# photonic/3.37/Admin/Admin.php

Photonic Gallery & Lightbox for Flickr, SmugMug & Others, version 3.37. 417 lines.

- Page: https://pluginprobe.com/plugins/photonic/3.37/code/Admin/Admin.php
- Raw: https://pluginprobe.com/plugins/photonic/3.37/raw/Admin/Admin.php
- Modified: 2026-07-10T18:22:50+00:00

Line numbers below start at 1. Link to a line or a range by appending a fragment to the
page URL, for example `https://pluginprobe.com/plugins/photonic/3.37/code/Admin/Admin.php#L10-L20`.

```php
<?php

namespace Photonic_Plugin\Admin;

use Photonic_Plugin\Admin\Wizard\Wizard;
use Photonic_Plugin\Core\Photonic;
use Photonic_Plugin\Platforms\SmugMug;

class Admin {
	public function __construct() {
		global $photonic_disable_flow_editor_global;

		// General
		add_action('admin_head', [$this, 'admin_head']);
		add_action('admin_enqueue_scripts', [&$this, 'add_admin_scripts']);

		// Vanilla Editor
		add_filter('media_upload_tabs', [&$this, 'media_upload_tabs']);
		add_action('media_upload_photonic', [&$this, 'media_upload_photonic']);

		add_action('print_media_templates', [&$this, 'edit_gallery']);

		// Gutenberg
		add_action('enqueue_block_editor_assets', [&$this, 'enqueue_gutenberg_assets']);
		add_action('enqueue_block_assets', [&$this, 'enqueue_fse_assets']); // Site Editor; without this, the block doesn't work on the FSE Site Editor

		if (empty($photonic_disable_flow_editor_global)) {
			add_action('media_buttons', [&$this, 'add_photonic_button']);
			add_action('admin_action_photonic_wizard', [&$this, 'open_wizard']);
			add_action('wp_ajax_photonic_wizard_next_screen', [&$this, 'wizard_next_screen']);
			add_action('wp_ajax_photonic_wizard_more', [&$this, 'flow_more']);
		}
	}

	public function admin_head() {
		// check user permissions
		if (!current_user_can('edit_posts') && !current_user_can('edit_pages')) {
			return;
		}

		global $photonic_disable_editor, $photonic_disable_editor_post_type;
		$disabled_types = explode(',', esc_attr($photonic_disable_editor_post_type));
		$screen = get_current_screen();

		// check if WYSIWYG is enabled
		if (user_can_richedit() && empty($photonic_disable_editor) && !in_array($_REQUEST['post_type'] ?? 'post', $disabled_types, true) && 'post' === $screen->base) { // phpcs:ignore WordPress.Security.NonceVerification
			$this->prepare_mce_data();
			add_filter('mce_external_plugins', [$this, 'mce_photonic'], 5);
			add_filter('mce_buttons', [$this, 'mce_flow_button'], 5);
		}
	}

	public function add_photonic_button() {
		add_thickbox();
		$url = $this->get_wizard_modal_url();

		printf(
			'<a href="%1$s" class="button photonic-button thickbox" id="photonic-add-gallery" title="Photonic Gallery"><img class="wp-media-buttons-icon" src="' . esc_url(PHOTONIC_URL) . 'include/images/Photonic-20.png" alt="%2$s" /> %2$s</a>',
			esc_url($url),
			esc_html__('Add / Edit Photonic Gallery', 'photonic')
		);
	}

	public function open_wizard() {
		define('IFRAME_REQUEST', true); // phpcs:ignore WordPress.NamingConventions.PrefixAllGlobals
		$this->enqueue_wizard_scripts();
		iframe_header(esc_html__('Add / Edit Photonic Gallery', 'photonic'));
		require_once PHOTONIC_PATH . '/Admin/Wizard/Screen_Flow.php';
		iframe_footer();
		exit;
	}

	public function enqueue_wizard_scripts() {
		if (current_user_can('edit_posts') && isset($_REQUEST['nonce']) && wp_verify_nonce(sanitize_text_field(wp_unslash($_REQUEST['nonce'])), 'photonic-wizard-' . get_current_user_id())) {
			global $photonic_alternative_shortcode, $photonic_debug_on;
			$safe_origin = '';
			$url_parts = wp_parse_url(home_url());
			$safe_origin_scheme = $url_parts['scheme'] ?? '';
			$safe_origin_separator = empty($safe_origin_scheme) ? '' : '://';
			$safe_origin_port = empty($url_parts['port']) ? '' : ':' . $url_parts['port'];
			$safe_origin .= $safe_origin_scheme . $safe_origin_separator . $url_parts['host'] . $safe_origin_port;
			$wizard_js = [
				'ajaxurl'                      => admin_url('admin-ajax.php'),
				'shortcode'                    => sanitize_text_field($photonic_alternative_shortcode ?: 'gallery'),
