firebox / Inc / Core / Controllers / BoxSettings.php

BoxSettings.php in FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment trunk, at Inc/Core/Controllers/BoxSettings.php

257 lines 6.7 KB

Raw Download Zip

1	<?php
2	/**
3	* @package FireBox
4	* @version 3.1.13 Free
5	*
6	* @author FirePlugins <info@fireplugins.com>
7	* @link https://www.fireplugins.com
8	* @copyright Copyright © 2026 FirePlugins All Rights Reserved
9	* @license GNU GPLv3 <http://www.gnu.org/licenses/gpl.html> or later
10	*/
11
12	namespace FireBox\Core\Controllers;
13
14	if (!defined('ABSPATH'))
15	{
16	exit; // Exit if accessed directly.
17	}
18
19	use FPFramework\Base\Form;
20	use FPFramework\Base\FieldsParser;
21	use FPFramework\Base\Ui\Tabs;
22
23	class BoxSettings extends BaseController
24	{
25	protected $action = '';
26
27	/**
28	* The form settings name
29	*
30	* @var string
31	*/
32	const settings_name = 'firebox_settings';
33
34	public function __construct()
35	{
36	add_action('update_option_firebox_settings', [$this, 'after_update_settings'], 10, 2);
37	}
38
39	/**
40	* Render the page content
41	*
42	* @return void
43	*/
44	public function render()
45	{
46	// page content
47	add_action('firebox/settings_page', [$this, 'settingsPageContent']);
48
49	// render layout
50	firebox()->renderer->admin->render('pages/settings');
51	}
52
53	/**
54	* Stop the usage tracking if the user disables the tracking behavior.
55	*
56	* @param array $old_value
57	* @param array $new_value
58	*
59	* @return void
60	*/
61	public function after_update_settings($old_value, $new_value)
62	{
63	if (isset($new_value['usage_tracking']) && !$new_value['usage_tracking'])
64	{
65	$tracking = new \FireBox\Core\UsageTracking\SendUsage();
66	$tracking->stop();
67	}
68	}
69
70	/**
71	* Load required media files
72	*
73	* @return void
74	*/
75	public function addMedia()
76	{
77	// load geoip js
78	wp_register_script(
79	'fpf-geoip',
80	FPF_MEDIA_URL . 'admin/js/fpf_geoip.js',
81	[],
82	FPF_VERSION,
83	false
84	);
85	wp_enqueue_script('fpf-geoip');
86
87	wp_register_script(
88	'firebox-settings-integrations',
89	FBOX_MEDIA_ADMIN_URL . 'js/integrations_settings.js',
90	[],
91	FBOX_VERSION,
92	true
93	);
94	wp_enqueue_script('firebox-settings-integrations');
95
96	wp_register_style(
97	'firebox-settings-integrations',
98	FBOX_MEDIA_ADMIN_URL . 'css/integrations_settings.css',
99	[],
100	FBOX_VERSION
101	);
102	wp_enqueue_style('firebox-settings-integrations');
103
104	$integrations = [];
105	foreach (\FireBox\Core\Helpers\Integrations::getSettingsManagedIntegrations() as $integration)
106	{
107	$integrations[$integration['slug']] = [
108	'label' => $integration['label'],
109	'connected' => !empty($integration['connected']),
110	'locked' => !empty($integration['locked']),
111	'connection_type' => isset($integration['connection_type']) ? $integration['connection_type'] : 'api_key',
112	'docs_url' => isset($integration['docs_url']) ? $integration['docs_url'] : ''
113	];
114	}
115
116	$data = [
117	'ajax_url' => admin_url('admin-ajax.php'),
118	'settings_url' => admin_url('admin.php?page=firebox-settings#integrations'),
119	'nonce' => wp_create_nonce('fpf_js_nonce'),
120	'i18n' => [
121	'connected' => firebox()->_('FB_INTEGRATION_CONNECTED'),
122	'disconnected' => firebox()->_('FB_INTEGRATION_DISCONNECTED'),
123	'could_not_connect' => firebox()->_('FB_INTEGRATION_ERROR_CONNECT'),
124	'could_not_disconnect' => firebox()->_('FB_INTEGRATION_ERROR_DISCONNECT'),
125	'please_enter_api_key' => fpframework()->_('FPF_PLEASE_ENTER_AN_API_KEY')
126	],
127	'integrations' => $integrations
128	];
129
