asda2432es

✏️ Editing: metabox-options.class.php

<?php if ( ! defined( 'ABSPATH' ) ) { die; } // Cannot access directly.
/**
 *
 * Metabox Class
 *
 * @since 1.0.0
 * @version 1.0.0
 *
 */
if ( ! class_exists( 'CSF_Metabox' ) ) {
  class CSF_Metabox extends CSF_Abstract{

// constans
    public $unique         = '';
    public $abstract       = 'metabox';
    public $pre_fields     = array();
    public $sections       = array();
    public $post_type      = array();
    public $args           = array(
      'title'              => '',
      'post_type'          => 'post',
      'data_type'          => 'serialize',
      'context'            => 'advanced',
      'priority'           => 'default',
      'exclude_post_types' => array(),
      'page_templates'     => '',
      'post_formats'       => '',
      'show_reset'         => false,
      'show_restore'       => false,
      'enqueue_webfont'    => true,
      'async_webfont'      => false,
      'output_css'         => true,
      'nav'                => 'normal',
      'theme'              => 'dark',
      'class'              => '',
      'defaults'           => array(),
    );

// run metabox construct
    public function __construct( $key, $params = array() ) {

$this->unique         = $key;
      $this->args           = apply_filters( "csf_{$this->unique}_args", wp_parse_args( $params['args'], $this->args ), $this );
      $this->sections       = apply_filters( "csf_{$this->unique}_sections", $params['sections'], $this );
      $this->post_type      = ( is_array( $this->args['post_type'] ) ) ? $this->args['post_type'] : array_filter( (array) $this->args['post_type'] );
      $this->post_formats   = ( is_array( $this->args['post_formats'] ) ) ? $this->args['post_formats'] : array_filter( (array) $this->args['post_formats'] );
      $this->page_templates = ( is_array( $this->args['page_templates'] ) ) ? $this->args['page_templates'] : array_filter( (array) $this->args['page_templates'] );
      $this->pre_fields     = $this->pre_fields( $this->sections );

$meta_add = 'add' . '_meta_boxes';
      add_action( $meta_add, array( &$this, 'add_meta_f_box' ) );
      add_action( 'save_post', array( &$this, 'save_meta_box' ) );
      add_action( 'edit_attachment', array( &$this, 'save_meta_box' ) );

if ( ! empty( $this->page_templates ) || ! empty( $this->post_formats ) || ! empty( $this->args['class'] ) ) {
        foreach ( $this->post_type as $post_type ) {
          add_filter( 'postbox_classes_'. $post_type .'_'. $this->unique, array( &$this, 'add_metabox_classes' ) );
        }
      }

// wp enqeueu for typography and output css
      parent::__construct();

}

// instance
    public static function instance( $key, $params = array() ) {
      return new self( $key, $params );
    }

public function pre_fields( $sections ) {

$result  = array();

foreach ( $sections as $key => $section ) {
        if ( ! empty( $section['fields'] ) ) {
          foreach ( $section['fields'] as $field ) {
            $result[] = $field;
          }
        }
      }

return $result;

}

public function add_metabox_classes( $classes ) {

global $post;

if ( ! empty( $this->post_formats ) ) {

$saved_post_format = ( is_object( $post ) ) ? get_post_format( $post ) : false;
        $saved_post_format = ( ! empty( $saved_post_format ) ) ? $saved_post_format : 'default';

$classes[] = 'csf-post-formats';

// Sanitize post format for standard to default
        if ( ( $key = array_search( 'standard', $this->post_formats ) ) !== false ) {
          $this->post_formats[$key] = 'default';
        }

foreach ( $this->post_formats as $format ) {
          $classes[] = 'csf-post-format-'. $format;
        }

if ( ! in_array( $saved_post_format, $this->post_formats ) ) {
          $classes[] = 'csf-metabox-hide';
        } else {
          $classes[] = 'csf-metabox-show';
        }

}

if ( ! empty( $this->page_templates ) ) {

$saved_template = ( is_object( $post ) && ! empty( $post->page_template ) ) ? $post->page_template : 'default';

$classes[] = 'csf-page-templates';

foreach ( $this->page_templates as $template ) {
          $classes[] = 'csf-page-'. preg_replace( '/[^a-zA-Z0-9]+/', '-', strtolower( $template ) );
        }

if ( ! in_array( $saved_template, $this->page_templates ) ) {
          $classes[] = 'csf-metabox-hide';
        } else {
          $classes[] = 'csf-metabox-show';
        }

}

if ( ! empty( $this->args['class'] ) ) {
        $classes[] = $this->args['class'];
      }

return $classes;

