PluginProbe
CryptX / trunk
CryptX vtrunk
4.2.0 4.1.1 trunk 1.0 1.1 1.2 1.3 1.4 1.5 1.6 1.7 1.9 2.0 2.1 2.2 2.3 2.3.1 2.3.2 2.3.3 2.4.0 2.4.1 2.4.2 2.4.3 2.4.4 2.4.5 All 92 releases
← All changes | cryptx.php +350 -267 1.0 → trunk View file →
@@ -1,318 +1,401 @@
1 1 <?php
2 -/*
3 -Plugin Name: CryptX
4 -Plugin URI: http://weber-nrw.de/
5 -Description: En-/Decrypt mailto-Links to prevent Spam Bots scanning Sorcecode for Emails.
6 -Version: 1.0
7 -Author: Ralf Weber
8 -Author URI: http://weber-nrw.de/
9 -*/
2 +/**
3 + * Plugin Name: CryptX
4 + * Plugin URI: https://wordpress.org/plugins/cryptx/
5 + * Description: CryptX encrypts email addresses in your posts, pages, comments, and text widgets to protect them from spam bots while keeping them readable for your visitors.
6 + * Version: 4.2.0
7 + * Requires at least: 6.7
8 + * Tested up to: 7.1
9 + * Requires PHP: 8.1
10 + * Author: Ralf Weber
11 + * Author URI: https://weber-nrw.de/
12 + * License: GPL v2 or later
13 + * License URI: https://www.gnu.org/licenses/gpl-2.0.html
14 + * Text Domain: cryptx
15 + *
16 + * CryptX is free software: you can redistribute it and/or modify
17 + * it under the terms of the GNU General Public License as published by
18 + * the Free Software Foundation, either version 2 of the License, or
19 + * any later version.
20 + *
21 + * CryptX is distributed in the hope that it will be useful,
22 + * but WITHOUT ANY WARRANTY; without even the implied warranty of
23 + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
24 + * GNU General Public License for more details.
25 + *
26 + * You should have received a copy of the GNU General Public License
27 + * along with CryptX. If not, see https://www.gnu.org/licenses/gpl-2.0.html.
28 + *
29 + * @package CryptX
30 + * @since 1.0.0
31 + */
10 32
11 -/////////////////////////////////////////////////////////////////////////////
12 -
13 -/**
14 -* @internal prevent from direct calls
15 -*/
33 +// Prevent direct access
16 34 if (!defined('ABSPATH')) {
17 - return ;
18 - }
35 + exit;
36 +}
19 37
20 -/**
21 -* @internal prevent from second inclusion
22 -*/
23 -if (!class_exists('cryptX')) {
38 +// Plugin constants
39 +define('CRYPTX_VERSION', '4.2.0');
40 +define('CRYPTX_PLUGIN_FILE', __FILE__);
41 +define('CRYPTX_PLUGIN_BASENAME', plugin_basename(__FILE__));
42 +define('CRYPTX_BASENAME', plugin_basename(__FILE__)); // Add this missing constant
43 +define('CRYPTX_DIR_PATH', plugin_dir_path(__FILE__));
44 +define('CRYPTX_DIR_URL', plugin_dir_url(__FILE__));
45 +define('CRYPTX_BASEFOLDER', dirname(CRYPTX_PLUGIN_BASENAME));
24 46
25 -/////////////////////////////////////////////////////////////////////////////
47 +// Minimum requirements. Keep these in sync with the plugin header above and
48 +// with "Requires at least" / "Requires PHP" in readme.txt. They are defined
49 +// once and used both for the check and for the notice, so the number shown to
50 +// the user cannot drift away from the number actually enforced.