130	wp_localize_script('firebox-settings-integrations', 'firebox_integrations_settings', $data);
131	}
132
133	/**
134	* Callback used to handle the processing of settings.
135	* Useful when using a Repeater field to remove the template from the list of submitted items.
136	*
137	* @param array $input
138	*
139	* @return void
140	*/
141	public function processBoxSettings($input)
142	{
143	if ($this->isAllowedProgrammaticSettingsUpdate())
144	{
145	return is_array($input) ? $input : [];
146	}
147
148	$input = is_array($input) ? $input : [];
149	$is_settings_form_submit = isset($_POST['option_page']) && sanitize_text_field(wp_unslash($_POST['option_page'])) === self::settings_name;
150
151	// Allow programmatic updates (e.g. AJAX integration connect/disconnect) without settings form nonce.
152	if (!$is_settings_form_submit)
153	{
154	return $input;
155	}
156
157	// run a quick security check
158	if (!check_admin_referer('fpf_form_nonce_firebox_settings', 'fpf_form_nonce_firebox_settings'))
159	{
160	return; // get out if we didn't click the Activate button
161	}
162
163	// Disable usage tracking
164	if (!isset($input['usage_tracking']))
165	{
166	$tracking = new \FireBox\Core\UsageTracking\SendUsage();
167	$tracking->stop();
168	}
169
170
171
172	// Preserve integration keys managed through AJAX connect/disconnect.
173	$stored_settings = get_option('firebox_settings', []);
174	$stored_settings = is_array($stored_settings) ? $stored_settings : [];
175	foreach (\FireBox\Core\Helpers\Integrations::getSettingsKeys() as $key)
176	{
177	// Only a stored credential is worth carrying over. The keys are
178	// seeded empty at install, and copying those in would add a blank
179	// entry for every integration the site never connected.
180	if (!array_key_exists($key, $input) && !empty($stored_settings[$key]))
181	{
182	$input[$key] = $stored_settings[$key];
183	}
184	}
185
186	// Filters the fields value
187	\FPFramework\Helpers\FormHelper::filterFields($input, \FireBox\Core\Admin\Forms\Settings::getSettings());
188
189	\FPFramework\Libs\AdminNotice::displaySuccess(fpframework()->_('FPF_SETTINGS_SAVED'));
190
191	return $input;
192	}
193
194	/**
195	* Allow a small set of internal settings updates to bypass the settings-form nonce.
196	*
197	* @return bool
198	*/
199	private function isAllowedProgrammaticSettingsUpdate()
200	{
201	if (!wp_doing_ajax())
202	{
203	return false;
204	}
205
206	$action = isset($_REQUEST['action']) ? sanitize_key(wp_unslash($_REQUEST['action'])) : '';
207
208	if ($action === '')
209	{
210	return false;
211	}
212
213	return in_array($action, [
214	'firebox_download_key_notice_activate',
215	'firebox_enable_usage_tracking',
216	], true);
217	}
218
219
220
221	/**
222	* What the settings page will contain
223	*
224	* @return void
225	*/
226	public function settingsPageContent()
227	{
228	$fieldsParser = new FieldsParser([
229	'fields_name_prefix' => 'firebox_settings',
230	'fields_path' => ['\\FireBox\\Core\\Fields\\']
231	]);
232
233	$settings = \FireBox\Core\Admin\Forms\Settings::getSettings();
234	foreach ($settings['data'] as $key => $value)
235	{
236	ob_start();
237	$fieldsParser->renderContentFields($value);
238	$html = ob_get_contents();
239	ob_end_clean();
240
241	$settings['data'][$key]['title'] = $value['title'];
242	$settings['data'][$key]['content'] = $html;
243	}
244
245	// render settings as tabs
246	$tabs = new Tabs($settings);
247
248	// render form
249	$form = new Form($tabs->render(), [
250	'section_name' => self::settings_name
251	]);
252
253	echo $form->render(); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
254	}
255
256	}
257