asda2432es

✏️ Editing: profile-options.class.php

<?php if ( ! defined( 'ABSPATH' ) ) { die; } // Cannot access directly.
/**
 *
 * Profile Option Class
 *
 * @since 1.0.0
 * @version 1.0.0
 *
 */
if ( ! class_exists( 'CSF_Profile_Options' ) ) {
  class CSF_Profile_Options extends CSF_Abstract{

// constans
    public $unique   = '';
    public $abstract = 'profile';
    public $sections = array();
    public $args     = array(
      'data_type'    => 'serialize',
      'class'        => '',
      'defaults'     => array(),
    );

// run profile construct
    public function __construct( $key, $params ) {

$this->unique   = $key;
      $this->args     = apply_filters( "csf_{$this->unique}_args", wp_parse_args( $params['args'], $this->args ), $this );
      $this->sections = apply_filters( "csf_{$this->unique}_sections", $params['sections'], $this );

add_action( 'admin_init', array( &$this, 'add_profile_options' ) );

}

// instance
    public static function instance( $key, $params ) {
      return new self( $key, $params );
    }

// add profile add/edit fields
    public function add_profile_options() {

add_action( 'show_user_profile', array( &$this, 'render_profile_form_fields' ) );
      add_action( 'edit_user_profile', array( &$this, 'render_profile_form_fields' ) );

add_action( 'personal_options_update', array( &$this, 'save_profile' ) );
      add_action( 'edit_user_profile_update', array( &$this, 'save_profile' ) );

}

// get default value
    public function get_default( $field ) {

$default = ( isset( $field['default'] ) ) ? $field['default'] : '';
      $default = ( isset( $this->args['defaults'][$field['id']] ) ) ? $this->args['defaults'][$field['id']] : $default;

return $default;

}

// get meta value
    public function get_meta_value( $user_id, $field ) {

$value = null;

if ( ! empty( $user_id ) && ! empty( $field['id'] ) ) {

if ( $this->args['data_type'] !== 'serialize' ) {
          $meta  = get_user_meta( $user_id, $field['id'] );
          $value = ( isset( $meta[0] ) ) ? $meta[0] : null;
        } else {
          $meta  = get_user_meta( $user_id, $this->unique, true );
          $value = ( isset( $meta[$field['id']] ) ) ? $meta[$field['id']] : null;
        }

}

$default = ( isset( $field['id'] ) ) ? $this->get_default( $field ) : '';
      $value   = ( isset( $value ) ) ? $value : $default;

return $value;

}

// render profile add/edit form fields
    public function render_profile_form_fields( $profileuser ) {

$is_profile = ( is_object( $profileuser ) && isset( $profileuser->ID ) ) ? true : false;
      $profile_id = ( $is_profile ) ? $profileuser->ID : 0;
      $errors     = ( ! empty( $profile_id ) ) ? get_user_meta( $profile_id, '_csf_errors_'. $this->unique, true ) : array();
      $errors     = ( ! empty( $errors ) ) ? $errors : array();
      $class      = ( $this->args['class'] ) ? ''. $this->args['class'] : '';

if ( ! empty( $errors ) ) {
        delete_user_meta( $profile_id, '_csf_errors_'. $this->unique );
      }

echo '<div class="csf csf-profile-options csf-onload'. esc_attr( $class ) .'">';

wp_nonce_field( 'csf_profile_nonce', 'csf_profile_nonce'. $this->unique );

foreach ( $this->sections as $section ) {

$section_icon  = ( ! empty( $section['icon'] ) ) ? '<i class="csf-section-icon '. esc_attr( $section['icon'] ) .'"></i>' : '';
        $section_title = ( ! empty( $section['title'] ) ) ? $section['title'] : '';

$section_st = ( $section_title || $section_icon ) ? '<h2>'. $section_icon . $section_title .'</h2>' : '';
        if($section_st != ''){
          echo wp_kses($section_st, array(
            'i' => array(
              'class' => true
            ),
            'h2' => array()
          ));
        }

if ( ! empty( $section['fields'] ) ) {

foreach ( $section['fields'] as $field ) {

if ( ! empty( $field['id'] ) && ! empty( $errors['fields'][$field['id']] ) ) {
              $field['_error'] = $errors['fields'][$field['id']];
            }

if ( ! empty( $field['id'] ) ) {
              $field['default'] = $this->get_default( $field );
            }

CSF::field( $field, $this->get_meta_value( $profile_id, $field ), $this->unique, 'profile' );

}

echo '</div>';

}

// save profile form fields
    public function save_profile( $user_id ) {

$count    = 1;
      $data     = array();
      $errors   = array();
      $noncekey = 'csf_profile_nonce'. $this->unique;
      $nonce    = ( ! empty( $_POST[ $noncekey ] ) ) ? sanitize_text_field( wp_unslash( $_POST[ $noncekey ] ) ) : '';

if ( ( defined( 'DOING_AUTOSAVE' ) && DOING_AUTOSAVE ) || ! wp_verify_nonce( $nonce, 'csf_profile_nonce' ) ) {
        return $user_id;
      }

// XSS ok.
      // No worries, This "POST" requests is sanitizing in the below foreach.
      $request = ( ! empty( $_POST[ $this->unique ] ) ) ? $_POST[ $this->unique ] : array();

if ( ! empty( $request ) ) {

foreach ( $this->sections as $section ) {

if ( ! empty( $section['fields'] ) ) {

foreach ( $section['fields'] as $field ) {

if ( ! empty( $field['id'] ) ) {

$field_id    = $field['id'];
                $field_value = isset( $request[$field_id] ) ? $request[$field_id] : '';

// Sanitize "post" request of field.
                if ( ! isset( $field['sanitize'] ) ) {

if( is_array( $field_value ) ) {
                    $data[$field_id] = wp_kses_post_deep( $field_value );
                  } else {
                    $data[$field_id] = wp_kses_post( $field_value );
                  }

} else if( isset( $field['sanitize'] ) && is_callable( $field['sanitize'] ) ) {

$data[$field_id] = call_user_func( $field['sanitize'], $field_value );

} else {

$data[$field_id] = $field_value;

}

// Validate "post" request of field.
                if ( isset( $field['validate'] ) && is_callable( $field['validate'] ) ) {

$has_validated = call_user_func( $field['validate'], $field_value );

if ( ! empty( $has_validated ) ) {

$errors['sections'][$count] = true;
                    $errors['fields'][$field_id] = $has_validated;
                    $data[$field_id] = $this->get_meta_value( $user_id, $field );

}

$count++;

}

$data = apply_filters( "csf_{$this->unique}_save", $data, $user_id, $this );

do_action( "csf_{$this->unique}_save_before", $data, $user_id, $this );

if ( empty( $data ) ) {

if ( $this->args['data_type'] !== 'serialize' ) {
          foreach ( $data as $key => $value ) {
            delete_user_meta( $user_id, $key );
          }
        } else {
          delete_user_meta( $user_id, $this->unique );
        }

} else {

if ( $this->args['data_type'] !== 'serialize' ) {
          foreach ( $data as $key => $value ) {
            update_user_meta( $user_id, $key, $value );
          }
        } else {
          update_user_meta( $user_id, $this->unique, $data );
        }

if ( ! empty( $errors ) ) {
          update_user_meta( $user_id, '_csf_errors_'. $this->unique, $errors );
        }

}

do_action( "csf_{$this->unique}_saved", $data, $user_id, $this );

do_action( "csf_{$this->unique}_save_after", $data, $user_id, $this );

}
  }
}

Ubuntu

Sid Gifari From Gifari Industries - BD Cyber Security Team