| @@ -46,9 +46,23 @@ | ||
| 46 | 46 | // Accordion / Section helpers |
| 47 | 47 | // ──────────────────────────────────────────────────────────────── |
| 48 | 48 | |
| 49 | 49 | public function get_accordion_sections_config() { |
| 50 | - return array( | |
| 50 | + // Consent switch for writing into other SEO plugins. Loaded here rather | |
| 51 | + // than through the committed classmap so a stale autoload map can never | |
| 52 | + // make the switch — and with it the user's only way to stop those | |
| 53 | + // writes — silently disappear from the page. | |
| 54 | + require_once plugin_dir_path(dirname(__FILE__)) . 'admin/class-metasync-seo-sync-settings.php'; | |
| 55 | + | |
| 56 | + $sections = array( | |
| 57 | + 'analytics' => array( | |
| 58 | + 'title' => 'Usage Data & Product Improvement', | |
| 59 | + 'description' => 'Choose whether to share limited usage data to help improve MetaSync', | |
| 60 | + 'icon' => 'chart-bar', | |
| 61 | + 'priority' => 70, | |
| 62 | + 'default_open' => false, | |
| 63 | + 'render_callback' => array($this, 'render_analytics_section'), | |
| 64 | + ), | |
| 51 | 65 | 'connection' => array( |
| 52 | 66 | 'title' => 'Connection & Authentication', |
| 53 | 67 | 'description' => 'Manage your API connection and authentication settings', |
| 54 | 68 | 'icon' => 'admin-network', |
| @@ -68,9 +82,9 @@ | ||
| 68 | 82 | 'fields' => array( |
| 69 | 83 | 'otto_pixel_uuid', |
| 70 | 84 | 'otto_disable_on_loggedin', |
| 71 | 85 | 'otto_disable_preview_button', |
| 72 | - 'otto_wp_rocket_compat', | |
| 86 | + 'seo_priority', | |
| 73 | 87 | ) |
| 74 | 88 | ), |
| 75 | 89 | 'edge_cache' => array( |
| 76 | 90 | 'title' => 'Edge Cache / CDN', |
| @@ -79,8 +93,16 @@ | ||
| 79 | 93 | 'priority' => 22, |
| 80 | 94 | 'default_open' => false, |
| 81 | 95 | 'render_callback' => array('Metasync_Edge_Cache_Settings', 'render'), |
| 82 | 96 | ), |
| 97 | + 'seo_plugin_sync' => array( | |
| 98 | + 'title' => 'Sync to Other SEO Plugins', | |
| 99 | + 'description' => 'Control whether ' . Metasync::get_whitelabel_otto_name() . '\'s SEO values are written into Yoast, Rank Math or All in One SEO', | |
| 100 | + 'icon' => 'update', | |
| 101 | + 'priority' => 23, | |
| 102 | + 'default_open' => false, | |
| 103 | + 'render_callback' => array('Metasync_Seo_Sync_Settings', 'render'), | |
| 104 | + ), | |
| 83 | 105 | 'bot_detection' => array( |
| 84 | 106 | 'title' => 'Bot Detection & Filtering', |
| 85 | 107 | 'description' => 'Manage bot traffic and reduce unnecessary API calls', |
| 86 | 108 | 'icon' => 'filter', |
| @@ -92,16 +114,8 @@ | ||
| 92 | 114 | 'otto_bot_blacklist', |
| 93 | 115 | 'otto_bot_statistics_link' |
| 94 | 116 | ) |
| 95 | 117 | ), |
| 96 | - 'breadcrumbs' => array( | |
| 97 | - 'title' => 'Breadcrumbs', | |
| 98 | - 'description' => 'Configure breadcrumb navigation display', | |
| 99 | - 'icon' => 'format-links', | |
| 100 | - 'priority' => 35, | |
| 101 | - 'default_open' => false, | |
| 102 | - 'render_callback' => array($this, 'render_breadcrumbs_section') | |
| 103 | - ), | |
| 104 | 118 | 'open_graph' => array( |
| 105 | 119 | 'title' => 'Open Graph', |
| 106 | 120 | 'description' => 'Control which Open Graph and article meta tags are output', |
| 107 | 121 | 'icon' => 'share', |
| @@ -128,8 +142,9 @@ | ||
| 128 | 142 | 'disable_redirection_metabox', |
| 129 | 143 | 'disable_canonical_metabox', |
| 130 | 144 | 'disable_social_opengraph_metabox', |
| 131 | 145 | 'disable_schema_markup_metabox', |
| 146 | + 'disable_language_alternates_metabox', | |
| 132 | 147 | 'disable_seo_metabox', |
| 133 | 148 | 'open_external_links' |
| 134 | 149 | ) |
| 135 | 150 | ), |
| @@ -170,13 +185,22 @@ | ||
| 170 | 185 | 'fields' => array( |
| 171 | 186 | 'permalink_structure', |
| 172 | 187 | 'hide_dashboard_framework', |
| 173 | 188 | 'show_admin_bar_status', |
| 174 | - 'enable_auto_updates', | |
| 175 | 189 | 'import_external_data' |
| 176 | 190 | ) |
| 177 | 191 | ) |
| 178 | 192 | ); |
| 193 | + | |
| 194 | + // Hidden only when there is nothing to say: no SEO plugin installed, the | |
| 195 | + // switch off, and no saved originals. It is never hidden by the | |
| 196 | + // access-control or whitelabel flags that can conceal Advanced Settings | |
| 197 | + // — a switch that rewrites another plugin's data must stay reachable. | |
| 198 | + if (!Metasync_Seo_Sync_Settings::should_display()) { | |
| 199 | + unset($sections['seo_plugin_sync']); | |
| 200 | + } | |
| 201 | + | |
| 202 | + return $sections; | |
| 179 | 203 | } |
| 180 | 204 | |
| 181 | 205 | public function get_advanced_accordion_config() { |
| 182 | 206 | $config = array(); |
| @@ -201,8 +225,17 @@ | ||
| 201 | 225 | 'default_open' => false, |
| 202 | 226 | 'render_callback' => array($this->admin_instance, 'render_debug_mode_section') |
| 203 | 227 | ); |
| 204 | 228 | |
| 229 | + $config['headless_mode'] = array( | |
| 230 | + 'title' => 'Headless Mode', | |
| 231 | + 'description' => 'Connect WordPress content to a separate public frontend', | |
| 232 | + 'icon' => 'admin-site-alt3', | |
| 233 | + 'priority' => 29, | |
| 234 | + 'default_open' => false, | |
| 235 | + 'render_callback' => array(Metasync_Settings_Registration::instance(), 'render_headless_mode_section') | |
| 236 | + ); | |
| 237 | + | |
| 205 | 238 | $config['error_logs'] = array( |
| 206 | 239 | 'title' => 'Error Logs', |
| 207 | 240 | 'description' => 'View and manage error logs to troubleshoot issues', |
| 208 | 241 | 'icon' => 'warning', |
| @@ -275,9 +308,9 @@ | ||
| 275 | 308 | $content_state = $is_open ? 'open' : 'closed'; |
| 276 | 309 | |
| 277 | 310 | echo '<div class="metasync-accordion-section" data-section="' . esc_attr($section_key) . '">'; |
| 278 | 311 | |
| 279 | - echo '<div class="metasync-accordion-header" role="button" tabindex="0" aria-expanded="' . $aria_expanded . '" aria-controls="' . $section_id . '">'; | |
| 312 | + echo '<div class="metasync-accordion-header" role="button" tabindex="0" aria-expanded="' . esc_attr($aria_expanded) . '" aria-controls="' . esc_attr($section_id) . '">'; | |
| 280 | 313 | echo '<div class="metasync-accordion-title">'; |
| 281 | 314 | echo '<span class="metasync-accordion-icon"><span class="dashicons dashicons-' . esc_attr($section_data['icon']) . '"></span></span>'; |
| 282 | 315 | echo '<div class="metasync-accordion-text">'; |
| 283 | 316 | echo '<h3>' . esc_html($section_data['title']) . '</h3>'; |
| @@ -288,9 +321,9 @@ | ||
| 288 | 321 | echo '<span class="toggle-icon">▼</span>'; |
| 289 | 322 | echo '</button>'; |
| 290 | 323 | echo '</div>'; |
| 291 | 324 | |
| 292 | - echo '<div class="metasync-accordion-content" id="' . $section_id . '" data-state="' . $content_state . '">'; | |
| 325 | + echo '<div class="metasync-accordion-content" id="' . esc_attr($section_id) . '" data-state="' . esc_attr($content_state) . '">'; | |
| 293 | 326 | |
| 294 | 327 | if (isset($section_data['render_callback']) && is_callable($section_data['render_callback'])) { |
| 295 | 328 | call_user_func($section_data['render_callback']); |
| 296 | 329 | } |
| @@ -312,9 +345,8 @@ | ||
| 312 | 345 | </h4> |
| 313 | 346 | <p style="color: var(--dashboard-text-secondary); margin: 0 0 12px 0;">This action will permanently delete:</p> |
| 314 | 347 | <ul style="color: var(--dashboard-text-secondary); margin: 0 0 12px 20px; line-height: 1.8;"> |
| 315 | 348 | <li>All API keys and authentication tokens</li> |
| 316 | - <li>White label branding settings</li> | |
| 317 | 349 | <li>Plugin configuration and preferences</li> |
| 318 | 350 | <li>Instant indexing settings</li> |
| 319 | 351 | <li>Media optimization settings and cache</li> |
| 320 | 352 | <li>Code minification settings</li> |
| @@ -319,9 +351,9 @@ | ||
| 319 | 351 | <li>Media optimization settings and cache</li> |
| 320 | 352 | <li>Code minification settings</li> |
| 321 | 353 | <li>All cached data and crawl information</li> |
| 322 | 354 | </ul> |
| 323 | - <p style="color: var(--dashboard-warning, #f59e0b); margin: 0; font-weight: 600;">You will need to reconfigure the plugin completely after this reset.</p> | |
| 355 | + <p style="color: var(--dashboard-warning, #f59e0b); margin: 0; font-weight: 600;">You will need to reconfigure the plugin's operational settings after this reset.</p> | |
| 324 | 356 | </div> |
| 325 | 357 | <form method="post" action="" onsubmit="return confirmClearSettings(event)"> |
| 326 | 358 | <?php wp_nonce_field('metasync_clear_all_settings_nonce', 'clear_all_settings_nonce'); ?> |
| 327 | 359 | <input type="hidden" name="clear_all_settings" value="yes" /> |
| @@ -329,8 +361,31 @@ | ||
| 329 | 361 | <span class="dashicons dashicons-trash" style="margin-top:3px;font-size:15px;width:15px;height:15px;"></span> Clear All Settings |
| 330 | 362 | </button> |
| 331 | 363 | </form> |
| 332 | 364 | </div> |
| 365 | + <div style="background: var(--dashboard-card-bg); padding: 20px; border-radius: 8px; margin-top: 20px;"> | |
| 366 | + <h4 style="color: var(--dashboard-text-primary, #1e1e1e); margin: 0 0 12px 0; display: flex; align-items: center; gap: 8px;"> | |
| 367 | + <span class="dashicons dashicons-universal-access-alt" style="font-size:18px;width:18px;height:18px;"></span> | |
| 368 | + <span>Delete data on uninstall</span> | |
| 369 | + </h4> | |
| 370 | + <p style="color: var(--dashboard-text-secondary); margin: 0 0 12px 0;"> | |
| 371 | + By default, deleting the plugin keeps your data: sitemap and redirection settings, per-post SEO values, and the plugin's database tables stay in place in case you reinstall. Enable this to also remove all of that when the plugin itself is deleted from the Plugins screen. | |
| 372 | + </p> | |
| 373 | + <p style="color: var(--dashboard-text-secondary); margin: 0 0 12px 0;"> | |
| 374 | + The Google service account and the IndexNow API key are always deleted on uninstall, regardless of this setting. | |
| 375 | + </p> | |
| 376 | + <form method="post" action=""> | |
| 377 | + <?php wp_nonce_field('metasync_uninstall_data_toggle_nonce', 'uninstall_data_toggle_nonce'); ?> | |
| 378 | + <input type="hidden" name="metasync_uninstall_data_toggle_form" value="1" /> | |
| 379 | + <label style="color: var(--dashboard-text-primary, #1e1e1e); display: flex; align-items: center; gap: 8px; margin: 0 0 12px 0; cursor: pointer;"> | |
| 380 | + <input type="checkbox" name="metasync_delete_data_on_uninstall" value="yes" <?php checked(get_option('metasync_delete_data_on_uninstall', 'no'), 'yes'); ?> /> | |
| 381 | + Delete all plugin data (tables, settings, per-post SEO values, logs) when the plugin is uninstalled | |
| 382 | + </label> | |
| 383 | + <button type="submit" class="button button-secondary"> | |
| 384 | + Save Uninstall Setting | |
| 385 | + </button> | |
| 386 | + </form> | |
| 387 | + </div> | |
| 333 | 388 | <script> |
| 334 | 389 | function confirmClearSettings(event) { |
| 335 | 390 | event.preventDefault(); |
| 336 | 391 | |
| @@ -338,9 +393,9 @@ | ||
| 338 | 393 | if (!firstConfirm) { |
| 339 | 394 | return false; |
| 340 | 395 | } |
| 341 | 396 | |
| 342 | - var secondConfirm = confirm("🚨 FINAL WARNING 🚨\n\nThis will delete:\n• All API keys and authentication tokens\n• White label branding settings\n• Plugin configuration and preferences\n• Instant indexing settings\n• Media optimization settings and cache\n• Code minification settings\n• All cached data\n\nYou will need to reconfigure the entire plugin from scratch.\n\nType 'DELETE' in the next prompt to confirm."); | |
| 397 | + var secondConfirm = confirm("🚨 FINAL WARNING 🚨\n\nThis will delete:\n• All API keys and authentication tokens\n• Plugin configuration and preferences\n• Instant indexing settings\n• Media optimization settings and cache\n• Code minification settings\n• All cached data\n\nYou will need to reconfigure the plugin's operational settings from scratch.\n\nType 'DELETE' in the next prompt to confirm."); | |
| 343 | 398 | if (!secondConfirm) { |
| 344 | 399 | return false; |
| 345 | 400 | } |
| 346 | 401 | |
| @@ -361,14 +416,18 @@ | ||
| 361 | 416 | if (!function_exists('google_index_direct')) { |
| 362 | 417 | if (file_exists(plugin_dir_path(dirname(__FILE__)) . 'google-index/google-index-init.php')) { |
| 363 | 418 | require_once plugin_dir_path(dirname(__FILE__)) . 'google-index/google-index-init.php'; |
| 364 | 419 | } else { |
| 365 | - error_log('MetaSync Google Index: google-index-init.php not found at ' . plugin_dir_path(dirname(__FILE__)) . 'google-index/google-index-init.php'); | |
| 420 | + error_log('MetaSync Google Index: google-index-init.php not found at ' . plugin_dir_path(dirname(__FILE__)) . 'google-index/google-index-init.php'); // phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_error_log -- genuine failure path, bounded, no secrets | |
| 366 | 421 | return; |
| 367 | 422 | } |
| 368 | 423 | } |
| 369 | 424 | |
| 370 | 425 | $google_index = google_index_direct(); |
| 426 | + if (!$google_index) { | |
| 427 | + // Nothing to render against, and calling through would be fatal. | |
| 428 | + return; | |
| 429 | + } | |
| 371 | 430 | $service_info = $google_index->get_service_account_info(); |
| 372 | 431 | $is_configured = !isset($service_info['error']); |