51 +define('CRYPTX_MIN_PHP', '8.1');
52 +define('CRYPTX_MIN_WP', '6.7');
26 53
27 -load_plugin_textdomain('cryptx', PLUGINDIR . '/' . dirname(plugin_basename (__FILE__)) );
28 -
29 -$cryptX_var = (array) get_option('cryptX');
30 -
31 54 /**
32 -* "CryptX" WordPress Plugin
33 -*
34 -* @author Ralf Weber <ralf@weber-nrw.de>
35 -* @license http://opensource.org/licenses/gpl-license.php GNU Public License
36 -*/
37 -Class cryptX {
55 + * Shows an admin notice to whoever is in a position to act on it.
56 + *
57 + * Registered on both admin_notices and network_admin_notices. Without the
58 + * second, a network administrator working in the network backend -- the only
59 + * person who can deactivate a network-activated plugin -- never saw that the
60 + * server runs too old a PHP, or that a class file is missing. The capability
61 + * differs per screen: on a site it is activate_plugins, in the network backend
62 + * manage_network_plugins, which a mere site administrator does not hold.
63 + *
64 + * @param string $message The message, already translated and unescaped.
65 + *
66 + * @return void
67 + */
68 +function cryptx_admin_notice(string $message): void
69 +{
70 + $render = static function () use ($message): void {
71 + $capability = is_network_admin() ? 'manage_network_plugins' : 'activate_plugins';
38 72
39 - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
73 + if (!current_user_can($capability)) {
74 + return;
75 + }
40 76
41 - /**
42 - * Constructor
43 - *
44 - * This constructor attaches the needer plugin hook callbacks
45 - */
46 - function cryptX() {
77 + printf('<div class="notice notice-error"><p>%s</p></div>', esc_html($message));
78 + };
47 79
48 - global $cryptX_var;
80 + add_action('admin_notices', $render);
81 + add_action('network_admin_notices', $render);
82 +}
49 83
50 - // attach the converstion handlers
51 - //
52 - if (@$cryptX_var[theContent]) {
53 - if (@$cryptX_var[java]) {
54 - add_filter('the_content',
55 - array(&$this, '_encrypt'));
56 - } else {
57 - add_filter('the_content',
58 - array(&$this, '_unicode'));
59 - }
60 - }
61 - if (@$cryptX_var[theExcerpt]) {
62 - if (@$cryptX_var[java]) {
63 - add_filter('the_content',
64 - array(&$this, '_encrypt'));
65 - } else {
66 - add_filter('the_content',
67 - array(&$this, '_unicode'));
68 - }
69 - }
84 +if (version_compare(PHP_VERSION, CRYPTX_MIN_PHP, '<')) {
85 + cryptx_admin_notice(sprintf(
86 + /* translators: %1$s: Required PHP version, %2$s: Current PHP version */
87 + __('CryptX requires PHP version %1$s or higher. You are running version %2$s. Please update PHP.', 'cryptx'),
88 + CRYPTX_MIN_PHP,
89 + PHP_VERSION
90 + ));
91 + return;
92 +}
70 93
71 - // attach to admin menu
72 - //
73 - if (is_admin()) {
74 - add_action('admin_menu',
75 - array(&$this, '_menu')
76 - );
77 - }
94 +// WordPress version check
95 +global $wp_version;
96 +if (version_compare($wp_version, CRYPTX_MIN_WP, '<')) {
97 + cryptx_admin_notice(sprintf(
98 + /* translators: %1$s: Required WordPress version, %2$s: Current WordPress version */
99 + __('CryptX requires WordPress version %1$s or higher. You are running version %2$s. Please update WordPress.', 'cryptx'),
100 + CRYPTX_MIN_WP,
101 + $GLOBALS['wp_version']
102 + ));
103 + return;
104 +}
78 105
79 - // attach to plugin installation
80 - //
81 - add_action(
82 - 'activate_' . str_replace(
83 - DIRECTORY_SEPARATOR, '/',
84 - str_replace(
85 - realpath(ABSPATH . PLUGINDIR) . DIRECTORY_SEPARATOR,
86 - '', __FILE__
87 - )
88 - ),
89 - array(&$this, '_install')
90 - );
106 +// Autoloader for plugin classes
107 +spl_autoload_register(function ($class) {
108 + // Check if the class belongs to our namespace
109 + if (strpos($class, 'CryptX\\') !== 0) {
110 + return;
111 + }
