PluginProbe
Code Snippets / 4.0.0-beta.2
Code Snippets v4.0.0-beta.2
4.0.0-beta.2 3.10.2 3.10.1 3.10.0 3.10.0-beta.2 3.10.0-beta.1 4.0.0-beta.1 3.9.6 trunk 2.10.0 2.10.1 2.12.0 2.12.1 2.13.0 2.13.1 2.13.2 2.13.3 2.14.0 2.14.1 2.14.2 2.14.3 2.14.4 2.14.5 2.14.6 3.0.0 All 65 releases
← All changes | php/snippet-ops.php +863 -329 2.14.24.0.0-beta.2 View file →
@@ -1,6 +1,5 @@
1 1 <?php
2 -
3 2 /**
4 3 * Functions to perform snippet operations
5 4 *
6 5 * @package Code_Snippets
@@ -5,559 +4,1094 @@
5 4 *
6 5 * @package Code_Snippets
7 6 */
8 7
8 +namespace Code_Snippets;
9 +
10 +use Exception;
11 +use Code_Snippets\Model\Snippet;
12 +use Code_Snippets\Utils\Validator;
13 +use Throwable;
14 +use function Code_Snippets\Utils\get_self_option;
15 +use function Code_Snippets\Utils\validate_network_param;
16 +use function Code_Snippets\Utils\update_self_option;
17 +
9 18 /**
10 - * Retrieve a list of snippets from the database
19 + * Get the locked status for a snippet from wp_options.
11 20 *
12 - * @param array $ids The IDs of the snippets to fetch
13 - * @param bool|null $multisite Retrieve multisite-wide or site-wide snippets?
21 + * @param int $snippet_id Snippet ID.
22 + * @param bool|null $network Whether the snippet is network-wide (true) or site-wide (false).
14 23 *
15 - * @param array $args {
16 - * Optional. Arguments to specify which sorts of snippets to retrieve.
24 + * @return bool Whether the snippet is locked.
25 + */
26 +function is_snippet_locked( int $snippet_id, ?bool $network = null ): bool {
27 + $network = validate_network_param( $network );
28 + $locked_snippets = get_self_option( $network, 'code_snippets_locked', [] );
29 +
30 + return isset( $locked_snippets[ $snippet_id ] ) && $locked_snippets[ $snippet_id ];
31 +}
32 +
33 +/**
34 + * Set the locked status for a snippet in wp_options.
17 35 *
18 - * @type bool $active_only Whether to only fetch active snippets. Default false (will fetch both active and inactive snippets).
19 - * @type int $limit Limit the number of retrieved snippets. Default 0, which will not impose a limit on the results.
20 - * @type string $orderby Sort the retrieved snippets by a particular field. Example fields include 'id', 'priority', and 'name'.
21 - * @type string $order Designates ascending or descending order of snippets. Default 'DESC'. Accepts 'ASC', 'DESC'.
22 - * }
36 + * @param int $snippet_id Snippet ID.
37 + * @param bool $locked Whether the snippet should be locked.
38 + * @param bool|null $network Whether the snippet is network-wide (true) or site-wide (false).
23 39 *
24 - * @return array An array of Snippet objects.
40 + * @return void
41 + */
42 +function set_snippet_locked( int $snippet_id, bool $locked, ?bool $network = null ): void {
43 + $network = validate_network_param( $network );
44 + $locked_snippets = get_self_option( $network, 'code_snippets_locked', [] );
45 +
46 + if ( $locked ) {
47 + $locked_snippets[ $snippet_id ] = true;
48 + } else {
49 + unset( $locked_snippets[ $snippet_id ] );
50 + }
51 +
52 + update_self_option( $network, 'code_snippets_locked', $locked_snippets );
53 +}
54 +
55 +/**
56 + * Clean the cache where active snippets are stored.
25 57 *
26 - * @uses $wpdb to query the database for snippets
27 - * @uses code_snippets()->db->get_table_name() to dynamically retrieve the snippet table name
58 + * @param string $table_name Snippets table name.
59 + * @param array<string>|false $scopes List of scopes. Optional. If not provided, will flush the cache for all scopes.
28 60 *
29 - * @since 2.0
61 + * @return void
30 62 */
31 -function get_snippets( array $ids = array(), $multisite = null, array $args = array() ) {
32 - /** @var wpdb $wpdb */
33 - global $wpdb;
63 +function clean_active_snippets_cache( string $table_name, $scopes = false ) {
64 + $scope_groups = $scopes
65 + ? [ $scopes ]
66 + : [
67 + // Content snippets.
68 + [ 'head-content', 'body-content', 'footer-content' ],
34 69
35 - $searchable_columns = array( 'name', 'description', 'code', 'tags' );
70 + // Function snippets.
71 + [ 'global', 'single-use', 'front-end' ],
72 + [ 'global', 'single-use', 'admin' ],
73 + ];
36 74
37 - $args = wp_parse_args( $args, array(
38 - 'active_only' => false,
39 - 'limit' => 0,
40 - 'orderby' => '',
41 - 'order' => 'desc',
42 - 'search' => '',
43 - 'searchby' => $searchable_columns,
44 - ) );
75 + foreach ( $scope_groups as $scopes ) {
76 + wp_cache_delete( sprintf( 'active_snippets_%s_%s', sanitize_key( join( '_', $scopes ) ), $table_name ), CACHE_GROUP );
77 + }
78 +}
45 79
46 - $db = code_snippets()->db;
47 - $multisite = $db->validate_network_param( $multisite );
48 - $table = $db->get_table_name( $multisite );
80 +/**
81 + * Flush all snippets caches for a given database table.
82 + *
83 + * @param string $table_name Snippets table name.
84 + *
85 + * @return void
86 + */
87 +function clean_snippets_cache( string $table_name ) {
88 + wp_cache_delete( "all_snippet_tags_$table_name", CACHE_GROUP );
89 + wp_cache_delete( "all_snippets_$table_name", CACHE_GROUP );
90 + clean_active_snippets_cache( $table_name );
91 +}
49 92
50 - $ids_count = count( $ids );
93 +/**
94 + * Flush an entire cache group, where the object cache supports it.
95 + *
96 + * Not all persistent cache drop-ins implement group flushing, and the function
97 + * itself only exists from WordPress 6.1, so both are checked before use. A
98 + * failure is not important: cache groups are scoped to the plugin version, so
99 + * flushing is housekeeping rather than something correctness depends on, and
100 + * anything left behind is evicted by the cache in its own time.
101 + *
102 + * @param string $group Cache group to flush.
103 + *
104 + * @return bool Whether the group was flushed.
105 + */
106 +function flush_cache_group( string $group ): bool {
107 + /**
108 + * Short-circuits flushing a cache group.
109 + *
110 + * Returning a boolean skips the object cache entirely: false makes the
111 + * caller fall back to deleting the known keys one by one, for a cache
112 + * that reports group support it does not really have.
113 + *
114 + * @param bool|null $flushed Whether the group was flushed, or null to let the cache try.
115 + * @param string $group Cache group.
116 + */
117 + $flushed = apply_filters( 'code_snippets/pre_flush_cache_group', null, $group );
51 118
52 - /* If only one ID has been passed in, defer to the get_snippet() function */
53 - if ( 1 === $ids_count ) {
54 - return array( get_snippet( $ids[0] ) );
119 + if ( null !== $flushed ) {
120 + return (bool) $flushed;
55 121 }
56 122
57 - $sql = "SELECT * FROM $table WHERE 1=1";
58 - $sql_params = array();
123 + if ( ! function_exists( 'wp_cache_flush_group' ) ||
124 + ! function_exists( 'wp_cache_supports' ) ||
125 + ! wp_cache_supports( 'flush_group' ) ) {
126 + return false;
127 + }
59 128
60 - /* Build a query for specific search terms */
61 - if ( ! empty( $args['search'] ) && ! empty( $args['searchby'] ) ) {
62 - $search = array();
63 - foreach ( $args['searchby'] as $column ) {
64 - if ( in_array( $column, $searchable_columns, true ) ) {
65 - $search[] = "{$column} LIKE %s";
66 - $sql_params[] = sprintf( '%%%s%%', $wpdb->esc_like( $args['search'] ) );
67 - }
68 - }
69 - $sql .= sprintf( ' AND ( %s )', implode( ' OR ', $search ) );
129 + return wp_cache_flush_group( $group );
130 +}
131 +
132 +/**
133 + * Flush the cache groups belonging to other versions of the plugin.
