Coursebox Pty Ltd
  * Author URI: https://www.coursebox.ai/
@@ -296 +296 @@
          */
         public function handle_import_ajax() {
-            check_ajax_referer('course_box_nonce', 'nonce');
-            
-            if (!current_user_can('manage_options')) {
-                wp_die( esc_html__( 'You do not have sufficient permissions to access this page.', 'course-box' ) );
-            }
-            
-             $course_data_raw = isset( $_POST['course_data'] )
-            ? wp_unslash( sanitize_text_field( wp_unslash( $_POST['course_data'] ) ) )
-            : '';
-            $course_data = json_decode(stripslashes($course_data_raw), true);
-            
-            if (!$course_data) {
-                wp_send_json_error(__('Invalid course data', 'course-box'));
-            }
-            
-            $result = $this->import_course($course_data);
-            
-            if ($result['success']) {
-                wp_send_json_success($result['data']);
-            } else {
-                wp_send_json_error($result['data']);
-            }
-        }
+        
+            // 1. Security
+            check_ajax_referer('course_box_nonce', 'nonce');
+        
+            if ( ! current_user_can('manage_options') ) {
+                wp_send_json_error(
+                    __('You do not have sufficient permissions to access this page.', 'course-box'),
+                    403
+                );
+            }
+        
+            // 2. Validate presence
+            if ( empty($_POST['course_data']) ) {
+                wp_send_json_error(__('Missing course data', 'course-box'), 400);
+            }
+        
+            // 3. Get RAW JSON (do NOT sanitize)
+            $course_data_raw = wp_unslash($_POST['course_data']);
+        
+            // 4. Decode JSON
+            $course_data = json_decode($course_data_raw, true);
+        
+            // 5. Validate JSON
+            if ( json_last_error() !== JSON_ERROR_NONE || ! is_array($course_data) ) {
+                wp_send_json_error(
+                    __('Invalid course data', 'course-box') . ': ' . json_last_error_msg(),
+                    400
+                );
+            }
+        
+            // 6. Import
+            $result = $this->import_course($course_data);
+        
+            // 7. Response
+            if ( ! empty($result['success']) ) {
+                wp_send_json_success($result['data']);
+            }
+        
+            wp_send_json_error(
+                $result['data'] ?? __('Import failed', 'course-box'),
+                500
+            );
+        }
         
         /**

course-box/trunk/readme.txt

@@ -4 +4 @@
 Requires at least: 5.0
 Tested up to: 6.8
-Stable tag: 1.0.3
+Stable tag: 1.0.4
 Requires PHP: 7.4
 License: GPLv2 or later