← All changes | app/Hooks/actions.php +133 -11 1.35 → 2.2.0 View file →

		@@ -2,8 +2,9 @@
2	2	//if accessed directly exit
3	3	if (!defined('ABSPATH')) exit;
4	4
5	5	use FluentBoards\App\Services\Helper;
	6	+use FluentBoards\App\Services\Libs\FileSystem;
6	7
7	8	/**
8	9	* All registered action's handlers should be in app\Hooks\Handlers,
9	10	* addAction is similar to add_action and addCustomAction is just a
		@@ -17,12 +18,61 @@
17	18	* @var $app FluentBoards\Framework\Foundation\Application
18	19	*/
19	20
20	21	(new \FluentBoards\App\Hooks\Handlers\AdminMenuHandler())->register();
	22	+$app->addAction('admin_init', 'UpdateHandler@maybeUpgradeIndexes', 10, 0);
21	23
	24	+add_action('fluent_boards/check_upload_protection', function () {
	25	+ FileSystem::checkUploadProtection();
	26	+});
	27	+
	28	+// Cover existing uploads after updates, even before another file is uploaded.
	29	+add_action('admin_init', function () {
	30	+ if (!current_user_can('manage_options') || wp_doing_ajax()) {
	31	+ return;
	32	+ }
	33	+
	34	+ $protectionReady = FileSystem::installUploadProtectionRules(false);
	35	+ $blocked = FileSystem::checkUploadProtection(false);
	36	+ if (!$protectionReady || $blocked !== true) {
	37	+ add_action('admin_notices', function () use ($protectionReady, $blocked) {
	38	+ if ($blocked === false) {
	39	+ $message = __('Fluent Boards uploads are accessible by direct URL without a login. Ask your hosting provider to block direct web access to this directory and its subdirectories.', 'fluent-boards');
	40	+ } elseif (!$protectionReady) {
	41	+ $message = __('Fluent Boards could not prepare upload-directory protection. Ask your hosting provider to check filesystem permissions and block direct access to uploads.', 'fluent-boards');
	42	+ } else {
	43	+ $message = __('Fluent Boards could not verify upload-directory protection. Writing .htaccess rules does not confirm that your web server enforces them.', 'fluent-boards');
	44	+ }
	45	+ $uploads = wp_upload_dir();
	46	+ $folder = apply_filters('fluent_boards/upload_folder_name', FLUENT_BOARDS_UPLOAD_DIR);
	47	+ $url = trailingslashit($uploads['baseurl']) . trim($folder, '/');
	48	+ echo '<div class="notice notice-warning"><p>' . esc_html($message) . '</p><p>'
	49	+ . esc_html__('Nginx requires a server rule denying this upload URL and every path beneath it. Apache must honor the generated .htaccess authorization rules. Verify that direct file requests return 403 or 404. This check retries every five minutes.', 'fluent-boards')
	50	+ . '</p><p><code>' . esc_html($url) . '</code></p></div>';
	51	+ });
	52	+ }
	53	+});
	54	+
	55	+/*
	56	+ * Add custom CSS for fbs_notice.
