PluginProbe
MxChat – AI Chatbot & Content Generation for WordPress / 2.2.2
MxChat – AI Chatbot & Content Generation for WordPress v2.2.2
3.2.21 3.2.20 3.2.19 3.2.18 3.2.17 3.2.16 3.2.15 3.2.14 3.2.12 3.2.13 3.2.11 3.2.10 3.2.9 3.2.8 3.2.7 3.2.6 3.2.5 3.2.4 3.2.3 3.2.2 3.2.1 2.0.3 2.0.4 2.0.5 2.0.6 All 152 releases
← All changes | admin/class-ajax-handler.php +692 -1288 3.2.13 → 2.2.2 View file →
@@ -16,797 +16,221 @@
16 16 /**
17 17 * Constructor - Register all AJAX hooks
18 18 */
19 19 public function __construct() {
20 - $this->mxchat_init_ajax_hooks();
20 + $this->init_ajax_hooks();
21 21 }
22 22
23 -
24 23 /**
25 - * Register all AJAX action hooks
24 + * Get Pinecone Manager instance (lazy loading)
26 25 */
27 -private function mxchat_init_ajax_hooks() {
28 - // Settings AJAX
29 - add_action('wp_ajax_mxchat_save_setting', array($this, 'mxchat_save_setting_callback'));
30 - add_action('wp_ajax_mxchat_save_prompts_setting', array($this, 'mxchat_save_prompts_setting_callback'));
31 - add_action('wp_ajax_migrate_pinecone_settings', array($this, 'ajax_migrate_pinecone_settings'));
32 -
33 - // License AJAX
34 - add_action('wp_ajax_mxchat_handle_activate_license', array($this, 'mxchat_handle_activate_license'));
35 - add_action('wp_ajax_mxchat_check_license_status', array($this, 'mxchat_check_license_status'));
36 - add_action('wp_ajax_mxchat_deactivate_license', array($this, 'mxchat_deactivate_license'));
37 -
38 - // Actions & Intents AJAX
39 - add_action('wp_ajax_mxchat_toggle_action', array($this, 'mxchat_toggle_action'));
40 - add_action('wp_ajax_mxchat_update_intent_threshold', array($this, 'mxchat_update_intent_threshold'));
41 -
42 - add_action('wp_ajax_mxchat_save_selected_bot', array($this, 'mxchat_save_selected_bot'));
43 - add_action('wp_ajax_mxchat_check_api_keys', array($this, 'mxchat_check_api_keys'));
44 -
45 - // Debug & Optimization AJAX
46 - add_action('wp_ajax_mxchat_toggle_debug_mode', array($this, 'mxchat_toggle_debug_mode_callback'));
47 - add_action('wp_ajax_mxchat_get_debug_log', array($this, 'mxchat_get_debug_log_callback'));
48 - add_action('wp_ajax_mxchat_clear_debug_log', array($this, 'mxchat_clear_debug_log_callback'));
49 - add_action('wp_ajax_mxchat_export_settings', array($this, 'mxchat_export_settings_callback'));
50 - add_action('wp_ajax_mxchat_reset_all_settings', array($this, 'mxchat_reset_all_settings_callback'));
51 -
52 - // Global rate-limit usage counter reset (admin-only, nonce-guarded)
53 - add_action('wp_ajax_mxchat_reset_global_rate_limit', array($this, 'mxchat_reset_global_rate_limit_callback'));
54 -
55 - // Custom (OpenAI-compatible) Provider connection test
56 - add_action('wp_ajax_mxchat_test_custom_provider', array($this, 'mxchat_test_custom_provider_callback'));
57 -
58 - // Built-in provider key validation — cheap per-provider auth check (plan-mxchat-20260623-c41f74)
59 - add_action('wp_ajax_mxchat_test_provider_key', array($this, 'mxchat_test_provider_key_callback'));
60 -
61 - // Custom Post Meta discovery scan for the KB whitelist picker (plan-mxchat-20260709-fe8e4e)
62 - add_action('wp_ajax_mxchat_scan_custom_meta_keys', array($this, 'mxchat_scan_custom_meta_keys_callback'));
63 -}
64 -
65 -/**
66 - * Discover non-ACF custom post-meta keys present on published public content, so the
67 - * KB → Custom Post Meta section can offer a click-to-add picker instead of a blind
68 - * "type the exact key you already know" textarea. plan-mxchat-20260709-fe8e4e.
69 - *
70 - * Bounded + button-triggered only (never on page load). Returns up to 50 keys by
71 - * frequency, each with a short sample value, so the owner can judge relevance before
72 - * whitelisting. Underscore-prefixed (protected/internal) keys are hidden unless the
73 - * caller opts in; ACF-managed keys are excluded so this picker never double-lists the
74 - * sibling ACF discovery picker on the same page.
75 - */
76 -public function mxchat_scan_custom_meta_keys_callback() {
77 - check_ajax_referer('mxchat_prompts_setting_nonce');
78 -
79 - if (!current_user_can('manage_options')) {
80 - wp_send_json_error(['message' => esc_html__('Unauthorized', 'mxchat')]);
81 - }
82 -
83 - global $wpdb;
84 -
85 - $include_internal = isset($_POST['include_internal']) && $_POST['include_internal'] === '1';
86 -
87 - // Restrict discovery to public post types (the content the KB actually embeds).
88 - $post_types = get_post_types(array('public' => true), 'names');
89 - if (empty($post_types)) {
90 - wp_send_json_success(array('keys' => array(), 'scanned' => 0));
91 - }
92 - $pt_placeholders = implode(',', array_fill(0, count($post_types), '%s'));
93 -
94 - // Build the set of ACF-managed meta keys to exclude. ACF stores, alongside each
95 - // value key `foo`, a reference key `_foo` whose value is the ACF field key
96 - // (`field_xxxxx`). Strip the leading underscore from every such reference key to
97 - // get the real meta key, and exclude those — the ACF picker on this page owns them.
98 - $acf_managed = array();
99 - $acf_refs = $wpdb->get_col(
100 - $wpdb->prepare(
101 - "SELECT DISTINCT meta_key FROM {$wpdb->postmeta} WHERE meta_key LIKE %s AND meta_value LIKE %s",
102 - $wpdb->esc_like('_') . '%',
103 - $wpdb->esc_like('field_') . '%'
104 - )
105 - );
106 - foreach ((array) $acf_refs as $ref_key) {
107 - if (strlen($ref_key) > 1 && $ref_key[0] === '_') {
108 - $acf_managed[substr($ref_key, 1)] = true;
109 - }
110 - }
111 -
112 - // Discover keys + counts + a sample value in one bounded aggregate query.
113 - // SUBSTRING(MIN(...)) keeps the sample selection ONLY_FULL_GROUP_BY-safe.
114 - $params = $post_types;
115 - $sql = "SELECT pm.meta_key AS mk, COUNT(*) AS n, SUBSTRING(MIN(pm.meta_value), 1, 200) AS sample
116 - FROM {$wpdb->postmeta} pm
117 - INNER JOIN {$wpdb->posts} p ON p.ID = pm.post_id
118 - WHERE p.post_status = 'publish'
119 - AND p.post_type IN ($pt_placeholders)
120 - AND pm.meta_key <> ''";
121 - if (!$include_internal) {
122 - $sql .= " AND pm.meta_key NOT LIKE %s";
123 - $params[] = $wpdb->esc_like('_') . '%';
124 - }
125 - $sql .= " GROUP BY pm.meta_key ORDER BY n DESC, pm.meta_key ASC LIMIT 200";
126 -
127 - // phpcs:ignore WordPress.DB.PreparedSQL — placeholders assembled above, values in $params.
128 - $rows = $wpdb->get_results($wpdb->prepare($sql, $params));
129 -
130 - $keys = array();
131 - foreach ((array) $rows as $row) {
132 - $mk = $row->mk;
133 - if (isset($acf_managed[$mk])) {
134 - continue; // already offered by the ACF picker
135 - }
136 -
137 - $raw = (string) $row->sample;
138 - if ($raw !== '' && (is_serialized($raw) || preg_match('/^(a:\d+:\{|O:\d+:"|s:\d+:")/', $raw))) {
139 - $sample = esc_html__('[structured value]', 'mxchat');
140 - } else {
141 - $sample = trim(preg_replace('/\s+/', ' ', $raw));
142 - if (function_exists('mb_strlen') ? mb_strlen($sample) > 60 : strlen($sample) > 60) {
143 - $sample = (function_exists('mb_substr') ? mb_substr($sample, 0, 60) : substr($sample, 0, 60)) . '…';
26 + private function get_pinecone_manager() {
27 + if ($this->pinecone_manager === null) {
28 + // Check if the class exists before trying to instantiate
29 + if (class_exists('MxChat_Pinecone_Manager')) {
30 + $this->pinecone_manager = MxChat_Pinecone_Manager::get_instance();
31 + } else {
32 + // Fallback: return false if class doesn't exist
33 + return false;
144 34 }
145 - if ($sample === '') {
146 - $sample = esc_html__('(empty value)', 'mxchat');
147 - }
148 35 }
149 -
150 - $keys[] = array(
151 - 'key' => $mk,
152 - 'count' => (int) $row->n,
153 - 'sample' => $sample,
154 - );
155 -
156 - if (count($keys) >= 50) {
157 - break;
158 - }
36 + return $this->pinecone_manager;
159 37 }
160 38
161 - wp_send_json_success(array(
162 - 'keys' => $keys,
163 - 'scanned' => is_array($rows) ? count($rows) : 0,
164 - ));
165 -}
39 + /**
40 + * Register all AJAX action hooks
41 + */
42 + private function init_ajax_hooks() {
43 + // Settings AJAX
44 + add_action('wp_ajax_mxchat_save_setting', array($this, 'mxchat_save_setting_callback'));
45 + add_action('wp_ajax_mxchat_save_prompts_setting', array($this, 'mxchat_save_prompts_setting_callback'));
46 + add_action('wp_ajax_migrate_pinecone_settings', array($this, 'ajax_migrate_pinecone_settings'));
166 47
167 -/**
168 - * Test connection to a Custom (OpenAI-compatible) provider by hitting its /models endpoint
169 - * with whichever auth scheme the user configured. Reports model count or a clean error.
