PluginProbe
CryptX / 4.2.1
CryptX v4.2.1
4.2.1 4.2.0 4.1.1 trunk 1.0 1.1 1.2 1.3 1.4 1.5 1.6 1.7 1.9 2.0 2.1 2.2 2.3 2.3.1 2.3.2 2.3.3 2.4.0 2.4.1 2.4.2 2.4.3 2.4.4 All 93 releases
← All changes | cryptx.php +350 -472 2.4.14.2.1 View file →
@@ -1,523 +1,401 @@
1 1 <?php
2 -/*
3 -Plugin Name: CryptX
4 -Plugin URI: http://weber-nrw.de/wordpress/cryptx/
5 -Description: No more SPAM by spiders scanning you site for email adresses. With CryptX you can hide all your email adresses, with and without a mailto-link, by converting them using javascript or UNICODE. Although you can choose to add a mailto-link to all unlinked email adresses with only one klick at the settings. That's great, isn't it?
6 -Version: 2.4.1
7 -Author: Ralf Weber
8 -Author URI: http://weber-nrw.de/
9 -*/
2 +/**
3 + * Plugin Name: CryptX
4 + * Plugin URI: https://wordpress.org/plugins/cryptx/
5 + * Description: CryptX encrypts email addresses in your posts, pages, comments, and text widgets to protect them from spam bots while keeping them readable for your visitors.
6 + * Version: 4.2.1
7 + * Requires at least: 6.7
8 + * Tested up to: 7.1
9 + * Requires PHP: 8.1
10 + * Author: Ralf Weber
11 + * Author URI: https://weber-nrw.de/
12 + * License: GPL v2 or later
13 + * License URI: https://www.gnu.org/licenses/gpl-2.0.html
14 + * Text Domain: cryptx
15 + *
16 + * CryptX is free software: you can redistribute it and/or modify
17 + * it under the terms of the GNU General Public License as published by
18 + * the Free Software Foundation, either version 2 of the License, or
19 + * any later version.
20 + *
21 + * CryptX is distributed in the hope that it will be useful,
22 + * but WITHOUT ANY WARRANTY; without even the implied warranty of
23 + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
24 + * GNU General Public License for more details.
25 + *
26 + * You should have received a copy of the GNU General Public License
27 + * along with CryptX. If not, see https://www.gnu.org/licenses/gpl-2.0.html.
28 + *
29 + * @package CryptX
30 + * @since 1.0.0
31 + */
10 32
11 -/////////////////////////////////////////////////////////////////////////////
12 -
13 -/**
14 -* @internal prevent from direct calls
15 -*/
33 +// Prevent direct access
16 34 if (!defined('ABSPATH')) {
17 - return ;
18 - }
35 + exit;
36 +}
19 37
20 -/**
21 -* @internal prevent from second inclusion
22 -*/
23 -if (!class_exists('cryptX')) {
38 +// Plugin constants
39 +define('CRYPTX_VERSION', '4.2.1');
40 +define('CRYPTX_PLUGIN_FILE', __FILE__);
41 +define('CRYPTX_PLUGIN_BASENAME', plugin_basename(__FILE__));
42 +define('CRYPTX_BASENAME', plugin_basename(__FILE__)); // Add this missing constant
43 +define('CRYPTX_DIR_PATH', plugin_dir_path(__FILE__));
44 +define('CRYPTX_DIR_URL', plugin_dir_url(__FILE__));
45 +define('CRYPTX_BASEFOLDER', dirname(CRYPTX_PLUGIN_BASENAME));
24 46
25 -/////////////////////////////////////////////////////////////////////////////
47 +// Minimum requirements. Keep these in sync with the plugin header above and
48 +// with "Requires at least" / "Requires PHP" in readme.txt. They are defined
49 +// once and used both for the check and for the notice, so the number shown to
50 +// the user cannot drift away from the number actually enforced.
51 +define('CRYPTX_MIN_PHP', '8.1');
52 +define('CRYPTX_MIN_WP', '6.7');
26 53
27 -load_plugin_textdomain('cryptx', PLUGINDIR . '/' . dirname(plugin_basename (__FILE__)) . '/languages');
28 -
29 -$cryptX_var = (array) get_option('cryptX');
30 -
31 54 /**
32 -* "CryptX" WordPress Plugin
33 -*
34 -* @author Ralf Weber <ralf@weber-nrw.de>
35 -* @license http://opensource.org/licenses/gpl-license.php GNU Public License
36 -*/
37 -Class cryptX {
55 + * Shows an admin notice to whoever is in a position to act on it.
56 + *
57 + * Registered on both admin_notices and network_admin_notices. Without the
58 + * second, a network administrator working in the network backend -- the only
59 + * person who can deactivate a network-activated plugin -- never saw that the
60 + * server runs too old a PHP, or that a class file is missing. The capability
61 + * differs per screen: on a site it is activate_plugins, in the network backend
62 + * manage_network_plugins, which a mere site administrator does not hold.
63 + *
64 + * @param string $message The message, already translated and unescaped.