	57	+ */
	58	+add_action('admin_head', function () {
	59	+ echo '<style>
	60	+ .fbs_notice {
	61	+ background: var(--fbs-primary-bg, #ffffff);
	62	+ border: 1px solid var(--fbs-primary-border, #E1E4EA);
	63	+ border-left: 3px solid #FB3748;
	64	+ padding: 10px 12px !important;
	65	+ border-radius: 8px;
	66	+ margin-bottom: 5px;
	67	+ }
	68	+ </style>';
	69	+});
	70	+
22	71	//$app->addCustomAction('task_prop_changed', 'ActivityHandler@logActivity', 10, 3);
23	72	$app->addCustomAction('task_board_changed', 'ActivityHandler@logMoveTaskToAnotherBoardActivity', 10, 2); //will call from service after board change code merged
24	73	$app->addCustomAction('task_due_date_changed', 'ActivityHandler@logDueDateActivity', 10, 2);
	74	+$app->addCustomAction('task_due_date_removed', 'ActivityHandler@logDueDateRemoveActivity', 10, 1);
25	75	$app->addCustomAction('task_start_date_changed', 'ActivityHandler@logStartDateActivity', 10, 2);
26	76
27	77	$app->addCustomAction('task_priority_changed', 'ActivityHandler@logPriorityChangeActivity', 10, 2);
28	78	$app->addCustomAction('comment_created', 'ActivityHandler@logCommentCreateActivity', 10, 1);
		@@ -28,25 +78,35 @@
28	78	$app->addCustomAction('comment_created', 'ActivityHandler@logCommentCreateActivity', 10, 1);
29	79	$app->addCustomAction('comment_updated', 'ActivityHandler@logCommentUpdateActivity', 10, 2);
30	80	$app->addCustomAction('comment_deleted', 'ActivityHandler@logCommentDeleteActivity', 10, 1);
31	81	$app->addCustomAction('subtask_added', 'ActivityHandler@logSubtaskAddedActivity', 10, 2);
	82	+$app->addCustomAction('subtask_cloned', 'ActivityHandler@logSubtaskCloneActivity', 10, 2);
	83	+$app->addCustomAction('subtask_group_created', 'ActivityHandler@logSubtaskGroupAddedActivity', 10, 2);
32	84	$app->addCustomAction('subtask_deleted_activity', 'ActivityHandler@logSubtaskDeletedActivity', 10, 2);
	85	+$app->addCustomAction('subtask_group_deleted_activity', 'ActivityHandler@logSubtaskGroupDeletedActivity', 10, 2);
	86	+$app->addCustomAction('subtask_group_title_updated', 'ActivityHandler@logSubtaskGroupTitleUpdatedActivity', 10, 2);
33	87	$app->addCustomAction('task_completed_activity', 'ActivityHandler@logTaskCompletedOrReopenActivity', 10, 2);
34		-$app->addCustomAction('task_stage_updated', 'ActivityHandler@logTaskStageUpdatedActivity', 10, 2);
	88	+$app->addCustomAction('task_stage_updated', 'ActivityHandler@logTaskStageUpdatedActivity', 10, 3);
35	89	$app->addCustomAction('task_assignee_added', 'ActivityHandler@logAssigneeAddedActivity', 10, 2);
36	90	$app->addCustomAction('task_assignee_removed', 'ActivityHandler@logAssigneeRemovedActivity', 10, 2);
37	91	$app->addCustomAction('task_added_from_fluent_form', 'ActivityHandler@taskAddedFromFluentForms', 10, 1);
	92	+$app->addCustomAction('repeat_task_created', 'ActivityHandler@logRepeatTaskCreatedActivity', 10, 2);
	93	+$app->addCustomAction('repeat_task_set', 'ActivityHandler@logRepeatTaskSet', 10, 1);
	94	+$app->addCustomAction('repeat_task_updated', 'ActivityHandler@logRepeatTaskUpdated', 10, 1);
38	95	$app->addCustomAction('task_created', 'ActivityHandler@logTaskCreationActivity', 10, 1);