170 - */
171 -public function mxchat_test_custom_provider_callback() {
172 - check_ajax_referer('mxchat_test_custom_provider');
173 - if (!current_user_can('manage_options')) {
174 - wp_send_json_error(array('message' => esc_html__('Unauthorized', 'mxchat')));
175 - }
48 + // Content Management AJAX
49 + add_action('wp_ajax_mxchat_get_content_list', array($this, 'ajax_mxchat_get_content_list'));
50 + add_action('wp_ajax_mxchat_process_selected_content', array($this, 'ajax_mxchat_process_selected_content'));
51 + add_action('wp_ajax_mxchat_save_inline_prompt', array($this, 'mxchat_save_inline_prompt'));
176 52
177 - $options = get_option('mxchat_options', array());
178 - $base_url = isset($options['custom_provider_base_url']) ? trim((string) $options['custom_provider_base_url']) : '';
179 - $api_key = isset($options['custom_provider_api_key']) ? trim((string) $options['custom_provider_api_key']) : '';
180 - $auth = isset($options['custom_provider_auth_scheme']) ? $options['custom_provider_auth_scheme'] : 'bearer';
181 - $api_version = isset($options['custom_provider_api_version']) ? trim((string) $options['custom_provider_api_version']) : '';
53 + // License AJAX
54 + add_action('wp_ajax_mxchat_activate_license', array($this, 'mxchat_handle_activate_license'));
55 + add_action('wp_ajax_mxchat_check_license', array($this, 'mxchat_check_license_status'));
182 56
183 - if (empty($base_url)) {
184 - wp_send_json_error(array('message' => esc_html__('Base URL is empty. Save it first.', 'mxchat')));
57 + // Actions & Intents AJAX
58 + add_action('wp_ajax_mxchat_toggle_action', array($this, 'mxchat_toggle_action'));
59 + add_action('wp_ajax_mxchat_update_intent_threshold', array($this, 'mxchat_update_intent_threshold'));
185 60 }
186 61
187 - $url = rtrim($base_url, '/') . '/models';
188 - if (!empty($api_version)) {
189 - $url = add_query_arg('api-version', $api_version, $url);
190 - }
191 -
192 - $headers = array('Content-Type' => 'application/json');
193 - if (!empty($api_key)) {
194 - if ($auth === 'api-key') {
195 - $headers['api-key'] = $api_key;
196 - } else {
197 - $headers['Authorization'] = 'Bearer ' . $api_key;
198 - }
199 - }
200 -
201 - $response = wp_remote_get($url, array(
202 - 'headers' => $headers,
203 - 'timeout' => 10,
204 - ));
205 -
206 - if (is_wp_error($response)) {
207 - wp_send_json_error(array('message' => sprintf(esc_html__('Network error: %s', 'mxchat'), esc_html($response->get_error_message()))));
208 - }
209 -
210 - $code = (int) wp_remote_retrieve_response_code($response);
211 - if ($code === 401 || $code === 403) {
212 - wp_send_json_error(array('message' => sprintf(esc_html__('Auth rejected (HTTP %d). Check API key and auth scheme.', 'mxchat'), $code)));
213 - }
214 - if ($code === 404) {
215 - wp_send_json_error(array('message' => esc_html__('Endpoint not found (HTTP 404). Check the Base URL.', 'mxchat')));
216 - }
217 - if ($code < 200 || $code >= 300) {
218 - wp_send_json_error(array('message' => sprintf(esc_html__('Upstream returned HTTP %d.', 'mxchat'), $code)));
219 - }
220 -
221 - $body = json_decode(wp_remote_retrieve_body($response), true);
222 - $count = 0;
223 - if (is_array($body)) {
224 - if (isset($body['data']) && is_array($body['data'])) {
225 - $count = count($body['data']);
226 - } elseif (isset($body['models']) && is_array($body['models'])) {
227 - $count = count($body['models']);
228 - }
229 - }
230 -
231 - wp_send_json_success(array(
232 - 'message' => sprintf(esc_html__('Connection OK — %d model(s) reported.', 'mxchat'), $count),
233 - 'count' => $count,
234 - ));
235 -}
236 -
237 -/**
238 - * Validate a BUILT-IN provider key with the lightest authenticated call per
239 - * provider (a /models or key-info GET — never a generation). Reads the posted
240 - * key value so the owner can test BEFORE saving; falls back to the saved option
241 - * when the field is empty. Mirrors mxchat_test_custom_provider_callback and the
242 - * add-on test buttons (cf5bd5 veo / 8d16f1 perplexity). The key is never logged.
243 - * plan-mxchat-20260623-c41f74.
244 - */
245 -public function mxchat_test_provider_key_callback() {
246 - check_ajax_referer('mxchat_test_provider_key');
247 - if (!current_user_can('manage_options')) {
248 - wp_send_json_error(array('message' => esc_html__('Unauthorized', 'mxchat')));
249 - }
250 -
251 - $provider = isset($_POST['provider']) ? sanitize_key(wp_unslash($_POST['provider'])) : '';
252 - $posted_key = isset($_POST['key']) ? trim((string) wp_unslash($_POST['key'])) : '';
253 -
254 - $option_map = array(
255 - 'openai' => 'api_key',
256 - 'xai' => 'xai_api_key',
257 - 'claude' => 'claude_api_key',
258 - 'deepseek' => 'deepseek_api_key',
259 - 'gemini' => 'gemini_api_key',
260 - 'openrouter' => 'openrouter_api_key',
261 - );
262 - if (!isset($option_map[$provider])) {
263 - wp_send_json_error(array('message' => esc_html__('Unknown provider.', 'mxchat')));
264 - }
265 -
266 - // Prefer the just-typed value (test-before-save); fall back to the saved key.
267 - $key = $posted_key;
268 - if ($key === '') {
269 - $options = get_option('mxchat_options', array());
270 - $key = isset($options[$option_map[$provider]]) ? trim((string) $options[$option_map[$provider]]) : '';
271 - }
272 - if ($key === '') {
273 - wp_send_json_error(array('message' => esc_html__('No API key entered or saved for this provider.', 'mxchat')));
274 - }
275 -
276 - // Lightest authenticated metadata call per provider — model-agnostic, no generation.
277 - $headers = array();
278 - switch ($provider) {
279 - case 'openai':
280 - $url = 'https://api.openai.com/v1/models';
281 - $headers = array('Authorization' => 'Bearer ' . $key);
282 - break;
283 - case 'xai':
284 - $url = 'https://api.x.ai/v1/models';
285 - $headers = array('Authorization' => 'Bearer ' . $key);
286 - break;
287 - case 'deepseek':
288 - $url = 'https://api.deepseek.com/models';
289 - $headers = array('Authorization' => 'Bearer ' . $key);
290 - break;
291 - case 'openrouter':
292 - // /auth/key validates the key itself (the public /models list does not).
293 - $url = 'https://openrouter.ai/api/v1/auth/key';
294 - $headers = array('Authorization' => 'Bearer ' . $key);
295 - break;
296 - case 'gemini':
297 - $url = add_query_arg(array('pageSize' => 1, 'key' => $key), 'https://generativelanguage.googleapis.com/v1beta/models');
298 - break;
299 - case 'claude':
300 - $url = 'https://api.anthropic.com/v1/models';
301 - $headers = array('x-api-key' => $key, 'anthropic-version' => '2023-06-01');
302 - break;
303 - default:
304 - wp_send_json_error(array('message' => esc_html__('Unknown provider.', 'mxchat')));
305 - }
306 -
307 - $response = wp_remote_get($url, array(
308 - 'headers' => $headers,
309 - 'timeout' => 10,
310 - ));
311 -
312 - if (is_wp_error($response)) {
313 - wp_send_json_error(array('message' => sprintf(esc_html__('Network error: %s', 'mxchat'), esc_html($response->get_error_message()))));
314 - }
315 -
316 - $code = (int) wp_remote_retrieve_response_code($response);
317 - if ($code >= 200 && $code < 300) {
318 - wp_send_json_success(array('message' => esc_html__('Key is valid.', 'mxchat')));
319 - }
320 -
321 - // Surface the provider's own error text when present (trimmed; key never echoed).
322 - $detail = '';
323 - $body = json_decode(wp_remote_retrieve_body($response), true);
324 - if (is_array($body)) {
325 - if (isset($body['error']['message'])) {
326 - $detail = $body['error']['message'];
327 - } elseif (isset($body['error']) && is_string($body['error'])) {
328 - $detail = $body['error'];
329 - } elseif (isset($body['message'])) {
330 - $detail = $body['message'];
331 - }
332 - }
333 - $detail = trim((string) $detail);
334 - if (strlen($detail) > 200) {
335 - $detail = substr($detail, 0, 200) . '…';
336 - }
337 -
338 - if ($code === 401 || $code === 403) {
339 - $msg = ($detail !== '')
340 - ? sprintf(esc_html__('Key rejected (HTTP %1$d): %2$s', 'mxchat'), $code, esc_html($detail))
341 - : sprintf(esc_html__('Key rejected (HTTP %d). Check the API key.', 'mxchat'), $code);
342 - wp_send_json_error(array('message' => $msg));
343 - }
344 -
345 - $msg = ($detail !== '')
346 - ? sprintf(esc_html__('Provider returned HTTP %1$d: %2$s', 'mxchat'), $code, esc_html($detail))
347 - : sprintf(esc_html__('Provider returned HTTP %d.', 'mxchat'), $code);
348 - wp_send_json_error(array('message' => $msg));
349 -}
350 -
351 62 // ========================================
352 63 // SETTINGS AJAX HANDLERS
353 64 // ========================================
354 65
355 -/**
356 - * Validates and saves chat settings via AJAX request
357 - */
358 -public function mxchat_save_setting_callback() {
359 - check_ajax_referer('mxchat_save_setting_nonce');
360 - if (!current_user_can('manage_options')) {
361 - ('MXChat Save: Unauthorized access attempt');
362 - wp_send_json_error(['message' => esc_html__('Unauthorized', 'mxchat')]);
363 - }
66 + /**
67 + * Validates and saves chat settings via AJAX request
68 + */
69 + public function mxchat_save_setting_callback() {
70 + check_ajax_referer('mxchat_save_setting_nonce');
71 + if (!current_user_can('manage_options')) {
72 + ('MXChat Save: Unauthorized access attempt');
73 + wp_send_json_error(['message' => esc_html__('Unauthorized', 'mxchat')]);
74 + }
364 75
365 - $name = isset($_POST['name']) ? $_POST['name'] : '';
366 - // Remove WP's added slashes before saving (wp_unslash is the canonical form; plan-3f8158).
367 - $value = isset($_POST['value']) ? wp_unslash($_POST['value']) : '';
76 + $name = isset($_POST['name']) ? $_POST['name'] : '';
77 + // Strip slashes from the value before saving
78 + $value = isset($_POST['value']) ? stripslashes($_POST['value']) : '';
368 79
369 - //error_log('MXChat Save: Processing field name: ' . $name);
370 - //error_log('MXChat Save: Field value: ' . $value);
80 + //error_log('MXChat Save: Processing field name: ' . $name);
81 + //error_log('MXChat Save: Field value: ' . $value);
371 82
372 - if (empty($name)) {
373 - //error_log('MXChat Save: Empty field name detected');
374 - wp_send_json_error(['message' => esc_html__('Invalid field name', 'mxchat')]);
375 - }
83 + if (empty($name)) {
84 + //error_log('MXChat Save: Empty field name detected');
85 + wp_send_json_error(['message' => esc_html__('Invalid field name', 'mxchat')]);
86 + }
376 87
377 - // Load the full options array
378 - $options = get_option('mxchat_options', []);
379 - //error_log('MXChat Save: Current options array: ' . print_r($options, true));
88 + // Load the full options array
89 + $options = get_option('mxchat_options', []);
90 + //error_log('MXChat Save: Current options array: ' . print_r($options, true));
380 91
381 - // Extract field name from mxchat_options[field_name] format if present
382 - // But preserve the full name for special cases like rate_limits that need the full path
383 - $field_name = $name;
384 - if (preg_match('/^mxchat_options\[([^\[\]]+)\]$/', $name, $matches)) {
385 - $field_name = $matches[1];
386 - }
387 -
388 - // Handle special cases
389 - switch ($field_name) {
390 - case 'model':
391 - //error_log('MXChat Save: Processing model selection');
392 - //error_log('MXChat Save: Model value received: ' . $value);
393 - //error_log('MXChat Save: Value type: ' . gettype($value));
394 - //error_log('MXChat Save: Value length: ' . strlen($value));
395 - //error_log('MXChat Save: Value === "openrouter": ' . ($value === 'openrouter' ? 'YES' : 'NO'));
396 -
397 - // Allow 'openrouter' or validate against whitelist
398 - if ($value === 'openrouter') {
399 - //error_log('MXChat Save: Setting model to openrouter');
400 - $options['model'] = 'openrouter';
401 - } else {
402 - //error_log('MXChat Save: Checking against whitelist');
403 - // Catalog refactor (plan-d14e89): canonical allowlist lives in
404 - // includes/class-mxchat-model-catalog.php. A new chat model
405 - // added there is automatically accepted by autosave.
