← All changes | includes/REST/Feedback.php +71 -236 4.5.6 → 3.5.3 View file →

		@@ -1,247 +1,82 @@
1	1	<?php
2		-// phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching -- live reaction analytics writes; cache would defeat the purpose.
	2	+
3	3	namespace WPDeveloper\BetterDocs\REST;
4		-
5		-if ( ! defined( 'ABSPATH' ) ) {
6		- exit;
7		-}
8		-
9	4	use WP_REST_Request;
10	5	use WPDeveloper\BetterDocs\Core\BaseAPI;
11	6
12	7	class Feedback extends BaseAPI {
13		- /**
14		- * @return mixed
15		- */
16		- public function register() {
17		- $this->post(
18		- '/feedback/(?P<id>\d+)',
19		- [ $this, 'save' ],
20		- [
21		- 'id' => [
22		- 'type' => 'integer',
23		- 'validate_callback' => function ( $param, $request, $key ) {
24		- return ! empty( $param ) && is_numeric( $param ) && get_post( $param ) !== null;
25		- },
26		- 'required' => false,
27		- 'default' => null
28		- ],
29		- 'feelings' => [
30		- 'type' => 'string',
31		- 'validate_callback' => function ( $param, $request, $key ) {
32		- $allowed_feelings = [ 'happy', 'sad', 'normal' ];
33		- return in_array( $param, $allowed_feelings );
34		- },
35		- 'required' => true
36		- ]
37		- ]
38		- );
	8	+ /**
	9	+ * @return mixed
	10	+ */
	11	+ public function register() {
	12	+ $this->post( '/feedback/(?P<id>\d+)', [$this, 'save'], [
	13	+ 'id' => [
	14	+ 'type' => 'integer',
	15	+ 'validate_callback' => function ( $param, $request, $key ) {
	16	+ return ! empty( $param ) && is_numeric( $param ) && get_post( $param ) !== null;
	17	+ },
	18	+ 'required' => false,
	19	+ 'default' => null
	20	+ ],
	21	+ 'feelings' => [
	22	+ 'type' => 'string',
	23	+ 'validate_callback' => function ( $param, $request, $key ) {
	24	+ $allowed_feelings = [ 'happy', 'sad', 'normal' ];
	25	+ return in_array( $param, $allowed_feelings );
	26	+ },
	27	+ 'required' => true
	28	+ ]
	29	+ ] );
	30	+ }
39	31
40		- $this->register_field(
41		- 'docs',
42		- 'word_count',
43		- [
44		- 'get_callback' => [ $this, 'get_word_count' ]
45		- ]
46		- );
	32	+ public function save( WP_REST_Request $request ) {
	33	+ global $wpdb;
	34	+ $docs_id = isset( $request['id'] ) ? esc_sql( intval( $request['id'] ) ) : null;
	35	+ $feelings = isset( $request['feelings'] ) ? esc_sql( $request['feelings'] ) : 'happy';
	36	+ if ( $docs_id !== null && get_post( $docs_id ) && get_option( 'betterdocs_db_version' ) == true ) {
	37	+ $post_id = $wpdb->get_results(
	38	+ $wpdb->prepare(
	39	+ "SELECT *
	40	+ FROM {$wpdb->prefix}betterdocs_analytics
	41	+ WHERE created_at = %s AND post_id = %d",
	42	+ date( 'Y-m-d' ),
	43	+ $docs_id
	44	+ )
	45	+ );
47	46
48		- $this->register_field(
49		- 'docs',
50		- 'total_views',
51		- [
52		- 'get_callback' => [ $this, 'get_total_views' ]
53		- ]
54		- );
	47	+ if ( ! empty( $post_id ) ) {
	48	+ $feelings_increment = $post_id[0]->{$feelings}+1;
55	49
56		- $this->register_field(
57		- 'docs',
58		- 'reactions',
59		- [
60		- 'get_callback' => [ $this, 'get_reaction_count' ]
61		- ]
62		- );
	50	+ $insert = $wpdb->query(
	51	+ $wpdb->prepare(
	52	+ "UPDATE {$wpdb->prefix}betterdocs_analytics
	53	+ SET " . $feelings . " = " . $feelings_increment . "
	54	+ WHERE created_at = %s AND post_id = %d",
	55	+ [
	56	+ date( 'Y-m-d' ),
	57	+ $docs_id
	58	+ ]
	59	+ )
	60	+ );
	61	+ } else {
	62	+ $insert = $wpdb->query(
	63	+ $wpdb->prepare(
	64	+ "INSERT INTO {$wpdb->prefix}betterdocs_analytics
