<?php

[0] Fix | Delete

/**

[1] Fix | Delete

* Class for Admin Ajax

[2] Fix | Delete

*

[3] Fix | Delete

* @package PUM

[4] Fix | Delete

* @copyright Copyright (c) 2023, Code Atlantic LLC

[5] Fix | Delete

*/

[6] Fix | Delete

[7] Fix | Delete

if ( ! defined( 'ABSPATH' ) ) {

[8] Fix | Delete

exit;

[9] Fix | Delete

}

[10] Fix | Delete

[11] Fix | Delete

[12] Fix | Delete

/**

[13] Fix | Delete

* Handles some of our AJAX requests including post/taxonomy search from conditions

[14] Fix | Delete

*/

[15] Fix | Delete

class PUM_Admin_Ajax {

[16] Fix | Delete

[17] Fix | Delete

/**

[18] Fix | Delete

* Hooks our methods into AJAX actions.

[19] Fix | Delete

* Hooks our methods into AJAX actions.

[20] Fix | Delete

*/

[21] Fix | Delete

public static function init() {

[22] Fix | Delete

add_action( 'wp_ajax_pum_object_search', [ __CLASS__, 'object_search' ] );

[23] Fix | Delete

add_action( 'wp_ajax_pum_process_batch_request', [ __CLASS__, 'process_batch_request' ] );

[24] Fix | Delete

add_action( 'wp_ajax_pum_save_enabled_state', [ __CLASS__, 'save_popup_enabled_state' ] );

[25] Fix | Delete

}

[26] Fix | Delete

[27] Fix | Delete

/**

[28] Fix | Delete

* Sets the enabled meta field to on or off

[29] Fix | Delete

*

[30] Fix | Delete

* @since 1.12.0

[31] Fix | Delete

*/

[32] Fix | Delete

public static function save_popup_enabled_state() {

[33] Fix | Delete

$args = wp_parse_args(

[34] Fix | Delete

$_REQUEST,

[35] Fix | Delete

[

[36] Fix | Delete

'popupID' => 0,

[37] Fix | Delete

'active' => 1,

[38] Fix | Delete

]

[39] Fix | Delete

);

[40] Fix | Delete

[41] Fix | Delete

// Ensures Popup ID is an int and not 0.

[42] Fix | Delete

$popup_id = intval( $args['popupID'] );

[43] Fix | Delete

if ( 0 === $popup_id ) {

[44] Fix | Delete

wp_send_json_error( 'Invalid popup ID provided.' );

[45] Fix | Delete

}

[46] Fix | Delete

[47] Fix | Delete

// Ensures active state is 0 or 1.

[48] Fix | Delete

$enabled = intval( $args['enabled'] );

[49] Fix | Delete

if ( ! in_array( $enabled, [ 0, 1 ], true ) ) {

[50] Fix | Delete

wp_send_json_error( 'Invalid enabled state provided.' );

[51] Fix | Delete

}

[52] Fix | Delete

[53] Fix | Delete

// Verify the nonce.

[54] Fix | Delete

if ( ! wp_verify_nonce( $_REQUEST['nonce'], "pum_save_enabled_state_$popup_id" ) ) {

[55] Fix | Delete

wp_send_json_error();

[56] Fix | Delete

}

[57] Fix | Delete

[58] Fix | Delete

// Dissallow if user cannot edit this popup.

[59] Fix | Delete

if ( ! current_user_can( 'edit_post', $popup_id ) ) {

[60] Fix | Delete

wp_send_json_error( 'You do not have permission to edit this popup.' );

[61] Fix | Delete

}

[62] Fix | Delete

[63] Fix | Delete

// Get our popup and previous value.

[64] Fix | Delete

$popup = pum_get_popup( $popup_id );

[65] Fix | Delete

$previous = $popup->get_meta( 'enabled' );

[66] Fix | Delete

[67] Fix | Delete

// If value is the same, bail now.

[68] Fix | Delete

if ( $previous === $enabled ) {

[69] Fix | Delete

wp_send_json_success();

[70] Fix | Delete

}

[71] Fix | Delete

[72] Fix | Delete

// Update our value.