| 373 | 432 | |
| 374 | 433 | $saved_json_display = $is_configured ? $google_index->get_redacted_config_json() : ''; |
| @@ -445,8 +504,9 @@ | ||
| 445 | 504 | <table class="form-table" style="margin-top: 0;"> |
| 446 | 505 | <tr> |
| 447 | 506 | <th scope="row" style="width: 200px; padding-top: 15px;"> |
| 448 | 507 | <label for="metasync_bing_api_key_inline">IndexNow API Key <span style="color: #d63638;">*</span></label> |
| 508 | + <?php Metasync::render_tooltip_icon('metasync_bing_api_key_inline', 'This key lets Bing trust indexing requests from your site. Click \'Generate Random API Key\' if you don\'t have one — the plugin publishes the matching verification file automatically, no manual upload needed.'); ?> | |
| 449 | 509 | </th> |
| 450 | 510 | <td style="padding-top: 15px;"> |
| 451 | 511 | <input type="text" |
| 452 | 512 | name="metasync_bing_api_key_inline" |
| @@ -646,9 +706,9 @@ | ||
| 646 | 706 | <p style="color: var(--dashboard-text-secondary); margin: 0 0 20px 0;"> |
| 647 | 707 | Select which user roles can see and access this plugin's menu, settings, and options in the WordPress admin area. |
| 648 | 708 | </p> |
| 649 | 709 | |
| 650 | - <form method="post" action="<?php echo admin_url('admin.php?page=' . Metasync_Admin::$page_slug . '&tab=advanced'); ?>" id="plugin-access-roles-form"> | |
| 710 | + <form method="post" action="<?php echo esc_url(admin_url('admin.php?page=' . Metasync_Admin::$page_slug . '&tab=advanced')); ?>" id="plugin-access-roles-form"> | |
| 651 | 711 | <?php wp_nonce_field('metasync_plugin_access_roles_nonce', 'plugin_access_roles_nonce'); ?> |
| 652 | 712 | <input type="hidden" name="save_plugin_access_roles" value="yes" /> |
| 653 | 713 | |
| 654 | 714 | <div class="metasync-role-selector-container" style="background: var(--dashboard-card-bg-alt, rgba(255,255,255,0.05)); border: 1px solid var(--dashboard-border); border-radius: 8px; padding: 16px; max-height: 300px; overflow-y: auto;"> |
| @@ -766,9 +826,9 @@ | ||
| 766 | 826 | |
| 767 | 827 | public function can_change_memory_limit() { |
| 768 | 828 | $current_limit = ini_get('memory_limit'); |
| 769 | 829 | |
| 770 | - $test_result = @ini_set('memory_limit', $current_limit); | |
| 830 | + $test_result = @ini_set('memory_limit', $current_limit); // phpcs:ignore Squiz.PHP.DiscouragedFunctions.Discouraged -- runtime PHP setting with no WordPress API | |
| 771 | 831 | |
| 772 | 832 | return $test_result !== false; |
| 773 | 833 | } |
| 774 | 834 | |
| @@ -820,9 +880,9 @@ | ||
| 820 | 880 | } |
| 821 | 881 | |
| 822 | 882 | $memory_limit_mb = $this->get_execution_setting('max_memory_limit'); |
| 823 | 883 | |
| 824 | - $result = @ini_set('memory_limit', $memory_limit_mb . 'M'); | |
| 884 | + $result = @ini_set('memory_limit', $memory_limit_mb . 'M'); // phpcs:ignore Squiz.PHP.DiscouragedFunctions.Discouraged -- runtime PHP setting with no WordPress API | |
| 825 | 885 | |
| 826 | 886 | return $result !== false; |
| 827 | 887 | } |
| 828 | 888 | |
| @@ -877,12 +937,13 @@ | ||
| 877 | 937 | <div style="display: grid; grid-template-columns: repeat(auto-fit, minmax(280px, 1fr)); gap: 24px;"> |
| 878 | 938 | <div> |
| 879 | 939 | <label style="display: block; color: var(--dashboard-text-primary); margin-bottom: 8px; font-weight: 500;"> |
| 880 | 940 | Max Execution Time: |
| 941 | + <?php Metasync::render_tooltip_icon('max_execution_time', 'How many seconds a single plugin operation (like a bulk sync or scan) is allowed to run before PHP stops it. Raise this only if you see timeout errors, and only up to what your host allows.'); ?> | |
| 881 | 942 | </label> |
| 882 | 943 | <div style="display: flex; align-items: center; gap: 10px;"> |
| 883 | - <input type="number" | |
| 884 | - id="max_execution_time" | |
| 944 | + <input type="number" | |
| 945 | + id="max_execution_time" | |
| 885 | 946 | name="max_execution_time" |
| 886 | 947 | value="<?php echo esc_attr($settings['max_execution_time']); ?>" |
| 887 | 948 | min="1" |
| 888 | 949 | max="300" |
| @@ -908,12 +969,13 @@ | ||
| 908 | 969 | |
| 909 | 970 | <div> |
| 910 | 971 | <label style="display: block; color: var(--dashboard-text-primary); margin-bottom: 8px; font-weight: 500;"> |
| 911 | 972 | Max Memory Limit: |
| 973 | + <?php Metasync::render_tooltip_icon('max_memory_limit', 'How much memory (RAM) the plugin is allowed to use for a single operation before PHP stops it. Raise this only if you see "out of memory" errors, and only up to what your host allows.'); ?> | |
| 912 | 974 | </label> |
| 913 | 975 | <div style="display: flex; align-items: center; gap: 10px;"> |
| 914 | - <input type="number" | |
| 915 | - id="max_memory_limit" | |
| 976 | + <input type="number" | |
| 977 | + id="max_memory_limit" | |
| 916 | 978 | name="max_memory_limit" |
| 917 | 979 | value="<?php echo esc_attr($settings['max_memory_limit']); ?>" |
| 918 | 980 | min="<?php echo esc_attr($memory_range['min']); ?>" |
| 919 | 981 | <?php if ($memory_range['max'] !== null): ?>max="<?php echo esc_attr($memory_range['max']); ?>"<?php endif; ?> |
| @@ -957,12 +1019,13 @@ | ||
| 957 | 1019 | <div style="display: grid; grid-template-columns: repeat(auto-fit, minmax(280px, 1fr)); gap: 24px;"> |
| 958 | 1020 | <div> |
| 959 | 1021 | <label style="display: block; color: var(--dashboard-text-primary); margin-bottom: 8px; font-weight: 500;"> |
| 960 | 1022 | Log Processing Batch Size: |
| 1023 | + <?php Metasync::render_tooltip_icon('log_batch_size', 'How many log lines the plugin processes at once when scanning its own logs. Lower it if this causes slowdowns on smaller hosting plans; most sites can leave the default.'); ?> | |
| 961 | 1024 | </label> |
| 962 | 1025 | <div style="display: flex; align-items: center; gap: 10px;"> |
| 963 | - <input type="number" | |
| 964 | - id="log_batch_size" | |
| 1026 | + <input type="number" | |
| 1027 | + id="log_batch_size" | |
| 965 | 1028 | name="log_batch_size" |
| 966 | 1029 | value="<?php echo esc_attr($settings['log_batch_size']); ?>" |
| 967 | 1030 | min="100" |
| 968 | 1031 | max="5000" |
| @@ -974,8 +1037,9 @@ | ||
| 974 | 1037 | |
| 975 | 1038 | <div> |
| 976 | 1039 | <label style="display: block; color: var(--dashboard-text-primary); margin-bottom: 8px; font-weight: 500;"> |
| 977 | 1040 | Action Scheduler Concurrent Batches: |
| 1041 | + <?php Metasync::render_tooltip_icon('action_scheduler_batches', 'How many background sync jobs the plugin is allowed to run at the same time. Higher values finish syncing faster but use more server resources at once — lower this if your site slows down during syncs.'); ?> | |
| 978 | 1042 | </label> |
| 979 | 1043 | <div style="display: flex; align-items: center; gap: 10px;"> |
| 980 | 1044 | <input type="number" |
| 981 | 1045 | id="action_scheduler_batches" |
| @@ -1001,8 +1065,9 @@ | ||
| 1001 | 1065 | <div style="display: grid; grid-template-columns: repeat(auto-fit, minmax(280px, 1fr)); gap: 24px;"> |
| 1002 | 1066 | <div> |
| 1003 | 1067 | <label style="display: block; color: var(--dashboard-text-primary); margin-bottom: 8px; font-weight: 500;"> |
| 1004 | 1068 | <?php echo esc_html(Metasync::get_whitelabel_otto_name()); ?> API Calls Per Minute: |
| 1069 | + <?php Metasync::render_tooltip_icon('otto_rate_limit', 'The maximum number of requests per minute the plugin will send to ' . Metasync::get_whitelabel_otto_name() . '\'s servers. Lower it if you\'re seeing rate-limit errors; most sites can leave the default.'); ?> | |
| 1005 | 1070 | </label> |
| 1006 | 1071 | <div style="display: flex; align-items: center; gap: 10px;"> |
| 1007 | 1072 | <input type="number" |
| 1008 | 1073 | id="otto_rate_limit" |
| @@ -1017,8 +1082,9 @@ | ||
| 1017 | 1082 | |
| 1018 | 1083 | <div> |
| 1019 | 1084 | <label style="display: block; color: var(--dashboard-text-primary); margin-bottom: 8px; font-weight: 500;"> |
| 1020 | 1085 | Queue Auto-Cleanup: |
| 1086 | + <?php Metasync::render_tooltip_icon('queue_cleanup_days', 'How many days a completed background job is kept before the plugin automatically deletes its record. Lower it to save database space; raise it if you need to look back further when troubleshooting.'); ?> | |
| 1021 | 1087 | </label> |
| 1022 | 1088 | <div style="display: flex; align-items: center; gap: 10px;"> |
| 1023 | 1089 | <input type="number" |
| 1024 | 1090 | id="queue_cleanup_days" |
| @@ -1068,19 +1134,23 @@ | ||
| 1068 | 1134 | 'apikey' => sprintf('Auto-generated authentication token used for secure API communication between your WordPress site and %s services. You can refresh this token if needed for security purposes.', $plugin_name), |
| 1069 | 1135 | 'otto_pixel_uuid' => sprintf('Your unique %s tracking pixel identifier. This UUID is used to track %s modifications and analytics on your website pages.', $otto_name, $otto_name), |
| 1070 | 1136 | 'otto_disable_on_loggedin' => sprintf('Disable %s modifications when you are logged in to WordPress. This allows you to see and edit the original content without %s\'s enhancements during editing sessions.', $otto_name, $otto_name), |
| 1071 | 1137 | 'otto_disable_preview_button' => sprintf('Hide the %s frontend toolbar that displays the status indicator, preview button, and debug button. Enable this for a cleaner frontend experience.', $otto_name), |
| 1138 | + 'seo_priority' => sprintf('Choose which value appears first on a page when both your custom SEO value (title, description or focus keyword, edited on the post/page screen) and an approved %s suggestion are available. This changes what visitors see; it does not delete or overwrite saved values.', $otto_name), | |
| 1072 | 1139 | 'otto_wp_rocket_compat' => sprintf('WP Rocket Compatibility Mode: Controls how %s interacts with WP Rocket. "Auto" (recommended) allows both to work together by avoiding DONOTCACHEPAGE constant unless necessary for Brizy pages or SG Optimizer conflicts. This ensures WP Rocket\'s JavaScript delay and optimization features continue working.', $otto_name), |
| 1140 | + 'otto_sg_optimizer_compat' => sprintf('SiteGround Optimizer Compatibility Mode: Controls how %s renders on SiteGround hosting. "Auto" (recommended) uses the internal HTTP fetch, which protects themes that defer inline CSS to the footer (e.g. Divi). "Buffer Mode" renders in-process with no internal fetch — faster on sites whose pages can never be host-cached, for example when a plugin starts a PHP session on every request (BookingPress sessions are removed automatically, so this does not apply to them).', $otto_name), | |
| 1141 | + 'bookingpress_session_compat' => 'BookingPress Session Compatibility: Controls whether MetaSync removes the PHP session BookingPress starts on every public page, so hosts such as SiteGround can page-cache the site again.', | |
| 1073 | 1142 | 'otto_disable_for_bots' => sprintf('Enable bot detection to automatically skip %s processing for search engine crawlers, SEO tools, and other bots. This reduces unnecessary API calls and improves performance.', $otto_name), |
| 1074 | 1143 | 'otto_bot_whitelist' => sprintf('Enter bot names or user-agent patterns (one per line) that should always be processed by %s, even when "Disable for Bots" is enabled. For example: Googlebot, Bingbot. This allows you to ensure specific search engines always see your optimized content.', $otto_name), |
| 1075 | 1144 | 'otto_bot_blacklist' => sprintf('Enter bot names or user-agent patterns (one per line) that should always be blocked from %s processing, regardless of other settings. For example: BadBot, MaliciousCrawler. Use this to exclude problematic crawlers or unwanted traffic sources.', $otto_name), |
| 1076 | 1145 | 'otto_bot_statistics_link' => 'View detailed bot detection statistics including total hits, API calls saved, breakdown by bot type, and unique bot entries with hit counts.', |
| 1077 | - 'disable_common_robots_metabox' => 'Hide the Common Robots meta box from post and page edit screens. This removes the robots meta tag controls (index/noindex, follow/nofollow) from the editor interface.', | |
| 1078 | - 'disable_advance_robots_metabox' => 'Hide the Advanced Robots meta box from post and page edit screens. This removes advanced robots directives like max-snippet, max-image-preview, and max-video-preview settings.', | |
| 1079 | - 'disable_redirection_metabox' => 'Hide the Redirection meta box from post and page edit screens. This removes the URL redirect configuration options from the editor interface.', | |
| 1080 | - 'disable_canonical_metabox' => 'Hide the Canonical URL meta box from post and page edit screens. This removes the canonical URL override field from the editor interface.', | |
| 1081 | - 'disable_social_opengraph_metabox' => 'Hide the Social Media & Open Graph meta box from post and page edit screens. This removes Facebook, Twitter, and other social media meta tag controls from the editor.', | |
| 1082 | - 'disable_schema_markup_metabox' => 'Hide the Schema Markup meta box from post and page edit screens. This removes the structured data (Article, FAQ, Product, Recipe, etc.) configuration from the editor interface.', | |