406 - if (!class_exists('MxChat_Model_Catalog')) {
407 - require_once plugin_dir_path(dirname(__FILE__)) . 'includes/class-mxchat-model-catalog.php';
92 + // Handle special cases
93 + switch ($name) {
94 + case 'additional_popular_questions':
95 + //error_log('MXChat Save: Processing additional_popular_questions');
96 + $questions = json_decode($value, true); // No need for stripslashes here
97 + if (is_array($questions)) {
98 + $options[$name] = $questions;
99 + // Also update old option for backwards compatibility
100 + update_option('additional_popular_questions', $questions);
101 + //error_log('MXChat Save: Saved ' . count($questions) . ' additional questions');
102 + } else {
103 + //error_log('MXChat Save: Failed to decode questions JSON');
408 104 }
409 - $allowed_models = MxChat_Model_Catalog::chat_model_ids();
410 -
411 - //error_log('MXChat Save: in_array result: ' . (in_array($value, $allowed_models) ? 'YES' : 'NO'));
412 -
413 - if (in_array($value, $allowed_models)) {
414 - //error_log('MXChat Save: Model is in whitelist, saving');
415 - $options['model'] = sanitize_text_field($value);
416 - } else {
417 - //error_log('MXChat Save: Invalid model rejected: ' . $value);
418 - //error_log('MXChat Save: Allowed models: ' . print_r($allowed_models, true));
419 - wp_send_json_error(['message' => esc_html__('Invalid model selected', 'mxchat')]);
420 - return;
421 - }
422 - }
423 - break;
424 -
425 - case 'openrouter_selected_model':
426 - //error_log('MXChat Save: Processing OpenRouter model: ' . $value);
427 - $options['openrouter_selected_model'] = sanitize_text_field($value);
428 - // Force immediate save for new keys
429 - //error_log('MXChat Save: OpenRouter model saved immediately');
430 - break;
431 -
432 - case 'openrouter_selected_model_name':
433 - //error_log('MXChat Save: Processing OpenRouter model name: ' . $value);
434 - $options['openrouter_selected_model_name'] = sanitize_text_field($value);
435 - // Force immediate save for new keys
436 - //error_log('MXChat Save: OpenRouter model name saved immediately');
437 - break;
438 -
439 - case 'openrouter_api_key':
440 - //error_log('MXChat Save: Processing OpenRouter API key');
441 - $options['openrouter_api_key'] = sanitize_text_field($value);
442 - break;
443 -
444 - // REMOVED DUPLICATE case 'openrouter_selected_model_name' HERE!
445 -
446 - case 'additional_popular_questions':
447 - //error_log('MXChat Save: Processing additional_popular_questions');
448 - $questions = json_decode($value, true); // No need for stripslashes here
449 - if (is_array($questions)) {
450 - $options[$field_name] = $questions;
451 - // Also update old option for backwards compatibility
452 - update_option('additional_popular_questions', $questions);
453 - //error_log('MXChat Save: Saved ' . count($questions) . ' additional questions');
454 - } else {
455 - //error_log('MXChat Save: Failed to decode questions JSON');
456 - }
457 - break;
458 - case 'email_blocker_header_content':
459 - //error_log('MXChat Save: Processing email_blocker_header_content');
460 - // Allow HTML content but sanitize it safely
461 - $options[$field_name] = wp_kses_post($value);
462 - break;
463 - case 'intro_message':
464 - // Stored-XSS hardening (Wordfence CWE-79, plan-3f8158): sanitize on save as
465 - // defense in depth. wp_kses_post mirrors mxchat_sanitize() (the options.php
466 - // save path) so both save routes treat intro_message identically and strip
467 - // <script>/</textarea> breakout while keeping basic formatting + {visitor_name}.
468 - $options[$field_name] = wp_kses_post($value);
469 - break;
470 - case 'email_blocker_button_text':
471 - //error_log('MXChat Save: Processing email_blocker_button_text');
472 - $options[$field_name] = sanitize_text_field($value);
473 - break;
474 - case 'name_field_placeholder':
475 - //error_log('MXChat Save: Processing name_field_placeholder');
476 - $options[$field_name] = sanitize_text_field($value);
477 - break;
478 - case 'similarity_threshold':
479 - //error_log('MXChat Save: Processing similarity_threshold');
480 - // Validate and save - enforce min 20, max 85
481 - $threshold = intval($value);
482 - if ($threshold < 20) $threshold = 20;
483 - if ($threshold > 85) $threshold = 85;
484 - $options[$field_name] = $threshold;
485 - break;
486 - case 'rag_sources_limit':
487 - //error_log('MXChat Save: Processing rag_sources_limit');
488 - // Validate and save - enforce min 3, max 10, default 6
489 - $rag_limit = intval($value);
490 - if ($rag_limit < 3) $rag_limit = 3;
491 - if ($rag_limit > 10) $rag_limit = 10;
492 - $options[$field_name] = $rag_limit;
493 - break;
494 - case 'rag_chunks_limit':
495 - // Validate and save - enforce min 8, max 20, default 15
496 - $chunks_limit = intval($value);
497 - if ($chunks_limit < 8) $chunks_limit = 8;
498 - if ($chunks_limit > 20) $chunks_limit = 20;
499 - $options[$field_name] = $chunks_limit;
500 - break;
501 - case 'live_agent_status':
502 - //error_log('MXChat Save: Processing live_agent_status');
503 - // Set the new value
504 - $options[$field_name] = ($value === 'on') ? 'on' : 'off';
505 - break;
506 - case 'enable_web_search':
507 - //error_log('MXChat Save: Processing enable_web_search');
508 - $options[$field_name] = ($value === 'on') ? 'on' : 'off';
509 - break;
510 - case 'enable_woocommerce_integration':
511 - //error_log('MXChat Save: Processing enable_woocommerce_integration');
512 - // Handle values that used to be 1/0
513 - $options[$field_name] = ($value === 'on' || $value === '1') ? 'on' : 'off';
514 - break;
515 - case 'post_type_visibility_mode':
516 - // Validate mode value
517 - $allowed_modes = array('all', 'include', 'exclude');
518 - $options[$field_name] = in_array($value, $allowed_modes) ? $value : 'all';
519 - break;
520 - case 'post_type_visibility_list':
521 - // Handle JSON array of post types
522 - $post_types = json_decode($value, true);
523 - if (is_array($post_types)) {
524 - // Sanitize each post type slug
525 - $options[$field_name] = array_map('sanitize_key', $post_types);
526 - } else {
527 - $options[$field_name] = array();
528 - }
529 - break;
530 - case 'script_loading_strategy':
531 - // Validate script loading strategy value
532 - $allowed_strategies = array('default', 'defer', 'delay_1s', 'delay_3s', 'delay_5s', 'on_interaction');
533 - $options[$field_name] = in_array($value, $allowed_strategies) ? $value : 'default';
534 - break;
535 - case 'auto_retry_on_transient_error':
536 - // Boolean toggle — accept 1/0/on/off, default to '1' if any truthy value.
537 - $options[$field_name] = ($value === '1' || $value === 'on' || $value === 1 || $value === true) ? '1' : '0';
538 - break;
539 - default:
540 - // Handle transcripts options
541 - if (strpos($name, 'mxchat_transcripts_options') !== false) {
542 - // Extract field name from mxchat_transcripts_options[field_name]
543 - if (preg_match('/mxchat_transcripts_options\[([^\]]+)\]/', $name, $matches)) {
544 - $field_name = $matches[1];
105 + break;
106 + case 'email_blocker_header_content':
107 + //error_log('MXChat Save: Processing email_blocker_header_content');
108 + // Allow HTML content but sanitize it safely
109 + $options[$name] = wp_kses_post($value);
110 + break;
111 + case 'similarity_threshold':
112 + //error_log('MXChat Save: Processing similarity_threshold');
113 + // Save to the options array
114 + $options[$name] = $value;
115 + break;
116 + case 'user_message_bg_color':
117 + case 'user_message_font_color':
118 + case 'bot_message_bg_color':
119 + case 'bot_message_font_color':
120 + case 'top_bar_bg_color':
121 + case 'send_button_font_color':
122 + case 'chatbot_background_color':
123 + case 'icon_color':
124 + case 'chat_input_font_color':
125 + case 'live_agent_message_bg_color':
126 + case 'live_agent_message_font_color':
127 + case 'mode_indicator_bg_color':
128 + case 'mode_indicator_font_color':
129 + case 'toolbar_icon_color':
130 + //error_log('MXChat Save: Processing color value: ' . $name);
131 + // Store color values directly
132 + $options[$name] = $value;
133 + break;
134 + case 'live_agent_status':
135 + //error_log('MXChat Save: Processing live_agent_status');
136 + // Set the new value
137 + $options[$name] = ($value === 'on') ? 'on' : 'off';
138 + break;
139 + case 'enable_woocommerce_integration':
140 + //error_log('MXChat Save: Processing enable_woocommerce_integration');
141 + // Handle values that used to be 1/0
142 + $options[$name] = ($value === 'on' || $value === '1') ? 'on' : 'off';
143 + break;
144 + default:
145 + // First check for rate limits settings
146 + if (strpos($name, 'mxchat_options[rate_limits]') !== false) {
147 + //error_log('MXChat Save: Detected rate_limits field: ' . $name);
545 148
546 - // Get current transcripts options
547 - $transcripts_options = get_option('mxchat_transcripts_options', array());
149 + // Extract role ID and setting from the name
150 + preg_match('/\[rate_limits\]\[(.*?)\]\[(.*?)\]/', $name, $matches);
151 + //error_log('MXChat Save: Regex matches: ' . print_r($matches, true));
548 152
549 - // Ensure it's an array
550 - if (!is_array($transcripts_options)) {
551 - $transcripts_options = array();
552 - }
153 + if (isset($matches[1]) && isset($matches[2])) {
154 + $role_id = $matches[1];
155 + $setting_key = $matches[2]; // limit, timeframe, or message
553 156
554 - // Handle checkbox values (convert 'on'/'off' to 1/0)
555 - if ($value === 'on' || $value === '1') {
556 - $transcripts_options[$field_name] = 1;
557 - } else if ($value === 'off' || $value === '0' || $value === '') {
558 - $transcripts_options[$field_name] = 0;
559 - } else {
560 - // For text/select fields, sanitize appropriately
561 - if ($field_name === 'mxchat_notification_email') {
562 - $transcripts_options[$field_name] = sanitize_email($value);
563 - } else {
564 - $transcripts_options[$field_name] = sanitize_text_field($value);
565 - }
566 - }
157 + //error_log('MXChat Save: Role ID = ' . $role_id . ', Setting Key = ' . $setting_key);
567 158
568 - // Use direct database update to bypass any filters
569 - global $wpdb;
159 + // Initialize rate_limits if it doesn't exist
160 + if (!isset($options['rate_limits'])) {
161 + // //error_log('MXChat Save: Initializing rate_limits array');
162 + $options['rate_limits'] = [];
163 + }
570 164
571 - // Serialize the options array
572 - $serialized = maybe_serialize($transcripts_options);
165 + // Initialize role settings if it doesn't exist
166 + if (!isset($options['rate_limits'][$role_id])) {
167 + //error_log('MXChat Save: Initializing rate_limits for role: ' . $role_id);
168 + $options['rate_limits'][$role_id] = [
169 + 'limit' => ($role_id === 'logged_out') ? '10' : '100',
170 + 'timeframe' => 'daily',
171 + 'message' => 'Rate limit exceeded. Please try again later.'
