PluginProbe
Code Snippets / trunk
Code Snippets vtrunk
4.0.0-beta.2 3.10.2 3.10.1 3.10.0 3.10.0-beta.2 3.10.0-beta.1 4.0.0-beta.1 3.9.6 trunk 2.10.0 2.10.1 2.12.0 2.12.1 2.13.0 2.13.1 2.13.2 2.13.3 2.14.0 2.14.1 2.14.2 2.14.3 2.14.4 2.14.5 2.14.6 3.0.0 All 65 releases
← All changes | php/snippet-ops.php +861 -356 2.14.6 → trunk View file →
@@ -1,6 +1,5 @@
1 1 <?php
2 -
3 2 /**
4 3 * Functions to perform snippet operations
5 4 *
6 5 * @package Code_Snippets
@@ -5,158 +4,291 @@
5 4 *
6 5 * @package Code_Snippets
7 6 */
8 7
8 +namespace Code_Snippets;
9 +
10 +use Exception;
11 +use Code_Snippets\Model\Snippet;
12 +use Code_Snippets\Utils\Validator;
13 +use Throwable;
14 +use function Code_Snippets\Utils\get_self_option;
15 +use function Code_Snippets\Utils\validate_network_param;
16 +use function Code_Snippets\Utils\update_self_option;
17 +
9 18 /**
10 - * Retrieve a list of snippets from the database
19 + * Get the locked status for a snippet from wp_options.
11 20 *
12 - * @param array $ids The IDs of the snippets to fetch
13 - * @param bool|null $multisite Retrieve multisite-wide or site-wide snippets?
21 + * @param int $snippet_id Snippet ID.
22 + * @param bool|null $network Whether the snippet is network-wide (true) or site-wide (false).
14 23 *
15 - * @param array $args {
16 - * Optional. Arguments to specify which sorts of snippets to retrieve.
24 + * @return bool Whether the snippet is locked.
25 + */
26 +function is_snippet_locked( int $snippet_id, ?bool $network = null ): bool {
27 + $network = validate_network_param( $network );
28 + $locked_snippets = get_self_option( $network, 'code_snippets_locked', [] );
29 +
30 + return isset( $locked_snippets[ $snippet_id ] ) && $locked_snippets[ $snippet_id ];
31 +}
32 +
33 +/**
34 + * Set the locked status for a snippet in wp_options.
17 35 *
18 - * @type bool $active_only Whether to only fetch active snippets. Default false (will fetch both active and inactive snippets).
19 - * @type int $limit Limit the number of retrieved snippets. Default 0, which will not impose a limit on the results.
20 - * @type string $orderby Sort the retrieved snippets by a particular field. Example fields include 'id', 'priority', and 'name'.
21 - * @type string $order Designates ascending or descending order of snippets. Default 'DESC'. Accepts 'ASC', 'DESC'.
22 - * }
36 + * @param int $snippet_id Snippet ID.
37 + * @param bool $locked Whether the snippet should be locked.
38 + * @param bool|null $network Whether the snippet is network-wide (true) or site-wide (false).
23 39 *
24 - * @return array An array of Snippet objects.
40 + * @return void
41 + */
42 +function set_snippet_locked( int $snippet_id, bool $locked, ?bool $network = null ): void {
43 + $network = validate_network_param( $network );
44 + $locked_snippets = get_self_option( $network, 'code_snippets_locked', [] );
45 +
46 + if ( $locked ) {
47 + $locked_snippets[ $snippet_id ] = true;
48 + } else {
49 + unset( $locked_snippets[ $snippet_id ] );
50 + }
51 +
52 + update_self_option( $network, 'code_snippets_locked', $locked_snippets );
53 +}
54 +
55 +/**
56 + * Clean the cache where active snippets are stored.
25 57 *
26 - * @uses $wpdb to query the database for snippets
27 - * @uses code_snippets()->db->get_table_name() to dynamically retrieve the snippet table name
58 + * @param string $table_name Snippets table name.
59 + * @param array<string>|false $scopes List of scopes. Optional. If not provided, will flush the cache for all scopes.
28 60 *
29 - * @since 2.0
61 + * @return void
30 62 */
31 -function get_snippets( array $ids = array(), $multisite = null, array $args = array() ) {
32 - /** @var wpdb $wpdb */
33 - global $wpdb;
63 +function clean_active_snippets_cache( string $table_name, $scopes = false ) {
64 + $scope_groups = $scopes
65 + ? [ $scopes ]
66 + : [
67 + // Content snippets.
68 + [ 'head-content', 'body-content', 'footer-content' ],
34 69
35 - $searchable_columns = array( 'name', 'description', 'code', 'tags' );
70 + // Function snippets.
71 + [ 'global', 'single-use', 'front-end' ],
72 + [ 'global', 'single-use', 'admin' ],
73 + ];
36 74
37 - $args = wp_parse_args(
38 - $args,
39 - array(
40 - 'active_only' => false,
41 - 'limit' => 0,
42 - 'orderby' => '',
43 - 'order' => 'desc',
44 - 'search' => '',
45 - 'searchby' => $searchable_columns,
46 - )
47 - );
75 + foreach ( $scope_groups as $scopes ) {
76 + wp_cache_delete( sprintf( 'active_snippets_%s_%s', sanitize_key( join( '_', $scopes ) ), $table_name ), CACHE_GROUP );
77 + }
78 +}
48 79
49 - $db = code_snippets()->db;
50 - $multisite = $db->validate_network_param( $multisite );
51 - $table = $db->get_table_name( $multisite );
80 +/**
81 + * Flush all snippets caches for a given database table.
82 + *
83 + * @param string $table_name Snippets table name.
84 + *
85 + * @return void
86 + */
87 +function clean_snippets_cache( string $table_name ) {
88 + wp_cache_delete( "all_snippet_tags_$table_name", CACHE_GROUP );
89 + wp_cache_delete( "all_snippets_$table_name", CACHE_GROUP );
90 + clean_active_snippets_cache( $table_name );
91 +}
52 92
53 - $ids_count = count( $ids );
93 +/**
94 + * Flush an entire cache group, where the object cache supports it.
95 + *
96 + * Not all persistent cache drop-ins implement group flushing, and the function
97 + * itself only exists from WordPress 6.1, so both are checked before use. A
98 + * failure is not important: cache groups are scoped to the plugin version, so
99 + * flushing is housekeeping rather than something correctness depends on, and
100 + * anything left behind is evicted by the cache in its own time.
101 + *
102 + * @param string $group Cache group to flush.
103 + *
104 + * @return bool Whether the group was flushed.
105 + */
106 +function flush_cache_group( string $group ): bool {
107 + /**
108 + * Short-circuits flushing a cache group.
109 + *
110 + * Returning a boolean skips the object cache entirely: false makes the
111 + * caller fall back to deleting the known keys one by one, for a cache
112 + * that reports group support it does not really have.
113 + *
114 + * @param bool|null $flushed Whether the group was flushed, or null to let the cache try.
115 + * @param string $group Cache group.
116 + */
117 + $flushed = apply_filters( 'code_snippets/pre_flush_cache_group', null, $group );
54 118
55 - /* If only one ID has been passed in, defer to the get_snippet() function */
56 - if ( 1 === $ids_count ) {
57 - return array( get_snippet( $ids[0] ) );
119 + if ( null !== $flushed ) {
120 + return (bool) $flushed;
58 121 }
59 122
60 - $sql = "SELECT * FROM $table WHERE 1=1";
61 - $sql_params = array();
123 + if ( ! function_exists( 'wp_cache_flush_group' ) ||
124 + ! function_exists( 'wp_cache_supports' ) ||
125 + ! wp_cache_supports( 'flush_group' ) ) {
126 + return false;
127 + }
62 128
63 - /* Build a query for specific search terms */
64 - if ( ! empty( $args['search'] ) && ! empty( $args['searchby'] ) ) {
65 - $search = array();
66 - foreach ( $args['searchby'] as $column ) {
67 - if ( in_array( $column, $searchable_columns, true ) ) {
68 - $search[] = "{$column} LIKE %s";
69 - $sql_params[] = sprintf( '%%%s%%', $wpdb->esc_like( $args['search'] ) );
70 - }
71 - }
72 - $sql .= sprintf( ' AND ( %s )', implode( ' OR ', $search ) );
129 + return wp_cache_flush_group( $group );
130 +}
131 +
132 +/**
133 + * Flush the cache groups belonging to other versions of the plugin.