39	96	$app->addCustomAction('task_content_updated', 'ActivityHandler@logTaskContentUpdatedActivity', 10, 3);
40	97	$app->addCustomAction('task_deleted', 'TaskHandler@taskDeleted', 10, 1);
	98	+$app->addCustomAction('task_archived', 'ActivityHandler@taskArchived', 10, 1);
	99	+$app->addCustomAction('task_custom_field_changed', 'ActivityHandler@logCustomFieldActivity', 10, 5);
	100	+$app->addCustomAction('board_custom_field_created', 'BoardHandler@customFieldCreated', 10, 1);
	101	+$app->addCustomAction('board_custom_field_updated', 'BoardHandler@customFieldUpdated', 10, 2);
41	102
42	103	$app->addCustomAction('board_created', 'BoardHandler@boardCreated', 10, 1);
	104	+$app->addCustomAction('board_created_from_automation', 'BoardHandler@boardCreatedFromAutomation', 10, 1);
43	105	$app->addCustomAction('before_board_deleted', 'BoardHandler@beforeBoardDeleted', 10, 2);
44		-$app->addCustomAction('board_deleted', 'BoardHandler@boardDeleted', 10, 1);
45	106	$app->addCustomAction('board_updated', 'BoardHandler@boardUpdated', 10, 2);
46	107	$app->addCustomAction('stage_updated', 'BoardHandler@boardStageUpdated', 10, 3);
47	108	$app->addCustomAction('board_stage_moved', 'BoardHandler@boardStageMoved', 10, 2);
48		-$app->addCustomAction('board_stage_dragged', 'BoardHandler@boardStageDragged', 10, 1);
49	109	$app->addCustomAction('board_stage_added', 'BoardHandler@boardStageAdded', 10, 2);
50	110	$app->addCustomAction('stage_deleted', 'BoardHandler@boardStageDeleted', 10, 2);
51	111	$app->addCustomAction('stage_archived', 'BoardHandler@boardStageArchived', 10, 2);
52	112	$app->addCustomAction('board_stage_restored', 'BoardHandler@boardArchivedStageRestore', 10, 2);
		@@ -53,9 +113,11 @@
53	113	$app->addCustomAction('task_created', 'BoardHandler@taskCreatedOnBoard', 10, 1);
54	114	$app->addCustomAction('before_task_deleted', 'BoardHandler@beforeTaskDeleted', 10, 2);
55	115	$app->addCustomAction('task_deleted', 'BoardHandler@taskdeleted', 10, 1);
56	116	$app->addCustomAction('task_moved_from_board', 'BoardHandler@taskMovedFromBoard', 10, 3);
57		-$app->addCustomAction('task_archived', 'BoardHandler@taskarchivedOnBoard', 10, 1);
	117	+$app->addCustomAction('task_moved_from_board', 'ActivityHandler@taskMovedFromBoard', 10, 3);
	118	+$app->addCustomAction('task_archived', 'BoardHandler@taskArchivedOnBoard', 10, 1);
	119	+$app->addCustomAction('tasks_moved_between_stages', 'BoardHandler@tasksMovedBetweenStages', 10, 4);
58	120	$app->addCustomAction('board_member_added', 'BoardHandler@boardMemberAdded', 10, 2);
59	121	$app->addCustomAction('board_viewer_added', 'BoardHandler@boardViewerAdded', 10, 2);
60	122	$app->addCustomAction('board_member_removed', 'BoardHandler@boardMemberRemoved', 10, 2);
61	123	$app->addCustomAction('board_admin_added', 'BoardHandler@boardAdminAdded', 10, 2);
		@@ -78,9 +140,9 @@
78	140	$app->addCustomAction('task_start_date_changed', 'NotificationHandler@changeStartDateNotification', 10, 2);
79	141	$app->addCustomAction('task_stage_updated', 'NotificationHandler@changeStageNotification', 10, 2);
