Changeset 1947

Timestamp:

10/07/2015 11:52:06 AM (9 years ago)

Author:

kovshenin

Message:

WordCamp Payments: Add encryption to some payment request fields.

Location:

sites/trunk/wordcamp.org/public_html/wp-content/plugins/wordcamp-payments

Files:

• bootstrap.php (modified) (1 diff)
• classes/encryption.php (added)
• classes/payment-request.php (modified) (3 diffs)

sites/trunk/wordcamp.org/public_html/wp-content/plugins/wordcamp-payments/bootstrap.php

@@ -15 +15 @@
     require_once( __DIR__ . '/classes/wordcamp-payments.php' );
     require_once( __DIR__ . '/classes/payment-request.php' );
+    require_once( __DIR__ . '/classes/encryption.php' );
 
     $GLOBALS['wordcamp_payments']   = new WordCamp_Payments();

sites/trunk/wordcamp.org/public_html/wp-content/plugins/wordcamp-payments/classes/payment-request.php

@@ -382 +382 @@
                 break;
         }
+
+        $encrypted_fields = array(
+            'payable_to',
+            'beneficiary_name',
+            'beneficiary_account_number',
+            'beneficiary_street_address',
+            'beneficiary_city',
+            'beneficiary_state',
+            'beneficiary_zip_code',
+            'beneficiary_country',
+        );
+
+        if ( in_array( $name, $encrypted_fields ) ) {
+            $decrypted = WCP_Encryption::maybe_decrypt( $value );
+            if ( ! is_wp_error( $decrypted ) )
+                $value = $decrypted;
+        }
+
 
         return $value;
@@ -768 +786 @@
     protected function sanitize_save_normal_fields( $post_id ) {
         foreach ( $_POST as $key => $unsafe_value ) {
+            $unsafe_value = wp_unslash( $unsafe_value );
+
             switch ( $key ) {
                 case 'description':
@@ -828 +848 @@
 
             if ( ! is_null( $safe_value ) ) {
+                $encrypted_fields = array(
+                    'payable_to',
+                    'beneficiary_name',
+                    'beneficiary_account_number',
+                    'beneficiary_street_address',
+                    'beneficiary_city',
+                    'beneficiary_state',
+                    'beneficiary_zip_code',
+                    'beneficiary_country',
+                );
+
+                if ( in_array( $key, $encrypted_fields ) ) {
+                    $encrypted_value = WCP_Encryption::encrypt( $safe_value );
+                    if ( ! is_wp_error( $encrypted_value ) )
+                        $safe_value = $encrypted_value;
+                }
+
                 update_post_meta( $post_id, '_camppayments_' . $key, $safe_value );
             }