PluginProbe
Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! / 3.3.2
Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! v3.3.2
3.7.5 3.7.4 3.7.3 3.7.2 1-final 3.7.1 3.7.0 3.6.8 3.6.7 3.6.6 3.6.5 3.6.4 3.6.3 3.6.2 3.6.1 3.0.3 3.0.4 3.0.5 3.0.6 3.0.7 3.0.8 3.0.9 3.1.0 3.1.1 3.1.10 All 111 releases
← All changes | includes/Utils/Helper.php +120 -395 3.6.63.3.2 View file →
@@ -17,18 +17,8 @@
17 17 * @since 1.0.0
18 18 */
19 19 class Helper extends Base {
20 20 /**
21 - * Check if development API should be used
22 - *
23 - * @return bool True if development API should be used
24 - */
25 - public static function is_dev_api(){
26 - // Only check TEMPLATELY_DEV_API constant - no fallback mechanisms
27 - return defined( 'TEMPLATELY_DEV_API' ) && constant( 'TEMPLATELY_DEV_API' );
28 - }
29 -
30 - /**
31 21 * Get installed WordPress Plugin List
32 22 * @return array
33 23 */
34 24 public static function get_plugins() {
@@ -56,49 +46,24 @@
56 46
57 47 /**
58 48 * Collect IP from request.
59 49 *
60 - * Prefers REMOTE_ADDR since it cannot be spoofed by the client. When it is
61 - * a private/reserved address (reverse proxy, Docker bridge gateway like
62 - * 192.168.65.1, local dev), the forwarded headers are scanned for the first
63 - * public IP. If nothing public is found, the request is local: 127.0.0.1.
64 - *
65 50 * @return string
66 51 */
67 52 public static function get_ip() {
68 - $remote_addr = ! empty($_SERVER['REMOTE_ADDR']) ? sanitize_text_field($_SERVER['REMOTE_ADDR']) : '';
69 -
70 - if (self::is_public_ip($remote_addr)) {
71 - return $remote_addr;
53 + $ip = '127.0.0.1'; // Local IP
54 + if (! empty($_SERVER['HTTP_CLIENT_IP'])) {
55 + $ip = $_SERVER['HTTP_CLIENT_IP'];
56 + } elseif (! empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
57 + $ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
58 + } else {
59 + $ip = ! empty($_SERVER['REMOTE_ADDR']) ? $_SERVER['REMOTE_ADDR'] : $ip;
72 60 }
73 61
74 - foreach (['HTTP_X_FORWARDED_FOR', 'HTTP_CLIENT_IP'] as $header) {
75 - if (empty($_SERVER[$header])) {
76 - continue;
77 - }
78 - $candidates = explode(',', sanitize_text_field($_SERVER[$header]));
79 - foreach ($candidates as $candidate) {
80 - $candidate = trim($candidate);
81 - if (self::is_public_ip($candidate)) {
82 - return $candidate;
83 - }
84 - }
85 - }
86 -
87 - return '127.0.0.1';
62 + return sanitize_text_field($ip);
88 63 }
89 64
90 65 /**
91 - * Check whether a string is a valid public (non-private, non-reserved) IP.
92 - *
93 - * @param string $ip
94 - * @return bool
95 - */
96 - private static function is_public_ip($ip): bool {
97 - return (bool) filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE);
98 - }
99 -
100 - /**
101 66 * Get views for front-end display
102 67 *
103 68 * @param string $name it will be file name only from the view's folder.