65 + *
66 + * @return void
67 + */
68 +function cryptx_admin_notice(string $message): void
69 +{
70 + $render = static function () use ($message): void {
71 + $capability = is_network_admin() ? 'manage_network_plugins' : 'activate_plugins';
38 72
39 - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
73 + if (!current_user_can($capability)) {
74 + return;
75 + }
40 76
41 - /**
42 - * Constructor
43 - *
44 - * This constructor attaches the needer plugin hook callbacks
45 - */
46 - function cryptX() {
77 + printf('<div class="notice notice-error"><p>%s</p></div>', esc_html($message));
78 + };
47 79
48 - global $cryptX_var;
80 + add_action('admin_notices', $render);
81 + add_action('network_admin_notices', $render);
82 +}
49 83
50 - // attach the converstion handlers
51 - //
52 - if (@$cryptX_var[theContent]) {
53 - $this->filter('the_content');
54 - }
55 - if (@$cryptX_var[theExcerpt]) {
56 - $this->filter('the_excerpt');
57 - }
58 - if (@$cryptX_var[commentText]) {
59 - $this->filter('comment_text');
60 - }
84 +if (version_compare(PHP_VERSION, CRYPTX_MIN_PHP, '<')) {
85 + cryptx_admin_notice(sprintf(
86 + /* translators: %1$s: Required PHP version, %2$s: Current PHP version */
87 + __('CryptX requires PHP version %1$s or higher. You are running version %2$s. Please update PHP.', 'cryptx'),
88 + CRYPTX_MIN_PHP,
89 + PHP_VERSION
90 + ));
91 + return;
92 +}
61 93
62 - // attach to admin menu
63 - //
64 - if (is_admin()) {
65 - add_action('admin_menu',
66 - array(&$this, 'menu')
67 - );
68 - }
94 +// WordPress version check
95 +global $wp_version;
96 +if (version_compare($wp_version, CRYPTX_MIN_WP, '<')) {
97 + cryptx_admin_notice(sprintf(
98 + /* translators: %1$s: Required WordPress version, %2$s: Current WordPress version */
99 + __('CryptX requires WordPress version %1$s or higher. You are running version %2$s. Please update WordPress.', 'cryptx'),
100 + CRYPTX_MIN_WP,
101 + $GLOBALS['wp_version']
102 + ));
103 + return;
104 +}
69 105
70 - // attach to plugin installation
71 - //
72 - add_action(
73 - 'activate_' . str_replace(
74 - DIRECTORY_SEPARATOR, '/',
75 - str_replace(
76 - realpath(ABSPATH . PLUGINDIR) . DIRECTORY_SEPARATOR,
77 - '', __FILE__
78 - )
79 - ),
80 - array(&$this, 'install')
81 - );
106 +// Autoloader for plugin classes
107 +spl_autoload_register(function ($class) {
108 + // Check if the class belongs to our namespace
109 + if (strpos($class, 'CryptX\\') !== 0) {
110 + return;
111 + }
82 112
83 - // attach javascript to Header
84 - //
85 - if (@$cryptX_var[java]) {
86 - add_action(
87 - 'wp_head',
88 - array(&$this, 'header')
89 - );
90 - }
113 + // Remove namespace prefix
114 + $class = substr($class, 7);
91 115
92 - add_action('admin_menu',
93 - array(&$this, 'cryptx_meta_box')
94 - );
116 + // Convert namespace separators to directory separators
117 + $class = str_replace('\\', DIRECTORY_SEPARATOR, $class);
95 118
96 - add_action('wp_insert_post',
97 - array(&$this, 'cryptx_insert_post')
98 - );
99 - add_action('wp_update_post',
100 - array(&$this, 'cryptx_insert_post')
101 - );
119 + // Build the full path
120 + $file = CRYPTX_DIR_PATH . 'classes' . DIRECTORY_SEPARATOR . $class . '.php';
102 121
103 - } // End function
122 + // Include the file if it exists
123 + if (file_exists($file)) {
124 + require_once $file;
125 + }
126 +});
104 127
105 - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
128 +// The settings screen posts nothing: it talks to the REST routes in
129 +// CryptX\Admin\RestController, which carry their own capability check and are
130 +// covered by WordPress' REST nonce. The global cryptx_nonce_check() that used
131 +// to sit here guarded $_POST['cryptX_var'], a key nothing has sent since the
132 +// old settings form was removed in 4.1.0 -- a dead guard next to a live one is
133 +// a trap for whoever wires up the next form.
