Changeset 3378767

Timestamp:

10/15/2025 09:39:02 AM (3 months ago)

Author:

wssoffice21

Message:

fixed new code

File:

• ymc-smart-filter/trunk/ymc2/src/frontend/FG_Ajax_Responder.php (modified) (1 diff)

ymc-smart-filter/trunk/ymc2/src/frontend/FG_Ajax_Responder.php

@@ -45 +45 @@
         check_ajax_referer('get_filtered_posts-ajax-nonce', 'nonce_code');
 
-        $params = isset($_POST['params']) ? json_decode(stripslashes($_POST['params']), true) : [];
+        //$params = isset($_POST['params']) ? json_decode(stripslashes($_POST['params']), true) : [];
+
+        $params = [];
+        if (isset($_POST['params'])) {
+            $raw_params = wp_unslash($_POST['params']);
+            $params = json_decode($raw_params, true);
+            if (json_last_error() !== JSON_ERROR_NONE) {
+                wp_send_json_error([
+                    'message' => __('Invalid JSON format in request.', 'ymc-smart-filter')
+                ], 400);
+            }
+        }
 
         if (empty($params) || !is_array($params) || empty($params['filter_id'])) {