Warning and Notice on WP 4.9.1

I suppose that line 209 $image_urls = $_POST[‘urls’] is the origin of the issue.

I don’t understand the aim of the function get_images_url() and the two actions wp_ajax_lightbox_description and wp_ajax_nopriv_lightbox_description (I can’t see any do_action related)

Dear lllor,

Thanks for your post.
Please try to use the following solution:

1) fine lightbox.php file
2) add this line of codes

function get_images_url(){
global $wpdb;
$all_urls = array();
$image_urls = array();
if ( empty( $_POST[‘urls’] ) ) { return; }
foreach ($_POST[‘urls’] as $value) {
$image_urls[] = esc_url($value);
}

3) from get_images_url(){ till foreach ($image_urls as $image_url) {

We will wait for your results.

Thanks

Yes. It’s working now ??

Anyway, I see there was also a probable SQL injection issue…

• This reply was modified 6 years, 11 months ago by lllor.

Dear lllor,

Thank you very much for keeping us informed ??
Could you let us know if we can help you with SQL injection issue you have reported?

Wish you all the best!

No, there is no issue concerning SQL injection.
I’ve just noticed that you added an esc_url() on $_POST… ??

• This reply was modified 6 years, 11 months ago by lllor.

Dear lllor,

It’s great that everything is working fine now
In the case, if you need our help any further, feel free to ask.
We will be glad to assist.

Wish you all the best!

I am facing a similar problem even after trying the new code. I am getting the following warning- “PHP Warning: Invalid argument supplied for foreach() in ***/httpdocs/wp-content/plugins/lightbox/lightbox.php on line 211

My current code is:

function get_images_url(){
global $wpdb;
$image_urls = $_POST[‘urls’];
$all_urls = array();
foreach ($image_urls as $image_url) {
$query = $wpdb->prepare(“SELECT ID FROM $wpdb->posts WHERE guid=’%s'”, $image_url);
$id = $wpdb->get_var($query);
$attachment = get_post( $id );
$description = $attachment->post_content;
array_push($all_urls,$description);
}
echo json_encode($all_urls);
die();
}

Could you help with which code to use. Thanks!