[73] Fix | Delete

$results = $popup->update_meta( 'enabled', $enabled );

[74] Fix | Delete

[75] Fix | Delete

if ( false === $results ) {

[76] Fix | Delete

wp_send_json_error( 'Error updating enabled state.' );

[77] Fix | Delete

pum_log_message( "Error updating enabled state on $popup_id. Previous value: $previous. New value: $enabled" );

[78] Fix | Delete

} else {

[79] Fix | Delete

wp_send_json_success();

[80] Fix | Delete

}

[81] Fix | Delete

}

[82] Fix | Delete

[83] Fix | Delete

/**

[84] Fix | Delete

* Searches posts, taxonomies, and users

[85] Fix | Delete

*

[86] Fix | Delete

* Uses passed array with keys of object_type, object_key, include, exclude. Echos our results as JSON.

[87] Fix | Delete

*/

[88] Fix | Delete

public static function object_search() {

[89] Fix | Delete

if ( ! isset( $_REQUEST['nonce'] ) || ! wp_verify_nonce( sanitize_key( wp_unslash( $_REQUEST['nonce'] ) ), 'pum_ajax_object_search_nonce' ) ) {

[90] Fix | Delete

wp_send_json_error();

[91] Fix | Delete

}

[92] Fix | Delete

[93] Fix | Delete

$results = [

[94] Fix | Delete

'items' => [],

[95] Fix | Delete

'total_count' => 0,

[96] Fix | Delete

];

[97] Fix | Delete

[98] Fix | Delete

$object_type = sanitize_text_field( $_REQUEST['object_type'] );

[99] Fix | Delete

$include = ! empty( $_REQUEST['include'] ) ? wp_parse_id_list( $_REQUEST['include'] ) : [];

[100] Fix | Delete

$exclude = ! empty( $_REQUEST['exclude'] ) ? wp_parse_id_list( $_REQUEST['exclude'] ) : [];

[101] Fix | Delete

[102] Fix | Delete

if ( ! empty( $include ) ) {

[103] Fix | Delete

$exclude = array_merge( $include, $exclude );

[104] Fix | Delete

}

[105] Fix | Delete

[106] Fix | Delete

switch ( $object_type ) {

[107] Fix | Delete

case 'post_type':

[108] Fix | Delete

$post_type = ! empty( $_REQUEST['object_key'] ) ? sanitize_text_field( $_REQUEST['object_key'] ) : 'post';

[109] Fix | Delete

[110] Fix | Delete

if ( ! empty( $include ) ) {

[111] Fix | Delete

$include_query = PUM_Helpers::post_type_selectlist_query(

[112] Fix | Delete

$post_type,

[113] Fix | Delete

[

[114] Fix | Delete

'post__in' => $include,

[115] Fix | Delete

'posts_per_page' => - 1,

[116] Fix | Delete

],

[117] Fix | Delete

true

[118] Fix | Delete

);

[119] Fix | Delete

[120] Fix | Delete

foreach ( $include_query['items'] as $id => $name ) {

[121] Fix | Delete

$results['items'][] = [

[122] Fix | Delete

'id' => $id,

[123] Fix | Delete

'text' => "$name (ID: $id)",

[124] Fix | Delete

];

[125] Fix | Delete

}

[126] Fix | Delete

[127] Fix | Delete

$results['total_count'] += (int) $include_query['total_count'];

[128] Fix | Delete

}

[129] Fix | Delete

[130] Fix | Delete

$query = PUM_Helpers::post_type_selectlist_query(

[131] Fix | Delete

$post_type,

[132] Fix | Delete

[

[133] Fix | Delete

's' => ! empty( $_REQUEST['s'] ) ? sanitize_text_field( $_REQUEST['s'] ) : null,

[134] Fix | Delete

'paged' => ! empty( $_REQUEST['paged'] ) ? absint( $_REQUEST['paged'] ) : null,

[135] Fix | Delete

'post__not_in' => $exclude,

[136] Fix | Delete

'posts_per_page' => 10,

[137] Fix | Delete

],

[138] Fix | Delete

true

[139] Fix | Delete

);

[140] Fix | Delete

[141] Fix | Delete

foreach ( $query['items'] as $id => $name ) {

[142] Fix | Delete

$results['items'][] = [

[143] Fix | Delete

'id' => $id,

[144] Fix | Delete

'text' => "$name (ID: $id)",

[145] Fix | Delete

];

[146] Fix | Delete

}

[147] Fix | Delete

[148] Fix | Delete

$results['total_count'] += (int) $query['total_count'];

[149] Fix | Delete

break;

[150] Fix | Delete

[151] Fix | Delete

case 'taxonomy':

[152] Fix | Delete

$taxonomy = ! empty( $_REQUEST['object_key'] ) ? sanitize_text_field( $_REQUEST['object_key'] ) : 'category';

