| @@ -1,359 +1,401 @@ | ||
| 1 | 1 | <?php |
| 2 | -/* | |
| 3 | -Plugin Name: CryptX | |
| 4 | -Plugin URI: http://weber-nrw/wordpress/cryptx/ | |
| 5 | -Description: No more SPAM by spiders scanning you site for email adresses. With CryptX you can hide all your email adresses, with and without a mailto-link, by converting them using javascript or UNICODE. Although you can choose to add a mailto-link to all unlinked email adresses with only one klick at the settings. That's great, isn't it? | |
| 6 | -Version: 1.2 | |
| 7 | -Author: Ralf Weber | |
| 8 | -Author URI: http://weber-nrw.de/ | |
| 9 | -*/ | |
| 2 | +/** | |
| 3 | + * Plugin Name: CryptX | |
| 4 | + * Plugin URI: https://wordpress.org/plugins/cryptx/ | |
| 5 | + * Description: CryptX encrypts email addresses in your posts, pages, comments, and text widgets to protect them from spam bots while keeping them readable for your visitors. | |
| 6 | + * Version: 4.2.1 | |
| 7 | + * Requires at least: 6.7 | |
| 8 | + * Tested up to: 7.1 | |
| 9 | + * Requires PHP: 8.1 | |
| 10 | + * Author: Ralf Weber | |
| 11 | + * Author URI: https://weber-nrw.de/ | |
| 12 | + * License: GPL v2 or later | |
| 13 | + * License URI: https://www.gnu.org/licenses/gpl-2.0.html | |
| 14 | + * Text Domain: cryptx | |
| 15 | + * | |
| 16 | + * CryptX is free software: you can redistribute it and/or modify | |
| 17 | + * it under the terms of the GNU General Public License as published by | |
| 18 | + * the Free Software Foundation, either version 2 of the License, or | |
| 19 | + * any later version. | |
| 20 | + * | |
| 21 | + * CryptX is distributed in the hope that it will be useful, | |
| 22 | + * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 23 | + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
| 24 | + * GNU General Public License for more details. | |
| 25 | + * | |
| 26 | + * You should have received a copy of the GNU General Public License | |
| 27 | + * along with CryptX. If not, see https://www.gnu.org/licenses/gpl-2.0.html. | |
| 28 | + * | |
| 29 | + * @package CryptX | |
| 30 | + * @since 1.0.0 | |
| 31 | + */ | |
| 10 | 32 | |
| 11 | -///////////////////////////////////////////////////////////////////////////// | |
| 12 | - | |
| 13 | -/** | |
| 14 | -* @internal prevent from direct calls | |
| 15 | -*/ | |
| 33 | +// Prevent direct access | |
| 16 | 34 | if (!defined('ABSPATH')) { |
| 17 | - return ; | |
| 18 | - } | |
| 35 | + exit; | |
| 36 | +} | |
| 19 | 37 | |
| 20 | -/** | |
| 21 | -* @internal prevent from second inclusion | |
| 22 | -*/ | |
| 23 | -if (!class_exists('cryptX')) { | |
| 38 | +// Plugin constants | |
| 39 | +define('CRYPTX_VERSION', '4.2.1'); | |
| 40 | +define('CRYPTX_PLUGIN_FILE', __FILE__); | |
| 41 | +define('CRYPTX_PLUGIN_BASENAME', plugin_basename(__FILE__)); | |
| 42 | +define('CRYPTX_BASENAME', plugin_basename(__FILE__)); // Add this missing constant | |
| 43 | +define('CRYPTX_DIR_PATH', plugin_dir_path(__FILE__)); | |
| 44 | +define('CRYPTX_DIR_URL', plugin_dir_url(__FILE__)); | |
| 45 | +define('CRYPTX_BASEFOLDER', dirname(CRYPTX_PLUGIN_BASENAME)); | |
| 24 | 46 | |
| 25 | -///////////////////////////////////////////////////////////////////////////// | |
| 47 | +// Minimum requirements. Keep these in sync with the plugin header above and | |
| 48 | +// with "Requires at least" / "Requires PHP" in readme.txt. They are defined | |
| 49 | +// once and used both for the check and for the notice, so the number shown to | |
| 50 | +// the user cannot drift away from the number actually enforced. | |
| 51 | +define('CRYPTX_MIN_PHP', '8.1'); | |
| 52 | +define('CRYPTX_MIN_WP', '6.7'); | |
| 26 | 53 | |
| 27 | -load_plugin_textdomain('cryptx', PLUGINDIR . '/' . dirname(plugin_basename (__FILE__)) ); | |
| 28 | - | |
| 29 | -$cryptX_var = (array) get_option('cryptX'); | |
| 30 | - | |
| 31 | 54 | /** |
| 32 | -* "CryptX" WordPress Plugin | |
