PluginProbe
MxChat – AI Chatbot & Content Generation for WordPress / 2.2.3
MxChat – AI Chatbot & Content Generation for WordPress v2.2.3
3.2.21 3.2.20 3.2.19 3.2.18 3.2.17 3.2.16 3.2.15 3.2.14 3.2.12 3.2.13 3.2.11 3.2.10 3.2.9 3.2.8 3.2.7 3.2.6 3.2.5 3.2.4 3.2.3 3.2.2 3.2.1 2.0.3 2.0.4 2.0.5 2.0.6 All 152 releases
← All changes | admin/class-ajax-handler.php +269 -1365 3.2.16 → 2.2.3 View file →
@@ -23,858 +23,194 @@
23 23
24 24 /**
25 25 * Register all AJAX action hooks
26 26 */
27 -private function mxchat_init_ajax_hooks() {
28 - // Settings AJAX
29 - add_action('wp_ajax_mxchat_save_setting', array($this, 'mxchat_save_setting_callback'));
30 - add_action('wp_ajax_mxchat_save_prompts_setting', array($this, 'mxchat_save_prompts_setting_callback'));
31 - add_action('wp_ajax_migrate_pinecone_settings', array($this, 'ajax_migrate_pinecone_settings'));
32 -
33 - // License AJAX
34 - add_action('wp_ajax_mxchat_handle_activate_license', array($this, 'mxchat_handle_activate_license'));
35 - add_action('wp_ajax_mxchat_check_license_status', array($this, 'mxchat_check_license_status'));
36 - add_action('wp_ajax_mxchat_deactivate_license', array($this, 'mxchat_deactivate_license'));
37 -
38 - // Actions & Intents AJAX
39 - add_action('wp_ajax_mxchat_toggle_action', array($this, 'mxchat_toggle_action'));
40 - add_action('wp_ajax_mxchat_update_intent_threshold', array($this, 'mxchat_update_intent_threshold'));
27 + private function mxchat_init_ajax_hooks() {
28 + // Settings AJAX
29 + add_action('wp_ajax_mxchat_save_setting', array($this, 'mxchat_save_setting_callback'));
30 + add_action('wp_ajax_mxchat_save_prompts_setting', array($this, 'mxchat_save_prompts_setting_callback'));
31 + add_action('wp_ajax_migrate_pinecone_settings', array($this, 'ajax_migrate_pinecone_settings'));
41 32
42 - add_action('wp_ajax_mxchat_save_selected_bot', array($this, 'mxchat_save_selected_bot'));
43 - add_action('wp_ajax_mxchat_check_api_keys', array($this, 'mxchat_check_api_keys'));
33 + // License AJAX
34 + add_action('wp_ajax_mxchat_activate_license', array($this, 'mxchat_handle_activate_license'));
35 + add_action('wp_ajax_mxchat_check_license', array($this, 'mxchat_check_license_status'));
44 36
45 - // Debug & Optimization AJAX
46 - add_action('wp_ajax_mxchat_toggle_debug_mode', array($this, 'mxchat_toggle_debug_mode_callback'));
47 - add_action('wp_ajax_mxchat_get_debug_log', array($this, 'mxchat_get_debug_log_callback'));
48 - add_action('wp_ajax_mxchat_clear_debug_log', array($this, 'mxchat_clear_debug_log_callback'));
49 - add_action('wp_ajax_mxchat_export_settings', array($this, 'mxchat_export_settings_callback'));
50 - add_action('wp_ajax_mxchat_reset_all_settings', array($this, 'mxchat_reset_all_settings_callback'));
51 -
52 - // Global rate-limit usage counter reset (admin-only, nonce-guarded)
53 - add_action('wp_ajax_mxchat_reset_global_rate_limit', array($this, 'mxchat_reset_global_rate_limit_callback'));
54 -
55 - // Custom (OpenAI-compatible) Provider connection test
56 - add_action('wp_ajax_mxchat_test_custom_provider', array($this, 'mxchat_test_custom_provider_callback'));
57 -
58 - // Built-in provider key validation — cheap per-provider auth check (plan-mxchat-20260623-c41f74)
59 - add_action('wp_ajax_mxchat_test_provider_key', array($this, 'mxchat_test_provider_key_callback'));
60 -
61 - // Custom Post Meta discovery scan for the KB whitelist picker (plan-mxchat-20260709-fe8e4e)
62 - add_action('wp_ajax_mxchat_scan_custom_meta_keys', array($this, 'mxchat_scan_custom_meta_keys_callback'));
63 -}
64 -
65 -/**
66 - * Discover non-ACF custom post-meta keys present on published public content, so the
67 - * KB → Custom Post Meta section can offer a click-to-add picker instead of a blind
68 - * "type the exact key you already know" textarea. plan-mxchat-20260709-fe8e4e.
69 - *
70 - * Bounded + button-triggered only (never on page load). Returns up to 50 keys by
71 - * frequency, each with a short sample value, so the owner can judge relevance before
72 - * whitelisting. Underscore-prefixed (protected/internal) keys are hidden unless the
73 - * caller opts in; ACF-managed keys are excluded so this picker never double-lists the
74 - * sibling ACF discovery picker on the same page.
75 - */
76 -public function mxchat_scan_custom_meta_keys_callback() {
77 - check_ajax_referer('mxchat_prompts_setting_nonce');
78 -
79 - if (!current_user_can('manage_options')) {
80 - wp_send_json_error(['message' => esc_html__('Unauthorized', 'mxchat')]);
37 + // Actions & Intents AJAX
38 + add_action('wp_ajax_mxchat_toggle_action', array($this, 'mxchat_toggle_action'));
39 + add_action('wp_ajax_mxchat_update_intent_threshold', array($this, 'mxchat_update_intent_threshold'));
81 40 }
82 41
83 - global $wpdb;
84 -
85 - $include_internal = isset($_POST['include_internal']) && $_POST['include_internal'] === '1';
86 -
87 - // Restrict discovery to public post types (the content the KB actually embeds).
88 - $post_types = get_post_types(array('public' => true), 'names');
89 - if (empty($post_types)) {
90 - wp_send_json_success(array('keys' => array(), 'scanned' => 0));
91 - }
92 - $pt_placeholders = implode(',', array_fill(0, count($post_types), '%s'));
93 -
94 - // Build the set of ACF-managed meta keys to exclude. ACF stores, alongside each
95 - // value key `foo`, a reference key `_foo` whose value is the ACF field key
96 - // (`field_xxxxx`). Strip the leading underscore from every such reference key to
97 - // get the real meta key, and exclude those — the ACF picker on this page owns them.
98 - $acf_managed = array();
99 - $acf_refs = $wpdb->get_col(
100 - $wpdb->prepare(
101 - "SELECT DISTINCT meta_key FROM {$wpdb->postmeta} WHERE meta_key LIKE %s AND meta_value LIKE %s",
102 - $wpdb->esc_like('_') . '%',
103 - $wpdb->esc_like('field_') . '%'
104 - )
105 - );
106 - foreach ((array) $acf_refs as $ref_key) {
107 - if (strlen($ref_key) > 1 && $ref_key[0] === '_') {
108 - $acf_managed[substr($ref_key, 1)] = true;
109 - }
110 - }
111 -
112 - // Discover keys + counts + a sample value in one bounded aggregate query.
113 - // SUBSTRING(MIN(...)) keeps the sample selection ONLY_FULL_GROUP_BY-safe.
114 - $params = $post_types;
115 - $sql = "SELECT pm.meta_key AS mk, COUNT(*) AS n, SUBSTRING(MIN(pm.meta_value), 1, 200) AS sample
116 - FROM {$wpdb->postmeta} pm
117 - INNER JOIN {$wpdb->posts} p ON p.ID = pm.post_id
118 - WHERE p.post_status = 'publish'
119 - AND p.post_type IN ($pt_placeholders)
120 - AND pm.meta_key <> ''";
121 - if (!$include_internal) {
122 - $sql .= " AND pm.meta_key NOT LIKE %s";
123 - $params[] = $wpdb->esc_like('_') . '%';
124 - }
125 - $sql .= " GROUP BY pm.meta_key ORDER BY n DESC, pm.meta_key ASC LIMIT 200";
126 -
127 - // phpcs:ignore WordPress.DB.PreparedSQL — placeholders assembled above, values in $params.
128 - $rows = $wpdb->get_results($wpdb->prepare($sql, $params));
129 -
130 - $keys = array();
131 - foreach ((array) $rows as $row) {
132 - $mk = $row->mk;
133 - if (isset($acf_managed[$mk])) {
134 - continue; // already offered by the ACF picker
135 - }
136 -
137 - $raw = (string) $row->sample;
138 - if ($raw !== '' && (is_serialized($raw) || preg_match('/^(a:\d+:\{|O:\d+:"|s:\d+:")/', $raw))) {
139 - $sample = esc_html__('[structured value]', 'mxchat');
140 - } else {
141 - $sample = trim(preg_replace('/\s+/', ' ', $raw));
142 - if (function_exists('mb_strlen') ? mb_strlen($sample) > 60 : strlen($sample) > 60) {
143 - $sample = (function_exists('mb_substr') ? mb_substr($sample, 0, 60) : substr($sample, 0, 60)) . '…';
144 - }
145 - if ($sample === '') {
146 - $sample = esc_html__('(empty value)', 'mxchat');
147 - }
148 - }
149 -
150 - $keys[] = array(
151 - 'key' => $mk,
152 - 'count' => (int) $row->n,
153 - 'sample' => $sample,
154 - );
155 -
156 - if (count($keys) >= 50) {
157 - break;
158 - }
159 - }
160 -
161 - wp_send_json_success(array(
162 - 'keys' => $keys,
163 - 'scanned' => is_array($rows) ? count($rows) : 0,
164 - ));
165 -}
166 -
167 -/**
168 - * Test connection to a Custom (OpenAI-compatible) provider by hitting its /models endpoint
169 - * with whichever auth scheme the user configured. Reports model count or a clean error.