106 134
107 - function filter($apply)
108 - {
109 - global $cryptX_var;
110 -
111 - if (@$cryptX_var[autolink]) {
112 - add_filter($apply,
113 - array(&$this, 'autolink'),
114 - 5);
115 - }
135 +// Initialize the plugin
136 +add_action('plugins_loaded', function() {
137 + // Check if all required classes can be loaded
138 + $requiredClasses = [
139 + 'CryptX\\CryptX',
140 + 'CryptX\\Config',
141 + 'CryptX\\SecureEncryption',
142 + 'CryptX\\Exposure',
143 + 'CryptX\\Block',
144 + 'CryptX\\ImageToken',
145 + 'CryptX\\Admin\\NetworkDefaults',
146 + 'CryptX\\Admin\\SettingsPage',
147 + 'CryptX\\Admin\\SettingsSchema',
148 + 'CryptX\\Admin\\RestController',
149 + 'CryptX\\Admin\\SiteHealth',
150 + ];
116 151
117 - add_filter($apply, array($this, 'encryptx'), 11);
118 - add_filter($apply, array($this, 'linktext'), 12);
119 - }
152 + $missingClasses = [];
153 + foreach ($requiredClasses as $class) {
154 + if (!class_exists($class)) {
155 + $missingClasses[] = $class;
156 + }
157 + }
120 158
121 - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
159 + if (!empty($missingClasses)) {
160 + cryptx_admin_notice(
161 + __('CryptX: Missing required classes: ', 'cryptx') . implode(', ', $missingClasses)
162 + );
163 + return;
164 + }
122 165
166 + // Initialize the main plugin class
167 + try {
168 + $cryptx_instance = CryptX\CryptX::get_instance();
169 + $cryptx_instance->startCryptX();
170 + cryptx_register_action_links();
123 171
124 - function linktext($content)
125 - {
126 - global $post;
127 - $cryptxoff = false;
128 - $cryptxoffmeta = get_post_meta($post->ID,'cryptxoff',true);
129 - if ($cryptxoffmeta == "true") {
130 - $cryptxoff = true;
131 - }
132 - echo "<!-- linktext: $cryptxoff / $cryptxoffmeta -->";
133 - if ($cryptxoff == false) {
134 - $content = preg_replace_callback("/([_a-zA-Z0-9-]+(\.[_a-zA-Z0-9-]+)*@[a-zA-Z0-9-]+(\.[a-zA-Z0-9-]+)*(\.[a-zA-Z]{2,}))/i", array(get_class($this), '_Linktext'), $content );
135 - }
136 - return $content;
137 - }
172 + // Guarded here as well as inside register(), and deliberately not
173 + // listed in $requiredClasses above. Both of those would load the file
174 + // on every single front-end and admin request -- class_exists() runs
175 + // the autoloader, and so does a static call -- to register commands
176 + // that only exist under WP-CLI.
177 + //
178 + // class_exists() is still asked so that a package missing the file
179 + // cannot raise a fatal Error, which catch (Exception) below would not
180 + // have caught. It buys no notice: the commands are then simply absent.
181 + // That is the right silence -- nothing a visitor or an administrator
182 + // sees depends on them.
183 + if (defined('WP_CLI') && WP_CLI && class_exists('CryptX\Cli')) {
184 + CryptX\Cli::register();
185 + }
186 + } catch (Exception $e) {
187 + cryptx_admin_notice(
188 + __('CryptX initialization failed: ', 'cryptx') . $e->getMessage()
189 + );
190 + }
191 +});
138 192
139 - function _linktext($Match)
140 - {
141 - global $cryptX_var;
142 - switch ($cryptX_var[opt_linktext]) {
193 +/**
194 + * Runs a callback once for every site of the network, in batches.
195 + *
196 + * get_sites() without a limit pulls the whole network into memory, and a
197 + * network can have thousands of sites. Same construction as uninstall.php,
198 + * deliberately: the two do the same job at opposite ends of the plugin's life,
199 + * and one of them being cleverer than the other only makes both harder to
200 + * trust.
201 + *
202 + * On a single site the callback simply runs once.
203 + *
204 + * @param callable $callback Receives nothing; runs with the site switched in.
205 + *
206 + * @return void
207 + */
208 +function cryptx_for_each_site(callable $callback): void
209 +{
210 + if (!is_multisite()) {
211 + $callback();
143 212
144 - case 1: // alternative text for mail link
145 - $linktext = $cryptX_var[alt_linktext];
146 - break;
213 + return;
214 + }
147 215
148 - case 2: // alternative image for mail link
149 - $linktext = "<img src=\"" . $cryptX_var[alt_linkimage] . "\" class=\"cryptxImage\" alt=\"" . $cryptX_var[alt_linkimage_title] . "\" title=\"" . $cryptX_var[alt_linkimage_title] . "\">";
150 - break;
216 + $batch_size = 100;
217 + $offset = 0;
151 218
152 - case 3: // uploaded image for mail link
153 - $imgurl = "/" . PLUGINDIR . "/" . dirname(plugin_basename (__FILE__)) . "/images/" . $cryptX_var[alt_uploadedimage];
154 - $linktext = "<img src=\"" . $imgurl . "\" class=\"cryptxImage\" alt=\"" . $cryptX_var[http_linkimage_title] . "\" title=\"" . $cryptX_var[http_linkimage_title] . "\">";
155 - break;
219 + do {
220 + $site_ids = get_sites([
221 + 'fields' => 'ids',
222 + 'number' => $batch_size,
223 + 'offset' => $offset,
224 + 'orderby' => 'id',
225 + 'update_site_meta_cache' => false,
226 + ]);
156 227
157 - case 4: // text scrambled by antispambot
158 - $linktext = antispambot($Match[1]);
159 - break;
228 + foreach ($site_ids as $site_id) {
229 + switch_to_blog($site_id);
160 230
161 - default:
162 - $linktext = str_replace( "@", $cryptX_var[at], $Match[1]);
163 - $linktext = str_replace( ".", $cryptX_var[dot], $linktext);
231 + // finally, so a failing callback does not leave the blog stack
232 + // switched for whatever runs next. It does not keep the loop
233 + // going: an exception still travels upwards and the remaining
234 + // sites are skipped. Catching it here would hide a broken site
235 + // instead, and that is a trade to make deliberately, not in
236 + // passing.