91 112
92 - // attach javascript to Header
93 - //
94 - if (@$cryptX_var[java]) {
95 - add_action(
96 - 'wp_head',
97 - array(&$this, '_header')
98 - );
99 - }
113 + // Remove namespace prefix
114 + $class = substr($class, 7);
100 115
101 - } // End function
116 + // Convert namespace separators to directory separators
117 + $class = str_replace('\\', DIRECTORY_SEPARATOR, $class);
102 118
103 - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
119 + // Build the full path
120 + $file = CRYPTX_DIR_PATH . 'classes' . DIRECTORY_SEPARATOR . $class . '.php';
104 121
105 - /**
106 - * Wrap _encrypt
107 - * @param string $content
108 - * @return string
109 - */
110 - function _encrypt($content)
111 - {
112 - global $cryptX_var;
122 + // Include the file if it exists
123 + if (file_exists($file)) {
124 + require_once $file;
125 + }
126 +});
113 127
114 - preg_match_all('/<a[^>]*href=["|\'](.*)["|\']*>(.*)<\/a>/iUs', $content, $links, PREG_SET_ORDER);
128 +// The settings screen posts nothing: it talks to the REST routes in
129 +// CryptX\Admin\RestController, which carry their own capability check and are
130 +// covered by WordPress' REST nonce. The global cryptx_nonce_check() that used
131 +// to sit here guarded $_POST['cryptX_var'], a key nothing has sent since the
132 +// old settings form was removed in 4.1.0 -- a dead guard next to a live one is
133 +// a trap for whoever wires up the next form.
115 134
116 - foreach( $links as $link ) {
135 +// Initialize the plugin
136 +add_action('plugins_loaded', function() {
137 + // Check if all required classes can be loaded
138 + $requiredClasses = [
139 + 'CryptX\\CryptX',
140 + 'CryptX\\Config',
141 + 'CryptX\\SecureEncryption',
142 + 'CryptX\\Exposure',
143 + 'CryptX\\Block',
144 + 'CryptX\\ImageToken',
145 + 'CryptX\\Admin\\NetworkDefaults',
146 + 'CryptX\\Admin\\SettingsPage',
147 + 'CryptX\\Admin\\SettingsSchema',
148 + 'CryptX\\Admin\\RestController',
149 + 'CryptX\\Admin\\SiteHealth',
150 + ];
117 151
118 - if(preg_match('/mailto:(.*)/', $link[1], $mail)) {
119 - $crypt = '';
120 - $ascii = 0;
121 - for ($i = 0; $i < strlen( $mail[1] ); $i++) {
122 - $ascii = ord ( substr ( $mail[1], $i ) );
123 - if (8364 <= $char) {
124 - $ascii = 128;
125 - }
126 - $crypt .= chr($ascii + 1);
127 - }
128 - $content = str_replace( $link[1], "javascript:DeCryptX('" . $crypt . "')", $content);
129 - $new_mail = str_replace( "@", $cryptX_var[at], $link[2]);
130 - $new_mail = str_replace( ".", $cryptX_var[dot], $new_mail);
131 - $content = str_replace( $link[2], $new_mail, $content);
132 - }
152 + $missingClasses = [];
153 + foreach ($requiredClasses as $class) {
154 + if (!class_exists($class)) {
155 + $missingClasses[] = $class;
156 + }
157 + }
133 158
134 - } // foreach
135 - return $content;
136 - }
159 + if (!empty($missingClasses)) {
160 + cryptx_admin_notice(
161 + __('CryptX: Missing required classes: ', 'cryptx') . implode(', ', $missingClasses)
162 + );
163 + return;
164 + }
137 165
138 - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
166 + // Initialize the main plugin class
167 + try {
168 + $cryptx_instance = CryptX\CryptX::get_instance();
169 + $cryptx_instance->startCryptX();
170 + cryptx_register_action_links();
139 171
140 - /**
141 - * Wrap _unicode
142 - * @param string $content
143 - * @return string
144 - */
145 - function _unicode($content)
146 - {
147 - global $cryptX_var;
172 + // Guarded here as well as inside register(), and deliberately not
173 + // listed in $requiredClasses above. Both of those would load the file
174 + // on every single front-end and admin request -- class_exists() runs
175 + // the autoloader, and so does a static call -- to register commands
176 + // that only exist under WP-CLI.
