Edit File by line

<?php

[0] Fix | Delete

[1] Fix | Delete

use AdvancedAds\Utilities\WordPress;

[2] Fix | Delete

[3] Fix | Delete

/**

[4] Fix | Delete

* Provide public ajax interface.

[5] Fix | Delete

[6] Fix | Delete

* @since 1.5.0

[7] Fix | Delete

[8] Fix | Delete

class Advanced_Ads_Ajax {

[9] Fix | Delete

[10] Fix | Delete

/**

[11] Fix | Delete

* Advanced_Ads_Ajax constructor.

[12] Fix | Delete

[13] Fix | Delete

private function __construct() {

[14] Fix | Delete

add_action( 'wp_ajax_advads_ad_select', [ $this, 'advads_ajax_ad_select' ] );

[15] Fix | Delete

add_action( 'wp_ajax_nopriv_advads_ad_select', [ $this, 'advads_ajax_ad_select' ] );

[16] Fix | Delete

add_action( 'wp_ajax_advads-ad-health-notice-push', [ $this, 'ad_health_notice_push' ] );

[17] Fix | Delete

add_action( 'wp_ajax_nopriv_advads-ad-health-notice-push', [ $this, 'ad_health_notice_push' ] );

[18] Fix | Delete

}

[19] Fix | Delete

[20] Fix | Delete

/**

[21] Fix | Delete

* Instance of Advanced_Ads_Ajax

[22] Fix | Delete

[23] Fix | Delete

* @var $instance

[24] Fix | Delete

[25] Fix | Delete

private static $instance;

[26] Fix | Delete

[27] Fix | Delete

/**

[28] Fix | Delete

* Instance getter

[29] Fix | Delete

[30] Fix | Delete

* @return Advanced_Ads_Ajax

[31] Fix | Delete

[32] Fix | Delete

public static function get_instance() {

[33] Fix | Delete

if ( ! isset( self::$instance ) ) {

[34] Fix | Delete

self::$instance = new self();

[35] Fix | Delete

}

[36] Fix | Delete

[37] Fix | Delete

return self::$instance;

[38] Fix | Delete

}

[39] Fix | Delete

[40] Fix | Delete

/**

[41] Fix | Delete

* Simple wp ajax interface for ad selection.

[42] Fix | Delete

[43] Fix | Delete

public function advads_ajax_ad_select() {

[44] Fix | Delete

add_filter( 'advanced-ads-output-inline-css', '__return_false' );

[45] Fix | Delete

// Set proper header.

[46] Fix | Delete

header( 'Content-Type: application/json; charset: utf-8' );

[47] Fix | Delete

[48] Fix | Delete

// Allow modules / add ons to test (this is rather late but should happen before anything important is called).

[49] Fix | Delete

do_action( 'advanced-ads-ajax-ad-select-init' );

[50] Fix | Delete

[51] Fix | Delete

$ad_ids = isset( $_REQUEST['ad_ids'] ) ? $_REQUEST['ad_ids'] : null;

[52] Fix | Delete

if ( is_string( $ad_ids ) ) {

[53] Fix | Delete

$ad_ids = json_decode( $ad_ids, true );

[54] Fix | Delete

}

[55] Fix | Delete

if ( is_array( $ad_ids ) ) { // Ads loaded previously and passed by query.

[56] Fix | Delete

Advanced_Ads::get_instance()->current_ads += $ad_ids;

[57] Fix | Delete

}

[58] Fix | Delete

[59] Fix | Delete

$defered_ads = isset( $_REQUEST['deferedAds'] ) ? $_REQUEST['deferedAds'] : null;

[60] Fix | Delete

if ( $defered_ads ) { // Load all ajax ads with a single request.

[61] Fix | Delete

$response = [];

[62] Fix | Delete

[63] Fix | Delete

$requests_by_blog = [];

[64] Fix | Delete

foreach ( (array) $defered_ads as $request ) {

[65] Fix | Delete

$blog_id = isset( $request['blog_id'] ) ? $request['blog_id'] : get_current_blog_id();

[66] Fix | Delete

$requests_by_blog[ $blog_id ][] = $request;

[67] Fix | Delete

}

[68] Fix | Delete

foreach ( $requests_by_blog as $blog_id => $requests ) {

[69] Fix | Delete

if ( get_current_blog_id() !== $blog_id ) {

[70] Fix | Delete

Advanced_Ads::get_instance()->switch_to_blog( $blog_id );

[71] Fix | Delete

}

[72] Fix | Delete

[73] Fix | Delete

foreach ( $requests as $request ) {

[74] Fix | Delete

$result = $this->select_one( $request );