	65	+ ( post_id, " . $request['feelings'] . ", created_at )
	66	+ VALUES ( %d, %d, %s )",
	67	+ [
	68	+ $docs_id,
	69	+ 1,
	70	+ date( 'Y-m-d' )
	71	+ ]
	72	+ )
	73	+ );
	74	+ }
63	75
64		- $this->register_field(
65		- 'docs',
66		- 'author_info',
67		- [
68		- 'get_callback' => [ $this, 'get_author_info' ]
69		- ]
70		- );
71		-
72		- $this->register_field(
73		- 'docs',
74		- 'doc_category_info',
75		- [
76		- 'get_callback' => [ $this, 'get_doc_category_info' ]
77		- ]
78		- );
79		-
80		- $this->register_field(
81		- 'docs',
82		- 'doc_tag_info',
83		- [
84		- 'get_callback' => [ $this, 'get_doc_tag_info' ]
85		- ]
86		- );
87		-
88		- // $this->register_field( 'docs', 'author_list', [
89		- // 'get_callback' => [$this, 'get_author_list']
90		- // ] );
91		- }
92		-
93		- public function get_author_list( $object, $field_name, $request ) {
94		- $args = [
95		- 'fields' => [
96		- 'ID',
97		- 'user_login',
98		- 'display_name'
99		- ]
100		- ];
101		- $users = get_users( $args );
102		- return $users;
103		- }
104		-
105		- public function analytics_by_post_id( $post_id ) {
106		- global $wpdb;
107		-
108		- return $wpdb->get_results(
109		- $wpdb->prepare(
110		- "SELECT
111		- sum(impressions) as totalViews,
112		- sum(unique_visit) as totalUniqueViews,
113		- sum(happy + sad + normal) as totalReactions,
114		- sum(happy) as totalHappy,
115		- sum(normal) as totalNormal,
116		- sum(sad) as totalSad
117		- FROM {$wpdb->prefix}betterdocs_analytics
118		- WHERE post_id = %d",
119		- (int) $post_id
120		- )
121		- );
122		- }
123		-
124		- public function get_word_count( $object, $field_name, $request ) {
125		- return str_word_count( trim( wp_strip_all_tags( get_post_field( 'post_content', $object['id'] ) ) ) );
126		- }
127		-
128		- public function get_total_views( $object, $field_name, $request ) {
129		- $analytics = $this->analytics_by_post_id( $object['id'] );
130		-
131		- if ( ! empty( $analytics ) ) {
132		- return isset( $analytics[0]->totalViews ) ? $analytics[0]->totalViews : 0;
133		- } else {
134		- return 0;
135		- }
136		- }
137		-
138		- public function get_reaction_count( $object, $field_name, $request ) {
139		- $analytics = $this->analytics_by_post_id( $object['id'] );
140		-
141		- if ( ! empty( $analytics ) ) {
142		- return [
143		- 'happy' => isset( $analytics[0]->totalHappy ) ? $analytics[0]->totalHappy : 0,
144		- 'normal' => isset( $analytics[0]->totalNormal ) ? $analytics[0]->totalNormal : 0,
145		- 'sad' => isset( $analytics[0]->totalSad ) ? $analytics[0]->totalSad : 0
146		- ];
147		- } else {
148		- return [
149		- 'happy' => 0,
150		- 'normal' => 0,
151		- 'sad' => 0
152		- ];
153		- }
154		- }
155		-
156		- public function save( WP_REST_Request $request ) {
157		- global $wpdb;
158		- $docs_id = isset( $request['id'] ) ? (int) $request['id'] : null;
159		- $valid_feelings = [ 'happy', 'normal', 'sad' ];
160		- $requested_feeling = isset( $request['feelings'] ) ? (string) $request['feelings'] : 'happy';
161		- $feelings = in_array( $requested_feeling, $valid_feelings, true ) ? $requested_feeling : 'happy';
162		- $analytics_table = $wpdb->prefix . 'betterdocs_analytics';
163		- if ( $docs_id !== null && get_post( $docs_id ) && get_option( 'betterdocs_db_version' ) == true ) {
164		- // phpcs:disable WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $analytics_table = $wpdb->prefix + literal; per-request reaction lookup, no cache layer applies.