104 69 * @param array $data
@@ -114,127 +79,8 @@
114 79 }
115 80 }
116 81
117 82 /**
118 - * Get API URL for Templately endpoints
119 - *
120 - * @param string $endpoint API endpoint path (e.g., 'v2/import/pack/123')
121 - * @return string Complete API URL
122 - */
123 - public static function get_api_url($endpoint): string {
124 - $base_url = self::is_dev_api() ? 'https://app.templately.dev' : 'https://app.templately.com';
125 -
126 - /**
127 - * Filter the base URL for development API
128 - *
129 - * @since 3.5.0
130 - * @param string $base_url The default base URL
131 - */
132 - $base_url = apply_filters('templately_dev_api_base_url', $base_url);
133 -
134 - return "{$base_url}/api/{$endpoint}";
135 - }
136 -
137 - /**
138 - * Make a unified API request to Templately API
139 - *
140 - * @param string $method HTTP method (GET or POST)
141 - * @param string $api_url Complete API URL
142 - * @param array $body Request body data (for POST requests)
143 - * @param array $extra_headers Additional headers beyond the standard ones
144 - * @param int $timeout Request timeout in seconds (default: 30)
145 - * @return array|WP_Error Response array or WP_Error on failure
146 - */
147 - private static function make_api_request($method, $api_url, $body = [], $extra_headers = [], $timeout = 30) {
148 - $api_key = Options::get_instance()->get('api_key');
149 -
150 - $headers = [
151 - 'Authorization' => 'Bearer ' . $api_key,
152 - 'x-templately-ip' => self::get_ip(),
153 - 'x-templately-url' => home_url('/'),
154 - 'x-templately-version' => defined( 'TEMPLATELY_VERSION' ) ? constant( 'TEMPLATELY_VERSION' ) : '1.0.0',
155 - ];
156 -
157 - // Add Content-Type for POST requests
158 - if (strtoupper($method) === 'POST') {
159 - $headers['Content-Type'] = 'application/json';
160 - }
161 -
162 - // Resolve requested platform: $_REQUEST wins (frontend-supplied), then caller's extra_headers, then default.
163 - if ( isset( $_REQUEST['requested_platform'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
164 - $extra_headers['x-templately-requested-platform'] = sanitize_text_field( wp_unslash( $_REQUEST['requested_platform'] ) );
165 - } elseif ( ! isset( $extra_headers['x-templately-requested-platform'] ) ) {
166 - $extra_headers['x-templately-requested-platform'] = 'templately';
167 - }
168 -
169 - // Merge additional headers
170 - $headers = array_merge($headers, $extra_headers);
171 -
172 - $args = [
173 - 'timeout' => $timeout,
174 - 'headers' => $headers,
175 - ];
176 -
177 - // Apply filter to allow network admin or other functionality to modify request args
178 - $args = apply_filters( 'templately_api_request_params', $args, $method, $api_url );
179 -
180 - // Add body for POST requests
181 - if (strtoupper($method) === 'POST') {
182 - $args['body'] = is_array($body) ? json_encode($body) : $body;
183 - }
184 -
185 - // Make the appropriate request
186 - if (strtoupper($method) === 'POST') {
187 - $response = wp_remote_post($api_url, $args);
188 - } else {
189 - $response = wp_remote_get($api_url, $args);
190 - }
191 -
192 - // Check for verification header in the response
193 - self::check_verification_header($response);
194 -
195 -
196 - // Check for site disconnection in response body
197 - self::check_site_disconnection($response);
198 -
199 - return $response;
200 - }
201 -
202 - /**
203 - * Make a GET request to Templately API
204 - *
205 - * @param string $endpoint API endpoint path (e.g., 'v2/import/pack/123')
206 - * @param array $query_params Query parameters as key-value pairs
207 - * @param array $extra_headers Additional headers beyond the standard ones
208 - * @param int $timeout Request timeout in seconds (default: 30)
209 - * @return array|WP_Error Response array or WP_Error on failure
210 - */
211 - public static function make_api_get_request($endpoint, $query_params = [], $extra_headers = [], $timeout = 30) {
212 - $api_url = self::get_api_url($endpoint);
213 -
214 - // Add query parameters if provided
215 - if (!empty($query_params)) {
216 - $api_url = add_query_arg($query_params, $api_url);
217 - }
218 -
219 - return self::make_api_request('GET', $api_url, [], $extra_headers, $timeout);
220 - }
221 -
222 - /**
223 - * Make a POST request to Templately API
224 - *
225 - * @param string $endpoint API endpoint path (e.g., 'v2/feedback/store')
226 - * @param array $body Request body data
227 - * @param array $extra_headers Additional headers beyond the standard ones
228 - * @param int $timeout Request timeout in seconds (default: 30)
229 - * @return array|WP_Error Response array or WP_Error on failure
230 - */
231 - public static function make_api_post_request($endpoint, $body = [], $extra_headers = [], $timeout = 30) {
232 - $api_url = self::get_api_url($endpoint);
233 - return self::make_api_request('POST', $api_url, $body, $extra_headers, $timeout);
234 - }
235 -
236 - /**
237 83 * Sanitize Helper
238 84 *
239 85 * @param mixed $value
240 86 * @param string $type
@@ -254,194 +100,8 @@
254 100 return $sanitized_value;
255 101 }
256 102
257 103 /**
258 - * Escape a string for safe embedding inside a GraphQL or JSON string literal.
