| @@ -1,27 +1,27 @@ | ||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | 3 | /** |
| 4 | - * A fully static class to manage strings translations on admin side | |
| 4 | + * a fully static class to manage strings translations on admin side | |
| 5 | 5 | * |
| 6 | 6 | * @since 1.6 |
| 7 | 7 | */ |
| 8 | 8 | class PLL_Admin_Strings { |
| 9 | - protected static $strings = array(); // strings to translate | |
| 10 | - protected static $default_strings; // default strings to register | |
| 9 | + static protected $strings = array(); // strings to translate | |
| 10 | + static protected $default_strings; // default strings to register | |
| 11 | 11 | |
| 12 | 12 | /** |
| 13 | - * Add filters | |
| 13 | + * init: add filters | |
| 14 | 14 | * |
| 15 | 15 | * @since 1.6 |
| 16 | 16 | */ |
| 17 | - public static function init() { | |
| 17 | + static public function init() { | |
| 18 | 18 | // default strings translations sanitization |
| 19 | 19 | add_filter( 'pll_sanitize_string_translation', array( __CLASS__, 'sanitize_string_translation' ), 10, 2 ); |
| 20 | 20 | } |
| 21 | 21 | |
| 22 | 22 | /** |
| 23 | - * Register strings for translation making sure it is not duplicate or empty | |
| 23 | + * register strings for translation making sure it is not duplicate or empty | |
| 24 | 24 | * |
| 25 | 25 | * @since 0.6 |
| 26 | 26 | * |
| 27 | 27 | * @param string $name A unique name for the string |
| @@ -28,10 +28,10 @@ | ||
| 28 | 28 | * @param string $string The string to register |
| 29 | 29 | * @param string $context Optional, the group in which the string is registered, defaults to 'polylang' |
| 30 | 30 | * @param bool $multiline Optional, whether the string table should display a multiline textarea or a single line input, defaults to single line |
| 31 | 31 | */ |
| 32 | - public static function register_string( $name, $string, $context = 'Polylang', $multiline = false ) { | |
| 33 | - // Backward compatibility with Polylang older than 1.1 | |
| 32 | + static public function register_string( $name, $string, $context = 'Polylang', $multiline = false ) { | |
| 33 | + // backward compatibility with Polylang older than 1.1 | |
| 34 | 34 | if ( is_bool( $context ) ) { |
| 35 | 35 | $multiline = $context; |
| 36 | 36 | $context = 'Polylang'; |
| 37 | 37 | } |
| @@ -41,21 +41,21 @@ | ||
| 41 | 41 | } |
| 42 | 42 | } |
| 43 | 43 | |
| 44 | 44 | /** |
| 45 | - * Get registered strings | |
| 45 | + * get registered strings | |
| 46 | 46 | * |
| 47 | 47 | * @since 0.6.1 |
| 48 | 48 | * |
| 49 | 49 | * @return array list of all registered strings |
| 50 | 50 | */ |
| 51 | - public static function &get_strings() { | |
| 51 | + static public function &get_strings() { | |
| 52 | 52 | self::$default_strings = array( |
| 53 | 53 | 'options' => array( |
| 54 | - 'blogname' => __( 'Site Title', 'polylang' ), | |
| 55 | - 'blogdescription' => __( 'Tagline', 'polylang' ), | |
| 56 | - 'date_format' => __( 'Date Format', 'polylang' ), | |
| 57 | - 'time_format' => __( 'Time Format', 'polylang' ), | |
| 54 | + 'blogname' => __( 'Site Title' ), | |
| 55 | + 'blogdescription' => __( 'Tagline' ), | |
| 56 | + 'date_format' => __( 'Date Format' ), | |
| 57 | + 'time_format' => __( 'Time Format' ), | |
| 58 | 58 | ), |
| 59 | 59 | 'widget_title' => __( 'Widget title', 'polylang' ), |
| 60 | 60 | 'widget_text' => __( 'Widget text', 'polylang' ), |
| 61 | 61 | ); |
| @@ -64,9 +64,9 @@ | ||
| 64 | 64 | foreach ( self::$default_strings['options'] as $option => $string ) { |
| 65 | 65 | self::register_string( $string, get_option( $option ), 'WordPress' ); |
| 66 | 66 | } |
| 67 | 67 | |
| 68 | - // Widgets titles | |
| 68 | + // widgets titles | |