170 - */
171 -public function mxchat_test_custom_provider_callback() {
172 - check_ajax_referer('mxchat_test_custom_provider');
173 - if (!current_user_can('manage_options')) {
174 - wp_send_json_error(array('message' => esc_html__('Unauthorized', 'mxchat')));
175 - }
176 -
177 - $options = get_option('mxchat_options', array());
178 - $base_url = isset($options['custom_provider_base_url']) ? trim((string) $options['custom_provider_base_url']) : '';
179 - $api_key = isset($options['custom_provider_api_key']) ? trim((string) $options['custom_provider_api_key']) : '';
180 - $auth = isset($options['custom_provider_auth_scheme']) ? $options['custom_provider_auth_scheme'] : 'bearer';
181 - $api_version = isset($options['custom_provider_api_version']) ? trim((string) $options['custom_provider_api_version']) : '';
182 -
183 - if (empty($base_url)) {
184 - wp_send_json_error(array('message' => esc_html__('Base URL is empty. Save it first.', 'mxchat')));
185 - }
186 -
187 - $url = rtrim($base_url, '/') . '/models';
188 - if (!empty($api_version)) {
189 - $url = add_query_arg('api-version', $api_version, $url);
190 - }
191 -
192 - $headers = array('Content-Type' => 'application/json');
193 - if (!empty($api_key)) {
194 - if ($auth === 'api-key') {
195 - $headers['api-key'] = $api_key;
196 - } else {
197 - $headers['Authorization'] = 'Bearer ' . $api_key;
198 - }
199 - }
200 -
201 - $response = wp_remote_get($url, array(
202 - 'headers' => $headers,
203 - 'timeout' => 10,
204 - ));
205 -
206 - if (is_wp_error($response)) {
207 - wp_send_json_error(array('message' => sprintf(esc_html__('Network error: %s', 'mxchat'), esc_html($response->get_error_message()))));
208 - }
209 -
210 - $code = (int) wp_remote_retrieve_response_code($response);
211 - if ($code === 401 || $code === 403) {
212 - wp_send_json_error(array('message' => sprintf(esc_html__('Auth rejected (HTTP %d). Check API key and auth scheme.', 'mxchat'), $code)));
213 - }
214 - if ($code === 404) {
215 - wp_send_json_error(array('message' => esc_html__('Endpoint not found (HTTP 404). Check the Base URL.', 'mxchat')));
216 - }
217 - if ($code < 200 || $code >= 300) {
218 - wp_send_json_error(array('message' => sprintf(esc_html__('Upstream returned HTTP %d.', 'mxchat'), $code)));
219 - }
220 -
221 - $body = json_decode(wp_remote_retrieve_body($response), true);
222 - $count = 0;
223 - if (is_array($body)) {
224 - if (isset($body['data']) && is_array($body['data'])) {
225 - $count = count($body['data']);
226 - } elseif (isset($body['models']) && is_array($body['models'])) {
227 - $count = count($body['models']);
228 - }
229 - }
230 -
231 - wp_send_json_success(array(
232 - 'message' => sprintf(esc_html__('Connection OK — %d model(s) reported.', 'mxchat'), $count),
233 - 'count' => $count,
234 - ));
235 -}
236 -
237 -/**
238 - * Validate a BUILT-IN provider key with the lightest authenticated call per
239 - * provider (a /models or key-info GET — never a generation). Reads the posted
240 - * key value so the owner can test BEFORE saving; falls back to the saved option
241 - * when the field is empty. Mirrors mxchat_test_custom_provider_callback and the
242 - * add-on test buttons (cf5bd5 veo / 8d16f1 perplexity). The key is never logged.
243 - * plan-mxchat-20260623-c41f74.
244 - */
245 -public function mxchat_test_provider_key_callback() {
246 - check_ajax_referer('mxchat_test_provider_key');
247 - if (!current_user_can('manage_options')) {
248 - wp_send_json_error(array('message' => esc_html__('Unauthorized', 'mxchat')));
249 - }
250 -
251 - $provider = isset($_POST['provider']) ? sanitize_key(wp_unslash($_POST['provider'])) : '';
252 - $posted_key = isset($_POST['key']) ? trim((string) wp_unslash($_POST['key'])) : '';
253 -
254 - $option_map = array(
255 - 'openai' => 'api_key',
256 - 'xai' => 'xai_api_key',
257 - 'claude' => 'claude_api_key',
258 - 'deepseek' => 'deepseek_api_key',
259 - 'gemini' => 'gemini_api_key',
260 - 'openrouter' => 'openrouter_api_key',
261 - );
262 - if (!isset($option_map[$provider])) {
263 - wp_send_json_error(array('message' => esc_html__('Unknown provider.', 'mxchat')));
264 - }
265 -
266 - // Prefer the just-typed value (test-before-save); fall back to the saved key.
267 - $key = $posted_key;
268 - if ($key === '') {
269 - $options = get_option('mxchat_options', array());
270 - $key = isset($options[$option_map[$provider]]) ? trim((string) $options[$option_map[$provider]]) : '';
271 - }
272 - if ($key === '') {
273 - wp_send_json_error(array('message' => esc_html__('No API key entered or saved for this provider.', 'mxchat')));
274 - }
275 -
276 - // Lightest authenticated metadata call per provider — model-agnostic, no generation.
277 - $headers = array();
278 - switch ($provider) {
279 - case 'openai':
280 - $url = 'https://api.openai.com/v1/models';
281 - $headers = array('Authorization' => 'Bearer ' . $key);
282 - break;
283 - case 'xai':
284 - $url = 'https://api.x.ai/v1/models';
285 - $headers = array('Authorization' => 'Bearer ' . $key);
286 - break;
287 - case 'deepseek':
288 - $url = 'https://api.deepseek.com/models';
289 - $headers = array('Authorization' => 'Bearer ' . $key);
290 - break;
291 - case 'openrouter':
292 - // /auth/key validates the key itself (the public /models list does not).
293 - $url = 'https://openrouter.ai/api/v1/auth/key';
294 - $headers = array('Authorization' => 'Bearer ' . $key);
295 - break;
296 - case 'gemini':
297 - $url = add_query_arg(array('pageSize' => 1, 'key' => $key), 'https://generativelanguage.googleapis.com/v1beta/models');
298 - break;
299 - case 'claude':
300 - $url = 'https://api.anthropic.com/v1/models';
301 - $headers = array('x-api-key' => $key, 'anthropic-version' => '2023-06-01');
302 - break;
303 - default:
304 - wp_send_json_error(array('message' => esc_html__('Unknown provider.', 'mxchat')));
305 - }
306 -
307 - $response = wp_remote_get($url, array(
308 - 'headers' => $headers,
309 - 'timeout' => 10,
310 - ));
311 -
312 - if (is_wp_error($response)) {
313 - wp_send_json_error(array('message' => sprintf(esc_html__('Network error: %s', 'mxchat'), esc_html($response->get_error_message()))));
314 - }
315 -
316 - $code = (int) wp_remote_retrieve_response_code($response);
317 - if ($code >= 200 && $code < 300) {
318 - wp_send_json_success(array('message' => esc_html__('Key is valid.', 'mxchat')));
319 - }
320 -
321 - // Surface the provider's own error text when present (trimmed; key never echoed).
322 - $detail = '';
323 - $body = json_decode(wp_remote_retrieve_body($response), true);
324 - if (is_array($body)) {
325 - if (isset($body['error']['message'])) {
326 - $detail = $body['error']['message'];
327 - } elseif (isset($body['error']) && is_string($body['error'])) {
328 - $detail = $body['error'];
329 - } elseif (isset($body['message'])) {
330 - $detail = $body['message'];
331 - }
332 - }
333 - $detail = trim((string) $detail);
334 - if (strlen($detail) > 200) {
335 - $detail = substr($detail, 0, 200) . '…';
336 - }
337 -
338 - if ($code === 401 || $code === 403) {
339 - $msg = ($detail !== '')
340 - ? sprintf(esc_html__('Key rejected (HTTP %1$d): %2$s', 'mxchat'), $code, esc_html($detail))
341 - : sprintf(esc_html__('Key rejected (HTTP %d). Check the API key.', 'mxchat'), $code);
342 - wp_send_json_error(array('message' => $msg));
343 - }
344 -
345 - $msg = ($detail !== '')
346 - ? sprintf(esc_html__('Provider returned HTTP %1$d: %2$s', 'mxchat'), $code, esc_html($detail))
347 - : sprintf(esc_html__('Provider returned HTTP %d.', 'mxchat'), $code);
348 - wp_send_json_error(array('message' => $msg));
349 -}
350 -
351 42 // ========================================
352 43 // SETTINGS AJAX HANDLERS
353 44 // ========================================
354 45
355 -/**
356 - * Validates and saves chat settings via AJAX request
357 - */
358 -public function mxchat_save_setting_callback() {
359 - check_ajax_referer('mxchat_save_setting_nonce');
360 - if (!current_user_can('manage_options')) {
361 - ('MXChat Save: Unauthorized access attempt');
362 - wp_send_json_error(['message' => esc_html__('Unauthorized', 'mxchat')]);
363 - }
46 + /**
47 + * Validates and saves chat settings via AJAX request
48 + */
49 + public function mxchat_save_setting_callback() {
50 + check_ajax_referer('mxchat_save_setting_nonce');
51 + if (!current_user_can('manage_options')) {
52 + ('MXChat Save: Unauthorized access attempt');
53 + wp_send_json_error(['message' => esc_html__('Unauthorized', 'mxchat')]);
54 + }
364 55
365 - $name = isset($_POST['name']) ? $_POST['name'] : '';
366 - // Remove WP's added slashes before saving (wp_unslash is the canonical form; plan-3f8158).