| 33 | -* | |
| 34 | -* @author Ralf Weber <ralf@weber-nrw.de> | |
| 35 | -* @license http://opensource.org/licenses/gpl-license.php GNU Public License | |
| 36 | -*/ | |
| 37 | -Class cryptX { | |
| 55 | + * Shows an admin notice to whoever is in a position to act on it. | |
| 56 | + * | |
| 57 | + * Registered on both admin_notices and network_admin_notices. Without the | |
| 58 | + * second, a network administrator working in the network backend -- the only | |
| 59 | + * person who can deactivate a network-activated plugin -- never saw that the | |
| 60 | + * server runs too old a PHP, or that a class file is missing. The capability | |
| 61 | + * differs per screen: on a site it is activate_plugins, in the network backend | |
| 62 | + * manage_network_plugins, which a mere site administrator does not hold. | |
| 63 | + * | |
| 64 | + * @param string $message The message, already translated and unescaped. | |
| 65 | + * | |
| 66 | + * @return void | |
| 67 | + */ | |
| 68 | +function cryptx_admin_notice(string $message): void | |
| 69 | +{ | |
| 70 | + $render = static function () use ($message): void { | |
| 71 | + $capability = is_network_admin() ? 'manage_network_plugins' : 'activate_plugins'; | |
| 38 | 72 | |
| 39 | - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- | |
| 73 | + if (!current_user_can($capability)) { | |
| 74 | + return; | |
| 75 | + } | |
| 40 | 76 | |
| 41 | - /** | |
| 42 | - * Constructor | |
| 43 | - * | |
| 44 | - * This constructor attaches the needer plugin hook callbacks | |
| 45 | - */ | |
| 46 | - function cryptX() { | |
| 77 | + printf('<div class="notice notice-error"><p>%s</p></div>', esc_html($message)); | |
| 78 | + }; | |
| 47 | 79 | |
| 48 | - global $cryptX_var; | |
| 80 | + add_action('admin_notices', $render); | |
| 81 | + add_action('network_admin_notices', $render); | |
| 82 | +} | |
| 49 | 83 | |
| 50 | - // attach the converstion handlers | |
| 51 | - // | |
| 52 | - if (@$cryptX_var[theContent]) { | |
| 53 | - $this->_filter('the_content'); | |
| 54 | - } | |
| 55 | - if (@$cryptX_var[theExcerpt]) { | |
| 56 | - $this->_filter('the_excerpt'); | |
| 57 | - } | |
| 84 | +if (version_compare(PHP_VERSION, CRYPTX_MIN_PHP, '<')) { | |
| 85 | + cryptx_admin_notice(sprintf( | |
| 86 | + /* translators: %1$s: Required PHP version, %2$s: Current PHP version */ | |
| 87 | + __('CryptX requires PHP version %1$s or higher. You are running version %2$s. Please update PHP.', 'cryptx'), | |
| 88 | + CRYPTX_MIN_PHP, | |
| 89 | + PHP_VERSION | |
| 90 | + )); | |
| 91 | + return; | |
| 92 | +} | |
| 58 | 93 | |
| 59 | - // attach to admin menu | |
| 60 | - // | |
| 61 | - if (is_admin()) { | |
| 62 | - add_action('admin_menu', | |
| 63 | - array(&$this, '_menu') | |
| 64 | - ); | |
| 65 | - } | |
| 94 | +// WordPress version check | |
| 95 | +global $wp_version; | |
| 96 | +if (version_compare($wp_version, CRYPTX_MIN_WP, '<')) { | |
| 97 | + cryptx_admin_notice(sprintf( | |
| 98 | + /* translators: %1$s: Required WordPress version, %2$s: Current WordPress version */ | |
| 99 | + __('CryptX requires WordPress version %1$s or higher. You are running version %2$s. Please update WordPress.', 'cryptx'), | |
| 100 | + CRYPTX_MIN_WP, | |
| 101 | + $GLOBALS['wp_version'] | |
| 102 | + )); | |
| 103 | + return; | |
| 104 | +} | |
| 66 | 105 | |
| 67 | - // attach to plugin installation | |
| 68 | - // | |
| 69 | - add_action( | |
| 70 | - 'activate_' . str_replace( | |
| 71 | - DIRECTORY_SEPARATOR, '/', | |
| 72 | - str_replace( | |
| 73 | - realpath(ABSPATH . PLUGINDIR) . DIRECTORY_SEPARATOR, | |
| 74 | - '', __FILE__ | |
| 75 | - ) | |
| 76 | - ), | |
| 77 | - array(&$this, '_install') | |
| 78 | - ); | |
| 106 | +// Autoloader for plugin classes | |
| 107 | +spl_autoload_register(function ($class) { | |
| 108 | + // Check if the class belongs to our namespace | |