| 69 | 69 | global $wp_registered_widgets; |
| 70 | 70 | $sidebars = wp_get_sidebars_widgets(); |
| 71 | 71 | foreach ( $sidebars as $sidebar => $widgets ) { |
| 72 | 72 | if ( 'wp_inactive_widgets' == $sidebar || empty( $widgets ) ) { |
| @@ -73,10 +73,10 @@ | ||
| 73 | 73 | continue; |
| 74 | 74 | } |
| 75 | 75 | |
| 76 | 76 | foreach ( $widgets as $widget ) { |
| 77 | - // Nothing can be done if the widget is created using pre WP2.8 API :( | |
| 78 | - // There is no object, so we can't access it to get the widget options | |
| 77 | + // nothing can be done if the widget is created using pre WP2.8 API :( | |
| 78 | + // there is no object, so we can't access it to get the widget options | |
| 79 | 79 | if ( ! isset( $wp_registered_widgets[ $widget ]['callback'][0] ) || ! is_object( $wp_registered_widgets[ $widget ]['callback'][0] ) || ! method_exists( $wp_registered_widgets[ $widget ]['callback'][0], 'get_settings' ) ) { |
| 80 | 80 | continue; |
| 81 | 81 | } |
| 82 | 82 | |
| @@ -82,9 +82,9 @@ | ||
| 82 | 82 | |
| 83 | 83 | $widget_settings = $wp_registered_widgets[ $widget ]['callback'][0]->get_settings(); |
| 84 | 84 | $number = $wp_registered_widgets[ $widget ]['params'][0]['number']; |
| 85 | 85 | |
| 86 | - // Don't enable widget translation if the widget is visible in only one language or if there is no title | |
| 86 | + // don't enable widget translation if the widget is visible in only one language or if there is no title | |
| 87 | 87 | if ( empty( $widget_settings[ $number ]['pll_lang'] ) ) { |
| 88 | 88 | if ( isset( $widget_settings[ $number ]['title'] ) && $title = $widget_settings[ $number ]['title'] ) { |
| 89 | 89 | self::register_string( self::$default_strings['widget_title'], $title, 'Widget' ); |
| 90 | 90 | } |
| @@ -108,9 +108,9 @@ | ||
| 108 | 108 | return self::$strings; |
| 109 | 109 | } |
| 110 | 110 | |
| 111 | 111 | /** |
| 112 | - * Performs the sanitization ( before saving in DB ) of default strings translations | |
| 112 | + * performs the sanitization ( before saving in DB ) of default strings translations | |
| 113 | 113 | * |
| 114 | 114 | * @since 1.6 |
| 115 | 115 | * |
| 116 | 116 | * @param string $translation translation to sanitize |
| @@ -116,9 +116,10 @@ | ||
| 116 | 116 | * @param string $translation translation to sanitize |
| 117 | 117 | * @param string $name unique name for the string |
| 118 | 118 | * @return string |
| 119 | 119 | */ |
| 120 | - public static function sanitize_string_translation( $translation, $name ) { | |
| 120 | + static public function sanitize_string_translation( $translation, $name ) { | |
| 121 | + $translation = wp_unslash( trim( $translation ) ); | |
| 121 | 122 | |
| 122 | 123 | if ( false !== ( $option = array_search( $name, self::$default_strings['options'], true ) ) ) { |
| 123 | 124 | $translation = sanitize_option( $option, $translation ); |
| 124 | 125 | } |
| @@ -123,13 +124,13 @@ | ||
| 123 | 124 | $translation = sanitize_option( $option, $translation ); |
| 124 | 125 | } |
| 125 | 126 | |
| 126 | 127 | if ( $name == self::$default_strings['widget_title'] ) { |
| 127 | - $translation = sanitize_text_field( $translation ); | |
| 128 | + $translation = strip_tags( $translation ); | |
| 128 | 129 | } |
| 129 | 130 | |
| 130 | 131 | if ( $name == self::$default_strings['widget_text'] && ! current_user_can( 'unfiltered_html' ) ) { |
| 131 | - $translation = wp_kses_post( $translation ); | |
| 132 | + $translation = wp_unslash( wp_filter_post_kses( addslashes( $translation ) ) ); // wp_filter_post_kses() expects slashed | |
| 132 | 133 | } |
| 133 | 134 | |
| 134 | 135 | return $translation; |
| 135 | 136 | } |