134 + *
135 + * @param string $previous_version Version the site was running beforehand.
136 + *
137 + * @return void
138 + */
139 +function flush_versioned_cache_groups( string $previous_version ): void {
140 + if ( '' !== $previous_version && PLUGIN_VERSION !== $previous_version ) {
141 + flush_cache_group( CACHE_GROUP_BASE . '_' . $previous_version );
70 142 }
71 143
72 - /* Build a query containing the specified IDs if there are any */
73 - if ( $ids_count > 1 ) {
74 - $sql .= sprintf( ' AND id IN (%s)', implode( ',', array_fill( 0, $ids_count, '%d' ) ) );
75 - $sql_params = array_merge( $sql_params, array_values( $ids ) );
144 + // Versions before the group was scoped wrote to the unscoped group, and no
145 + // version that scopes it ever writes there again. Clearing it means a site
146 + // upgrading from 3.10.0 or 3.10.1 sheds the objects that would otherwise
147 + // still be waiting to break its next rollback.
148 + flush_cache_group( CACHE_GROUP_BASE );
149 +
150 + // Where the cache cannot flush a whole group, the keys this plugin writes
151 + // are deleted one by one instead, so an uninstall followed by a reinstall
152 + // of the same version cannot read snippets that no longer exist.
153 + if ( ! flush_cache_group( CACHE_GROUP ) ) {
154 + flush_known_cache_keys();
76 155 }
156 +}
77 157
78 - /* Restrict the active status of retrieved snippets if requested */
79 - if ( $args['active_only'] ) {
80 - $sql .= ' AND active=1';
158 +/**
159 + * Delete every key this plugin is known to write in its current cache group.
160 + *
161 + * @return void
162 + */
163 +function flush_known_cache_keys(): void {
164 + // Both tables' keys go, whether this is a network: deleting a key
165 + // that was never written does not cost anything, and it keeps one path to test.
166 + $tables = [ code_snippets()->db->get_table_name( false ), code_snippets()->db->get_table_name( true ) ];
167 +
168 + foreach ( array_unique( $tables ) as $table ) {
169 + clean_snippets_cache( $table );
81 170 }
82 171
83 - /* Apply custom ordering if requested */
84 - if ( $args['orderby'] ) {
85 - $order_dir = 'ASC' === strtoupper( $args['order'] ) ? 'ASC' : 'DESC';
86 - $sql .= " ORDER BY %s {$order_dir}";
87 - $sql_params[] = $args['orderby'];
172 + wp_cache_delete( Settings\CACHE_KEY, CACHE_GROUP );
173 +}
174 +
175 +/**
176 + * Retrieve a list of snippets from the database.
177 + * Read operation.
178 + *
179 + * @param array<string> $ids The IDs of the snippets to fetch.
180 + * @param bool|null $network Retrieve multisite-wide snippets (true) or site-wide snippets (false).
181 + *
182 + * @return Snippet[] List of Snippet objects.
183 + *
184 + * @since 2.0
185 + */
186 +function get_snippets( array $ids = [], ?bool $network = null ): array {
187 + global $wpdb;
188 +
189 + // If only one ID has been passed in, defer to the get_snippet() function.
190 + $ids_count = count( $ids );
191 + if ( 1 === $ids_count ) {
192 + return [ get_snippet( $ids[0], $network ) ];
88 193 }
89 194
90 - /* Limit the number of retrieved snippets if requested */
91 - if ( intval( $args['limit'] ) > 0 ) {
92 - $sql .= ' LIMIT %d';
93 - $sql_params[] = intval( $args['limit'] );
94 - }
195 + $network = validate_network_param( $network );
196 + $table_name = code_snippets()->db->get_table_name( $network );
95 197
96 - /* Retrieve the results from the database */
97 - if ( ! empty( $sql_params ) ) {
98 - $sql = $wpdb->prepare( $sql, $sql_params );
198 + $snippets = wp_cache_get( "all_snippets_$table_name", CACHE_GROUP );
199 +
200 + // Fetch all snippets from the database if none are cached.
201 + if ( ! is_array( $snippets ) ) {
202 + $results = $wpdb->get_results( "SELECT * FROM $table_name", ARRAY_A );
203 +
204 + $snippets = $results
205 + ? array_map(
206 + function ( $snippet_data ) use ( $network ) {
207 + $snippet_data['network'] = $network;
208 + $snippet = new Snippet( $snippet_data );
209 + // Load locked from wp_options.
210 + if ( $snippet->id > 0 ) {
211 + $snippet->locked = is_snippet_locked( $snippet->id, $network );
212 + }
213 + return $snippet;
214 + },
215 + $results
216 + )
217 + : [];
218 +
219 + $snippets = apply_filters( 'code_snippets/get_snippets', $snippets, $network );
220 +
221 + if ( 0 === $ids_count ) {
222 + wp_cache_set( "all_snippets_$table_name", $snippets, CACHE_GROUP );
223 + }
99 224 }
100 - $snippets = $wpdb->get_results( $sql, ARRAY_A );
101 225
102 - if ( $snippets ) {
103 - /* Convert snippets to snippet objects */
104 - foreach ( $snippets as $index => $snippet ) {
105 - $snippet['network'] = $multisite;
106 - $snippets[ $index ] = new Code_Snippet( $snippet );
107 - }
108 - } else {
109 - $snippets = array();
226 + // If a list of IDs are provided, narrow down the snippets list.
227 + if ( $ids_count > 0 ) {
228 + $ids = array_map( 'intval', $ids );
229 + return array_values(
230 + array_filter(
231 + $snippets,
232 + function ( Snippet $snippet ) use ( $ids ) {
233 + return in_array( $snippet->id, $ids, true );
234 + }
235 + )
236 + );
110 237 }
111 238
112 - return apply_filters( 'code_snippets/get_snippets', $snippets, $multisite );
239 + return $snippets;
113 240 }
114 241
115 242 /**
116 - * Gets all of the used tags from the database
243 + * Gets all used tags from the database.
244 + * Read operation.
245 + *
117 246 * @since 2.0
118 247 */
119 248 function get_all_snippet_tags() {
120 - /** @var wpdb $wpdb */
121 249 global $wpdb;
250 + $table_name = code_snippets()->db->get_table_name();
251 + $cache_key = "all_snippet_tags_$table_name";
122 252
123 - /* Grab all tags from the database */
253 + $tags = wp_cache_get( $cache_key, CACHE_GROUP );
254 + if ( $tags ) {
255 + return $tags;
256 + }
257 +
258 + // Grab all tags from the database.
124 259 $tags = array();
125 - $table = code_snippets()->db->get_table_name();
126 - $all_tags = $wpdb->get_col( "SELECT `tags` FROM $table" );
260 + $all_tags = $wpdb->get_col( "SELECT tags FROM $table_name" );
127 261
128 - /* Merge all tags into a single array */
262 + // Merge all tags into a single array.
129 263 foreach ( $all_tags as $snippet_tags ) {
130 264 $snippet_tags = code_snippets_build_tags_array( $snippet_tags );
131 265 $tags = array_merge( $snippet_tags, $tags );
132 266 }
133 267
134 - /* Remove duplicate tags */
135 -
136 - return array_values( array_unique( $tags, SORT_REGULAR ) );
268 + // Remove duplicate tags.
