| Server IP : 121.121.20.254 / Your IP : 216.73.216.202 Web Server : Microsoft-IIS/10.0 System : Windows NT WEB-SERVER 10.0 build 20348 (Windows Server 2022) AMD64 User : IUSR ( 0) PHP Version : 8.3.28 Disable Function : NONE MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : C:/inetpub/wwwroot/KnowledgeBase/wp-content/plugins/arforms/core/ar/mailchimp/ |
Upload File : |
<?php
global $MdlDb ;
$res = $wpdb->get_results($wpdb->prepare("SELECT * FROM ".$MdlDb->autoresponder." WHERE responder_id=%d",1));$res = $res[0]; // phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared -- Reason: $MdlDb->autoresponder is table name defined globally. False Positive alarm
$data = $wpdb->get_results( $wpdb->prepare( "SELECT * FROM ".$MdlDb->ar." WHERE frm_id = %d", $fid), 'ARRAY_A' ); // phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared -- Reason: $MdlDb->ar is table name defined globally. False Positive alarm
$arr_mailchimp = maybe_unserialize( $data[0]['mailchimp'] );
$responder_api_key = isset($arr_mailchimp['type_val']) ? stripslashes( stripslashes_deep( str_replace( '/amp;/', '&', $arr_mailchimp['type_val'] ))) : '';
$formdata = str_replace('"',"'",$responder_api_key);
$formdata_hiddn = explode("type='hidden'",$formdata);
$count_formdata_hiddn = count($formdata_hiddn);
$fields = array();
for($i=1;$i<count($formdata_hiddn);$i++)
{
$findhiddn_name = strpos($formdata_hiddn[$i],"/>");
$formdata_h=trim(substr($formdata_hiddn[$i],0,$findhiddn_name));
$formdata_h_name = explode("name='",$formdata_h);
$formdata_h_name_f = strpos($formdata_h_name[1],"'");
$formdata_h_name_f1 = substr($formdata_h_name[1], 0, $formdata_h_name_f);
$formdata_h_value = explode("value='",$formdata_h);
$formdata_h_value_f = strpos($formdata_h_value[1],"'");
$formdata_h_value_f1 = substr($formdata_h_value[1], 0, $formdata_h_value_f);
$fields[$formdata_h_name_f1] = $formdata_h_value_f1;
}
$formdata_n = explode("name='",$formdata);
$count_formdata_n = count($formdata_n);
for($i=1;$i<$count_formdata_n;$i++)
{
$findvarname = strpos($formdata_n[$i],"'");
$formdata_n[$i] = substr($formdata_n[$i], 0, $findvarname);
}
if(in_array("EMAIL",$formdata_n))
{
$fields["EMAIL"] = $email;
}
if(in_array("FNAME",$formdata_n))
{
$fields["FNAME"] = $fname;
}
if(in_array("LNAME",$formdata_n))
{
$fields["LNAME"] = $lname;
}
$get_urlexp = isset($formdata)?explode("action='",$formdata):'';
$get_url_pos = isset($get_urlexp[1])?strpos($get_urlexp[1],"'"):'';
$url = (isset($get_urlexp[1]) && isset($get_url_pos)) ? substr($get_urlexp[1],0,$get_url_pos):'';
if( false === strpos($url, 'https:') ){
$url = "https:".$url;
}
$response = wp_remote_get(
$url,
array(
'method' => 'GET',
'timeout' => 45,
'redirection' => 5,
'httpversion' => '1.0',
'blocking' => true,
'sslverify' => false,
'headers' => array(),
'body' => $fields,
'cookies' => array()
)
);
?>