				'insert_gallery'               => esc_html__('Insert Gallery', 'photonic'),
				'update_gallery'               => esc_html__('Update Gallery', 'photonic'),
				'error_mandatory'              => esc_html__('Please fill the mandatory fields. Mandatory fields are marked with a red "*".', 'photonic'),
				'media_library_title'          => esc_html__('Select from WordPress Media Library', 'photonic'),
				'media_library_button'         => esc_html__('Select', 'photonic'),
				'info_editor_not_shortcode'    => esc_html__('The text selected in the editor is not a Photonic shortcode. Creating a new shortcode.', 'photonic'),
				'info_editor_google_shortcode' => esc_html__('The text selected in the editor is Photonic shortcode for Google Photos. With effect from April 2025, Google Photos is no longer supported. Creating a new shortcode.', 'photonic'),
				/* Translators: 1: Open HTML tag 2: Close HTML tag */
				'info_editor_block_select'     => sprintf(esc_html__('%1$sHint:%2$s To edit an existing Photonic block simply click on the block.', 'photonic'), '<strong>', '</strong>'),
				'safe_origin'                  => $safe_origin,
				'debug_on'                     => !empty($photonic_debug_on),
			];
			if (!empty($_REQUEST['shortcode'])) {
				$wizard_js['shortcode'] = sanitize_text_field($_REQUEST['shortcode']);
			}
			wp_enqueue_style('photonic-flow', PHOTONIC_URL . 'include/css/admin/admin-flow.css', [], Photonic::get_version(PHOTONIC_PATH . '/include/css/admin/admin-flow.css'));
			wp_enqueue_script('photonic-flow-js', PHOTONIC_URL . 'include/js/admin/wizard.js', ['jquery'], Photonic::get_version(PHOTONIC_PATH . '/include/js/admin/wizard.js'), false);
			wp_localize_script('photonic-flow-js', 'Photonic_Wizard_JS', $wizard_js);
		}
	}

	public function wizard_next_screen() {
		if (check_ajax_referer('photonic-wizard-next-' . get_current_user_id())) {
			require_once PHOTONIC_PATH . '/Admin/Wizard/Wizard.php';
			if (isset($_POST['provider'])) {
				$safe_tags = array_merge_recursive(
					[
						'form' => [
							'id' => true,
							'class' => true,
							'name' => true,
							'data-photonic-submission' => true,
							'data-photonic-submission-pending' => true,
						],

						'input'  => [
							'type' => true,
							'id' => true,
							'name' => true,
							'value' => true,
							'checked' => true,
							'class' => true,
							'data-photonic-option-condition' => true,
						],

						'label' => [
							'class' => true,
							'for' => true,
						],

						'select' => [
							'name' => true,
							'id' => true,
							'class' => true,
							'aria-describedby' => true,
						],

						'option' => [
							'value' => true,
							'selected' => true,
							'data-photonic-option-condition' => true,
						],

						// Custom data attributes
						'div' => [
							'data-current-screen' => true,

							'data-photonic-flow-selector-for' => true,
							'data-photonic-flow-selector-mode' => true,

							'data-photonic-condition' => true,
							'data-photonic-flow-sequence' => true,
							'data-photonic-flow-sequence-group' => true,

							'data-photonic-flow-selection-id' => true,
							'data-photonic-selection-alt-id' => true,
							'data-photonic-selection-alt-id-2' => true,
						],

						'span' => [
							'data-photonic-selection-id' => true,
						],

						'ol' => [
							'data-photonic-date-filter' => true,
							'data-photonic-filter-count' => true,
							'data-photonic-date-range-filter' => true,
						],

						'a' => [
							'data-photonic-add-date' => true,
							'data-photonic-mark-for' => true,
							'data-photonic-more-link' => true,
							'data-photonic-display-type' => true,
							'data-photonic-provider' => true,
							'data-photonic-nonce' => true,
						]
					],
					wp_kses_allowed_html('post')
				);

				$wizard = new Wizard();
				// echo $wizard->get_screen(); // Cannot escape ... has form and JS markup; individual parts are escaped as appropriate.
				echo wp_kses($wizard->get_screen(), $safe_tags); // Cannot escape ... has form and JS markup; individual parts are escaped as appropriate.