165		- $post_id = $wpdb->get_results(
166		- $wpdb->prepare(
167		- "SELECT * FROM {$analytics_table} WHERE created_at = %s AND post_id = %d",
168		- gmdate( 'Y-m-d' ),
169		- $docs_id
170		- )
171		- );
172		- // phpcs:enable WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,WordPress.DB.PreparedSQL.InterpolatedNotPrepared,PluginCheck.Security.DirectDB.UnescapedDBParameter
173		-
174		- if ( ! empty( $post_id ) ) {
175		- $feelings_increment = (int) $post_id[0]->{$feelings} + 1;
176		- // $feelings is validated above against $valid_feelings allowlist — safe to interpolate as column identifier.
177		- // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $analytics_table = $wpdb->prefix + literal; per-request reaction counter, no cache layer applies.
178		- $insert = $wpdb->query(
179		- $wpdb->prepare(
180		- "UPDATE {$analytics_table} SET {$feelings} = %d WHERE created_at = %s AND post_id = %d", // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared
181		- $feelings_increment,
182		- gmdate( 'Y-m-d' ),
183		- $docs_id
184		- )
185		- );
186		- } else {
187		- // $feelings is validated above against $valid_feelings allowlist — safe to interpolate as column identifier.
188		- // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery,WordPress.DB.DirectDatabaseQuery.NoCaching,PluginCheck.Security.DirectDB.UnescapedDBParameter -- $analytics_table = $wpdb->prefix + literal; per-request reaction counter, no cache layer applies.
189		- $insert = $wpdb->query(
190		- $wpdb->prepare(
191		- "INSERT INTO {$analytics_table} ( post_id, {$feelings}, created_at ) VALUES ( %d, %d, %s )", // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared
192		- $docs_id,
193		- 1,
194		- gmdate( 'Y-m-d' )
195		- )
196		- );
197		- }
198		-
199		- if ( $insert == true ) {
200		- return true;
201		- }
202		- }
203		- return false;
204		- }
205		-
206		- public function get_author_info( $object, $field_name, $request ) {
207		- $author_id = isset( $object['author'] ) ? $object['author'] : '';
208		- if ( ! empty( $author_id ) ) {
209		- return [
210		- 'name' => get_the_author_meta( 'display_name', $author_id ),
211		- 'author_nicename' => get_the_author_meta( 'nicename', $author_id ),
212		- 'author_url' => get_author_posts_url( $author_id )
213		- ];
214		- }
215		- return [];
216		- }
217		-
218		- public function get_doc_category_info( $object, $field_name, $request ) {
219		- $category_term_names = [];
220		- $doc_categories = ! empty( $object['doc_category'] ) ? $object['doc_category'] : [];
221		- foreach ( $doc_categories as $doc_category_id ) {
222		- array_push(
223		- $category_term_names,
224		- [
225		- 'term_name' => get_term( $doc_category_id )->name,
226		- 'term_url' => get_term_link( $doc_category_id )
227		- ]
228		- );
229		- }
230		- return $category_term_names;
231		- }
232		-
233		- public function get_doc_tag_info( $object, $field_name, $request ) {
234		- $doc_tag_term_names = [];
235		- $doc_tags = ! empty( $object['doc_tag'] ) ? $object['doc_tag'] : [];
236		- foreach ( $doc_tags as $tag_id ) {
237		- array_push(
238		- $doc_tag_term_names,
239		- [
240		- 'term_name' => get_term( $tag_id )->name,
241		- 'term_url' => get_term_link( $tag_id )
242		- ]
243		- );
244		- }
245		- return $doc_tag_term_names;
246		- }
	76	+ if ( $insert == true ) {
	77	+ return true;
	78	+ }
	79	+ }
	80	+ return false;
	81	+ }
247	82	}