367 - $value = isset($_POST['value']) ? wp_unslash($_POST['value']) : '';
56 + $name = isset($_POST['name']) ? $_POST['name'] : '';
57 + // Strip slashes from the value before saving
58 + $value = isset($_POST['value']) ? stripslashes($_POST['value']) : '';
368 59
369 - //error_log('MXChat Save: Processing field name: ' . $name);
370 - //error_log('MXChat Save: Field value: ' . $value);
60 + //error_log('MXChat Save: Processing field name: ' . $name);
61 + //error_log('MXChat Save: Field value: ' . $value);
371 62
372 - if (empty($name)) {
373 - //error_log('MXChat Save: Empty field name detected');
374 - wp_send_json_error(['message' => esc_html__('Invalid field name', 'mxchat')]);
375 - }
63 + if (empty($name)) {
64 + //error_log('MXChat Save: Empty field name detected');
65 + wp_send_json_error(['message' => esc_html__('Invalid field name', 'mxchat')]);
66 + }
376 67
377 - // Load the full options array
378 - $options = get_option('mxchat_options', []);
379 - //error_log('MXChat Save: Current options array: ' . print_r($options, true));
68 + // Load the full options array
69 + $options = get_option('mxchat_options', []);
70 + //error_log('MXChat Save: Current options array: ' . print_r($options, true));
380 71
381 - // Extract field name from mxchat_options[field_name] format if present
382 - // But preserve the full name for special cases like rate_limits that need the full path
383 - $field_name = $name;
384 - if (preg_match('/^mxchat_options\[([^\[\]]+)\]$/', $name, $matches)) {
385 - $field_name = $matches[1];
386 - }
387 -
388 - // Handle special cases
389 - switch ($field_name) {
390 - // Editor Assistant enable toggle (plan-8cb0cb). STANDALONE option — NOT part
391 - // of mxchat_options, so it skips the mxchat_sanitize strip-trap entirely. Save
392 - // it directly and short-circuit (mirrors the mxchat_transcripts_options pattern
393 - // below); never falls through to the generic mxchat_options save. Default OFF.
394 - case 'mxchat_editor_assistant_enabled':
395 - $ea_value = ($value === 'on' || $value === '1') ? 'on' : 'off';
396 - update_option('mxchat_editor_assistant_enabled', $ea_value);
397 - wp_send_json_success(['message' => esc_html__('Setting saved', 'mxchat')]);
398 - return;
399 -
400 - // Smart asset loading toggle (plan-915355). STANDALONE option, same
401 - // reasoning as the Editor Assistant case above — saved directly and
402 - // short-circuited so it never touches mxchat_options / mxchat_sanitize.
403 - // Default OFF (opt-in performance optimization).
404 - case 'mxchat_smart_asset_loading':
405 - $sal_value = ($value === 'on' || $value === '1') ? 'on' : 'off';
406 - update_option('mxchat_smart_asset_loading', $sal_value);
407 - wp_send_json_success(['message' => esc_html__('Setting saved', 'mxchat')]);
408 - return;
409 -
410 - // Hybrid keyword boost toggle (plan-38ffa1). STANDALONE option, same
411 - // pattern. Enabling runs capability detection HERE, at admin-save time —
412 - // building the FULLTEXT index during a visitor's chat request is not
413 - // acceptable, and detection is a one-time cost the admin can wait on.
414 - case 'mxchat_hybrid_keyword_toggle':
415 - $hkb_value = ($value === 'on' || $value === '1') ? 'on' : 'off';
416 - update_option('mxchat_hybrid_keyword_toggle', $hkb_value);
417 - if ($hkb_value === 'on') {
418 - MxChat_Utils::mxchat_hybrid_detect_capability(true);
419 - }
420 - wp_send_json_success(['message' => esc_html__('Setting saved', 'mxchat')]);
421 - return;
422 -
423 - // Live-agent availability schedules (plans 8ccaa2 + 99d7a4). STANDALONE
424 - // options, same reasoning as the Editor Assistant case above — nested
425 - // structures that mxchat_sanitize() would strip on the next autosave of any
426 - // other field. Each channel's value arrives as JSON from its own hidden
427 - // input, which that channel's schedule editor keeps in sync; the class owns
428 - // all validation. The bare legacy name is kept as a defense against a
429 - // browser still running pre-split cached admin JS: that UI edited "both
430 - // channels" as one, so its save writes both.
431 - case 'live_agent_schedule_slack':
432 - case 'live_agent_schedule_telegram':
433 - case 'live_agent_schedule':
434 - if (!class_exists('MxChat_Live_Agent_Schedule')) {
435 - wp_send_json_error(['message' => esc_html__('Schedule unavailable', 'mxchat')]);
436 - return;
437 - }
438 - $decoded = json_decode($value, true);
439 - if (!is_array($decoded)) {
440 - wp_send_json_error(['message' => esc_html__('Invalid schedule', 'mxchat')]);
441 - return;
442 - }
443 - $channels = ($field_name === 'live_agent_schedule')
444 - ? array('slack', 'telegram')
445 - : array(substr($field_name, strlen('live_agent_schedule_')));
446 - $saved_schedule = null;
447 - foreach ($channels as $schedule_channel) {
448 - $saved_schedule = MxChat_Live_Agent_Schedule::save($schedule_channel, $decoded);
449 - }
450 - // Echo the normalized result so the editor can reconcile if it ever
451 - // disagrees with the server (e.g. a time the class rejected).
452 - wp_send_json_success([
453 - 'message' => esc_html__('Setting saved', 'mxchat'),
454 - 'schedule' => $saved_schedule,
455 - ]);
456 - return;
457 -
458 - case 'model':
459 - //error_log('MXChat Save: Processing model selection');
460 - //error_log('MXChat Save: Model value received: ' . $value);
461 - //error_log('MXChat Save: Value type: ' . gettype($value));
462 - //error_log('MXChat Save: Value length: ' . strlen($value));
463 - //error_log('MXChat Save: Value === "openrouter": ' . ($value === 'openrouter' ? 'YES' : 'NO'));
464 -
465 - // Allow 'openrouter' or validate against whitelist
466 - if ($value === 'openrouter') {
467 - //error_log('MXChat Save: Setting model to openrouter');
468 - $options['model'] = 'openrouter';
469 - } else {
470 - //error_log('MXChat Save: Checking against whitelist');
471 - // Catalog refactor (plan-d14e89): canonical allowlist lives in
472 - // includes/class-mxchat-model-catalog.php. A new chat model
473 - // added there is automatically accepted by autosave.
474 - if (!class_exists('MxChat_Model_Catalog')) {
475 - require_once plugin_dir_path(dirname(__FILE__)) . 'includes/class-mxchat-model-catalog.php';
72 + // Handle special cases
73 + switch ($name) {
74 + case 'additional_popular_questions':
75 + //error_log('MXChat Save: Processing additional_popular_questions');
76 + $questions = json_decode($value, true); // No need for stripslashes here
77 + if (is_array($questions)) {
78 + $options[$name] = $questions;
79 + // Also update old option for backwards compatibility
80 + update_option('additional_popular_questions', $questions);
81 + //error_log('MXChat Save: Saved ' . count($questions) . ' additional questions');
82 + } else {
83 + //error_log('MXChat Save: Failed to decode questions JSON');
476 84 }
477 - $allowed_models = MxChat_Model_Catalog::chat_model_ids();
478 -
479 - //error_log('MXChat Save: in_array result: ' . (in_array($value, $allowed_models) ? 'YES' : 'NO'));
480 -
481 - if (in_array($value, $allowed_models)) {
482 - //error_log('MXChat Save: Model is in whitelist, saving');
483 - $options['model'] = sanitize_text_field($value);
484 - } else {
485 - //error_log('MXChat Save: Invalid model rejected: ' . $value);
486 - //error_log('MXChat Save: Allowed models: ' . print_r($allowed_models, true));
487 - wp_send_json_error(['message' => esc_html__('Invalid model selected', 'mxchat')]);
488 - return;
489 - }
490 - }
491 - break;
492 -
493 - case 'openrouter_selected_model':
494 - //error_log('MXChat Save: Processing OpenRouter model: ' . $value);
495 - $options['openrouter_selected_model'] = sanitize_text_field($value);
496 - // Force immediate save for new keys
497 - //error_log('MXChat Save: OpenRouter model saved immediately');
498 - break;
499 -
500 - case 'openrouter_selected_model_name':
501 - //error_log('MXChat Save: Processing OpenRouter model name: ' . $value);
502 - $options['openrouter_selected_model_name'] = sanitize_text_field($value);
503 - // Force immediate save for new keys
504 - //error_log('MXChat Save: OpenRouter model name saved immediately');
505 - break;
506 -
507 - case 'openrouter_api_key':
508 - //error_log('MXChat Save: Processing OpenRouter API key');
509 - $options['openrouter_api_key'] = sanitize_text_field($value);
510 - break;
511 -
512 - // REMOVED DUPLICATE case 'openrouter_selected_model_name' HERE!
513 -
514 - case 'additional_popular_questions':
515 - //error_log('MXChat Save: Processing additional_popular_questions');
516 - $questions = json_decode($value, true); // No need for stripslashes here
517 - if (is_array($questions)) {
518 - $options[$field_name] = $questions;
519 - // Also update old option for backwards compatibility
520 - update_option('additional_popular_questions', $questions);
521 - //error_log('MXChat Save: Saved ' . count($questions) . ' additional questions');
522 - } else {
523 - //error_log('MXChat Save: Failed to decode questions JSON');
524 - }
525 - break;
526 - case 'email_blocker_header_content':
527 - //error_log('MXChat Save: Processing email_blocker_header_content');
528 - // Allow HTML content but sanitize it safely
529 - $options[$field_name] = wp_kses_post($value);
530 - break;
531 - case 'intro_message':
532 - // Stored-XSS hardening (Wordfence CWE-79, plan-3f8158): sanitize on save as
533 - // defense in depth. wp_kses_post mirrors mxchat_sanitize() (the options.php
534 - // save path) so both save routes treat intro_message identically and strip
535 - // <script>/</textarea> breakout while keeping basic formatting + {visitor_name}.