[153] Fix | Delete

[154] Fix | Delete

if ( ! empty( $include ) ) {

[155] Fix | Delete

$include_query = PUM_Helpers::taxonomy_selectlist_query(

[156] Fix | Delete

$taxonomy,

[157] Fix | Delete

[

[158] Fix | Delete

'include' => $include,

[159] Fix | Delete

'number' => 0,

[160] Fix | Delete

],

[161] Fix | Delete

true

[162] Fix | Delete

);

[163] Fix | Delete

[164] Fix | Delete

foreach ( $include_query['items'] as $id => $name ) {

[165] Fix | Delete

$results['items'][] = [

[166] Fix | Delete

'id' => $id,

[167] Fix | Delete

'text' => "$name (ID: $id)",

[168] Fix | Delete

];

[169] Fix | Delete

}

[170] Fix | Delete

[171] Fix | Delete

$results['total_count'] += (int) $include_query['total_count'];

[172] Fix | Delete

}

[173] Fix | Delete

[174] Fix | Delete

$query = PUM_Helpers::taxonomy_selectlist_query(

[175] Fix | Delete

$taxonomy,

[176] Fix | Delete

[

[177] Fix | Delete

'search' => ! empty( $_REQUEST['s'] ) ? sanitize_text_field( $_REQUEST['s'] ) : null,

[178] Fix | Delete

'paged' => ! empty( $_REQUEST['paged'] ) ? absint( $_REQUEST['paged'] ) : null,

[179] Fix | Delete

'exclude' => $exclude,

[180] Fix | Delete

'number' => 10,

[181] Fix | Delete

],

[182] Fix | Delete

true

[183] Fix | Delete

);

[184] Fix | Delete

[185] Fix | Delete

foreach ( $query['items'] as $id => $name ) {

[186] Fix | Delete

$results['items'][] = [

[187] Fix | Delete

'id' => $id,

[188] Fix | Delete

'text' => "$name (ID: $id)",

[189] Fix | Delete

];

[190] Fix | Delete

}

[191] Fix | Delete

[192] Fix | Delete

$results['total_count'] += (int) $query['total_count'];

[193] Fix | Delete

break;

[194] Fix | Delete

case 'user':

[195] Fix | Delete

if ( ! current_user_can( 'list_users' ) ) {

[196] Fix | Delete

wp_send_json_error();

[197] Fix | Delete

}

[198] Fix | Delete

[199] Fix | Delete

$user_role = ! empty( $_REQUEST['object_key'] ) ? $_REQUEST['object_key'] : null;

[200] Fix | Delete

[201] Fix | Delete

if ( ! empty( $include ) ) {

[202] Fix | Delete

$include_query = PUM_Helpers::user_selectlist_query(

[203] Fix | Delete

[

[204] Fix | Delete

'role' => $user_role,

[205] Fix | Delete

'include' => $include,

[206] Fix | Delete

'number' => - 1,

[207] Fix | Delete

],

[208] Fix | Delete

true

[209] Fix | Delete

);

[210] Fix | Delete

[211] Fix | Delete

foreach ( $include_query['items'] as $id => $name ) {

[212] Fix | Delete

$results['items'][] = [

[213] Fix | Delete

'id' => $id,

[214] Fix | Delete

'text' => "$name (ID: $id)",

[215] Fix | Delete

];

[216] Fix | Delete

}

[217] Fix | Delete

[218] Fix | Delete

$results['total_count'] += (int) $include_query['total_count'];

[219] Fix | Delete

}

[220] Fix | Delete

[221] Fix | Delete

$query = PUM_Helpers::user_selectlist_query(

[222] Fix | Delete

[

[223] Fix | Delete

'role' => $user_role,

[224] Fix | Delete

'search' => ! empty( $_REQUEST['s'] ) ? '*' . $_REQUEST['s'] . '*' : null,

[225] Fix | Delete

'paged' => ! empty( $_REQUEST['paged'] ) ? absint( $_REQUEST['paged'] ) : null,

[226] Fix | Delete

'exclude' => $exclude,

[227] Fix | Delete

'number' => 10,

[228] Fix | Delete

],

[229] Fix | Delete

true

[230] Fix | Delete

);

[231] Fix | Delete

[232] Fix | Delete

foreach ( $query['items'] as $id => $name ) {

[233] Fix | Delete

$results['items'][] = [

[234] Fix | Delete

'id' => $id,

[235] Fix | Delete

'text' => "$name (ID: $id)",

[236] Fix | Delete

];

[237] Fix | Delete

}

[238] Fix | Delete

[239] Fix | Delete

$results['total_count'] += (int) $query['total_count'];

[240] Fix | Delete

break;

[241] Fix | Delete

}

[242] Fix | Delete

[243] Fix | Delete

// Take out keys which were only used to deduplicate.