[75] Fix | Delete

$result['elementId'] = ! empty( $request['elementId'] ) ? $request['elementId'] : null;

[76] Fix | Delete

$response[] = $result;

[77] Fix | Delete

}

[78] Fix | Delete

[79] Fix | Delete

if ( get_current_blog_id() !== $blog_id ) {

[80] Fix | Delete

Advanced_Ads::get_instance()->restore_current_blog();

[81] Fix | Delete

}

[82] Fix | Delete

}

[83] Fix | Delete

[84] Fix | Delete

echo wp_json_encode( $response );

[85] Fix | Delete

die();

[86] Fix | Delete

}

[87] Fix | Delete

[88] Fix | Delete

$response = $this->select_one( $_REQUEST );

[89] Fix | Delete

echo wp_json_encode( $response );

[90] Fix | Delete

die();

[91] Fix | Delete

}

[92] Fix | Delete

[93] Fix | Delete

/**

[94] Fix | Delete

* Provides a single ad (ad, group, placement) given ID and selection method.

[95] Fix | Delete

[96] Fix | Delete

* @param array $request request.

[97] Fix | Delete

[98] Fix | Delete

* @return array

[99] Fix | Delete

[100] Fix | Delete

private function select_one( $request ) {

[101] Fix | Delete

// Init handlers.

[102] Fix | Delete

$selector = Advanced_Ads_Select::get_instance();

[103] Fix | Delete

$methods = $selector->get_methods();

[104] Fix | Delete

$method = isset( $request['ad_method'] ) ? (string) $request['ad_method'] : null;

[105] Fix | Delete

$id = isset( $request['ad_id'] ) ? (string) $request['ad_id'] : null;

[106] Fix | Delete

$arguments = isset( $request['ad_args'] ) ? $request['ad_args'] : [];

[107] Fix | Delete

if ( is_string( $arguments ) ) {

[108] Fix | Delete

$arguments = stripslashes( $arguments );

[109] Fix | Delete

$arguments = json_decode( $arguments, true );

[110] Fix | Delete

}

[111] Fix | Delete

[112] Fix | Delete

if ( ! empty( $request['elementId'] ) ) {

[113] Fix | Delete

$arguments['cache_busting_elementid'] = $request['elementId'];

[114] Fix | Delete

}

[115] Fix | Delete

[116] Fix | Delete

if ( ! array_key_exists( $method, $methods ) || empty( $id ) ) {

[117] Fix | Delete

// Report error.

[118] Fix | Delete

return [

[119] Fix | Delete

'status' => 'error',

[120] Fix | Delete

'message' => 'No valid ID or METHOD found.',

[121] Fix | Delete

];

[122] Fix | Delete

}

[123] Fix | Delete

[124] Fix | Delete

/**

[125] Fix | Delete

* Filters the received arguments before passing them to to ads/groups/placements.

[126] Fix | Delete

[127] Fix | Delete

* @param array $arguments Existing arguments.

[128] Fix | Delete

* @param array $request Request data.

[129] Fix | Delete

[130] Fix | Delete

$arguments = apply_filters( 'advanced-ads-ajax-ad-select-arguments', $arguments, $request );

[131] Fix | Delete

[132] Fix | Delete

$advads = Advanced_Ads::get_instance();

[133] Fix | Delete

$previous_ads = $advads->current_ads;

[134] Fix | Delete

[135] Fix | Delete

add_filter( 'advanced-ads-can-display', [ $this, 'can_display_by_consent' ], 10, 2 );

[136] Fix | Delete

$content = $selector->get_ad_by_method( $id, $method, $arguments );

[137] Fix | Delete

[138] Fix | Delete

if ( empty( $content ) ) {

[139] Fix | Delete

return [

[140] Fix | Delete

'status' => 'error',

[141] Fix | Delete

'message' => 'No displayable ad found for privacy settings.',

[142] Fix | Delete

];

[143] Fix | Delete

}

[144] Fix | Delete

[145] Fix | Delete

$response = [

[146] Fix | Delete

'status' => 'success',

[147] Fix | Delete

'item' => $content,

[148] Fix | Delete

'id' => $id,

[149] Fix | Delete

'method' => $method,

[150] Fix | Delete

'ads' => array_slice( $advads->current_ads, count( $previous_ads ) ),

[151] Fix | Delete

'blog_id' => get_current_blog_id(),

[152] Fix | Delete

];