| 109 | + if (strpos($class, 'CryptX\\') !== 0) { | |
| 110 | + return; | |
| 111 | + } | |
| 79 | 112 | |
| 80 | - // attach javascript to Header | |
| 81 | - // | |
| 82 | - if (@$cryptX_var[java]) { | |
| 83 | - add_action( | |
| 84 | - 'wp_head', | |
| 85 | - array(&$this, '_header') | |
| 86 | - ); | |
| 87 | - } | |
| 113 | + // Remove namespace prefix | |
| 114 | + $class = substr($class, 7); | |
| 88 | 115 | |
| 89 | - } // End function | |
| 116 | + // Convert namespace separators to directory separators | |
| 117 | + $class = str_replace('\\', DIRECTORY_SEPARATOR, $class); | |
| 90 | 118 | |
| 91 | - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- | |
| 119 | + // Build the full path | |
| 120 | + $file = CRYPTX_DIR_PATH . 'classes' . DIRECTORY_SEPARATOR . $class . '.php'; | |
| 92 | 121 | |
| 93 | - /** | |
| 94 | - * Wrap _filter | |
| 95 | - * @param string $content | |
| 96 | - * @return string | |
| 97 | - */ | |
| 98 | - function _filter($apply) | |
| 99 | - { | |
| 100 | - global $cryptX_var; | |
| 122 | + // Include the file if it exists | |
| 123 | + if (file_exists($file)) { | |
| 124 | + require_once $file; | |
| 125 | + } | |
| 126 | +}); | |
| 101 | 127 | |
| 102 | - if (@$cryptX_var[autolink]) { | |
| 103 | - add_filter($apply, | |
| 104 | - array(&$this, '_autolink')); | |
| 105 | - } | |
| 106 | - if (@$cryptX_var[java]) { | |
| 107 | - add_filter($apply, | |
| 108 | - array(&$this, '_encrypt')); | |
| 109 | - } else { | |
| 110 | - add_filter($apply, | |
| 111 | - array(&$this, '_unicode')); | |
| 112 | - } | |
| 128 | +// The settings screen posts nothing: it talks to the REST routes in | |
| 129 | +// CryptX\Admin\RestController, which carry their own capability check and are | |
| 130 | +// covered by WordPress' REST nonce. The global cryptx_nonce_check() that used | |
| 131 | +// to sit here guarded $_POST['cryptX_var'], a key nothing has sent since the | |
| 132 | +// old settings form was removed in 4.1.0 -- a dead guard next to a live one is | |
| 133 | +// a trap for whoever wires up the next form. | |
| 113 | 134 | |
| 114 | - } | |
| 135 | +// Initialize the plugin | |
| 136 | +add_action('plugins_loaded', function() { | |
| 137 | + // Check if all required classes can be loaded | |
| 138 | + $requiredClasses = [ | |
| 139 | + 'CryptX\\CryptX', | |
| 140 | + 'CryptX\\Config', | |
| 141 | + 'CryptX\\SecureEncryption', | |
| 142 | + 'CryptX\\Exposure', | |
| 143 | + 'CryptX\\Block', | |
| 144 | + 'CryptX\\ImageToken', | |
| 145 | + 'CryptX\\Admin\\NetworkDefaults', | |
| 146 | + 'CryptX\\Admin\\SettingsPage', | |
| 147 | + 'CryptX\\Admin\\SettingsSchema', | |
| 148 | + 'CryptX\\Admin\\RestController', | |
| 149 | + 'CryptX\\Admin\\SiteHealth', | |
| 150 | + ]; | |
| 115 | 151 | |
| 116 | - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- | |
| 152 | + $missingClasses = []; | |
| 153 | + foreach ($requiredClasses as $class) { | |
| 154 | + if (!class_exists($class)) { | |
| 155 | + $missingClasses[] = $class; | |
| 156 | + } | |
| 157 | + } | |
| 117 | 158 | |
| 118 | - /** | |
| 119 | - * Wrap _encrypt | |
| 120 | - * @param string $content | |
| 121 | - * @return string | |
| 122 | - */ | |
| 123 | - function _encrypt($content) | |
| 124 | - { | |
| 125 | - global $cryptX_var; | |
| 159 | + if (!empty($missingClasses)) { | |
| 160 | + cryptx_admin_notice( | |
| 161 | + __('CryptX: Missing required classes: ', 'cryptx') . implode(', ', $missingClasses) | |
| 162 | + ); | |
| 163 | + return; | |
| 164 | + } | |
| 126 | 165 | |
| 127 | - preg_match_all('/<a[^>]*href=["|\'](.*)["|\']*>(.*)<\/a>/iUs', $content, $links, PREG_SET_ORDER); | |
| 166 | + // Initialize the main plugin class | |
| 167 | + try { | |
| 168 | + $cryptx_instance = CryptX\CryptX::get_instance(); | |
| 169 | + $cryptx_instance->startCryptX(); | |
| 170 | + cryptx_register_action_links(); | |
| 128 | 171 | |
