class-email-address-obfuscator.php — Admin and Site Enhancements (ASE) 8.2.2

admin-site-enhancements / classes / class-email-address-obfuscator.php

admin-site-enhancements / classes Last commit date

class-email-address-obfuscator.php

91 lines

1	<?php
2
3	namespace ASENHA\Classes;
4
5	/**
6	* Class for Email Address Obfuscator module
7	*
8	* @since 6.9.5
9	*/
10	class Email_Address_Obfuscator {
11	/**
12	* Cached associative array of allowed upload extensions (lowercase), e.g. [ 'jpg' => true ].
13	*
14	* Derived from WordPress core `get_allowed_mime_types()`, which respects `upload_mimes` filters.
15	*
16	* @since 7.??.? (ASE)
17	* @var array\|null
18	*/
19	private static $allowed_upload_extensions = null;
20
21	/**
22	* Obfuscate email address on the frontend using antispambot() native WP function
23	*
24	* @link: https://gist.github.com/eclarrrk/349360b52e8822b69cb6fc499722520f
25	* @since 5.5.0
26	*/
27	public function obfuscate_string( $atts ) {
28	$atts = shortcode_atts( array(
29	'email' => '',
30	'subject' => '',
31	'text' => '',
32	'display' => 'newline',
33	'link' => 'no',
34	'class' => '',
35	), $atts );
36	$email = $atts['email'];
37	if ( !is_email( $email ) ) {
38	return;
39	}
40	// Reverse email address characters if not in Firefox, which has bug related to unicode-bidi CSS property
41	$http_user_agent = ( isset( $_SERVER['HTTP_USER_AGENT'] ) ? sanitize_text_field( $_SERVER['HTTP_USER_AGENT'] ) : 'generic' );
42	if ( false !== stripos( $http_user_agent, 'firefox' ) \|\| false !== stripos( $http_user_agent, 'iphone' ) ) {
43	// Do nothing. Do not reverse characters.
44	$email_reversed = $email;
45	$email_rev_parts = explode( '@', $email_reversed );
46	$email_rev_parts = array($email_rev_parts[0], $email_rev_parts[1]);
47	$css_bidi_styles = '';
48	$direction_styles = 'direction:rtl;';
49	} else {
50	$email_reversed = strrev( $email );
51	$email_rev_parts = explode( '@', $email_reversed );
52	$css_bidi_styles = 'unicode-bidi:bidi-override;';
53	$direction_styles = 'direction:rtl;';
54	}
55	if ( !empty( $atts['text'] ) ) {
56	$text = esc_html( $atts['text'] );
57	$css_bidi_styles = '';
58	$direction_styles = '';
59	} else {
60	$random_number = dechex( rand( 1000000, 9999999 ) );
61	$text = esc_html( $email_rev_parts[0] ) . '<span style="display:none;">obfsctd-' . esc_html( $random_number ) . '</span>@' . esc_html( $email_rev_parts[1] );
62	}
63	$display = $atts['display'];
64	if ( 'newline' == $display ) {
65	$display_css = 'display:flex;justify-content:flex-end;';
66	} elseif ( 'inline' == $display ) {
67	$display_css = 'display:inline;';
68	}
69	$subject = $atts['subject'];
70	if ( !empty( $subject ) ) {
71	$subject = '?subject=' . $subject;
72	}
73	$link = $atts['link'];
74	$class = $atts['class'];
75	return '<span style="' . esc_attr( $display_css ) . esc_attr( $css_bidi_styles ) . esc_attr( $direction_styles ) . '" class="' . esc_attr( $class ) . '">' . $text . '</span>';
76	}
77
78	/**
79	* Add additional attributes to the list of safe CSS attributes
80	* This prevents those attributes from being stripped out when displaying the obfuscated email address
81	*
82	* @since 7.3.1
83	*/
84	public function add_additional_attributes_to_safe_css( $css_attributes ) {
85	$css_attributes[] = 'display';
86	$css_attributes[] = 'unicode-bidi';
87	return $css_attributes;
88	}
89
90	}
91