536 - $options[$field_name] = wp_kses_post($value);
537 - break;
538 - case 'email_blocker_button_text':
539 - //error_log('MXChat Save: Processing email_blocker_button_text');
540 - $options[$field_name] = sanitize_text_field($value);
541 - break;
542 - case 'name_field_placeholder':
543 - //error_log('MXChat Save: Processing name_field_placeholder');
544 - $options[$field_name] = sanitize_text_field($value);
545 - break;
546 - case 'similarity_threshold':
547 - //error_log('MXChat Save: Processing similarity_threshold');
548 - // Validate and save - enforce min 20, max 85
549 - $threshold = intval($value);
550 - if ($threshold < 20) $threshold = 20;
551 - if ($threshold > 85) $threshold = 85;
552 - $options[$field_name] = $threshold;
553 - break;
554 - case 'rag_sources_limit':
555 - //error_log('MXChat Save: Processing rag_sources_limit');
556 - // Validate and save - enforce min 3, max 10, default 6
557 - $rag_limit = intval($value);
558 - if ($rag_limit < 3) $rag_limit = 3;
559 - if ($rag_limit > 10) $rag_limit = 10;
560 - $options[$field_name] = $rag_limit;
561 - break;
562 - case 'rag_chunks_limit':
563 - // Validate and save - enforce min 8, max 20, default 15
564 - $chunks_limit = intval($value);
565 - if ($chunks_limit < 8) $chunks_limit = 8;
566 - if ($chunks_limit > 20) $chunks_limit = 20;
567 - $options[$field_name] = $chunks_limit;
568 - break;
569 - case 'live_agent_status':
570 - //error_log('MXChat Save: Processing live_agent_status');
571 - // Set the new value
572 - $options[$field_name] = ($value === 'on') ? 'on' : 'off';
573 - break;
574 - case 'enable_web_search':
575 - //error_log('MXChat Save: Processing enable_web_search');
576 - $options[$field_name] = ($value === 'on') ? 'on' : 'off';
577 - break;
578 - case 'enable_woocommerce_integration':
579 - //error_log('MXChat Save: Processing enable_woocommerce_integration');
580 - // Handle values that used to be 1/0
581 - $options[$field_name] = ($value === 'on' || $value === '1') ? 'on' : 'off';
582 - break;
583 - case 'post_type_visibility_mode':
584 - // Validate mode value
585 - $allowed_modes = array('all', 'include', 'exclude');
586 - $options[$field_name] = in_array($value, $allowed_modes) ? $value : 'all';
587 - break;
588 - case 'post_type_visibility_list':
589 - // Handle JSON array of post types
590 - $post_types = json_decode($value, true);
591 - if (is_array($post_types)) {
592 - // Sanitize each post type slug
593 - $options[$field_name] = array_map('sanitize_key', $post_types);
594 - } else {
595 - $options[$field_name] = array();
596 - }
597 - break;
598 - case 'script_loading_strategy':
599 - // Validate script loading strategy value
600 - $allowed_strategies = array('default', 'defer', 'delay_1s', 'delay_3s', 'delay_5s', 'on_interaction');
601 - $options[$field_name] = in_array($value, $allowed_strategies) ? $value : 'default';
602 - break;
603 - case 'auto_retry_on_transient_error':
604 - // Boolean toggle — accept 1/0/on/off, default to '1' if any truthy value.
605 - $options[$field_name] = ($value === '1' || $value === 'on' || $value === 1 || $value === true) ? '1' : '0';
606 - break;
607 - default:
608 - // Handle transcripts options
609 - if (strpos($name, 'mxchat_transcripts_options') !== false) {
610 - // Extract field name from mxchat_transcripts_options[field_name]
611 - if (preg_match('/mxchat_transcripts_options\[([^\]]+)\]/', $name, $matches)) {
612 - $field_name = $matches[1];
85 + break;
86 + case 'email_blocker_header_content':
87 + //error_log('MXChat Save: Processing email_blocker_header_content');
88 + // Allow HTML content but sanitize it safely
89 + $options[$name] = wp_kses_post($value);
90 + break;
91 + case 'similarity_threshold':
92 + //error_log('MXChat Save: Processing similarity_threshold');
93 + // Save to the options array
94 + $options[$name] = $value;
95 + break;
96 + case 'user_message_bg_color':
97 + case 'user_message_font_color':
98 + case 'bot_message_bg_color':
99 + case 'bot_message_font_color':
100 + case 'top_bar_bg_color':
101 + case 'send_button_font_color':
102 + case 'chatbot_background_color':
103 + case 'icon_color':
104 + case 'chat_input_font_color':
105 + case 'live_agent_message_bg_color':
106 + case 'live_agent_message_font_color':
107 + case 'mode_indicator_bg_color':
108 + case 'mode_indicator_font_color':
109 + case 'toolbar_icon_color':
110 + //error_log('MXChat Save: Processing color value: ' . $name);
111 + // Store color values directly
112 + $options[$name] = $value;
113 + break;
114 + case 'live_agent_status':
115 + //error_log('MXChat Save: Processing live_agent_status');
116 + // Set the new value
117 + $options[$name] = ($value === 'on') ? 'on' : 'off';
118 + break;
119 + case 'enable_woocommerce_integration':
120 + //error_log('MXChat Save: Processing enable_woocommerce_integration');
121 + // Handle values that used to be 1/0
122 + $options[$name] = ($value === 'on' || $value === '1') ? 'on' : 'off';
123 + break;
124 + default:
125 + // First check for rate limits settings
126 + if (strpos($name, 'mxchat_options[rate_limits]') !== false) {
127 + //error_log('MXChat Save: Detected rate_limits field: ' . $name);
613 128
614 - // Get current transcripts options
615 - $transcripts_options = get_option('mxchat_transcripts_options', array());
129 + // Extract role ID and setting from the name
130 + preg_match('/\[rate_limits\]\[(.*?)\]\[(.*?)\]/', $name, $matches);
131 + //error_log('MXChat Save: Regex matches: ' . print_r($matches, true));
616 132
617 - // Ensure it's an array
618 - if (!is_array($transcripts_options)) {
619 - $transcripts_options = array();
620 - }
133 + if (isset($matches[1]) && isset($matches[2])) {
134 + $role_id = $matches[1];
135 + $setting_key = $matches[2]; // limit, timeframe, or message
621 136
622 - // Handle checkbox values (convert 'on'/'off' to 1/0)
623 - if ($value === 'on' || $value === '1') {
624 - $transcripts_options[$field_name] = 1;
625 - } else if ($value === 'off' || $value === '0' || $value === '') {
626 - $transcripts_options[$field_name] = 0;
627 - } else {
628 - // For text/select fields, sanitize appropriately
629 - if ($field_name === 'mxchat_notification_email') {
630 - $transcripts_options[$field_name] = sanitize_email($value);
631 - } else {
632 - $transcripts_options[$field_name] = sanitize_text_field($value);
633 - }
634 - }
137 + //error_log('MXChat Save: Role ID = ' . $role_id . ', Setting Key = ' . $setting_key);
635 138
636 - // Use direct database update to bypass any filters
637 - global $wpdb;
139 + // Initialize rate_limits if it doesn't exist
140 + if (!isset($options['rate_limits'])) {
141 + // //error_log('MXChat Save: Initializing rate_limits array');
142 + $options['rate_limits'] = [];
143 + }
638 144
639 - // Serialize the options array
640 - $serialized = maybe_serialize($transcripts_options);
145 + // Initialize role settings if it doesn't exist
146 + if (!isset($options['rate_limits'][$role_id])) {
147 + //error_log('MXChat Save: Initializing rate_limits for role: ' . $role_id);
148 + $options['rate_limits'][$role_id] = [
149 + 'limit' => ($role_id === 'logged_out') ? '10' : '100',
150 + 'timeframe' => 'daily',
151 + 'message' => 'Rate limit exceeded. Please try again later.'
152 + ];
153 + }
641 154
642 - // Check if the option already exists in the database
643 - $existing = $wpdb->get_var("SELECT option_id FROM {$wpdb->options} WHERE option_name = 'mxchat_transcripts_options'");
155 + // Update the specific setting
156 + $options['rate_limits'][$role_id][$setting_key] = $value;
157 + //error_log('MXChat Save: Updated rate_limits[' . $role_id . '][' . $setting_key . '] = ' . $value);
158 + } else {
159 + //error_log('MXChat Save: Failed to parse rate_limits pattern: ' . $name);
160 + }
161 + }
162 + // Then check for role rate limits (old format)
163 + else if (strpos($name, 'mxchat_options[role_rate_limits]') !== false) {
164 + //error_log('MXChat Save: Processing role_rate_limits field: ' . $name);
165 + // Extract role ID from the name
166 + preg_match('/\[role_rate_limits\]\[(.*?)\]/', $name, $matches);
167 + //error_log('MXChat Save: Regex matches: ' . print_r($matches, true));
644 168
645 - if ($existing) {
646 - // Option exists, do an update
647 - $result = $wpdb->update(
648 - $wpdb->options,
649 - array('option_value' => $serialized),
650 - array('option_name' => 'mxchat_transcripts_options'),
651 - array('%s'),
652 - array('%s')
653 - );
654 - } else {
655 - // Option doesn't exist (new install), do an insert
656 - $result = $wpdb->insert(
657 - $wpdb->options,
658 - array(
659 - 'option_name' => 'mxchat_transcripts_options',
660 - 'option_value' => $serialized,
661 - 'autoload' => 'yes'
662 - ),
663 - array('%s', '%s', '%s')
664 - );
665 - }
169 + if (isset($matches[1])) {
170 + $role_id = $matches[1];
171 + // Initialize role_rate_limits if it doesn't exist
172 + if (!isset($options['role_rate_limits'])) {
173 + //error_log('MXChat Save: Initializing role_rate_limits array');
174 + $options['role_rate_limits'] = [];
175 + }
176 + // Update the specific role's rate limit
177 + $options['role_rate_limits'][$role_id] = sanitize_text_field($value);
178 + //error_log('MXChat Save: Updated role_rate_limits[' . $role_id . '] = ' . $value);
179 + } else {
180 + //error_log('MXChat Save: Failed to parse role_rate_limits pattern: ' . $name);
181 + }
182 + }
183 + // Handle toggles
184 + else if (strpos($name, 'toggle') !== false || in_array($name, [
185 + 'chat_persistence_toggle',
186 + 'privacy_toggle',
187 + 'complianz_toggle',
188 + 'chat_toolbar_toggle',
189 + 'show_pdf_upload_button',
190 + 'show_word_upload_button'
191 + ])) {
192 + //error_log('MXChat Save: Processing toggle: ' . $name);
193 + $options[$name] = ($value === 'on') ? 'on' : 'off';
194 + } else {
195 + //error_log('MXChat Save: Processing standard field: ' . $name);
196 + // Store all other values directly
197 + $options[$name] = $value;
198 + }
199 + break;
200 + }
666 201
667 - // Clear all caches after direct DB update
668 - wp_cache_delete('mxchat_transcripts_options', 'options');
669 - wp_cache_delete('alloptions', 'options');
670 - wp_cache_flush();
202 + // Save all updates to the options array
203 + $updated = update_option('mxchat_options', $options);
204 + //error_log('MXChat Save: Update result: ' . ($updated ? 'success' : 'unchanged') . ' for field: ' . $name);
205 + //error_log('MXChat Save: Updated options array: ' . print_r($options, true));
671 206
672 - wp_send_json_success(['message' => esc_html__('Setting saved', 'mxchat')]);
673 - return;
674 - }
675 - }
676 - // Whole-chatbot global cap (sits in mxchat_options['rate_limits_global']).