			}
		}
		die();
	}

	public function flow_more() {
		if (check_ajax_referer('photonic-wizard-more-' . get_current_user_id())) {
			require_once PHOTONIC_PATH . '/Admin/Wizard/Wizard.php';
			if (isset($_POST['url']) && isset($_POST['provider']) && isset($_POST['display_type'])) {
				$url = base64_decode(sanitize_text_field($_POST['url'])); // The `url` for fetching additional results is base64-encoded in the wizard in wizard.js using `btoa`

				$provider = sanitize_text_field($_POST['provider']);
				$display_type = sanitize_text_field($_POST['display_type']);
				$existing = [];
				if (!empty($_POST['filter'])) {
					$existing['selected_data'] = sanitize_text_field($_POST['filter']);
				}
				$args = ['sslverify' => PHOTONIC_SSL_VERIFY];
				if ('smugmug' === $provider) {
					require_once PHOTONIC_PATH . '/Platforms/SmugMug.php';
					$gallery = SmugMug::get_instance();

					$body = [
						'APIKey'        => $gallery->api_key,
						'_accept'       => 'application/json',
						'_expandmethod' => 'inline',
						'_verbosity'    => '1',
					];

					if ('album-photo' === $display_type || 'multi-album' === $display_type) {
						$body['_expand'] = 'HighlightImage.ImageSizes';
					}

					$args['body'] = $body;
				}

				// URL has come via base64, so we will check that it is directing to a whitelist of hosts...
				$url_parts = wp_parse_url($url);
				if (in_array($url_parts['host'], Wizard::base_apis(), true)) {
					$response = wp_remote_request($url, $args);
					$wizard = new Wizard();
					$objects = $wizard->process_response($response, $provider, $display_type, [], $existing, $url, true);

					if (!empty($objects['success'])) {
						echo wp_kses_post($objects['success']);
					}
					elseif (!empty($objects['error'])) {
						if ($objects['error'] !== $wizard->error_no_data_returned) { // Typically happens if there is a "next token" without corresponding data
							echo wp_kses_post($objects['error']);
						}
					}
				}
			}
		}
		die();
	}

	/**
	 * Adds all scripts and their dependencies to the <head> of the Photonic administration page. This takes care to not add scripts on other admin pages.
	 *
	 * @param $hook
	 * @return void
	 */
	public function add_admin_scripts($hook) {
		if ('media-upload-popup' === $hook) {
			wp_enqueue_script('jquery');
			wp_enqueue_style('photonic-upload', PHOTONIC_URL . 'include/css/admin/admin-form.css', [], Photonic::get_version(PHOTONIC_PATH . '/include/css/admin/admin-form.css'));
		}
		elseif ('post-new.php' === $hook || 'post.php' === $hook) {
			global $photonic_disable_editor, $photonic_disable_editor_post_type, $photonic_alternative_shortcode;
			$disabled_types = explode(',', $photonic_disable_editor_post_type);
			wp_enqueue_style('photonic-upload', PHOTONIC_URL . 'include/css/admin/admin-form.css', [], Photonic::get_version(PHOTONIC_PATH . '/include/css/admin/admin-form.css'));
			wp_enqueue_script('photonic-native-ui', PHOTONIC_URL . 'include/js/admin/native-ui.js', ['shortcode', 'thickbox'], Photonic::get_version(PHOTONIC_PATH . '/include/js/admin/native-ui.js'), false);
			wp_enqueue_script('photonic-editor', PHOTONIC_URL . 'include/js/admin/editor.js', ['photonic-native-ui'], Photonic::get_version(PHOTONIC_PATH . '/include/js/admin/editor.js'), false);
			$editor_js = [
				'shortcode' => sanitize_text_field($photonic_alternative_shortcode ?: 'gallery'),
			];
			wp_localize_script('photonic-editor', 'Photonic_Editor_JS', $editor_js);

			if (empty($photonic_disable_editor) && !in_array($_REQUEST['post_type'] ?? 'post', $disabled_types, true)) { // phpcs:ignore WordPress.Security.NonceVerification
				$this->prepare_mce_data();

				add_editor_style(PHOTONIC_URL . 'include/css/admin/admin-editor.css?' . Photonic::get_version(PHOTONIC_PATH . '/include/css/admin/admin-editor.css'));
			}
		}
		elseif ('widgets.php' === $hook) {
			Photonic::enqueue_widget_scripts();
		}
	}

	public function prepare_mce_data() {
		$url = $this->get_wizard_modal_url();
		$js_array = $this->get_wizard_js_parameters($url);

		wp_enqueue_script('photonic-admin-js', PHOTONIC_URL . 'include/js/admin/gallery-settings.js', ['jquery', 'media-views', 'media-upload'], Photonic::get_version(PHOTONIC_PATH . '/include/js/admin/gallery-settings.js'), false);