134 + *
135 + * @param string $previous_version Version the site was running beforehand.
136 + *
137 + * @return void
138 + */
139 +function flush_versioned_cache_groups( string $previous_version ): void {
140 + if ( '' !== $previous_version && PLUGIN_VERSION !== $previous_version ) {
141 + flush_cache_group( CACHE_GROUP_BASE . '_' . $previous_version );
73 142 }
74 143
75 - /* Build a query containing the specified IDs if there are any */
76 - if ( $ids_count > 1 ) {
77 - $sql .= sprintf( ' AND id IN (%s)', implode( ',', array_fill( 0, $ids_count, '%d' ) ) );
78 - $sql_params = array_merge( $sql_params, array_values( $ids ) );
144 + // Versions before the group was scoped wrote to the unscoped group, and no
145 + // version that scopes it ever writes there again. Clearing it means a site
146 + // upgrading from 3.10.0 or 3.10.1 sheds the objects that would otherwise
147 + // still be waiting to break its next rollback.
148 + flush_cache_group( CACHE_GROUP_BASE );
149 +
150 + // Where the cache cannot flush a whole group, the keys this plugin writes
151 + // are deleted one by one instead, so an uninstall followed by a reinstall
152 + // of the same version cannot read snippets that no longer exist.
153 + if ( ! flush_cache_group( CACHE_GROUP ) ) {
154 + flush_known_cache_keys();
79 155 }
156 +}
80 157
81 - /* Restrict the active status of retrieved snippets if requested */
82 - if ( $args['active_only'] ) {
83 - $sql .= ' AND active=1';
158 +/**
159 + * Delete every key this plugin is known to write in its current cache group.
160 + *
161 + * @return void
162 + */
163 +function flush_known_cache_keys(): void {
164 + // Both tables' keys go, whether this is a network: deleting a key
165 + // that was never written does not cost anything, and it keeps one path to test.
166 + $tables = [ code_snippets()->db->get_table_name( false ), code_snippets()->db->get_table_name( true ) ];
167 +
168 + foreach ( array_unique( $tables ) as $table ) {
169 + clean_snippets_cache( $table );
84 170 }
85 171
86 - /* Apply custom ordering if requested */
87 - if ( $args['orderby'] ) {
88 - $order_dir = 'ASC' === strtoupper( $args['order'] ) ? 'ASC' : 'DESC';
89 - $sql .= " ORDER BY %s {$order_dir}";
90 - $sql_params[] = $args['orderby'];
172 + wp_cache_delete( Settings\CACHE_KEY, CACHE_GROUP );
173 +}
174 +
175 +/**
176 + * Retrieve a list of snippets from the database.
177 + * Read operation.
178 + *
179 + * @param array<string> $ids The IDs of the snippets to fetch.
180 + * @param bool|null $network Retrieve multisite-wide snippets (true) or site-wide snippets (false).
181 + *
182 + * @return Snippet[] List of Snippet objects.
183 + *
184 + * @since 2.0
185 + */
186 +function get_snippets( array $ids = [], ?bool $network = null ): array {
187 + global $wpdb;
188 +
189 + // If only one ID has been passed in, defer to the get_snippet() function.
190 + $ids_count = count( $ids );
191 + if ( 1 === $ids_count ) {
192 + return [ get_snippet( $ids[0], $network ) ];
91 193 }
92 194
93 - /* Limit the number of retrieved snippets if requested */
94 - if ( intval( $args['limit'] ) > 0 ) {
95 - $sql .= ' LIMIT %d';
96 - $sql_params[] = intval( $args['limit'] );
97 - }
195 + $network = validate_network_param( $network );
196 + $table_name = code_snippets()->db->get_table_name( $network );
98 197
99 - /* Retrieve the results from the database */
100 - if ( ! empty( $sql_params ) ) {
101 - $sql = $wpdb->prepare( $sql, $sql_params );
198 + $snippets = wp_cache_get( "all_snippets_$table_name", CACHE_GROUP );
199 +
200 + // Fetch all snippets from the database if none are cached.
201 + if ( ! is_array( $snippets ) ) {
202 + $results = $wpdb->get_results( "SELECT * FROM $table_name", ARRAY_A );
203 +
204 + $snippets = $results
205 + ? array_map(
206 + function ( $snippet_data ) use ( $network ) {
207 + $snippet_data['network'] = $network;
208 + $snippet = new Snippet( $snippet_data );
209 + // Load locked from wp_options.
210 + if ( $snippet->id > 0 ) {
211 + $snippet->locked = is_snippet_locked( $snippet->id, $network );
212 + }
213 + return $snippet;
214 + },
215 + $results
216 + )
217 + : [];
218 +
219 + $snippets = apply_filters( 'code_snippets/get_snippets', $snippets, $network );
220 +
221 + if ( 0 === $ids_count ) {
222 + wp_cache_set( "all_snippets_$table_name", $snippets, CACHE_GROUP );
223 + }
102 224 }
103 - $snippets = $wpdb->get_results( $sql, ARRAY_A );
104 225
105 - if ( $snippets ) {
106 - /* Convert snippets to snippet objects */
107 - foreach ( $snippets as $index => $snippet ) {
108 - $snippet['network'] = $multisite;
109 - $snippets[ $index ] = new Code_Snippet( $snippet );
110 - }
111 - } else {
112 - $snippets = array();
226 + // If a list of IDs are provided, narrow down the snippets list.
227 + if ( $ids_count > 0 ) {
228 + $ids = array_map( 'intval', $ids );
229 + return array_values(
230 + array_filter(
231 + $snippets,
232 + function ( Snippet $snippet ) use ( $ids ) {
233 + return in_array( $snippet->id, $ids, true );
234 + }
235 + )
236 + );
113 237 }
114 238
115 - return apply_filters( 'code_snippets/get_snippets', $snippets, $multisite );
239 + return $snippets;
116 240 }
117 241
118 242 /**
119 - * Gets all of the used tags from the database
243 + * Gets all used tags from the database.
244 + * Read operation.
245 + *
120 246 * @since 2.0
121 247 */
122 248 function get_all_snippet_tags() {
123 - /** @var wpdb $wpdb */
124 249 global $wpdb;
250 + $table_name = code_snippets()->db->get_table_name();
251 + $cache_key = "all_snippet_tags_$table_name";
125 252
126 - /* Grab all tags from the database */
253 + $tags = wp_cache_get( $cache_key, CACHE_GROUP );
254 + if ( $tags ) {
255 + return $tags;
256 + }
257 +
258 + // Grab all tags from the database.
127 259 $tags = array();
128 - $table = code_snippets()->db->get_table_name();
129 - $all_tags = $wpdb->get_col( "SELECT `tags` FROM $table" );
260 + $all_tags = $wpdb->get_col( "SELECT tags FROM $table_name" );
130 261
131 - /* Merge all tags into a single array */
262 + // Merge all tags into a single array.
132 263 foreach ( $all_tags as $snippet_tags ) {
133 264 $snippet_tags = code_snippets_build_tags_array( $snippet_tags );
134 265 $tags = array_merge( $snippet_tags, $tags );
135 266 }
136 267
137 - /* Remove duplicate tags */
138 -
139 - return array_values( array_unique( $tags, SORT_REGULAR ) );
268 + // Remove duplicate tags.
