← All changes | classes/core.php +21 -4 0.3.5 → 0.3.7 View file →

		@@ -12,8 +12,9 @@
12	12	public $is_rest = false;
13	13	public $is_cli = false;
14	14	public $site_url = null;
15	15	public $mwcode = null;
	16	+ public $licenser = null;
16	17
17	18	private $option_name = 'mwcode_options';
18	19
19	20	public function __construct() {
		@@ -37,8 +38,13 @@
37	38	add_action( 'plugins_loaded', array( $this, 'init' ) );
38	39	}
39	40
40	41	function init() {
	42	+ // Initialize the licenser for Pro version
	43	+ if ( class_exists( 'MeowCommonPro_Licenser' ) ) {
	44	+ $this->licenser = new MeowCommonPro_Licenser( MWCODE_PREFIX, MWCODE_ENTRY, MWCODE_DOMAIN, MWCODE_ITEM_ID, MWCODE_VERSION );
	45	+ }
	46	+
41	47	// Part of the core, settings and stuff
42	48	$this->admin = new Meow_MWCODE_Admin( $this );
43	49
44	50	// Only for REST
		@@ -83,9 +89,11 @@
83	89	return [
84	90	//Safemode
85	91	"safe_mode_status" => "on", // on, off, whitelist
86	92	"safe_mode_whitelist" => [],
87		- "disallow_block_php" => true, // Do not allow PHP code to be execute through Blocks "code" parameter
	93	+ //"disallow_block_php" => true, // Do not allow PHP code to be execute through Blocks "code" parameter
	94	+ "code_blocks" => false,
	95	+ "code_blocks_whitelist" => [], // Whitelist for code blocks, if empty, all code blocks are allowed
88	96
89	97	//LOGS
90	98	"server_debug_mode" => false,
91	99
		@@ -652,11 +660,13 @@
652	660
653	661	$id = $atts['id'];
654	662	$target = $atts['target'];
655	663	$code = $atts['code'];
	664	+ $current_post = get_post();
656	665
657	666	$no_js = defined( 'DISALLOW_UNFILTERED_HTML' ) && DISALLOW_UNFILTERED_HTML;
658		- $no_php = $this->get_option( 'disallow_block_php', true );
	667	+ $allow_php = $this->get_option( 'code_blocks', false );
	668	+ $allow_php_whitelist = $this->get_option( 'code_blocks_whitelist', [] );
659	669
660	670	// If the ID is null, it means it comes from a Guttenberg block
661	671	$is_block = empty( $id ) && !empty( $code );
662	672
		@@ -669,10 +679,17 @@
669	679	if ( $no_js && $target === 'js' ) {
670	680	return '<b>Code Engine:</b> Code Block JS are disabled because unfiltered HTML is not allowed on your server.';
671	681	}
672	682
673		- if ( $no_php && $target === 'php' ) {
674		- return '<b>Code Engine:</b> Code Block PHP are disabled. If you are an administrator, you can enable it in the settings, this is not recommended. Please use a Content Snippet ( PHP ) instead.';
	683	+ if ( $target === 'php' ) {
	684	+
	685	+ if ( !$allow_php ) {
	686	+ return '<b>Code Engine:</b> Code Block PHP are disabled. If you are an administrator, you can enable it in the settings, this is not recommended. Please use a Content Snippet ( PHP ) instead.';
	687	+ }
	688	+
	689	+ if ( !empty( $allow_php_whitelist ) && !in_array( $current_post->ID, $allow_php_whitelist ) ) {
	690	+ return '<b>Code Engine:</b> Code Block PHP are disabled for this post. If you are an administrator, you can enable it in the settings, this is not recommended. Please use a Content Snippet ( PHP ) instead.';
	691	+ }
675	692	}
676	693
677	694	// Because the code from Blocks are sanitized, we need to replace the &quot; with "
678	695	$code = str_replace( '&quot;', '"', $code );