# booking/11.5/includes/save-load-option/option-save-policies.php

Booking Calendar, version 11.5. 413 lines.

- Page: https://pluginprobe.com/plugins/booking/11.5/code/includes/save-load-option/option-save-policies.php
- Raw: https://pluginprobe.com/plugins/booking/11.5/raw/includes/save-load-option/option-save-policies.php
- Modified: 2026-08-04T08:52:12+00:00

Line numbers below start at 1. Link to a line or a range by appending a fragment to the
page URL, for example `https://pluginprobe.com/plugins/booking/11.5/code/includes/save-load-option/option-save-policies.php#L10-L20`.

```php
<?php
/**
 * Option-specific save policies for the generic WPBC option saver.
 *
 * Keep feature-specific permissions and value normalization here so
 * save-load-option.php can stay focused on transport, nonce checks, and storage.
 *
 * @package Booking Calendar
 */

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * Shared helpers for global option save policies.
 */
class WPBC_Option_Save_Policy_Global_Options {

	/**
	 * Check if current user can save global options.
	 *
	 * In MultiUser regular users do not have access to global options.
	 *
	 * @return bool
	 */
	public static function can_save_global_options() {
		return ( ! function_exists( 'wpbc_is_mu_user_can_be_here' ) || wpbc_is_mu_user_can_be_here( 'only_super_admin' ) );
	}

	/**
	 * Normalize On/Off option values.
	 *
	 * @param mixed $value Raw value.
	 *
	 * @return string
	 */
	public static function normalize_on_off( $value ) {
		return ( 'On' === $value ) ? 'On' : 'Off';
	}

	/**
	 * Normalize a three- or six-digit hexadecimal color.
	 *
	 * @param mixed $value Raw value.
	 * @return string
	 */
	public static function normalize_hex_color( $value ) {

		$value = sanitize_text_field( (string) $value );

		return preg_match( '/^#(?:[0-9a-f]{3}|[0-9a-f]{6})$/i', $value ) ? $value : '#066aab';
	}

	/**
	 * Normalize the global Booking Form style identifier.
	 *
	 * @param mixed  $value     Raw value.
	 * @param string $data_name Submitted option name.
	 *
	 * @return string
	 */
	public static function normalize_form_style( $value, $data_name = '' ) {

		if ( function_exists( 'wpbc_bfb_settings__sanitize_form_style' ) ) {
			return wpbc_bfb_settings__sanitize_form_style( $value );
		}

		$value   = sanitize_key( (string) $value );
		$allowed = array( 'light_bordered', 'light_none', 'light_soft', 'dark_bordered', 'dark_none', 'dark_soft', 'custom' );

		return in_array( $value, $allowed, true ) ? $value : 'light_bordered';
	}

	/**
	 * Get option names belonging to the global Custom Booking Form style.
	 *
	 * @return array
	 */
	public static function get_custom_form_style_option_names() {

		if ( function_exists( 'wpbc_bfb_settings__get_default_custom_form_style_options' ) ) {
			return array_keys( wpbc_bfb_settings__get_default_custom_form_style_options() );
		}

		return array(
			'booking_form_custom_background_color',
			'booking_form_custom_border_color',
			'booking_form_custom_border_width',
			'booking_form_custom_border_radius',
			'booking_form_custom_padding_vertical',
			'booking_form_custom_padding_horizontal',
			'booking_form_custom_text_color',
			'booking_form_custom_field_background_color',
			'booking_form_custom_field_text_color',
			'booking_form_custom_field_border_color',
			'booking_form_custom_button_background_color',
			'booking_form_custom_button_text_color',
			'booking_form_custom_button_border_color',
			'booking_form_custom_button_hover_background_color',
			'booking_form_custom_button_hover_text_color',
			'booking_form_custom_button_hover_border_color',
			'booking_form_custom_secondary_button_background_color',
			'booking_form_custom_secondary_button_text_color',
			'booking_form_custom_secondary_button_border_color',
			'booking_form_custom_secondary_button_hover_background_color',
			'booking_form_custom_secondary_button_hover_text_color',
			'booking_form_custom_secondary_button_hover_border_color',
		);
	}

	/**
	 * Normalize one global Custom Booking Form style option.