| 129 | - foreach( $links as $link ) { | |
| 172 | + // Guarded here as well as inside register(), and deliberately not | |
| 173 | + // listed in $requiredClasses above. Both of those would load the file | |
| 174 | + // on every single front-end and admin request -- class_exists() runs | |
| 175 | + // the autoloader, and so does a static call -- to register commands | |
| 176 | + // that only exist under WP-CLI. | |
| 177 | + // | |
| 178 | + // class_exists() is still asked so that a package missing the file | |
| 179 | + // cannot raise a fatal Error, which catch (Exception) below would not | |
| 180 | + // have caught. It buys no notice: the commands are then simply absent. | |
| 181 | + // That is the right silence -- nothing a visitor or an administrator | |
| 182 | + // sees depends on them. | |
| 183 | + if (defined('WP_CLI') && WP_CLI && class_exists('CryptX\Cli')) { | |
| 184 | + CryptX\Cli::register(); | |
| 185 | + } | |
| 186 | + } catch (Exception $e) { | |
| 187 | + cryptx_admin_notice( | |
| 188 | + __('CryptX initialization failed: ', 'cryptx') . $e->getMessage() | |
| 189 | + ); | |
| 190 | + } | |
| 191 | +}); | |
| 130 | 192 | |
| 131 | - if(preg_match('/mailto:(.*)/', $link[1], $mail)) { | |
| 132 | - $crypt = ''; | |
| 133 | - $ascii = 0; | |
| 134 | - for ($i = 0; $i < strlen( $mail[1] ); $i++) { | |
| 135 | - $ascii = ord ( substr ( $mail[1], $i ) ); | |
| 136 | - if (8364 <= $char) { | |
| 137 | - $ascii = 128; | |
| 138 | - } | |
| 139 | - $crypt .= chr($ascii + 1); | |
| 140 | - } | |
| 141 | - $temp = str_replace( $link[1], "javascript:DeCryptX('" . $crypt . "')", $link[0]); | |
| 142 | - $new_mail = str_replace( "@", $cryptX_var[at], $link[2]); | |
| 143 | - $new_mail = str_replace( ".", $cryptX_var[dot], $new_mail); | |
| 144 | - $temp = str_replace( $link[2], $new_mail, $temp); | |
| 145 | - $content = str_replace( $link[0], $temp, $content); | |
| 146 | - } | |
| 193 | +/** | |
| 194 | + * Runs a callback once for every site of the network, in batches. | |
| 195 | + * | |
| 196 | + * get_sites() without a limit pulls the whole network into memory, and a | |
| 197 | + * network can have thousands of sites. Same construction as uninstall.php, | |
| 198 | + * deliberately: the two do the same job at opposite ends of the plugin's life, | |
| 199 | + * and one of them being cleverer than the other only makes both harder to | |
| 200 | + * trust. | |
| 201 | + * | |
| 202 | + * On a single site the callback simply runs once. | |
| 203 | + * | |
| 204 | + * @param callable $callback Receives nothing; runs with the site switched in. | |
| 205 | + * | |
| 206 | + * @return void | |
| 207 | + */ | |
| 208 | +function cryptx_for_each_site(callable $callback): void | |
| 209 | +{ | |
| 210 | + if (!is_multisite()) { | |
| 211 | + $callback(); | |
| 147 | 212 | |
| 148 | - } // foreach | |
| 213 | + return; | |
| 214 | + } | |
| 149 | 215 | |
| 216 | + $batch_size = 100; | |
| 217 | + $offset = 0; | |
| 150 | 218 | |
| 151 | - return $content; | |
| 152 | - } | |
| 219 | + do { | |
| 220 | + $site_ids = get_sites([ | |
| 221 | + 'fields' => 'ids', | |
| 222 | + 'number' => $batch_size, | |
| 223 | + 'offset' => $offset, | |
| 224 | + 'orderby' => 'id', | |
| 225 | + 'update_site_meta_cache' => false, | |
| 226 | + ]); | |
| 153 | 227 | |
| 154 | - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- | |
| 228 | + foreach ($site_ids as $site_id) { | |
| 229 | + switch_to_blog($site_id); | |
| 155 | 230 | |
| 156 | - /** | |
| 157 | - * Wrap _unicode | |
| 158 | - * @param string $content | |
| 159 | - * @return string | |
| 160 | - */ | |
| 161 | - function _unicode($content) | |
| 162 | - { | |
| 163 | - global $cryptX_var; | |
| 231 | + // finally, so a failing callback does not leave the blog stack | |
| 232 | + // switched for whatever runs next. It does not keep the loop | |