269 + $tags = array_values( array_unique( $tags, SORT_REGULAR ) );
270 + wp_cache_set( $cache_key, $tags, CACHE_GROUP );
271 + return $tags;
137 272 }
138 273
139 274 /**
140 - * Make sure that the tags are a valid array
275 + * Make sure that the tags are a valid array.
141 276 *
142 - * @param mixed $tags The tags to convert into an array
277 + * @param array|string $tags The tags to convert into an array.
143 278 *
144 - * @return array The converted tags
279 + * @return array<string> The converted tags.
145 280 *
146 - * @since 2.0
281 + * @since 2.0.0
147 282 */
148 -function code_snippets_build_tags_array( $tags ) {
283 +function code_snippets_build_tags_array( $tags ): array {
149 284
150 - /* If there are no tags set, return an empty array */
285 + /* If there are no tags set, return an empty array. */
151 286 if ( empty( $tags ) ) {
152 287 return array();
153 288 }
154 289
155 - /* If the tags are set as a string, convert them into an array */
290 + /* If the tags are set as a string, convert them into an array. */
156 291 if ( is_string( $tags ) ) {
157 - $tags = strip_tags( $tags );
292 + $tags = wp_strip_all_tags( $tags );
158 293 $tags = str_replace( ', ', ',', $tags );
159 294 $tags = explode( ',', $tags );
160 295 }
161 296
162 - /* If we still don't have an array, just convert whatever we do have into one */
163 -
297 + /* If we still don't have an array, just convert whatever we do have into one. */
164 298 return (array) $tags;
165 299 }
166 300
167 301 /**
168 302 * Retrieve a single snippets from the database.
169 - * Will return empty snippet object if no snippet
170 - * ID is specified
303 + * Will return empty snippet object if no snippet ID is specified.
304 + * Read operation.
171 305 *
172 - * @param int $id The ID of the snippet to retrieve. 0 to build a new snippet
173 - * @param boolean|null $multisite Retrieve a multisite-wide or site-wide snippet?
306 + * @param int $id The ID of the snippet to retrieve. 0 to build a new snippet.
307 + * @param bool|null $network Retrieve a multisite-wide snippet (true) or site-wide snippet (false).
174 308 *
175 - * @return Code_Snippet A single snippet object
176 - * @since 2.0
309 + * @return ?Snippet A single snippet object.
310 + *
311 + * @since 2.0.0
177 312 */
178 -function get_snippet( $id = 0, $multisite = null ) {
179 - /** @var wpdb $wpdb */
313 +function get_snippet( int $id = 0, ?bool $network = null ): ?Snippet {
180 314 global $wpdb;
181 315
182 316 $id = absint( $id );
183 - $table = code_snippets()->db->get_table_name( $multisite );
317 + $network = validate_network_param( $network );
318 + $table_name = code_snippets()->db->get_table_name( $network );
184 319
185 - if ( 0 !== $id ) {
320 + if ( 0 === $id ) {
321 + // If an invalid ID is provided, then return an empty snippet object.
322 + $snippet = new Snippet();
186 323
187 - /* Retrieve the snippet from the database */
188 - $snippet = $wpdb->get_row( $wpdb->prepare( "SELECT * FROM $table WHERE id = %d", $id ) );
324 + } else {
325 + $cached_snippets = wp_cache_get( "all_snippets_$table_name", CACHE_GROUP );
189 326
190 - /* Unescape the snippet data, ready for use */
191 - $snippet = new Code_Snippet( $snippet );
327 + // Attempt to fetch snippet from the cached list, if it exists.
328 + if ( is_array( $cached_snippets ) ) {
329 + foreach ( $cached_snippets as $snippet ) {
330 + if ( $snippet->id === $id ) {
331 + return apply_filters( 'code_snippets/get_snippet', $snippet, $id, $network );
332 + }
333 + }
334 + }
192 335
193 - } else {
336 + // Otherwise, retrieve the snippet from the database.
337 + // phpcs:disable WordPress.DB.DirectDatabaseQuery.NoCaching
338 + $snippet_data = $wpdb->get_row( $wpdb->prepare( "SELECT * FROM $table_name WHERE id = %d", $id ) );
339 + $snippet = new Snippet( $snippet_data );
340 + }
194 341
195 - /* Get an empty snippet object */
196 - $snippet = new Code_Snippet();
342 + $snippet->network = $network;
343 +
344 + // Load locked from wp_options if snippet has an ID.
345 + if ( $snippet->id > 0 ) {
346 + $snippet->locked = is_snippet_locked( $snippet->id, $network );
197 347 }
198 348
199 - $snippet->network = $multisite;
349 + return apply_filters( 'code_snippets/get_snippet', $snippet, $id, $network );
350 +}
200 351
201 - return apply_filters( 'code_snippets/get_snippet', $snippet, $id, $multisite );
202 -}
203 352
204 353 /**
205 - * Activates a snippet
354 + * Ensure the list of shared network snippets is correct if one has been recently active or deactivated.
355 + * Write operation.
206 356 *
207 - * @param int $id The ID of the snippet to activate
208 - * @param bool|null $multisite Are the snippets multisite-wide or site-wide?
357 + * @access private
209 358 *
210 - * @return int
359 + * @param Snippet[] $snippets Snippets that was recently updated.
211 360 *
212 - * @since 2.0
213 - * @uses $wpdb to set the snippet's active status
361 + * @return bool Whether an update was performed.
214 362 */
215 -function activate_snippet( $id, $multisite = null ) {
216 - /** @var wpdb $wpdb */
217 - global $wpdb;
218 - $db = code_snippets()->db;
219 - $table = $db->get_table_name( $multisite );
363 +function update_shared_network_snippets( array $snippets ): bool {
364 + $shared_ids = [];
365 + $unshared_ids = [];
220 366
221 - /* Retrieve the snippet code from the database for validation before activating */
222 - $row = $wpdb->get_row( $wpdb->prepare( "SELECT code FROM $table WHERE id = %d;", $id ) );
223 - if ( ! $row ) {
367 + if ( ! is_multisite() ) {
224 368 return false;
225 369 }
226 370
227 - $validator = new Code_Snippets_Validator( $row->code );
228 - if ( $validator->validate() ) {
371 + foreach ( $snippets as $snippet ) {
372 + if ( $snippet->network ) {
373 + if ( $snippet->shared_network ) {
374 + $shared_ids[] = $snippet->id;
375 + } else {
376 + $unshared_ids[] = $snippet->id;
377 + }
378 + }
379 + }
380 +
381 + if ( ! $shared_ids && ! $unshared_ids ) {
229 382 return false;
230 383 }
231 384
232 - $wpdb->update( $table, array( 'active' => '1' ), array( 'id' => $id ), array( '%d' ), array( '%d' ) );
385 + $existing_shared_ids = get_site_option( 'shared_network_snippets', [] );
386 + $updated_shared_ids = array_values( array_diff( array_merge( $existing_shared_ids, $shared_ids ), $unshared_ids ) );
233 387
234 - /* Remove snippet from shared network snippet list if it was Network Activated */
235 - if ( $table === $db->ms_table && $shared_network_snippets = get_site_option( 'shared_network_snippets', false ) ) {
236 - $shared_network_snippets = array_diff( $shared_network_snippets, array( $id ) );
237 - update_site_option( 'shared_network_snippets', $shared_network_snippets );
388 + if ( $existing_shared_ids === $updated_shared_ids ) {
389 + return false;
238 390 }
239 391
240 - do_action( 'code_snippets/activate_snippet', $id, $multisite );
392 + update_site_option( 'shared_network_snippets', $updated_shared_ids );
393 +
394 + // Deactivate the snippet on all sites if necessary.
