iThemes Security – February 8th, 2023 - Themespress

Want to get in touch, ask a question or discuss your web development needs?

iThemes Security - 8 Fevrier 2023

Last modified : Feb 15 2023

Estimated reading time : 1 minute, 2 seconds - 164 words

Version audio de cet article

WPScan is a wonderful tool used to scan possible vulnerabilities within WordPress.

iThemes Security provides a weekly report about WordPress’ vulnerabilities whether it be from plugins, themes or the core of WordPress.

Plugins to update following the latest update

The WordPress plugins below received a new update following vulnerabilities detected by WPScan.

Ocean Extra
VK All in One Expansion Unit
Metform Elementor Contact Form Builder
My Sticky Elements
Print Invoice & Delivery Notes for WooCommerce
Wufoo Shortcode
ShortPixel Adaptive Images
GeoDirectory
Pie Register
Arigato Autoresponder and Newsletter
Donation Block For PayPal
Namaste! LMS
GS Insever Portfolio

WordPress plugins with known vulnerabilities but no fix available

As of the writing of this news, fixes weren’t made available for the following plugins, however it should be made available in the near future.

User Activity
GigPress
Embed PDF
Custom Add User
Show-Hide / Collapse-Expand
List Pages Shortcode
Galleries by Angie Makes
Correos Oficial
Olevmedia Shortcodes
0mk Shortener

Leave a Reply Cancel Reply

Afficher le total des produits WooCommerce

function mon_site_afficher_total_produits() {
	if ( ! post_type_exists( 'product' ) ) {
		return '';
	}

	$product_counts = wp_count_posts( 'product' );
	$total_products = isset( $product_counts->publish ) ? (int) $product_counts->publish : 0;

	return esc_html( number_format_i18n( $total_products ) );
}
add_shortcode( 'total_produits', 'mon_site_afficher_total_produits' );

Rapport CA 3 Dernières Années – Dashboard WP

// 1. Ajouter un widget personnalisé au tableau de bord WordPress
add_action( 'wp_dashboard_setup', 'ajouter_widget_statistiques_3_ans' );

function ajouter_widget_statistiques_3_ans() {
    wp_add_dashboard_widget(
        'statistiques_ventes_3_ans',
        '📊 Bilan des Ventes (3 Dernières Années)',
        'afficher_contenu_widget_statistiques'
    );
}

// 2. Requête SQL directe et affichage des résultats
function afficher_contenu_widget_statistiques() {
    global $wpdb;

    $annee_actuelle = (int) date( 'Y' );
    $annee_depart   = $annee_actuelle - 2; // Inclus l'année en cours + les 2 précédentes

    // Requête SQL compatible avec les tables WooCommerce modernes (HPOS) et classiques (wp_posts)
    $sql = "
        SELECT 
            YEAR(p.post_date) AS annee,
            COUNT(p.ID) AS total_commandes,
            SUM(pm.meta_value) AS chiffre_affaires
        FROM {$wpdb->posts} p
        INNER JOIN {$wpdb->postmeta} pm ON p.ID = pm.post_id
        WHERE p.post_type = 'shop_order'
          AND p.post_status IN ('wc-completed', 'wc-processing')
          AND pm.meta_key = '_order_total'
          AND YEAR(p.post_date) >= %d
        GROUP BY YEAR(p.post_date)
        ORDER BY annee DESC
    ";

    $resultats = $wpdb->get_results( $wpdb->prepare( $sql, $annee_depart ) );

    if ( empty( $resultats ) ) {
        echo '<p>Aucune commande terminée ou en cours de traitement trouvée pour ces 3 dernières années.</p>';
        return;
    }

    echo '<table style="width:100%; border-collapse: collapse; text-align: left;">';
    echo '<tr style="border-bottom: 2px solid #ccc; font-weight: bold;">
            <th style="padding: 8px;">Année</th>
            <th style="padding: 8px;">Commandes</th>
            <th style="padding: 8px;">Total CA</th>
          </tr>';

    foreach ( $resultats as $ligne ) {
        echo '<tr style="border-bottom: 1px solid #eee;">';
        echo '<style>td { padding: 8px; }</style>';
        echo '<td><strong>' . esc_html( $ligne->annee ) . '</strong></td>';
        echo '<td>' . esc_html( number_format_i18n( $ligne->total_commandes ) ) . '</td>';
        echo '<td>' . wc_price( $ligne->chiffre_affaires ) . '</td>';
        echo '</tr>';
    }

    echo '</table>';
}

Définir un montant minimum de commande obligatoire

// 1. Afficher l'avertissement sur la page panier et le checkout
add_action( 'woocommerce_before_cart', 'afficher_notice_montant_minimum' );
add_action( 'woocommerce_checkout_process', 'afficher_notice_montant_minimum' );

function afficher_notice_montant_minimum() {
    $minimum = 100; // Montant minimum requis
    
    if ( WC()->cart->subtotal < $minimum ) {
        $message = sprintf( 
            'Le montant minimum de commande est de %s. Votre sous-total actuel est de %s.', 
            wc_price( $minimum ), 
            wc_price( WC()->cart->subtotal ) 
        );

        if ( is_cart() ) {
            wc_print_notice( $message, 'error' );
        } else {
            wc_add_notice( $message, 'error' );
        }
    }
}

// 2. Retirer le bouton "Commander" de la page panier sous le seuil
add_action( 'woocommerce_proceed_to_checkout', 'masquer_bouton_commander_si_seuil_non_atteint', 1 );

function masquer_bouton_commander_si_seuil_non_atteint() {
    $minimum = 100; // Montant minimum requis
    
    if ( WC()->cart->subtotal < $minimum ) {
        // Supprime l'action par défaut qui affiche le bouton "Valider la commande"
        remove_action( 'woocommerce_proceed_to_checkout', 'woocommerce_button_proceed_to_checkout', 20 );
    }
}