Changeset 13906 for sites/trunk/wordpress.org/public_html/wp-content/plugins/wporg-gp-translation-events/includes/routes/user/attend-event.php

Timestamp:

07/17/2024 11:19:52 AM (2 years ago)

Author:

psrpinto

Message:

Translate: Sync "Translation Events" from GitHub

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/wporg-gp-translation-events/includes/routes/user/attend-event.php (modified) (3 diffs)

sites/trunk/wordpress.org/public_html/wp-content/plugins/wporg-gp-translation-events/includes/routes/user/attend-event.php

@@ -32 +32 @@
 
     public function handle( int $event_id ): void {
+        $nonce_name = '_attendee_nonce';
+        if ( isset( $_POST['_attendee_nonce'] ) ) {
+            $nonce_value = sanitize_text_field( wp_unslash( $_POST['_attendee_nonce'] ) );
+            if ( ! wp_verify_nonce( $nonce_value, $nonce_name ) ) {
+                $this->die_with_error( esc_html__( 'You are not authorized to change the attendance mode of this attendee', 'gp-translation-events' ), 403 );
+            }
+        }
         $user = wp_get_current_user();
         if ( ! $user ) {
@@ -47 +54 @@
         }
 
-        $attendee = $this->attendee_repository->get_attendee_for_event_for_user( $event->id(), $user_id );
+        $attendee           = $this->attendee_repository->get_attendee_for_event_for_user( $event->id(), $user_id );
+        $is_remote_attendee = isset( $_POST['attend_remotely'] );
+
         if ( $attendee instanceof Attendee ) {
             if ( $attendee->is_contributor() ) {
@@ -54 +63 @@
             $this->attendee_repository->remove_attendee( $event->id(), $user_id );
         } else {
-            $attendee = new Attendee( $event->id(), $user_id );
+            $attendee = new Attendee( $event->id(), $user_id, false, false, array(), $is_remote_attendee );
             $this->attendee_adder->add_to_event( $event, $attendee );
         }