| 1146 | + 'disable_common_robots_metabox' => sprintf('Hide the Common Robots meta box and stop %1$s emitting index/noindex and follow/nofollow directives on the front end. %1$s also stops overriding WordPress core or another SEO plugin\'s robots tag. Saved values are kept and restored if you re-enable this.', Metasync::get_effective_plugin_name('MetaSync')), | |
| 1147 | + 'disable_advance_robots_metabox' => sprintf('Hide the Advanced Robots meta box and stop %1$s emitting max-snippet, max-image-preview and max-video-preview directives, including the site-wide advanced defaults. Saved values are kept and restored if you re-enable this.', Metasync::get_effective_plugin_name('MetaSync')), | |
| 1148 | + 'disable_redirection_metabox' => 'Hide the Redirection meta box and stop redirects configured through it from running. Rules added by hand on the Redirections screen keep working. Saved redirects are kept and resume if you re-enable this.', | |
| 1149 | + 'disable_canonical_metabox' => sprintf('Hide the Canonical meta box and stop %1$s emitting or overriding the canonical URL on every render path. WordPress core and third-party canonicals are left in place. Saved values are kept and restored if you re-enable this.', Metasync::get_effective_plugin_name('MetaSync')), | |
| 1150 | + 'disable_social_opengraph_metabox' => sprintf('Hide the Social Media & Open Graph meta box and stop %1$s emitting any Open Graph, Twitter or article tags. Tags from another SEO plugin are left in place. Saved values are kept and restored if you re-enable this.', Metasync::get_effective_plugin_name('MetaSync')), | |
| 1151 | + 'disable_schema_markup_metabox' => sprintf('Hide the Schema Markup meta box and stop %1$s emitting any JSON-LD, including the site-wide Local SEO markup and OTTO structured data. Breadcrumb markup has its own setting. Saved values are kept and restored if you re-enable this.', Metasync::get_effective_plugin_name('MetaSync')), | |
| 1152 | + 'disable_language_alternates_metabox' => sprintf('Hide the Language Alternates (hreflang) panel in the block editor and stop %1$s emitting any hreflang tags on the front end, including the auto-detected WPML entries. While disabled, %1$s does not manage or override this data — another SEO plugin, or WPML itself, is free to handle it. Saved values are kept and restored if you re-enable this.', Metasync::get_effective_plugin_name('MetaSync')), | |
| 1083 | 1153 | 'disable_seo_metabox' => 'Hide the SEO Title & Meta Description meta box from post and page edit screens. This removes the Classic editor SEO fields (the Gutenberg sidebar is unaffected).', |
| 1084 | 1154 | 'open_external_links' => sprintf('Automatically add target="_blank" attribute to external links appearing in your posts, pages, and other post types when rendered by %s.', $otto_name), |
| 1085 | 1155 | 'content_genius_sync_roles' => 'Select which WordPress user roles should be synchronized with Content Genius. This determines which users will have their profiles and permissions synced for content collaboration.', |
| 1086 | 1156 | 'permalink_structure' => sprintf('Displays your current WordPress permalink structure. %s works best with pretty permalinks (not "Plain"). If you see a warning, visit Settings > Permalinks to change your structure.', $plugin_name), |
| @@ -1085,15 +1155,47 @@ | ||
| 1085 | 1155 | 'content_genius_sync_roles' => 'Select which WordPress user roles should be synchronized with Content Genius. This determines which users will have their profiles and permissions synced for content collaboration.', |
| 1086 | 1156 | 'permalink_structure' => sprintf('Displays your current WordPress permalink structure. %s works best with pretty permalinks (not "Plain"). If you see a warning, visit Settings > Permalinks to change your structure.', $plugin_name), |
| 1087 | 1157 | 'hide_dashboard_framework' => sprintf('Hide the main %s dashboard from the WordPress admin menu. This is useful if you want to reduce menu clutter but still keep the plugin active.', $plugin_name), |
| 1088 | 1158 | 'show_admin_bar_status' => sprintf('Display the %s status indicator in the WordPress admin bar at the top of your screen. This provides quick visibility of plugin status and key metrics.', $plugin_name), |
| 1089 | - 'enable_auto_updates' => sprintf('Allow WordPress to automatically update the %s plugin when new versions are released. Recommended for security patches, but you may prefer manual updates for major versions.', $plugin_name), | |
| 1090 | 1159 | 'import_external_data' => sprintf('Import your existing SEO settings and metadata from other popular SEO plugins like Yoast, Rank Math, or All in One SEO. This makes migration to %s seamless without losing your SEO data.', $plugin_name), |
| 1091 | 1160 | 'import_seo_metadata' => sprintf('Migrate your existing SEO titles and meta descriptions from Yoast, Rank Math, or All in One SEO. This one-click import preserves your search rankings by copying your optimized meta data to %s, even if the source plugin is deactivated.', $plugin_name), |
| 1092 | - 'default_page_builder' => 'Choose how Content Genius stores synced articles. "Gutenberg" works with all themes and page builders. Selecting a specific builder converts content to that builder\'s widget format, which inherits the builder\'s global typography and layout styles.' | |
| 1161 | + 'default_page_builder' => 'Choose how Content Genius stores synced articles. "Gutenberg" works with all themes and page builders. Selecting a specific builder converts content to that builder\'s widget format, which inherits the builder\'s global typography and layout styles.', | |
| 1162 | + 'og_image_dimensions' => 'Adds your share image\'s width, height, and file type to the Open Graph tags so Facebook, LinkedIn, and others render your preview instantly at the right size instead of guessing. Leave on unless another plugin already outputs these.', | |
| 1163 | + 'article_timestamps' => 'Tells social platforms and search engines when each post was first published and last updated, so shares and rich results show accurate dates. Safe to leave enabled.', | |
| 1164 | + 'article_author' => 'Adds a link to the author\'s profile or archive page to each post\'s social tags, so shared articles can show author attribution. You can override the author URL per-post. Turn off if you\'d rather not expose author pages.', | |
| 1165 | + 'article_section' => 'Labels each post with its main topic (its primary category) in the social tags, helping platforms categorize your content. Falls back to the first category if no primary one is set.', | |
| 1166 | + 'article_tags' => 'Adds each of your WordPress post tags as a separate social "tag" so platforms understand the topics a post covers. Turn off if you don\'t want your tags exposed in share metadata.', | |
| 1167 | + 'twitter_image_alt' => 'Adds descriptive alt text to the image shown when your page is shared on X/Twitter, improving accessibility for screen-reader users. Uses your saved alt text or the image\'s own alt attribute.' | |
| 1093 | 1168 | ); |
| 1094 | 1169 | } |
| 1095 | 1170 | |
| 1171 | + public function render_analytics_section() { | |
| 1172 | + $enabled = get_option('metasync_analytics_opt_in', 'no') === 'yes'; | |
| 1173 | + $plugin_name = Metasync::get_effective_plugin_name(); | |
| 1174 | + /* translators: %s: Plugin name. */ | |
| 1175 | + $heading = sprintf(__('Help improve %s', 'metasync'), $plugin_name); | |
| 1176 | + /* translators: %s: Plugin name. */ | |
| 1177 | + $intro = sprintf(__('Allow %s to collect limited usage analytics. This helps us understand which features are used, improve the product, and identify problems.', 'metasync'), $plugin_name); | |
| 1178 | + /* translators: %s: Plugin name. */ | |
| 1179 | + $toggle_label = sprintf(__('Share usage data with %s', 'metasync'), $plugin_name); | |
| 1180 | + ?> | |
| 1181 | + <div class="metasync-analytics-consent-card"> | |
| 1182 | + <div class="metasync-analytics-consent-copy"> | |
| 1183 | + <h3><?php echo esc_html($heading); ?></h3> | |
| 1184 | + <p><?php echo esc_html($intro); ?></p> | |
| 1185 | + <p class="description"><?php esc_html_e('We collect limited technical information such as your site URL, plugin version, WordPress and PHP versions, user role, and feature usage. We do not collect passwords, API keys, customer content, names, or email addresses.', 'metasync'); ?></p> | |
| 1186 | + </div> | |
| 1187 | + <label class="metasync-consent-switch" for="metasync_analytics_opt_in"> | |
| 1188 | + <input type="hidden" name="metasync_analytics_opt_in" value="no" /> | |
| 1189 | + <input type="checkbox" id="metasync_analytics_opt_in" name="metasync_analytics_opt_in" value="yes" <?php checked($enabled); ?> /> | |
| 1190 | + <span class="metasync-consent-slider" aria-hidden="true"></span> | |
| 1191 | + <span class="screen-reader-text"><?php echo esc_html($toggle_label); ?></span> | |
| 1192 | + </label> | |
| 1193 | + <span class="metasync-consent-status" aria-live="polite" data-enabled-label="<?php esc_attr_e('Enabled', 'metasync'); ?>" data-disabled-label="<?php esc_attr_e('Off', 'metasync'); ?>"><?php echo $enabled ? esc_html__('Enabled', 'metasync') : esc_html__('Off', 'metasync'); ?></span> | |
| 1194 | + </div> | |
| 1195 | + <?php | |
| 1196 | + } | |
| 1197 | + | |
| 1096 | 1198 | public function get_field_section($field_id) { |
| 1097 | 1199 | $sections = $this->get_accordion_sections_config(); |
| 1098 | 1200 | |
| 1099 | 1201 | foreach ($sections as $section_key => $section_data) { |
| @@ -1127,9 +1229,9 @@ | ||
| 1127 | 1229 | $content_state = $is_open ? 'open' : 'closed'; |
| 1128 | 1230 | |
| 1129 | 1231 | echo '<div class="metasync-accordion-section" data-section="' . esc_attr($section_key) . '">'; |
| 1130 | 1232 | |
| 1131 | - echo '<div class="metasync-accordion-header" role="button" tabindex="0" aria-expanded="' . $aria_expanded . '" aria-controls="' . $section_id . '">'; | |
| 1233 | + echo '<div class="metasync-accordion-header" role="button" tabindex="0" aria-expanded="' . esc_attr($aria_expanded) . '" aria-controls="' . esc_attr($section_id) . '">'; | |
| 1132 | 1234 | echo '<div class="metasync-accordion-title">'; |
| 1133 | 1235 | echo '<span class="metasync-accordion-icon"><span class="dashicons dashicons-' . esc_attr($section_data['icon']) . '"></span></span>'; |
| 1134 | 1236 | echo '<div class="metasync-accordion-text">'; |
| 1135 | 1237 | echo '<h3>' . esc_html($section_data['title']) . '</h3>'; |
| @@ -1140,9 +1242,9 @@ | ||
| 1140 | 1242 | echo '<span class="toggle-icon">▼</span>'; |
| 1141 | 1243 | echo '</button>'; |
| 1142 | 1244 | echo '</div>'; |
| 1143 | 1245 | |
| 1144 | - echo '<div class="metasync-accordion-content" id="' . $section_id . '" data-state="' . $content_state . '">'; | |
| 1246 | + echo '<div class="metasync-accordion-content" id="' . esc_attr($section_id) . '" data-state="' . esc_attr($content_state) . '">'; | |
| 1145 | 1247 | |
| 1146 | 1248 | if (isset($section_data['render_callback']) && is_callable($section_data['render_callback'])) { |
| 1147 | 1249 | call_user_func($section_data['render_callback']); |
| 1148 | 1250 | } elseif (isset($section_data['fields']) && is_array($section_data['fields'])) { |
| @@ -1157,9 +1259,9 @@ | ||
| 1157 | 1259 | echo '<tr>'; |
| 1158 | 1260 | echo '<th scope="row">'; |
| 1159 | 1261 | if (!empty($field['title'])) { |
| 1160 | 1262 | echo '<div class="metasync-field-label-wrapper">'; |
| 1161 | - echo '<label for="' . esc_attr($field['id']) . '">' . $field['title'] . '</label>'; | |
| 1263 | + echo '<label for="' . esc_attr($field['id']) . '">' . esc_html($field['title']) . '</label>'; | |
| 1162 | 1264 | |
| 1163 | 1265 | if (isset($tooltips[$field_id])) { |
| 1164 | 1266 | echo '<button type="button" class="metasync-tooltip-trigger" data-tooltip-id="' . esc_attr($field_id) . '" aria-label="More information">'; |
| 1165 | 1267 | echo '<svg class="metasync-info-icon" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">'; |
| @@ -1205,13 +1307,22 @@ | ||
| 1205 | 1307 | return; |
| 1206 | 1308 | } |
| 1207 | 1309 | |
| 1208 | 1310 | echo '<table class="form-table" role="presentation">'; |
| 1311 | + $llms_tooltips = array( | |
| 1312 | + 'llms_txt_enabled' => 'Publishes a file at yoursite.com/llms.txt listing your key pages so AI assistants like ChatGPT and Perplexity can find and cite your content. Safe to leave off if you don\'t want AI crawlers guided to your pages.', | |
| 1313 | + 'llms_full_enabled' => 'Also publishes a larger file with the full text of your posts (not just links). This exposes complete article content and can be large — keep the post limit low on smaller hosting plans.', | |
| 1314 | + ); | |
| 1209 | 1315 | foreach ($wp_settings_fields[$page][$section] as $field) { |
| 1210 | 1316 | echo '<tr>'; |
| 1211 | 1317 | echo '<th scope="row">'; |
| 1212 | 1318 | if (!empty($field['title'])) { |
| 1213 | - echo '<label for="' . esc_attr($field['id']) . '">' . $field['title'] . '</label>'; | |
| 1319 | + echo '<div class="metasync-field-label-wrapper">'; | |
| 1320 | + echo '<label for="' . esc_attr($field['id']) . '">' . esc_html($field['title']) . '</label>'; | |
| 1321 | + if (isset($llms_tooltips[$field['id']])) { | |