259 - *
260 - * GraphQL string escaping rules are identical to JSON string escaping (per the
261 - * GraphQL spec), so wp_json_encode() is the authoritative escaper. We strip the
262 - * outer quotes it adds and return only the escaped inner content, ready to be
263 - * wrapped in your own quote pair.
264 - *
265 - * Handles pre-encoded JSON: when the caller has already run json_encode() +
266 - * wp_slash() on a value (e.g. categories, dependencies in Items.php), the
267 - * quotes are already escaped as \" and the string is ready to embed. Calling
268 - * wp_json_encode() again would double-escape those backslashes. We detect this
269 - * case by checking whether wp_unslash() produces valid JSON, and if so, return
270 - * the value directly without further encoding.
271 - *
272 - * @param string $value Raw string or wp_slash(json_encode()) output.
273 - * @return string Escaped string, safe to place between double quotes in GraphQL/JSON.
274 - */
275 - public static function esc_json_string( $value ) {
276 - $value = (string) $value;
277 -
278 - // If wp_slash() was applied to a JSON string upstream, the quotes are
279 - // already escaped (e.g. {\"key\":\"val\"}). Detect this by unslashing and
280 - // checking for valid JSON — if it matches, the value is already suitable
281 - // for embedding in a string literal; return it as-is to avoid doubling backslashes.
282 - $unslashed = wp_unslash( $value );
283 - if ( $unslashed !== $value ) {
284 - $decoded = json_decode( $unslashed, true );
285 - if ( json_last_error() === JSON_ERROR_NONE && null !== $decoded ) {
286 - return $value;
287 - }
288 - }
289 -
290 - $encoded = wp_json_encode( $value );
291 - // wp_json_encode wraps the value in "...", strip those outer quotes.
292 - return substr( $encoded, 1, -1 );
293 - }
294 -
295 - /**
296 - * Check for X-Templately-Verified header and update user verification status
297 - *
298 - * @param array|WP_Error $response The HTTP response array from wp_remote_get/wp_remote_post
299 - * @return void
300 - */
301 - public static function check_verification_header($response) {
302 - // Only process if response is not a WP_Error and contains headers
303 - if (is_wp_error($response)) {
304 - return;
305 - }
306 -
307 - // Retrieve the X-Templately-Verified header
308 - $verification_header = wp_remote_retrieve_header($response, 'X-Templately-Verified');
309 -
310 - // Check if header exists and has a truthy value
311 - if (!empty($verification_header) && filter_var($verification_header, FILTER_VALIDATE_BOOLEAN)) {
312 - try {
313 - // Get current user data
314 - $options = Options::get_instance();
315 - $user = $options->get('user');
316 -
317 - // Only update if user data exists and is not already verified
318 - if (!empty($user) && is_array($user) && empty($user['is_verified'])) {
319 - // Set verification flag
320 - $user['is_verified'] = true;
321 -
322 - // Save updated user data
323 - $options->set('user', $user);
324 -
325 - }
326 -
327 - if (!empty($user['is_verified'])){
328 - if(!headers_sent()){
329 - header( 'X-Templately-Verified: true' );
330 - if (defined('TEMPLATELY_DEBUG_LOG') && constant('TEMPLATELY_DEBUG_LOG')) {
331 - self::log('User verification status already updated via X-Templately-Verified header');
332 - }
333 - }
334 -
335 - return true;
336 - }
337 - } catch (\Exception $e) {
338 - // Log error if debug logging is enabled
339 - if (defined('TEMPLATELY_DEBUG_LOG') && constant('TEMPLATELY_DEBUG_LOG')) {
340 - self::log('Error updating user verification status: ' . $e->getMessage());
341 - }
342 - }
343 - }
344 -
345 - return false;
346 - }
347 -
348 - /**
349 - * Check for site disconnection status in API response body
350 - *
351 - * Detects SiteNotConnected errors and updates user disconnection status.