| 233 | + // going: an exception still travels upwards and the remaining | |
| 234 | + // sites are skipped. Catching it here would hide a broken site | |
| 235 | + // instead, and that is a trade to make deliberately, not in | |
| 236 | + // passing. | |
| 237 | + try { | |
| 238 | + $callback(); | |
| 239 | + } finally { | |
| 240 | + restore_current_blog(); | |
| 241 | + } | |
| 242 | + } | |
| 164 | 243 | |
| 165 | - preg_match_all('/<a[^>]*href=["|\'](.*)["|\']*>(.*)<\/a>/iUs', $content, $links, PREG_SET_ORDER); | |
| 244 | + $offset += $batch_size; | |
| 245 | + } while (count($site_ids) === $batch_size); | |
| 246 | +} | |
| 166 | 247 | |
| 167 | - foreach( $links as $link ) { | |
| 248 | +/** | |
| 249 | + * Removes the plugin's transients from the site that is currently switched in. | |
| 250 | + * | |
| 251 | + * @return void | |
| 252 | + */ | |
| 253 | +function cryptx_delete_transients(): void | |
| 254 | +{ | |
| 255 | + global $wpdb; | |
| 168 | 256 | |
| 169 | - if(preg_match('/mailto:(.*)/', $link[1], $mail)) { | |
| 170 | - $mailto = "mailto:" . $mail[1]; | |
| 171 | - $crypt = ''; | |
| 172 | - for ($i = 0; $i < strlen( $mailto ); $i++) { | |
| 173 | - $crypt .= "&#" . ord ( substr ( $mailto, $i ) ) . ";"; | |
| 174 | - } | |
| 175 | - $content = str_replace( $mailto, $crypt, $content); | |
| 176 | - $new_mail = str_replace( "@", $cryptX_var[at], $link[2]); | |
| 177 | - $new_mail = str_replace( ".", $cryptX_var[dot], $new_mail); | |
| 178 | - $content = str_replace( $link[2], $new_mail, $content); | |
| 179 | - } | |
| 257 | + // The LIKE patterns run through $wpdb->esc_like() and $wpdb->prepare(). | |
| 258 | + // No user input is involved here, so this is not a hole, but "_" is a | |
| 259 | + // single-character wildcard in LIKE: unescaped, '_transient_cryptx_%' also | |
| 260 | + // matches names like 'Xtransient1cryptxZ...' belonging to other plugins. | |
| 261 | + // esc_like() turns those underscores into literal ones. The table name is | |
| 262 | + // an identifier, not a value, and therefore must stay outside prepare(). | |
| 263 | + $transientLike = $wpdb->esc_like('_transient_cryptx_') . '%'; | |
| 264 | + $transientTimeoutLike = $wpdb->esc_like('_transient_timeout_cryptx_') . '%'; | |
| 180 | 265 | |
| 181 | - } // foreach | |
| 182 | - return $content; | |
| 183 | - } | |
| 266 | + // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching | |
| 267 | + $wpdb->query($wpdb->prepare("DELETE FROM {$wpdb->options} WHERE option_name LIKE %s", $transientLike)); | |
| 268 | + // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching | |
| 269 | + $wpdb->query($wpdb->prepare("DELETE FROM {$wpdb->options} WHERE option_name LIKE %s", $transientTimeoutLike)); | |
| 270 | +} | |
| 184 | 271 | |
| 185 | - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- | |
| 272 | +/** | |
| 273 | + * Sets up the plugin's options for the site that is currently switched in. | |
| 274 | + * | |
| 275 | + * @return void | |
| 276 | + */ | |
| 277 | +function cryptx_install_site(): void | |
| 278 | +{ | |
| 279 | + if (!class_exists('CryptX\\CryptX')) { | |
| 280 | + return; | |
| 281 | + } | |
| 186 | 282 | |
| 187 | - function _autolink($content) { | |
| 283 | + CryptX\CryptX::get_instance()->installCryptX(); | |
| 284 | +} | |
| 188 | 285 | |
| 189 | - $src[]="/([\s])([_a-zA-Z0-9-]+(\.[_a-zA-Z0-9-]+)*@[a-zA-Z0-9-]+(\.[a-zA-Z0-9-]+)*(\.[a-zA-Z]{2,}))/si"; | |
| 190 | - $src[]="/(>)([_a-zA-Z0-9-]+(\.[_a-zA-Z0-9-]+)*@[a-zA-Z0-9-]+(\.[a-zA-Z0-9-]+)*(\.[a-zA-Z]{2,}))(<)/si"; | |
| 191 | - $src[]="/^([_a-zA-Z0-9-]+(\.[_a-zA-Z0-9-]+)*@[a-zA-Z0-9-]+(\.[a-zA-Z0-9-]+)*(\.[a-zA-Z]{2,}))/si"; | |
| 192 | - $src[]="/(<a[^>]*>)<a[^>]*>/"; | |
| 193 | - $src[]="/(<\/A>)<\/A>/i"; | |
| 286 | +// Activation. | |
| 287 | +// | |
| 288 | +// $network_wide is true when someone ticks "Network Activate". WordPress then | |