[153] Fix | Delete

[154] Fix | Delete

return apply_filters(

[155] Fix | Delete

'advanced-ads-cache-busting-item',

[156] Fix | Delete

$response,

[157] Fix | Delete

[

[158] Fix | Delete

'id' => $id,

[159] Fix | Delete

'method' => $method,

[160] Fix | Delete

'args' => $arguments,

[161] Fix | Delete

]

[162] Fix | Delete

);

[163] Fix | Delete

}

[164] Fix | Delete

[165] Fix | Delete

/**

[166] Fix | Delete

* Push an Ad Health notice to the queue in the backend

[167] Fix | Delete

[168] Fix | Delete

public function ad_health_notice_push() {

[169] Fix | Delete

[170] Fix | Delete

check_ajax_referer( 'advanced-ads-ad-health-ajax-nonce', 'nonce' );

[171] Fix | Delete

[172] Fix | Delete

if ( ! WordPress::user_can( 'advanced_ads_edit_ads' ) ) {

[173] Fix | Delete

return;

[174] Fix | Delete

}

[175] Fix | Delete

[176] Fix | Delete

$key = ( ! empty( $_REQUEST['key'] ) ) ? esc_attr( $_REQUEST['key'] ) : false;

[177] Fix | Delete

$attr = ( ! empty( $_REQUEST['attr'] ) && is_array( $_REQUEST['attr'] ) ) ? $_REQUEST['attr'] : [];

[178] Fix | Delete

[179] Fix | Delete

// Update or new entry?

[180] Fix | Delete

if ( isset( $attr['mode'] ) && 'update' === $attr['mode'] ) {

[181] Fix | Delete

Advanced_Ads_Ad_Health_Notices::get_instance()->update( $key, $attr );

[182] Fix | Delete

} else {

[183] Fix | Delete

Advanced_Ads_Ad_Health_Notices::get_instance()->add( $key, $attr );

[184] Fix | Delete

}

[185] Fix | Delete

[186] Fix | Delete

die();

[187] Fix | Delete

}

[188] Fix | Delete

[189] Fix | Delete

/**

[190] Fix | Delete

* Check if AJAX ad can be displayed, with consent information sent in request.

[191] Fix | Delete

[192] Fix | Delete

* @param bool $can_display Whether this ad can be displayed.

[193] Fix | Delete

* @param Advanced_Ads_Ad $ad The ad object.

[194] Fix | Delete

[195] Fix | Delete

* @return bool

[196] Fix | Delete

[197] Fix | Delete

public function can_display_by_consent( $can_display, $ad ) {

[198] Fix | Delete

// already false, honor this.

[199] Fix | Delete

if ( ! $can_display ) {

[200] Fix | Delete

return $can_display;

[201] Fix | Delete

}

[202] Fix | Delete

[203] Fix | Delete

// If consent is overridden for the ad.

[204] Fix | Delete

if ( ! empty( $ad->options()['privacy']['ignore-consent'] ) ) {

[205] Fix | Delete

return true;

[206] Fix | Delete

}

[207] Fix | Delete

[208] Fix | Delete

// if privacy module is not active, we can display.

[209] Fix | Delete

$privacy = Advanced_Ads_Privacy::get_instance();

[210] Fix | Delete

$privacy_options = $privacy->options();

[211] Fix | Delete

if ( empty( $privacy_options['enabled'] ) ) {

[212] Fix | Delete

return true;

[213] Fix | Delete

}

[214] Fix | Delete

[215] Fix | Delete

// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- nonce should be verified in ajax handler.

[216] Fix | Delete

$consent_state = sanitize_text_field( $_REQUEST['consent'] );

[217] Fix | Delete

[218] Fix | Delete

// Consent is either given or not needed.

[219] Fix | Delete

if ( in_array( $consent_state, [ 'not_needed', 'accepted' ], true ) ) {

[220] Fix | Delete

return true;

[221] Fix | Delete

}

[222] Fix | Delete

[223] Fix | Delete

// If there is custom code, don't display the ad (unless it's a group).

[224] Fix | Delete

if ( class_exists( 'Advanced_Ads_Pro' ) && ! empty( Advanced_Ads_Pro::get_instance()->get_custom_code( $ad ) ) && $ad->type !== 'group' ) {

[225] Fix | Delete

return false;

[226] Fix | Delete

}

[227] Fix | Delete

[228] Fix | Delete

// See if this ad type needs consent.

[229] Fix | Delete

return ! $privacy->ad_type_needs_consent( $ad->type );

[230] Fix | Delete

}

[231] Fix | Delete

}

[232] Fix | Delete

[233] Fix | Delete