| 1322 | + Metasync::render_tooltip_icon($field['id'], $llms_tooltips[$field['id']]); | |
| 1323 | + } | |
| 1324 | + echo '</div>'; | |
| 1214 | 1325 | } |
| 1215 | 1326 | echo '</th>'; |
| 1216 | 1327 | echo '<td>'; |
| 1217 | 1328 | call_user_func($field['callback'], $field['args']); |
| @@ -1261,32 +1372,32 @@ | ||
| 1261 | 1372 | $display_value = $current_token; |
| 1262 | 1373 | $status_message = 'Plugin Auth Token is active and ready for authentication.'; |
| 1263 | 1374 | $refresh_help = 'Click refresh to generate a new token and update the heartbeat API.'; |
| 1264 | 1375 | } else { |
| 1265 | - $display_value = 'Auto-generated when connecting to ' . esc_html(Metasync::get_effective_plugin_name()); | |
| 1266 | - $status_message = 'Plugin Auth Token will be automatically generated when you click "Connect to ' . esc_html(Metasync::get_effective_plugin_name()) . '".'; | |
| 1376 | + $display_value = 'Auto-generated when connecting to ' . Metasync::get_effective_plugin_name(); | |
| 1377 | + $status_message = 'Plugin Auth Token will be automatically generated when you click "Connect to ' . Metasync::get_effective_plugin_name() . '".'; | |
| 1267 | 1378 | $refresh_help = 'You can also manually generate a token by clicking refresh.'; |
| 1268 | 1379 | } |
| 1269 | 1380 | |
| 1270 | 1381 | printf('<div class="metasync-auth-token-row">'); |
| 1271 | 1382 | printf( |
| 1272 | - '<input type="text" id="apikey" name="' . Metasync_Admin::option_key . '[general][apikey]" value="%s" size="40" class="regular-text" readonly="readonly" />', | |
| 1383 | + '<input type="text" id="apikey" name="' . esc_attr(Metasync_Admin::option_key) . '[general][apikey]" value="%s" size="40" class="regular-text" readonly="readonly" />', | |
| 1273 | 1384 | esc_attr($display_value) |
| 1274 | 1385 | ); |
| 1275 | 1386 | printf('<button type="button" id="refresh-plugin-auth-token" class="button button-secondary metasync-refresh-token-btn"><span class="dashicons dashicons-controls-repeat"></span> Refresh Token</button>'); |
| 1276 | 1387 | printf('</div>'); |
| 1277 | - printf('<p class="description">%s %s</p>', $status_message, $refresh_help); | |
| 1388 | + printf('<p class="description">%s %s</p>', esc_html($status_message), esc_html($refresh_help)); | |
| 1278 | 1389 | } |
| 1279 | 1390 | |
| 1280 | 1391 | public function linkgraph_token_callback() |
| 1281 | 1392 | { |
| 1282 | 1393 | printf( |
| 1283 | - '<input type="text" id="linkgraph_token" name="' . Metasync_Admin::option_key . '[general][linkgraph_token]" value="%s" size="25" readonly="readonly" />', | |
| 1394 | + '<input type="text" id="linkgraph_token" name="' . esc_attr(Metasync_Admin::option_key) . '[general][linkgraph_token]" value="%s" size="25" readonly="readonly" />', | |
| 1284 | 1395 | isset(Metasync::get_option('general')['linkgraph_token']) ? esc_attr(Metasync::get_option('general')['linkgraph_token']) : '' |
| 1285 | 1396 | ); |
| 1286 | 1397 | |
| 1287 | 1398 | printf( |
| 1288 | - '<input type="text" id="linkgraph_customer_id" name="' . Metasync_Admin::option_key . '[general][linkgraph_customer_id]" value="%s" size="25" readonly="readonly" />', | |
| 1399 | + '<input type="text" id="linkgraph_customer_id" name="' . esc_attr(Metasync_Admin::option_key) . '[general][linkgraph_customer_id]" value="%s" size="25" readonly="readonly" />', | |
| 1289 | 1400 | isset(Metasync::get_option('general')['linkgraph_customer_id']) ? esc_attr(Metasync::get_option('general')['linkgraph_customer_id']) : '' |
| 1290 | 1401 | ); |
| 1291 | 1402 | |
| 1292 | 1403 | ?> |
| @@ -1336,12 +1447,26 @@ | ||
| 1336 | 1447 | } |
| 1337 | 1448 | |
| 1338 | 1449 | public function searchatlas_api_key_callback() |
| 1339 | 1450 | { |
| 1340 | - $current_api_key = isset(Metasync::get_option('general')['searchatlas_api_key']) ? esc_attr(Metasync::get_option('general')['searchatlas_api_key']) : ''; | |
| 1451 | + // Whether a key is stored at rest (encrypted or legacy plaintext). | |
| 1452 | + $stored_api_key = Metasync::get_option('general')['searchatlas_api_key'] ?? ''; | |
| 1453 | + $has_api_key = ($stored_api_key !== ''); | |
| 1454 | + | |
| 1455 | + // Decrypted key for masking only. Never rendered in cleartext. | |
| 1456 | + // false => an encrypted key exists but cannot be decrypted (salts changed). | |
| 1457 | + $decrypted_api_key = Metasync::get_searchatlas_api_key(); | |
| 1458 | + $decrypt_failed = ($decrypted_api_key === false); | |
| 1459 | + | |
| 1460 | + // Build a masked representation: bullets + last 4 chars. The cleartext | |
| 1461 | + // key is never emitted into the page. | |
| 1462 | + $masked_api_key = ''; | |
| 1463 | + if (!$decrypt_failed && $decrypted_api_key !== '') { | |
| 1464 | + $masked_api_key = str_repeat('*', 8) . substr($decrypted_api_key, -4); | |
| 1465 | + } | |
| 1466 | + | |
| 1341 | 1467 | $otto_uuid = isset(Metasync::get_option('general')['otto_pixel_uuid']) ? Metasync::get_option('general')['otto_pixel_uuid'] : ''; |
| 1342 | - | |
| 1343 | - $has_api_key = !empty($current_api_key); | |
| 1468 | + | |
| 1344 | 1469 | $has_otto_uuid = !empty($otto_uuid); |
| 1345 | 1470 | |
| 1346 | 1471 | $is_fully_connected = $this->admin_instance->is_heartbeat_connected(); |
| 1347 | 1472 | |
| @@ -1395,11 +1520,11 @@ | ||
| 1395 | 1520 | printf('<div style="padding: 10px 0; color: #666; font-size: 13px; line-height: 1.5;">'); |
| 1396 | 1521 | printf('• Make sure you have a %s account before connecting<br/>', esc_html(Metasync::get_effective_plugin_name())); |
| 1397 | 1522 | printf('• The authentication window will open in a popup - please allow popups<br/>'); |
| 1398 | 1523 | printf('• The process typically takes 15-30 seconds to complete<br/>'); |
| 1399 | - printf('• Your API key will be automatically filled in the field below<br/>'); | |
| 1524 | + printf('• Your API key will be stored securely and shown masked below<br/>'); | |
| 1400 | 1525 | printf('• If you encounter issues, try disabling ad blockers temporarily<br/>'); |
| 1401 | - printf('• Contact <a href="mailto:%s">%s</a> if you need assistance', Metasync::SUPPORT_EMAIL, Metasync::SUPPORT_EMAIL); | |
| 1526 | + printf('• Contact <a href="mailto:%s">%s</a> if you need assistance', esc_attr(Metasync::SUPPORT_EMAIL), esc_html(Metasync::SUPPORT_EMAIL)); | |
| 1402 | 1527 | printf('</div>'); |
| 1403 | 1528 | printf('</details>'); |
| 1404 | 1529 | printf('</div>'); |
| 1405 | 1530 | |
| @@ -1414,30 +1539,42 @@ | ||
| 1414 | 1539 | printf('<span style="color: #ff8c00; margin-left: 10px; font-weight: normal;">Partial Connection (Missing %s UUID)</span>', esc_html(Metasync::get_whitelabel_otto_name())); |
| 1415 | 1540 | } |
| 1416 | 1541 | printf('</label>'); |
| 1417 | 1542 | |
| 1543 | + // Read-only masked display. The API key is managed via one-click | |
| 1544 | + // authentication only; the cleartext key is never rendered into the | |
| 1545 | + // page HTML (View Source / DOM). No form input is emitted, so saving | |
| 1546 | + // settings cannot overwrite or expose the stored key. | |
| 1547 | + $display_has_key = (!$decrypt_failed && $masked_api_key !== '') ? '1' : '0'; | |
| 1418 | 1548 | printf( |
| 1419 | - '<input type="text" id="searchatlas-api-key" name="' . Metasync_Admin::option_key . '[general][searchatlas_api_key]" value="%s" size="40" class="regular-text" placeholder="Your API key will appear here after authentication" />', | |
| 1420 | - $current_api_key | |
| 1549 | + '<div id="searchatlas-api-key-display" class="metasync-api-key-masked" data-has-key="%s" style="display:inline-flex; align-items:center; min-width:320px; height:42px; padding:0 14px; font-family:monospace; font-size:15px; letter-spacing:4px; background:var(--dashboard-input-bg, #22272e); border:1px solid var(--dashboard-border, #3a424d); border-radius:6px; color:var(--dashboard-text-primary, #e6e8eb); cursor:default; user-select:none;">', | |
| 1550 | + esc_attr($display_has_key) | |
| 1421 | 1551 | ); |
| 1422 | - | |
| 1552 | + if ($decrypt_failed) { | |
| 1553 | + printf('<em style="color:#b32d2e; font-family:sans-serif; letter-spacing:normal; font-style:normal; font-size:14px;">Stored API key could not be read. Please re-authenticate above.</em>'); | |
| 1554 | + } elseif ($masked_api_key !== '') { | |
| 1555 | + echo esc_html($masked_api_key); | |
| 1556 | + } else { | |
| 1557 | + printf('<em style="color:#646970;">Not configured</em>'); | |
| 1558 | + } | |
| 1559 | + printf('</div>'); | |
| 1560 | + | |
| 1423 | 1561 | printf('<p class="description" style="margin-top: 8px;">'); |
| 1424 | - if ($is_fully_connected) { | |
| 1425 | - printf('Your %s API key for secure communication with the platform. Use the authentication button above to refresh or change accounts.', esc_html(Metasync::get_effective_plugin_name())); | |
| 1562 | + if ($decrypt_failed) { | |
| 1563 | + printf('Your stored API key could not be decrypted (your site security keys may have changed). Please re-authenticate above to reconnect.'); | |
| 1564 | + } elseif ($is_fully_connected) { | |
| 1565 | + printf('Your %s API key is stored securely and used for communication with the platform. Use the authentication button above to refresh or change accounts.', esc_html(Metasync::get_effective_plugin_name())); | |
| 1426 | 1566 | } elseif ($has_api_key && !$has_otto_uuid) { |
| 1427 | 1567 | printf('Your API key is configured but %s UUID is missing. Re-authenticate above to complete the setup and enable dashboard access.', esc_html(Metasync::get_whitelabel_otto_name())); |
| 1428 | 1568 | } else { |
| 1429 | - printf('This field will be automatically populated when you authenticate using the button above. You can also manually enter your API key if you have one.'); | |
| 1569 | + printf('Use the authentication button above to securely connect your account. Your API key is stored encrypted and shown masked here.'); | |
| 1430 | 1570 | } |
| 1431 | 1571 | printf('</p>'); |
| 1432 | 1572 | |
| 1433 | - ?> | |
| 1434 | - <p class="description" style="margin-top: 10px; padding: 8px 12px; background: #fff9e6; border-left: 3px solid #f0b849; border-radius: 4px; font-size: 12px;"> | |
| 1435 | - <strong>Manual Authentication:</strong> If you manually enter your <?php echo esc_html(Metasync::get_effective_plugin_name()); ?> API Key and <?php echo esc_html(Metasync::get_whitelabel_otto_name()); ?> UUID, you also consent to the same AI-powered automation permissions described above. | |
| 1436 | - </p> | |
| 1437 | - <?php | |
| 1573 | + printf('</div>'); | |
| 1438 | 1574 | |
| 1439 | - printf('</div>'); | |
| 1575 | + // The OTTO Pixel UUID is shown once, by the read-only Settings-API | |
| 1576 | + // field in the OTTO Server-Side Rendering section; do not repeat it here. | |
| 1440 | 1577 | |
| 1441 | 1578 | if( isset(Metasync::get_option('general')['searchatlas_api_key'])&&Metasync::get_option('general')['searchatlas_api_key']!=''){ |
| 1442 | 1579 | $timestamp = @Metasync::get_option('general')['send_auth_token_timestamp']; |
| 1443 | 1580 | printf( |
| @@ -1442,9 +1579,9 @@ | ||
| 1442 | 1579 | $timestamp = @Metasync::get_option('general')['send_auth_token_timestamp']; |
| 1443 | 1580 | printf( |
| 1444 | 1581 | '<p id="sendAuthTokenTimestamp" class="descriptionValue">%s (%s)</p>', |
| 1445 | 1582 | esc_attr($timestamp), |
| 1446 | - $this->time_elapsed_string($timestamp) | |
| 1583 | + esc_html($this->time_elapsed_string($timestamp)) | |
| 1447 | 1584 | ); |
| 1448 | 1585 | |
| 1449 | 1586 | |
| 1450 | 1587 | } |
| @@ -1452,9 +1589,9 @@ | ||
| 1452 | 1589 | |
| 1453 | 1590 | public function bing_site_verification_callback() |
| 1454 | 1591 | { |
| 1455 | 1592 | printf( |
| 1456 | - '<input type="text" id="bing_site_verification" name="' . Metasync_Admin::option_key . '[searchengines][bing_site_verification]" value="%s" size="50" />', | |
| 1593 | + '<input type="text" id="bing_site_verification" name="' . esc_attr(Metasync_Admin::option_key) . '[searchengines][bing_site_verification]" value="%s" size="50" />', | |
| 1457 | 1594 | isset(Metasync::get_option('searchengines')['bing_site_verification']) ? esc_attr(Metasync::get_option('searchengines')['bing_site_verification']) : '' |
| 1458 | 1595 | ); |
| 1459 | 1596 | |
| 1460 | 1597 | printf(' <br> <span class="description"> Enter Bing Webmaster Tools verification code: </span> '); |
| @@ -1463,9 +1600,9 @@ | ||
| 1463 | 1600 | |
| 1464 | 1601 | public function yandex_site_verification_callback() |
| 1465 | 1602 | { |
| 1466 | 1603 | printf( |
| 1467 | - '<input type="text" id="yandex_site_verification" name="' . Metasync_Admin::option_key . '[searchengines][yandex_site_verification]" value="%s" size="50" />', | |
| 1604 | + '<input type="text" id="yandex_site_verification" name="' . esc_attr(Metasync_Admin::option_key) . '[searchengines][yandex_site_verification]" value="%s" size="50" />', | |
| 1468 | 1605 | isset(Metasync::get_option('searchengines')['yandex_site_verification']) ? esc_attr(Metasync::get_option('searchengines')['yandex_site_verification']) : '' |
| 1469 | 1606 | ); |
| 1470 | 1607 | |
| 1471 | 1608 | printf(' <br> <span class="description"> Enter Yandex verification code: </span>'); |
| @@ -1474,9 +1611,9 @@ | ||
| 1474 | 1611 | |