| 289 | +// fires this hook exactly once, not once per site -- so without the loop, every | |
| 290 | +// site but the current one is left without its stored options and, more to the | |
| 291 | +// point, without the one-time migration of the pre-4.0 "cryptxoff" post meta. | |
| 292 | +// The plugin still works there, because the defaults fill in, but a site that | |
| 293 | +// carried excluded posts from an old version would silently lose them. | |
| 294 | +register_activation_hook(__FILE__, function ($network_wide = false) { | |
| 295 | + if ($network_wide) { | |
| 296 | + cryptx_for_each_site('cryptx_install_site'); | |
| 297 | + } else { | |
| 298 | + cryptx_install_site(); | |
| 299 | + } | |
| 194 | 300 | |
| 195 | - $tar[]="\\1<a href=\"mailto:\\2\">\\2</a>"; | |
| 196 | - $tar[]="\\1<a href=\"mailto:\\2\">\\2</a>\\6"; | |
| 197 | - $tar[]="<a href=\"mailto:\\0\">\\0</a>"; | |
| 198 | - $tar[]="\\1"; | |
| 199 | - $tar[]="\\1"; | |
| 301 | + flush_rewrite_rules(); | |
| 302 | +}); | |
| 200 | 303 | |
| 201 | - $content = preg_replace($src,$tar,$content); | |
| 304 | +// Deactivation. Same reason, other direction: the transients of every site but | |
| 305 | +// the current one used to survive a network deactivation. | |
| 306 | +register_deactivation_hook(__FILE__, function ($network_wide = false) { | |
| 307 | + if ($network_wide) { | |
| 308 | + cryptx_for_each_site('cryptx_delete_transients'); | |
| 309 | + } else { | |
| 310 | + cryptx_delete_transients(); | |
| 311 | + } | |
| 312 | +}); | |
| 202 | 313 | |
| 203 | - return $content; | |
| 204 | - } | |
| 314 | +// A site created while the plugin is network-active gets the same treatment as | |
| 315 | +// one that existed at activation time. Without this the new site works -- the | |
| 316 | +// defaults see to that -- but nothing is ever written until someone saves, and | |
| 317 | +// the behaviour differs from every other site in the network for no reason | |
| 318 | +// anybody could see. | |
| 319 | +add_action('wp_initialize_site', function ($site) { | |
| 320 | + // The network option directly, not is_plugin_active_for_network(): that | |
| 321 | + // lives in wp-admin/includes/plugin.php, which is not loaded when a site is | |
| 322 | + // created over the REST API or WP-CLI -- exactly the paths that create sites | |
| 323 | + // in bulk. | |
| 324 | + $network_active = get_site_option('active_sitewide_plugins', []); | |
| 205 | 325 | |
| 206 | - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- | |
| 326 | + if (!isset($network_active[CRYPTX_PLUGIN_BASENAME])) { | |
| 327 | + return; | |
| 328 | + } | |
| 207 | 329 | |
| 208 | - /** | |
| 209 | - * Performs the routines required at plugin installation: | |
| 210 | - * in general introducing the settings array | |
| 211 | - */ | |
| 212 | - function _install() { | |
| 213 | - add_option( | |
| 214 | - 'cryptX', | |
| 215 | - array( | |
| 216 | - 'at' => ' [at] ', | |
| 217 | - 'dot' => ' [dot] ', | |
| 218 | - 'theContent' => 1, | |
| 219 | - 'theExcerpt' => 0, | |
| 220 | - 'java' => 1, | |
| 221 | - ) | |
| 222 | - ); | |
| 223 | - } | |
| 330 | + $site_id = is_object($site) ? (int) $site->blog_id : (int) $site; | |
| 224 | 331 | |
| 225 | - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- | |
| 332 | + switch_to_blog($site_id); | |
| 333 | + cryptx_install_site(); | |
| 334 | + restore_current_blog(); | |
| 335 | +}, 20); | |
| 226 | 336 | |
| 227 | - /** | |
| 228 | - * Attach the menu page to the `Options` tab | |
| 229 | - */ | |
| 230 | - function _header() | |
| 231 | - { | |
| 232 | - $cryptX_script.= "<script type=\"text/javascript\" src=\"" . get_option('siteurl') . '/' . PLUGINDIR . '/' . dirname(plugin_basename (__FILE__)) . "/js/cryptx.js\"></script>\n"; | |
| 233 | - print($cryptX_script); | |
| 234 | - } | |
| 337 | +// Add plugin action links. | |
| 338 | +// | |
| 339 | +// Registered inside the successful-initialisation path on purpose, not at the | |