237 + try {
238 + $callback();
239 + } finally {
240 + restore_current_blog();
241 + }
242 + }
164 243
165 - }
166 - return $linktext;
167 - }
244 + $offset += $batch_size;
245 + } while (count($site_ids) === $batch_size);
246 +}
168 247
169 - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
248 +/**
249 + * Removes the plugin's transients from the site that is currently switched in.
250 + *
251 + * @return void
252 + */
253 +function cryptx_delete_transients(): void
254 +{
255 + global $wpdb;
170 256
171 - function _dirImages()
172 - {
173 - $dir = $_SERVER["DOCUMENT_ROOT"].'/'.PLUGINDIR.'/'.dirname(plugin_basename (__FILE__)).'/images';
174 - echo "<!-- cryptximgdir: $dir -->";
175 - $fh = opendir($dir); //Verzeichnis
176 - $verzeichnisinhalt = array();
177 - while (true == ($file = readdir($fh)))
178 - {
179 - echo "<!-- BILD: $file -->";
180 - if ((substr(strtolower($file), -3)=="jpg") or (substr(strtolower($file), -3)=="gif"))
181 - {
182 - $verzeichnisinhalt[] = $file;
183 - }
184 - }
185 - return $verzeichnisinhalt;
186 - }
257 + // The LIKE patterns run through $wpdb->esc_like() and $wpdb->prepare().
258 + // No user input is involved here, so this is not a hole, but "_" is a
259 + // single-character wildcard in LIKE: unescaped, '_transient_cryptx_%' also
260 + // matches names like 'Xtransient1cryptxZ...' belonging to other plugins.
261 + // esc_like() turns those underscores into literal ones. The table name is
262 + // an identifier, not a value, and therefore must stay outside prepare().
263 + $transientLike = $wpdb->esc_like('_transient_cryptx_') . '%';
264 + $transientTimeoutLike = $wpdb->esc_like('_transient_timeout_cryptx_') . '%';
187 265
188 - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
266 + // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
267 + $wpdb->query($wpdb->prepare("DELETE FROM {$wpdb->options} WHERE option_name LIKE %s", $transientLike));
268 + // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
269 + $wpdb->query($wpdb->prepare("DELETE FROM {$wpdb->options} WHERE option_name LIKE %s", $transientTimeoutLike));
270 +}
189 271
190 - function encryptx($content)
191 - {
192 - global $post;
193 - $cryptxoff = false;
194 - $cryptxoffmeta = get_post_meta($post->ID,'cryptxoff',true);
195 - if ($cryptxoffmeta == "true") {
196 - $cryptxoff = true;
197 - }
198 - echo "<!-- encryptx: $cryptxoff / $cryptxoffmeta -->";
199 - if ($cryptxoff == false) {
200 - $content = preg_replace_callback('/<a (.*?)(href=("|\')mailto:(.*?)("|\')(.*?)|)>(.*?)<\/a>/i', array(get_class($this), 'mailtocrypt'), $content );
201 - }
202 - return $content;
203 - }
272 +/**
273 + * Sets up the plugin's options for the site that is currently switched in.
274 + *
275 + * @return void
276 + */
277 +function cryptx_install_site(): void
278 +{
279 + if (!class_exists('CryptX\\CryptX')) {
280 + return;
281 + }
204 282
205 - function mailtocrypt($Match)
206 - {
207 - global $cryptX_var;
208 - $return = $Match[0];
209 - $mailto = "mailto:" . $Match[4];
210 - if (@$cryptX_var[java]) {
211 - $crypt = '';
212 - $ascii = 0;
213 - for ($i = 0; $i < strlen( $Match[4] ); $i++) {
214 - $ascii = ord ( substr ( $Match[4], $i ) );
215 - if (8364 <= $char) {
216 - $ascii = 128;
217 - }
218 - $crypt .= chr($ascii + 1);
219 - }
220 - $javascript="javascript:DeCryptX('" . $crypt . "')";
221 - $return = str_replace( "mailto:".$Match[4], $javascript, $return);
222 - } else {
223 - $return = str_replace( $mailto, antispambot($mailto), $return);
224 - }
225 - return $return;
226 - }
283 + CryptX\CryptX::get_instance()->installCryptX();
284 +}
227 285
286 +// Activation.
287 +//
288 +// $network_wide is true when someone ticks "Network Activate". WordPress then
289 +// fires this hook exactly once, not once per site -- so without the loop, every
290 +// site but the current one is left without its stored options and, more to the
291 +// point, without the one-time migration of the pre-4.0 "cryptxoff" post meta.
292 +// The plugin still works there, because the defaults fill in, but a site that
293 +// carried excluded posts from an old version would silently lose them.
