From e8e39c1ef30619111b2bfb2826ce0d9536b30b7d Mon Sep 17 00:00:00 2001 From: unknown Date: Fri, 7 Aug 2026 13:34:57 +0800 Subject: [PATCH] fix(payment): validate creator order type --- inc/helpers/user-center-renderers/sidebar-creator.php | 2 +- src/Payment/Revenue.php | 4 ++++ 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/inc/helpers/user-center-renderers/sidebar-creator.php b/inc/helpers/user-center-renderers/sidebar-creator.php index f6dd1fa7..d852cf58 100644 --- a/inc/helpers/user-center-renderers/sidebar-creator.php +++ b/inc/helpers/user-center-renderers/sidebar-creator.php @@ -18,7 +18,7 @@ if ($creation_url === '' && $revenue_url === '') { - + diff --git a/src/Payment/Revenue.php b/src/Payment/Revenue.php index 8bbc2e6d..733f8c3b 100644 --- a/src/Payment/Revenue.php +++ b/src/Payment/Revenue.php @@ -38,6 +38,10 @@ class Revenue { if ($order_number === '' || (string) ($order['status'] ?? '') !== 'completed') { return 0; } + $product_type = sanitize_key((string) ($order['product_type'] ?? '')); + if ($product_type !== \AKSRT\Core\DomainModel::ORDER_PRODUCT_RESOURCE) { + return 0; + } $existing = $wpdb->get_var($wpdb->prepare( "SELECT id FROM {$this->table()} WHERE order_number = %s ORDER BY id ASC LIMIT 1",