395 + if ( $unshared_ids ) {
396 + $sites = get_sites( [ 'fields' => 'ids' ] );
397 +
398 + foreach ( $sites as $site ) {
399 + switch_to_blog( $site );
400 + $active_shared_ids = get_option( 'active_shared_network_snippets' );
401 +
402 + if ( is_array( $active_shared_ids ) ) {
403 + $active_shared_ids = array_diff( $active_shared_ids, $unshared_ids );
404 + update_option( 'active_shared_network_snippets', $active_shared_ids );
405 + }
406 +
407 + clean_active_snippets_cache( code_snippets()->db->ms_table );
408 + }
409 +
410 + restore_current_blog();
411 + }
412 +
241 413 return true;
242 414 }
243 415
244 416 /**
245 - * Activates multiple snippet.
417 + * Activates a snippet.
418 + * Write operation.
246 419 *
247 - * @param array $ids The IDs of the snippets to activate.
248 - * @param bool|null $multisite Are the snippets multisite-wide or site-wide?
420 + * @param int $id ID of the snippet to activate.
421 + * @param bool|null $network Whether the snippets are multisite-wide (true) or site-wide (false).
249 422 *
250 - * @return array The IDs of the snippets which were successfully activated.
423 + * @return Snippet|string Snippet object on success, error message on failure.
424 + * @since 2.0.0
425 + */
426 +function activate_snippet( int $id, ?bool $network = null ) {
427 + global $wpdb;
428 + $network = validate_network_param( $network );
429 + $table_name = code_snippets()->db->get_table_name( $network );
430 +
431 + // Retrieve the snippet code from the database for validation before activating.
432 + $snippet = get_snippet( $id, $network );
433 +
434 + if ( 0 === $snippet->id ) {
435 + // translators: %d: snippet identifier.
436 + return sprintf( __( 'Could not locate snippet with ID %d.', 'code-snippets' ), $id );
437 + }
438 +
439 + if ( 'php' === $snippet->type ) {
440 + $validator = new Validator( $snippet->code );
441 + if ( $validator->validate() ) {
442 + return __( 'Could not activate snippet: code did not pass validation.', 'code-snippets' );
443 + }
444 + }
445 +
446 + $result = $wpdb->update(
447 + $table_name,
448 + array( 'active' => '1' ),
449 + array( 'id' => $id ),
450 + array( '%d' ),
451 + array( '%d' )
452 + );
453 +
454 + if ( ! $result ) {
455 + return __( 'Could not activate snippet.', 'code-snippets' );
456 + }
457 +
458 + update_shared_network_snippets( [ $snippet ] );
459 + do_action( 'code_snippets/activate_snippet', $snippet, $network );
460 + clean_snippets_cache( $table_name );
461 + return $snippet;
462 +}
463 +
464 +/**
465 + * Activates multiple snippets.
466 + * Write operation.
251 467 *
252 - * @since 2.0
253 - * @uses $wpdb to set the snippet's active status
468 + * @param array<int> $ids The IDs of the snippets to activate.
469 + * @param bool|null $network Whether the snippets are multisite-wide (true) or site-wide (false).
470 + *
471 + * @return Snippet[]|null Snippets which were successfully activated, or null on failure.
472 + *
473 + * @since 2.0.0
254 474 */
255 -function activate_snippets( array $ids, $multisite = null ) {
256 - /** @var wpdb $wpdb */
475 +function activate_snippets( array $ids, ?bool $network = null ): ?array {
257 476 global $wpdb;
258 - $db = code_snippets()->db;
259 - $table = $db->get_table_name( $multisite );
477 + $network = validate_network_param( $network );
478 + $table_name = code_snippets()->db->get_table_name( $network );
260 479
261 - /* Build a SQL query containing all the provided snippet IDs */
262 - $ids_format = implode( ',', array_fill( 0, count( $ids ), '%d' ) );
263 - $sql = sprintf( 'SELECT id, code FROM %s WHERE id IN (%s);', $table, $ids_format );
264 - $rows = $wpdb->get_results( $wpdb->prepare( $sql, $ids ) );
480 + $snippets = get_snippets( $ids, $network );
265 481
266 - if ( ! $rows ) {
267 - return array();
482 + if ( ! $snippets ) {
483 + return null;
268 484 }
269 485
270 - /* Loop through each snippet code and validate individually */
271 - $valid_ids = array();
486 + // Loop through each snippet code and validate individually.
487 + $valid_ids = [];
488 + $valid_snippets = [];
272 489
273 - foreach ( $rows as $row ) {
274 - $validator = new Code_Snippets_Validator( $row->code );
490 + // Names claimed by snippets already accepted into this batch. A snippet is
491 + // otherwise validated only against what PHP has declared so far, which does
492 + // not include the other snippets about to be activated alongside it.
493 + $claimed_identifiers = [];
494 +
495 + foreach ( $snippets as $snippet ) {
496 + // Only PHP is validated. The validator looks for redeclarations of
497 + // existing PHP functions and classes, which says nothing meaningful
498 + // about CSS or JavaScript.
499 + if ( 'php' !== $snippet->type ) {
500 + $valid_ids[] = $snippet->id;
501 + $valid_snippets[] = $snippet;
502 + continue;
503 + }
504 +
505 + $validator = new Validator( $snippet->code, $claimed_identifiers );
275 506 $code_error = $validator->validate();
276 507
277 508 if ( ! $code_error ) {
278 - $valid_ids[] = $row->id;
509 + $claimed_identifiers = $validator->get_claimed_identifiers();
510 + $valid_ids[] = $snippet->id;
511 + $valid_snippets[] = $snippet;
279 512 }
280 513 }
281 514
282 - /* If there are no valid snippets, then we're done */
515 + // If there are no valid snippets, then we're done.
283 516 if ( ! $valid_ids ) {
284 - return $valid_ids;
517 + return null;
285 518 }
286 519
287 - /* Build a SQL query containing all the valid snippet IDs and activate the valid snippets */
520 + // Build a SQL query containing all IDs, as wpdb::update does not support OR conditionals.
288 521 $ids_format = implode( ',', array_fill( 0, count( $valid_ids ), '%d' ) );
289 - $sql = sprintf( 'UPDATE %s SET active = 1 WHERE id IN (%s);', $table, $ids_format );
290 - $wpdb->query( $wpdb->prepare( $sql, $valid_ids ) );
291 522
292 - /* Remove snippet from shared network snippet list if it was Network Activated */
293 - if ( $table === $db->ms_table && $shared_network_snippets = get_site_option( 'shared_network_snippets', false ) ) {
294 - $shared_network_snippets = array_diff( $shared_network_snippets, $valid_ids );
295 - update_site_option( 'shared_network_snippets', $shared_network_snippets );
523 + // phpcs:disable WordPress.DB.PreparedSQLPlaceholders.UnfinishedPrepare
524 + $rows_updated = $wpdb->query( $wpdb->prepare( "UPDATE $table_name SET active = 1 WHERE id IN ($ids_format)", $valid_ids ) );
525 +
526 + if ( ! $rows_updated ) {
527 + return null;
296 528 }
297 529
298 - do_action( 'code_snippets/activate_snippets', $valid_ids, $multisite );
530 + update_shared_network_snippets( $valid_snippets );
531 + do_action( 'code_snippets/activate_snippets', $valid_snippets, $table_name );
532 + clean_snippets_cache( $table_name );
299 533 return $valid_ids;
300 534 }
301 535
302 536 /**
303 - * Deactivate a snippet
537 + * Deactivate a snippet.
538 + * Write operation.
304 539 *
305 - * @param int $id The ID of the snippet to deactivate
306 - * @param bool|null $multisite Are the snippets multisite-wide or site-wide?