269 + $tags = array_values( array_unique( $tags, SORT_REGULAR ) );
270 + wp_cache_set( $cache_key, $tags, CACHE_GROUP );
271 + return $tags;
140 272 }
141 273
142 274 /**
143 - * Make sure that the tags are a valid array
275 + * Make sure that the tags are a valid array.
144 276 *
145 - * @param mixed $tags The tags to convert into an array
277 + * @param array|string $tags The tags to convert into an array.
146 278 *
147 - * @return array The converted tags
279 + * @return array<string> The converted tags.
148 280 *
149 - * @since 2.0
281 + * @since 2.0.0
150 282 */
151 -function code_snippets_build_tags_array( $tags ) {
283 +function code_snippets_build_tags_array( $tags ): array {
152 284
153 - /* If there are no tags set, return an empty array */
285 + /* If there are no tags set, return an empty array. */
154 286 if ( empty( $tags ) ) {
155 287 return array();
156 288 }
157 289
158 - /* If the tags are set as a string, convert them into an array */
290 + /* If the tags are set as a string, convert them into an array. */
159 291 if ( is_string( $tags ) ) {
160 292 $tags = wp_strip_all_tags( $tags );
161 293 $tags = str_replace( ', ', ',', $tags );
162 294 $tags = explode( ',', $tags );
@@ -161,432 +293,805 @@
161 293 $tags = str_replace( ', ', ',', $tags );
162 294 $tags = explode( ',', $tags );
163 295 }
164 296
165 - /* If we still don't have an array, just convert whatever we do have into one */
166 -
297 + /* If we still don't have an array, just convert whatever we do have into one. */
167 298 return (array) $tags;
168 299 }
169 300
170 301 /**
171 302 * Retrieve a single snippets from the database.
172 - * Will return empty snippet object if no snippet
173 - * ID is specified
303 + * Will return empty snippet object if no snippet ID is specified.
304 + * Read operation.
174 305 *
175 - * @param int $id The ID of the snippet to retrieve. 0 to build a new snippet
176 - * @param boolean|null $multisite Retrieve a multisite-wide or site-wide snippet?
306 + * @param int $id The ID of the snippet to retrieve. 0 to build a new snippet.
307 + * @param bool|null $network Retrieve a multisite-wide snippet (true) or site-wide snippet (false).
177 308 *
178 - * @return Code_Snippet A single snippet object
179 - * @since 2.0
309 + * @return ?Snippet A single snippet object.
310 + *
311 + * @since 2.0.0
180 312 */
181 -function get_snippet( $id = 0, $multisite = null ) {
182 - /** @var wpdb $wpdb */
313 +function get_snippet( int $id = 0, ?bool $network = null ): ?Snippet {
183 314 global $wpdb;
184 315
185 316 $id = absint( $id );
186 - $table = code_snippets()->db->get_table_name( $multisite );
317 + $network = validate_network_param( $network );
318 + $table_name = code_snippets()->db->get_table_name( $network );
187 319
188 - if ( 0 !== $id ) {
320 + if ( 0 === $id ) {
321 + // If an invalid ID is provided, then return an empty snippet object.
322 + $snippet = new Snippet();
189 323
190 - /* Retrieve the snippet from the database */
191 - $snippet = $wpdb->get_row( $wpdb->prepare( "SELECT * FROM $table WHERE id = %d", $id ) );
324 + } else {
325 + $cached_snippets = wp_cache_get( "all_snippets_$table_name", CACHE_GROUP );
192 326
193 - /* Unescape the snippet data, ready for use */
194 - $snippet = new Code_Snippet( $snippet );
327 + // Attempt to fetch snippet from the cached list, if it exists.
328 + if ( is_array( $cached_snippets ) ) {
329 + foreach ( $cached_snippets as $snippet ) {
330 + if ( $snippet->id === $id ) {
331 + return apply_filters( 'code_snippets/get_snippet', $snippet, $id, $network );
332 + }
333 + }
334 + }
195 335
196 - } else {
336 + // Otherwise, retrieve the snippet from the database.
337 + // phpcs:disable WordPress.DB.DirectDatabaseQuery.NoCaching
338 + $snippet_data = $wpdb->get_row( $wpdb->prepare( "SELECT * FROM $table_name WHERE id = %d", $id ) );
339 + $snippet = new Snippet( $snippet_data );
340 + }
197 341
198 - /* Get an empty snippet object */
199 - $snippet = new Code_Snippet();
342 + $snippet->network = $network;
343 +
344 + // Load locked from wp_options if snippet has an ID.
345 + if ( $snippet->id > 0 ) {
346 + $snippet->locked = is_snippet_locked( $snippet->id, $network );
200 347 }
201 348
202 - $snippet->network = $multisite;
349 + return apply_filters( 'code_snippets/get_snippet', $snippet, $id, $network );
350 +}
203 351
204 - return apply_filters( 'code_snippets/get_snippet', $snippet, $id, $multisite );
205 -}
206 352
207 353 /**
208 - * Activates a snippet
354 + * Ensure the list of shared network snippets is correct if one has been recently active or deactivated.
355 + * Write operation.
209 356 *
210 - * @param int $id The ID of the snippet to activate
211 - * @param bool|null $multisite Are the snippets multisite-wide or site-wide?
357 + * @access private
212 358 *
213 - * @return int
359 + * @param Snippet[] $snippets Snippets that was recently updated.
214 360 *
215 - * @since 2.0
216 - * @uses $wpdb to set the snippet's active status
361 + * @return bool Whether an update was performed.
217 362 */
218 -function activate_snippet( $id, $multisite = null ) {
219 - /** @var wpdb $wpdb */
220 - global $wpdb;
221 - $db = code_snippets()->db;
222 - $table = $db->get_table_name( $multisite );
363 +function update_shared_network_snippets( array $snippets ): bool {
364 + $shared_ids = [];
365 + $unshared_ids = [];
223 366
224 - /* Retrieve the snippet code from the database for validation before activating */
225 - $row = $wpdb->get_row( $wpdb->prepare( "SELECT code FROM $table WHERE id = %d;", $id ) );
226 - if ( ! $row ) {
367 + if ( ! is_multisite() ) {
227 368 return false;
228 369 }
229 370
230 - $validator = new Code_Snippets_Validator( $row->code );
231 - if ( $validator->validate() ) {
371 + foreach ( $snippets as $snippet ) {
372 + if ( $snippet->network ) {
373 + if ( $snippet->shared_network ) {
374 + $shared_ids[] = $snippet->id;
375 + } else {
376 + $unshared_ids[] = $snippet->id;
377 + }
378 + }
379 + }
380 +
381 + if ( ! $shared_ids && ! $unshared_ids ) {
232 382 return false;
233 383 }
234 384
235 - $wpdb->update( $table, array( 'active' => '1' ), array( 'id' => $id ), array( '%d' ), array( '%d' ) );
385 + $existing_shared_ids = get_site_option( 'shared_network_snippets', [] );
386 + $updated_shared_ids = array_values( array_diff( array_merge( $existing_shared_ids, $shared_ids ), $unshared_ids ) );
236 387
237 - /* Remove snippet from shared network snippet list if it was Network Activated */
238 - if ( $table === $db->ms_table ) {
239 - $shared_network_snippets = get_site_option( 'shared_network_snippets' );
240 - if ( $shared_network_snippets ) {
241 - $shared_network_snippets = array_diff( $shared_network_snippets, array( $id ) );
242 - update_site_option( 'shared_network_snippets', $shared_network_snippets );
388 + if ( $existing_shared_ids === $updated_shared_ids ) {
389 + return false;
390 + }
391 +
392 + update_site_option( 'shared_network_snippets', $updated_shared_ids );
393 +
394 + // Deactivate the snippet on all sites if necessary.