172 + ];
173 + }
573 174
574 - // Check if the option already exists in the database
575 - $existing = $wpdb->get_var("SELECT option_id FROM {$wpdb->options} WHERE option_name = 'mxchat_transcripts_options'");
175 + // Update the specific setting
176 + $options['rate_limits'][$role_id][$setting_key] = $value;
177 + //error_log('MXChat Save: Updated rate_limits[' . $role_id . '][' . $setting_key . '] = ' . $value);
178 + } else {
179 + //error_log('MXChat Save: Failed to parse rate_limits pattern: ' . $name);
180 + }
181 + }
182 + // Then check for role rate limits (old format)
183 + else if (strpos($name, 'mxchat_options[role_rate_limits]') !== false) {
184 + //error_log('MXChat Save: Processing role_rate_limits field: ' . $name);
185 + // Extract role ID from the name
186 + preg_match('/\[role_rate_limits\]\[(.*?)\]/', $name, $matches);
187 + //error_log('MXChat Save: Regex matches: ' . print_r($matches, true));
576 188
577 - if ($existing) {
578 - // Option exists, do an update
579 - $result = $wpdb->update(
580 - $wpdb->options,
581 - array('option_value' => $serialized),
582 - array('option_name' => 'mxchat_transcripts_options'),
583 - array('%s'),
584 - array('%s')
585 - );
586 - } else {
587 - // Option doesn't exist (new install), do an insert
588 - $result = $wpdb->insert(
589 - $wpdb->options,
590 - array(
591 - 'option_name' => 'mxchat_transcripts_options',
592 - 'option_value' => $serialized,
593 - 'autoload' => 'yes'
594 - ),
595 - array('%s', '%s', '%s')
596 - );
597 - }
189 + if (isset($matches[1])) {
190 + $role_id = $matches[1];
191 + // Initialize role_rate_limits if it doesn't exist
192 + if (!isset($options['role_rate_limits'])) {
193 + //error_log('MXChat Save: Initializing role_rate_limits array');
194 + $options['role_rate_limits'] = [];
195 + }
196 + // Update the specific role's rate limit
197 + $options['role_rate_limits'][$role_id] = sanitize_text_field($value);
198 + //error_log('MXChat Save: Updated role_rate_limits[' . $role_id . '] = ' . $value);
199 + } else {
200 + //error_log('MXChat Save: Failed to parse role_rate_limits pattern: ' . $name);
201 + }
202 + }
203 + // Handle toggles
204 + else if (strpos($name, 'toggle') !== false || in_array($name, [
205 + 'chat_persistence_toggle',
206 + 'privacy_toggle',
207 + 'complianz_toggle',
208 + 'chat_toolbar_toggle',
209 + 'show_pdf_upload_button',
210 + 'show_word_upload_button'
211 + ])) {
212 + //error_log('MXChat Save: Processing toggle: ' . $name);
213 + $options[$name] = ($value === 'on') ? 'on' : 'off';
214 + } else {
215 + //error_log('MXChat Save: Processing standard field: ' . $name);
216 + // Store all other values directly
217 + $options[$name] = $value;
218 + }
219 + break;
220 + }
598 221
599 - // Clear all caches after direct DB update
600 - wp_cache_delete('mxchat_transcripts_options', 'options');
601 - wp_cache_delete('alloptions', 'options');
602 - wp_cache_flush();
222 + // Save all updates to the options array
223 + $updated = update_option('mxchat_options', $options);
224 + //error_log('MXChat Save: Update result: ' . ($updated ? 'success' : 'unchanged') . ' for field: ' . $name);
225 + //error_log('MXChat Save: Updated options array: ' . print_r($options, true));
603 226
604 - wp_send_json_success(['message' => esc_html__('Setting saved', 'mxchat')]);
605 - return;
606 - }
607 - }
608 - // Whole-chatbot global cap (sits in mxchat_options['rate_limits_global']).
609 - // Field names: mxchat_options[rate_limits_global][limit|timeframe|limit_custom]
610 - else if (strpos($name, 'mxchat_options[rate_limits_global]') !== false) {
611 - preg_match('/\[rate_limits_global\]\[(.*?)\]/', $name, $matches);
612 - if (isset($matches[1])) {
613 - $setting_key = $matches[1];
614 - if (!isset($options['rate_limits_global']) || !is_array($options['rate_limits_global'])) {
615 - $options['rate_limits_global'] = array('limit' => 'unlimited', 'timeframe' => 'daily');
616 - }
617 - if ($setting_key === 'limit') {
618 - // Selection from the preset dropdown. If __custom__, resolve from limit_custom; otherwise store directly.
619 - if ($value === '__custom__') {
620 - $custom = isset($options['rate_limits_global']['limit_custom']) ? (string) $options['rate_limits_global']['limit_custom'] : '';
621 - if ($custom !== '' && ctype_digit($custom) && (int) $custom >= 1) {
622 - $options['rate_limits_global']['limit'] = $custom;
623 - }
624 - // else leave existing limit untouched until the custom value arrives
625 - } else {
626 - $options['rate_limits_global']['limit'] = $value;
627 - }
628 - } elseif ($setting_key === 'limit_custom') {
629 - $clean = preg_replace('/[^0-9]/', '', (string) $value);
630 - $options['rate_limits_global']['limit_custom'] = $clean;
631 - // Mirror a valid custom value into limit UNCONDITIONALLY (plan-74eb86).
632 - // The custom number input is only editable when the dropdown is on
633 - // "Custom…" (the toggle JS hides it for presets/unlimited) and autosave
634 - // sends one field per change event, so a limit_custom change only fires
635 - // in custom mode — there is no preset to clobber. The old guard required
636 - // limit to already be non-preset, which it isn't on a first-time custom
637 - // entry (the limit=__custom__ event arrives before limit_custom is set),
638 - // so the value never landed in limit on the first save and reverted on refresh.
639 - if ($clean !== '' && (int) $clean >= 1) {
640 - $options['rate_limits_global']['limit'] = $clean;
641 - }
642 - } elseif ($setting_key === 'timeframe') {
643 - $allowed_tf = array('hourly','daily','weekly','monthly');
644 - $options['rate_limits_global']['timeframe'] = in_array($value, $allowed_tf, true) ? $value : 'daily';
645 - }
646 - }
647 - }
648 - // First check for rate limits settings
649 - else if (strpos($name, 'mxchat_options[rate_limits]') !== false) {
650 - //error_log('MXChat Save: Detected rate_limits field: ' . $name);
227 + // Always return success even if WordPress says nothing changed
228 + // (which happens when the value is the same as before)
229 + wp_send_json_success(['message' => esc_html__('Setting saved', 'mxchat')]);
230 + }
651 231
652 - // Extract role ID and setting from the name
653 - preg_match('/\[rate_limits\]\[(.*?)\]\[(.*?)\]/', $name, $matches);
654 - //error_log('MXChat Save: Regex matches: ' . print_r($matches, true));
655 232
656 - if (isset($matches[1]) && isset($matches[2])) {
657 - $role_id = $matches[1];
658 - $setting_key = $matches[2]; // limit, timeframe, message, or limit_custom
659 -
660 - //error_log('MXChat Save: Role ID = ' . $role_id . ', Setting Key = ' . $setting_key);
661 -
662 - // Initialize rate_limits if it doesn't exist
663 - if (!isset($options['rate_limits'])) {
664 - // //error_log('MXChat Save: Initializing rate_limits array');
665 - $options['rate_limits'] = [];
666 - }
667 -
668 - // Initialize role settings if it doesn't exist
669 - if (!isset($options['rate_limits'][$role_id])) {
670 - //error_log('MXChat Save: Initializing rate_limits for role: ' . $role_id);
671 - $options['rate_limits'][$role_id] = [
672 - 'limit' => ($role_id === 'logged_out') ? '10' : '100',
673 - 'timeframe' => 'daily',
674 - 'message' => 'Rate limit exceeded. Please try again later.'
675 - ];
676 - }
677 -
678 - if ($setting_key === 'limit') {
679 - if ($value === '__custom__') {
680 - // Pull the integer from limit_custom that may have arrived (or will arrive).
681 - $custom = isset($options['rate_limits'][$role_id]['limit_custom']) ? (string) $options['rate_limits'][$role_id]['limit_custom'] : '';
682 - if ($custom !== '' && ctype_digit($custom) && (int) $custom >= 1) {
683 - $options['rate_limits'][$role_id]['limit'] = $custom;
684 - }
685 - } else {
686 - $options['rate_limits'][$role_id]['limit'] = $value;
687 - }
688 - } elseif ($setting_key === 'limit_custom') {
689 - $clean = preg_replace('/[^0-9]/', '', (string) $value);
690 - $options['rate_limits'][$role_id]['limit_custom'] = $clean;
691 - // Mirror a valid custom value into limit UNCONDITIONALLY — same reasoning
692 - // as the global branch above (plan-74eb86). The per-role custom input is
693 - // only editable in custom mode and autosave is one-field-per-change, so
694 - // this never clobbers a preset; it fixes the first-time-save revert.
695 - if ($clean !== '' && (int) $clean >= 1) {
696 - $options['rate_limits'][$role_id]['limit'] = $clean;
697 - }
698 - } else {
699 - // Update the specific setting (timeframe, message)
700 - $options['rate_limits'][$role_id][$setting_key] = $value;
701 - }
702 - //error_log('MXChat Save: Updated rate_limits[' . $role_id . '][' . $setting_key . '] = ' . $value);
703 - } else {
704 - //error_log('MXChat Save: Failed to parse rate_limits pattern: ' . $name);
705 - }
706 - }
707 - // Then check for role rate limits (old format)
708 - else if (strpos($name, 'mxchat_options[role_rate_limits]') !== false) {
709 - //error_log('MXChat Save: Processing role_rate_limits field: ' . $name);
710 - // Extract role ID from the name
711 - preg_match('/\[role_rate_limits\]\[(.*?)\]/', $name, $matches);
712 - //error_log('MXChat Save: Regex matches: ' . print_r($matches, true));
713 -
714 - if (isset($matches[1])) {
715 - $role_id = $matches[1];
716 - // Initialize role_rate_limits if it doesn't exist
717 - if (!isset($options['role_rate_limits'])) {
718 - //error_log('MXChat Save: Initializing role_rate_limits array');
719 - $options['role_rate_limits'] = [];
720 - }
721 - // Update the specific role's rate limit
722 - $options['role_rate_limits'][$role_id] = sanitize_text_field($value);
723 - //error_log('MXChat Save: Updated role_rate_limits[' . $role_id . '] = ' . $value);
724 - } else {
725 - //error_log('MXChat Save: Failed to parse role_rate_limits pattern: ' . $name);
726 - }
727 - }
728 - // Handle toggles - check both extracted field_name and original name for toggle detection
729 - else if (strpos($field_name, 'toggle') !== false || in_array($field_name, [
730 - 'chat_persistence_toggle',
731 - 'privacy_toggle',
732 - 'complianz_toggle',
733 - 'chat_toolbar_toggle',
734 - 'show_pdf_upload_button',
735 - 'show_word_upload_button',
736 - 'enable_streaming_toggle',
737 - 'contextual_awareness_toggle',
738 - 'citation_links_toggle',
739 - 'enable_email_block',
740 - 'enable_name_field',
741 - 'custom_provider_for_embeddings',
742 - 'custom_provider_for_images',
743 - 'print_button_enabled',
744 - 'reset_chat_enabled'
745 - ])) {
746 - //error_log('MXChat Save: Processing toggle: ' . $field_name);
747 - $options[$field_name] = ($value === 'on') ? 'on' : 'off';
748 - } else {
749 - //error_log('MXChat Save: Processing standard field: ' . $field_name);
750 - // Store all other values directly using the extracted field name
751 - $options[$field_name] = $value;
