'searchwp-' . self::$slug, 'tab' => '', 'label' => esc_html__( 'Search Forms', 'searchwp-live-ajax-search' ), ]; return $items; } /** * Callback for the render of this view. * * @since 1.8.0 */ public static function render() { if ( ! current_user_can( Settings_Api::get_capability() ) ) { return; } echo '
'; if ( isset( $_GET['form_id'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended self::render_form_settings(); } else { self::render_forms_list(); } echo '
'; } /** * Process forms list actions. * * @since 1.8.0 */ public static function process_list_actions() { if ( ! Utils::check_settings_permissions() ) { return; } $action = isset( $_GET['action'] ) ? sanitize_key( $_GET['action'] ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Recommended if ( empty( $action ) ) { return; } switch ( $action ) { case 'create': self::add_new_form(); break; case 'trash': self::delete_form(); break; } } /** * Deletes a form from the list. * * @since 1.8.0 * * @return void */ private static function delete_form() { $form_id = isset( $_GET['form_id'] ) ? absint( $_GET['form_id'] ) : 0; // phpcs:ignore WordPress.Security.NonceVerification.Recommended if ( empty( $form_id ) ) { return; } Storage::delete( $form_id ); wp_safe_redirect( add_query_arg( 'page', 'searchwp-forms', admin_url( 'admin.php' ) ) ); } /** * Adds a new form to the list. * * @since 1.8.0 * * @return void */ private static function add_new_form() { $form_id = absint( Storage::add() ); if ( empty( $form_id ) ) { wp_safe_redirect( add_query_arg( 'page', 'searchwp-forms', admin_url( 'admin.php' ) ) ); } else { wp_safe_redirect( add_query_arg( [ 'page' => 'searchwp-forms', 'form_id' => $form_id, ], admin_url( 'admin.php' ) ) ); } } /** * Callback for the forms list render. * * @since 1.8.0 */ private static function render_forms_list() { $forms = Storage::get_all(); ?>

$form ) : ?>
[searchwp_form id=""]

/>
disabled />
disabled />
disabled />
disabled />

/>
/>
/>
/>
placeholder="-">

/>
/>
/>
placeholder="-">

__( 'Authors', 'searchwp-live-ajax-search' ), 'post_types' => __( 'Post Types', 'searchwp-live-ajax-search' ), 'tags' => __( 'Tags', 'searchwp-live-ajax-search' ), ]; $selected_filters = isset( $form['advanced-search-filters'] ) ? $form['advanced-search-filters'] : []; ?>