395 + if ( $unshared_ids ) {
396 + $sites = get_sites( [ 'fields' => 'ids' ] );
397 +
398 + foreach ( $sites as $site ) {
399 + switch_to_blog( $site );
400 + $active_shared_ids = get_option( 'active_shared_network_snippets' );
401 +
402 + if ( is_array( $active_shared_ids ) ) {
403 + $active_shared_ids = array_diff( $active_shared_ids, $unshared_ids );
404 + update_option( 'active_shared_network_snippets', $active_shared_ids );
405 + }
406 +
407 + clean_active_snippets_cache( code_snippets()->db->ms_table );
243 408 }
409 +
410 + restore_current_blog();
244 411 }
245 412
246 - do_action( 'code_snippets/activate_snippet', $id, $multisite );
247 413 return true;
248 414 }
249 415
250 416 /**
251 - * Activates multiple snippet.
417 + * Activates a snippet.
418 + * Write operation.
252 419 *
253 - * @param array $ids The IDs of the snippets to activate.
254 - * @param bool|null $multisite Are the snippets multisite-wide or site-wide?
420 + * @param int $id ID of the snippet to activate.
421 + * @param bool|null $network Whether the snippets are multisite-wide (true) or site-wide (false).
255 422 *
256 - * @return array The IDs of the snippets which were successfully activated.
423 + * @return Snippet|string Snippet object on success, error message on failure.
424 + * @since 2.0.0
425 + */
426 +function activate_snippet( int $id, ?bool $network = null ) {
427 + global $wpdb;
428 + $network = validate_network_param( $network );
429 + $table_name = code_snippets()->db->get_table_name( $network );
430 +
431 + // Retrieve the snippet code from the database for validation before activating.
432 + $snippet = get_snippet( $id, $network );
433 +
434 + if ( 0 === $snippet->id ) {
435 + // translators: %d: snippet identifier.
436 + return sprintf( __( 'Could not locate snippet with ID %d.', 'code-snippets' ), $id );
437 + }
438 +
439 + if ( 'php' === $snippet->type ) {
440 + $validator = new Validator( $snippet->code );
441 + if ( $validator->validate() ) {
442 + return __( 'Could not activate snippet: code did not pass validation.', 'code-snippets' );
443 + }
444 + }
445 +
446 + $result = $wpdb->update(
447 + $table_name,
448 + array( 'active' => '1' ),
449 + array( 'id' => $id ),
450 + array( '%d' ),
451 + array( '%d' )
452 + );
453 +
454 + if ( ! $result ) {
455 + return __( 'Could not activate snippet.', 'code-snippets' );
456 + }
457 +
458 + update_shared_network_snippets( [ $snippet ] );
459 + do_action( 'code_snippets/activate_snippet', $snippet, $network );
460 + clean_snippets_cache( $table_name );
461 + return $snippet;
462 +}
463 +
464 +/**
465 + * Activates multiple snippets.
466 + * Write operation.
257 467 *
258 - * @since 2.0
259 - * @uses $wpdb to set the snippet's active status
468 + * @param array<int> $ids The IDs of the snippets to activate.
469 + * @param bool|null $network Whether the snippets are multisite-wide (true) or site-wide (false).
470 + *
471 + * @return Snippet[]|null Snippets which were successfully activated, or null on failure.
472 + *
473 + * @since 2.0.0
260 474 */
261 -function activate_snippets( array $ids, $multisite = null ) {
262 - /** @var wpdb $wpdb */
475 +function activate_snippets( array $ids, ?bool $network = null ): ?array {
263 476 global $wpdb;
264 - $db = code_snippets()->db;
265 - $table = $db->get_table_name( $multisite );
477 + $network = validate_network_param( $network );
478 + $table_name = code_snippets()->db->get_table_name( $network );
266 479
267 - /* Build a SQL query containing all the provided snippet IDs */
268 - $ids_format = implode( ',', array_fill( 0, count( $ids ), '%d' ) );
269 - $rows = $wpdb->get_results( $wpdb->prepare( "SELECT id, code FROM $table WHERE id IN ($ids_format)", $ids ) );
480 + $snippets = get_snippets( $ids, $network );
270 481
271 - if ( ! $rows ) {
272 - return array();
482 + if ( ! $snippets ) {
483 + return null;
273 484 }
274 485
275 - /* Loop through each snippet code and validate individually */
276 - $valid_ids = array();
486 + // Loop through each snippet code and validate individually.
487 + $valid_ids = [];
488 + $valid_snippets = [];
277 489
278 - foreach ( $rows as $row ) {
279 - $validator = new Code_Snippets_Validator( $row->code );
490 + // Names claimed by snippets already accepted into this batch. A snippet is
491 + // otherwise validated only against what PHP has declared so far, which does
492 + // not include the other snippets about to be activated alongside it.
493 + $claimed_identifiers = [];
494 +
495 + foreach ( $snippets as $snippet ) {
496 + // Only PHP is validated. The validator looks for redeclarations of
497 + // existing PHP functions and classes, which says nothing meaningful
498 + // about CSS or JavaScript.
499 + if ( 'php' !== $snippet->type ) {
500 + $valid_ids[] = $snippet->id;
501 + $valid_snippets[] = $snippet;
502 + continue;
503 + }
504 +
505 + $validator = new Validator( $snippet->code, $claimed_identifiers );
280 506 $code_error = $validator->validate();
281 507
282 508 if ( ! $code_error ) {
283 - $valid_ids[] = $row->id;
509 + $claimed_identifiers = $validator->get_claimed_identifiers();
510 + $valid_ids[] = $snippet->id;
511 + $valid_snippets[] = $snippet;
284 512 }
285 513 }
286 514
287 - /* If there are no valid snippets, then we're done */
515 + // If there are no valid snippets, then we're done.
288 516 if ( ! $valid_ids ) {
289 - return $valid_ids;
517 + return null;
290 518 }
291 519
292 - /* Build a SQL query containing all the valid snippet IDs and activate the valid snippets */
520 + // Build a SQL query containing all IDs, as wpdb::update does not support OR conditionals.
293 521 $ids_format = implode( ',', array_fill( 0, count( $valid_ids ), '%d' ) );
294 - $wpdb->query( $wpdb->prepare( "UPDATE $table SET active = 1 WHERE id IN ($ids_format)", $valid_ids ) );
295 522
296 - /* Remove snippet from shared network snippet list if it was Network Activated */
297 - if ( $table === $db->ms_table ) {
298 - $shared_network_snippets = get_site_option( 'shared_network_snippets' );
299 - if ( $shared_network_snippets ) {
300 - $shared_network_snippets = array_diff( $shared_network_snippets, $valid_ids );
301 - update_site_option( 'shared_network_snippets', $shared_network_snippets );
302 - }
523 + // phpcs:disable WordPress.DB.PreparedSQLPlaceholders.UnfinishedPrepare
524 + $rows_updated = $wpdb->query( $wpdb->prepare( "UPDATE $table_name SET active = 1 WHERE id IN ($ids_format)", $valid_ids ) );
525 +
526 + if ( ! $rows_updated ) {
527 + return null;
303 528 }
304 529
305 - do_action( 'code_snippets/activate_snippets', $valid_ids, $multisite );
530 + update_shared_network_snippets( $valid_snippets );
531 + do_action( 'code_snippets/activate_snippets', $valid_snippets, $table_name );
532 + clean_snippets_cache( $table_name );
306 533 return $valid_ids;
307 534 }
308 535
309 536 /**
310 - * Deactivate a snippet
537 + * Deactivate a snippet.
538 + * Write operation.
311 539 *
312 - * @param int $id The ID of the snippet to deactivate
313 - * @param bool|null $multisite Are the snippets multisite-wide or site-wide?
540 + * @param int $id ID of the snippet to deactivate.
