| @@ -1,85 +1,106 @@ | ||
| 1 | 1 | <?php |
| 2 | 2 | /* |
| 3 | 3 | Plugin Name: iframe |
| 4 | -Plugin URI: http://web-profile.com.ua/wordpress/plugins/iframe/ | |
| 5 | -Description: Plugin shows iframe with [iframe src="http://player.vimeo.com/video/3261363" width="100%" height="480"] shortcode. | |
| 6 | -Version: 2.0 | |
| 4 | +Plugin URI: http://wordpress.org/plugins/iframe/ | |
| 5 | +Description: [iframe src="http://www.youtube.com/embed/dUpTjDqjQoo" width="100%" height="500"] shortcode | |
| 6 | +Version: 5.0 | |
| 7 | 7 | Author: webvitaly |
| 8 | -Author Email: webvitaly(at)gmail.com | |
| 9 | -Author URI: http://web-profile.com.ua/wordpress/ | |
| 8 | +Author URI: http://web-profile.net/wordpress/plugins/ | |
| 9 | +License: GPLv3 | |
| 10 | 10 | */ |
| 11 | 11 | |
| 12 | -if ( !function_exists( 'iframe_embed_shortcode' ) ) : | |
| 12 | +if ( ! defined( 'ABSPATH' ) ) { // Avoid direct calls to this file and prevent full path disclosure | |
| 13 | + exit; | |
| 14 | +} | |
| 13 | 15 | |
| 14 | - function iframe_enqueue_script() { | |
| 15 | - wp_enqueue_script( 'jquery' ); | |
| 16 | +define('IFRAME_PLUGIN_VERSION', '5.0'); | |
| 17 | + | |
| 18 | +function iframe_plugin_add_shortcode_cb( $atts ) { | |
| 19 | + $defaults = array( | |
| 20 | + 'src' => 'http://www.youtube.com/embed/dUpTjDqjQoo', | |
| 21 | + 'width' => '100%', | |
| 22 | + 'height' => '500', | |
| 23 | + 'scrolling' => 'yes', | |
| 24 | + 'class' => 'iframe-class', | |
| 25 | + 'frameborder' => '0' | |
| 26 | + ); | |
| 27 | + | |
| 28 | + $allowed_tags = array( | |
| 29 | + 'h1' => array(), | |
| 30 | + 'h2' => array(), | |
| 31 | + 'h3' => array(), | |
| 32 | + 'h4' => array(), | |
| 33 | + 'h5' => array(), | |
| 34 | + 'h6' => array(), | |
| 35 | + 'p' => array(), | |
| 36 | + 'a' => array( | |
| 37 | + 'href' => true, | |
| 38 | + 'title' => true, | |
| 39 | + ), | |
| 40 | + 'br' => array(), | |
| 41 | + 'em' => array(), | |
| 42 | + 'strong' => array() | |
| 43 | + ); | |
| 44 | + | |
| 45 | + if ( ! is_array( $atts ) ) { | |
| 46 | + $atts = array(); | |
| 16 | 47 | } |
| 17 | - add_action('wp_enqueue_scripts', 'iframe_enqueue_script'); | |
| 18 | - | |
| 19 | - function iframe_embed_shortcode($atts, $content = null) { | |
| 20 | - $defaults = array( | |
| 21 | - 'width' => '100%', | |
| 22 | - 'height' => '480', | |
| 23 | - 'scrolling' => 'no', | |
| 24 | - 'class' => 'iframe-class' | |
| 25 | - ); | |
| 26 | - // add defaults | |
| 27 | - foreach ($defaults as $default => $value) { | |
| 28 | - if (!array_key_exists($default, $atts)) { | |
| 29 | - $atts[$default] = $value; | |
| 30 | - } | |
| 48 | + | |
| 49 | + foreach ( $defaults as $default => $value ) { // add defaults | |
| 50 | + if ( ! @array_key_exists( $default, $atts ) ) { // mute warning with "@" when no params at all | |
| 51 | + $atts[$default] = $value; | |
| 31 | 52 | } |
| 32 | - // special case maps | |
| 33 | - $src_cut = substr($atts["src"], 0, 35); | |
| 34 | - if(strpos($src_cut, 'maps.google' )){ | |
| 35 | - $atts["src"] .= '&output=embed'; | |
| 53 | + } | |
| 54 | + | |
| 55 | + $html = "\n".'<!-- iframe plugin v.'.IFRAME_PLUGIN_VERSION.' wordpress.org/plugins/iframe/ -->'."\n"; | |
| 56 | + $html .= '<iframe'; | |
| 57 | + foreach( $atts as $attr => $value ) { | |
| 58 | + if ( strtolower($attr) == 'src' ) { // sanitize url | |
| 59 | + $value = esc_url( $value ); | |
| 36 | 60 | } |
| 37 | - $html = ''; | |
| 38 | - $same_height_as = $atts["same_height_as"]; | |
| 39 | - if( $same_height_as != '' ){ | |
| 40 | - $atts["same_height_as"] = ''; | |
| 41 | - if( $same_height_as != 'content' ){ // we are setting the height of the iframe like as target element | |
| 42 | - if( $same_height_as == 'document' || $same_height_as == 'window' ){ // remove quotes for window or document selectors | |
