<?php

[0] Fix | Delete

[1] Fix | Delete

class wfAdminNoticeQueue {

[2] Fix | Delete

protected static function _notices() {

[3] Fix | Delete

return self::_purgeObsoleteNotices(wfConfig::get_ser('adminNoticeQueue', array()));

[4] Fix | Delete

}

[5] Fix | Delete

[6] Fix | Delete

private static function _purgeObsoleteNotices($notices) {

[7] Fix | Delete

$altered = false;

[8] Fix | Delete

foreach ($notices as $id => $notice) {

[9] Fix | Delete

if ($notice['category'] === 'php8') {

[10] Fix | Delete

unset($notices[$id]);

[11] Fix | Delete

$altered = true;

[12] Fix | Delete

}

[13] Fix | Delete

}

[14] Fix | Delete

if ($altered)

[15] Fix | Delete

self::_setNotices($notices);

[16] Fix | Delete

return $notices;

[17] Fix | Delete

}

[18] Fix | Delete

[19] Fix | Delete

protected static function _setNotices($notices) {

[20] Fix | Delete

wfConfig::set_ser('adminNoticeQueue', $notices);

[21] Fix | Delete

}

[22] Fix | Delete

[23] Fix | Delete

/**

[24] Fix | Delete

* Adds an admin notice to the display queue.

[25] Fix | Delete

*

[26] Fix | Delete

* @param string $severity

[27] Fix | Delete

* @param string $messageHTML

[28] Fix | Delete

* @param bool|string $category If not false, notices with the same category will be removed prior to adding this one.

[29] Fix | Delete

* @param bool|array $users If not false, an array of user IDs the notice should show for.

[30] Fix | Delete

*/

[31] Fix | Delete

public static function addAdminNotice($severity, $messageHTML, $category = false, $users = false) {

[32] Fix | Delete

$notices = self::_notices();

[33] Fix | Delete

foreach ($notices as $id => $n) {

[34] Fix | Delete

$usersMatches = false;

[35] Fix | Delete

if (isset($n['users'])) {

[36] Fix | Delete

$usersMatches = wfUtils::sets_equal($n['users'], $users);

[37] Fix | Delete

}

[38] Fix | Delete

else if ($users === false) {

[39] Fix | Delete

$usersMatches = true;

[40] Fix | Delete

}

[41] Fix | Delete

[42] Fix | Delete

$categoryMatches = false;

[43] Fix | Delete

if ($category !== false && isset($n['category']) && $n['category'] == $category) {

[44] Fix | Delete

$categoryMatches = true;

[45] Fix | Delete

}

[46] Fix | Delete

[47] Fix | Delete

if ($usersMatches && $categoryMatches) {

[48] Fix | Delete

unset($notices[$id]);

[49] Fix | Delete

}

[50] Fix | Delete

}

[51] Fix | Delete

[52] Fix | Delete

$id = wfUtils::uuid();

[53] Fix | Delete

$notices[$id] = array(

[54] Fix | Delete

'severity' => $severity,

[55] Fix | Delete

'messageHTML' => $messageHTML,

[56] Fix | Delete

);

[57] Fix | Delete

[58] Fix | Delete

if ($category !== false) {

[59] Fix | Delete

$notices[$id]['category'] = $category;

[60] Fix | Delete

}

[61] Fix | Delete

[62] Fix | Delete

if ($users !== false) {

[63] Fix | Delete

$notices[$id]['users'] = $users;

[64] Fix | Delete

}

[65] Fix | Delete

[66] Fix | Delete

self::_setNotices($notices);

[67] Fix | Delete

}

[68] Fix | Delete

[69] Fix | Delete

/**

[70] Fix | Delete

* Removes an admin notice using one of three possible search methods:

[71] Fix | Delete

*

[72] Fix | Delete

* 1. If $id matches. $category and $users are ignored

[73] Fix | Delete

* 2. If $category matches. $users must be false for this.

[74] Fix | Delete

* 3. If $category matches and the notice's user IDs matches $users.

[75] Fix | Delete

*

[76] Fix | Delete

* @param bool|int $id

[77] Fix | Delete

* @param bool|string $category

[78] Fix | Delete

* @param bool|int[] $users

[79] Fix | Delete

*/

[80] Fix | Delete

public static function removeAdminNotice($id = false, $category = false, $users = false) {

[81] Fix | Delete

if ($id === false && $category === false && $users === false) {

[82] Fix | Delete

return;

[83] Fix | Delete

}

[84] Fix | Delete

else if ($id !== false) {

[85] Fix | Delete

$category = false;

[86] Fix | Delete

$users = false;

[87] Fix | Delete

}

[88] Fix | Delete

[89] Fix | Delete

$notices = self::_notices();

[90] Fix | Delete

$found = false;

[91] Fix | Delete

foreach ($notices as $nid => $n) {

[92] Fix | Delete

if ($id == $nid) { //ID match

[93] Fix | Delete

unset($notices[$nid]);

[94] Fix | Delete

$found=true;

[95] Fix | Delete

break;

[96] Fix | Delete

}

[97] Fix | Delete

else if ($id !== false) {

[98] Fix | Delete

continue;

[99] Fix | Delete

}

[100] Fix | Delete

[101] Fix | Delete

if ($category !== false && isset($n['category']) && $category == $n['category']) {