| 340 | +// top level of this file. It refers to a class constant, and the plugins screen | |
| 341 | +// is exactly where someone goes to switch off a plugin whose class files are | |
| 342 | +// missing -- a fatal error there would take away the only lever they have. | |
| 343 | +// A plugin that did not initialise has no settings page to link to anyway. | |
| 344 | +function cryptx_register_action_links(): void | |
| 345 | +{ | |
| 346 | + add_filter('plugin_action_links_' . CRYPTX_PLUGIN_BASENAME, function ($links) { | |
| 347 | + $settings_link = '<a href="' . | |
| 348 | + esc_url(admin_url('options-general.php?page=' . CryptX\Admin\SettingsPage::MENU_SLUG)) . | |
| 349 | + '">' . esc_html__('Settings', 'cryptx') . '</a>'; | |
| 350 | + array_unshift($links, $settings_link); | |
| 235 | 351 | |
| 236 | - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- | |
| 352 | + return $links; | |
| 353 | + }); | |
| 354 | +} | |
| 237 | 355 | |
| 238 | - /** | |
| 239 | - * Attach the menu page to the `Options` tab | |
| 240 | - */ | |
| 241 | - function _menu() { | |
| 242 | - add_submenu_page('options-general.php', | |
| 243 | - 'CryptX', | |
| 244 | - 'CryptX', 9, | |
| 245 | - __FILE__, | |
| 246 | - array($this, '_submenu') | |
| 247 | - ); | |
| 248 | - } | |
| 356 | +/** | |
| 357 | + * Encrypts the given content using the CryptX library and wraps it with a shortcode. | |
| 358 | + * | |
| 359 | + * @param string $content The content to be encrypted. | |
| 360 | + * @param array|null $args Optional arguments to customize the encryption process. | |
| 361 | + * | |
| 362 | + * @return string The encrypted content wrapped in the appropriate shortcode. | |
| 363 | + */ | |
| 364 | +if (!function_exists('cryptx_encrypt')) { | |
| 365 | + function cryptx_encrypt(string $content, ?array $args = []): string | |
| 366 | + { | |
| 367 | + $cryptXInstance = Cryptx\CryptX::get_instance(); | |
| 368 | + // $attributesString contains the escaped (esc_attr()) shortcode attributes from $args | |
| 369 | + // The signature allows null, convertArrayToArgumentString() does not. | |
| 370 | + $attributesString = $cryptXInstance->convertArrayToArgumentString($args ?? []); | |
| 249 | 371 | |
| 250 | - /** | |
| 251 | - * Handles and renders the menu page | |
| 252 | - */ | |
| 253 | - function _submenu() { | |
| 254 | - global $cryptX_var; | |
| 372 | + // wp_kses_post() and not esc_html(): the caller passes content, and | |
| 373 | + // content in WordPress may carry markup. esc_html() turned a "<br>" in | |
| 374 | + // a theme field into a visible "<br>" -- reported in the support | |
| 375 | + // forum, and worked around there with html_entity_decode(), which | |
| 376 | + // undoes the plugin's own protection in the Unicode and entity modes. | |
| 377 | + // wp_kses_post keeps what a post may contain and drops the rest. | |
| 378 | + $shortcode = '[cryptx' . $attributesString . ']' . wp_kses_post($content) . '[/cryptx]'; | |
| 255 | 379 | |
| 256 | - // sanitize referrer | |
| 257 | - // | |
| 258 | - $_SERVER['HTTP_REFERER'] = preg_replace( | |
| 259 | - '~&saved=.*$~Uis','', $_SERVER['HTTP_REFERER'] | |
| 260 | - ); | |
| 261 | - | |
| 262 | - // information updated ? | |
| 263 | - // | |
| 264 | - if ($_POST['submit']) { | |
| 265 | - | |
| 266 | - // save | |
| 267 | - // | |
| 268 | - update_option( | |
| 269 | - 'cryptX', | |
| 270 | - $_POST['cryptX_var'] | |
| 271 | - ); | |
| 272 | - | |
| 273 | - die("<script>document.location.href = '{$_SERVER['HTTP_REFERER']}&saved=settings:" . time() . "';</script>"); | |
| 274 | - } | |
| 275 | - | |
| 276 | - // operation report detected | |
| 277 | - // | |
| 278 | - if (@$_GET['saved']) { | |
| 279 | - | |
| 280 | - list($saved, $ts) = explode(':', $_GET['saved']); | |
| 281 | - if (time() - $ts < 10) { | |