}

// add metabox
    public function add_meta_f_box( $post_type ) {

if ( ! in_array( $post_type, $this->args['exclude_post_types'] ) ) {
        $add = 'add' . '_meta_box';
        $add( $this->unique, $this->args['title'], array( &$this, 'add_meta_f_box_content' ), $this->post_type, $this->args['context'], $this->args['priority'], $this->args );
      }

}

// get default value
    public function get_default( $field ) {

$default = ( isset( $field['default'] ) ) ? $field['default'] : '';
      $default = ( isset( $this->args['defaults'][$field['id']] ) ) ? $this->args['defaults'][$field['id']] : $default;

return $default;

}

// get meta value
    public function get_meta_value( $field ) {

global $post;

$value = null;

if ( is_object( $post ) && ! empty( $field['id'] ) ) {

if ( $this->args['data_type'] !== 'serialize' ) {
          $meta  = get_post_meta( $post->ID, $field['id'] );
          $value = ( isset( $meta[0] ) ) ? $meta[0] : null;
        } else {
          $meta  = get_post_meta( $post->ID, $this->unique, true );
          $value = ( isset( $meta[$field['id']] ) ) ? $meta[$field['id']] : null;
        }

}

$default = ( isset( $field['id'] ) ) ? $this->get_default( $field ) : '';
      $value   = ( isset( $value ) ) ? $value : $default;

return $value;

}

// add metabox content
    public function add_meta_f_box_content( $post, $callback ) {

global $post;

$has_nav   = ( count( $this->sections ) > 1 && $this->args['context'] !== 'side' ) ? true : false;
      $show_all  = ( ! $has_nav ) ? ' csf-show-all' : '';
      $post_type = ( is_object ( $post ) ) ? $post->post_type : '';
      $errors    = ( is_object ( $post ) ) ? get_post_meta( $post->ID, '_csf_errors_'. $this->unique, true ) : array();
      $errors    = ( ! empty( $errors ) ) ? $errors : array();
      $theme     = ( $this->args['theme'] ) ? ' csf-theme-'. $this->args['theme'] : '';
      $nav_type  = ( $this->args['nav'] === 'inline' ) ? 'inline' : 'normal';

if ( is_object ( $post ) && ! empty( $errors ) ) {
        delete_post_meta( $post->ID, '_csf_errors_'. $this->unique );
      }

wp_nonce_field( 'csf_metabox_nonce', 'csf_metabox_nonce'. $this->unique );

echo '<div class="csf csf-metabox'. esc_attr( $theme ) .'">';

echo '<div class="csf-wrapper'. esc_attr( $show_all ) .'">';

if ( $has_nav ) {

echo '<div class="csf-nav csf-nav-'. esc_attr( $nav_type ) .' csf-nav-metabox">';

echo '<ul>';

$tab_key = 0;

foreach ( $this->sections as $section ) {

if ( ! empty( $section['post_type'] ) && ! in_array( $post_type, array_filter( (array) $section['post_type'] ) ) ) {
                  continue;
                }

$tab_error = ( ! empty( $errors['sections'][$tab_key] ) ) ? '<i class="csf-label-error csf-error">!</i>' : '';
                $tab_icon  = ( ! empty( $section['icon'] ) ) ? '<i class="csf-tab-icon '. esc_attr( $section['icon'] ) .'"></i>' : '';

echo '<li><a href="#">'. $tab_icon . $section['title'] . $tab_error .'</a></li>';

$tab_key++;

}

echo '</ul>';

echo '</div>';

}

echo '<div class="csf-content">';

echo '<div class="csf-sections">';

$section_key = 0;

foreach ( $this->sections as $section ) {

if ( ! empty( $section['post_type'] ) && ! in_array( $post_type, array_filter( (array) $section['post_type'] ) ) ) {
                continue;
              }

$section_onload = ( ! $has_nav ) ? ' csf-onload' : '';
              $section_class  = ( ! empty( $section['class'] ) ) ? ' '. $section['class'] : '';
              $section_title  = ( ! empty( $section['title'] ) ) ? $section['title'] : '';
              $section_icon   = ( ! empty( $section['icon'] ) ) ? '<i class="csf-section-icon '. esc_attr( $section['icon'] ) .'"></i>' : '';

echo '<div class="csf-section hidden'. esc_attr( $section_onload . $section_class ) .'">';

$section_st = ( $section_title || $section_icon ) ? '<div class="csf-section-title"><h3>'. $section_icon . $section_title .'</h3></div>' : '';
              if($section_st != ''){
                echo wp_kses($section_st, array(
                  'div' => array(
                    'class' => true
                  ),
                  'i' => array(
                    'class' => true
                  ),
                  'h3' => array()
                ));
              }

if ( ! empty( $section['fields'] ) ) {

foreach ( $section['fields'] as $field ) {

if ( ! empty( $field['id'] ) && ! empty( $errors['fields'][$field['id']] ) ) {
                    $field['_error'] = $errors['fields'][$field['id']];
                  }

if ( ! empty( $field['id'] ) ) {
                    $field['default'] = $this->get_default( $field );
                  }