177 + //
178 + // class_exists() is still asked so that a package missing the file
179 + // cannot raise a fatal Error, which catch (Exception) below would not
180 + // have caught. It buys no notice: the commands are then simply absent.
181 + // That is the right silence -- nothing a visitor or an administrator
182 + // sees depends on them.
183 + if (defined('WP_CLI') && WP_CLI && class_exists('CryptX\Cli')) {
184 + CryptX\Cli::register();
185 + }
186 + } catch (Exception $e) {
187 + cryptx_admin_notice(
188 + __('CryptX initialization failed: ', 'cryptx') . $e->getMessage()
189 + );
190 + }
191 +});
148 192
149 - preg_match_all('/<a[^>]*href=["|\'](.*)["|\']*>(.*)<\/a>/iUs', $content, $links, PREG_SET_ORDER);
193 +/**
194 + * Runs a callback once for every site of the network, in batches.
195 + *
196 + * get_sites() without a limit pulls the whole network into memory, and a
197 + * network can have thousands of sites. Same construction as uninstall.php,
198 + * deliberately: the two do the same job at opposite ends of the plugin's life,
199 + * and one of them being cleverer than the other only makes both harder to
200 + * trust.
201 + *
202 + * On a single site the callback simply runs once.
203 + *
204 + * @param callable $callback Receives nothing; runs with the site switched in.
205 + *
206 + * @return void
207 + */
208 +function cryptx_for_each_site(callable $callback): void
209 +{
210 + if (!is_multisite()) {
211 + $callback();
150 212
151 - foreach( $links as $link ) {
213 + return;
214 + }
152 215
153 - if(preg_match('/mailto:(.*)/', $link[1], $mail)) {
154 - $mailto = "mailto:" . $mail[1];
155 - $crypt = '';
156 - for ($i = 0; $i < strlen( $mailto ); $i++) {
157 - $crypt .= "&#".ord ( substr ( $mailto, $i ) );
158 - }
159 - $content = str_replace( $mailto, $crypt, $content);
160 - $new_mail = str_replace( "@", $cryptX_var[at], $link[2]);
161 - $new_mail = str_replace( ".", $cryptX_var[dot], $new_mail);
162 - $content = str_replace( $link[2], $new_mail, $content);
163 - }
216 + $batch_size = 100;
217 + $offset = 0;
164 218
165 - } // foreach
166 - return $content;
167 - }
219 + do {
220 + $site_ids = get_sites([
221 + 'fields' => 'ids',
222 + 'number' => $batch_size,
223 + 'offset' => $offset,
224 + 'orderby' => 'id',
225 + 'update_site_meta_cache' => false,
226 + ]);
168 227
169 - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
228 + foreach ($site_ids as $site_id) {
229 + switch_to_blog($site_id);
170 230
171 - /**
172 - * Performs the routines required at plugin installation:
173 - * in general introducing the settings array
174 - */
175 - function _install() {
176 - add_option(
177 - 'cryptX',
178 - array(
179 - 'at' => ' [at] ',
180 - 'dot' => ' [dot] ',
181 - 'theContent' => 1,
182 - 'theExcerpt' => 0,
183 - 'java' => 1,
184 - )
185 - );
186 - }
231 + // finally, so a failing callback does not leave the blog stack
232 + // switched for whatever runs next. It does not keep the loop
233 + // going: an exception still travels upwards and the remaining
234 + // sites are skipped. Catching it here would hide a broken site
235 + // instead, and that is a trade to make deliberately, not in
236 + // passing.