[244] Fix | Delete

$results['items'] = array_values( $results['items'] );

[245] Fix | Delete

[246] Fix | Delete

echo PUM_Utils_Array::safe_json_encode( $results );

[247] Fix | Delete

die();

[248] Fix | Delete

}

[249] Fix | Delete

[250] Fix | Delete

[251] Fix | Delete

/**

[252] Fix | Delete

* Handles Ajax for processing a single batch request.

[253] Fix | Delete

*/

[254] Fix | Delete

public static function process_batch_request() {

[255] Fix | Delete

// Batch ID.

[256] Fix | Delete

$batch_id = isset( $_REQUEST['batch_id'] ) ? sanitize_key( $_REQUEST['batch_id'] ) : false;

[257] Fix | Delete

[258] Fix | Delete

if ( ! $batch_id ) {

[259] Fix | Delete

wp_send_json_error(

[260] Fix | Delete

[

[261] Fix | Delete

'error' => __( 'A batch process ID must be present to continue.', 'popup-maker' ),

[262] Fix | Delete

]

[263] Fix | Delete

);

[264] Fix | Delete

}

[265] Fix | Delete

[266] Fix | Delete

// Nonce.

[267] Fix | Delete

if ( ! isset( $_REQUEST['nonce'] ) || ( isset( $_REQUEST['nonce'] ) && false === wp_verify_nonce( $_REQUEST['nonce'], "{$batch_id}_step_nonce" ) ) ) {

[268] Fix | Delete

wp_send_json_error(

[269] Fix | Delete

[

[270] Fix | Delete

'error' => __( 'You do not have permission to initiate this request. Contact an administrator for more information.', 'popup-maker' ),

[271] Fix | Delete

]

[272] Fix | Delete

);

[273] Fix | Delete

}

[274] Fix | Delete

[275] Fix | Delete

// Attempt to retrieve the batch attributes from memory.

[276] Fix | Delete

$batch = PUM_Batch_Process_Registry::instance()->get( $batch_id );

[277] Fix | Delete

[278] Fix | Delete

if ( false === $batch ) {

[279] Fix | Delete

wp_send_json_error(

[280] Fix | Delete

[

[281] Fix | Delete

'error' => sprintf( __( '%s is an invalid batch process ID.', 'popup-maker' ), esc_html( $_REQUEST['batch_id'] ) ),

[282] Fix | Delete

]

[283] Fix | Delete

);

[284] Fix | Delete

}

[285] Fix | Delete

[286] Fix | Delete

$class = isset( $batch['class'] ) ? sanitize_text_field( $batch['class'] ) : '';

[287] Fix | Delete

$class_file = isset( $batch['file'] ) ? $batch['file'] : '';

[288] Fix | Delete

[289] Fix | Delete

if ( empty( $class_file ) || ! file_exists( $class_file ) ) {

[290] Fix | Delete

wp_send_json_error(

[291] Fix | Delete

[

[292] Fix | Delete

'error' => sprintf( __( 'An invalid file path is registered for the %1$s batch process handler.', 'popup-maker' ), "<code>{$batch_id}</code>" ),

[293] Fix | Delete

]

[294] Fix | Delete

);

[295] Fix | Delete

} else {

[296] Fix | Delete

require_once $class_file;

[297] Fix | Delete

}

[298] Fix | Delete

[299] Fix | Delete

if ( empty( $class ) || ! class_exists( $class ) ) {

[300] Fix | Delete

wp_send_json_error(

[301] Fix | Delete

[

[302] Fix | Delete

'error' => sprintf( __( '%1$s is an invalid handler for the %2$s batch process. Please try again.', 'popup-maker' ), "<code>{$class}</code>", "<code>{$batch_id}</code>" ),

[303] Fix | Delete

]

[304] Fix | Delete

);

[305] Fix | Delete

}

[306] Fix | Delete

[307] Fix | Delete

$step = sanitize_text_field( $_REQUEST['step'] );

[308] Fix | Delete

[309] Fix | Delete

/**

[310] Fix | Delete

* Instantiate the batch class.