294 +register_activation_hook(__FILE__, function ($network_wide = false) {
295 + if ($network_wide) {
296 + cryptx_for_each_site('cryptx_install_site');
297 + } else {
298 + cryptx_install_site();
299 + }
228 300
229 - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
301 + flush_rewrite_rules();
302 +});
230 303
231 - function autolink($content) {
304 +// Deactivation. Same reason, other direction: the transients of every site but
305 +// the current one used to survive a network deactivation.
306 +register_deactivation_hook(__FILE__, function ($network_wide = false) {
307 + if ($network_wide) {
308 + cryptx_for_each_site('cryptx_delete_transients');
309 + } else {
310 + cryptx_delete_transients();
311 + }
312 +});
232 313
233 - $src[]="/([\s])([_a-zA-Z0-9-]+(\.[_a-zA-Z0-9-]+)*@[a-zA-Z0-9-]+(\.[a-zA-Z0-9-]+)*(\.[a-zA-Z]{2,}))/si";
234 - $src[]="/(>)([_a-zA-Z0-9-]+(\.[_a-zA-Z0-9-]+)*@[a-zA-Z0-9-]+(\.[a-zA-Z0-9-]+)*(\.[a-zA-Z]{2,}))(<)/si";
235 - $src[]="/^([_a-zA-Z0-9-]+(\.[_a-zA-Z0-9-]+)*@[a-zA-Z0-9-]+(\.[a-zA-Z0-9-]+)*(\.[a-zA-Z]{2,}))/si";
236 - $src[]="/(<a[^>]*>)<a[^>]*>/";
237 - $src[]="/(<\/A>)<\/A>/i";
314 +// A site created while the plugin is network-active gets the same treatment as
315 +// one that existed at activation time. Without this the new site works -- the
316 +// defaults see to that -- but nothing is ever written until someone saves, and
317 +// the behaviour differs from every other site in the network for no reason
318 +// anybody could see.
319 +add_action('wp_initialize_site', function ($site) {
320 + // The network option directly, not is_plugin_active_for_network(): that
321 + // lives in wp-admin/includes/plugin.php, which is not loaded when a site is
322 + // created over the REST API or WP-CLI -- exactly the paths that create sites
323 + // in bulk.
324 + $network_active = get_site_option('active_sitewide_plugins', []);
238 325
239 - $tar[]="\\1<a href=\"mailto:\\2\">\\2</a>";
240 - $tar[]="\\1<a href=\"mailto:\\2\">\\2</a>\\6";
241 - $tar[]="<a href=\"mailto:\\0\">\\0</a>";
242 - $tar[]="\\1";
243 - $tar[]="\\1";
326 + if (!isset($network_active[CRYPTX_PLUGIN_BASENAME])) {
327 + return;
328 + }
244 329
245 - $content = preg_replace($src,$tar,$content);
330 + $site_id = is_object($site) ? (int) $site->blog_id : (int) $site;
246 331
247 - return $content;
248 - }
332 + switch_to_blog($site_id);
333 + cryptx_install_site();
334 + restore_current_blog();
335 +}, 20);
249 336
250 - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
337 +// Add plugin action links.
338 +//
339 +// Registered inside the successful-initialisation path on purpose, not at the
340 +// top level of this file. It refers to a class constant, and the plugins screen
341 +// is exactly where someone goes to switch off a plugin whose class files are
342 +// missing -- a fatal error there would take away the only lever they have.
343 +// A plugin that did not initialise has no settings page to link to anyway.
344 +function cryptx_register_action_links(): void
345 +{
346 + add_filter('plugin_action_links_' . CRYPTX_PLUGIN_BASENAME, function ($links) {
347 + $settings_link = '<a href="' .
348 + esc_url(admin_url('options-general.php?page=' . CryptX\Admin\SettingsPage::MENU_SLUG)) .
349 + '">' . esc_html__('Settings', 'cryptx') . '</a>';
350 + array_unshift($links, $settings_link);
251 351
352 + return $links;
353 + });
354 +}
252 355
253 - function install() {
254 - add_option(
255 - 'cryptX',
256 - array(
257 - 'at' => ' [at] ',
258 - 'dot' => ' [dot] ',
259 - 'theContent' => 1,
260 - 'theExcerpt' => 0,
261 - 'commentText' => 1,
262 - 'java' => 1,
263 - 'opt_linktext' => 0,
264 - )
265 - );
266 - }
356 +/**
357 + * Encrypts the given content using the CryptX library and wraps it with a shortcode.
358 + *
359 + * @param string $content The content to be encrypted.
360 + * @param array|null $args Optional arguments to customize the encryption process.
361 + *
362 + * @return string The encrypted content wrapped in the appropriate shortcode.
363 + */
364 +if (!function_exists('cryptx_encrypt')) {
365 + function cryptx_encrypt(string $content, ?array $args = []): string
366 + {
367 + $cryptXInstance = Cryptx\CryptX::get_instance();
368 + // $attributesString contains the escaped (esc_attr()) shortcode attributes from $args
369 + // The signature allows null, convertArrayToArgumentString() does not.