541 + * @param bool|null $network Whether the snippets are multisite-wide (true) or site-wide (false).
314 542 *
315 - * @since 2.0
316 - * @uses $wpdb to set the snippets' active status
543 + * @return Snippet|null Snippet that was deactivated on success, or null on failure.
317 544 *
545 + * @since 2.0.0
318 546 */
319 -function deactivate_snippet( $id, $multisite = null ) {
320 - /** @var wpdb $wpdb */
547 +function deactivate_snippet( int $id, ?bool $network = null ): ?Snippet {
321 548 global $wpdb;
322 - $db = code_snippets()->db;
323 - $table = $db->get_table_name( $multisite );
549 + $network = validate_network_param( $network );
550 + $table = code_snippets()->db->get_table_name( $network );
324 551
325 - /* Set the snippet to active */
552 + // Set the snippet to inactive.
553 + $result = $wpdb->update(
554 + $table,
555 + array( 'active' => '0' ),
556 + array( 'id' => $id ),
557 + array( '%d' ),
558 + array( '%d' )
559 + );
326 560
327 - $wpdb->update( $table, array( 'active' => '0' ), array( 'id' => $id ), array( '%d' ), array( '%d' ) );
561 + if ( ! $result ) {
562 + return null;
563 + }
328 564
329 - /* Update the recently active list */
565 + // Update the recently active list.
566 + $snippet = get_snippet( $id );
567 + $recently_active = get_self_option( $network, 'recently_active_snippets', [] );
568 + $recently_active[ $id ] = time();
569 + update_self_option( $network, 'recently_active_snippets', $recently_active );
330 570
331 - $recently_active = array( $id => time() );
571 + update_shared_network_snippets( [ $snippet ] );
572 + do_action( 'code_snippets/deactivate_snippet', $id, $network );
573 + clean_snippets_cache( $table );
332 574
333 - if ( $table === $db->table ) {
575 + return $snippet;
576 +}
334 577
335 - update_option(
336 - 'recently_activated_snippets',
337 - $recently_active + (array) get_option( 'recently_activated_snippets', array() )
338 - );
578 +/**
579 + * Deletes a snippet from the database.
580 + * Write operation.
581 + *
582 + * @param int $id ID of the snippet to delete.
583 + * @param bool|null $network Delete from network-wide (true) or site-wide (false) table.
584 + *
585 + * @return bool Whether the snippet was deleted successfully.
586 + *
587 + * @since 2.0.0
588 + */
589 +function delete_snippet( int $id, ?bool $network = null ): bool {
590 + global $wpdb;
591 + $network = validate_network_param( $network );
592 + $table = code_snippets()->db->get_table_name( $network );
339 593
340 - } elseif ( $table === $db->ms_table ) {
594 + $snippet = get_snippet( $id, $network );
341 595
342 - update_site_option(
343 - 'recently_activated_snippets',
344 - $recently_active + (array) get_site_option( 'recently_activated_snippets', array() )
345 - );
596 + // Prevent deletion of locked snippets.
597 + if ( $snippet->locked ) {
598 + return false;
346 599 }
347 600
348 - do_action( 'code_snippets/deactivate_snippet', $id, $multisite );
601 + $result = $wpdb->delete(
602 + $table,
603 + array( 'id' => $id ),
604 + array( '%d' )
605 + );
606 +
607 + if ( $result ) {
608 + do_action( 'code_snippets/delete_snippet', $snippet, $network );
609 + clean_snippets_cache( $table );
610 +
611 + $recently_active = get_self_option( $network, 'recently_active_snippets', [] );
612 +
613 + if ( isset( $recently_active[ $id ] ) ) {
614 + unset( $recently_active[ $id ] );
615 + update_self_option( $network, 'recently_active_snippets', $recently_active );
616 + }
617 + }
618 +
619 + return (bool) $result;
349 620 }
350 621
351 622 /**
352 - * Deletes a snippet from the database
623 + * Trashes a snippet from the database.
624 + * Write operation.
353 625 *
354 - * @param int $id The ID of the snippet to delete
355 - * @param bool|null $multisite Delete from site-wide or network-wide table?
626 + * @param int $id ID of the snippet to trash.
627 + * @param bool|null $network Trash from network-wide (true) or site-wide (false) table.
356 628 *
357 - * @since 2.0
629 + * @return bool Whether the snippet was trashed successfully.
630 + *
631 + * @since 3.8.0
358 632 */
359 -function delete_snippet( $id, $multisite = null ) {
360 - /** @var wpdb $wpdb */
633 +function trash_snippet( int $id, ?bool $network = null ): bool {
361 634 global $wpdb;
635 + $network = validate_network_param( $network );
636 + $table = code_snippets()->db->get_table_name( $network );
362 637
363 - $wpdb->delete(
364 - code_snippets()->db->get_table_name( $multisite ),
365 - array( 'id' => $id ),
366 - array( '%d' )
367 - );
638 + $snippet = get_snippet( $id, $network );
368 639
369 - do_action( 'code_snippets/delete_snippet', $id, $multisite );
640 + // Prevent trashing of locked snippets.
641 + if ( $snippet->locked ) {
642 + return false;
643 + }
644 +
645 + $wpdb->update( $table, [ 'active' => '-1' ], [ 'id' => $id ], [ '%d' ] );
646 +
647 + do_action( 'code_snippets/trash_snippet', $snippet, $network );
648 + clean_snippets_cache( $table );
649 +
650 + return true;
370 651 }
371 652
372 653 /**
654 + * Restore a trashed snippet by setting its active status back to 0 (inactive).
655 + * Write operation.
656 + *
657 + * @param int $id Snippet ID to restore.
658 + * @param bool|null $network Whether the snippet is multisite-wide (true) or site-wide (false).
659 + *
660 + * @return bool Whether the restore was successful.
661 + *
662 + * @since 3.8.0
663 + */
664 +function restore_snippet( int $id, ?bool $network = null ): bool {
665 + global $wpdb;
666 + $network = validate_network_param( $network );
667 + $table = code_snippets()->db->get_table_name( $network );
668 +
669 + $result = $wpdb->update( $table, [ 'active' => '0' ], [ 'id' => $id ], [ '%d' ] );
670 +
671 + if ( $result ) {
672 + do_action( 'code_snippets/restore_snippet', $id, $network );
673 + clean_snippets_cache( $table );
674 + }
675 +
676 + return (bool) $result;
677 +}
678 +
679 +/**
680 + * Test snippet code for errors, augmenting the snippet object.
681 + *
682 + * @param Snippet $snippet Snippet object.
683 + */
684 +function test_snippet_code( Snippet $snippet ) {
685 + $snippet->code_error = null;
686 + $snippet->code_error_trace = null;
687 +
688 + if ( 'php' !== $snippet->type ) {
689 + return;
690 + }
691 +
692 + $validator = new Validator( $snippet->code );
693 + $result = $validator->validate();
694 +
695 + if ( $result ) {
696 + $snippet->code_error = [ $result['message'], $result['line'] ];
697 + $snippet->code_error_trace = ( new Exception() )->getTraceAsString();
698 + }
699 +
700 + if ( ! $snippet->code_error && 'single-use' !== $snippet->scope ) {
701 + $result = execute_snippet( $snippet->code, $snippet->id, true );
702 +
703 + if ( $result instanceof Throwable ) {
704 + $snippet->code_error = [
705 + ucfirst( rtrim( $result->getMessage(), '.' ) ) . '.',
706 + $result->getLine(),
707 + ];
708 + $snippet->code_error_trace = $result->getTraceAsString();
709 + }
710 + }
711 +}
712 +
713 +/**
373 714 * Saves a snippet to the database.
715 + * Write operation.
374 716 *
375 - * @param Code_Snippet $snippet The snippet to add/update to the database
717 + * @param Snippet|array<string, mixed> $snippet The snippet to add/update to the database.