677 - // Field names: mxchat_options[rate_limits_global][limit|timeframe|limit_custom]
678 - else if (strpos($name, 'mxchat_options[rate_limits_global]') !== false) {
679 - preg_match('/\[rate_limits_global\]\[(.*?)\]/', $name, $matches);
680 - if (isset($matches[1])) {
681 - $setting_key = $matches[1];
682 - if (!isset($options['rate_limits_global']) || !is_array($options['rate_limits_global'])) {
683 - $options['rate_limits_global'] = array('limit' => 'unlimited', 'timeframe' => 'daily');
684 - }
685 - if ($setting_key === 'limit') {
686 - // Selection from the preset dropdown. If __custom__, resolve from limit_custom; otherwise store directly.
687 - if ($value === '__custom__') {
688 - $custom = isset($options['rate_limits_global']['limit_custom']) ? (string) $options['rate_limits_global']['limit_custom'] : '';
689 - if ($custom !== '' && ctype_digit($custom) && (int) $custom >= 1) {
690 - $options['rate_limits_global']['limit'] = $custom;
691 - }
692 - // else leave existing limit untouched until the custom value arrives
693 - } else {
694 - $options['rate_limits_global']['limit'] = $value;
695 - }
696 - } elseif ($setting_key === 'limit_custom') {
697 - $clean = preg_replace('/[^0-9]/', '', (string) $value);
698 - $options['rate_limits_global']['limit_custom'] = $clean;
699 - // Mirror a valid custom value into limit UNCONDITIONALLY (plan-74eb86).
700 - // The custom number input is only editable when the dropdown is on
701 - // "Custom…" (the toggle JS hides it for presets/unlimited) and autosave
702 - // sends one field per change event, so a limit_custom change only fires
703 - // in custom mode — there is no preset to clobber. The old guard required
704 - // limit to already be non-preset, which it isn't on a first-time custom
705 - // entry (the limit=__custom__ event arrives before limit_custom is set),
706 - // so the value never landed in limit on the first save and reverted on refresh.
707 - if ($clean !== '' && (int) $clean >= 1) {
708 - $options['rate_limits_global']['limit'] = $clean;
709 - }
710 - } elseif ($setting_key === 'timeframe') {
711 - $allowed_tf = array('hourly','daily','weekly','monthly');
712 - $options['rate_limits_global']['timeframe'] = in_array($value, $allowed_tf, true) ? $value : 'daily';
713 - }
714 - }
715 - }
716 - // First check for rate limits settings
717 - else if (strpos($name, 'mxchat_options[rate_limits]') !== false) {
718 - //error_log('MXChat Save: Detected rate_limits field: ' . $name);
207 + // Always return success even if WordPress says nothing changed
208 + // (which happens when the value is the same as before)
209 + wp_send_json_success(['message' => esc_html__('Setting saved', 'mxchat')]);
210 + }
719 211
720 - // Extract role ID and setting from the name
721 - preg_match('/\[rate_limits\]\[(.*?)\]\[(.*?)\]/', $name, $matches);
722 - //error_log('MXChat Save: Regex matches: ' . print_r($matches, true));
723 212
724 - if (isset($matches[1]) && isset($matches[2])) {
725 - $role_id = $matches[1];
726 - $setting_key = $matches[2]; // limit, timeframe, message, or limit_custom
727 -
728 - //error_log('MXChat Save: Role ID = ' . $role_id . ', Setting Key = ' . $setting_key);
729 -
730 - // Initialize rate_limits if it doesn't exist
731 - if (!isset($options['rate_limits'])) {
732 - // //error_log('MXChat Save: Initializing rate_limits array');
733 - $options['rate_limits'] = [];
734 - }
735 -
736 - // Initialize role settings if it doesn't exist
737 - if (!isset($options['rate_limits'][$role_id])) {
738 - //error_log('MXChat Save: Initializing rate_limits for role: ' . $role_id);
739 - $options['rate_limits'][$role_id] = [
740 - 'limit' => ($role_id === 'logged_out') ? '10' : '100',
741 - 'timeframe' => 'daily',
742 - 'message' => 'Rate limit exceeded. Please try again later.'
743 - ];
744 - }
745 -
746 - if ($setting_key === 'limit') {
747 - if ($value === '__custom__') {
748 - // Pull the integer from limit_custom that may have arrived (or will arrive).
749 - $custom = isset($options['rate_limits'][$role_id]['limit_custom']) ? (string) $options['rate_limits'][$role_id]['limit_custom'] : '';
750 - if ($custom !== '' && ctype_digit($custom) && (int) $custom >= 1) {
751 - $options['rate_limits'][$role_id]['limit'] = $custom;
752 - }
753 - } else {
754 - $options['rate_limits'][$role_id]['limit'] = $value;
755 - }
756 - } elseif ($setting_key === 'limit_custom') {
757 - $clean = preg_replace('/[^0-9]/', '', (string) $value);
758 - $options['rate_limits'][$role_id]['limit_custom'] = $clean;
759 - // Mirror a valid custom value into limit UNCONDITIONALLY — same reasoning
760 - // as the global branch above (plan-74eb86). The per-role custom input is
761 - // only editable in custom mode and autosave is one-field-per-change, so
762 - // this never clobbers a preset; it fixes the first-time-save revert.
763 - if ($clean !== '' && (int) $clean >= 1) {
764 - $options['rate_limits'][$role_id]['limit'] = $clean;
765 - }
766 - } else {
767 - // Update the specific setting (timeframe, message)
768 - $options['rate_limits'][$role_id][$setting_key] = $value;
769 - }
770 - //error_log('MXChat Save: Updated rate_limits[' . $role_id . '][' . $setting_key . '] = ' . $value);
771 - } else {
772 - //error_log('MXChat Save: Failed to parse rate_limits pattern: ' . $name);
773 - }
774 - }
775 - // Then check for role rate limits (old format)
776 - else if (strpos($name, 'mxchat_options[role_rate_limits]') !== false) {
777 - //error_log('MXChat Save: Processing role_rate_limits field: ' . $name);
778 - // Extract role ID from the name
779 - preg_match('/\[role_rate_limits\]\[(.*?)\]/', $name, $matches);
780 - //error_log('MXChat Save: Regex matches: ' . print_r($matches, true));
781 -
782 - if (isset($matches[1])) {
783 - $role_id = $matches[1];
784 - // Initialize role_rate_limits if it doesn't exist
785 - if (!isset($options['role_rate_limits'])) {
786 - //error_log('MXChat Save: Initializing role_rate_limits array');
787 - $options['role_rate_limits'] = [];
788 - }
789 - // Update the specific role's rate limit
790 - $options['role_rate_limits'][$role_id] = sanitize_text_field($value);
791 - //error_log('MXChat Save: Updated role_rate_limits[' . $role_id . '] = ' . $value);
792 - } else {
793 - //error_log('MXChat Save: Failed to parse role_rate_limits pattern: ' . $name);
794 - }
795 - }
796 - // Handle toggles - check both extracted field_name and original name for toggle detection
797 - else if (strpos($field_name, 'toggle') !== false || in_array($field_name, [
798 - 'chat_persistence_toggle',
799 - 'privacy_toggle',
800 - 'complianz_toggle',
801 - 'chat_toolbar_toggle',
802 - 'show_pdf_upload_button',
803 - 'show_word_upload_button',
804 - 'enable_streaming_toggle',
805 - 'contextual_awareness_toggle',
806 - 'citation_links_toggle',
807 - 'enable_email_block',
808 - 'enable_name_field',
809 - 'custom_provider_for_embeddings',
810 - 'custom_provider_for_images',
811 - 'print_button_enabled',
812 - 'reset_chat_enabled'
813 - ])) {
814 - //error_log('MXChat Save: Processing toggle: ' . $field_name);
815 - $options[$field_name] = ($value === 'on') ? 'on' : 'off';
816 - } else {
817 - //error_log('MXChat Save: Processing standard field: ' . $field_name);
818 - // Store all other values directly using the extracted field name
819 - $options[$field_name] = $value;
820 - }
821 - break;
822 - }
823 -
824 - // Save all updates to the options array
825 - $updated = update_option('mxchat_options', $options);
826 - //error_log('MXChat Save: Update result: ' . ($updated ? 'success' : 'unchanged') . ' for field: ' . $name);
827 - //error_log('MXChat Save: Updated options array: ' . print_r($options, true));
828 -
829 - // Log the save action if debug mode is enabled
830 - if ( class_exists( 'MxChat_Admin' ) ) {
831 - MxChat_Admin::mxchat_log_debug(
832 - 'settings_save',
833 - sprintf( 'Field saved: %s', $field_name ),
834 - array(
835 - 'field' => $field_name,
836 - 'updated' => $updated,
837 - )
838 - );
839 - }
840 -
841 - // Always return success even if WordPress says nothing changed
842 - // (which happens when the value is the same as before)
843 - wp_send_json_success(['message' => esc_html__('Setting saved', 'mxchat')]);
844 -}
845 -
846 -/**
847 - * Save the selected bot for knowledge base operations
848 - */
849 -public function mxchat_save_selected_bot() {
850 - // Check nonce
851 - if (!wp_verify_nonce($_POST['nonce'] ?? '', 'mxchat_save_setting_nonce')) {
852 - wp_send_json_error('Invalid nonce');
853 - }
854 -
855 - // Check permissions
856 - if (!current_user_can('manage_options')) {
857 - wp_send_json_error('Unauthorized');
858 - }
859 -
860 - $bot_id = isset($_POST['bot_id']) ? sanitize_key($_POST['bot_id']) : 'default';
861 -
862 - // Save as user meta for the current user
863 - $user_id = get_current_user_id();
864 - update_user_meta($user_id, 'mxchat_selected_knowledge_bot', $bot_id);
865 -
866 - // Also save as an option for site-wide default
867 - update_option('mxchat_current_knowledge_bot', $bot_id);
868 -
869 - // No cache clearing needed since we removed caching