	 *
	 * @param mixed  $value     Raw value.
	 * @param string $data_name Submitted option name.
	 *
	 * @return string
	 */
	public static function normalize_custom_form_style_option( $value, $data_name = '' ) {

		$data_name = sanitize_key( (string) $data_name );

		if (
			function_exists( 'wpbc_bfb_settings__get_custom_form_style_options' )
			&& in_array( $data_name, self::get_custom_form_style_option_names(), true )
		) {
			$sanitized = wpbc_bfb_settings__get_custom_form_style_options(
				array(
					$data_name => $value,
				)
			);

			if ( array_key_exists( $data_name, $sanitized ) ) {
				return $sanitized[ $data_name ];
			}
		}

		return sanitize_text_field( is_scalar( $value ) ? (string) $value : '' );
	}
}

/**
 * Calendar global option policies.
 */
class WPBC_Option_Save_Policy_Global_Calendar {

	/**
	 * Normalize and validate global calendar skin value before saving.
	 *
	 * @param mixed  $data_raw  Raw calendar skin value.
	 * @param string $data_name Option name.
	 *
	 * @return string
	 */
	public static function normalize_calendar_skin( $data_raw, $data_name = '' ) {

		$skin_value = is_scalar( $data_raw ) ? (string) $data_raw : '';
		$replace    = array();

		if ( defined( 'WPBC_PLUGIN_DIR' ) ) {
			$replace[] = WPBC_PLUGIN_DIR;
		}
		if ( defined( 'WPBC_PLUGIN_URL' ) ) {
			$replace[] = WPBC_PLUGIN_URL;
		}

		$upload_dir = wp_upload_dir();
		if ( ! empty( $upload_dir['basedir'] ) ) {
			$replace[] = $upload_dir['basedir'];
		}
		if ( ! empty( $upload_dir['baseurl'] ) ) {
			$replace[] = $upload_dir['baseurl'];
		}

		$skin_value = str_replace( $replace, '', $skin_value );
		$skin_value = sanitize_text_field( $skin_value );

		if (
			'' === $skin_value ||
			false !== strpos( $skin_value, '..' ) ||
			! preg_match( '/\.css$/i', $skin_value ) ||
			( 0 !== strpos( $skin_value, '/css/skins/' ) && 0 !== strpos( $skin_value, '/wpbc_skins/' ) )
		) {
			wp_send_json_error( array( 'message' => __( 'Invalid calendar skin.', 'booking' ) ) );
		}

		$file_path = '';
		if ( 0 === strpos( $skin_value, '/wpbc_skins/' ) ) {
			$file_path = ( ! empty( $upload_dir['basedir'] ) ) ? $upload_dir['basedir'] . $skin_value : '';
		} elseif ( defined( 'WPBC_PLUGIN_DIR' ) ) {
			$file_path = WPBC_PLUGIN_DIR . $skin_value;
		}

		if ( empty( $file_path ) || ! file_exists( $file_path ) ) {
			wp_send_json_error( array( 'message' => __( 'Calendar skin file does not exist.', 'booking' ) ) );
		}

		return $skin_value;
	}

	/**
	 * Get allowed global calendar legend option names.
	 *
	 * @return array
	 */
	public static function get_calendar_legend_option_names() {
		return array(
			'booking_is_show_legend',
			'booking_legend_is_show_item_available',
			'booking_legend_text_for_item_available',
			'booking_legend_is_show_item_pending',
			'booking_legend_text_for_item_pending',
			'booking_legend_is_show_item_approved',
			'booking_legend_text_for_item_approved',
			'booking_legend_is_show_item_partially',
			'booking_legend_text_for_item_partially',
			'booking_legend_is_show_item_unavailable',
			'booking_legend_text_for_item_unavailable',
			'booking_legend_is_show_numbers',
			'booking_legend_is_vertical',
		);
	}

	/**
	 * Normalize a global calendar legend option before saving.