376 718 *
377 - * @return int The ID of the snippet
378 - * @since 2.0
719 + * @return Snippet|null Updated snippet.
379 720 *
380 - * @uses $wpdb to update/add the snippet to the database
721 + * @since 2.0.0
381 722 */
382 -function save_snippet( Code_Snippet $snippet ) {
383 - /** @var wpdb $wpdb */
723 +function save_snippet( $snippet ): ?Snippet {
384 724 global $wpdb;
725 + $table = code_snippets()->db->get_table_name( $snippet->network );
385 726
386 - $table = code_snippets()->db->get_table_name( $snippet->network );
727 + if ( ! $snippet instanceof Snippet ) {
728 + $snippet = new Snippet( $snippet );
729 + }
387 730
388 - /* Update the last modification date and the creation date if necessary */
731 + // Prevent modification of locked snippets (allow unlocking itself).
732 + if ( 0 !== $snippet->id ) {
733 + $old_snippet = get_snippet( $snippet->id, $snippet->network );
734 +
735 + if ( $old_snippet->locked && $snippet->locked ) {
736 + // If it was locked and the new request still wants it locked,
737 + // prevent changes to sensitive fields (code and name).
738 + $snippet->code = $old_snippet->code;
739 + $snippet->name = $old_snippet->name;
740 + }
741 + }
742 +
743 + // Update the last modification date if necessary.
389 744 $snippet->update_modified();
390 745
391 - /* Build array of data to insert */
392 - $data = array(
393 - 'name' => $snippet->name,
394 - 'description' => $snippet->desc,
395 - 'code' => $snippet->code,
396 - 'tags' => $snippet->tags_list,
397 - 'scope' => $snippet->scope,
398 - 'priority' => $snippet->priority,
399 - 'active' => intval( $snippet->active ),
400 - 'modified' => $snippet->modified,
401 - );
746 + // Strip any wrapper markup that came along with the pasted code.
747 + $snippet->code = normalize_snippet_code( $snippet->code, $snippet->type );
402 748
403 - /* Create a new snippet if the ID is not set */
749 + if ( 'php' === $snippet->type ) {
750 + // Deactivate snippet if code contains errors.
751 + if ( $snippet->active && 'single-use' !== $snippet->scope ) {
752 + test_snippet_code( $snippet );
753 +
754 + if ( $snippet->code_error ) {
755 + $snippet->active = 0;
756 + }
757 + }
758 + }
759 +
760 + // Increment the revision number unless revision = 1 or revision is not set.
761 + if ( $snippet->revision && $snippet->revision > 1 ) {
762 + $snippet->increment_revision();
763 + }
764 +
765 + // Shared network snippets are always considered inactive.
766 + $snippet->active = $snippet->active && ! $snippet->shared_network;
767 +
768 + // Snippet authorship: track who created and who last edited each snippet.
769 + // `created_by` is fixed at insert time; `updated_by` reflects every save.
770 + $current_user_id = get_current_user_id();
771 + $author_id = $current_user_id > 0 ? $current_user_id : null;
772 +
773 + // Build the list of data to insert (excluding locked, which is stored in wp_options).
774 + $data = [
775 + 'name' => $snippet->name,
776 + 'description' => $snippet->desc,
777 + 'code' => $snippet->code,
778 + 'tags' => $snippet->tags_list,
779 + 'scope' => $snippet->scope,
780 + 'condition_id' => intval( $snippet->condition_id ),
781 + 'priority' => $snippet->priority,
782 + 'active' => intval( $snippet->active ),
783 + 'modified' => $snippet->modified,
784 + 'revision' => $snippet->revision,
785 + 'cloud_id' => $snippet->cloud_id_owner ? $snippet->cloud_id_owner : null,
786 + 'updated_by' => $author_id,
787 + ];
788 +
789 + // Create a new snippet if the ID is not set.
404 790 if ( 0 === $snippet->id ) {
405 - $wpdb->insert( $table, $data, '%s' );
791 + $data['created_by'] = $author_id;
792 + $result = $wpdb->insert( $table, $data, '%s' );
793 + if ( false === $result ) {
794 + return null;
795 + }
796 +
406 797 $snippet->id = $wpdb->insert_id;
798 + $updated = get_snippet( $snippet->id, $snippet->network );
799 + $updated->code_error = $snippet->code_error;
800 + $updated->code_error_trace = $snippet->code_error_trace;
801 + do_action( 'code_snippets/create_snippet', $updated, $table );
407 802
408 - do_action( 'code_snippets/create_snippet', $snippet->id, $table );
803 + if ( $updated->id > 0 ) {
804 + set_snippet_locked( $updated->id, $updated->locked, $updated->network );
805 + }
409 806 } else {
807 + // Otherwise, update the snippet data.
808 + $existing = get_snippet( $snippet->id, $snippet->network );
410 809
411 - /* Otherwise update the snippet data */
412 - $wpdb->update( $table, $data, array( 'id' => $snippet->id ), null, array( '%d' ) );
810 + set_snippet_locked( $snippet->id, $snippet->locked, $snippet->network );
811 + $wpdb->update( $table, $data, [ 'id' => $snippet->id ], null, [ '%d' ] );
413 812
414 - do_action( 'code_snippets/update_snippet', $snippet->id, $table );
813 + $updated = get_snippet( $snippet->id, $snippet->network );
814 + $updated->code_error = $snippet->code_error;
815 + $updated->code_error_trace = $snippet->code_error_trace;
816 +
817 + do_action( 'code_snippets/update_snippet', $updated, $table, $existing, $snippet );
818 +
819 + if ( ! $updated->active && $existing->active ) {
820 + $recently_active = get_self_option( $updated->network, 'recently_active_snippets', [] );
821 + $recently_active[ $updated->id ] = time();
822 + update_self_option( $updated->network, 'recently_active_snippets', $recently_active );
823 + } elseif ( ! $updated->active ) {
824 + $recently_active = get_self_option( $updated->network, 'recently_active_snippets', [] );
825 +
826 + if ( isset( $recently_active[ $updated->id ] ) ) {
827 + unset( $recently_active[ $updated->id ] );
828 + update_self_option( $updated->network, 'recently_active_snippets', $recently_active );
829 + }
830 + }
415 831 }
416 832
417 - return $snippet->id;
833 + update_shared_network_snippets( [ $updated ] );
834 + clean_snippets_cache( $table );
835 + return $updated;
418 836 }
419 837
420 838 /**
421 - * Update a snippet entry given a list of fields
839 + * Resolve a user ID to a compact author object for display.
422 840 *
423 - * @param int $snippet_id The ID of the snippet to update
424 - * @param array $fields An array of fields mapped to their values
425 - * @param bool $network Whether the snippet is network-wide or site-wide
841 + * Returns the user's ID, display name, and avatar URL, or null when the ID is
842 + * empty or the user no longer exists. Results are cached per request, so a list
843 + * of snippets sharing authors only triggers one lookup per distinct user.
844 + *
845 + * @param int $user_id User ID to resolve.
846 + *
847 + * @return array{id: int, display_name: string, avatar_url: string}|null
426 848 */
427 -function update_snippet_fields( $snippet_id, $fields, $network = null ) {
428 - /** @var wpdb $wpdb */
429 - global $wpdb;
849 +function get_snippet_author( int $user_id ): ?array {
850 + static $cache = [];
430 851
431 - $table = code_snippets()->db->get_table_name( $network );
852 + if ( $user_id <= 0 ) {
853 + return null;
854 + }
432 855
433 - /* Build a new snippet object for the validation */
434 - $snippet = new Code_Snippet();
435 - $snippet->id = $snippet_id;
856 + if ( ! array_key_exists( $user_id, $cache ) ) {
857 + $user = get_userdata( $user_id );
858 + $cache[ $user_id ] = $user ?