870 -
871 - wp_send_json_success(array(
872 - 'message' => 'Bot selection saved',
873 - 'bot_id' => $bot_id
874 - ));
875 -}
876 -
877 213 /**
878 214 * Handles AJAX request for saving chat settings
879 215 */
880 216 public function mxchat_save_prompts_setting_callback() {
@@ -1042,123 +378,8 @@
1042 378 wp_send_json_error(['message' => esc_html__('No changes detected', 'mxchat')]);
1043 379 }
1044 380 }
1045 381
1046 - // Handle chunking settings - use direct DB access to bypass WordPress filters
1047 - if (strpos($name, 'mxchat_chunk') === 0 || $name === 'mxchat_chunking_enabled') {
1048 - global $wpdb;
1049 -
1050 - // Get current options directly from database
1051 - $current_options_raw = $wpdb->get_var(
1052 - $wpdb->prepare(
1053 - "SELECT option_value FROM {$wpdb->options} WHERE option_name = %s",
1054 - 'mxchat_options'
1055 - )
1056 - );
1057 -
1058 - $options = $current_options_raw !== null ? maybe_unserialize($current_options_raw) : array();
1059 - if (!is_array($options)) {
1060 - $options = array();
1061 - }
1062 -
1063 - // Update the specific chunking field
1064 - if ($name === 'mxchat_chunking_enabled') {
1065 - $options['chunking_enabled'] = in_array($value, array('on', '1', 'true', true), true);
1066 - } elseif ($name === 'mxchat_chunk_size') {
1067 - $options['chunk_size'] = max(1000, min(10000, intval($value)));
1068 - }
1069 -
1070 - // Save directly to database
1071 - $serialized_options = maybe_serialize($options);
1072 -
1073 - $option_exists = $wpdb->get_var(
1074 - $wpdb->prepare(
1075 - "SELECT COUNT(*) FROM {$wpdb->options} WHERE option_name = %s",
1076 - 'mxchat_options'
1077 - )
1078 - );
1079 -
1080 - if ($option_exists > 0) {
1081 - $save_result = $wpdb->update(
1082 - $wpdb->options,
1083 - array('option_value' => $serialized_options),
1084 - array('option_name' => 'mxchat_options'),
1085 - array('%s'),
1086 - array('%s')
1087 - );
1088 - } else {
1089 - $save_result = $wpdb->insert(
1090 - $wpdb->options,
1091 - array(
1092 - 'option_name' => 'mxchat_options',
1093 - 'option_value' => $serialized_options,
1094 - 'autoload' => 'yes'
1095 - ),
1096 - array('%s', '%s', '%s')
1097 - );
1098 - }
1099 -
1100 - // Clear object cache for this option
1101 - wp_cache_delete('mxchat_options', 'options');
1102 -
1103 - if ($save_result !== false) {
1104 - wp_send_json_success(['message' => esc_html__('Chunking setting saved', 'mxchat')]);
1105 - } else {
1106 - wp_send_json_error(['message' => esc_html__('Failed to save chunking setting', 'mxchat')]);
1107 - }
1108 - return;
1109 - }
1110 -
1111 - // Handle ACF field exclusion toggles
1112 - if (strpos($name, 'mxchat_acf_field_') === 0) {
1113 - // Extract field name from the input name (e.g., mxchat_acf_field_private_notes -> private_notes)
1114 - $field_name = str_replace('mxchat_acf_field_', '', $name);
1115 - $is_enabled = ($value === 'on' || $value === '1');
1116 -
1117 - // Get current excluded fields
1118 - $excluded_fields = get_option('mxchat_acf_excluded_fields', array());
1119 - if (!is_array($excluded_fields)) {
1120 - $excluded_fields = array();
1121 - }
1122 -
1123 - if ($is_enabled) {
1124 - // Remove from exclusion list (field should be included)
1125 - $excluded_fields = array_values(array_diff($excluded_fields, array($field_name)));
1126 - } else {
1127 - // Add to exclusion list (field should be excluded)
1128 - if (!in_array($field_name, $excluded_fields)) {
1129 - $excluded_fields[] = $field_name;
1130 - }
1131 - }
1132 -
1133 - $updated = update_option('mxchat_acf_excluded_fields', $excluded_fields);
1134 -
1135 - if ($updated || true) { // Always report success since the state may already be correct
1136 - wp_send_json_success([
1137 - 'message' => $is_enabled
1138 - ? sprintf(esc_html__('Field "%s" will be included in imports', 'mxchat'), $field_name)
1139 - : sprintf(esc_html__('Field "%s" will be excluded from imports', 'mxchat'), $field_name)
1140 - ]);
1141 - } else {
1142 - wp_send_json_error(['message' => esc_html__('Failed to save ACF field setting', 'mxchat')]);
1143 - }
1144 - return;
1145 - }
1146 -
1147 - // Handle custom post meta whitelist
1148 - if ($name === 'mxchat_custom_meta_whitelist') {
1149 - $updated = update_option('mxchat_custom_meta_whitelist', sanitize_textarea_field($value));
1150 -
1151 - if ($updated || true) { // Always report success since the state may already be correct
1152 - wp_send_json_success([
1153 - 'message' => esc_html__('Custom meta whitelist saved', 'mxchat')
1154 - ]);
1155 - } else {
1156 - wp_send_json_error(['message' => esc_html__('Failed to save custom meta whitelist', 'mxchat')]);
1157 - }
1158 - return;
1159 - }
1160 -
1161 382 // Handle other prompts options
1162 383 $options = get_option('mxchat_prompts_options', []);
1163 384 $options[$name] = $value;
1164 385 $updated = update_option('mxchat_prompts_options', $options);
@@ -1223,226 +444,114 @@
1223 444 }
1224 445 }
1225 446
1226 447
448 +
1227 449 // ========================================
1228 450 // LICENSE AJAX HANDLERS
1229 451 // ========================================
1230 452
1231 -/**
1232 - * Validates and activates chat license via AJAX
1233 - */
1234 -public function mxchat_handle_activate_license() {
1235 - // Check nonce
1236 - if (!check_ajax_referer('mxchat_activate_license_nonce', 'security', false)) {
1237 - wp_send_json_error(esc_html__('Invalid security token', 'mxchat'));
1238 - return;
1239 - }
1240 -
1241 - // Verify user capabilities
1242 - if (!current_user_can('manage_options')) {
1243 - wp_send_json_error(esc_html__('Unauthorized access', 'mxchat'));
1244 - return;
1245 - }
1246 -
1247 - $license_key = isset($_POST['mxchat_activation_key']) ? sanitize_text_field($_POST['mxchat_activation_key']) : '';
1248 - $customer_email = isset($_POST['mxchat_pro_email']) ? sanitize_email($_POST['mxchat_pro_email']) : '';
1249 -
1250 - if (empty($license_key) || empty($customer_email)) {
1251 - wp_send_json_error(esc_html__('Email or License Key is missing', 'mxchat'));
1252 - return;
1253 - }
1254 -
1255 - $product_id = 'MxChatPRO';
1256 - $domain = parse_url(home_url(), PHP_URL_HOST); // Get the current domain
1257 -
1258 - // Call WooCommerce Software API for activation (not just validation)
1259 - $response = wp_remote_get(
1260 - add_query_arg(
453 + /**
454 + * Validates and activates chat license via AJAX
455 + */
456 + public function mxchat_handle_activate_license() {
457 + // Check nonce
458 + if (!check_ajax_referer('mxchat_activate_license_nonce', 'security', false)) {
459 + wp_send_json_error(esc_html__('Invalid security token', 'mxchat'));
460 + return;
461 + }
462 +
463 + // Verify user capabilities
464 + if (!current_user_can('manage_options')) {
465 + wp_send_json_error(esc_html__('Unauthorized access', 'mxchat'));
466 + return;
467 + }
468 +
469 + $license_key = isset($_POST['mxchat_activation_key']) ? sanitize_text_field($_POST['mxchat_activation_key']) : '';
470 + $customer_email = isset($_POST['mxchat_pro_email']) ? sanitize_email($_POST['mxchat_pro_email']) : '';
471 +
472 + if (empty($license_key) || empty($customer_email)) {
473 + wp_send_json_error(esc_html__('Email or License Key is missing', 'mxchat'));
474 + return;
475 + }
476 +
477 + $product_id = 'MxChatPRO';
478 +
479 + // **CHANGED TO HTTPS**
480 + $response = wp_remote_get(
481 + add_query_arg(
482 + array(
483 + 'wc-api' => 'software-api',
484 + 'request' => 'activation',
485 + 'email' => $customer_email,
486 + 'license_key' => $license_key,
487 + 'product_id' => $product_id
488 + ),
489 + 'https://mxchat.ai/' // **CHANGED FROM HTTP TO HTTPS**
490 + ),
1261 491 array(
1262 - 'wc-api' => 'software-api',
1263 - 'request' => 'activation',
1264 - 'email' => $customer_email,
1265 - 'license_key' => $license_key,
1266 - 'product_id' => $product_id,
1267 - 'instance' => $domain, // THIS IS KEY - include the domain as instance
1268 - 'platform' => 'wordpress' // Optional but good to include
1269 - ),
1270 - 'https://mxchat.ai/'
1271 - ),
1272 - array(
1273 - 'timeout' => 60,
1274 - 'sslverify' => true
1275 - )
1276 - );
1277 -
1278 - if (is_wp_error($response)) {
1279 - $error_message = $response->get_error_message();
1280 - //error_log('MxChat License Activation Error: ' . $error_message);
1281 - wp_send_json_error(esc_html__('Activation failed due to a server error: ', 'mxchat') . $error_message);
1282 - return;
1283 - }
1284 -
1285 - $response_code = wp_remote_retrieve_response_code($response);
1286 - $body = wp_remote_retrieve_body($response);
1287 -
1288 - // Log response for debugging
1289 - //error_log('MxChat License Response Code: ' . $response_code);
1290 - //error_log('MxChat License Response Body: ' . $body);
1291 -
1292 - if ($response_code !== 200) {
1293 - wp_send_json_error(esc_html__('Server returned error code: ', 'mxchat') . $response_code);
1294 - return;
1295 - }
1296 -
1297 - $data = json_decode($body);
1298 -
1299 - if ($data && isset($data->activated) && $data->activated) {
1300 - // Success - save local options
1301 - update_option('mxchat_license_status', 'active');