| 282 | - echo '<div id="message" class="updated fade"><p><strong>'; | |
| 283 | - | |
| 284 | - switch ($saved) { | |
| 285 | - case 'settings' : | |
| 286 | - echo 'Settings saved.'; | |
| 287 | - break; | |
| 288 | - } | |
| 289 | - | |
| 290 | - echo '</strong></p></div>'; | |
| 291 | - } | |
| 292 | - } | |
| 293 | - | |
| 294 | - // read the settings | |
| 295 | - // | |
| 296 | - //$cryptX = (array) get_option('cryptX'); | |
| 297 | - | |
| 298 | -?> | |
| 299 | -<!-- Start Optionen im Adminbereich (xhtml, au�erhalb PHP) --> | |
| 300 | -<div class="wrap"> | |
| 301 | - <h2><?php _e("CryptX Options...",'cryptx'); ?></h2> | |
| 302 | - <form method="post"> | |
| 303 | - <blockquote> | |
| 304 | - <table> | |
| 305 | - <tr> | |
| 306 | - <td valign="top"><?php _e("Replacement for '@'",'cryptx'); ?> | |
| 307 | - <input name="cryptX_var[at]" value="<?php echo $cryptX_var[at]; ?>" type="text" /></td> | |
| 308 | - </tr> | |
| 309 | - <tr> | |
| 310 | - <td valign="top"><?php _e("Replacement for '.'",'cryptx'); ?> | |
| 311 | - <input name="cryptX_var[dot]" value="<?php echo $cryptX_var[dot]; ?>" type="text" /></td> | |
| 312 | - </tr> | |
| 313 | - <tr> | |
| 314 | - <td valign="top"><input name="cryptX_var[theContent]" <?php echo ($cryptX_var[theContent]) ? 'checked="checked"' : ''; ?> type="checkbox" /> | |
| 315 | - <?php _e("Apply CryptX to the Content",'cryptx'); ?></td> | |
| 316 | - </tr> | |
| 317 | - <tr> | |
| 318 | - <td valign="top"><input name="cryptX_var[theExcerpt]" <?php echo ($cryptX_var[theExcerpt]) ? 'checked="checked"' : ''; ?> type="checkbox" /> | |
| 319 | - <?php _e("Apply CryptX to the Excerpt",'cryptx'); ?></td> | |
| 320 | - </tr> | |
| 321 | - <tr> | |
| 322 | - <td valign="top"> | |
| 323 | - <input name="cryptX_var[java]" <?php echo ($cryptX_var[java]) ? 'checked="checked"' : ''; ?> type="radio" value="1" /> | |
| 324 | - <?php _e("Use javascript to hide the Email-Link.",'cryptx'); ?><br /> | |
| 325 | - <input name="cryptX_var[java]" <?php echo (!$cryptX_var[java]) ? 'checked="checked"' : ''; ?> type="radio" value="0" /> | |
| 326 | - <?php _e("Use Unicode to hide the Email-Link.",'cryptx'); ?> | |
| 327 | - </td> | |
| 328 | - </tr> | |
| 329 | - <tr> | |
| 330 | - <td valign="top"><input name="cryptX_var[autolink]" <?php echo ($cryptX_var[autolink]) ? 'checked="checked"' : ''; ?> type="checkbox" /> | |
| 331 | - <?php _e("Add mailto to all unlinked email addresses",'cryptx'); ?></td> | |
| 332 | - </tr> | |
| 333 | - <tr> | |
| 334 | - <td><input type="submit" name="submit" value="Update »" /></td> | |
| 335 | - </tr> | |
| 336 | - </table> | |
| 337 | - </blockquote> | |
| 338 | - </form> | |
| 339 | -</div> | |
| 340 | -<?php | |
| 341 | - } | |
| 342 | - | |
| 343 | - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- | |
| 344 | - | |
| 345 | - | |
| 346 | - //--end-of-class | |
| 347 | - } | |
| 348 | - | |
| 380 | + return do_shortcode($shortcode); | |
| 381 | + } | |
| 349 | 382 | } |
| 350 | 383 | |
| 351 | -///////////////////////////////////////////////////////////////////////////// | |
| 352 | - | |
| 353 | 384 | /** |
| 354 | -* Initiating the plugin... | |
| 355 | -* @see cryptX | |
| 356 | -*/ | |
| 357 | -new cryptX; | |
| 385 | + * Encrypts the given content using the CryptX library and wraps it with a shortcode. | |
| 386 | + * | |
| 387 | + * @deprecated 4.0.5 Use cryptx_encrypt() instead. | |
| 388 | + * @see cryptx_encrypt() | |
| 389 | + */ | |
| 390 | +if (!function_exists('encryptx')) { | |
| 391 | + function encryptx(string $content, ?array $args = []): string | |
| 392 | + { | |
| 393 | + _doing_it_wrong( | |
| 394 | + 'encryptx', | |
| 395 | + esc_html__('This function is deprecated. Use cryptx_encrypt() instead.', 'cryptx'), | |
| 396 | + '4.0.5' | |
| 397 | + ); | |
| 358 | 398 | |
| 359 | -?> | |
| 399 | + return cryptx_encrypt($content, $args); | |
| 400 | + } | |
| 401 | +} | |