859 + [
860 + 'id' => $user_id,
861 + 'display_name' => $user->display_name,
862 + 'avatar_url' => (string) get_avatar_url( $user_id, [ 'size' => 32 ] ),
863 + ] :
864 + null;
865 + }
436 866
437 - /* Validate fields through the snippet class and copy them into a clean array */
438 - $clean_fields = array();
867 + return $cache[ $user_id ];
868 +}
439 869
440 - foreach ( $fields as $field => $value ) {
870 +/**
871 + * Execute a snippet.
872 + * Execute operation.
873 + *
874 + * Code must NOT be escaped, as it will be executed directly.
875 + *
876 + * @param string $code Snippet code to execute.
877 + * @param int $id Snippet ID.
878 + * @param bool $force Force snippet execution, even if save mode is active.
879 + *
880 + * @return Throwable|mixed Code error if encountered during execution, or result of snippet execution otherwise.
881 + *
882 + * @since 2.0.0
883 + * @noinspection PhpUndefinedConstantInspection
884 + *
885 + * phpcs:disable Squiz.PHP.Eval.Discouraged
886 + */
887 +function execute_snippet( string $code, int $id = 0, bool $force = false ) {
888 + /**
889 + * Do not continue if safe mode is active.
890 + *
891 + * @noinspection PhpUndefinedConstantInspection
892 + */
893 + if ( empty( $code ) || ( ! $force && defined( 'CODE_SNIPPETS_SAFE_MODE' ) && CODE_SNIPPETS_SAFE_MODE ) ) {
894 + return false;
895 + }
441 896
442 - if ( $snippet->set_field( $field, $value ) ) {
443 - $clean_fields[ $field ] = $snippet->$field;
444 - }
897 + ob_start();
898 +
899 + try {
900 + $result = eval( $code );
901 + } catch ( Throwable $throwable ) {
902 + $result = $throwable;
445 903 }
446 904
447 - /* Update the snippet in the database */
448 - $wpdb->update( $table, $clean_fields, array( 'id' => $snippet->id ), null, array( '%d' ) );
449 - do_action( 'code_snippets/update_snippet', $snippet->id, $table );
905 + ob_end_clean();
906 +
907 + do_action( 'code_snippets/after_execute_snippet', $code, $id, $result );
908 + return $result;
450 909 }
451 910
452 911 /**
453 - * Execute a snippet
912 + * Retrieve a single snippets from the database using its cloud ID.
454 913 *
455 - * Code must NOT be escaped, as
456 - * it will be executed directly
914 + * Read operation.
457 915 *
458 - * @param string $code The snippet code to execute
459 - * @param int $id The snippet ID
460 - * @param bool $catch_output Whether to attempt to suppress the output of execution using buffers
916 + * @param string $cloud_id The Cloud ID of the snippet to retrieve.
917 + * @param bool|null $multisite Retrieve a multisite-wide snippet (true) or site-wide snippet (false).
461 918 *
462 - * @return mixed The result of the code execution
463 - * @since 2.0
919 + * @return Snippet|null A single snippet object or null if no snippet was found.
464 920 *
921 + * @since 3.5.0
465 922 */
466 -function execute_snippet( $code, $id = 0, $catch_output = true ) {
923 +function get_snippet_by_cloud_id( string $cloud_id, ?bool $multisite = null ): ?Snippet {
924 + global $wpdb;
467 925
468 - if ( empty( $code ) || defined( 'CODE_SNIPPETS_SAFE_MODE' ) && CODE_SNIPPETS_SAFE_MODE ) {
469 - return false;
470 - }
926 + $multisite = validate_network_param( $multisite );
927 + $table_name = code_snippets()->db->get_table_name( $multisite );
471 928
472 - if ( $catch_output ) {
473 - ob_start();
929 + $cached_snippets = wp_cache_get( "all_snippets_$table_name", CACHE_GROUP );
930 +
931 + // Attempt to fetch snippet from the cached list, if it exists.
932 + if ( is_array( $cached_snippets ) ) {
933 + foreach ( $cached_snippets as $snippet ) {
934 + if ( $snippet->cloud_id === $cloud_id ) {
935 + return apply_filters( 'code_snippets/get_snippet_by_cloud_id', $snippet, $cloud_id, $multisite );
936 + }
937 + }
474 938 }
475 939
476 - $result = eval( $code );
940 + // Otherwise, search for the snippet from the database.
941 + $snippet_data = $wpdb->get_row( $wpdb->prepare( "SELECT * FROM $table_name WHERE cloud_id = %s", $cloud_id ) ); // cache pass, db call ok.
942 + $snippet = $snippet_data ? new Snippet( $snippet_data ) : null;
477 943
478 - if ( $catch_output ) {
479 - ob_end_clean();
944 + // Load locked from wp_options if snippet exists.
945 + if ( $snippet && $snippet->id > 0 ) {
946 + $snippet->network = $multisite;
947 + $snippet->locked = is_snippet_locked( $snippet->id, $multisite );
480 948 }
481 949
482 - do_action( 'code_snippets/after_execute_snippet', $id, $code, $result );
483 -
484 - return $result;
950 + return apply_filters( 'code_snippets/get_snippet_by_cloud_id', $snippet, $cloud_id, $multisite );
485 951 }
486 952
487 953 /**
488 - * Run the active snippets
954 + * Remove the wrapper markup that a snippet's code does not need.
489 955 *
490 - * @return bool true on success, false on failure
491 - * @since 2.0
956 + * Snippet code is stored bare: PHP is evaluated already inside PHP, and CSS and
957 + * JavaScript are wrapped in their own tags when printed. People increasingly
958 + * paste code generated by an AI assistant, which almost always arrives wrapped
959 + * in the tags for its language and sometimes in a markdown code fence as well.
960 + *
961 + * Leaving that markup in place fails differently depending on the type, and all
962 + * three ways are unhelpful. PHP raises a syntax error, so the snippet saves and
963 + * is then quietly deactivated. CSS and JavaScript have no syntax check at all,
964 + * so they save as active and emit doubled tags on the front end with nothing
965 + * reported anywhere.
966 + *
967 + * Only a wrapper around the whole snippet is removed. Tags appearing partway
968 + * through the code are left alone, since those are the author's own.
969 + *
970 + * @param string $code Snippet code as provided.
971 + * @param string $type Snippet type: php, css, js or html.
972 + *
973 + * @return string Code with any surrounding wrapper markup removed.
492 974 */
493 -function execute_active_snippets() {
975 +function normalize_snippet_code( string $code, string $type ): string {
976 + // A markdown fence around the whole snippet, as copied from a chat window.
977 + // The closing fence only goes when an opening one was there: on its own it
978 + // is the author's content, as in an HTML snippet ending in backticks.
979 + $code = preg_replace( '/\A\s*```[a-z]*[ \t]*\R/i', '', $code, 1, $fenced );
494 980
495 - /* Bail early if safe mode is active */
496 - if ( defined( 'CODE_SNIPPETS_SAFE_MODE' ) && CODE_SNIPPETS_SAFE_MODE || ! apply_filters( 'code_snippets/execute_snippets', true ) ) {
497 - return false;
981 + if ( $fenced ) {
982 + $code = preg_replace( '/\R\s*```\s*\z/', '', $code );
498 983 }
499 984
500 - /** @var wpdb $wpdb */
501 - global $wpdb;
502 - $db = code_snippets()->db;
985 + switch ( $type ) {
986 + case 'php':
987 + // `php` is matched as a whole word so that `<?phpinfo()` is not
988 + // mistaken for an opening tag followed by `info()`.