540 + * @param int $id ID of the snippet to deactivate.
541 + * @param bool|null $network Whether the snippets are multisite-wide (true) or site-wide (false).
307 542 *
308 - * @since 2.0
309 - * @uses $wpdb to set the snippets' active status
543 + * @return Snippet|null Snippet that was deactivated on success, or null on failure.
310 544 *
545 + * @since 2.0.0
311 546 */
312 -function deactivate_snippet( $id, $multisite = null ) {
313 - /** @var wpdb $wpdb */
547 +function deactivate_snippet( int $id, ?bool $network = null ): ?Snippet {
314 548 global $wpdb;
315 - $db = code_snippets()->db;
316 - $table = $db->get_table_name( $multisite );
549 + $network = validate_network_param( $network );
550 + $table = code_snippets()->db->get_table_name( $network );
317 551
318 - /* Set the snippet to active */
552 + // Set the snippet to inactive.
553 + $result = $wpdb->update(
554 + $table,
555 + array( 'active' => '0' ),
556 + array( 'id' => $id ),
557 + array( '%d' ),
558 + array( '%d' )
559 + );
319 560
320 - $wpdb->update( $table, array( 'active' => '0' ), array( 'id' => $id ), array( '%d' ), array( '%d' ) );
561 + if ( ! $result ) {
562 + return null;
563 + }
321 564
322 - /* Update the recently active list */
565 + // Update the recently active list.
566 + $snippet = get_snippet( $id );
567 + $recently_active = get_self_option( $network, 'recently_active_snippets', [] );
568 + $recently_active[ $id ] = time();
569 + update_self_option( $network, 'recently_active_snippets', $recently_active );
323 570
324 - $recently_active = array( $id => time() );
571 + update_shared_network_snippets( [ $snippet ] );
572 + do_action( 'code_snippets/deactivate_snippet', $id, $network );
573 + clean_snippets_cache( $table );
325 574
326 - if ( $table === $db->table ) {
575 + return $snippet;
576 +}
327 577
328 - update_option(
329 - 'recently_activated_snippets',
330 - $recently_active + (array) get_option( 'recently_activated_snippets', array() )
331 - );
578 +/**
579 + * Deletes a snippet from the database.
580 + * Write operation.
581 + *
582 + * @param int $id ID of the snippet to delete.
583 + * @param bool|null $network Delete from network-wide (true) or site-wide (false) table.
584 + *
585 + * @return bool Whether the snippet was deleted successfully.
586 + *
587 + * @since 2.0.0
588 + */
589 +function delete_snippet( int $id, ?bool $network = null ): bool {
590 + global $wpdb;
591 + $network = validate_network_param( $network );
592 + $table = code_snippets()->db->get_table_name( $network );
332 593
333 - } elseif ( $table === $db->ms_table ) {
594 + $snippet = get_snippet( $id, $network );
334 595
335 - update_site_option(
336 - 'recently_activated_snippets',
337 - $recently_active + (array) get_site_option( 'recently_activated_snippets', array() )
338 - );
596 + // Prevent deletion of locked snippets.
597 + if ( $snippet->locked ) {
598 + return false;
339 599 }
340 600
341 - do_action( 'code_snippets/deactivate_snippet', $id, $multisite );
601 + $result = $wpdb->delete(
602 + $table,
603 + array( 'id' => $id ),
604 + array( '%d' )
605 + );
606 +
607 + if ( $result ) {
608 + do_action( 'code_snippets/delete_snippet', $snippet, $network );
609 + clean_snippets_cache( $table );
610 +
611 + $recently_active = get_self_option( $network, 'recently_active_snippets', [] );
612 +
613 + if ( isset( $recently_active[ $id ] ) ) {
614 + unset( $recently_active[ $id ] );
615 + update_self_option( $network, 'recently_active_snippets', $recently_active );
616 + }
617 + }
618 +
619 + return (bool) $result;
342 620 }
343 621
344 622 /**
345 - * Deletes a snippet from the database
623 + * Trashes a snippet from the database.
624 + * Write operation.
346 625 *
347 - * @param int $id The ID of the snippet to delete
348 - * @param bool|null $multisite Delete from site-wide or network-wide table?
626 + * @param int $id ID of the snippet to trash.
627 + * @param bool|null $network Trash from network-wide (true) or site-wide (false) table.
349 628 *
350 - * @since 2.0
629 + * @return bool Whether the snippet was trashed successfully.
630 + *
631 + * @since 3.8.0
351 632 */
352 -function delete_snippet( $id, $multisite = null ) {
353 - /** @var wpdb $wpdb */
633 +function trash_snippet( int $id, ?bool $network = null ): bool {
354 634 global $wpdb;
635 + $network = validate_network_param( $network );
636 + $table = code_snippets()->db->get_table_name( $network );
355 637
356 - $wpdb->delete(
357 - code_snippets()->db->get_table_name( $multisite ),
358 - array( 'id' => $id ),
359 - array( '%d' )
360 - );
638 + $snippet = get_snippet( $id, $network );
361 639
362 - do_action( 'code_snippets/delete_snippet', $id, $multisite );
640 + // Prevent trashing of locked snippets.
641 + if ( $snippet->locked ) {
642 + return false;
643 + }
644 +
645 + $wpdb->update( $table, [ 'active' => '-1' ], [ 'id' => $id ], [ '%d' ] );
646 +
647 + do_action( 'code_snippets/trash_snippet', $snippet, $network );
648 + clean_snippets_cache( $table );
649 +
650 + return true;
363 651 }
364 652
365 653 /**
654 + * Restore a trashed snippet by setting its active status back to 0 (inactive).
655 + * Write operation.
656 + *
657 + * @param int $id Snippet ID to restore.
658 + * @param bool|null $network Whether the snippet is multisite-wide (true) or site-wide (false).
659 + *
660 + * @return bool Whether the restore was successful.
661 + *
662 + * @since 3.8.0
663 + */
664 +function restore_snippet( int $id, ?bool $network = null ): bool {
665 + global $wpdb;
666 + $network = validate_network_param( $network );
667 + $table = code_snippets()->db->get_table_name( $network );
668 +
669 + $result = $wpdb->update( $table, [ 'active' => '0' ], [ 'id' => $id ], [ '%d' ] );
670 +
671 + if ( $result ) {
672 + do_action( 'code_snippets/restore_snippet', $id, $network );
673 + clean_snippets_cache( $table );
674 + }
675 +
676 + return (bool) $result;
677 +}
678 +
679 +/**
680 + * Test snippet code for errors, augmenting the snippet object.
681 + *
682 + * @param Snippet $snippet Snippet object.
683 + */
684 +function test_snippet_code( Snippet $snippet ) {
685 + $snippet->code_error = null;
686 + $snippet->code_error_trace = null;
687 +
688 + if ( 'php' !== $snippet->type ) {
689 + return;
690 + }
691 +
692 + $validator = new Validator( $snippet->code );
693 + $result = $validator->validate();
694 +
695 + if ( $result ) {
696 + $snippet->code_error = [ $result['message'], $result['line'] ];
697 + $snippet->code_error_trace = ( new Exception() )->getTraceAsString();
698 + }
699 +
700 + if ( ! $snippet->code_error && 'single-use' !== $snippet->scope ) {
701 + $result = execute_snippet( $snippet->code, $snippet->id, true );
702 +
703 + if ( $result instanceof Throwable ) {
704 + $snippet->code_error = [
705 + ucfirst( rtrim( $result->getMessage(), '.' ) ) . '.',
706 + $result->getLine(),
707 + ];
708 + $snippet->code_error_trace = $result->getTraceAsString();
709 + }
710 + }
711 +}
712 +
713 +/**
366 714 * Saves a snippet to the database.
715 + * Write operation.