| 1475 | 1612 | public function google_site_verification_callback() |
| 1476 | 1613 | { |
| 1477 | 1614 | printf( |
| 1478 | - '<input type="text" id="google_site_verification" name="' . Metasync_Admin::option_key . '[searchengines][google_site_verification]" value="%s" size="50" />', | |
| 1615 | + '<input type="text" id="google_site_verification" name="' . esc_attr(Metasync_Admin::option_key) . '[searchengines][google_site_verification]" value="%s" size="50" />', | |
| 1479 | 1616 | isset(Metasync::get_option('searchengines')['google_site_verification']) ? esc_attr(Metasync::get_option('searchengines')['google_site_verification']) : '' |
| 1480 | 1617 | ); |
| 1481 | 1618 | |
| 1482 | 1619 | printf(' <br> <span class="description"> Enter Google Search Console verification code: </span>'); |
| @@ -1485,9 +1622,9 @@ | ||
| 1485 | 1622 | |
| 1486 | 1623 | public function pinterest_site_verification_callback() |
| 1487 | 1624 | { |
| 1488 | 1625 | printf( |
| 1489 | - '<input type="text" id="pinterest_site_verification" name="' . Metasync_Admin::option_key . '[searchengines][pinterest_site_verification]" value="%s" size="50" />', | |
| 1626 | + '<input type="text" id="pinterest_site_verification" name="' . esc_attr(Metasync_Admin::option_key) . '[searchengines][pinterest_site_verification]" value="%s" size="50" />', | |
| 1490 | 1627 | isset(Metasync::get_option('searchengines')['pinterest_site_verification']) ? esc_attr(Metasync::get_option('searchengines')['pinterest_site_verification']) : '' |
| 1491 | 1628 | ); |
| 1492 | 1629 | |
| 1493 | 1630 | printf(' <br> <span class="description"> Enter Pinterest verification code: </span>'); |
| @@ -1496,12 +1633,16 @@ | ||
| 1496 | 1633 | |
| 1497 | 1634 | public function local_seo_person_organization_callback() |
| 1498 | 1635 | { |
| 1499 | 1636 | $person_organization = Metasync::get_option('localseo')['local_seo_person_organization'] ?? ''; |
| 1637 | + $valid_person_organizations = array('Person', 'Organization'); | |
| 1500 | 1638 | ?> |
| 1501 | 1639 | <div class="metasync-type-select-wrap"> |
| 1502 | 1640 | <select id="local_seo_person_organization" name="<?php echo esc_attr(Metasync_Admin::option_key . '[localseo][local_seo_person_organization]') ?>"> |
| 1503 | 1641 | <?php |
| 1642 | + if (!in_array($person_organization, $valid_person_organizations, true)) { | |
| 1643 | + printf('<option value="0" selected="selected">Select Type</option>'); | |
| 1644 | + } | |
| 1504 | 1645 | printf('<option value="Person" %s >Person</option>', selected('Person', esc_attr($person_organization))); |
| 1505 | 1646 | printf('<option value="Organization" %s >Organization</option>', selected('Organization', esc_attr($person_organization))); |
| 1506 | 1647 | ?> |
| 1507 | 1648 | </select> |
| @@ -1512,10 +1653,10 @@ | ||
| 1512 | 1653 | |
| 1513 | 1654 | public function local_seo_name_callback() |
| 1514 | 1655 | { |
| 1515 | 1656 | printf( |
| 1516 | - '<input type="text" id="local_seo_name" name="' . Metasync_Admin::option_key . '[localseo][local_seo_name]" value="%s" size="50" />', | |
| 1517 | - isset(Metasync::get_option('localseo')['local_seo_name']) ? esc_attr(Metasync::get_option('localseo')['local_seo_name']) : get_bloginfo() | |
| 1657 | + '<input type="text" id="local_seo_name" name="' . esc_attr(Metasync_Admin::option_key) . '[localseo][local_seo_name]" value="%s" size="50" />', | |
| 1658 | + isset(Metasync::get_option('localseo')['local_seo_name']) ? esc_attr(Metasync::get_option('localseo')['local_seo_name']) : esc_attr(get_bloginfo()) | |
| 1518 | 1659 | ); |
| 1519 | 1660 | |
| 1520 | 1661 | printf(' <br> <span class="description"> Your name or company name </span>'); |
| 1521 | 1662 | } |
| @@ -1523,31 +1664,82 @@ | ||
| 1523 | 1664 | public function local_seo_logo_callback() |
| 1524 | 1665 | { |
| 1525 | 1666 | $local_seo_logo = Metasync::get_option('localseo')['local_seo_logo'] ?? ''; |
| 1526 | 1667 | |
| 1668 | + // Rows saved by the legacy sanitizer hold the corrupted form of | |
| 1669 | + // an attachment ID ("http://45589"). Repair it before anything reads | |
| 1670 | + // the value — both so the preview resolves and so the hidden input | |
| 1671 | + // re-submits the recovered ID instead of the corrupted string, which | |
| 1672 | + // would otherwise survive every subsequent Save Settings. | |
| 1673 | + $local_seo_logo = metasync_repair_scheme_prefixed_media_id($local_seo_logo); | |
| 1674 | + | |
| 1527 | 1675 | printf( |
| 1528 | - '<input type="hidden" id="local_seo_logo" name="' . Metasync_Admin::option_key . '[localseo][local_seo_logo]" value="%s" size="50" />', | |
| 1529 | - isset(Metasync::get_option('localseo')['local_seo_logo']) ? esc_attr(Metasync::get_option('localseo')['local_seo_logo']) : '' | |
| 1676 | + '<input type="hidden" id="local_seo_logo" name="' . esc_attr(Metasync_Admin::option_key) . '[localseo][local_seo_logo]" value="%s" size="50" />', | |
| 1677 | + esc_attr((string) $local_seo_logo) | |
| 1530 | 1678 | ); |
| 1531 | 1679 | |
| 1532 | - printf(' <br> <input class="button-secondary" type="button" id="logo_upload_button" value="Add or Upload File">'); | |
| 1680 | + printf(' <br> <input class="button-secondary no-loading" type="button" id="logo_upload_button" value="Add or Upload File">'); | |
| 1533 | 1681 | |
| 1534 | 1682 | printf(' <br><br> <span class="description bold"> Min Size: 160Χ90px, Max Size: 1920X1080px. </span> <br> <span class="description"> A squared image is preferred by the search engines. </span> <br><br> '); |
| 1535 | 1683 | |
| 1536 | - printf('<img src="%s" id="local_seo_business_logo" width="300">', wp_get_attachment_image_src($local_seo_logo, 'medium')[0] ?? ''); | |
| 1684 | + printf('<span class="metasync-logo-preview-wrap">'); | |
| 1537 | 1685 | |
| 1538 | - $button_type = 'hidden'; | |
| 1539 | - if ($local_seo_logo) { | |
| 1540 | - $button_type = 'button'; | |
| 1686 | + // The stored value may be an attachment ID or a raw URL, so resolve | |
| 1687 | + // both the way the front-end schema output already does. Anything that | |
| 1688 | + // resolves to nothing — a deleted attachment, a legacy value mangled by | |
| 1689 | + // an earlier save — must render no preview at all, rather than an empty | |
| 1690 | + // src next to an orphaned remove button. | |
| 1691 | + $logo_url = $this->resolve_media_url($local_seo_logo, 'medium'); | |
| 1692 | + | |
| 1693 | + printf( | |
| 1694 | + '<img src="%s" id="local_seo_business_logo" width="300"%s>', | |
| 1695 | + esc_url($logo_url), | |
| 1696 | + $logo_url ? '' : ' style="display:none"' | |
| 1697 | + ); | |
| 1698 | + | |
| 1699 | + $button_type = $logo_url ? 'button' : 'hidden'; | |
| 1700 | + printf('<input type="%s" class="button-secondary no-loading metasync-logo-remove-btn" id="local_seo_logo_close_btn" value="X">', esc_attr($button_type)); | |
| 1701 | + printf('</span>'); | |
| 1702 | + } | |
| 1703 | + | |
| 1704 | + /** | |
| 1705 | + * Resolve a stored media setting to a displayable URL. | |
| 1706 | + * | |
| 1707 | + * These settings accept either a media-library attachment ID or a raw URL; | |
| 1708 | + * returns an empty string when the value resolves to neither, so callers | |
| 1709 | + * can distinguish "no image" from "image we could not resolve". | |
| 1710 | + * | |
| 1711 | + * @param mixed $value Attachment ID or URL as stored in the options. | |
| 1712 | + * @param string $size Registered image size to request for an attachment. | |
| 1713 | + * @return string Resolved URL, or '' when there is nothing to show. | |
| 1714 | + */ | |
| 1715 | + private function resolve_media_url($value, $size = 'medium') | |
| 1716 | + { | |
| 1717 | + if (empty($value)) { | |
| 1718 | + return ''; | |
| 1541 | 1719 | } |
| 1542 | - printf('<input type="%s" class="button-secondary" id="local_seo_logo_close_btn" value="X">', $button_type); | |
| 1720 | + | |
| 1721 | + // A row saved by the legacy sanitizer stores a corrupted attachment ID ("http://45589"), | |
| 1722 | + // which is neither resolvable as an ID nor a usable image URL. | |
| 1723 | + $value = metasync_repair_scheme_prefixed_media_id($value); | |
| 1724 | + | |
| 1725 | + if (empty($value)) { | |
| 1726 | + return ''; | |
| 1727 | + } | |
| 1728 | + | |
| 1729 | + if (is_numeric($value)) { | |
| 1730 | + $url = wp_get_attachment_image_url((int) $value, $size); | |
| 1731 | + return $url ? $url : ''; | |
| 1732 | + } | |
| 1733 | + | |
| 1734 | + return (string) $value; | |
| 1543 | 1735 | } |
| 1544 | 1736 | |
| 1545 | 1737 | public function local_seo_url_callback() |
| 1546 | 1738 | { |
| 1547 | 1739 | printf( |
| 1548 | - '<input type="text" id="local_seo_url" name="' . Metasync_Admin::option_key . '[localseo][local_seo_url]" value="%s" size="50" />', | |
| 1549 | - isset(Metasync::get_option('localseo')['local_seo_url']) ? esc_attr(Metasync::get_option('localseo')['local_seo_url']) : home_url() | |
| 1740 | + '<input type="text" id="local_seo_url" name="' . esc_attr(Metasync_Admin::option_key) . '[localseo][local_seo_url]" value="%s" size="50" />', | |
| 1741 | + isset(Metasync::get_option('localseo')['local_seo_url']) ? esc_attr(Metasync::get_option('localseo')['local_seo_url']) : esc_attr(home_url()) | |
| 1550 | 1742 | ); |
| 1551 | 1743 | |
| 1552 | 1744 | printf(' <br> <span class="description"> URL of the item. </span>'); |
| 1553 | 1745 | } |
| @@ -1554,9 +1746,9 @@ | ||
| 1554 | 1746 | |
| 1555 | 1747 | public function local_seo_email_callback() |
| 1556 | 1748 | { |
| 1557 | 1749 | printf( |
| 1558 | - '<input type="text" id="local_seo_email" name="' . Metasync_Admin::option_key . '[localseo][local_seo_email]" value="%s" size="50" />', | |
| 1750 | + '<input type="text" id="local_seo_email" name="' . esc_attr(Metasync_Admin::option_key) . '[localseo][local_seo_email]" value="%s" size="50" />', | |
| 1559 | 1751 | isset(Metasync::get_option('localseo')['local_seo_email']) ? esc_attr(Metasync::get_option('localseo')['local_seo_email']) : '' |
| 1560 | 1752 | ); |
| 1561 | 1753 | |
| 1562 | 1754 | printf(' <br> <span class="description"> Search engines display your email address. </span>'); |
| @@ -1564,9 +1756,9 @@ | ||
| 1564 | 1756 | |
| 1565 | 1757 | public function local_seo_phone_callback() |
| 1566 | 1758 | { |
| 1567 | 1759 | printf( |
| 1568 | - '<input type="text" id="local_seo_phone" name="' . Metasync_Admin::option_key . '[localseo][local_seo_phone]" value="%s" size="50" />', | |
| 1760 | + '<input type="text" id="local_seo_phone" name="' . esc_attr(Metasync_Admin::option_key) . '[localseo][local_seo_phone]" value="%s" size="50" />', | |
| 1569 | 1761 | isset(Metasync::get_option('localseo')['local_seo_phone']) ? esc_attr(Metasync::get_option('localseo')['local_seo_phone']) : '' |
| 1570 | 1762 | ); |
| 1571 | 1763 | |
| 1572 | 1764 | printf(' <br> <span class="description"> Search engines may prominently display your contact phone number for mobile users. </span>'); |
| @@ -1574,29 +1766,29 @@ | ||
| 1574 | 1766 | |
| 1575 | 1767 | public function local_seo_address_callback() |
| 1576 | 1768 | { |
| 1577 | 1769 | printf( |
| 1578 | - '<input type="text" id="local_seo_address_street" name="' . Metasync_Admin::option_key . '[localseo][address][street]" value="%s" size="50" placeholder="Street Address"/> <br>', | |
| 1770 | + '<input type="text" id="local_seo_address_street" name="' . esc_attr(Metasync_Admin::option_key) . '[localseo][address][street]" value="%s" size="50" placeholder="Street Address"/> <br>', | |
| 1579 | 1771 | isset(Metasync::get_option('localseo')['address']['street']) ? esc_attr(Metasync::get_option('localseo')['address']['street']) : '' |
| 1580 | 1772 | ); |
| 1581 | 1773 | |
| 1582 | 1774 | printf( |
| 1583 | - '<input type="text" id="local_seo_address_locality" name="' . Metasync_Admin::option_key . '[localseo][address][locality]" value="%s" size="50" placeholder="Locality"/> <br>', | |
| 1775 | + '<input type="text" id="local_seo_address_locality" name="' . esc_attr(Metasync_Admin::option_key) . '[localseo][address][locality]" value="%s" size="50" placeholder="Locality"/> <br>', | |
| 1584 | 1776 | isset(Metasync::get_option('localseo')['address']['locality']) ? esc_attr(Metasync::get_option('localseo')['address']['locality']) : '' |
| 1585 | 1777 | ); |
| 1586 | 1778 | |
| 1587 | 1779 | printf( |
| 1588 | - '<input type="text" id="local_seo_address_region" name="' . Metasync_Admin::option_key . '[localseo][address][region]" value="%s" size="50" placeholder="Region"/> <br>', | |
| 1780 | + '<input type="text" id="local_seo_address_region" name="' . esc_attr(Metasync_Admin::option_key) . '[localseo][address][region]" value="%s" size="50" placeholder="Region"/> <br>', | |
| 1589 | 1781 | isset(Metasync::get_option('localseo')['address']['region']) ? esc_attr(Metasync::get_option('localseo')['address']['region']) : '' |
| 1590 | 1782 | ); |
| 1591 | 1783 | |
| 1592 | 1784 | printf( |
| 1593 | - '<input type="text" id="local_seo_address_postalcode" name="' . Metasync_Admin::option_key . '[localseo][address][postalcode]" value="%s" size="50" placeholder="Postal Code"/> <br>', | |
| 1785 | + '<input type="text" id="local_seo_address_postalcode" name="' . esc_attr(Metasync_Admin::option_key) . '[localseo][address][postalcode]" value="%s" size="50" placeholder="Postal Code"/> <br>', | |