| 43 | - $target_selector = $same_height_as; | |
| 44 | - }else{ | |
| 45 | - $target_selector = '"' . $same_height_as . '"'; | |
| 46 | - } | |
| 47 | - $html .= ' | |
| 48 | - <script> | |
| 49 | - jQuery(document).ready(function($) { | |
| 50 | - var target_height = $(' . $target_selector . ').height(); | |
| 51 | - $("iframe.' . $atts["class"] . '").height(target_height); | |
| 52 | - //alert(target_height); | |
| 53 | - }); | |
| 54 | - </script> | |
| 55 | - '; | |
| 56 | - }else{ // set the actual height of the iframe (show all content of the iframe without scroll) | |
| 57 | - $html .= ' | |
| 58 | - <script> | |
| 59 | - jQuery(document).ready(function($) { | |
| 60 | - $("iframe.' . $atts["class"] . '").bind("load", function() { | |
| 61 | - var embed_height = $(this).contents().find("body").height(); | |
| 62 | - $(this).height(embed_height); | |
| 63 | - }); | |
| 64 | - }); | |
| 65 | - </script> | |
| 66 | - '; | |
| 67 | - } | |
| 61 | + if ( strtolower($attr) == 'srcdoc' ) { // sanitize html | |
| 62 | + $value = htmlspecialchars_decode( $value ); | |
| 63 | + $value = wp_kses( $value, $allowed_tags ); | |
| 64 | + $value = esc_html( $value ); | |
| 68 | 65 | } |
| 69 | - $html .= "\n".'<!-- powered by Iframe plugin ver.2.0 (wordpress.org/extend/plugins/iframe/) -->'."\n"; | |
| 70 | - $html .= '<iframe'; | |
| 71 | - foreach ($atts as $attr => $value) { | |
| 72 | - if( $attr != 'same_height_as' ){ // remove some attributes | |
| 73 | - if( $value != '' ) { // adding all attributes | |
| 74 | - $html .= ' ' . $attr . '="' . $value . '"'; | |
| 75 | - } else { // adding empty attributes | |
| 76 | - $html .= ' ' . $attr; | |
| 77 | - } | |
| 66 | + // Remove all attributes starting with "on". Examples: onload, onmouseover, onfocus, onpageshow, onclick | |
| 67 | + if ( strpos( strtolower( $attr ), 'on' ) !== 0 ) { | |
| 68 | + if ( $value != '' ) { // adding all attributes | |
| 69 | + $html .= ' ' . esc_attr( $attr ) . '="' . esc_attr( $value ) . '"'; | |
| 70 | + } else { // adding empty attributes | |
| 71 | + $html .= ' ' . esc_attr( $attr ); | |
| 78 | 72 | } |
| 79 | 73 | } |
| 80 | - $html .= '></iframe>'; | |
| 81 | - return $html; | |
| 82 | 74 | } |
| 83 | - add_shortcode('iframe', 'iframe_embed_shortcode'); | |
| 84 | - | |
| 85 | -endif; | |
| 75 | + $html .= '></iframe>'."\n"; | |
| 76 | + | |
| 77 | + if ( isset( $atts["same_height_as"] ) ) { | |
| 78 | + $html .= ' | |
| 79 | + <script> | |
| 80 | + document.addEventListener("DOMContentLoaded", function(){ | |
| 81 | + var target_element, iframe_element; | |
| 82 | + iframe_element = document.querySelector("iframe.' . esc_attr( $atts["class"] ) . '"); | |
| 83 | + target_element = document.querySelector("' . esc_attr( $atts["same_height_as"] ) . '"); | |
| 84 | + iframe_element.style.height = target_element.offsetHeight + "px"; | |
| 85 | + }); | |
| 86 | + </script> | |
| 87 | + '; | |
| 88 | + } | |
| 89 | + | |
| 90 | + return $html; | |
| 91 | +} | |
| 92 | +add_shortcode( 'iframe', 'iframe_plugin_add_shortcode_cb' ); | |
| 93 | + | |
| 94 | + | |
| 95 | +function iframe_plugin_row_meta_cb( $links, $file ) { | |
| 96 | + if ( $file == plugin_basename( __FILE__ ) ) { | |
| 97 | + $row_meta = array( | |
| 98 | + 'support' => '<a href="http://web-profile.net/wordpress/plugins/iframe/" target="_blank">' . __( 'Iframe', 'iframe' ) . '</a>', | |
| 99 | + 'donate' => '<a href="http://web-profile.net/donate/" target="_blank">' . __( 'Donate', 'iframe' ) . '</a>', | |
| 100 | + 'pro' => '<a href="https://1.envato.market/Ym5aq" target="_blank">' . __( 'Advanced iFrame Pro', 'iframe' ) . '</a>' | |
| 101 | + ); | |
| 102 | + $links = array_merge( $links, $row_meta ); | |
| 103 | + } | |
| 104 | + return (array) $links; | |
| 105 | +} | |
| 106 | +add_filter( 'plugin_row_meta', 'iframe_plugin_row_meta_cb', 10, 2 ); | |
