';
}
}
}
/**
* Given a form field and a description, prints either the error associated with the field or the description.
*
* @since 0.7
*
* @param string $field The form field for which to check for an error.
* @param string $description Unlocalized string to display if there was no error with the given field.
*/
public function helper_print_error_or_description( $field, $description ) {
if ( isset( $this->form_errors[ $field ] ) ) :
?>
form_errors[ $field ] ); ?>
__( 'Posts', 'edit-flow' ),
'page' => __( 'Pages', 'edit-flow' ),
);
$custom_post_types = $this->get_supported_post_types_for_module();
if ( count( $custom_post_types ) ) {
foreach ( $custom_post_types as $custom_post_type => $args ) {
$all_post_types[ $custom_post_type ] = $args->label;
}
}
foreach ( $all_post_types as $post_type => $title ) {
echo '';
// Leave a note to the admin as a reminder that add_post_type_support has been used somewhere in their code.
if ( post_type_supports( $post_type, $module->post_type_support ) ) {
/* translators: 1: post type, 2: post type support */
echo ' ' . esc_html( sprintf( __( 'Disabled because add_post_type_support( \'%1$s\', \'%2$s\' ) is included in a loaded file.', 'edit-flow' ), $post_type, $module->post_type_support ) ) . '';
}
echo ' ';
}
}
/**
* Validation and sanitization on the settings field.
*
* This method is called automatically and doesn't need to be registered anywhere.
*
* @since 0.7
*
* @return false|void Returns false if validation fails, otherwise redirects.
*/
public function helper_settings_validate_and_save() {
if ( ! isset( $_POST['action'], $_POST['_wpnonce'], $_POST['option_page'], $_POST['_wp_http_referer'], $_POST['edit_flow_module_name'], $_POST['submit'] ) || ! is_admin() ) {
return false;
}
global $edit_flow;
$module_name = sanitize_key( $_POST['edit_flow_module_name'] );
// Validate the submitted module name resolves to a real module before
// dereferencing it; this runs ahead of the capability check below, so a bogus
// name must not reach a property access on a non-object.
if ( ! isset( $edit_flow->$module_name ) || ! is_object( $edit_flow->$module_name ) ) {
return false;
}
if ( 'update' != $_POST['action']
|| $_POST['option_page'] != $edit_flow->$module_name->module->options_group_name ) {
return false;
}
// phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Nonces don't need sanitization, just verification.
if ( ! current_user_can( 'manage_options' ) || ! wp_verify_nonce( $_POST['_wpnonce'], $edit_flow->$module_name->module->options_group_name . '-options' ) ) {
wp_die( esc_html__( 'Cheatin’ uh?', 'edit-flow' ) );
}
// phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Sanitization is handled by each module's settings_validate method.
$new_options = ( isset( $_POST[ $edit_flow->$module_name->module->options_group_name ] ) ) ? $_POST[ $edit_flow->$module_name->module->options_group_name ] : array();
// Only call the validation callback if it exists.
if ( method_exists( $edit_flow->$module_name, 'settings_validate' ) ) {
$new_options = $edit_flow->$module_name->settings_validate( $new_options );
} else {
// Without a module validator, accept only keys that already exist in the
// module's options and sanitise their values, rather than persisting
// arbitrary submitted keys into the autoloaded options row.
$existing = (array) $edit_flow->$module_name->module->options;
$new_options = map_deep( array_intersect_key( (array) $new_options, $existing ), 'sanitize_text_field' );
}
// Cast our object and save the data.
$new_options = (object) array_merge( (array) $edit_flow->$module_name->module->options, $new_options );
$edit_flow->update_all_module_options( $edit_flow->$module_name->module->name, $new_options );
// Redirect back to the settings page that was submitted without any previous messages.
$referer = wp_get_referer();
if ( ! $referer ) {
$referer = admin_url( 'admin.php?page=' . $edit_flow->$module_name->module->settings_slug );
}
$goback = add_query_arg( 'message', 'settings-updated', remove_query_arg( array( 'message' ), $referer ) );
wp_safe_redirect( $goback );
exit;
}
}
}