367 716 *
368 - * @param Code_Snippet $snippet The snippet to add/update to the database
717 + * @param Snippet|array<string, mixed> $snippet The snippet to add/update to the database.
369 718 *
370 - * @return int The ID of the snippet
371 - * @since 2.0
719 + * @return Snippet|null Updated snippet.
372 720 *
373 - * @uses $wpdb to update/add the snippet to the database
721 + * @since 2.0.0
374 722 */
375 -function save_snippet( Code_Snippet $snippet ) {
376 - /** @var wpdb $wpdb */
723 +function save_snippet( $snippet ): ?Snippet {
377 724 global $wpdb;
725 + $table = code_snippets()->db->get_table_name( $snippet->network );
378 726
379 - $table = code_snippets()->db->get_table_name( $snippet->network );
727 + if ( ! $snippet instanceof Snippet ) {
728 + $snippet = new Snippet( $snippet );
729 + }
380 730
381 - /* Update the last modification date and the creation date if necessary */
731 + // Prevent modification of locked snippets (allow unlocking itself).
732 + if ( 0 !== $snippet->id ) {
733 + $old_snippet = get_snippet( $snippet->id, $snippet->network );
734 +
735 + if ( $old_snippet->locked && $snippet->locked ) {
736 + // If it was locked and the new request still wants it locked,
737 + // prevent changes to sensitive fields (code and name).
738 + $snippet->code = $old_snippet->code;
739 + $snippet->name = $old_snippet->name;
740 + }
741 + }
742 +
743 + // Update the last modification date if necessary.
382 744 $snippet->update_modified();
383 745
384 - /* Build array of data to insert */
385 - $data = array(
386 - 'name' => $snippet->name,
387 - 'description' => $snippet->desc,
388 - 'code' => $snippet->code,
389 - 'tags' => $snippet->tags_list,
390 - 'scope' => $snippet->scope,
391 - 'priority' => $snippet->priority,
392 - 'active' => intval( $snippet->active ),
393 - 'modified' => $snippet->modified,
394 - );
746 + // Strip any wrapper markup that came along with the pasted code.
747 + $snippet->code = normalize_snippet_code( $snippet->code, $snippet->type );
395 748
396 - /* Create a new snippet if the ID is not set */
749 + if ( 'php' === $snippet->type ) {
750 + // Deactivate snippet if code contains errors.
751 + if ( $snippet->active && 'single-use' !== $snippet->scope ) {
752 + test_snippet_code( $snippet );
753 +
754 + if ( $snippet->code_error ) {
755 + $snippet->active = 0;
756 + }
757 + }
758 + }
759 +
760 + // Increment the revision number unless revision = 1 or revision is not set.
761 + if ( $snippet->revision && $snippet->revision > 1 ) {
762 + $snippet->increment_revision();
763 + }
764 +
765 + // Shared network snippets are always considered inactive.
766 + $snippet->active = $snippet->active && ! $snippet->shared_network;
767 +
768 + // Snippet authorship: track who created and who last edited each snippet.
769 + // `created_by` is fixed at insert time; `updated_by` reflects every save.
770 + $current_user_id = get_current_user_id();
771 + $author_id = $current_user_id > 0 ? $current_user_id : null;
772 +
773 + // Build the list of data to insert (excluding locked, which is stored in wp_options).
774 + $data = [
775 + 'name' => $snippet->name,
776 + 'description' => $snippet->desc,
777 + 'code' => $snippet->code,
778 + 'tags' => $snippet->tags_list,
779 + 'scope' => $snippet->scope,
780 + 'condition_id' => intval( $snippet->condition_id ),
781 + 'priority' => $snippet->priority,
782 + 'active' => intval( $snippet->active ),
783 + 'modified' => $snippet->modified,
784 + 'revision' => $snippet->revision,
785 + 'cloud_id' => $snippet->cloud_id_owner ? $snippet->cloud_id_owner : null,
786 + 'updated_by' => $author_id,
787 + ];
788 +
789 + // Create a new snippet if the ID is not set.
397 790 if ( 0 === $snippet->id ) {
398 - $wpdb->insert( $table, $data, '%s' );
791 + $data['created_by'] = $author_id;
792 + $result = $wpdb->insert( $table, $data, '%s' );
793 + if ( false === $result ) {
794 + return null;
795 + }
796 +
399 797 $snippet->id = $wpdb->insert_id;
798 + $updated = get_snippet( $snippet->id, $snippet->network );
799 + $updated->code_error = $snippet->code_error;
800 + $updated->code_error_trace = $snippet->code_error_trace;
801 + do_action( 'code_snippets/create_snippet', $updated, $table );
400 802
401 - do_action( 'code_snippets/create_snippet', $snippet->id, $table );
803 + if ( $updated->id > 0 ) {
804 + set_snippet_locked( $updated->id, $updated->locked, $updated->network );
805 + }
402 806 } else {
807 + // Otherwise, update the snippet data.
808 + $existing = get_snippet( $snippet->id, $snippet->network );
403 809
404 - /* Otherwise update the snippet data */
405 - $wpdb->update( $table, $data, array( 'id' => $snippet->id ), null, array( '%d' ) );
810 + set_snippet_locked( $snippet->id, $snippet->locked, $snippet->network );
811 + $wpdb->update( $table, $data, [ 'id' => $snippet->id ], null, [ '%d' ] );
406 812
407 - do_action( 'code_snippets/update_snippet', $snippet->id, $table );
813 + $updated = get_snippet( $snippet->id, $snippet->network );
814 + $updated->code_error = $snippet->code_error;
815 + $updated->code_error_trace = $snippet->code_error_trace;
816 +
817 + do_action( 'code_snippets/update_snippet', $updated, $table, $existing, $snippet );
818 +
819 + if ( ! $updated->active && $existing->active ) {
820 + $recently_active = get_self_option( $updated->network, 'recently_active_snippets', [] );
821 + $recently_active[ $updated->id ] = time();
822 + update_self_option( $updated->network, 'recently_active_snippets', $recently_active );
823 + } elseif ( ! $updated->active ) {
824 + $recently_active = get_self_option( $updated->network, 'recently_active_snippets', [] );
825 +
826 + if ( isset( $recently_active[ $updated->id ] ) ) {
827 + unset( $recently_active[ $updated->id ] );
828 + update_self_option( $updated->network, 'recently_active_snippets', $recently_active );
829 + }
830 + }
408 831 }
409 832
410 - return $snippet->id;
833 + update_shared_network_snippets( [ $updated ] );
834 + clean_snippets_cache( $table );
835 + return $updated;
411 836 }
412 837
413 838 /**
414 - * Update a snippet entry given a list of fields
839 + * Resolve a user ID to a compact author object for display.
415 840 *
416 - * @param int $snippet_id The ID of the snippet to update
417 - * @param array $fields An array of fields mapped to their values
418 - * @param bool $network Whether the snippet is network-wide or site-wide
841 + * Returns the user's ID, display name, and avatar URL, or null when the ID is
842 + * empty or the user no longer exists. Results are cached per request, so a list
843 + * of snippets sharing authors only triggers one lookup per distinct user.
844 + *
845 + * @param int $user_id User ID to resolve.
846 + *
847 + * @return array{id: int, display_name: string, avatar_url: string}|null
419 848 */
420 -function update_snippet_fields( $snippet_id, $fields, $network = null ) {
421 - /** @var wpdb $wpdb */
422 - global $wpdb;
849 +function get_snippet_author( int $user_id ): ?array {
850 + static $cache = [];
423 851
424 - $table = code_snippets()->db->get_table_name( $network );
852 + if ( $user_id <= 0 ) {
853 + return null;
854 + }
425 855
426 - /* Build a new snippet object for the validation */
427 - $snippet = new Code_Snippet();
428 - $snippet->id = $snippet_id;
856 + if ( ! array_key_exists( $user_id, $cache ) ) {
857 + $user = get_userdata( $user_id );
858 + $cache[ $user_id ] = $user ?