CSF::field( $field, $this->get_meta_value( $field ), $this->unique, 'metabox' );

}

} else {

echo '<div class="csf-no-option">'. esc_html__( 'No data available.', 'polo' ) .'</div>';

}

echo '</div>';

$section_key++;

}

echo '</div>';

if ( ! empty( $this->args['show_restore'] ) || ! empty( $this->args['show_reset'] ) ) {

echo '<div class="csf-sections-reset">';
              echo '<label>';
              echo '<input type="checkbox" name="'. esc_attr( $this->unique ) .'[_reset]" />';
              echo '<span class="button csf-button-reset">'. esc_html__( 'Reset', 'polo' ) .'</span>';
              echo '<span class="button csf-button-cancel">'. sprintf( '<small>( %s )</small> %s', esc_html__( 'update post', 'polo' ), esc_html__( 'Cancel', 'polo' ) ) .'</span>';
              echo '</label>';
              echo '</div>';

}

echo '</div>';

$background_html = ( $has_nav && $nav_type === 'normal' ) ? '<div class="csf-nav-background"></div>' : '';
          if($background_html != ''){
            echo wp_kses($background_html, array(
              'div' => array(
                'class' => true
              ),
            ));
          }

echo '<div class="clear"></div>';

echo '</div>';

}

// save metabox
    public function save_meta_box( $post_id ) {

$count    = 1;
      $data     = array();
      $errors   = array();
      $noncekey = 'csf_metabox_nonce'. $this->unique;
      $nonce    = ( ! empty( $_POST[ $noncekey ] ) ) ? sanitize_text_field( wp_unslash( $_POST[ $noncekey ] ) ) : '';

if ( ( defined( 'DOING_AUTOSAVE' ) && DOING_AUTOSAVE ) || ! wp_verify_nonce( $nonce, 'csf_metabox_nonce' ) ) {
        return $post_id;
      }

// XSS ok.
      // No worries, This "POST" requests is sanitizing in the below foreach.
      $request = ( ! empty( $_POST[ $this->unique ] ) ) ? $_POST[ $this->unique ] : array();

if ( ! empty( $request ) ) {

foreach ( $this->sections as $section ) {

if ( ! empty( $section['fields'] ) ) {

foreach ( $section['fields'] as $field ) {

if ( ! empty( $field['id'] ) ) {

$field_id    = $field['id'];
                $field_value = isset( $request[$field_id] ) ? $request[$field_id] : '';

// Sanitize "post" request of field.
                if ( ! isset( $field['sanitize'] ) ) {

if( is_array( $field_value ) ) {
                    $data[$field_id] = wp_kses_post_deep( $field_value );
                  } else {
                    $data[$field_id] = wp_kses_post( $field_value );
                  }

} else if( isset( $field['sanitize'] ) && is_callable( $field['sanitize'] ) ) {

$data[$field_id] = call_user_func( $field['sanitize'], $field_value );

} else {

$data[$field_id] = $field_value;

}

// Validate "post" request of field.
                if ( isset( $field['validate'] ) && is_callable( $field['validate'] ) ) {

$has_validated = call_user_func( $field['validate'], $field_value );

if ( ! empty( $has_validated ) ) {

$errors['sections'][$count] = true;
                    $errors['fields'][$field_id] = $has_validated;
                    $data[$field_id] = $this->get_meta_value( $field );

}

$count++;

}

$data = apply_filters( "csf_{$this->unique}_save", $data, $post_id, $this );

do_action( "csf_{$this->unique}_save_before", $data, $post_id, $this );

if ( empty( $data ) || ! empty( $request['_reset'] ) ) {

if ( $this->args['data_type'] !== 'serialize' ) {
          foreach ( $data as $key => $value ) {
            delete_post_meta( $post_id, $key );
          }
        } else {
          delete_post_meta( $post_id, $this->unique );
        }

} else {

if ( $this->args['data_type'] !== 'serialize' ) {
          foreach ( $data as $key => $value ) {
            update_post_meta( $post_id, $key, $value );
          }
        } else {
          update_post_meta( $post_id, $this->unique, $data );
        }

if ( ! empty( $errors ) ) {
          update_post_meta( $post_id, '_csf_errors_'. $this->unique, $errors );
        }

}

do_action( "csf_{$this->unique}_saved", $data, $post_id, $this );

do_action( "csf_{$this->unique}_save_after", $data, $post_id, $this );

}
  }
}

Ubuntu

Sid Gifari From Gifari Industries - BD Cyber Security Team