[], 'span' => [ 'class' => [], ], ] ); ?>

$page_id, ]; } else { $url = add_query_arg( 'post_type', 'page', admin_url( 'post-new.php' ) ); $meta = [ 'embed_page' => 0, 'embed_page_title' => ! empty( $_POST['pageTitle'] ) ? sanitize_text_field( wp_unslash( $_POST['pageTitle'] ) ) : '', // phpcs:ignore WordPress.Security.NonceVerification ]; } $meta['form_id'] = ! empty( $_POST['formId'] ) ? absint( $_POST['formId'] ) : 0; // phpcs:ignore WordPress.Security.NonceVerification update_user_meta( get_current_user_id(), 'searchwp_admin_form_embed_wizard', $meta ); wp_send_json_success( $url ); } /** * Search pages by search term and return an array containing * `value` and `label` which is the post ID and post title respectively. * * @since 1.8.0 */ public static function get_search_result_pages_ajax() { Utils::check_ajax_permissions(); if ( ! array_key_exists( 'search', $_GET ) ) { // phpcs:ignore WordPress.Security.NonceVerification wp_send_json_error( [ 'msg' => esc_html__( 'Incorrect usage of this operation.', 'searchwp-live-ajax-search' ) ] ); } $search_results = self::search_posts( sanitize_text_field( wp_unslash( $_GET['search'] ) ), // phpcs:ignore WordPress.Security.NonceVerification [ 'count' => 20, 'post_status' => [ 'publish', 'pending' ], ] ); $result_pages = []; // Prepare for ChoicesJS render. foreach ( $search_results as $search_result ) { $result_pages[] = [ 'value' => absint( $search_result->ID ), 'label' => esc_html( $search_result->post_title ), ]; } if ( empty( $result_pages ) ) { wp_send_json_error( [] ); } wp_send_json_success( $result_pages ); } /** * Search for posts editable by user. * * @since 1.8.0 * * @param string $search_term Optional search term. Default ''. * @param array $args Args { * Optional. An array of arguments. * * @type string $post_type Post type to search for. * @type string[] $post_status Post status to search for. * @type int $count Number of results to return. Default 20. * } * * @return array */ private static function search_posts( $search_term = '', $args = [] ) { global $wpdb; $default_args = [ 'post_type' => 'page', 'post_status' => [ 'publish' ], 'count' => 20, ]; $args = wp_parse_args( $args, $default_args ); // @todo: add trash access capabilities to MySQL. // See edit_post/edit_page case in map_meta_cap(). $args['post_status'] = array_diff( $args['post_status'], [ 'trash' ] ); $user = wp_get_current_user(); $user_id = $user ? $user->ID : 0; $post_type = get_post_type_object( $args['post_type'] ); if ( ! $user_id || ! $post_type || $args['count'] <= 0 ) { return []; } $last_changed = wp_cache_get_last_changed( 'posts' ); $key = __FUNCTION__ . ":$search_term:$last_changed"; $cache_posts = wp_cache_get( $key, '', false, $found ); if ( $found ) { return $cache_posts; } $post_title_where = $search_term ? $wpdb->prepare( 'post_title LIKE %s AND', '%' . $wpdb->esc_like( $search_term ) . '%' ) : ''; $post_statuses = array_intersect( array_keys( get_post_statuses() ), $args['post_status'] ); $post_statuses = self::wpdb_prepare_in( $post_statuses ); $policy_id = (int) get_option( 'wp_page_for_privacy_policy' ); $can_delete_published_posts = (int) $user->has_cap( $post_type->cap->delete_published_posts ); $can_delete_posts = (int) $user->has_cap( $post_type->cap->delete_posts ); $can_delete_others_posts = (int) $user->has_cap( $post_type->cap->delete_others_posts ); $can_delete_private_posts = (int) $user->has_cap( $post_type->cap->delete_private_posts ); $can_edit_policy = (int) $user->has_cap( map_meta_cap( 'manage_privacy_options', $user_id )[0] ); // For the case when user is post author. $capability_author_where = "post_author = $user_id AND ( ( post_status IN ( 'publish', 'future' ) AND $can_delete_published_posts ) OR ( ( post_status NOT IN ( 'publish', 'future', 'trash' ) ) AND $can_delete_posts ) )"; // For the case when accessing someone other's post. $capability_other_where = "post_author != $user_id AND $can_delete_others_posts AND ( ( post_status IN ( 'publish', 'future' ) AND $can_delete_published_posts ) OR ( ( post_status IN ( 'private' ) ) AND $can_delete_private_posts ) )"; // For privacy policy page. $capability_policy_where = "ID = $policy_id AND $can_edit_policy"; $capability_where = '( ' . '(' . $capability_author_where . ') OR ' . '(' . $capability_other_where . ') OR ' . '(' . $capability_policy_where . ')' . ' )'; // phpcs:disable WordPress.DB.PreparedSQL.InterpolatedNotPrepared $posts = $wpdb->get_results( $wpdb->prepare( "SELECT ID, post_title, post_author FROM $wpdb->posts WHERE $post_title_where post_type = '{$args['post_type']}' AND post_status IN ( $post_statuses ) AND $capability_where ORDER BY post_title LIMIT %d", absint( $args['count'] ) ) ); // phpcs:enable WordPress.DB.PreparedSQL.InterpolatedNotPrepared $posts = $posts ? $posts : []; $posts = array_map( static function ( $post ) { $post->post_title = self::get_post_title( $post ); unset( $post->post_author ); return $post; }, $posts ); wp_cache_set( $key, $posts ); return $posts; } /** * Changes array of items into string of items, separated by comma and sql-escaped. * * @see https://coderwall.com/p/zepnaw * * @since 1.8.0 * * @param mixed|array $items Item(s) to be joined into string. * @param string $format Can be %s or %d. * * @return string Items separated by comma and sql-escaped. */ private static function wpdb_prepare_in( $items, $format = '%s' ) { global $wpdb; $items = (array) $items; $how_many = count( $items ); if ( $how_many === 0 ) { return ''; } $placeholders = array_fill( 0, $how_many, $format ); $prepared_format = implode( ',', $placeholders ); // phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared return $wpdb->prepare( $prepared_format, $items ); } /** * Get sanitized post title or "no title" placeholder. * * The placeholder is prepended with post ID. * * @since 1.8.0 * * @param WP_Post|object $post Post object. * * @return string Post title. */ private static function get_post_title( $post ) { /* translators: %d - a post ID. */ return self::is_empty_string( trim( $post->post_title ) ) ? sprintf( __( '#%d (no title)', 'searchwp-live-ajax-search' ), absint( $post->ID ) ) : $post->post_title; } /** * Check if a string is empty. * * @since 1.8.0 * * @param string $content String to test. * * @return bool */ private static function is_empty_string( $content ) { return is_string( $content ) && $content === ''; } /** * Get pages data for the "Existing Page" select inside the Embed modal. * * @since 1.8.0 */ private static function get_embed_pages_data() { $page_statuses = [ 'publish', 'pending' ]; $max_page_count = 20; $embed_pages = self::search_posts( '', [ 'count' => $max_page_count, 'post_status' => $page_statuses, ] ); if ( empty( $embed_pages ) ) { return [ 'pages' => [], 'use_ajax' => false, ]; } $total_pages = 0; $wp_count_pages = (array) wp_count_posts( 'page' ); foreach ( $wp_count_pages as $page_status => $pages_count ) { if ( in_array( $page_status, [ 'publish', 'pending' ], true ) ) { $total_pages += $pages_count; } } return [ 'pages' => $embed_pages, 'use_ajax' => $total_pages > $max_page_count, ]; } /** * Set default title for the new page. * * @since 1.8.0 * * @param string $post_title Default post title. * * @return string New default post title. */ public static function embed_page_title( $post_title ) { $meta = get_user_meta( get_current_user_id(), 'searchwp_admin_form_embed_wizard', true ); delete_user_meta( get_current_user_id(), 'searchwp_admin_form_embed_wizard' ); return empty( $meta['embed_page_title'] ) ? $post_title : $meta['embed_page_title']; } /** * Embed the form to the new page. * * @since 1.8.0 * * @param string $post_content Default post content. * * @return string Embedding string (shortcode or GB component code). */ public static function embed_page_content( $post_content ) { $meta = get_user_meta( get_current_user_id(), 'searchwp_admin_form_embed_wizard', true ); $form_id = ! empty( $meta['form_id'] ) ? $meta['form_id'] : 0; $page_id = ! empty( $meta['embed_page'] ) ? $meta['embed_page'] : 0; if ( ! empty( $page_id ) || empty( $form_id ) ) { return $post_content; } if ( self::is_gutenberg_active() ) { $pattern = ''; } else { $pattern = '[searchwp_form id="%d"]'; } return sprintf( $pattern, absint( $form_id ) ); } /** * Check if Gutenberg is active. * * @since 1.8.0 * * @return bool True if Gutenberg is active. */ private static function is_gutenberg_active() { $gutenberg = false; $block_editor = false; if ( has_filter( 'replace_editor', 'gutenberg_init' ) ) { // Gutenberg is installed and activated. $gutenberg = true; } if ( version_compare( $GLOBALS['wp_version'], '5.0-beta', '>' ) ) { // Block editor. $block_editor = true; } if ( ! $gutenberg && ! $block_editor ) { return false; } include_once ABSPATH . 'wp-admin/includes/plugin.php'; if ( is_plugin_active( 'disable-gutenberg/disable-gutenberg.php' ) ) { return ! disable_gutenberg(); } if ( is_plugin_active( 'classic-editor/classic-editor.php' ) ) { return get_option( 'classic-editor-replace' ) === 'block'; } return true; } }