	 *
	 * @param string $option_key Option name.
	 * @param mixed  $value      Option value.
	 * @param string $data_name  Submitted data name.
	 *
	 * @return string
	 */
	public static function normalize_calendar_legend_option( $option_key, $value, $data_name = '' ) {

		$on_off_options = array(
			'booking_is_show_legend',
			'booking_legend_is_show_item_available',
			'booking_legend_is_show_item_pending',
			'booking_legend_is_show_item_approved',
			'booking_legend_is_show_item_partially',
			'booking_legend_is_show_item_unavailable',
			'booking_legend_is_show_numbers',
			'booking_legend_is_vertical',
		);

		if ( in_array( $option_key, $on_off_options, true ) ) {
			return WPBC_Option_Save_Policy_Global_Options::normalize_on_off( $value );
		}

		return sanitize_text_field( (string) $value );
	}
}

/**
 * Time-slot global option policies.
 */
class WPBC_Option_Save_Policy_Global_Time {

	/**
	 * Normalize and validate the global time-picker skin value.
	 *
	 * @param mixed  $data_raw  Raw value.
	 * @param string $data_name Option name.
	 *
	 * @return string
	 */
	public static function normalize_time_picker_skin( $data_raw, $data_name = '' ) {

		$skin_value = is_scalar( $data_raw ) ? (string) $data_raw : '';
		$replace    = array();

		if ( defined( 'WPBC_PLUGIN_DIR' ) ) {
			$replace[] = WPBC_PLUGIN_DIR;
		}
		if ( defined( 'WPBC_PLUGIN_URL' ) ) {
			$replace[] = WPBC_PLUGIN_URL;
		}

		$upload_dir = wp_upload_dir();
		if ( ! empty( $upload_dir['basedir'] ) ) {
			$replace[] = $upload_dir['basedir'];
		}
		if ( ! empty( $upload_dir['baseurl'] ) ) {
			$replace[] = $upload_dir['baseurl'];
		}

		$skin_value = sanitize_text_field( str_replace( $replace, '', $skin_value ) );

		if (
			'' === $skin_value ||
			false !== strpos( $skin_value, '..' ) ||
			! preg_match( '/\.css$/i', $skin_value ) ||
			( 0 !== strpos( $skin_value, '/css/time_picker_skins/' ) && 0 !== strpos( $skin_value, '/wpbc_time_picker_skins/' ) )
		) {
			wp_send_json_error( array( 'message' => __( 'Invalid time-picker skin.', 'booking' ) ) );
		}

		if ( 0 === strpos( $skin_value, '/wpbc_time_picker_skins/' ) ) {
			$file_path = ( ! empty( $upload_dir['basedir'] ) ) ? $upload_dir['basedir'] . $skin_value : '';
		} else {
			$file_path = defined( 'WPBC_PLUGIN_DIR' ) ? WPBC_PLUGIN_DIR . $skin_value : '';
		}

		if ( empty( $file_path ) || ! file_exists( $file_path ) ) {
			wp_send_json_error( array( 'message' => __( 'Time-picker skin file does not exist.', 'booking' ) ) );
		}

		return $skin_value;
	}

	/**
	 * Normalize the global timeslot picker toggle.
	 *
	 * @param mixed  $data_raw  Raw value.
	 * @param string $data_name Option name.
	 *
	 * @return string
	 */
	public static function normalize_timeslot_picker( $data_raw, $data_name = '' ) {
		return WPBC_Option_Save_Policy_Global_Options::normalize_on_off( $data_raw );
	}
}

/**
 * Register built-in policies.