989 + $code = preg_replace( '/\A\s*<\?(?:php\b)?/i', '', $code );
990 + $code = preg_replace( '/\?>\s*\z/', '', $code );
991 + break;
503 992
504 - $current_scope = is_admin() ? 'admin' : 'front-end';
505 - $results = array();
993 + case 'css':
994 + $code = preg_replace( '/\A\s*<style\b[^>]*>/i', '', $code );
995 + $code = preg_replace( '/<\/style\s*>\s*\z/i', '', $code );
996 + break;
506 997
507 - /* Fetch snippets from site table */
508 - if ( $wpdb->get_var( "SHOW TABLES LIKE '$db->table'" ) === $db->table ) {
509 - $results[ $db->table ] = $wpdb->get_results(
510 - $wpdb->prepare(
511 - "
512 - SELECT id, code, scope
513 - FROM $db->table WHERE scope IN ('global', 'single-use', %s)
514 - AND active = 1
515 - ORDER BY priority, id",
516 - $current_scope
517 - ),
518 - ARRAY_A
519 - );
998 + case 'js':
999 + $code = preg_replace( '/\A\s*<script\b[^>]*>/i', '', $code );
1000 + $code = preg_replace( '/<\/script\s*>\s*\z/i', '', $code );
1001 + break;
520 1002 }
521 1003
522 - /* Fetch snippets from the network table */
523 - if ( is_multisite() && $wpdb->get_var( "SHOW TABLES LIKE '$db->ms_table'" ) === $db->ms_table ) {
524 - $active_shared_ids = get_option( 'active_shared_network_snippets', array() );
1004 + // Drop the single line break left behind by an opening tag on its own line,
1005 + // so the stored code does not gain a blank first line each time.
1006 + return preg_replace( '/\A\R/', '', $code );
1007 +}
525 1008
526 - /* If there are active shared snippets, include them in the query */
527 - if ( is_array( $active_shared_ids ) && count( $active_shared_ids ) ) {
1009 +/**
1010 + * Update a snippet entry given a list of fields.
1011 + * Write operation.
1012 + *
1013 + * @param int $snippet_id ID of the snippet to update.
1014 + * @param array<string, mixed> $fields An array of fields mapped to their values.
1015 + * @param bool|null $network Update in network-wide (true) or site-wide (false) table.
1016 + */
1017 +function update_snippet_fields( int $snippet_id, array $fields, ?bool $network = null ) {
1018 + global $wpdb;
528 1019
529 - /* Build a list of "%d, %d, %d ..." for every active network shared snippet we have */
530 - $active_shared_ids_format = implode( ',', array_fill( 0, count( $active_shared_ids ), '%d' ) );
1020 + $network = validate_network_param( $network );
1021 + $table = code_snippets()->db->get_table_name( $network );
531 1022
532 - /* Add the scope number to the IDs array, so that it is the first variable in the query */
533 - array_unshift( $active_shared_ids, $current_scope );
1023 + // Build a new snippet object for the validation.
1024 + $snippet = new Snippet();
1025 + $snippet->id = $snippet_id;
534 1026
535 - $results[ $db->ms_table ] = $wpdb->get_results(
536 - $wpdb->prepare(
537 - "
538 - SELECT id, code, scope
539 - FROM $db->ms_table WHERE scope IN ('global', 'single-use', %s)
540 - AND (active = 1 OR id IN ($active_shared_ids_format))
541 - ORDER BY priority, id",
542 - $active_shared_ids
543 - ),
544 - ARRAY_A
545 - );
1027 + // Validate fields through the snippet class and copy them into a clean array.
1028 + $clean_fields = array();
1029 + $locked_value = null;
546 1030
547 - array_shift( $active_shared_ids ); // remove it afterwards as we need this variable later
1031 + foreach ( $fields as $field => $value ) {
1032 + // Handle locked separately (stored in wp_options).
1033 + if ( 'locked' === $field ) {
1034 + if ( $snippet->set_field( $field, $value ) ) {
1035 + $locked_value = $snippet->$field;
1036 + }
1037 + continue;
1038 + }
548 1039
549 - } else {
550 - $results[ $db->ms_table ] = $wpdb->get_results(
551 - $wpdb->prepare(
552 - "
553 - SELECT id, code, scope
554 - FROM $db->ms_table WHERE scope IN ('global', 'single-use', %s)
555 - AND active = 1
556 - ORDER BY priority, id",
557 - $current_scope
558 - ),
559 - ARRAY_A
560 - );
1040 + if ( $snippet->set_field( $field, $value ) ) {
1041 + $clean_fields[ $field ] = $snippet->$field;
561 1042 }
562 1043 }
563 1044
564 - foreach ( $results as $table_name => $active_snippets ) {
565 - if ( ! is_array( $active_snippets ) ) {
566 - continue;
567 - }
1045 + // Update the snippet in the database (excluding locked).
1046 + if ( ! empty( $clean_fields ) ) {
1047 + $wpdb->update( $table, $clean_fields, array( 'id' => $snippet->id ), null, array( '%d' ) );
1048 + }
568 1049
569 - /* Loop through the returned snippets and execute the PHP code */
570 - foreach ( $active_snippets as $snippet ) {
571 - $snippet_id = intval( $snippet['id'] );
572 - $code = $snippet['code'];
1050 + // Save locked to wp_options if it was provided.
1051 + if ( null !== $locked_value ) {
1052 + set_snippet_locked( $snippet->id, $locked_value, $network );
1053 + }
573 1054
574 - // if the snippet is a single-use snippet, deactivate it before execution to ensure that the process always happens
575 - if ( 'single-use' === $snippet['scope'] ) {
576 - if ( $table_name === $db->ms_table && isset( $active_shared_ids ) && in_array( $snippet_id, $active_shared_ids, true ) ) {
577 - unset( $active_shared_ids[ array_search( $snippet_id, $active_shared_ids, true ) ] );
578 - $active_shared_ids = array_values( $active_shared_ids );
579 - update_option( 'active_shared_network_snippets', $active_shared_ids );
580 - } else {
581 - $wpdb->update( $table_name, array( 'active' => '0' ), array( 'id' => $snippet_id ), array( '%d' ), array( '%d' ) );
582 - }
583 - }
1055 + clean_snippets_cache( $table );
1056 + $updated = get_snippet( $snippet->id, $network );
1057 + if ( $updated->id ) {
1058 + do_action( 'code_snippets/update_snippet', $updated, $table );
1059 + }
1060 +}
584 1061
585 - if ( apply_filters( 'code_snippets/allow_execute_snippet', true, $snippet_id, $table_name ) ) {
586 - execute_snippet( $code, $snippet_id );
587 - }
588 - }
1062 +/**
1063 + * Evaluate a snippet by loading it from the filesystem.
1064 + *
1065 + * @param string $code Snippet code.
1066 + * @param string $file Snippet filename.
1067 + * @param int $id Snippet ID.
1068 + * @param bool $force Force snippet execution, even if save mode is active.
1069 + *
1070 + * @return bool|Exception|Throwable|null Code error if encountered during execution, or result of snippet execution otherwise.
1071 + */
1072 +function execute_snippet_from_flat_file( string $code, string $file, int $id = 0, bool $force = false ) {
1073 + if ( ! is_file( $file ) ) {
1074 + execute_snippet( $code, $id, $force );
1075 + return true;
589 1076 }
590 1077
591 - return true;
1078 + /* @noinspection PhpUndefinedConstantInspection */
1079 + if ( ! $force && defined( 'CODE_SNIPPETS_SAFE_MODE' ) && CODE_SNIPPETS_SAFE_MODE ) {
1080 + return false;
1081 + }
1082 +
1083 + ob_start();
1084 +
1085 + try {
1086 + require_once $file;
1087 + $result = null;
1088 + } catch ( Throwable $throwable ) {
1089 + $result = $throwable;
1090 + }
1091 +
1092 + ob_end_clean();
1093 +
1094 + do_action( 'code_snippets/after_execute_snippet_from_flat_file', $file, $id );
1095 +
1096 + return $result ?? null;
592 1097 }