[311] Fix | Delete

*

[312] Fix | Delete

* @var PUM_Interface_Batch_Exporter|PUM_Interface_Batch_Process|PUM_Interface_Batch_PrefetchProcess $process

[313] Fix | Delete

*/

[314] Fix | Delete

if ( isset( $_REQUEST['data']['upload']['file'] ) ) {

[315] Fix | Delete

[316] Fix | Delete

// If this is an import, instantiate with the file and step.

[317] Fix | Delete

$file = sanitize_text_field( $_REQUEST['data']['upload']['file'] );

[318] Fix | Delete

$process = new $class( $file, $step );

[319] Fix | Delete

[320] Fix | Delete

} else {

[321] Fix | Delete

[322] Fix | Delete

// Otherwise just the step.

[323] Fix | Delete

$process = new $class( $step );

[324] Fix | Delete

[325] Fix | Delete

}

[326] Fix | Delete

[327] Fix | Delete

// Garbage collect any old temporary data.

[328] Fix | Delete

// TODO Should this be here? Likely here to prevent case ajax passes step 1 without resetting process counts?

[329] Fix | Delete

if ( $step < 2 ) {

[330] Fix | Delete

$process->finish();

[331] Fix | Delete

}

[332] Fix | Delete

[333] Fix | Delete

$using_prefetch = ( $process instanceof PUM_Interface_Batch_PrefetchProcess );

[334] Fix | Delete

[335] Fix | Delete

// Handle pre-fetching data.

[336] Fix | Delete

if ( $using_prefetch ) {

[337] Fix | Delete

// Initialize any data needed to process a step.

[338] Fix | Delete

$data = isset( $_REQUEST['form'] ) ? $_REQUEST['form'] : [];

[339] Fix | Delete

[340] Fix | Delete

$process->init( $data );

[341] Fix | Delete

$process->pre_fetch();

[342] Fix | Delete

}

[343] Fix | Delete

[344] Fix | Delete

/** @var int|string|WP_Error $step */

[345] Fix | Delete

$step = $process->process_step();

[346] Fix | Delete

[347] Fix | Delete

if ( is_wp_error( $step ) ) {

[348] Fix | Delete

wp_send_json_error( $step );

[349] Fix | Delete

} else {

[350] Fix | Delete

$response_data = [ 'step' => $step ];

[351] Fix | Delete

[352] Fix | Delete

// Map fields if this is an import.

[353] Fix | Delete

if ( isset( $process->field_mapping ) && ( $process instanceof PUM_Interface_CSV_Importer ) ) {

[354] Fix | Delete

$response_data['columns'] = $process->get_columns();

[355] Fix | Delete

$response_data['mapping'] = $process->field_mapping;

[356] Fix | Delete

}

[357] Fix | Delete

[358] Fix | Delete

// Finish and set the status flag if done.

[359] Fix | Delete

if ( 'done' === $step ) {

[360] Fix | Delete

$response_data['done'] = true;

[361] Fix | Delete

$response_data['message'] = $process->get_message( 'done' );

[362] Fix | Delete

[363] Fix | Delete

// If this is an export class and not an empty export, send the download URL.

[364] Fix | Delete

if ( method_exists( $process, 'can_export' ) ) {

[365] Fix | Delete

[366] Fix | Delete

if ( ! $process->is_empty ) {

[367] Fix | Delete

$response_data['url'] = pum_admin_url(

[368] Fix | Delete

'tools',

[369] Fix | Delete

[

[370] Fix | Delete

'step' => $step,

[371] Fix | Delete

'nonce' => wp_create_nonce( 'pum-batch-export' ),

[372] Fix | Delete

'batch_id' => $batch_id,

[373] Fix | Delete

'pum_action' => 'download_batch_export',

[374] Fix | Delete

]

[375] Fix | Delete

);

[376] Fix | Delete

}

[377] Fix | Delete

}

[378] Fix | Delete

[379] Fix | Delete

// Once all calculations have finished, run cleanup.

[380] Fix | Delete

$process->finish();

[381] Fix | Delete

} else {

[382] Fix | Delete

$response_data['done'] = false;

[383] Fix | Delete

$response_data['percentage'] = $process->get_percentage_complete();

[384] Fix | Delete

}

[385] Fix | Delete

[386] Fix | Delete

wp_send_json_success( $response_data );

[387] Fix | Delete

}

[388] Fix | Delete

[389] Fix | Delete

}

[390] Fix | Delete

[391] Fix | Delete

}

[392] Fix | Delete

[393] Fix | Delete