| 1594 | 1786 | isset(Metasync::get_option('localseo')['address']['postalcode']) ? esc_attr(Metasync::get_option('localseo')['address']['postalcode']) : '' |
| 1595 | 1787 | ); |
| 1596 | 1788 | |
| 1597 | 1789 | printf( |
| 1598 | - '<input type="text" id="local_seo_address_country" name="' . Metasync_Admin::option_key . '[localseo][address][country]" value="%s" size="50" placeholder="Country"/> <br>', | |
| 1790 | + '<input type="text" id="local_seo_address_country" name="' . esc_attr(Metasync_Admin::option_key) . '[localseo][address][country]" value="%s" size="50" placeholder="Country"/> <br>', | |
| 1599 | 1791 | isset(Metasync::get_option('localseo')['address']['country']) ? esc_attr(Metasync::get_option('localseo')['address']['country']) : '' |
| 1600 | 1792 | ); |
| 1601 | 1793 | } |
| 1602 | 1794 | |
| @@ -1611,9 +1803,9 @@ | ||
| 1611 | 1803 | <select name="<?php echo esc_attr(Metasync_Admin::option_key . '[localseo][local_seo_business_type]') ?>"> |
| 1612 | 1804 | <option value='0'>Select Business Type</option> |
| 1613 | 1805 | <?php |
| 1614 | 1806 | foreach ($types as $type) { |
| 1615 | - printf('<option value="%s" %s >%s</option>', $type, selected($type, esc_attr($business_type)), $type); | |
| 1807 | + printf('<option value="%s" %s >%s</option>', esc_attr($type), selected($type, $business_type, false), esc_html($type)); | |
| 1616 | 1808 | } |
| 1617 | 1809 | ?> |
| 1618 | 1810 | </select> |
| 1619 | 1811 | <?php |
| @@ -1637,9 +1829,9 @@ | ||
| 1637 | 1829 | <li> |
| 1638 | 1830 | <select name="<?php echo esc_attr(Metasync_Admin::option_key . '[localseo][days][]') ?>"> |
| 1639 | 1831 | <?php |
| 1640 | 1832 | foreach ($days_name as $name) { |
| 1641 | - printf('<option value="%s" %s >%s</option>', $name, selected(esc_attr($name), esc_attr($day_name)), esc_attr($name)); | |
| 1833 | + printf('<option value="%s" %s >%s</option>', esc_attr($name), selected($name, $day_name, false), esc_html($name)); | |
| 1642 | 1834 | } |
| 1643 | 1835 | ?> |
| 1644 | 1836 | </select> |
| 1645 | 1837 | <input type="text" name="<?php echo esc_attr(Metasync_Admin::option_key . '[localseo][times][]') ?>" value="<?php echo esc_attr($day_time) ?>"> |
| @@ -1718,9 +1910,9 @@ | ||
| 1718 | 1910 | |
| 1719 | 1911 | public function local_seo_price_range_callback() |
| 1720 | 1912 | { |
| 1721 | 1913 | printf( |
| 1722 | - '<input type="text" id="local_seo_price_range" name="' . Metasync_Admin::option_key . '[localseo][local_seo_price_range]" value="%s" size="50" />', | |
| 1914 | + '<input type="text" id="local_seo_price_range" name="' . esc_attr(Metasync_Admin::option_key) . '[localseo][local_seo_price_range]" value="%s" size="50" />', | |
| 1723 | 1915 | isset(Metasync::get_option('localseo')['local_seo_price_range']) ? esc_attr(Metasync::get_option('localseo')['local_seo_price_range']) : '' |
| 1724 | 1916 | ); |
| 1725 | 1917 | printf(' <br> <span class="description"> The price range of the business, for example $$$. </span>'); |
| 1726 | 1918 | } |
| @@ -1733,9 +1925,9 @@ | ||
| 1733 | 1925 | <?php |
| 1734 | 1926 | $about_page = Metasync::get_option('localseo')['local_seo_about_page'] ?? ''; |
| 1735 | 1927 | $pages = get_pages(); |
| 1736 | 1928 | foreach ($pages as $page) { |
| 1737 | - printf('<option value="%s" %s >%s</option>', $page->ID, selected($page->ID, esc_attr($about_page)), $page->post_title); | |
| 1929 | + printf('<option value="%s" %s >%s</option>', absint($page->ID), selected($page->ID, $about_page, false), esc_html($page->post_title)); | |
| 1738 | 1930 | } |
| 1739 | 1931 | ?> |
| 1740 | 1932 | </select> |
| 1741 | 1933 | <?php |
| @@ -1750,9 +1942,9 @@ | ||
| 1750 | 1942 | <?php |
| 1751 | 1943 | $contact_page = Metasync::get_option('localseo')['local_seo_contact_page'] ?? ''; |
| 1752 | 1944 | $pages = get_pages(); |
| 1753 | 1945 | foreach ($pages as $page) { |
| 1754 | - printf('<option value="%s" %s >%s</option>', $page->ID, selected($page->ID, esc_attr($contact_page)), $page->post_title); | |
| 1946 | + printf('<option value="%s" %s >%s</option>', absint($page->ID), selected($page->ID, $contact_page, false), esc_html($page->post_title)); | |
| 1755 | 1947 | } |
| 1756 | 1948 | ?> |
| 1757 | 1949 | </select> |
| 1758 | 1950 | <?php |
| @@ -1761,9 +1953,9 @@ | ||
| 1761 | 1953 | |
| 1762 | 1954 | public function local_seo_map_key_callback() |
| 1763 | 1955 | { |
| 1764 | 1956 | printf( |
| 1765 | - '<input type="text" id="local_seo_map_key" name="' . Metasync_Admin::option_key . '[localseo][local_seo_map_key]" value="%s" size="50" />', | |
| 1957 | + '<input type="text" id="local_seo_map_key" name="' . esc_attr(Metasync_Admin::option_key) . '[localseo][local_seo_map_key]" value="%s" size="50" />', | |
| 1766 | 1958 | isset(Metasync::get_option('localseo')['local_seo_map_key']) ? esc_attr(Metasync::get_option('localseo')['local_seo_map_key']) : '' |
| 1767 | 1959 | ); |
| 1768 | 1960 | |
| 1769 | 1961 | printf(' <br> <span class="description"> An API Key is required to display embedded Google Maps on your site. </span>'); |
| @@ -1771,9 +1963,9 @@ | ||
| 1771 | 1963 | |
| 1772 | 1964 | public function local_seo_geo_coordinates_callback() |
| 1773 | 1965 | { |
| 1774 | 1966 | printf( |
| 1775 | - '<input type="text" id="local_seo_geo_coordinates" name="' . Metasync_Admin::option_key . '[localseo][local_seo_geo_coordinates]" value="%s" size="50" />', | |
| 1967 | + '<input type="text" id="local_seo_geo_coordinates" name="' . esc_attr(Metasync_Admin::option_key) . '[localseo][local_seo_geo_coordinates]" value="%s" size="50" />', | |
| 1776 | 1968 | isset(Metasync::get_option('localseo')['local_seo_geo_coordinates']) ? esc_attr(Metasync::get_option('localseo')['local_seo_geo_coordinates']) : '' |
| 1777 | 1969 | ); |
| 1778 | 1970 | |
| 1779 | 1971 | printf(' <br> <span class="description"> Latitude and longitude values separated by comma. </span>'); |
| @@ -1781,9 +1973,9 @@ | ||
| 1781 | 1973 | |
| 1782 | 1974 | public function header_snippets_callback() |
| 1783 | 1975 | { |
| 1784 | 1976 | printf( |
| 1785 | - '<textarea class="wide-text" id="header_snippets" rows="8" name="' . Metasync_Admin::option_key . '[codesnippets][header_snippet]" >%s</textarea>', | |
| 1977 | + '<textarea class="wide-text" id="header_snippets" rows="8" name="' . esc_attr(Metasync_Admin::option_key) . '[codesnippets][header_snippet]" >%s</textarea>', | |
| 1786 | 1978 | isset(Metasync::get_option('codesnippets')['header_snippet']) ? esc_attr(Metasync::get_option('codesnippets')['header_snippet']) : '' |
| 1787 | 1979 | ); |
| 1788 | 1980 | } |
| 1789 | 1981 | |
| @@ -1789,163 +1981,13 @@ | ||
| 1789 | 1981 | |
| 1790 | 1982 | public function footer_snippets_callback() |
| 1791 | 1983 | { |
| 1792 | 1984 | printf( |
| 1793 | - '<textarea class="wide-text" id="footer_snippets" rows="8" name="' . Metasync_Admin::option_key . '[codesnippets][footer_snippet]" >%s</textarea>', | |
| 1985 | + '<textarea class="wide-text" id="footer_snippets" rows="8" name="' . esc_attr(Metasync_Admin::option_key) . '[codesnippets][footer_snippet]" >%s</textarea>', | |
| 1794 | 1986 | isset(Metasync::get_option('codesnippets')['footer_snippet']) ? esc_attr(Metasync::get_option('codesnippets')['footer_snippet']) : '' |
| 1795 | 1987 | ); |
| 1796 | 1988 | } |
| 1797 | 1989 | |
| 1798 | - public function no_index_posts_callback() | |
| 1799 | - { | |
| 1800 | - printf( | |
| 1801 | - '<input type="checkbox" id="no_index_posts" name="' . Metasync_Admin::option_key . '[optimal_settings][no_index_posts]" value="true" %s />', | |
| 1802 | - isset(Metasync::get_option('optimal_settings')['no_index_posts']) && Metasync::get_option('optimal_settings')['no_index_posts'] == 'true' ? 'checked' : '' | |
| 1803 | - ); | |
| 1804 | - | |
| 1805 | - printf(' <br> <span class="description"> Setting empty archives to <code>noindex</code> is useful for avoiding indexation of thin content pages and dilution of page rank. As soon as a post is added, the page is updated to index. </span>'); | |
| 1806 | - } | |
| 1807 | - | |
| 1808 | - public function no_follow_links_callback() | |
| 1809 | - { | |
| 1810 | - printf( | |
| 1811 | - '<input type="checkbox" id="no_follow_links" name="' . Metasync_Admin::option_key . '[optimal_settings][no_follow_links]" value="true" %s />', | |
| 1812 | - isset(Metasync::get_option('optimal_settings')['no_follow_links']) && Metasync::get_option('optimal_settings')['no_follow_links'] == 'true' ? 'checked' : '' | |
| 1813 | - ); | |
| 1814 | - | |
| 1815 | - printf(' <br> <span class="description"> Automatically add <code>rel="nofollow"</code> attribute to external links appearing in your posts, pages, and other post types. The attribute is dynamically applied when the url is displayed</span>'); | |
| 1816 | - } | |
| 1817 | - | |
| 1818 | - public function open_external_links_callback() | |
| 1819 | - { | |
| 1820 | - printf( | |
| 1821 | - '<input type="checkbox" id="open_external_links" name="' . Metasync_Admin::option_key . '[optimal_settings][open_external_links]" value="true" %s />', | |
| 1822 | - isset(Metasync::get_option('optimal_settings')['open_external_links']) && Metasync::get_option('optimal_settings')['open_external_links'] == 'true' ? 'checked' : '' | |
| 1823 | - ); | |
| 1824 | - | |
| 1825 | - printf(' <br> <span class="description"> Automatically add <code>target="_blank"</code> attribute to external links appearing in your posts, pages, and other post types. The attribute is applied when the url is displayed.</span>'); | |
| 1826 | - } | |
| 1827 | - | |
| 1828 | - public function add_alt_image_tags_callback() | |
| 1829 | - { | |
| 1830 | - printf( | |
| 1831 | - '<input type="checkbox" name="' . Metasync_Admin::option_key . '[optimal_settings][add_alt_image_tags]" value="true" %s />', | |
| 1832 | - isset(Metasync::get_option('optimal_settings')['add_alt_image_tags']) && Metasync::get_option('optimal_settings')['add_alt_image_tags'] == 'true' ? 'checked' : '' | |
| 1833 | - ); | |
| 1834 | - | |
| 1835 | - printf(' <br> <span class="description"> Automatically add <code>alt</code> attribute to Image Tags appearing in your posts, pages, and other post types. The attribute is applied when the content is displayed.</span>'); | |
| 1836 | - } | |
| 1837 | - | |
| 1838 | - public function add_title_image_tags_callback() | |
| 1839 | - { | |
| 1840 | - printf( | |
| 1841 | - '<input type="checkbox" name="' . Metasync_Admin::option_key . '[optimal_settings][add_title_image_tags]" value="true" %s />', | |
| 1842 | - isset(Metasync::get_option('optimal_settings')['add_title_image_tags']) && Metasync::get_option('optimal_settings')['add_title_image_tags'] == 'true' ? 'checked' : '' | |
| 1843 | - ); | |
| 1844 | - | |
| 1845 | - printf(' <br> <span class="description"> Automatically add <code>title</code> attribute to Image Tags appearing in your posts, pages, and other post types. The attribute is applied when the content is displayed.</span>'); | |
| 1846 | - } | |
| 1847 | - | |
| 1848 | - public function site_type_callback() | |
| 1849 | - { | |
| 1850 | - | |
| 1851 | - $site_type = Metasync::get_option('optimal_settings')['site_info']['type'] ?? ''; | |
| 1852 | - | |
| 1853 | - $types = [ | |
| 1854 | - ['name' => 'Personal Blog', 'value' => 'blog'], | |
| 1855 | - ['name' => 'Community Blog/News Site', 'value' => 'news'], | |
| 1856 | - ['name' => 'Personal Portfolio', 'value' => 'portfolio'], | |
| 1857 | - ['name' => 'Small Business Site', 'value' => 'business'], | |
| 1858 | - ['name' => 'Webshop', 'value' => 'webshop'], | |
| 1859 | - ['name' => 'Other Personal Website', 'value' => 'otherpersonal'], | |
| 1860 | - ['name' => 'Other Business Website', 'value' => 'otherbusiness'], | |
| 1861 | - ]; | |
| 1862 | - | |
| 1863 | - ?> | |
| 1864 | - <select name="<?php echo esc_attr(Metasync_Admin::option_key . '[optimal_settings][site_info][type]') ?>" id="site_info_type"> | |
| 1865 | - <?php | |
| 1866 | - foreach ($types as $type) { | |
| 1867 | - printf('<option value="%s" %s >%s</option>', esc_attr($type['value']), selected(esc_attr($type['value']), esc_attr($site_type)), ($type['name'])); | |
| 1868 | - } | |
| 1869 | - ?> | |
| 1870 | - </select> | |
| 1871 | - <?php | |
| 1872 | - | |
| 1873 | - } | |
| 1874 | - | |
| 1875 | - public function site_business_type_callback() | |
| 1876 | - { | |
| 1877 | - | |
| 1878 | - $business_type = Metasync::get_option('optimal_settings')['site_info']['business_type'] ?? ''; | |
| 1879 | - | |
| 1880 | - $types = self::get_business_types(); | |
| 1881 | - sort($types); | |
| 1882 | - | |
| 1883 | - ?> | |
| 1884 | - <select name="<?php echo esc_attr(Metasync_Admin::option_key . '[optimal_settings][site_info][business_type]') ?>"> | |
| 1885 | - <option value='0'>Select Business Type</option> | |
| 1886 | - <?php | |
| 1887 | - foreach ($types as $type) { | |
| 1888 | - printf('<option value="%s" %s >%s</option>', esc_attr($type), selected(esc_attr($type), esc_attr($business_type)), esc_attr($type)); | |
| 1889 | - } | |
| 1890 | - ?> | |
| 1891 | - </select> | |
| 1892 | - <?php | |
| 1893 | - } | |
| 1894 | - | |