752 - }
753 - break;
754 - }
755 -
756 - // Save all updates to the options array
757 - $updated = update_option('mxchat_options', $options);
758 - //error_log('MXChat Save: Update result: ' . ($updated ? 'success' : 'unchanged') . ' for field: ' . $name);
759 - //error_log('MXChat Save: Updated options array: ' . print_r($options, true));
760 -
761 - // Log the save action if debug mode is enabled
762 - if ( class_exists( 'MxChat_Admin' ) ) {
763 - MxChat_Admin::mxchat_log_debug(
764 - 'settings_save',
765 - sprintf( 'Field saved: %s', $field_name ),
766 - array(
767 - 'field' => $field_name,
768 - 'updated' => $updated,
769 - )
770 - );
771 - }
772 -
773 - // Always return success even if WordPress says nothing changed
774 - // (which happens when the value is the same as before)
775 - wp_send_json_success(['message' => esc_html__('Setting saved', 'mxchat')]);
776 -}
777 -
778 -/**
779 - * Save the selected bot for knowledge base operations
780 - */
781 -public function mxchat_save_selected_bot() {
782 - // Check nonce
783 - if (!wp_verify_nonce($_POST['nonce'] ?? '', 'mxchat_save_setting_nonce')) {
784 - wp_send_json_error('Invalid nonce');
785 - }
786 -
787 - // Check permissions
788 - if (!current_user_can('manage_options')) {
789 - wp_send_json_error('Unauthorized');
790 - }
791 -
792 - $bot_id = isset($_POST['bot_id']) ? sanitize_key($_POST['bot_id']) : 'default';
793 -
794 - // Save as user meta for the current user
795 - $user_id = get_current_user_id();
796 - update_user_meta($user_id, 'mxchat_selected_knowledge_bot', $bot_id);
797 -
798 - // Also save as an option for site-wide default
799 - update_option('mxchat_current_knowledge_bot', $bot_id);
800 -
801 - // No cache clearing needed since we removed caching
802 -
803 - wp_send_json_success(array(
804 - 'message' => 'Bot selection saved',
805 - 'bot_id' => $bot_id
806 - ));
807 -}
808 -
809 233 /**
810 234 * Handles AJAX request for saving chat settings
811 235 */
812 236 public function mxchat_save_prompts_setting_callback() {
@@ -974,123 +398,8 @@
974 398 wp_send_json_error(['message' => esc_html__('No changes detected', 'mxchat')]);
975 399 }
976 400 }
977 401
978 - // Handle chunking settings - use direct DB access to bypass WordPress filters
979 - if (strpos($name, 'mxchat_chunk') === 0 || $name === 'mxchat_chunking_enabled') {
980 - global $wpdb;
981 -
982 - // Get current options directly from database
983 - $current_options_raw = $wpdb->get_var(
984 - $wpdb->prepare(
985 - "SELECT option_value FROM {$wpdb->options} WHERE option_name = %s",
986 - 'mxchat_options'
987 - )
988 - );
989 -
990 - $options = $current_options_raw !== null ? maybe_unserialize($current_options_raw) : array();
991 - if (!is_array($options)) {
992 - $options = array();
993 - }
994 -
995 - // Update the specific chunking field
996 - if ($name === 'mxchat_chunking_enabled') {
997 - $options['chunking_enabled'] = in_array($value, array('on', '1', 'true', true), true);
998 - } elseif ($name === 'mxchat_chunk_size') {
999 - $options['chunk_size'] = max(1000, min(10000, intval($value)));
1000 - }
1001 -
1002 - // Save directly to database
1003 - $serialized_options = maybe_serialize($options);
1004 -
1005 - $option_exists = $wpdb->get_var(
1006 - $wpdb->prepare(
1007 - "SELECT COUNT(*) FROM {$wpdb->options} WHERE option_name = %s",
1008 - 'mxchat_options'
1009 - )
1010 - );
1011 -
1012 - if ($option_exists > 0) {
1013 - $save_result = $wpdb->update(
1014 - $wpdb->options,
1015 - array('option_value' => $serialized_options),
1016 - array('option_name' => 'mxchat_options'),
1017 - array('%s'),
1018 - array('%s')
1019 - );
1020 - } else {
1021 - $save_result = $wpdb->insert(
1022 - $wpdb->options,
1023 - array(
1024 - 'option_name' => 'mxchat_options',
1025 - 'option_value' => $serialized_options,
1026 - 'autoload' => 'yes'
1027 - ),
1028 - array('%s', '%s', '%s')
1029 - );
1030 - }
1031 -
1032 - // Clear object cache for this option
1033 - wp_cache_delete('mxchat_options', 'options');
1034 -
1035 - if ($save_result !== false) {
1036 - wp_send_json_success(['message' => esc_html__('Chunking setting saved', 'mxchat')]);
1037 - } else {
1038 - wp_send_json_error(['message' => esc_html__('Failed to save chunking setting', 'mxchat')]);
1039 - }
1040 - return;
1041 - }
1042 -
1043 - // Handle ACF field exclusion toggles
1044 - if (strpos($name, 'mxchat_acf_field_') === 0) {
1045 - // Extract field name from the input name (e.g., mxchat_acf_field_private_notes -> private_notes)
1046 - $field_name = str_replace('mxchat_acf_field_', '', $name);
1047 - $is_enabled = ($value === 'on' || $value === '1');
1048 -
1049 - // Get current excluded fields
1050 - $excluded_fields = get_option('mxchat_acf_excluded_fields', array());
1051 - if (!is_array($excluded_fields)) {
1052 - $excluded_fields = array();
1053 - }
1054 -
1055 - if ($is_enabled) {
1056 - // Remove from exclusion list (field should be included)
1057 - $excluded_fields = array_values(array_diff($excluded_fields, array($field_name)));
1058 - } else {
1059 - // Add to exclusion list (field should be excluded)
1060 - if (!in_array($field_name, $excluded_fields)) {
1061 - $excluded_fields[] = $field_name;
1062 - }
1063 - }
1064 -
1065 - $updated = update_option('mxchat_acf_excluded_fields', $excluded_fields);
1066 -
1067 - if ($updated || true) { // Always report success since the state may already be correct
1068 - wp_send_json_success([
1069 - 'message' => $is_enabled
1070 - ? sprintf(esc_html__('Field "%s" will be included in imports', 'mxchat'), $field_name)
1071 - : sprintf(esc_html__('Field "%s" will be excluded from imports', 'mxchat'), $field_name)
1072 - ]);
1073 - } else {
1074 - wp_send_json_error(['message' => esc_html__('Failed to save ACF field setting', 'mxchat')]);
1075 - }
1076 - return;
1077 - }
1078 -
1079 - // Handle custom post meta whitelist
1080 - if ($name === 'mxchat_custom_meta_whitelist') {
1081 - $updated = update_option('mxchat_custom_meta_whitelist', sanitize_textarea_field($value));
1082 -
1083 - if ($updated || true) { // Always report success since the state may already be correct
1084 - wp_send_json_success([
1085 - 'message' => esc_html__('Custom meta whitelist saved', 'mxchat')
1086 - ]);
1087 - } else {
1088 - wp_send_json_error(['message' => esc_html__('Failed to save custom meta whitelist', 'mxchat')]);
1089 - }
1090 - return;
1091 - }
1092 -
1093 402 // Handle other prompts options
1094 403 $options = get_option('mxchat_prompts_options', []);
1095 404 $options[$name] = $value;
1096 405 $updated = update_option('mxchat_prompts_options', $options);
@@ -1156,217 +465,517 @@
1156 465 }
1157 466
1158 467
1159 468 // ========================================
1160 - // LICENSE AJAX HANDLERS
469 + // CONTENT MANAGEMENT AJAX HANDLERS
1161 470 // ========================================
1162 471
1163 -/**
1164 - * Validates and activates chat license via AJAX
1165 - */
1166 -public function mxchat_handle_activate_license() {
1167 - // Check nonce
1168 - if (!check_ajax_referer('mxchat_activate_license_nonce', 'security', false)) {
1169 - wp_send_json_error(esc_html__('Invalid security token', 'mxchat'));
1170 - return;
472 + /**
473 + * Handles AJAX request, checks nonce, verifies user permissions
474 + */
475 +public function ajax_mxchat_get_content_list() {
476 + // Verify the nonce
477 + check_ajax_referer('mxchat_content_selector_nonce', 'nonce');
478 +
479 + if (!current_user_can('manage_options')) {
480 + wp_send_json_error(__('Unauthorized access', 'mxchat'));
481 + }
482 +
483 + $page = isset($_GET['page']) ? absint($_GET['page']) : 1;
484 + $per_page = isset($_GET['per_page']) ? absint($_GET['per_page']) : 20;
485 + $search = isset($_GET['search']) ? sanitize_text_field($_GET['search']) : '';
486 + $post_type = isset($_GET['post_type']) ? sanitize_text_field($_GET['post_type']) : 'all';
487 + $post_status = isset($_GET['post_status']) ? sanitize_text_field($_GET['post_status']) : 'publish';
488 + $processed_filter = isset($_GET['processed_filter']) ? sanitize_text_field($_GET['processed_filter']) : 'all';
489 +
490 + // Build query args
491 + $args = array(
492 + 'posts_per_page' => $per_page,
493 + 'paged' => $page,
494 + 'post_status' => $post_status !== 'all' ? $post_status : array('publish', 'draft', 'pending'),
495 + 'orderby' => 'date',
496 + 'order' => 'DESC',
497 + );
498 +
499 + // Handle post types
500 + if ($post_type !== 'all') {
501 + $args['post_type'] = $post_type;
502 + } else {
503 + // Default to post and page if we can't get post types
504 + $args['post_type'] = array('post', 'page');
505 +
506 + // Try to get public post types
507 + $public_types = $this->get_public_post_types();
508 + if (is_array($public_types) && !empty($public_types)) {
509 + $args['post_type'] = array_keys($public_types);
510 + }
511 + }
512 +
513 + if (!empty($search)) {
514 + $args['s'] = $search;
515 + }
516 +
517 + // ================================
518 + // UPDATED: Get already vectorized content from BOTH WordPress DB AND Pinecone
519 + // ================================
520 +
521 + // FIRST: Get from WordPress DB (your original working code)
522 + global $wpdb;
523 + $table_name = $wpdb->prefix . 'mxchat_system_prompt_content';
524 + $processed_items = $wpdb->get_results("SELECT id, source_url, timestamp FROM {$table_name}");
525 +
526 + // Create a lookup array of processed posts with timestamps
527 + $processed_data = array();
528 +
529 + if (!empty($processed_items)) {
530 + foreach ($processed_items as $item) {
531 + $post_id = url_to_postid($item->source_url);
532 + if ($post_id) {
533 + $processed_data[$post_id] = array(
534 + 'db_id' => $item->id,
535 + 'timestamp' => $item->timestamp,
536 + 'url' => $item->source_url,
537 + 'source' => 'wordpress'
538 + );
539 + }
540 + }
541 + }
542 +
543 + // SECOND: ALSO check Pinecone if it's enabled
544 + $pinecone_options = get_option('mxchat_pinecone_addon_options', array());
545 + $use_pinecone = ($pinecone_options['mxchat_use_pinecone'] ?? '0') === '1';
546 +
547 + if ($use_pinecone && !empty($pinecone_options['mxchat_pinecone_api_key'])) {
548 + // UPDATED: Use lazy-loaded Pinecone manager
549 + $pinecone_manager = $this->get_pinecone_manager();
550 + if ($pinecone_manager) {
551 + $pinecone_data = $pinecone_manager->get_pinecone_processed_content($pinecone_options);
552 +
553 + // Merge Pinecone data with WordPress data
554 + foreach ($pinecone_data as $post_id => $pinecone_info) {
555 + // If not already found in WordPress DB, add from Pinecone
556 + if (!isset($processed_data[$post_id])) {
557 + $processed_data[$post_id] = $pinecone_info;
558 + }
559 + }
560 + }
561 + }
562 +
563 + // ================================
564 +
565 + // Get processed IDs as a simple array for in_array checks
