HEX
Server: LiteSpeed
System: Linux l24.yourwebhosting.net 5.14.0-611.54.3.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:31:24 EDT 2026 x86_64
User: turkishi (1582)
PHP: 8.1.34
Disabled: NONE
Upload Files
File: //proc/self/cwd/wp-content/plugins/extensions-for-cf7/admin/include/tmpl-form-data.php
<?php
/**
 * @phpcs:disable WordPress.Security.NonceVerification.Recommended, WordPress.DB.PreparedSQL.InterpolatedNotPrepared, WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
 */
    global $wpdb;
    $entry_id   = !empty($_REQUEST['entry_id']) ? sanitize_text_field($_REQUEST['entry_id']) : 0;
    $form_id    = !empty($_REQUEST['form_id']) ? sanitize_text_field($_REQUEST['form_id']) : 0;

    $table_name   		= $wpdb->prefix.'extcf7_db';
    $current_form_id    = $form_id;
    $mail_form_id   	= $entry_id;
    $cf7_upload_dir 	= wp_upload_dir();
    $cfdb7_dirname  	= $cf7_upload_dir['baseurl'].'/extcf7_uploads';

    $mail_form_data = $wpdb->get_results( $wpdb->prepare("SELECT * FROM $table_name WHERE id = %d LIMIT 1", $mail_form_id ), OBJECT );

    if( !$mail_form_data ){
        echo "<span>".esc_html__('No data found!','cf7-extensions')."</span>";
        return;
    }
?>

<h2><?php echo esc_html__("Email Information","cf7-extensions") ?></h2>
<table class="extcf7-form-data-details">
    <tbody>
        <tr>
            <th><?php echo esc_html__('Date :','cf7-extensions'); ?></th>
            <td><?php echo esc_html(date_format(date_create($mail_form_data[0]->form_date),"F j, Y, g:i a")); ?></td>
        </tr>
        <?php $form_data  = unserialize( $mail_form_data[0]->form_value );
        foreach ($form_data as $key => $data):

            if(false !== strpos($key,'server')) continue;

            if ( strpos($key, 'file') !== false || strpos($key, 'signature') !== false ){
                $key_value = str_replace('your-', '', $key);
                $key_value = str_replace( array('-','_'), ' ', $key_value);
                $key_value = ucwords( $key_value );
                $file_title = str_replace( array('your-','-','_','file'), ' ', $key);
                if(is_array($data)){
                    $attachment_layout = '<tr><th>' . esc_html( ucwords($file_title) ) . ':</th><td>';
                    foreach ($data as $value) {
                        $attachment_layout .= '<a href="' . esc_url( $cfdb7_dirname . '/' . $value ) . '" style="margin-bottom: 10px; display: block; margin-bottom: 8px;" target="_blank">'
                            . esc_html( $value ) . '</a>';
                    }                    
                    $attachment_layout.='</td></tr><br>';
                    echo $attachment_layout; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
                }elseif (strpos($key, 'signature') !== false) {
                    echo '<tr><th>' . esc_html__( 'Signature :','cf7-extensions-pro') . '</th> <td>
                    <img src="' . esc_url( $cfdb7_dirname .'/'.$data ) . '"></td></tr>';
                }else{
                    echo '<tr><th>' . esc_html__( 'Attachment :','cf7-extensions-pro') . '</th> <td><a href="' . esc_url( $cfdb7_dirname .'/'.$data ) . '">'
                    . esc_html( $data ) .'</a></td></tr>';
                }
            }else{
                if(is_array($data)){
                    $key_value = str_replace('your-', '', $key);
                    $key_value = str_replace( array('-','_'), ' ', $key_value);
                    $key_value = ucwords( $key_value );
                    $array_data =  implode(', ',$data);
                    $array_data =  esc_html( $array_data );
                    echo '<tr><th>'.esc_html($key_value).' :</th><td>'.nl2br(wp_kses_post($array_data)).'</td></tr>';
                }else{
                    $key_value = str_replace('your-', '', $key);
                    $key_value = str_replace( array('-','_'), ' ', $key_value);
                    $key_value = ucwords( $key_value );
                    $data    = esc_html( $data );
                    echo '<tr><th>'.esc_html($key_value).' :</th><td>'.nl2br(wp_kses_post($data)).'</td></tr>';
                }
            }
        endforeach;
        ?>
    </tbody>
</table>
<?php 
    $ip_address   =  htcf7ext_get_option('htcf7ext_opt', 'ip_address_enable', 'on');
    $referer_link =  htcf7ext_get_option('htcf7ext_opt', 'reffer_link_enable', 'on');
    if('on' == $ip_address || 'on' == $referer_link):
?>
        <h2><?php echo esc_html__("Submission Details","cf7-extensions") ?></h2>
        <table class="extcf7-form-data-details">
            <tbody>
                <?php if('on' == $referer_link): ?>
                    <tr>
                        <th><?php echo esc_html__("Referer :","cf7-extensions"); ?></th>
                        <td><?php echo esc_url($form_data['server_http_referer']); ?></td>
                    </tr>
                <?php endif; ?>
                <?php if('on' == $ip_address): ?>
                    <tr>
                        <th><?php echo esc_html__("IP Address :","cf7-extensions"); ?></th>
                        <td><?php
                            if(false !== strpos( $form_data['server_remote_addr'], '.' )){
                                $ip_address = sprintf(
                                    '<a href="'.esc_url('http://whois.arin.net/rest/ip/%s').'" target="_blank">%s</a>',
                                    esc_attr( $form_data['server_remote_addr'] ),
                                    esc_html( $form_data['server_remote_addr'] )
                                );
                            }else{
                                $ip_address = esc_html( $form_data['server_remote_addr'] );  
                            } 
                            echo $ip_address ? esc_html($ip_address) : esc_html__('Invalid Ip','cf7-extensions');
                        ?></td>
                    </tr>
                <?php endif; ?>
            </tbody>
        </table>
    <?php endif; ?>