| 1895 | - public function site_company_name_callback() | |
| 1896 | - { | |
| 1897 | - | |
| 1898 | - $company_name = Metasync::get_option('optimal_settings')['site_info']['company_name'] ?? get_bloginfo('name'); | |
| 1899 | - | |
| 1900 | - printf( | |
| 1901 | - '<input type="text" name="' . Metasync_Admin::option_key . '[optimal_settings][site_info][company_name]" value="%s" size="50" />', | |
| 1902 | - $company_name ? $company_name : get_bloginfo('name') | |
| 1903 | - ); | |
| 1904 | - } | |
| 1905 | - | |
| 1906 | - public function site_google_logo_callback() | |
| 1907 | - { | |
| 1908 | - | |
| 1909 | - $google_logo = Metasync::get_option('optimal_settings')['site_info']['google_logo'] ?? ''; | |
| 1910 | - | |
| 1911 | - printf( | |
| 1912 | - '<input type="hidden" id="site_google_logo" name="' . Metasync_Admin::option_key . '[optimal_settings][site_info][google_logo]" value="%s" size="50" />', | |
| 1913 | - $google_logo | |
| 1914 | - ); | |
| 1915 | - | |
| 1916 | - printf(' <br> <input class="button-secondary" type="button" id="google_logo_btn" value="Add or Upload File">'); | |
| 1917 | - printf(' <br><br> <span class="description bold"> Min Size: 160X90px, Max Size: 1920X1080px. </span> <br> <span class="description"> A squared image is preferred by the search engines. </span> <br><br> '); | |
| 1918 | - printf('<img src="%s" id="site_google_logo_img" width="300">', wp_get_attachment_image_src($google_logo, 'medium')[0] ?? ''); | |
| 1919 | - | |
| 1920 | - $button_type = 'hidden'; | |
| 1921 | - if ($google_logo) { | |
| 1922 | - $button_type = 'button'; | |
| 1923 | - } | |
| 1924 | - printf('<input type="%s" class="button-secondary" id="site_google_logo_close_btn" value="X">', $button_type); | |
| 1925 | - } | |
| 1926 | - | |
| 1927 | - public function site_social_share_image_callback() | |
| 1928 | - { | |
| 1929 | - | |
| 1930 | - $social_share_image = Metasync::get_option('optimal_settings')['site_info']['social_share_image'] ?? ''; | |
| 1931 | - | |
| 1932 | - printf( | |
| 1933 | - '<input type="hidden" id="site_social_share_image" name="' . Metasync_Admin::option_key . '[optimal_settings][site_info][social_share_image]" value="%s" size="50" />', | |
| 1934 | - $social_share_image | |
| 1935 | - ); | |
| 1936 | - | |
| 1937 | - printf(' <br> <input class="button-secondary" type="button" id="social_share_image_btn" value="Add or Upload File">'); | |
| 1938 | - printf(' <br><br> <span class="description bold"> The recommended image size is 1200 x 630 pixels. </span> <br> <span class="description"> When a featured image or an OpenGraph Image is not set for individual posts/pages/CPTs, this image will be used as a fallback thumbnail when your post is shared on Facebook. </span> <br><br> '); | |
| 1939 | - printf('<img src="%s" id="site_social_share_img" width="300">', wp_get_attachment_image_src($social_share_image, 'medium')[0] ?? ''); | |
| 1940 | - | |
| 1941 | - $button_type = 'hidden'; | |
| 1942 | - if ($social_share_image) { | |
| 1943 | - $button_type = 'button'; | |
| 1944 | - } | |
| 1945 | - printf('<input type="%s" class="button-secondary" id="site_social_image_close_btn" value="X">', $button_type); | |
| 1946 | - } | |
| 1947 | - | |
| 1948 | 1990 | public function common_robot_meta_tags_callback() |
| 1949 | 1991 | { |
| 1950 | 1992 | $common_robots_meta = Metasync::get_option('common_robots_meta') ?? Metasync::get_option('common_robots_mata') ?? ''; |
| 1951 | 1993 | |
| @@ -1951,16 +1993,8 @@ | ||
| 1951 | 1993 | |
| 1952 | 1994 | ?> |
| 1953 | 1995 | <ul class="checkbox-list"> |
| 1954 | 1996 | <li> |
| 1955 | - <input type="checkbox" name="<?php echo esc_attr(Metasync_Admin::option_key . '[common_robots_meta][index]') ?>" id="robots_common1" value="index" <?php isset($common_robots_meta['index']) ? checked('index', $common_robots_meta['index']) : '' ?>> | |
| 1956 | - <label for="robots_common1">Index </br> | |
| 1957 | - <span class="description"> | |
| 1958 | - <span>Search engines to index and show these pages in the search results.</span> | |
| 1959 | - </span> | |
| 1960 | - </label> | |
| 1961 | - </li> | |
| 1962 | - <li> | |
| 1963 | 1997 | <input type="checkbox" name="<?php echo esc_attr(Metasync_Admin::option_key . '[common_robots_meta][noindex]') ?>" id="robots_common2" value="noindex" <?php isset($common_robots_meta['noindex']) ? checked('noindex', $common_robots_meta['noindex']) : '' ?>> |
| 1964 | 1998 | <label for="robots_common2">No Index </br> |
| 1965 | 1999 | <span class="description"> |
| 1966 | 2000 | <span>Search engines not indexed and displayed this pages in search engine results</span> |
| @@ -2086,9 +2120,9 @@ | ||
| 2086 | 2120 | |
| 2087 | 2121 | public function global_open_graph_meta_callback() |
| 2088 | 2122 | { |
| 2089 | 2123 | printf( |
| 2090 | - '<input type="checkbox" name="' . Metasync_Admin::option_key . '[common_meta_settings][open_graph_meta_tags]" value="true" %s />', | |
| 2124 | + '<input type="checkbox" name="' . esc_attr(Metasync_Admin::option_key) . '[common_meta_settings][open_graph_meta_tags]" value="true" %s />', | |
| 2091 | 2125 | isset(Metasync::get_option('common_meta_settings')['open_graph_meta_tags']) && Metasync::get_option('common_meta_settings')['open_graph_meta_tags'] == 'true' ? 'checked' : '' |
| 2092 | 2126 | ); |
| 2093 | 2127 | printf(' <br> <span class="description"> Automatically add the Open Graph meta tags in a page or post.</span>'); |
| 2094 | 2128 | } |
| @@ -2095,9 +2129,9 @@ | ||
| 2095 | 2129 | |
| 2096 | 2130 | public function global_facebook_meta_callback() |
| 2097 | 2131 | { |
| 2098 | 2132 | printf( |
| 2099 | - '<input type="checkbox" name="' . Metasync_Admin::option_key . '[common_meta_settings][facebook_meta_tags]" value="true" %s />', | |
| 2133 | + '<input type="checkbox" name="' . esc_attr(Metasync_Admin::option_key) . '[common_meta_settings][facebook_meta_tags]" value="true" %s />', | |
| 2100 | 2134 | isset(Metasync::get_option('common_meta_settings')['facebook_meta_tags']) && Metasync::get_option('common_meta_settings')['facebook_meta_tags'] == 'true' ? 'checked' : '' |
| 2101 | 2135 | ); |
| 2102 | 2136 | printf(' <br> <span class="description"> Automatically add the Facebook meta tags in a page or post.</span>'); |
| 2103 | 2137 | } |
| @@ -2104,9 +2138,9 @@ | ||
| 2104 | 2138 | |
| 2105 | 2139 | public function global_twitter_meta_callback() |
| 2106 | 2140 | { |
| 2107 | 2141 | printf( |
| 2108 | - '<input type="checkbox" name="' . Metasync_Admin::option_key . '[common_meta_settings][twitter_meta_tags]" value="true" %s />', | |
| 2142 | + '<input type="checkbox" name="' . esc_attr(Metasync_Admin::option_key) . '[common_meta_settings][twitter_meta_tags]" value="true" %s />', | |
| 2109 | 2143 | isset(Metasync::get_option('common_meta_settings')['twitter_meta_tags']) && Metasync::get_option('common_meta_settings')['twitter_meta_tags'] == 'true' ? 'checked' : '' |
| 2110 | 2144 | ); |
| 2111 | 2145 | printf(' <br> <span class="description"> Automatically add the Twitter meta tags in a page or post.</span>'); |
| 2112 | 2146 | } |
| @@ -2114,9 +2148,9 @@ | ||
| 2114 | 2148 | public function og_image_dimensions_callback() |
| 2115 | 2149 | { |
| 2116 | 2150 | $val = Metasync::get_option('common_meta_settings')['og_image_dimensions'] ?? 'true'; |
| 2117 | 2151 | printf( |
| 2118 | - '<input type="checkbox" name="' . Metasync_Admin::option_key . '[common_meta_settings][og_image_dimensions]" value="true" %s />', | |
| 2152 | + '<input type="checkbox" name="' . esc_attr(Metasync_Admin::option_key) . '[common_meta_settings][og_image_dimensions]" value="true" %s />', | |
| 2119 | 2153 | $val === 'true' ? 'checked' : '' |
| 2120 | 2154 | ); |
| 2121 | 2155 | printf('<span class="description"> Output og:image:width, og:image:height, and og:image:type when OG image metadata is available.</span>'); |
| 2122 | 2156 | } |
| @@ -2124,9 +2158,9 @@ | ||
| 2124 | 2158 | public function article_timestamps_callback() |
| 2125 | 2159 | { |
| 2126 | 2160 | $val = Metasync::get_option('common_meta_settings')['article_timestamps'] ?? 'true'; |
| 2127 | 2161 | printf( |
| 2128 | - '<input type="checkbox" name="' . Metasync_Admin::option_key . '[common_meta_settings][article_timestamps]" value="true" %s />', | |
| 2162 | + '<input type="checkbox" name="' . esc_attr(Metasync_Admin::option_key) . '[common_meta_settings][article_timestamps]" value="true" %s />', | |
| 2129 | 2163 | $val === 'true' ? 'checked' : '' |
| 2130 | 2164 | ); |
| 2131 | 2165 | printf('<span class="description"> Output article:published_time and article:modified_time from the post publish and modified dates (ISO 8601).</span>'); |
| 2132 | 2166 | } |
| @@ -2134,9 +2168,9 @@ | ||
| 2134 | 2168 | public function article_author_callback() |
| 2135 | 2169 | { |
| 2136 | 2170 | $val = Metasync::get_option('common_meta_settings')['article_author'] ?? 'true'; |
| 2137 | 2171 | printf( |
| 2138 | - '<input type="checkbox" name="' . Metasync_Admin::option_key . '[common_meta_settings][article_author]" value="true" %s />', | |
| 2172 | + '<input type="checkbox" name="' . esc_attr(Metasync_Admin::option_key) . '[common_meta_settings][article_author]" value="true" %s />', | |
| 2139 | 2173 | $val === 'true' ? 'checked' : '' |
| 2140 | 2174 | ); |
| 2141 | 2175 | printf('<span class="description"> Output article:author using the post author website URL or archive URL (overridable per-post via _metasync_og_article_author meta).</span>'); |
| 2142 | 2176 | } |
| @@ -2144,9 +2178,9 @@ | ||
| 2144 | 2178 | public function article_section_callback() |
| 2145 | 2179 | { |
| 2146 | 2180 | $val = Metasync::get_option('common_meta_settings')['article_section'] ?? 'true'; |
| 2147 | 2181 | printf( |
| 2148 | - '<input type="checkbox" name="' . Metasync_Admin::option_key . '[common_meta_settings][article_section]" value="true" %s />', | |
| 2182 | + '<input type="checkbox" name="' . esc_attr(Metasync_Admin::option_key) . '[common_meta_settings][article_section]" value="true" %s />', | |
| 2149 | 2183 | $val === 'true' ? 'checked' : '' |
| 2150 | 2184 | ); |
| 2151 | 2185 | printf('<span class="description"> Output article:section from the primary category (falls back to first category).</span>'); |
| 2152 | 2186 | } |
| @@ -2154,9 +2188,9 @@ | ||
| 2154 | 2188 | public function article_tags_callback() |
| 2155 | 2189 | { |
| 2156 | 2190 | $val = Metasync::get_option('common_meta_settings')['article_tags'] ?? 'true'; |
| 2157 | 2191 | printf( |
| 2158 | - '<input type="checkbox" name="' . Metasync_Admin::option_key . '[common_meta_settings][article_tags]" value="true" %s />', | |
| 2192 | + '<input type="checkbox" name="' . esc_attr(Metasync_Admin::option_key) . '[common_meta_settings][article_tags]" value="true" %s />', | |
| 2159 | 2193 | $val === 'true' ? 'checked' : '' |
| 2160 | 2194 | ); |
| 2161 | 2195 | printf('<span class="description"> Output one article:tag meta tag per WordPress post tag.</span>'); |
| 2162 | 2196 | } |
| @@ -2164,9 +2198,9 @@ | ||
| 2164 | 2198 | public function twitter_image_alt_callback() |
| 2165 | 2199 | { |
| 2166 | 2200 | $val = Metasync::get_option('common_meta_settings')['twitter_image_alt'] ?? 'true'; |
| 2167 | 2201 | printf( |
| 2168 | - '<input type="checkbox" name="' . Metasync_Admin::option_key . '[common_meta_settings][twitter_image_alt]" value="true" %s />', | |
| 2202 | + '<input type="checkbox" name="' . esc_attr(Metasync_Admin::option_key) . '[common_meta_settings][twitter_image_alt]" value="true" %s />', | |
| 2169 | 2203 | $val === 'true' ? 'checked' : '' |
| 2170 | 2204 | ); |
| 2171 | 2205 | printf('<span class="description"> Output twitter:image:alt using the stored alt text or the OG image attachment alt attribute.</span>'); |
| 2172 | 2206 | } |
| @@ -2173,9 +2207,9 @@ | ||
| 2173 | 2207 | |
| 2174 | 2208 | public function facebook_page_url_callback() |
| 2175 | 2209 | { |
| 2176 | 2210 | $facebook_page_url = Metasync::get_option('social_meta')['facebook_page_url'] ?? ''; |
| 2177 | - printf('<input type="text" name="' . Metasync_Admin::option_key . '[social_meta][facebook_page_url]" value="%s" size="50" />', esc_attr($facebook_page_url)); | |
| 2211 | + printf('<input type="text" name="' . esc_attr(Metasync_Admin::option_key) . '[social_meta][facebook_page_url]" value="%s" size="50" />', esc_attr($facebook_page_url)); | |
| 2178 | 2212 | printf('<br><span class="description"> Enter your Facebook page URL. eg: <code>https://www.facebook.com/MetaSync/</code> </span>'); |
| 2179 | 2213 | } |
| 2180 | 2214 | |
| 2181 | 2215 | public function facebook_authorship_callback() |
| @@ -2180,9 +2214,9 @@ | ||
| 2180 | 2214 | |
| 2181 | 2215 | public function facebook_authorship_callback() |
| 2182 | 2216 | { |
| 2183 | 2217 | $facebook_authorship = Metasync::get_option('social_meta')['facebook_authorship'] ?? ''; |
| 2184 | - printf('<input type="text" name="' . Metasync_Admin::option_key . '[social_meta][facebook_authorship]" value="%s" size="50" />', esc_attr($facebook_authorship)); | |
| 2218 | + printf('<input type="text" name="' . esc_attr(Metasync_Admin::option_key) . '[social_meta][facebook_authorship]" value="%s" size="50" />', esc_attr($facebook_authorship)); | |