566 + $processed_ids = array_keys($processed_data);
567 +
568 + // Handle processed/unprocessed filter
569 + if ($processed_filter === 'processed' && !empty($processed_ids)) {
570 + $args['post__in'] = $processed_ids;
571 + } elseif ($processed_filter === 'unprocessed' && !empty($processed_ids)) {
572 + $args['post__not_in'] = $processed_ids;
573 + }
574 +
575 + // Run the query
576 + $query = new WP_Query($args);
577 + $content_items = array();
578 +
579 + if ($query->have_posts()) {
580 + while ($query->have_posts()) {
581 + $query->the_post();
582 + $id = get_the_ID();
583 + $post_date = get_the_date();
584 + $excerpt = wp_trim_words(get_the_excerpt(), 20, '...');
585 + $word_count = str_word_count(strip_tags(get_the_content()));
586 +
587 + $is_processed = in_array($id, $processed_ids);
588 + $processed_date = '';
589 + $db_record_id = 0;
590 + $data_source = 'none';
591 +
592 + if ($is_processed && isset($processed_data[$id])) {
593 + $item_data = $processed_data[$id];
594 + $data_source = $item_data['source'];
595 +
596 + if ($data_source === 'wordpress' && isset($item_data['timestamp'])) {
597 + // WordPress DB format
598 + $timestamp = strtotime($item_data['timestamp']);
599 + $processed_date = human_time_diff($timestamp, current_time('timestamp')) . ' ago';
600 + $db_record_id = $item_data['db_id'];
601 + } elseif ($data_source === 'pinecone') {
602 + // Pinecone format
603 + $processed_date = $item_data['processed_date'];
604 + $db_record_id = $item_data['db_id'];
605 + }
606 + }
607 +
608 + $content_items[] = array(
609 + 'id' => $id,
610 + 'title' => get_the_title(),
611 + 'permalink' => get_permalink(),
612 + 'date' => $post_date,
613 + 'type' => get_post_type(),
614 + 'status' => get_post_status(),
615 + 'excerpt' => $excerpt,
616 + 'word_count' => $word_count,
617 + 'already_processed' => $is_processed,
618 + 'processed_date' => $processed_date,
619 + 'db_record_id' => $db_record_id,
620 + 'data_source' => $data_source
621 + );
622 + }
623 + wp_reset_postdata();
624 + }
625 +
626 + $response = array(
627 + 'items' => $content_items,
628 + 'total' => $query->found_posts,
629 + 'total_pages' => $query->max_num_pages,
630 + 'current_page' => $page,
631 + 'processed_count' => count($processed_ids)
632 + );
633 +
634 + wp_send_json_success($response);
635 + exit;
1171 636 }
1172 -
1173 - // Verify user capabilities
1174 - if (!current_user_can('manage_options')) {
1175 - wp_send_json_error(esc_html__('Unauthorized access', 'mxchat'));
1176 - return;
637 +
638 + private function get_public_post_types() {
639 + $post_types = get_post_types(array('public' => true), 'objects');
640 + $post_type_options = array();
641 +
642 + foreach ($post_types as $post_type) {
643 + $post_type_options[$post_type->name] = $post_type->label;
644 + }
645 +
646 + return $post_type_options;
647 + }
648 +
649 +
650 + /**
651 + * Validates AJAX request nonce for chat content processing
652 + */
653 +public function ajax_mxchat_process_selected_content() {
654 + // Basic request validation
655 + if (!check_ajax_referer('mxchat_content_selector_nonce', 'nonce', false)) {
656 + wp_send_json_error('Invalid nonce');
657 + exit;
658 + }
659 +
660 + if (!current_user_can('manage_options')) {
661 + wp_send_json_error('Unauthorized access');
662 + exit;
663 + }
664 +
665 + // Get post IDs - safely parse the array
666 + $post_ids = array();
667 + if (isset($_POST['post_ids']) && is_array($_POST['post_ids'])) {
668 + foreach ($_POST['post_ids'] as $id) {
669 + $post_ids[] = absint($id);
670 + }
671 + }
672 +
673 + if (empty($post_ids)) {
674 + wp_send_json_error('No content selected');
675 + exit;
676 + }
677 +
678 + // Process only ONE post at a time to avoid request size issues
679 + $post_id = reset($post_ids);
680 + $post = get_post($post_id);
681 +
682 + if (!$post) {
683 + wp_send_json_error('Post not found');
684 + exit;
685 + }
686 +
687 + // Get minimal content
688 + $content = $post->post_title . "\n\n" . wp_strip_all_tags($post->post_content);
689 + $content = substr($content, 0, 10000); // Limit content size
690 +
691 + // Get API key with proper model detection
692 + $options = get_option('mxchat_options');
693 + $selected_model = $options['embedding_model'] ?? 'text-embedding-ada-002';
694 +
695 + if (strpos($selected_model, 'voyage') === 0) {
696 + $api_key = $options['voyage_api_key'] ?? '';
697 + $provider_name = 'Voyage AI';
698 + } elseif (strpos($selected_model, 'gemini-embedding') === 0) {
699 + $api_key = $options['gemini_api_key'] ?? '';
700 + $provider_name = 'Google Gemini';
701 + } else {
702 + $api_key = $options['api_key'] ?? '';
703 + $provider_name = 'OpenAI';
704 + }
705 +
706 + if (empty($api_key)) {
707 + wp_send_json_error($provider_name . ' API key not configured');
708 + exit;
709 + }
710 +
711 + $source_url = get_permalink($post_id);
712 + $vector_id = md5($source_url); // Vector ID for Pinecone
713 +
714 + // ================================
715 + // UPDATED: Check for existing content in BOTH sources for backwards compatibility
716 + // ================================
717 +
718 + $is_update = false;
719 +
720 + // Check WordPress DB first (backwards compatibility)
721 + global $wpdb;
722 + $table_name = $wpdb->prefix . 'mxchat_system_prompt_content';
723 + $existing_record = $wpdb->get_row($wpdb->prepare(
724 + "SELECT id FROM $table_name WHERE source_url = %s",
725 + $source_url
726 + ));
727 +
728 + if ($existing_record) {
729 + $is_update = true;
730 + } else {
731 + // Also check Pinecone if enabled
732 + $pinecone_options = get_option('mxchat_pinecone_addon_options', array());
733 + $use_pinecone = ($pinecone_options['mxchat_use_pinecone'] ?? '0') === '1';
734 +
735 + if ($use_pinecone && !empty($pinecone_options['mxchat_pinecone_api_key'])) {
736 + // UPDATED: Use lazy-loaded Pinecone manager
737 + $pinecone_manager = $this->get_pinecone_manager();
738 + if ($pinecone_manager) {
739 + $pinecone_data = $pinecone_manager->get_pinecone_processed_content($pinecone_options);
740 + if (isset($pinecone_data[$post_id])) {
741 + $is_update = true;
742 + }
743 + }
744 + }
745 + }
746 +
747 + // Use the centralized utility function for storage
748 + $result = MxChat_Utils::submit_content_to_db(
749 + $content,
750 + $source_url,
751 + $api_key,
752 + $vector_id
753 + );
754 +
755 + if (is_wp_error($result)) {
756 + wp_send_json_error('Storage failed: ' . $result->get_error_message());
757 + exit;
758 + }
759 +
760 + // ================================
761 + // NEW: Update caches immediately after successful storage
762 + // ================================
763 +
764 + // Check if Pinecone is enabled and update caches
765 + $pinecone_options = get_option('mxchat_pinecone_addon_options', array());
766 + $use_pinecone = ($pinecone_options['mxchat_use_pinecone'] ?? '0') === '1';
767 +
768 + if ($use_pinecone && !empty($pinecone_options['mxchat_pinecone_api_key'])) {
769 + // UPDATED: Use lazy-loaded Pinecone manager for vector cache update
770 + $pinecone_manager = $this->get_pinecone_manager();
771 + if ($pinecone_manager) {
772 + $pinecone_manager->update_pinecone_vector_cache($vector_id);
773 + }
774 +
775 + // Update local processed content cache for immediate UI feedback
776 + $pinecone_cache = get_option('mxchat_pinecone_processed_cache', array());
777 + $pinecone_cache[$post_id] = array(
778 + 'db_id' => $vector_id,
779 + 'processed_date' => 'Just now',
780 + 'url' => $source_url,
781 + 'source' => 'pinecone',
782 + 'timestamp' => current_time('timestamp')
783 + );
784 + update_option('mxchat_pinecone_processed_cache', $pinecone_cache);
785 +
786 + // Also update the general processed content cache
787 + $processed_cache = get_option('mxchat_processed_content_cache', array());
788 + $processed_cache[$post_id] = array(
789 + 'db_id' => $vector_id,
790 + 'timestamp' => current_time('timestamp'),
791 + 'url' => $source_url,
792 + 'source' => 'pinecone'
793 + );
794 + update_option('mxchat_processed_content_cache', $processed_cache);
795 + }
796 +
797 + $operation_type = $is_update ? 'update' : 'new';
798 +
799 + // Success response with minimal data
800 + wp_send_json_success(array(
801 + 'message' => $operation_type === 'update' ? 'Content updated successfully' : 'Content processed successfully',
802 + 'post_id' => $post_id,
803 + 'title' => $post->post_title,
804 + 'operation_type' => $operation_type,
805 + 'vector_id' => $vector_id, // Include vector ID for debugging
806 + 'cache_updated' => $use_pinecone // Indicate if cache was updated
807 + ));
808 + exit;
1177 809 }
1178 -
1179 - $license_key = isset($_POST['mxchat_activation_key']) ? sanitize_text_field($_POST['mxchat_activation_key']) : '';
1180 - $customer_email = isset($_POST['mxchat_pro_email']) ? sanitize_email($_POST['mxchat_pro_email']) : '';
1181 -
1182 - if (empty($license_key) || empty($customer_email)) {
1183 - wp_send_json_error(esc_html__('Email or License Key is missing', 'mxchat'));
1184 - return;
1185 - }
1186 -
1187 - $product_id = 'MxChatPRO';
1188 - $domain = parse_url(home_url(), PHP_URL_HOST); // Get the current domain
1189 -
1190 - // Call WooCommerce Software API for activation (not just validation)
1191 - $response = wp_remote_get(
1192 - add_query_arg(
810 +
811 +
812 + /**
813 + * Handles AJAX request to save chat prompt
814 + */
815 + public function mxchat_save_inline_prompt() {
816 + // Check for nonce security
817 + check_ajax_referer('mxchat_save_inline_nonce');
818 +
819 + // Verify permissions
820 + if (!current_user_can('manage_options')) {
821 + wp_send_json_error(esc_html__('Permission denied.', 'mxchat'));
822 + return;
823 + }
824 +
825 + global $wpdb;
826 + $table_name = $wpdb->prefix . 'mxchat_system_prompt_content';
827 +
828 + // Validate and sanitize input data
829 + $prompt_id = isset($_POST['id']) ? absint($_POST['id']) : 0;
830 + $article_content = isset($_POST['article_content']) ? sanitize_textarea_field($_POST['article_content']) : '';
831 + $article_url = isset($_POST['article_url']) ? esc_url_raw($_POST['article_url']) : '';
832 +
833 + if ($prompt_id > 0 && !empty($article_content)) {
834 + // Re-generate the embedding vector for the updated content
835 + $embedding_vector = $this->mxchat_generate_embedding($article_content);
836 +
837 + if (is_array($embedding_vector)) {
838 + // Serialize the embedding vector before storing it
839 + $embedding_vector_serialized = serialize($embedding_vector);
840 +
841 + // Update the prompt in the database
842 + $updated = $wpdb->update(
843 + $table_name,
844 + array(
845 + 'article_content' => $article_content,
846 + 'embedding_vector' => $embedding_vector_serialized,
847 + 'source_url' => $article_url,
848 + ),
849 + array('id' => $prompt_id),