		wp_localize_script('photonic-admin-js', 'Photonic_Admin_JS', $js_array);
	}

	public function mce_photonic($plugin_array) {
		$plugin_array['photonic'] = PHOTONIC_URL . 'include/js/admin/mce.js?' . Photonic::get_version(PHOTONIC_PATH . '/include/js/admin/mce.js');
		return $plugin_array;
	}

	public function mce_flow_button($buttons) {
		array_push($buttons, 'photonic_wizard');
		return $buttons;
	}

	public function enqueue_gutenberg_assets() {
		wp_enqueue_script('photonic-native-ui', PHOTONIC_URL . 'include/js/admin/native-ui.js', ['shortcode', 'thickbox'], Photonic::get_version(PHOTONIC_PATH . '/include/js/admin/native-ui.js'), false);
		wp_enqueue_script(
			'photonic-gutenberg',
			PHOTONIC_URL . 'include/js/admin/block.js',
			['wp-blocks', 'wp-i18n', 'wp-element', 'shortcode', 'thickbox', 'photonic-native-ui'],
			Photonic::get_version(PHOTONIC_PATH . '/include/js/admin/block.js'),
			false
		);

		wp_set_script_translations('photonic-gutenberg', 'photonic');

		$url = $this->get_wizard_modal_url();
		$js_array = $this->get_wizard_js_parameters($url);
		wp_localize_script('photonic-gutenberg', 'Photonic_Gutenberg_JS', $js_array);

		wp_enqueue_style(
			'photonic-gutenberg',
			PHOTONIC_URL . 'include/css/admin/admin-block.css',
			['thickbox'],
			Photonic::get_version(PHOTONIC_PATH . '/include/css/admin/admin-block.css')
		);
	}

	public function enqueue_fse_assets() {
		if (is_admin()) {
			wp_enqueue_style(
				'photonic-gutenberg',
				PHOTONIC_URL . 'include/css/admin/admin-block.css',
				['thickbox'],
				Photonic::get_version(PHOTONIC_PATH . '/include/css/admin/admin-block.css')
			);
		}
	}

	/**
	 * Adds a "Photonic" tab to the "Add Media" panel.
	 *
	 * @param $tabs
	 * @return array
	 */
	public function media_upload_tabs($tabs): array {
		$current_screen = get_current_screen();
		if (!empty($current_screen) && $current_screen->is_block_editor()) {
			$tabs['photonic'] = 'Photonic';
		}
		return $tabs;
	}

	/**
	 * Invokes the form to display the photonic insertion screen in the "Add Media" panel. The call to wp_iframe ensures that the right CSS and JS are called.
	 *
	 * @return void
	 */
	public function media_upload_photonic() {
		wp_iframe([&$this, 'media_upload_photonic_form']);
	}

	/**
	 * First prints the standard buttons for media upload, then shows the UI for Photonic.
	 *
	 * @return void
	 */
	public function media_upload_photonic_form() {
		media_upload_header();
		require_once PHOTONIC_PATH . '/Admin/Forms/Add_Gallery.php';
	}

	public function edit_gallery() {
		global $photonic_disable_editor, $photonic_disable_editor_post_type;
		$disabled_types = explode(',', $photonic_disable_editor_post_type);
		// check if WYSIWYG is enabled
		if (user_can_richedit() && empty($photonic_disable_editor) && !in_array($_REQUEST['post_type'] ?? 'post', $disabled_types, true)) { // phpcs:ignore WordPress.Security.NonceVerification
			require_once PHOTONIC_PATH . '/Admin/Forms/Edit_Gallery_Templates.php';
		}
	}

	/**
	 * @return string
	 */
	private function get_wizard_modal_url(): string {
		$user = get_current_user_id();
		if (0 === $user) {
			$user = wp_rand(1);
		}

		$post = empty($_REQUEST['post']) ? '' : sanitize_text_field($_REQUEST['post']); // phpcs:ignore WordPress.Security.NonceVerification

		return add_query_arg(
			[
				'action'    => 'photonic_wizard',
				'class'     => 'photonic-flow',
				'post_id'   => $post,
				'nonce'     => wp_create_nonce('photonic-wizard-' . $user),
				'width'     => '1000',
				'height'    => '600',
				'TB_iframe' => 'true',
			],
			admin_url('admin.php')
		);
	}

	/**
	 * @param string $url
	 * @return array
	 */
	private function get_wizard_js_parameters($url): array {
		global $photonic_alternative_shortcode, $photonic_disable_flow_editor, $photonic_disable_flow_editor_global;
		return [
			'flow_url'             => $url,
			'ajaxurl'              => admin_url('admin-ajax.php'),
			'shortcode'            => sanitize_text_field($photonic_alternative_shortcode ?: 'gallery'),
			'disable_flow'         => !empty($photonic_disable_flow_editor) || !empty($photonic_disable_flow_editor_global),
			'default_gallery_type' => 'default',
			'plugin_dir'           => plugin_dir_url(__FILE__),
		];
	}
}

new Admin();

```