370 + $attributesString = $cryptXInstance->convertArrayToArgumentString($args ?? []);
267 371
268 - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
372 + // wp_kses_post() and not esc_html(): the caller passes content, and
373 + // content in WordPress may carry markup. esc_html() turned a "<br>" in
374 + // a theme field into a visible "&lt;br&gt;" -- reported in the support
375 + // forum, and worked around there with html_entity_decode(), which
376 + // undoes the plugin's own protection in the Unicode and entity modes.
377 + // wp_kses_post keeps what a post may contain and drops the rest.
378 + $shortcode = '[cryptx' . $attributesString . ']' . wp_kses_post($content) . '[/cryptx]';
269 379
270 - /**
271 - * Attach the menu page to the `Options` tab
272 - */
273 - function header()
274 - {
275 - $cryptX_script.= "<script type=\"text/javascript\" src=\"" . get_option('siteurl') . '/' . PLUGINDIR . '/' . dirname(plugin_basename (__FILE__)) . "/js/cryptx.js\"></script>\n";
276 - print($cryptX_script);
277 - }
278 -
279 - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
280 -
281 -
282 - function cryptx_meta() {
283 - global $post;
284 - $cryptxoff = false;
285 - $cryptxoffmeta = get_post_meta($post->ID,'cryptxoff',true);
286 - if ($cryptxoffmeta == "true") {
287 - $cryptxoff = true;
288 - }
289 - ?>
290 - <input type="checkbox" name="cryptxoff" <?php if ($cryptxoff) { echo 'checked="checked"'; } ?>/> Disable CryptX
291 - <?php
292 - }
293 -
294 - function cryptx_option() {
295 - global $post;
296 - $cryptxoff = false;
297 - $cryptxoffmeta = get_post_meta($post->ID,'cryptxoff',true);
298 - if ($cryptxoffmeta == "true") {
299 - $cryptxoff = true;
300 - }
301 - if ( current_user_can('edit_posts') ) { ?>
302 - <fieldset id="cryptxoption" class="dbx-box">
303 - <h3 class="dbx-handle">CryptX</h3>
304 - <div class="dbx-content">
305 - <input type="checkbox" name="cryptxon" <?php if ($cryptxoff) { echo 'checked="checked"'; } ?>/> CryptX disabled?
306 - </div>
307 - </fieldset>
308 - <?php
309 - }
310 - }
311 -
312 - function cryptx_meta_box() {
313 - // Check whether the 2.5 function add_meta_box exists, and if it doesn't use 2.3 functions.
314 - if ( function_exists('add_meta_box') ) {
315 - add_meta_box('cryptx','CryptX', array(&$this, 'cryptx_meta'),'post');
316 - add_meta_box('cryptx','CryptX', array(&$this, 'cryptx_meta'),'page');
317 - } else {
318 - add_action('dbx_post_sidebar', array(&$this, 'cryptx_option'));
319 - add_action('dbx_page_sidebar', array(&$this, 'cryptx_option'));
320 - }
321 - }
322 -
323 - //add_action('admin_menu', 'cryptx_meta_box');
324 -
325 - function cryptx_insert_post($pID) {
326 - if (isset($_POST['cryptxoff'])) {
327 - add_post_meta($pID,'cryptxoff',"true", true) or update_post_meta($pID, 'cryptxoff', "true");
328 - } else {
329 - add_post_meta($pID,'cryptxoff',"false", true) or update_post_meta($pID, 'cryptxoff', "false");
330 - }
331 - }
332 - //add_action('wp_insert_post', array(&$this, 'cryptx_insert_post'));
333 -
334 -
335 -
336 -
337 - /**
338 - * Attach the menu page to the `Options` tab
339 - */
340 - function menu() {
341 - add_options_page(
342 - 'CryptX',
343 - (version_compare($GLOBALS['wp_version'], '2.6.999', '>') ? '<img src="' .@plugins_url('cryptx/icon.png'). '" width="10" height="10" alt="CryptX Icon" />' : ''). 'CryptX',
344 - 9,
345 - __FILE__,
346 - array(
347 - $this,
348 - '_submenu'
349 - )
350 - );
351 - }
352 -
353 - /**
354 - * Handles and renders the menu page
355 - */
356 - function _submenu() {
357 - global $cryptX_var;
358 -
359 - if (isset($_POST) && !empty($_POST)) {
360 - if (function_exists('current_user_can') === true && (current_user_can('manage_options') === false || current_user_can('edit_plugins') === false)) {
361 - wp_die("You don't have permission to access!");
362 - }
363 - check_admin_referer('cryptX');
364 - update_option( 'cryptX', $_POST['cryptX_var']);
365 - $cryptX_var = (array) get_option('cryptX'); // reread Options
366 - ?>
367 - <div id="message" class="updated fade">
368 - <p><strong><?php _e('Settings saved.') ?></strong></p>
369 - </div>
370 - <?php } ?>
371 -