80	142	$app->addCustomAction('task_priority_changed', 'NotificationHandler@changePriorityNotification', 10, 2);
81	143	$app->addCustomAction('task_archived', 'NotificationHandler@taskArchiveNotification', 10, 1);
82		-$app->addCustomAction('task_content_updated', 'NotificationHandler@changeTitleOrDescriptionNotification', 10, 3);
	144	+$app->addCustomAction('task_content_updated', 'NotificationHandler@changeTitleNotification', 10, 3);
83	145	//$app->addCustomAction('description_changed_notification', 'NotificationHandler@changeDescriptionNotification', 10, 1);
84	146	$app->addCustomAction('board_changed_notification', 'NotificationHandler@changeBoardNotification', 10, 2);
85	147	$app->addCustomAction('task_assignee_added', 'NotificationHandler@assigneeAddedNotification', 10, 2);
86	148	$app->addCustomAction('task_assignee_removed', 'NotificationHandler@assigneeRemovedNotification', 10, 2);
		@@ -97,18 +159,20 @@
97	159	$app->addCustomAction('one_time_schedule_send_email_for_removed_from_task', 'ScheduleHandler@sendEmailForChangeStage', 10, 3);
98	160
99	161	$app->addCustomAction('task_attachment_added', 'ActivityHandler@taskAttachmentAdded', 10, 1);
100	162	$app->addCustomAction('task_attachment_deleted', 'ActivityHandler@taskAttachmentDeleted', 10, 1);
101		-$app->addCustomAction('task_attachment_deleted', 'TaskHandler@taskAttachmentDeleted', 10, 1);
	163	+$app->addCustomAction('task_attachment_deleted', 'TaskHandler@taskAttachmentDeleted', 10, 2);
	164	+// Removed: direct call is made from Comment::deleting to TaskHandler@commentImageDeleted
102	165	$app->addAction('deleted_user', 'BoardHandler@deleteUserRelatedData', 10, 3);
103		-$app->addAction('delete_attachment', 'FileHandler@mediaFileDeleted', 10, 1);
	166	+$app->addAction('fluent_boards/delete_remote_attachment_files', 'FileHandler@deleteRemoteAttachmentFiles', 10, 1);
104	167
105		-$app->addCustomAction('send_invitation', 'ScheduleHandler@sendInvitationViaEmail', 10, 3);
106	168	$app->addCustomAction('task_created', 'TaskHandler@onTaskCreated', 10, 1);
107	169	$app->addCustomAction('comment_created', 'TaskHandler@onCommentCreated', 10, 1);
108	170	$app->addCustomAction('assign_another_user', 'TaskHandler@onAssignAnotherUser', 10, 2);
	171	+$app->addCustomAction('board_background_updated', 'BoardHandler@backgroundUpdated', 10, 2);
	172	+$app->addCustomAction('task_cloned', 'TaskHandler@taskCloned', 10, 2);
	173	+$app->addCustomAction('task_cloned_activity', 'ActivityHandler@taskCloned', 10, 2);
109	174
110		-
111	175	if (defined('WP_CLI') && WP_CLI) {
112	176	\WP_CLI::add_command('fluent_boards', '\FluentBoards\App\Hooks\Cli\Commands');
113	177	}
114	178
		@@ -113,22 +177,24 @@
113	177	}
114	178
115	179
116	180	add_action('init', function () {
	181	+ // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Public routing parameter check, no data modification
117	182	if (!isset($_REQUEST['fbs'])) {
118	183	return;
119	184	}
120	185	});
121	186
122		-
123	187	/*
124	188	* IMPORTANT
125	189	* External Pages Handler
126	190	* Each Request must have fbs=1 as a query parameter, then the plugin will handle the request.
