| @@ -40,8 +40,39 @@ | ||
| 40 | 40 | $model->file_hash = md5($uid . wp_rand(0, 1000)); |
| 41 | 41 | }); |
| 42 | 42 | } |
| 43 | 43 | |
| 44 | + /** | |
| 45 | + * Delete a collection of attachments — physical files first, then DB records. | |
| 46 | + * Handles local files and fires the remote-driver hook for cloud-stored files. | |
| 47 | + * Optionally removes the ticket upload directory after files are purged. | |
| 48 | + * | |
| 49 | + * @param \FluentSupport\Framework\Database\Orm\Collection|array $attachments | |
| 50 | + * @param int|null $ticketId When provided, removes the ticket_{id} upload directory. | |
| 51 | + */ | |
| 52 | + public static function purgeAttachments($attachments, $ticketId = null) | |
| 53 | + { | |
| 54 | + foreach ($attachments as $attachment) { | |
| 55 | + if ($attachment->driver && $attachment->driver !== 'local') { | |
| 56 | + do_action('fluent_support/delete_remote_attachment_' . $attachment->driver, $attachment); | |
| 57 | + } elseif ($attachment->file_path && file_exists($attachment->file_path)) { | |
| 58 | + wp_delete_file($attachment->file_path); | |
| 59 | + } | |
| 60 | + } | |
| 61 | + | |
| 62 | + if ($ticketId) { | |
| 63 | + $uploadDir = wp_upload_dir(); | |
| 64 | + $ticketDir = $uploadDir['basedir'] . '/' . FLUENT_SUPPORT_UPLOAD_DIR . '/ticket_' . $ticketId; | |
| 65 | + if (is_dir($ticketDir)) { | |
| 66 | + if (!class_exists('\WP_Filesystem_Direct')) { | |
| 67 | + require_once ABSPATH . 'wp-admin/includes/class-wp-filesystem-base.php'; | |
| 68 | + require_once ABSPATH . 'wp-admin/includes/class-wp-filesystem-direct.php'; | |
| 69 | + } | |
| 70 | + (new \WP_Filesystem_Direct(false))->rmdir($ticketDir, true); | |
| 71 | + } | |
| 72 | + } | |
| 73 | + } | |
| 74 | + | |
| 44 | 75 | public function setSettingsAttribute($settings) |
| 45 | 76 | { |
| 46 | 77 | $this->attributes['settings'] = \maybe_serialize($settings); |
| 47 | 78 | } |
| @@ -58,8 +89,8 @@ | ||
| 58 | 89 | public function getSecureUrlAttribute() |
| 59 | 90 | { |
| 60 | 91 | return add_query_arg([ |
| 61 | 92 | 'fst_file' => $this->file_hash, |
| 62 | - 'secure_sign' => md5($this->id . date('YmdH')) | |
| 93 | + 'secure_sign' => hash_hmac('sha256', $this->id . '|' . gmdate('YmdH'), wp_salt('secure_auth')) | |
| 63 | 94 | ], site_url('/index.php')); |
| 64 | 95 | } |
| 65 | 96 | } |