237 + try {
238 + $callback();
239 + } finally {
240 + restore_current_blog();
241 + }
242 + }
187 243
188 - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
244 + $offset += $batch_size;
245 + } while (count($site_ids) === $batch_size);
246 +}
189 247
190 - /**
191 - * Attach the menu page to the `Options` tab
192 - */
193 - function _header()
194 - {
195 - $cryptX_script.= "<script type=\"text/javascript\" src=\"" . get_option('siteurl') . '/' . PLUGINDIR . '/' . dirname(plugin_basename (__FILE__)) . "/js/cryptx.js\"></script>\n";
196 - print($cryptX_script);
197 - }
248 +/**
249 + * Removes the plugin's transients from the site that is currently switched in.
250 + *
251 + * @return void
252 + */
253 +function cryptx_delete_transients(): void
254 +{
255 + global $wpdb;
198 256
199 - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
257 + // The LIKE patterns run through $wpdb->esc_like() and $wpdb->prepare().
258 + // No user input is involved here, so this is not a hole, but "_" is a
259 + // single-character wildcard in LIKE: unescaped, '_transient_cryptx_%' also
260 + // matches names like 'Xtransient1cryptxZ...' belonging to other plugins.
261 + // esc_like() turns those underscores into literal ones. The table name is
262 + // an identifier, not a value, and therefore must stay outside prepare().
263 + $transientLike = $wpdb->esc_like('_transient_cryptx_') . '%';
264 + $transientTimeoutLike = $wpdb->esc_like('_transient_timeout_cryptx_') . '%';
200 265
201 - /**
202 - * Attach the menu page to the `Options` tab
203 - */
204 - function _menu() {
205 - add_submenu_page('options-general.php',
206 - 'CryptX',
207 - 'CryptX', 9,
208 - __FILE__,
209 - array($this, '_submenu')
210 - );
211 - }
266 + // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
267 + $wpdb->query($wpdb->prepare("DELETE FROM {$wpdb->options} WHERE option_name LIKE %s", $transientLike));
268 + // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching
269 + $wpdb->query($wpdb->prepare("DELETE FROM {$wpdb->options} WHERE option_name LIKE %s", $transientTimeoutLike));
270 +}
212 271
213 - /**
214 - * Handles and renders the menu page
215 - */
216 - function _submenu() {
217 - global $cryptX_var;
272 +/**
273 + * Sets up the plugin's options for the site that is currently switched in.
274 + *
275 + * @return void
276 + */
277 +function cryptx_install_site(): void
278 +{
279 + if (!class_exists('CryptX\\CryptX')) {
280 + return;
281 + }
218 282
219 - // sanitize referrer
220 - //
221 - $_SERVER['HTTP_REFERER'] = preg_replace(
222 - '~&saved=.*$~Uis','', $_SERVER['HTTP_REFERER']
223 - );
283 + CryptX\CryptX::get_instance()->installCryptX();
284 +}
224 285
225 - // information updated ?
226 - //
227 - if ($_POST['submit']) {
286 +// Activation.
287 +//
288 +// $network_wide is true when someone ticks "Network Activate". WordPress then
289 +// fires this hook exactly once, not once per site -- so without the loop, every
290 +// site but the current one is left without its stored options and, more to the
291 +// point, without the one-time migration of the pre-4.0 "cryptxoff" post meta.
292 +// The plugin still works there, because the defaults fill in, but a site that
293 +// carried excluded posts from an old version would silently lose them.