850 + array('%s', '%s', '%s'),
851 + array('%d')
852 + );
853 +
854 + if ($updated !== false) {
855 + wp_send_json_success();
856 + } else {
857 + wp_send_json_error(esc_html__('Database update failed.', 'mxchat'));
858 + }
859 + } else {
860 + wp_send_json_error(esc_html__('Embedding generation failed.', 'mxchat'));
861 + }
862 + } else {
863 + wp_send_json_error(esc_html__('Invalid data.', 'mxchat'));
864 + }
865 + }
866 +
867 +
868 + // ========================================
869 + // STATUS UPDATES AJAX HANDLERS
870 + // ========================================
871 +
872 +
873 + // ========================================
874 + // LICENSE AJAX HANDLERS
875 + // ========================================
876 +
877 + /**
878 + * Validates and activates chat license via AJAX
879 + */
880 + public function mxchat_handle_activate_license() {
881 + // Check nonce
882 + if (!check_ajax_referer('mxchat_activate_license_nonce', 'security', false)) {
883 + wp_send_json_error(esc_html__('Invalid security token', 'mxchat'));
884 + return;
885 + }
886 +
887 + // Verify user capabilities
888 + if (!current_user_can('manage_options')) {
889 + wp_send_json_error(esc_html__('Unauthorized access', 'mxchat'));
890 + return;
891 + }
892 +
893 + $license_key = isset($_POST['mxchat_activation_key']) ? sanitize_text_field($_POST['mxchat_activation_key']) : '';
894 + $customer_email = isset($_POST['mxchat_pro_email']) ? sanitize_email($_POST['mxchat_pro_email']) : '';
895 +
896 + if (empty($license_key) || empty($customer_email)) {
897 + wp_send_json_error(esc_html__('Email or License Key is missing', 'mxchat'));
898 + return;
899 + }
900 +
901 + $product_id = 'MxChatPRO';
902 +
903 + // **CHANGED TO HTTPS**
904 + $response = wp_remote_get(
905 + add_query_arg(
906 + array(
907 + 'wc-api' => 'software-api',
908 + 'request' => 'activation',
909 + 'email' => $customer_email,
910 + 'license_key' => $license_key,
911 + 'product_id' => $product_id
912 + ),
913 + 'https://mxchat.ai/' // **CHANGED FROM HTTP TO HTTPS**
914 + ),
1193 915 array(
1194 - 'wc-api' => 'software-api',
1195 - 'request' => 'activation',
1196 - 'email' => $customer_email,
1197 - 'license_key' => $license_key,
1198 - 'product_id' => $product_id,
1199 - 'instance' => $domain, // THIS IS KEY - include the domain as instance
1200 - 'platform' => 'wordpress' // Optional but good to include
1201 - ),
1202 - 'https://mxchat.ai/'
1203 - ),
1204 - array(
1205 - 'timeout' => 60,
1206 - 'sslverify' => true
1207 - )
1208 - );
1209 -
1210 - if (is_wp_error($response)) {
1211 - $error_message = $response->get_error_message();
1212 - //error_log('MxChat License Activation Error: ' . $error_message);
1213 - wp_send_json_error(esc_html__('Activation failed due to a server error: ', 'mxchat') . $error_message);
1214 - return;
1215 - }
1216 -
1217 - $response_code = wp_remote_retrieve_response_code($response);
1218 - $body = wp_remote_retrieve_body($response);
1219 -
1220 - // Log response for debugging
1221 - //error_log('MxChat License Response Code: ' . $response_code);
1222 - //error_log('MxChat License Response Body: ' . $body);
1223 -
1224 - if ($response_code !== 200) {
1225 - wp_send_json_error(esc_html__('Server returned error code: ', 'mxchat') . $response_code);
1226 - return;
1227 - }
1228 -
1229 - $data = json_decode($body);
1230 -
1231 - if ($data && isset($data->activated) && $data->activated) {
1232 - // Success - save local options
1233 - update_option('mxchat_license_status', 'active');
1234 - update_option('mxchat_pro_email', $customer_email);
1235 - update_option('mxchat_activation_key', $license_key);
1236 - delete_option('mxchat_license_error');
916 + 'timeout' => 60, // 60 seconds timeout
917 + 'sslverify' => true // **CHANGED TO TRUE FOR HTTPS**
918 + )
919 + );
1237 920
1238 - // Also track on your website (this is your existing domain tracking)
1239 - $this->track_domain_on_website($license_key, $customer_email, $domain);
921 + if (is_wp_error($response)) {
922 + $error_message = $response->get_error_message();
923 + //error_log('MxChat License Activation Error: ' . $error_message);
924 + wp_send_json_error(esc_html__('Activation failed due to a server error: ', 'mxchat') . $error_message);
925 + return;
926 + }
1240 927
1241 - wp_send_json_success(array('message' => esc_html__('License activated successfully', 'mxchat')));
1242 - } else {
1243 - $error_message = isset($data->error) ? $data->error : esc_html__('Activation failed', 'mxchat');
1244 - update_option('mxchat_license_status', 'inactive');
1245 - update_option('mxchat_license_error', $error_message);
928 + $response_code = wp_remote_retrieve_response_code($response);
929 + $body = wp_remote_retrieve_body($response);
1246 930
1247 - //error_log('MxChat Activation failed: ' . $error_message);
1248 - wp_send_json_error($error_message);
931 + // Log response for debugging
932 + //error_log('MxChat License Response Code: ' . $response_code);
933 + //error_log('MxChat License Response Body: ' . $body);
934 +
935 + if ($response_code !== 200) {
936 + wp_send_json_error(esc_html__('Server returned error code: ', 'mxchat') . $response_code);
937 + return;
938 + }
939 +
940 + $data = json_decode($body);
941 +
942 + if ($data && isset($data->activated) && $data->activated) {
943 + update_option('mxchat_license_status', 'active');
944 + update_option('mxchat_pro_email', $customer_email);
945 + update_option('mxchat_activation_key', $license_key);
946 + delete_option('mxchat_license_error'); // Clear any previous errors
947 + wp_send_json_success(array('message' => esc_html__('License activated successfully', 'mxchat')));
948 + } else {
949 + $error_message = isset($data->error) ? $data->error : esc_html__('Activation failed', 'mxchat');
950 + update_option('mxchat_license_status', 'inactive');
951 + update_option('mxchat_license_error', $error_message);
952 + wp_send_json_error($error_message);
953 + }
1249 954 }
1250 -}
1251 955
1252 -/**
1253 - * Track domain on your website (separate from WooCommerce activation)
1254 - */
1255 -private function track_domain_on_website($license_key, $email, $domain) {
1256 - // This calls your website's tracking API
1257 - wp_remote_post('https://mxchat.ai/mxchat-api/activate-license', array(
1258 - 'body' => array(
1259 - 'mxchat_pro_email' => $email,
1260 - 'mxchat_activation_key' => $license_key,
1261 - 'domain' => $domain
1262 - ),
1263 - 'timeout' => 10,
1264 - 'sslverify' => true
1265 - ));
1266 -}
1267 956
1268 957 /**
1269 958 * Validates license via AJAX with email and key
1270 959 */
1271 - public function mxchat_check_license_status() {
1272 - // Verify nonce
1273 - if (!check_ajax_referer('mxchat_activate_license_nonce', 'security', false)) {
1274 - wp_send_json_error('Security check failed');
1275 - return;
1276 - }
1277 -
1278 - // Add isset checks for safety
1279 - $email = isset($_POST['email']) ? sanitize_email($_POST['email']) : '';
1280 - $key = isset($_POST['key']) ? sanitize_text_field($_POST['key']) : '';
1281 -
1282 - // Check if this license is actually active in your system
1283 - $is_active = (get_option('mxchat_license_status') === 'active' &&
960 + public function mxchat_check_license_status() {
961 + // Verify nonce
962 + check_ajax_referer($this->get_nonce_action(), 'security');
963 +
964 + $email = sanitize_email($_POST['email']);
965 + $key = sanitize_text_field($_POST['key']);
966 +
967 + // Check if this license is actually active in your system
968 + $is_active = (get_option('mxchat_license_status') === 'active' &&
1284 969 get_option('mxchat_pro_email') === $email &&
1285 970 get_option('mxchat_activation_key') === $key);
1286 -
1287 - wp_send_json(array(
1288 - 'is_active' => $is_active
1289 - ));
1290 - }
1291 -
1292 -/**
1293 - * Handle license deactivation - Complete version for plugin
1294 - */
1295 -function mxchat_deactivate_license() {
1296 - // Add debugging
1297 - //error_log('MxChat deactivate function called');
1298 -
1299 - // Check nonce
1300 - if (!check_ajax_referer('mxchat_activate_license_nonce', 'security', false)) {
1301 - //error_log('MxChat deactivate: Nonce check failed');
1302 - wp_send_json_error('Security check failed.');
1303 - return;
1304 - }
1305 -
1306 - //error_log('MxChat deactivate: Nonce check passed');
1307 -
1308 - $license_key = get_option('mxchat_activation_key');
1309 - $email = get_option('mxchat_pro_email');
1310 - $domain = parse_url(home_url(), PHP_URL_HOST);
1311 -
1312 - //error_log('MxChat deactivate: License: ' . $license_key . ', Email: ' . $email . ', Domain: ' . $domain);
1313 -
1314 - if (empty($license_key) || empty($email)) {
1315 - //error_log('MxChat deactivate: No active license found');
1316 - wp_send_json_error('No active license found.');
1317 - return;
1318 - }
1319 -
1320 - // Clear local license data first
1321 - delete_option('mxchat_license_status');
1322 - delete_option('mxchat_pro_email');
1323 - delete_option('mxchat_activation_key');
1324 - delete_option('mxchat_license_error');
1325 -
1326 - //error_log('MxChat deactivate: Local data cleared');
1327 -
1328 - // Notify your website's API to properly deactivate
1329 - $response = wp_remote_post('https://mxchat.ai/mxchat-api/deactivate-license', array(
1330 - 'body' => array(
1331 - 'license_key' => $license_key,
1332 - 'email' => $email,
1333 - 'domain' => $domain
1334 - ),
1335 - 'timeout' => 15,
1336 - 'sslverify' => true
1337 - ));
1338 -
1339 - if (is_wp_error($response)) {
1340 - //error_log('MxChat deactivate: Server error - ' . $response->get_error_message());
1341 - wp_send_json_success(array(
1342 - 'message' => 'License deactivated locally. Server could not be contacted to free activation slot.',
1343 - 'server_notified' => false
1344 - ));
1345 - return;
1346 - }
1347 -
1348 - $response_body = wp_remote_retrieve_body($response);
1349 - $response_data = json_decode($response_body, true);
1350 -
1351 - //error_log('MxChat deactivate: Server response - ' . $response_body);
1352 -
1353 - if (isset($response_data['success']) && $response_data['success']) {
1354 - //error_log('MxChat deactivate: Success with server notification');
1355 - wp_send_json_success(array(
1356 - 'message' => 'License deactivated successfully. Activation slot has been freed up.',
1357 - 'server_notified' => true
1358 - ));
1359 - } else {
1360 - //error_log('MxChat deactivate: Server responded but deactivation may have failed');
1361 - wp_send_json_success(array(
1362 - 'message' => 'License deactivated locally. Please check your account dashboard to verify the activation was freed.',
1363 - 'server_notified' => false
1364 - ));
1365 - }
1366 -}
1367 971
972 + wp_send_json(array(
973 + 'is_active' => $is_active
974 + ));
975 + }
1368 976
977 +
1369 978 // ========================================