127	191	*/
	192	+// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Public routing logic, security validated in individual handlers
128	193	if(isset($_GET['fbs']) && $_GET['fbs'] == 1) {
129	194
130	195	// For viewing attachment
	196	+ // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Public routing logic, security validated in handler
131	197	if(isset($_GET['route']) && ($_GET['route'] == 'task')) {
132	198	add_action('init', function() {
133	199	(new \FluentBoardsPro\App\Hooks\Handlers\ExternalPages())->handleTaskWebhook();
134	200	});
		@@ -133,10 +199,12 @@
133	199	(new \FluentBoardsPro\App\Hooks\Handlers\ExternalPages())->handleTaskWebhook();
134	200	});
135	201	}
136	202
	203	+ // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Public file serving endpoint, security validated by hash in handler
137	204	if(isset($_GET['fbs_comment_image'])) {
138		- if(isset($_GET['fbs_type']) == 'public_url') {
	205	+ // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Public routing check, security validated in handler
	206	+ if(isset($_GET['fbs_type']) && $_GET['fbs_type'] == 'public_url') {
139	207	add_action('init', function() {
140	208	(new \FluentBoards\App\Hooks\Handlers\ExternalPages())->view_uploaded_comment_image();
141	209	});
142	210	} else {
		@@ -148,9 +216,11 @@
148	216	}
149	217
150	218	}
151	219
	220	+// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Public redirect endpoint, no sensitive operations
152	221	if(isset($_GET['redirect']) && $_GET['redirect'] == 'to_task') {
	222	+ // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Public redirect endpoint, validation performed in handler
153	223	if (isset($_GET['taskId'])) {
154	224	add_action('init', function() {
155	225	(new \FluentBoards\App\Hooks\Handlers\ExternalPages())->redirectToPage();
156	226	});
		@@ -155,5 +225,57 @@
155	225	(new \FluentBoards\App\Hooks\Handlers\ExternalPages())->redirectToPage();
156	226	});
157	227	}
158	228	}
	229	+// Stage Archive Handler - Archive tasks when stage is archived, restore when stage is restored
	230	+$app->addAction('fluent_boards/stage_archived_with_tasks', 'StageArchiveHandler@onStageArchived', 10, 2);
	231	+$app->addAction('fluent_boards/stage_restored_with_tasks', 'StageArchiveHandler@onStageRestored', 10, 2);
159	232
	233	+/*
	234	+ * MCP - Register Fluent Boards abilities for the WordPress Abilities API.
	235	+ *
	236	+ * This mirrors FluentCRM's MCP architecture: on WordPress installs without the
	237	+ * Abilities API / WP MCP Adapter, `wp_register_ability` is undefined and the
	238	+ * integration skips silently. Admins can opt out with the `mcp_enabled` option.
	239	+ */
	240	+add_filter('fluent_kit/mcp_products', [\FluentBoards\App\Modules\MCP\MCPInit::class, 'registerToolkitProduct'], 10, 2);
	241	+add_filter('fluent_kit/mcp_toggle_handlers', function ($handlers) {
	242	+ $handlers['fluent-boards'] = [
	243	+ 'get_enabled' => function () {
	244	+ return fluent_boards_get_option('mcp_enabled', 'yes') === 'yes';
	245	+ },
	246	+ 'set_enabled' => function ($enabled) {
	247	+ fluent_boards_update_option('mcp_enabled', $enabled ? 'yes' : 'no');
	248	+ },
	249	+ ];
	250	+
	251	+ return $handlers;
	252	+});
	253	+
	254	+\FluentBoards\App\Services\MCPAccessService::registerHooks();
	255	+
	256	+add_action('init', function () {
	257	+ if (!function_exists('wp_register_ability')) {
	258	+ return;
	259	+ }
	260	+
	261	+ if (fluent_boards_get_option('mcp_enabled', 'yes') !== 'yes') {
	262	+ return;
	263	+ }
	264	+
	265	+ (new \FluentBoards\App\Modules\MCP\MCPInit())->init();
	266	+}, 5);
	267	+
	268	+$invalidateMcpContext = [\FluentBoards\App\Modules\MCP\Tools\ContextTools::class, 'invalidateCache'];
	269	+foreach ([
	270	+ 'fluent_boards/board_created',
	271	+ 'fluent_boards/board_updated',
	272	+ 'fluent_boards/before_board_deleted',
	273	+ 'fluent_boards/board_stage_added',
	274	+ 'fluent_boards/stage_updated',
	275	+ 'fluent_boards/stage_deleted',
	276	+ 'fluent_boards/board_label_created',
	277	+ 'fluent_boards/board_label_updated',
	278	+ 'fluent_boards/board_label_deleted',
	279	+] as $mcpContextHook) {
	280	+ add_action($mcpContextHook, $invalidateMcpContext);
	281	+}