[102] Fix | Delete

if ($users !== false) {

[103] Fix | Delete

if (isset($n['users']) && wfUtils::sets_equal($users, $n['users'])) {

[104] Fix | Delete

unset($notices[$nid]);

[105] Fix | Delete

$found=true;

[106] Fix | Delete

}

[107] Fix | Delete

}

[108] Fix | Delete

else {

[109] Fix | Delete

unset($notices[$nid]);

[110] Fix | Delete

$found=true;

[111] Fix | Delete

}

[112] Fix | Delete

}

[113] Fix | Delete

}

[114] Fix | Delete

if($found)

[115] Fix | Delete

self::_setNotices($notices);

[116] Fix | Delete

}

[117] Fix | Delete

[118] Fix | Delete

public static function hasNotice($category = false, $users = false) {

[119] Fix | Delete

$notices = self::_notices();

[120] Fix | Delete

foreach ($notices as $nid => $n) {

[121] Fix | Delete

$categoryMatches = false;

[122] Fix | Delete

if (($category === false && !isset($n['category'])) || ($category !== false && isset($n['category']) && $category == $n['category'])) {

[123] Fix | Delete

$categoryMatches = true;

[124] Fix | Delete

}

[125] Fix | Delete

[126] Fix | Delete

$usersMatches = false;

[127] Fix | Delete

if (($users === false && !isset($n['users'])) || ($users !== false && isset($n['users']) && wfUtils::sets_equal($users, $n['users']))) {

[128] Fix | Delete

$usersMatches = true;

[129] Fix | Delete

}

[130] Fix | Delete

[131] Fix | Delete

if ($categoryMatches && $usersMatches) {

[132] Fix | Delete

return true;

[133] Fix | Delete

}

[134] Fix | Delete

}

[135] Fix | Delete

return false;

[136] Fix | Delete

}

[137] Fix | Delete

[138] Fix | Delete

public static function enqueueAdminNotices() {

[139] Fix | Delete

$user = wp_get_current_user();

[140] Fix | Delete

if ($user->ID == 0) {

[141] Fix | Delete

return false;

[142] Fix | Delete

}

[143] Fix | Delete

[144] Fix | Delete

$networkAdmin = is_multisite() && is_network_admin();

[145] Fix | Delete

$notices = self::_notices();

[146] Fix | Delete

$added = false;

[147] Fix | Delete

foreach ($notices as $nid => $n) {

[148] Fix | Delete

if (isset($n['users']) && array_search($user->ID, $n['users']) === false) {

[149] Fix | Delete

continue;

[150] Fix | Delete

}

[151] Fix | Delete

[152] Fix | Delete

$notice = new wfAdminNotice($nid, $n['severity'], $n['messageHTML']);

[153] Fix | Delete

if ($networkAdmin) {

[154] Fix | Delete

add_action('network_admin_notices', array($notice, 'displayNotice'));

[155] Fix | Delete

}

[156] Fix | Delete

else {

[157] Fix | Delete

add_action('admin_notices', array($notice, 'displayNotice'));

[158] Fix | Delete

}

[159] Fix | Delete

[160] Fix | Delete

$added = true;

[161] Fix | Delete

}

[162] Fix | Delete

[163] Fix | Delete

return $added;

[164] Fix | Delete

}

[165] Fix | Delete

}

[166] Fix | Delete

[167] Fix | Delete

class wfAdminNotice {

[168] Fix | Delete

const SEVERITY_CRITICAL = 'critical';

[169] Fix | Delete

const SEVERITY_WARNING = 'warning';

[170] Fix | Delete

const SEVERITY_INFO = 'info';

[171] Fix | Delete

[172] Fix | Delete

private $_id;

[173] Fix | Delete

private $_severity;

[174] Fix | Delete

private $_messageHTML;

[175] Fix | Delete

[176] Fix | Delete

public function __construct($id, $severity, $messageHTML) {

[177] Fix | Delete

$this->_id = $id;

[178] Fix | Delete

$this->_severity = $severity;

[179] Fix | Delete

$this->_messageHTML = $messageHTML;

[180] Fix | Delete

}

[181] Fix | Delete

[182] Fix | Delete

public function displayNotice() {

[183] Fix | Delete

$severityClass = 'notice-info';

[184] Fix | Delete

if ($this->_severity == self::SEVERITY_CRITICAL) {

[185] Fix | Delete

$severityClass = 'notice-error';

[186] Fix | Delete

}

[187] Fix | Delete

else if ($this->_severity == self::SEVERITY_WARNING) {

[188] Fix | Delete

$severityClass = 'notice-warning';

[189] Fix | Delete

}

[190] Fix | Delete

[191] Fix | Delete

echo '<div class="wf-admin-notice notice ' . $severityClass . '" data-notice-id="' . esc_attr($this->_id) . '"><p>' . $this->_messageHTML . '</p><p><a class="wf-btn wf-btn-default wf-btn-sm wf-dismiss-link" href="#" onclick="wordfenceExt.dismissAdminNotice(\'' . esc_attr($this->_id) . '\'); return false;" role="button">' . esc_html__('Dismiss', 'wordfence') . '</a></p></div>';

[192] Fix | Delete

}

[193] Fix | Delete

}

[194] Fix | Delete