372 - <div class="wrap">
373 - <?php if (version_compare($GLOBALS['wp_version'], '2.6.999', '>')) { ?>
374 - <div class="icon32" style="background: url(<?php echo @plugins_url('cryptx/icon32.png') ?>) no-repeat"><br /></div>
375 - <?php } ?>
376 - <h2>CryptX</h2>
377 -
378 - <form method="post" action="">
379 -
380 - <?php wp_nonce_field('cryptX') ?>
381 -
382 - <div id="poststuff" class="ui-sortable">
383 - <div id="wp_seo_about_wpseo" class="postbox">
384 -
385 - <h3><?php _e("Presentation",'cryptx'); ?></h3>
386 -
387 - <div class="inside">
388 - <table class="form-table">
389 - <tr valign="top">
390 - <td><input name="cryptX_var[opt_linktext]" type="radio" id="opt_linktext" value="0" <?php echo ($cryptX_var[opt_linktext] == 0) ? 'checked="checked"' : ''; ?> /></td>
391 - <th scope="row"><label for="cryptX_var[at]"><?php _e("Replacement for '@'",'cryptx'); ?></label></th>
392 - <td><input name="cryptX_var[at]" value="<?php echo $cryptX_var[at]; ?>" type="text" class="regular-text" /></td>
393 - </tr>
394 - <tr valign="top">
395 - <td>&nbsp;</td>
396 - <th scope="row"><label for="cryptX_var[dot]"><?php _e("Replacement for '.'",'cryptx'); ?></label></th>
397 - <td><input name="cryptX_var[dot]" value="<?php echo $cryptX_var[dot]; ?>" type="text" class="regular-text" /></td>
398 - </tr>
399 - <tr valign="top">
400 - <td scope="row"><input type="radio" name="cryptX_var[opt_linktext]" id="opt_linktext2" value="1" <?php echo ($cryptX_var[opt_linktext] == 1) ? 'checked="checked"' : ''; ?>/></td>
401 - <th><label for="cryptX_var[alt_linktext]"><?php _e("Text for link",'cryptx'); ?></label></th>
402 - <td><input name="cryptX_var[alt_linktext]" value="<?php echo $cryptX_var[alt_linktext]; ?>" type="text" class="regular-text" /></td>
403 - </tr>
404 - <tr valign="top">
405 - <td scope="row"><input type="radio" name="cryptX_var[opt_linktext]" id="opt_linktext3" value="2" <?php echo ($cryptX_var[opt_linktext] == 2) ? 'checked="checked"' : ''; ?>/></td>
406 - <th><label for="cryptX_var[alt_linkimage]"><?php _e("Image-URL",'cryptx'); ?></label></th>
407 - <td><input name="cryptX_var[alt_linkimage]" value="<?php echo $cryptX_var[alt_linkimage]; ?>" type="text" class="regular-text" /></td>
408 - </tr>
409 - <tr valign="top">
410 - <td scope="row">&nbsp;</td>
411 - <th><label for="cryptX_var[http_linkimage_title]"><?php _e("Title-Tag for the Image",'cryptx'); ?></label></th>
412 - <td><input name="cryptX_var[http_linkimage_title]" value="<?php echo $cryptX_var[http_linkimage_title]; ?>" type="text" class="regular-text" /></td>
413 - </tr>
414 - <tr valign="top">
415 - <td scope="row"><input type="radio" name="cryptX_var[opt_linktext]" id="opt_linktext4" value="3" <?php echo ($cryptX_var[opt_linktext] == 3) ? 'checked="checked"' : ''; ?>/></td>
416 - <th><label for="cryptX_var[alt_uploadedimage]"><?php _e("Select image from folder",'cryptx'); ?></label></th>
417 - <td><select name="cryptX_var[alt_uploadedimage]" onchange="cryptX_bild_wechsel(this)">
418 - <?php foreach($this->_dirImages() as $image) {
419 - $FirstIMG = (!isset($FirstIMG))? plugins_url('cryptx/images/').$image : ($cryptX_var[alt_uploadedimage] == plugins_url('cryptx/images/').$image) ? plugins_url('cryptx/images/').$image : $FirstIMG;
420 - ?>
421 - <option value="<?php echo plugins_url('cryptx/images/').$image; ?>" <?php echo ($cryptX_var[alt_uploadedimage] == plugins_url('cryptx/images/').$image) ? 'selected' : ''; ?> ><?php echo $image; ?></option>
422 - <?php } ?>
423 - </select>&nbsp;&nbsp;<img src="<?php echo $FirstIMG; ?>" id="cryptXmailTo"></td>
424 - </tr>
425 - <tr valign="top">
426 - <td>&nbsp;</td>
427 - <th><label for="cryptX_var[alt_linkimage_title]"><?php _e("Title-Tag for the Image",'cryptx'); ?></label></th>
428 - <td><input name="cryptX_var[alt_linkimage_title]" value="<?php echo $cryptX_var[alt_linkimage_title]; ?>" type="text" class="regular-text" />
429 - <span class="setting-description"><?php _e("Upload your favorite email-image to ../plugins/cryptx/images. Only .jpg and .gif Supported!",'cryptx'); ?></span></td>
430 - </tr>
431 - <tr valign="top">