| 2185 | 2219 | printf('<br><span class="description"> Enter Facebook profile URL to show Facebook Authorship when your articles are being shared on Facebook. eg: <code>https://www.facebook.com/shahrukh/</code> </span>'); |
| 2186 | 2220 | } |
| 2187 | 2221 | |
| 2188 | 2222 | public function facebook_admin_callback() |
| @@ -2187,9 +2221,9 @@ | ||
| 2187 | 2221 | |
| 2188 | 2222 | public function facebook_admin_callback() |
| 2189 | 2223 | { |
| 2190 | 2224 | $facebook_admin = Metasync::get_option('social_meta')['facebook_admin'] ?? ''; |
| 2191 | - printf('<input type="text" name="' . Metasync_Admin::option_key . '[social_meta][facebook_admin]" value="%s" size="50" />', esc_attr($facebook_admin)); | |
| 2225 | + printf('<input type="text" name="' . esc_attr(Metasync_Admin::option_key) . '[social_meta][facebook_admin]" value="%s" size="50" />', esc_attr($facebook_admin)); | |
| 2192 | 2226 | printf(' <br> <span class="description"> Enter numeric user ID of Facebook. </span>'); |
| 2193 | 2227 | } |
| 2194 | 2228 | |
| 2195 | 2229 | public function facebook_app_callback() |
| @@ -2194,9 +2228,9 @@ | ||
| 2194 | 2228 | |
| 2195 | 2229 | public function facebook_app_callback() |
| 2196 | 2230 | { |
| 2197 | 2231 | $facebook_app = Metasync::get_option('social_meta')['facebook_app'] ?? ''; |
| 2198 | - printf('<input type="text" name="' . Metasync_Admin::option_key . '[social_meta][facebook_app]" value="%s" size="50" />', esc_attr($facebook_app)); | |
| 2232 | + printf('<input type="text" name="' . esc_attr(Metasync_Admin::option_key) . '[social_meta][facebook_app]" value="%s" size="50" />', esc_attr($facebook_app)); | |
| 2199 | 2233 | printf(' <br> <span class="description"> Enter numeric app ID of Facebook </span>'); |
| 2200 | 2234 | } |
| 2201 | 2235 | |
| 2202 | 2236 | public function facebook_secret_callback() |
| @@ -2201,9 +2235,9 @@ | ||
| 2201 | 2235 | |
| 2202 | 2236 | public function facebook_secret_callback() |
| 2203 | 2237 | { |
| 2204 | 2238 | $facebook_secret = Metasync::get_option('social_meta')['facebook_secret'] ?? ''; |
| 2205 | - printf('<input type="text" name="' . Metasync_Admin::option_key . '[social_meta][facebook_secret]" value="%s" size="50" />', esc_attr($facebook_secret)); | |
| 2239 | + printf('<input type="text" name="' . esc_attr(Metasync_Admin::option_key) . '[social_meta][facebook_secret]" value="%s" size="50" />', esc_attr($facebook_secret)); | |
| 2206 | 2240 | printf(' <br> <span class="description"> Enter alphanumeric access token from Facebook. </span>'); |
| 2207 | 2241 | } |
| 2208 | 2242 | |
| 2209 | 2243 | public function twitter_username_callback() |
| @@ -2208,9 +2242,9 @@ | ||
| 2208 | 2242 | |
| 2209 | 2243 | public function twitter_username_callback() |
| 2210 | 2244 | { |
| 2211 | 2245 | $twitter_username = Metasync::get_option('social_meta')['twitter_username'] ?? ''; |
| 2212 | - printf('<input type="text" name="' . Metasync_Admin::option_key . '[social_meta][twitter_username]" value="%s" size="50" />', esc_attr($twitter_username)); | |
| 2246 | + printf('<input type="text" name="' . esc_attr(Metasync_Admin::option_key) . '[social_meta][twitter_username]" value="%s" size="50" />', esc_attr($twitter_username)); | |
| 2213 | 2247 | printf(' <br> <span class="description"> Twitter username of the author to add <code>twitter:creator</code> tag to post. eg: <code>MetaSync</code> </span>'); |
| 2214 | 2248 | } |
| 2215 | 2249 | |
| 2216 | 2250 | public static function get_business_types() |
| @@ -2385,8 +2419,14 @@ | ||
| 2385 | 2419 | } |
| 2386 | 2420 | |
| 2387 | 2421 | /** |
| 2388 | 2422 | * Render breadcrumbs settings section |
| 2423 | + * | |
| 2424 | + * Rendered by the dedicated Breadcrumbs admin page. The three checkbox | |
| 2425 | + * fields each ship a hidden companion input so their keys are always | |
| 2426 | + * present in the submitted payload, which lets the save handlers treat an | |
| 2427 | + * absent key as "this form does not manage that field" instead of | |
| 2428 | + * "unchecked". | |
| 2389 | 2429 | */ |
| 2390 | 2430 | public function render_breadcrumbs_section() { |
| 2391 | 2431 | $options = Metasync::get_option('breadcrumbs', array()); |
| 2392 | 2432 | |
| @@ -2391,9 +2431,9 @@ | ||
| 2391 | 2431 | $options = Metasync::get_option('breadcrumbs', array()); |
| 2392 | 2432 | |
| 2393 | 2433 | $defaults = array( |
| 2394 | 2434 | 'enabled' => true, |
| 2395 | - 'separator' => '»', | |
| 2435 | + 'separator' => '»', | |
| 2396 | 2436 | 'home_label' => 'Home', |
| 2397 | 2437 | 'home_url' => '', |
| 2398 | 2438 | 'show_current_page' => true, |
| 2399 | 2439 | 'prefix_text' => '', |
| @@ -2401,8 +2441,19 @@ | ||
| 2401 | 2441 | 'disable_schema' => false, |
| 2402 | 2442 | ); |
| 2403 | 2443 | |
| 2404 | 2444 | $options = wp_parse_args($options, $defaults); |
| 2445 | + | |
| 2446 | + # Older builds stored the separator as an HTML entity (e.g. "»"). | |
| 2447 | + # Decode before matching so the saved choice still lights up its radio. | |
| 2448 | + $separator_presets = array('»', '/', '>', '·'); | |
| 2449 | + $separator_current = html_entity_decode((string) $options['separator'], ENT_QUOTES, 'UTF-8'); | |
| 2450 | + if ($separator_current === '') { | |
| 2451 | + $separator_current = '»'; | |
| 2452 | + } | |
| 2453 | + # A separator that predates the radio picker (or came from the old free | |
| 2454 | + # text field) gets its own option so it stays selected and round-trips. | |
| 2455 | + $separator_custom = in_array($separator_current, $separator_presets, true) ? '' : $separator_current; | |
| 2405 | 2456 | ?> |
| 2406 | 2457 | <div style="background: var(--dashboard-card-bg); padding: 20px; border-radius: 8px;"> |
| 2407 | 2458 | |
| 2408 | 2459 | <!-- Enable/Disable --> |
| @@ -2407,8 +2458,9 @@ | ||
| 2407 | 2458 | |
| 2408 | 2459 | <!-- Enable/Disable --> |
| 2409 | 2460 | <div style="margin-bottom: 24px;"> |
| 2410 | 2461 | <label style="display: flex; align-items: center; gap: 12px; cursor: pointer;"> |
| 2462 | + <input type="hidden" name="metasync_options[breadcrumbs][enabled]" value="0"> | |
| 2411 | 2463 | <input type="checkbox" |
| 2412 | 2464 | name="metasync_options[breadcrumbs][enabled]" |
| 2413 | 2465 | value="1" |
| 2414 | 2466 | <?php checked($options['enabled'], 1); ?> |
| @@ -2413,8 +2465,9 @@ | ||
| 2413 | 2465 | value="1" |
| 2414 | 2466 | <?php checked($options['enabled'], 1); ?> |
| 2415 | 2467 | style="width: 18px; height: 18px; cursor: pointer;"> |
| 2416 | 2468 | <span style="font-weight: 500; color: var(--dashboard-text);">Enable breadcrumbs globally</span> |
| 2469 | + <?php Metasync::render_tooltip_icon('breadcrumbs_enabled', 'Shows a trail of links (e.g. Home > Blog > This Post) near the top of your pages so visitors can see where they are and navigate back up a level. Turn off to hide breadcrumbs everywhere.'); ?> | |
| 2417 | 2470 | </label> |
| 2418 | 2471 | <p style="margin: 8px 0 0 0; font-size: 12px; color: var(--dashboard-text-secondary);"> |
| 2419 | 2472 | Enable or disable breadcrumb navigation on your site |
| 2420 | 2473 | </p> |
| @@ -2422,8 +2475,9 @@ | ||
| 2422 | 2475 | |
| 2423 | 2476 | <!-- Disable Schema Markup --> |
| 2424 | 2477 | <div style="margin-bottom: 24px;"> |
| 2425 | 2478 | <label style="display: flex; align-items: center; gap: 12px; cursor: pointer;"> |
| 2479 | + <input type="hidden" name="metasync_options[breadcrumbs][disable_schema]" value="0"> | |
| 2426 | 2480 | <input type="checkbox" |
| 2427 | 2481 | name="metasync_options[breadcrumbs][disable_schema]" |
| 2428 | 2482 | value="1" |
| 2429 | 2483 | <?php checked($options['disable_schema'], 1); ?> |
| @@ -2428,8 +2482,9 @@ | ||
| 2428 | 2482 | value="1" |
| 2429 | 2483 | <?php checked($options['disable_schema'], 1); ?> |
| 2430 | 2484 | style="width: 18px; height: 18px; cursor: pointer;"> |
| 2431 | 2485 | <span style="font-weight: 500; color: var(--dashboard-text);">Disable breadcrumb schema markup (JSON-LD)</span> |
| 2486 | + <?php Metasync::render_tooltip_icon('breadcrumbs_disable_schema', 'Leave off. Only check this if another SEO plugin (Yoast, Rank Math, etc.) already sends breadcrumb data to Google, so you don\'t send it twice.'); ?> | |
| 2432 | 2487 | </label> |
| 2433 | 2488 | <p style="margin: 8px 0 0 0; font-size: 12px; color: var(--dashboard-text-secondary);"> |
| 2434 | 2489 | When checked, MetaSync will not output the <code style="background: rgba(0,0,0,0.1); padding: 2px 4px; border-radius: 3px;">BreadcrumbList</code> JSON-LD in <code style="background: rgba(0,0,0,0.1); padding: 2px 4px; border-radius: 3px;"><head></code>. Use this if another SEO plugin already handles breadcrumb schema. |
| 2435 | 2490 | </p> |
| @@ -2440,24 +2495,21 @@ | ||
| 2440 | 2495 | <label for="breadcrumb_separator" style="display: block; margin-bottom: 8px; font-weight: 500; color: var(--dashboard-text);"> |
| 2441 | 2496 | Separator Character |
| 2442 | 2497 | </label> |
| 2443 | 2498 | <div style="display: flex; gap: 12px; flex-wrap: wrap;"> |
| 2499 | + <?php foreach ($separator_presets as $separator_option) : ?> | |
| 2444 | 2500 | <label style="display: flex; align-items: center; gap: 8px; cursor: pointer;"> |
| 2445 | - <input type="radio" name="metasync_options[breadcrumbs][separator]" value="»" <?php checked($options['separator'], '»'); ?>> | |
| 2446 | - <span style="color: var(--dashboard-text);">»</span> | |
| 2501 | + <input type="radio" name="metasync_options[breadcrumbs][separator]" value="<?php echo esc_attr($separator_option); ?>" <?php checked($separator_current, $separator_option); ?>> | |
| 2502 | + <span style="color: var(--dashboard-text);"><?php echo esc_html($separator_option); ?></span> | |
| 2447 | 2503 | </label> |
| 2448 | - <label style="display: flex; align-items: center; gap: 8px; cursor: pointer;"> | |
| 2449 | - <input type="radio" name="metasync_options[breadcrumbs][separator]" value="/" <?php checked($options['separator'], '/'); ?>> | |
| 2450 | - <span style="color: var(--dashboard-text);">/</span> | |
| 2451 | - </label> | |
| 2452 | - <label style="display: flex; align-items: center; gap: 8px; cursor: pointer;"> | |
| 2453 | - <input type="radio" name="metasync_options[breadcrumbs][separator]" value=">" <?php checked($options['separator'], '>'); ?>> | |
| 2454 | - <span style="color: var(--dashboard-text);">></span> | |
| 2455 | - </label> | |
| 2456 | - <label style="display: flex; align-items: center; gap: 8px; cursor: pointer;"> | |
| 2457 | - <input type="radio" name="metasync_options[breadcrumbs][separator]" value="·" <?php checked($options['separator'], '·'); ?>> | |
| 2458 | - <span style="color: var(--dashboard-text);">·</span> | |
| 2459 | - </label> | |
| 2504 | + <?php endforeach; ?> | |
| 2505 | + <div style="display: flex; align-items: center; gap: 8px;"> | |
| 2506 | + <label style="display: flex; align-items: center; gap: 8px; cursor: pointer;"> | |
| 2507 | + <input type="radio" id="metasync-breadcrumb-separator-custom" name="metasync_options[breadcrumbs][separator]" value="<?php echo esc_attr($separator_custom); ?>" <?php checked($separator_custom !== ''); ?>> | |
| 2508 | + <span style="color: var(--dashboard-text);">Custom</span> | |
| 2509 | + </label> | |
| 2510 | + <input type="text" value="<?php echo esc_attr($separator_custom); ?>" placeholder="~" maxlength="16" aria-label="Custom separator character" oninput="var r=document.getElementById('metasync-breadcrumb-separator-custom');r.value=this.value;r.checked=true" style="width: 80px; padding: 8px 10px; background: var(--dashboard-input-bg); border: 1px solid var(--dashboard-border); border-radius: 6px; color: var(--dashboard-text); font-size: 14px;"> | |
| 2511 | + </div> | |
| 2460 | 2512 | </div> |
| 2461 | 2513 | <p style="margin: 8px 0 0 0; font-size: 12px; color: var(--dashboard-text-secondary);"> |
| 2462 | 2514 | Choose how to separate breadcrumb items |
| 2463 | 2515 | </p> |
| @@ -2497,8 +2549,9 @@ | ||
| 2497 | 2549 | |
| 2498 | 2550 | <!-- Show Current Page --> |
| 2499 | 2551 | <div style="margin-bottom: 24px;"> |
| 2500 | 2552 | <label style="display: flex; align-items: center; gap: 12px; cursor: pointer;"> |
| 2553 | + <input type="hidden" name="metasync_options[breadcrumbs][show_current_page]" value="0"> | |
| 2501 | 2554 | <input type="checkbox" |
| 2502 | 2555 | name="metasync_options[breadcrumbs][show_current_page]" |
| 2503 | 2556 | value="1" |
| 2504 | 2557 | <?php checked($options['show_current_page'], 1); ?> |
| @@ -2529,8 +2582,9 @@ | ||
| 2529 | 2582 | <!-- Archive Label Format --> |
| 2530 | 2583 | <div style="margin-bottom: 24px;"> |
| 2531 | 2584 | <label for="breadcrumb_archive_format" style="display: block; margin-bottom: 8px; font-weight: 500; color: var(--dashboard-text);"> |
| 2532 | 2585 | Archive Label Format |
| 2586 | + <?php Metasync::render_tooltip_icon('breadcrumb_archive_format', 'On category/archive pages, {name} is replaced with that section\'s name. Type {name} alone for just the name, or something like "Category: {name}".'); ?> | |
| 2533 | 2587 | </label> |
| 2534 | 2588 | <input type="text" |
| 2535 | 2589 | id="breadcrumb_archive_format" |
| 2536 | 2590 | name="metasync_options[breadcrumbs][archive_label_format]" |