1370 979 // ACTIONS & INTENTS AJAX HANDLERS
1371 980 // ========================================
1372 981
@@ -1471,243 +1080,38 @@
1471 1080
1472 1081 /**
1473 1082 * Returns a specific nonce action string
1474 1083 */
1475 - private function mxchat_get_nonce_action() {
1084 + private function get_nonce_action() {
1476 1085 return 'mxchat_license_nonce';
1477 1086 }
1478 1087
1479 1088 /**
1480 - * Check API key status for all providers
1089 + * Checks if a value has changed from old to new
1481 1090 */
1482 - public function mxchat_check_api_keys() {
1483 - // Check nonce
1484 - if (!wp_verify_nonce($_POST['nonce'] ?? '', 'mxchat_save_setting_nonce')) {
1485 - wp_send_json_error('Invalid nonce');
1486 - }
1091 + private function has_value_changed($old_value, $new_value) {
1092 + // Handle null values
1093 + if ($old_value === null && $new_value === '') {
1094 + return false;
1095 + }
1487 1096
1488 - // Check permissions
1489 - if (!current_user_can('manage_options')) {
1490 - wp_send_json_error('Unauthorized');
1491 - }
1097 + // Handle array values (like additional_popular_questions)
1098 + if (is_array($old_value) && is_array($new_value)) {
1099 + // Convert both to JSON for comparison to handle ordering differences
1100 + return json_encode($old_value) !== json_encode($new_value);
1101 + }
1492 1102
1493 - // Get current options
1494 - $options = get_option('mxchat_options', array());
1103 + // Handle toggle/checkbox values consistently
1104 + if (in_array($old_value, ['on', '1', 1, true]) && in_array($new_value, ['on', '1', 1, true])) {
1105 + return false;
1106 + }
1107 + if (in_array($old_value, ['off', '0', 0, false, '']) && in_array($new_value, ['off', '0', 0, false, ''])) {
1108 + return false;
1109 + }
1495 1110
1496 - // Check which API keys are present
1497 - $api_key_status = array(
1498 - 'openai' => !empty($options['api_key']),
1499 - 'claude' => !empty($options['claude_api_key']),
1500 - 'xai' => !empty($options['xai_api_key']),
1501 - 'deepseek' => !empty($options['deepseek_api_key']),
1502 - 'gemini' => !empty($options['gemini_api_key']),
1503 - 'openrouter' => !empty($options['openrouter_api_key']),
1504 - 'voyage' => !empty($options['voyage_api_key'])
1505 - );
1506 -
1507 - wp_send_json_success($api_key_status);
1508 - }
1509 -
1510 - // ========================================
1511 - // DEBUG & OPTIMIZATION AJAX HANDLERS
1512 - // ========================================
1513 -
1514 - /**
1515 - * Toggle debug mode on/off
1516 - */
1517 - public function mxchat_toggle_debug_mode_callback() {
1518 - // Verify nonce
1519 - if ( ! check_ajax_referer( 'mxchat_save_setting_nonce', '_ajax_nonce', false ) ) {
1520 - wp_send_json_error( array( 'message' => esc_html__( 'Security check failed', 'mxchat' ) ) );
1521 - }
1522 -
1523 - // Check permissions
1524 - if ( ! current_user_can( 'manage_options' ) ) {
1525 - wp_send_json_error( array( 'message' => esc_html__( 'Unauthorized', 'mxchat' ) ) );
1526 - }
1527 -
1528 - $enabled = isset( $_POST['enabled'] ) && $_POST['enabled'] === 'on';
1529 -
1530 - $options = get_option( 'mxchat_options', array() );
1531 -
1532 - if ( $enabled ) {
1533 - $options['debug_mode'] = 'on';
1534 - update_option( 'mxchat_options', $options );
1535 - MxChat_Admin::mxchat_log_debug( 'debug_mode', 'Debug mode enabled' );
1536 - } else {
1537 - // Log before disabling
1538 - MxChat_Admin::mxchat_log_debug( 'debug_mode', 'Debug mode disabled' );
1539 - $options['debug_mode'] = 'off';
1540 - update_option( 'mxchat_options', $options );
1541 - }
1542 -
1543 - wp_send_json_success( array(
1544 - 'message' => $enabled ? esc_html__( 'Debug mode enabled', 'mxchat' ) : esc_html__( 'Debug mode disabled', 'mxchat' ),
1545 - 'enabled' => $enabled,
1546 - ) );
1547 - }
1548 -
1549 - /**
1550 - * Get the debug log entries
1551 - */
1552 - public function mxchat_get_debug_log_callback() {
1553 - // Verify nonce
1554 - if ( ! check_ajax_referer( 'mxchat_save_setting_nonce', '_ajax_nonce', false ) ) {
1555 - wp_send_json_error( array( 'message' => esc_html__( 'Security check failed', 'mxchat' ) ) );
1556 - }
1557 -
1558 - // Check permissions
1559 - if ( ! current_user_can( 'manage_options' ) ) {
1560 - wp_send_json_error( array( 'message' => esc_html__( 'Unauthorized', 'mxchat' ) ) );
1561 - }
1562 -
1563 - $log = MxChat_Admin::mxchat_get_debug_log();
1564 -
1565 - wp_send_json_success( array(
1566 - 'log' => $log,
1567 - 'count' => count( $log ),
1568 - ) );
1569 - }
1570 -
1571 - /**
1572 - * Clear the debug log
1573 - */
1574 - public function mxchat_clear_debug_log_callback() {
1575 - // Verify nonce
1576 - if ( ! check_ajax_referer( 'mxchat_save_setting_nonce', '_ajax_nonce', false ) ) {
1577 - wp_send_json_error( array( 'message' => esc_html__( 'Security check failed', 'mxchat' ) ) );
1578 - }
1579 -
1580 - // Check permissions
1581 - if ( ! current_user_can( 'manage_options' ) ) {
1582 - wp_send_json_error( array( 'message' => esc_html__( 'Unauthorized', 'mxchat' ) ) );
1583 - }
1584 -
1585 - MxChat_Admin::mxchat_clear_debug_log();
1586 -
1587 - // Log that the log was cleared (this will be the first entry in the new log)
1588 - MxChat_Admin::mxchat_log_debug( 'debug_log', 'Debug log cleared by user' );
1589 -
1590 - wp_send_json_success( array( 'message' => esc_html__( 'Debug log cleared', 'mxchat' ) ) );
1591 - }
1592 -
1593 - /**
1594 - * Export settings as JSON
1595 - */
1596 - public function mxchat_export_settings_callback() {
1597 - // Verify nonce
1598 - if ( ! check_ajax_referer( 'mxchat_save_setting_nonce', '_ajax_nonce', false ) ) {
1599 - wp_send_json_error( array( 'message' => esc_html__( 'Security check failed', 'mxchat' ) ) );
1600 - }
1601 -
1602 - // Check permissions
1603 - if ( ! current_user_can( 'manage_options' ) ) {
1604 - wp_send_json_error( array( 'message' => esc_html__( 'Unauthorized', 'mxchat' ) ) );
1605 - }
1606 -
1607 - $export = MxChat_Admin::mxchat_export_settings();
1608 -
1609 - // Log the export
1610 - MxChat_Admin::mxchat_log_debug( 'settings_export', 'Settings exported by user' );
1611 -
1612 - wp_send_json_success( array(
1613 - 'settings' => $export,
1614 - 'filename' => 'mxchat-settings-' . gmdate( 'Y-m-d-His' ) . '.json',
1615 - ) );
1616 - }
1617 -
1618 - /**
1619 - * Reset all settings to defaults
1620 - */
1621 - public function mxchat_reset_all_settings_callback() {
1622 - // Verify nonce
1623 - if ( ! check_ajax_referer( 'mxchat_save_setting_nonce', '_ajax_nonce', false ) ) {
1624 - wp_send_json_error( array( 'message' => esc_html__( 'Security check failed', 'mxchat' ) ) );
1625 - }
1626 -
1627 - // Check permissions
1628 - if ( ! current_user_can( 'manage_options' ) ) {
1629 - wp_send_json_error( array( 'message' => esc_html__( 'Unauthorized', 'mxchat' ) ) );
1630 - }
1631 -
1632 - // Require confirmation code
1633 - $confirmation = isset( $_POST['confirmation'] ) ? sanitize_text_field( wp_unslash( $_POST['confirmation'] ) ) : '';
1634 -
1635 - if ( strtoupper( $confirmation ) !== 'RESET' ) {
1636 - wp_send_json_error( array( 'message' => esc_html__( 'Invalid confirmation code. Please type RESET to confirm.', 'mxchat' ) ) );
1637 - }
1638 -
1639 - // Perform the reset
1640 - MxChat_Admin::mxchat_reset_all_settings();
1641 -
1642 - wp_send_json_success( array( 'message' => esc_html__( 'All settings have been reset to defaults. The page will reload.', 'mxchat' ) ) );
1643 - }
1644 -
1645 - /**
1646 - * Reset the global rate-limit usage counter to zero on demand.
1647 - *
1648 - * Zeroes the WP option mxchat_chat_limit_<bot>_global that the integrator
1649 - * increments per message, then returns a freshly-formatted readout string
1650 - * so the settings page can update without a reload. Does NOT change any
1651 - * enforcement config — purely clears the running counter.
1652 - */
1653 - public function mxchat_reset_global_rate_limit_callback() {
1654 - // Verify nonce
1655 - if ( ! check_ajax_referer( 'mxchat_reset_global_usage', '_ajax_nonce', false ) ) {
1656 - wp_send_json_error( array( 'message' => esc_html__( 'Security check failed', 'mxchat' ) ) );
1657 - }
1658 -
1659 - // Check permissions
1660 - if ( ! current_user_can( 'manage_options' ) ) {
1661 - wp_send_json_error( array( 'message' => esc_html__( 'Unauthorized', 'mxchat' ) ) );
1662 - }
1663 -
1664 - // Resolve the per-bot counter key the same way the integrator does.
1665 - $bot_id = isset( $_POST['bot_id'] ) ? sanitize_key( wp_unslash( $_POST['bot_id'] ) ) : 'default';
1666 - $safe_bot = preg_replace( '/[^a-zA-Z0-9_]/', '_', $bot_id );
1667 - if ( $safe_bot === '' ) {
1668 - $safe_bot = 'default';
1669 - }
1670 - $option_key = 'mxchat_chat_limit_' . $safe_bot . '_global';
1671 -
1672 - $now = time();
1673 - update_option( $option_key, array( 'count' => 0, 'timestamp' => $now ) );
1674 -
1675 - // Recompute the display string so the front-end can update in place.
1676 - $all_options = get_option( 'mxchat_options', array() );
1677 - $global_cfg = isset( $all_options['rate_limits_global'] ) && is_array( $all_options['rate_limits_global'] )
1678 - ? $all_options['rate_limits_global']
1679 - : array();
1680 - $limit_raw = isset( $global_cfg['limit'] ) ? (string) $global_cfg['limit'] : 'unlimited';
1681 - // Defensive: if a raw __custom__ ever slips through, fall back to the custom value.
1682 - if ( ! ctype_digit( $limit_raw ) && isset( $global_cfg['limit_custom'] ) && ctype_digit( (string) $global_cfg['limit_custom'] ) ) {
1683 - $limit_raw = (string) $global_cfg['limit_custom'];
1684 - }
1685 - $timeframe = isset( $global_cfg['timeframe'] ) ? (string) $global_cfg['timeframe'] : 'daily';
1686 - $windows = array( 'hourly' => 3600, 'daily' => 86400, 'weekly' => 604800, 'monthly' => 2592000 );
1687 - $window = isset( $windows[ $timeframe ] ) ? $windows[ $timeframe ] : 86400;
1688 - $reset_at = $now + $window;
1689 - $limit_int = ctype_digit( $limit_raw ) ? (int) $limit_raw : 0;
1690 -
1691 - $text = sprintf(
1692 - /* translators: 1: used count, 2: limit, 3: remaining, 4: human-readable time until reset */
1693 - esc_html__( '%1$s of %2$s used · %3$s left · resets in %4$s', 'mxchat' ),
1694 - number_format_i18n( 0 ),
1695 - number_format_i18n( $limit_int ),
1696 - number_format_i18n( $limit_int ),
1697 - human_time_diff( $now, $reset_at )
1698 - );
1699 -
1700 - wp_send_json_success( array(
1701 - 'count' => 0,
1702 - 'limit' => $limit_int,
1703 - 'left' => $limit_int,
1704 - 'reset_at' => $reset_at,
1705 - 'pct' => 0,
1706 - 'text' => $text,
1707 - 'message' => esc_html__( 'Usage counter reset.', 'mxchat' ),
1708 - ) );
1709 - }
1111 + // Default direct comparison
1112 + return $old_value !== $new_value;
1113 + }
1710 1114
1711 1115 }
1712 1116
1713 1117 // Initialize the AJAX handler