294 +register_activation_hook(__FILE__, function ($network_wide = false) {
295 + if ($network_wide) {
296 + cryptx_for_each_site('cryptx_install_site');
297 + } else {
298 + cryptx_install_site();
299 + }
228 300
229 - // save
230 - //
231 - update_option(
232 - 'cryptX',
233 - $_POST['cryptX_var']
234 - );
301 + flush_rewrite_rules();
302 +});
235 303
236 - die("<script>document.location.href = '{$_SERVER['HTTP_REFERER']}&saved=settings:" . time() . "';</script>");
237 - }
304 +// Deactivation. Same reason, other direction: the transients of every site but
305 +// the current one used to survive a network deactivation.
306 +register_deactivation_hook(__FILE__, function ($network_wide = false) {
307 + if ($network_wide) {
308 + cryptx_for_each_site('cryptx_delete_transients');
309 + } else {
310 + cryptx_delete_transients();
311 + }
312 +});
238 313
239 - // operation report detected
240 - //
241 - if (@$_GET['saved']) {
314 +// A site created while the plugin is network-active gets the same treatment as
315 +// one that existed at activation time. Without this the new site works -- the
316 +// defaults see to that -- but nothing is ever written until someone saves, and
317 +// the behaviour differs from every other site in the network for no reason
318 +// anybody could see.
319 +add_action('wp_initialize_site', function ($site) {
320 + // The network option directly, not is_plugin_active_for_network(): that
321 + // lives in wp-admin/includes/plugin.php, which is not loaded when a site is
322 + // created over the REST API or WP-CLI -- exactly the paths that create sites
323 + // in bulk.
324 + $network_active = get_site_option('active_sitewide_plugins', []);
242 325
243 - list($saved, $ts) = explode(':', $_GET['saved']);
244 - if (time() - $ts < 10) {
245 - echo '<div id="message" class="updated fade"><p><strong>';
326 + if (!isset($network_active[CRYPTX_PLUGIN_BASENAME])) {
327 + return;
328 + }
246 329
247 - switch ($saved) {
248 - case 'settings' :
249 - echo 'Settings saved.';
250 - break;
251 - }
330 + $site_id = is_object($site) ? (int) $site->blog_id : (int) $site;
252 331
253 - echo '</strong></p></div>';
254 - }
255 - }
332 + switch_to_blog($site_id);
333 + cryptx_install_site();
334 + restore_current_blog();
335 +}, 20);
256 336
257 - // read the settings
258 - //
259 - //$cryptX = (array) get_option('cryptX');
337 +// Add plugin action links.
338 +//
339 +// Registered inside the successful-initialisation path on purpose, not at the
340 +// top level of this file. It refers to a class constant, and the plugins screen
341 +// is exactly where someone goes to switch off a plugin whose class files are
342 +// missing -- a fatal error there would take away the only lever they have.
343 +// A plugin that did not initialise has no settings page to link to anyway.
344 +function cryptx_register_action_links(): void
345 +{
346 + add_filter('plugin_action_links_' . CRYPTX_PLUGIN_BASENAME, function ($links) {
347 + $settings_link = '<a href="' .
348 + esc_url(admin_url('options-general.php?page=' . CryptX\Admin\SettingsPage::MENU_SLUG)) .