1302 - update_option('mxchat_pro_email', $customer_email);
1303 - update_option('mxchat_activation_key', $license_key);
1304 - delete_option('mxchat_license_error');
492 + 'timeout' => 60, // 60 seconds timeout
493 + 'sslverify' => true // **CHANGED TO TRUE FOR HTTPS**
494 + )
495 + );
1305 496
1306 - // Also track on your website (this is your existing domain tracking)
1307 - $this->track_domain_on_website($license_key, $customer_email, $domain);
497 + if (is_wp_error($response)) {
498 + $error_message = $response->get_error_message();
499 + //error_log('MxChat License Activation Error: ' . $error_message);
500 + wp_send_json_error(esc_html__('Activation failed due to a server error: ', 'mxchat') . $error_message);
501 + return;
502 + }
1308 503
1309 - wp_send_json_success(array('message' => esc_html__('License activated successfully', 'mxchat')));
1310 - } else {
1311 - $error_message = isset($data->error) ? $data->error : esc_html__('Activation failed', 'mxchat');
1312 - update_option('mxchat_license_status', 'inactive');
1313 - update_option('mxchat_license_error', $error_message);
504 + $response_code = wp_remote_retrieve_response_code($response);
505 + $body = wp_remote_retrieve_body($response);
1314 506
1315 - //error_log('MxChat Activation failed: ' . $error_message);
1316 - wp_send_json_error($error_message);
507 + // Log response for debugging
508 + //error_log('MxChat License Response Code: ' . $response_code);
509 + //error_log('MxChat License Response Body: ' . $body);
510 +
511 + if ($response_code !== 200) {
512 + wp_send_json_error(esc_html__('Server returned error code: ', 'mxchat') . $response_code);
513 + return;
514 + }
515 +
516 + $data = json_decode($body);
517 +
518 + if ($data && isset($data->activated) && $data->activated) {
519 + update_option('mxchat_license_status', 'active');
520 + update_option('mxchat_pro_email', $customer_email);
521 + update_option('mxchat_activation_key', $license_key);
522 + delete_option('mxchat_license_error'); // Clear any previous errors
523 + wp_send_json_success(array('message' => esc_html__('License activated successfully', 'mxchat')));
524 + } else {
525 + $error_message = isset($data->error) ? $data->error : esc_html__('Activation failed', 'mxchat');
526 + update_option('mxchat_license_status', 'inactive');
527 + update_option('mxchat_license_error', $error_message);
528 + wp_send_json_error($error_message);
529 + }
1317 530 }
1318 -}
1319 531
1320 -/**
1321 - * Track domain on your website (separate from WooCommerce activation)
1322 - */
1323 -private function track_domain_on_website($license_key, $email, $domain) {
1324 - // This calls your website's tracking API
1325 - wp_remote_post('https://mxchat.ai/mxchat-api/activate-license', array(
1326 - 'body' => array(
1327 - 'mxchat_pro_email' => $email,
1328 - 'mxchat_activation_key' => $license_key,
1329 - 'domain' => $domain
1330 - ),
1331 - 'timeout' => 10,
1332 - 'sslverify' => true
1333 - ));
1334 -}
1335 532
1336 533 /**
1337 534 * Validates license via AJAX with email and key
1338 535 */
1339 - public function mxchat_check_license_status() {
1340 - // Verify nonce
1341 - if (!check_ajax_referer('mxchat_activate_license_nonce', 'security', false)) {
1342 - wp_send_json_error('Security check failed');
1343 - return;
1344 - }
1345 -
1346 - // Add isset checks for safety
1347 - $email = isset($_POST['email']) ? sanitize_email($_POST['email']) : '';
1348 - $key = isset($_POST['key']) ? sanitize_text_field($_POST['key']) : '';
1349 -
1350 - // Check if this license is actually active in your system
1351 - $is_active = (get_option('mxchat_license_status') === 'active' &&
536 + public function mxchat_check_license_status() {
537 + // Verify nonce
538 + check_ajax_referer($this->mxchat_get_nonce_action(), 'security');
539 +
540 + $email = sanitize_email($_POST['email']);
541 + $key = sanitize_text_field($_POST['key']);
542 +
543 + // Check if this license is actually active in your system
544 + $is_active = (get_option('mxchat_license_status') === 'active' &&
1352 545 get_option('mxchat_pro_email') === $email &&
1353 546 get_option('mxchat_activation_key') === $key);
1354 -
1355 - wp_send_json(array(
1356 - 'is_active' => $is_active
1357 - ));
1358 - }
1359 -
1360 -/**
1361 - * Handle license deactivation - Complete version for plugin
1362 - */
1363 -function mxchat_deactivate_license() {
1364 - // Add debugging
1365 - //error_log('MxChat deactivate function called');
1366 -
1367 - // Check nonce
1368 - if (!check_ajax_referer('mxchat_activate_license_nonce', 'security', false)) {
1369 - //error_log('MxChat deactivate: Nonce check failed');
1370 - wp_send_json_error('Security check failed.');
1371 - return;
1372 - }
1373 547
1374 - // plan-mxchat-20260731-c63fb6 — nonce is not authorization. Without this,
1375 - // any authenticated user holding the nonce could revoke the site's PRO
1376 - // licence. Every sibling handler in this file already checks.
1377 - if (!current_user_can('manage_options')) {
1378 - wp_send_json_error(esc_html__('Unauthorized', 'mxchat'), 403);
1379 - return;
1380 - }
548 + wp_send_json(array(
549 + 'is_active' => $is_active
550 + ));
551 + }
1381 552
1382 - //error_log('MxChat deactivate: Nonce check passed');
1383 -
1384 - $license_key = get_option('mxchat_activation_key');
1385 - $email = get_option('mxchat_pro_email');
1386 - $domain = parse_url(home_url(), PHP_URL_HOST);
1387 -
1388 - //error_log('MxChat deactivate: License: ' . $license_key . ', Email: ' . $email . ', Domain: ' . $domain);
1389 -
1390 - if (empty($license_key) || empty($email)) {
1391 - //error_log('MxChat deactivate: No active license found');
1392 - wp_send_json_error('No active license found.');
1393 - return;
1394 - }
1395 -
1396 - // Clear local license data first
1397 - delete_option('mxchat_license_status');
1398 - delete_option('mxchat_pro_email');
1399 - delete_option('mxchat_activation_key');
1400 - delete_option('mxchat_license_error');
1401 -
1402 - //error_log('MxChat deactivate: Local data cleared');
1403 -
1404 - // Notify your website's API to properly deactivate
1405 - $response = wp_remote_post('https://mxchat.ai/mxchat-api/deactivate-license', array(
1406 - 'body' => array(
1407 - 'license_key' => $license_key,
1408 - 'email' => $email,
1409 - 'domain' => $domain
1410 - ),
1411 - 'timeout' => 15,
1412 - 'sslverify' => true
1413 - ));
1414 -
1415 - if (is_wp_error($response)) {
1416 - //error_log('MxChat deactivate: Server error - ' . $response->get_error_message());
1417 - wp_send_json_success(array(
1418 - 'message' => 'License deactivated locally. Server could not be contacted to free activation slot.',
1419 - 'server_notified' => false
1420 - ));
1421 - return;
1422 - }
1423 -
1424 - $response_body = wp_remote_retrieve_body($response);
1425 - $response_data = json_decode($response_body, true);
1426 -
1427 - //error_log('MxChat deactivate: Server response - ' . $response_body);
1428 -
1429 - if (isset($response_data['success']) && $response_data['success']) {
1430 - //error_log('MxChat deactivate: Success with server notification');
1431 - wp_send_json_success(array(
1432 - 'message' => 'License deactivated successfully. Activation slot has been freed up.',
1433 - 'server_notified' => true
1434 - ));
1435 - } else {
1436 - //error_log('MxChat deactivate: Server responded but deactivation may have failed');
1437 - wp_send_json_success(array(
1438 - 'message' => 'License deactivated locally. Please check your account dashboard to verify the activation was freed.',
1439 - 'server_notified' => false
1440 - ));
1441 - }
1442 -}
1443 553
1444 -
1445 554 // ========================================
1446 555 // ACTIONS & INTENTS AJAX HANDLERS
1447 556 // ========================================
1448 557
@@ -1552,238 +661,33 @@
1552 661 return 'mxchat_license_nonce';
1553 662 }
1554 663
1555 664 /**
1556 - * Check API key status for all providers
665 + * Checks if a value has changed from old to new
1557 666 */
1558 - public function mxchat_check_api_keys() {
1559 - // Check nonce
1560 - if (!wp_verify_nonce($_POST['nonce'] ?? '', 'mxchat_save_setting_nonce')) {
1561 - wp_send_json_error('Invalid nonce');
1562 - }
667 + private function mxchat_has_value_changed($old_value, $new_value) {
668 + // Handle null values
669 + if ($old_value === null && $new_value === '') {
670 + return false;
671 + }
1563 672
1564 - // Check permissions
1565 - if (!current_user_can('manage_options')) {
1566 - wp_send_json_error('Unauthorized');
1567 - }
673 + // Handle array values (like additional_popular_questions)
674 + if (is_array($old_value) && is_array($new_value)) {
675 + // Convert both to JSON for comparison to handle ordering differences
676 + return json_encode($old_value) !== json_encode($new_value);
677 + }
1568 678
1569 - // Get current options
1570 - $options = get_option('mxchat_options', array());
679 + // Handle toggle/checkbox values consistently
680 + if (in_array($old_value, ['on', '1', 1, true]) && in_array($new_value, ['on', '1', 1, true])) {
681 + return false;
682 + }