 *
 * @return void
 */
function wpbc_register_builtin_option_save_policies() {

	if ( ! class_exists( 'wpbc_option_saver_loader' ) ) {
		return;
	}

	wpbc_option_saver_loader::register_option_policy(
		'booking_form_style',
		array(
			'can_save'           => array( 'WPBC_Option_Save_Policy_Global_Options', 'can_save_global_options' ),
			'permission_message' => __( 'You do not have permission to save global form appearance options.', 'booking' ),
			'normalize_raw'      => array( 'WPBC_Option_Save_Policy_Global_Options', 'normalize_form_style' ),
		)
	);

	foreach ( WPBC_Option_Save_Policy_Global_Options::get_custom_form_style_option_names() as $custom_form_style_option_name ) {
		wpbc_option_saver_loader::register_option_policy(
			$custom_form_style_option_name,
			array(
				'can_save'           => array( 'WPBC_Option_Save_Policy_Global_Options', 'can_save_global_options' ),
				'permission_message' => __( 'You do not have permission to save global form appearance options.', 'booking' ),
				'normalize_raw'      => array( 'WPBC_Option_Save_Policy_Global_Options', 'normalize_custom_form_style_option' ),
			)
		);
	}

	wpbc_option_saver_loader::register_option_policy(
		'booking_skin',
		array(
			'can_save'           => array( 'WPBC_Option_Save_Policy_Global_Options', 'can_save_global_options' ),
			'permission_message' => __( 'You do not have permission to save global calendar options.', 'booking' ),
			'normalize_raw'      => array( 'WPBC_Option_Save_Policy_Global_Calendar', 'normalize_calendar_skin' ),
		)
	);

	wpbc_option_saver_loader::register_option_policy(
		'wpbc_calendar_legend_options',
		array(
			'can_save'           => array( 'WPBC_Option_Save_Policy_Global_Options', 'can_save_global_options' ),
			'permission_message' => __( 'You do not have permission to save global calendar options.', 'booking' ),
			'force_mode'         => 'split',
			'allowed_keys'       => array( 'WPBC_Option_Save_Policy_Global_Calendar', 'get_calendar_legend_option_names' ),
			'normalize_item'     => array( 'WPBC_Option_Save_Policy_Global_Calendar', 'normalize_calendar_legend_option' ),
		)
	);

	wpbc_option_saver_loader::register_option_policy(
		'booking_timeslot_picker',
		array(
			'can_save'           => array( 'WPBC_Option_Save_Policy_Global_Options', 'can_save_global_options' ),
			'permission_message' => __( 'You do not have permission to save global time-slot options.', 'booking' ),
			'normalize_raw'      => array( 'WPBC_Option_Save_Policy_Global_Time', 'normalize_timeslot_picker' ),
		)
	);

	wpbc_option_saver_loader::register_option_policy(
		'booking_form_accent_enabled',
		array(
			'can_save'           => array( 'WPBC_Option_Save_Policy_Global_Options', 'can_save_global_options' ),
			'permission_message' => __( 'You do not have permission to save global form appearance options.', 'booking' ),
			'normalize_raw'      => array( 'WPBC_Option_Save_Policy_Global_Options', 'normalize_on_off' ),
		)
	);

	wpbc_option_saver_loader::register_option_policy(
		'booking_timeslot_picker_skin',
		array(
			'can_save'           => array( 'WPBC_Option_Save_Policy_Global_Options', 'can_save_global_options' ),
			'permission_message' => __( 'You do not have permission to save global time-slot options.', 'booking' ),
			'normalize_raw'      => array( 'WPBC_Option_Save_Policy_Global_Time', 'normalize_time_picker_skin' ),
		)
	);

	wpbc_option_saver_loader::register_option_policy(
		'booking_form_accent_color',
		array(
			'can_save'           => array( 'WPBC_Option_Save_Policy_Global_Options', 'can_save_global_options' ),
			'permission_message' => __( 'You do not have permission to save global form appearance options.', 'booking' ),
			'normalize_raw'      => array( 'WPBC_Option_Save_Policy_Global_Options', 'normalize_hex_color' ),
		)
	);
}
add_action( 'init', 'wpbc_register_builtin_option_save_policies', 5 );

```