349 + '">' . esc_html__('Settings', 'cryptx') . '</a>';
350 + array_unshift($links, $settings_link);
260 351
261 -?>
262 -<!-- Start Optionen im Adminbereich (xhtml, au�erhalb PHP) -->
263 -<div class="wrap">
264 - <h2><?php _e("CryptX Options...",'cryptx'); ?></h2>
265 - <form method="post">
266 - <blockquote>
267 - <table>
268 - <tr>
269 - <td valign="top"><?php _e("Replacement for '@'",'cryptx'); ?>
270 - <input name="cryptX_var[at]" value="<?php echo $cryptX_var[at]; ?>" type="text" /></td>
271 - </tr>
272 - <tr>
273 - <td valign="top"><?php _e("Replacement for '.'",'cryptx'); ?>
274 - <input name="cryptX_var[dot]" value="<?php echo $cryptX_var[dot]; ?>" type="text" /></td>
275 - </tr>
276 - <tr>
277 - <td valign="top"><input name="cryptX_var[theContent]" <?php echo ($cryptX_var[theContent]) ? 'checked="checked"' : ''; ?> type="checkbox" />
278 - <?php _e("Apply CryptX to the Content",'cryptx'); ?></td>
279 - </tr>
280 - <tr>
281 - <td valign="top"><input name="cryptX_var[theExcerpt]" <?php echo ($cryptX_var[theExcerpt]) ? 'checked="checked"' : ''; ?> type="checkbox" />
282 - <?php _e("Apply CryptX to the Excerpt",'cryptx'); ?></td>
283 - </tr>
284 - <tr>
285 - <td valign="top">
286 - <input name="cryptX_var[java]" <?php echo ($cryptX_var[java]) ? 'checked="checked"' : ''; ?> type="radio" value="1" />
287 - <?php _e("Use javascript to hide the Email-Link.",'cryptx'); ?><br />
288 - <input name="cryptX_var[java]" <?php echo (!$cryptX_var[java]) ? 'checked="checked"' : ''; ?> type="radio" value="0" />
289 - <?php _e("Use Unicode to hide the Email-Link.",'cryptx'); ?>
290 - </td>
291 - </tr>
292 - <tr>
293 - <td><input type="submit" name="submit" value="Update &raquo;" /></td>
294 - </tr>
295 - </table>
296 - </blockquote>
297 - </form>
298 -</div>
299 -<?php
300 - }
352 + return $links;
353 + });
354 +}
301 355
302 - // -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
356 +/**
357 + * Encrypts the given content using the CryptX library and wraps it with a shortcode.
358 + *
359 + * @param string $content The content to be encrypted.
360 + * @param array|null $args Optional arguments to customize the encryption process.
361 + *
362 + * @return string The encrypted content wrapped in the appropriate shortcode.
363 + */
364 +if (!function_exists('cryptx_encrypt')) {
365 + function cryptx_encrypt(string $content, ?array $args = []): string
366 + {
367 + $cryptXInstance = Cryptx\CryptX::get_instance();
368 + // $attributesString contains the escaped (esc_attr()) shortcode attributes from $args
369 + // The signature allows null, convertArrayToArgumentString() does not.
370 + $attributesString = $cryptXInstance->convertArrayToArgumentString($args ?? []);
303 371
372 + // wp_kses_post() and not esc_html(): the caller passes content, and
373 + // content in WordPress may carry markup. esc_html() turned a "<br>" in
374 + // a theme field into a visible "&lt;br&gt;" -- reported in the support
375 + // forum, and worked around there with html_entity_decode(), which
376 + // undoes the plugin's own protection in the Unicode and entity modes.
377 + // wp_kses_post keeps what a post may contain and drops the rest.
378 + $shortcode = '[cryptx' . $attributesString . ']' . wp_kses_post($content) . '[/cryptx]';
304 379
305 - //--end-of-class
306 - }
307 -
380 + return do_shortcode($shortcode);
381 + }
308 382 }
309 383
310 -/////////////////////////////////////////////////////////////////////////////
311 -
312 384 /**
313 -* Initiating the plugin...
314 -* @see cryptX
315 -*/
316 -new cryptX;
385 + * Encrypts the given content using the CryptX library and wraps it with a shortcode.
386 + *
387 + * @deprecated 4.0.5 Use cryptx_encrypt() instead.
388 + * @see cryptx_encrypt()
389 + */
390 +if (!function_exists('encryptx')) {
391 + function encryptx(string $content, ?array $args = []): string
392 + {
393 + _doing_it_wrong(
394 + 'encryptx',
395 + esc_html__('This function is deprecated. Use cryptx_encrypt() instead.', 'cryptx'),
396 + '4.0.5'
397 + );
317 398
318 -?>
399 + return cryptx_encrypt($content, $args);
400 + }
401 +}