683 + if (in_array($old_value, ['off', '0', 0, false, '']) && in_array($new_value, ['off', '0', 0, false, ''])) {
684 + return false;
685 + }
1571 686
1572 - // Check which API keys are present
1573 - $api_key_status = array(
1574 - 'openai' => !empty($options['api_key']),
1575 - 'claude' => !empty($options['claude_api_key']),
1576 - 'xai' => !empty($options['xai_api_key']),
1577 - 'deepseek' => !empty($options['deepseek_api_key']),
1578 - 'gemini' => !empty($options['gemini_api_key']),
1579 - 'openrouter' => !empty($options['openrouter_api_key']),
1580 - 'voyage' => !empty($options['voyage_api_key'])
1581 - );
1582 -
1583 - wp_send_json_success($api_key_status);
1584 - }
1585 -
1586 - // ========================================
1587 - // DEBUG & OPTIMIZATION AJAX HANDLERS
1588 - // ========================================
1589 -
1590 - /**
1591 - * Toggle debug mode on/off
1592 - */
1593 - public function mxchat_toggle_debug_mode_callback() {
1594 - // Verify nonce
1595 - if ( ! check_ajax_referer( 'mxchat_save_setting_nonce', '_ajax_nonce', false ) ) {
1596 - wp_send_json_error( array( 'message' => esc_html__( 'Security check failed', 'mxchat' ) ) );
1597 - }
1598 -
1599 - // Check permissions
1600 - if ( ! current_user_can( 'manage_options' ) ) {
1601 - wp_send_json_error( array( 'message' => esc_html__( 'Unauthorized', 'mxchat' ) ) );
1602 - }
1603 -
1604 - $enabled = isset( $_POST['enabled'] ) && $_POST['enabled'] === 'on';
1605 -
1606 - $options = get_option( 'mxchat_options', array() );
1607 -
1608 - if ( $enabled ) {
1609 - $options['debug_mode'] = 'on';
1610 - update_option( 'mxchat_options', $options );
1611 - MxChat_Admin::mxchat_log_debug( 'debug_mode', 'Debug mode enabled' );
1612 - } else {
1613 - // Log before disabling
1614 - MxChat_Admin::mxchat_log_debug( 'debug_mode', 'Debug mode disabled' );
1615 - $options['debug_mode'] = 'off';
1616 - update_option( 'mxchat_options', $options );
1617 - }
1618 -
1619 - wp_send_json_success( array(
1620 - 'message' => $enabled ? esc_html__( 'Debug mode enabled', 'mxchat' ) : esc_html__( 'Debug mode disabled', 'mxchat' ),
1621 - 'enabled' => $enabled,
1622 - ) );
1623 - }
1624 -
1625 - /**
1626 - * Get the debug log entries
1627 - */
1628 - public function mxchat_get_debug_log_callback() {
1629 - // Verify nonce
1630 - if ( ! check_ajax_referer( 'mxchat_save_setting_nonce', '_ajax_nonce', false ) ) {
1631 - wp_send_json_error( array( 'message' => esc_html__( 'Security check failed', 'mxchat' ) ) );
1632 - }
1633 -
1634 - // Check permissions
1635 - if ( ! current_user_can( 'manage_options' ) ) {
1636 - wp_send_json_error( array( 'message' => esc_html__( 'Unauthorized', 'mxchat' ) ) );
1637 - }
1638 -
1639 - $log = MxChat_Admin::mxchat_get_debug_log();
1640 -
1641 - wp_send_json_success( array(
1642 - 'log' => $log,
1643 - 'count' => count( $log ),
1644 - ) );
1645 - }
1646 -
1647 - /**
1648 - * Clear the debug log
1649 - */
1650 - public function mxchat_clear_debug_log_callback() {
1651 - // Verify nonce
1652 - if ( ! check_ajax_referer( 'mxchat_save_setting_nonce', '_ajax_nonce', false ) ) {
1653 - wp_send_json_error( array( 'message' => esc_html__( 'Security check failed', 'mxchat' ) ) );
1654 - }
1655 -
1656 - // Check permissions
1657 - if ( ! current_user_can( 'manage_options' ) ) {
1658 - wp_send_json_error( array( 'message' => esc_html__( 'Unauthorized', 'mxchat' ) ) );
1659 - }
1660 -
1661 - MxChat_Admin::mxchat_clear_debug_log();
1662 -
1663 - // Log that the log was cleared (this will be the first entry in the new log)
1664 - MxChat_Admin::mxchat_log_debug( 'debug_log', 'Debug log cleared by user' );
1665 -
1666 - wp_send_json_success( array( 'message' => esc_html__( 'Debug log cleared', 'mxchat' ) ) );
1667 - }
1668 -
1669 - /**
1670 - * Export settings as JSON
1671 - */
1672 - public function mxchat_export_settings_callback() {
1673 - // Verify nonce
1674 - if ( ! check_ajax_referer( 'mxchat_save_setting_nonce', '_ajax_nonce', false ) ) {
1675 - wp_send_json_error( array( 'message' => esc_html__( 'Security check failed', 'mxchat' ) ) );
1676 - }
1677 -
1678 - // Check permissions
1679 - if ( ! current_user_can( 'manage_options' ) ) {
1680 - wp_send_json_error( array( 'message' => esc_html__( 'Unauthorized', 'mxchat' ) ) );
1681 - }
1682 -
1683 - $export = MxChat_Admin::mxchat_export_settings();
1684 -
1685 - // Log the export
1686 - MxChat_Admin::mxchat_log_debug( 'settings_export', 'Settings exported by user' );
1687 -
1688 - wp_send_json_success( array(
1689 - 'settings' => $export,
1690 - 'filename' => 'mxchat-settings-' . gmdate( 'Y-m-d-His' ) . '.json',
1691 - ) );
1692 - }
1693 -
1694 - /**
1695 - * Reset all settings to defaults
1696 - */
1697 - public function mxchat_reset_all_settings_callback() {
1698 - // Verify nonce
1699 - if ( ! check_ajax_referer( 'mxchat_save_setting_nonce', '_ajax_nonce', false ) ) {
1700 - wp_send_json_error( array( 'message' => esc_html__( 'Security check failed', 'mxchat' ) ) );
1701 - }
1702 -
1703 - // Check permissions
1704 - if ( ! current_user_can( 'manage_options' ) ) {
1705 - wp_send_json_error( array( 'message' => esc_html__( 'Unauthorized', 'mxchat' ) ) );
1706 - }
1707 -
1708 - // Require confirmation code
1709 - $confirmation = isset( $_POST['confirmation'] ) ? sanitize_text_field( wp_unslash( $_POST['confirmation'] ) ) : '';
1710 -
1711 - if ( strtoupper( $confirmation ) !== 'RESET' ) {
1712 - wp_send_json_error( array( 'message' => esc_html__( 'Invalid confirmation code. Please type RESET to confirm.', 'mxchat' ) ) );
1713 - }
1714 -
1715 - // Perform the reset
1716 - MxChat_Admin::mxchat_reset_all_settings();
1717 -
1718 - wp_send_json_success( array( 'message' => esc_html__( 'All settings have been reset to defaults. The page will reload.', 'mxchat' ) ) );
1719 - }
1720 -
1721 - /**
1722 - * Reset the global rate-limit usage counter to zero on demand.
1723 - *
1724 - * Zeroes the WP option mxchat_chat_limit_<bot>_global that the integrator
1725 - * increments per message, then returns a freshly-formatted readout string
1726 - * so the settings page can update without a reload. Does NOT change any
1727 - * enforcement config — purely clears the running counter.
1728 - */
1729 - public function mxchat_reset_global_rate_limit_callback() {
1730 - // Verify nonce
1731 - if ( ! check_ajax_referer( 'mxchat_reset_global_usage', '_ajax_nonce', false ) ) {
1732 - wp_send_json_error( array( 'message' => esc_html__( 'Security check failed', 'mxchat' ) ) );
1733 - }
1734 -
1735 - // Check permissions
1736 - if ( ! current_user_can( 'manage_options' ) ) {
1737 - wp_send_json_error( array( 'message' => esc_html__( 'Unauthorized', 'mxchat' ) ) );
1738 - }
1739 -
1740 - // Resolve the per-bot counter key the same way the integrator does.
1741 - $bot_id = isset( $_POST['bot_id'] ) ? sanitize_key( wp_unslash( $_POST['bot_id'] ) ) : 'default';
1742 - $safe_bot = preg_replace( '/[^a-zA-Z0-9_]/', '_', $bot_id );
1743 - if ( $safe_bot === '' ) {
1744 - $safe_bot = 'default';
1745 - }
1746 - $option_key = 'mxchat_chat_limit_' . $safe_bot . '_global';
1747 -
1748 - $now = time();
1749 - update_option( $option_key, array( 'count' => 0, 'timestamp' => $now ) );
1750 -
1751 - // Recompute the display string so the front-end can update in place.
1752 - $all_options = get_option( 'mxchat_options', array() );
1753 - $global_cfg = isset( $all_options['rate_limits_global'] ) && is_array( $all_options['rate_limits_global'] )
1754 - ? $all_options['rate_limits_global']
1755 - : array();
1756 - $limit_raw = isset( $global_cfg['limit'] ) ? (string) $global_cfg['limit'] : 'unlimited';
1757 - // Defensive: if a raw __custom__ ever slips through, fall back to the custom value.
1758 - if ( ! ctype_digit( $limit_raw ) && isset( $global_cfg['limit_custom'] ) && ctype_digit( (string) $global_cfg['limit_custom'] ) ) {
1759 - $limit_raw = (string) $global_cfg['limit_custom'];
1760 - }
1761 - $timeframe = isset( $global_cfg['timeframe'] ) ? (string) $global_cfg['timeframe'] : 'daily';
1762 - $windows = array( 'hourly' => 3600, 'daily' => 86400, 'weekly' => 604800, 'monthly' => 2592000 );
1763 - $window = isset( $windows[ $timeframe ] ) ? $windows[ $timeframe ] : 86400;
1764 - $reset_at = $now + $window;
1765 - $limit_int = ctype_digit( $limit_raw ) ? (int) $limit_raw : 0;
1766 -
1767 - $text = sprintf(
1768 - /* translators: 1: used count, 2: limit, 3: remaining, 4: human-readable time until reset */
1769 - esc_html__( '%1$s of %2$s used · %3$s left · resets in %4$s', 'mxchat' ),
1770 - number_format_i18n( 0 ),
1771 - number_format_i18n( $limit_int ),
1772 - number_format_i18n( $limit_int ),
1773 - human_time_diff( $now, $reset_at )
1774 - );
1775 -
1776 - wp_send_json_success( array(
1777 - 'count' => 0,
1778 - 'limit' => $limit_int,
1779 - 'left' => $limit_int,
1780 - 'reset_at' => $reset_at,
1781 - 'pct' => 0,
1782 - 'text' => $text,
1783 - 'message' => esc_html__( 'Usage counter reset.', 'mxchat' ),
1784 - ) );
1785 - }
687 + // Default direct comparison
688 + return $old_value !== $new_value;
689 + }
1786 690
1787 691 }
1788 692
1789 693 // Initialize the AJAX handler