859 + [
860 + 'id' => $user_id,
861 + 'display_name' => $user->display_name,
862 + 'avatar_url' => (string) get_avatar_url( $user_id, [ 'size' => 32 ] ),
863 + ] :
864 + null;
865 + }
429 866
430 - /* Validate fields through the snippet class and copy them into a clean array */
431 - $clean_fields = array();
867 + return $cache[ $user_id ];
868 +}
432 869
433 - foreach ( $fields as $field => $value ) {
870 +/**
871 + * Execute a snippet.
872 + * Execute operation.
873 + *
874 + * Code must NOT be escaped, as it will be executed directly.
875 + *
876 + * @param string $code Snippet code to execute.
877 + * @param int $id Snippet ID.
878 + * @param bool $force Force snippet execution, even if save mode is active.
879 + *
880 + * @return Throwable|mixed Code error if encountered during execution, or result of snippet execution otherwise.
881 + *
882 + * @since 2.0.0
883 + * @noinspection PhpUndefinedConstantInspection
884 + *
885 + * phpcs:disable Squiz.PHP.Eval.Discouraged
886 + */
887 +function execute_snippet( string $code, int $id = 0, bool $force = false ) {
888 + /**
889 + * Do not continue if safe mode is active.
890 + *
891 + * @noinspection PhpUndefinedConstantInspection
892 + */
893 + if ( empty( $code ) || ( ! $force && defined( 'CODE_SNIPPETS_SAFE_MODE' ) && CODE_SNIPPETS_SAFE_MODE ) ) {
894 + return false;
895 + }
434 896
435 - if ( $snippet->set_field( $field, $value ) ) {
436 - $clean_fields[ $field ] = $snippet->$field;
437 - }
897 + ob_start();
898 +
899 + try {
900 + $result = eval( $code );
901 + } catch ( Throwable $throwable ) {
902 + $result = $throwable;
438 903 }
439 904
440 - /* Update the snippet in the database */
441 - $wpdb->update( $table, $clean_fields, array( 'id' => $snippet->id ), null, array( '%d' ) );
442 - do_action( 'code_snippets/update_snippet', $snippet->id, $table );
905 + ob_end_clean();
906 +
907 + do_action( 'code_snippets/after_execute_snippet', $code, $id, $result );
908 + return $result;
443 909 }
444 910
445 911 /**
446 - * Execute a snippet
912 + * Retrieve a single snippets from the database using its cloud ID.
447 913 *
448 - * Code must NOT be escaped, as
449 - * it will be executed directly
914 + * Read operation.
450 915 *
451 - * @param string $code The snippet code to execute
452 - * @param int $id The snippet ID
453 - * @param bool $catch_output Whether to attempt to suppress the output of execution using buffers
916 + * @param string $cloud_id The Cloud ID of the snippet to retrieve.
917 + * @param bool|null $multisite Retrieve a multisite-wide snippet (true) or site-wide snippet (false).
454 918 *
455 - * @return mixed The result of the code execution
456 - * @since 2.0
919 + * @return Snippet|null A single snippet object or null if no snippet was found.
457 920 *
921 + * @since 3.5.0
458 922 */
459 -function execute_snippet( $code, $id = 0, $catch_output = true ) {
923 +function get_snippet_by_cloud_id( string $cloud_id, ?bool $multisite = null ): ?Snippet {
924 + global $wpdb;
460 925
461 - if ( empty( $code ) || defined( 'CODE_SNIPPETS_SAFE_MODE' ) && CODE_SNIPPETS_SAFE_MODE ) {
462 - return false;
463 - }
926 + $multisite = validate_network_param( $multisite );
927 + $table_name = code_snippets()->db->get_table_name( $multisite );
464 928
465 - if ( $catch_output ) {
466 - ob_start();
929 + $cached_snippets = wp_cache_get( "all_snippets_$table_name", CACHE_GROUP );
930 +
931 + // Attempt to fetch snippet from the cached list, if it exists.
932 + if ( is_array( $cached_snippets ) ) {
933 + foreach ( $cached_snippets as $snippet ) {
934 + if ( $snippet->cloud_id === $cloud_id ) {
935 + return apply_filters( 'code_snippets/get_snippet_by_cloud_id', $snippet, $cloud_id, $multisite );
936 + }
937 + }
467 938 }
468 939
469 - $result = eval( $code );
940 + // Otherwise, search for the snippet from the database.
941 + $snippet_data = $wpdb->get_row( $wpdb->prepare( "SELECT * FROM $table_name WHERE cloud_id = %s", $cloud_id ) ); // cache pass, db call ok.
942 + $snippet = $snippet_data ? new Snippet( $snippet_data ) : null;
470 943
471 - if ( $catch_output ) {
472 - ob_end_clean();
944 + // Load locked from wp_options if snippet exists.
945 + if ( $snippet && $snippet->id > 0 ) {
946 + $snippet->network = $multisite;
947 + $snippet->locked = is_snippet_locked( $snippet->id, $multisite );
473 948 }
474 949
475 - do_action( 'code_snippets/after_execute_snippet', $id, $code, $result );
476 -
477 - return $result;
950 + return apply_filters( 'code_snippets/get_snippet_by_cloud_id', $snippet, $cloud_id, $multisite );
478 951 }
479 952
480 953 /**
481 - * Run the active snippets
954 + * Remove the wrapper markup that a snippet's code does not need.
482 955 *
483 - * @return bool true on success, false on failure
484 - * @since 2.0
956 + * Snippet code is stored bare: PHP is evaluated already inside PHP, and CSS and
957 + * JavaScript are wrapped in their own tags when printed. People increasingly
958 + * paste code generated by an AI assistant, which almost always arrives wrapped
959 + * in the tags for its language and sometimes in a markdown code fence as well.
960 + *
961 + * Leaving that markup in place fails differently depending on the type, and all
962 + * three ways are unhelpful. PHP raises a syntax error, so the snippet saves and
963 + * is then quietly deactivated. CSS and JavaScript have no syntax check at all,
964 + * so they save as active and emit doubled tags on the front end with nothing
965 + * reported anywhere.
966 + *
967 + * Only a wrapper around the whole snippet is removed. Tags appearing partway
968 + * through the code are left alone, since those are the author's own.
969 + *
970 + * @param string $code Snippet code as provided.
971 + * @param string $type Snippet type: php, css, js or html.
972 + *
973 + * @return string Code with any surrounding wrapper markup removed.
485 974 */
486 -function execute_active_snippets() {
975 +function normalize_snippet_code( string $code, string $type ): string {
976 + // A markdown fence around the whole snippet, as copied from a chat window.
977 + // The closing fence only goes when an opening one was there: on its own it
978 + // is the author's content, as in an HTML snippet ending in backticks.
979 + $code = preg_replace( '/\A\s*```[a-z]*[ \t]*\R/i', '', $code, 1, $fenced );
487 980
488 - /* Bail early if safe mode is active */
489 - if ( defined( 'CODE_SNIPPETS_SAFE_MODE' ) && CODE_SNIPPETS_SAFE_MODE || ! apply_filters( 'code_snippets/execute_snippets', true ) ) {
490 - return false;
981 + if ( $fenced ) {
982 + $code = preg_replace( '/\R\s*```\s*\z/', '', $code );
491 983 }
492 984
493 - /** @var wpdb $wpdb */
494 - global $wpdb;
495 - $db = code_snippets()->db;
985 + switch ( $type ) {
986 + case 'php':
987 + // `php` is matched as a whole word so that `<?phpinfo()` is not
988 + // mistaken for an opening tag followed by `info()`.