432 - <td scope="row"><input type="radio" name="cryptX_var[opt_linktext]" id="opt_linktext" value="4" <?php echo ($cryptX_var[opt_linktext] == 4) ? 'checked="checked"' : ''; ?>/></td>
433 - <th colspan="2"><?php _e("Text scrambled by AntiSpamBot (<small>Try it and look at your site and check the html source!</small>)",'cryptx'); ?></th>
434 - </tr>
435 - </table>
436 - </div>
437 - </div>
438 -
439 - <div id="wp_seo_about_wpseo" class="postbox">
440 -
441 - <h3><?php _e("General",'cryptx'); ?></h3>
442 -
443 - <div class="inside">
444 - <table class="form-table">
445 - <tr valign="top">
446 - <th scope="row"><?php _e("Apply CryptX to...",'cryptx'); ?></th>
447 - <td><input name="cryptX_var[theContent]" <?php echo ($cryptX_var[theContent]) ? 'checked="checked"' : ''; ?> type="checkbox" />&nbsp;&nbsp;<?php _e("Content",'cryptx'); ?><br/>
448 - <input name="cryptX_var[theExcerpt]" <?php echo ($cryptX_var[theExcerpt]) ? 'checked="checked"' : ''; ?> type="checkbox" />&nbsp;&nbsp;<?php _e("Excerpt",'cryptx'); ?><br/>
449 - <input name="cryptX_var[commentText]" <?php echo ($cryptX_var[commentText]) ? 'checked="checked"' : ''; ?> type="checkbox" />&nbsp;&nbsp;<?php _e("Comments",'cryptx'); ?></td>
450 - </tr>
451 - <tr valign="top">
452 - <th scope="row"><?php _e("Type of decryption",'cryptx'); ?></th>
453 - <td><input name="cryptX_var[java]" <?php echo ($cryptX_var[java]) ? 'checked="checked"' : ''; ?> type="radio" value="1" />&nbsp;&nbsp;<?php _e("Use javascript to hide the Email-Link.",'cryptx'); ?><br/>
454 - <input name="cryptX_var[java]" <?php echo (!$cryptX_var[java]) ? 'checked="checked"' : ''; ?> type="radio" value="0" />&nbsp;&nbsp;<?php _e("Use Unicode to hide the Email-Link.",'cryptx'); ?></td>
455 - </tr>
456 - <tr valign="top">
457 - <th scope="row" colspan="2"><input name="cryptX_var[autolink]" <?php echo ($cryptX_var[autolink]) ? 'checked="checked"' : ''; ?> type="checkbox" />&nbsp;&nbsp;<?php _e("Add mailto to all unlinked email addresses",'cryptx'); ?></th>
458 - </tr>
459 - </table>
460 -
461 - </div>
462 - </div>
463 - <p><input type="submit" name="cryptX" class="button-primary" value="<?php _e('Save Changes') ?>" /></p>
464 - </div>
465 -
466 - </form>
467 -
468 - <script type="text/javascript">
469 - <!--
470 - function cryptX_bild_wechsel(select){
471 - document.getElementById("cryptXmailTo").src = select.options[select.options.selectedIndex].value;
472 - return true;
473 - } //-->
474 - </script>
475 -
476 - </div>
477 -<?php
478 - }
479 -
480 - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
481 -
482 -
483 - //--end-of-class
484 - }
485 -
380 + return do_shortcode($shortcode);
381 + }
486 382 }
487 383
488 -/////////////////////////////////////////////////////////////////////////////
489 -
490 384 /**
491 -* Initiating the plugin...
492 -* @see cryptX
493 -*/
494 -new cryptX;
385 + * Encrypts the given content using the CryptX library and wraps it with a shortcode.
386 + *
387 + * @deprecated 4.0.5 Use cryptx_encrypt() instead.
388 + * @see cryptx_encrypt()
389 + */
390 +if (!function_exists('encryptx')) {
391 + function encryptx(string $content, ?array $args = []): string
392 + {
393 + _doing_it_wrong(
394 + 'encryptx',
395 + esc_html__('This function is deprecated. Use cryptx_encrypt() instead.', 'cryptx'),
396 + '4.0.5'
397 + );
495 398
496 -/**
497 -* Create Template functions...
498 -* $content = string to convert
499 -* $text = string to replace linktext
500 -* $css = assign a css class to the link
501 -* $echo = 0: keep result in a variable, 1: show result
502 -*/
503 -function cryptx( $content, $text="", $css="", $echo=1 )
504 -{
505 - global $cryptX_var;
506 -
507 - $cryptX = new cryptX;
508 -
509 - $content = $cryptX->autolink( $content );
510 -
511 - $content = $cryptX->encryptx( $content );
512 -
513 - if("" != $text) {
514 - $content = preg_replace( "/(<a[^>]*>)(.*)(<\/a>)/i", '$1'.$text.'$3', $content );
515 - }
516 - if("" != $css) {
517 - $content = preg_replace( "/(<a[^>]*)(>)/i", '$1 class="'.$css.'"$2', $content );
518 - }
519 - if(1 == $echo) echo $content;
520 -
521 - return $content;
522 -}
523 -?>
399 + return cryptx_encrypt($content, $args);
400 + }
401 +}