989 + $code = preg_replace( '/\A\s*<\?(?:php\b)?/i', '', $code );
990 + $code = preg_replace( '/\?>\s*\z/', '', $code );
991 + break;
496 992
497 - $current_scope = is_admin() ? 'admin' : 'front-end';
498 - $queries = array();
993 + case 'css':
994 + $code = preg_replace( '/\A\s*<style\b[^>]*>/i', '', $code );
995 + $code = preg_replace( '/<\/style\s*>\s*\z/i', '', $code );
996 + break;
499 997
500 - $sql_format = "SELECT id, code, scope FROM %s WHERE scope IN ('global', 'single-use', %%s) ";
501 - $order = 'ORDER BY priority ASC, id ASC';
998 + case 'js':
999 + $code = preg_replace( '/\A\s*<script\b[^>]*>/i', '', $code );
1000 + $code = preg_replace( '/<\/script\s*>\s*\z/i', '', $code );
1001 + break;
1002 + }
502 1003
503 - /* Fetch snippets from site table */
504 - if ( $wpdb->get_var( "SHOW TABLES LIKE '$db->table'" ) === $db->table ) {
505 - $queries[ $db->table ] = $wpdb->prepare( sprintf( $sql_format, $db->table ) . 'AND active=1 ' . $order, $current_scope );
506 - }
1004 + // Drop the single line break left behind by an opening tag on its own line,
1005 + // so the stored code does not gain a blank first line each time.
1006 + return preg_replace( '/\A\R/', '', $code );
1007 +}
507 1008
508 - /* Fetch snippets from the network table */
509 - if ( is_multisite() && $wpdb->get_var( "SHOW TABLES LIKE '$db->ms_table'" ) === $db->ms_table ) {
510 - $active_shared_ids = get_option( 'active_shared_network_snippets', array() );
1009 +/**
1010 + * Update a snippet entry given a list of fields.
1011 + * Write operation.
1012 + *
1013 + * @param int $snippet_id ID of the snippet to update.
1014 + * @param array<string, mixed> $fields An array of fields mapped to their values.
1015 + * @param bool|null $network Update in network-wide (true) or site-wide (false) table.
1016 + */
1017 +function update_snippet_fields( int $snippet_id, array $fields, ?bool $network = null ) {
1018 + global $wpdb;
511 1019
512 - /* If there are active shared snippets, include them in the query */
513 - if ( is_array( $active_shared_ids ) && count( $active_shared_ids ) ) {
1020 + $network = validate_network_param( $network );
1021 + $table = code_snippets()->db->get_table_name( $network );
514 1022
515 - /* Build a list of "%d, %d, %d ..." for every active network shared snippet we have */
516 - $active_shared_ids_format = implode( ',', array_fill( 0, count( $active_shared_ids ), '%d' ) );
1023 + // Build a new snippet object for the validation.
1024 + $snippet = new Snippet();
1025 + $snippet->id = $snippet_id;
517 1026
518 - /* Include them in the query */
519 - $sql = sprintf( $sql_format, $db->ms_table ) . " AND (active=1 OR id IN ($active_shared_ids_format)) $order";
1027 + // Validate fields through the snippet class and copy them into a clean array.
1028 + $clean_fields = array();
1029 + $locked_value = null;
520 1030
521 - /* Add the scope number to the IDs array, so that it is the first variable in the query */
522 - array_unshift( $active_shared_ids, $current_scope );
523 - $queries[ $db->ms_table ] = $wpdb->prepare( $sql, $active_shared_ids );
524 - array_shift( $active_shared_ids ); // remove it afterwards as we need this variable later
1031 + foreach ( $fields as $field => $value ) {
1032 + // Handle locked separately (stored in wp_options).
1033 + if ( 'locked' === $field ) {
1034 + if ( $snippet->set_field( $field, $value ) ) {
1035 + $locked_value = $snippet->$field;
1036 + }
1037 + continue;
1038 + }
525 1039
526 - } else {
527 - $sql = sprintf( $sql_format, $db->ms_table ) . 'AND active=1 ' . $order;
528 - $queries[ $db->ms_table ] = $wpdb->prepare( $sql, $current_scope );
1040 + if ( $snippet->set_field( $field, $value ) ) {
1041 + $clean_fields[ $field ] = $snippet->$field;
529 1042 }
530 1043 }
531 1044
532 - foreach ( $queries as $table_name => $query ) {
533 - $active_snippets = $wpdb->get_results( $query, 'ARRAY_A' );
1045 + // Update the snippet in the database (excluding locked).
1046 + if ( ! empty( $clean_fields ) ) {
1047 + $wpdb->update( $table, $clean_fields, array( 'id' => $snippet->id ), null, array( '%d' ) );
1048 + }
534 1049
535 - if ( ! is_array( $active_snippets ) ) {
536 - continue;
537 - }
1050 + // Save locked to wp_options if it was provided.
1051 + if ( null !== $locked_value ) {
1052 + set_snippet_locked( $snippet->id, $locked_value, $network );
1053 + }
538 1054
539 - /* Loop through the returned snippets and execute the PHP code */
540 - foreach ( $active_snippets as $snippet ) {
541 - $snippet_id = intval( $snippet['id'] );
542 - $code = $snippet['code'];
1055 + clean_snippets_cache( $table );
1056 + $updated = get_snippet( $snippet->id, $network );
1057 + if ( $updated->id ) {
1058 + do_action( 'code_snippets/update_snippet', $updated, $table );
1059 + }
1060 +}
543 1061
544 - // if the snippet is a single-use snippet, deactivate it before execution to ensure that the process always happens
545 - if ( 'single-use' === $snippet['scope'] ) {
546 - if ( $table_name === $db->ms_table && isset( $active_shared_ids ) &&
547 - false !== ( $key = array_search( $snippet_id, $active_shared_ids, true ) ) ) {
548 - unset( $active_shared_ids[ $key ] );
549 - $active_shared_ids = array_values( $active_shared_ids );
550 - update_option( 'active_shared_network_snippets', $active_shared_ids );
551 - } else {
552 - $wpdb->update( $table_name, array( 'active' => '0' ), array( 'id' => $snippet_id ), array( '%d' ), array( '%d' ) );
553 - }
554 - }
1062 +/**
1063 + * Evaluate a snippet by loading it from the filesystem.
1064 + *
1065 + * @param string $code Snippet code.
1066 + * @param string $file Snippet filename.
1067 + * @param int $id Snippet ID.
1068 + * @param bool $force Force snippet execution, even if save mode is active.
1069 + *
1070 + * @return bool|Exception|Throwable|null Code error if encountered during execution, or result of snippet execution otherwise.
1071 + */
1072 +function execute_snippet_from_flat_file( string $code, string $file, int $id = 0, bool $force = false ) {
1073 + if ( ! is_file( $file ) ) {
1074 + execute_snippet( $code, $id, $force );
1075 + return true;
1076 + }
555 1077
556 - if ( apply_filters( 'code_snippets/allow_execute_snippet', true, $snippet_id, $table_name ) ) {
557 - execute_snippet( $code, $snippet_id );
558 - }
559 - }
1078 + /* @noinspection PhpUndefinedConstantInspection */
1079 + if ( ! $force && defined( 'CODE_SNIPPETS_SAFE_MODE' ) && CODE_SNIPPETS_SAFE_MODE ) {
1080 + return false;
560 1081 }
561 1082
562 - return true;
1083 + ob_start();
1084 +
1085 + try {
1086 + require_once $file;
1087 + $result = null;
1088 + } catch ( Throwable $throwable ) {
1089 + $result = $throwable;
1090 + }
1091 +
1092 + ob_end_clean();
1093 +
1094 + do_action( 'code_snippets/after_execute_snippet_from_flat_file', $file, $id );
1095 +
1096 + return $result ?? null;
563 1097 }