352 - * Sends X-Templately-Disconnected header for frontend detection.
353 - *
354 - *
355 - * @param array|WP_Error|mixed $response The response object or body array
356 - * @return bool True if site is disconnected, false otherwise
357 - */
358 - public static function check_site_disconnection($response) {
359 - if (is_wp_error($response)) {
360 - return false;
361 - }
362 -
363 - $response_body = $response;
364 -
365 - // If it's a raw WP response array with body, decode it
366 - if (is_array($response) && isset($response['body']) && is_string($response['body'])) {
367 - $response_body = json_decode(wp_remote_retrieve_body($response), true);
368 - }
369 -
370 - // Check if response body indicates site disconnection
371 - if (!is_array($response_body)) {
372 - return false;
373 - }
374 -
375 - $status = $response_body['status'] ?? null;
376 - $status_text = $response_body['statusText'] ?? null;
377 -
378 - // Check for SiteNotConnected error
379 - if ($status === 'error' && $status_text === 'SiteNotConnected') {
380 - try {
381 - // Get current user data
382 - $options = Options::get_instance();
383 - $user = $options->get('user');
384 -
385 - // Only update if user data exists
386 - if (!empty($user) && is_array($user)) {
387 - // Set disconnection flag
388 - $user['is_disconnected'] = true;
389 -
390 - // Save updated user data
391 - $options->set('user', $user);
392 -
393 - if (defined('TEMPLATELY_DEBUG_LOG') && constant('TEMPLATELY_DEBUG_LOG')) {
394 - self::log('Site disconnection detected: SiteNotConnected status');
395 - }
396 - }
397 -
398 - // Send header for frontend detection
399 - if (!headers_sent()) {
400 - header('X-Templately-Disconnected: true');
401 - }
402 -
403 - return true;
404 - } catch (\Exception $e) {
405 - // Log error if debug logging is enabled
406 - if (defined('TEMPLATELY_DEBUG_LOG') && constant('TEMPLATELY_DEBUG_LOG')) {
407 - self::log('Error updating site disconnection status: ' . $e->getMessage());
408 - }
409 - }
410 - }
411 -
412 - return false;
413 - }
414 -
415 - /**
416 - * Clear site disconnection status
417 - *
418 - * Called after successful site migration to reset the disconnection flag.
419 - *
420 - * @return void
421 - */
422 - public static function clear_site_disconnection() {
423 - try {
424 - $options = Options::get_instance();
425 - $user = $options->get('user');
426 -
427 - if (!empty($user) && is_array($user)) {
428 - $user['site_url'] = base64_encode( home_url('/') );
429 - $user['is_disconnected'] = false;
430 - $options->set('user', $user);
431 -
432 - if (defined('TEMPLATELY_DEBUG_LOG') && constant('TEMPLATELY_DEBUG_LOG')) {
433 - self::log('Site disconnection status cleared and URL updated.');
434 - }
435 - }
436 - } catch (\Exception $e) {
437 - if (defined('TEMPLATELY_DEBUG_LOG') && constant('TEMPLATELY_DEBUG_LOG')) {
438 - self::log('Error clearing site disconnection status: ' . $e->getMessage());
439 - }
440 - }
441 - }
442 -
443 - /**
444 104 * API Error Formatter
445 105 *
446 106 * @param int $error_code
447 107 * @param mixed $error_message
@@ -535,59 +195,21 @@
535 195
536 196 /**
537 197 * Printing Error Logs in debug.log file.
538 198 *
539 - * @param mixed $log The data to log
540 - * @param string $context Optional context for categorizing log entries
541 - * @param string $level Optional log level (debug, info, warning, error)
199 + * @param mixed $log
542 200 * @return void
543 201 */
544 - public static function log($log, $context = '', $level = 'info') {
545 - // Allow complete override of logging behavior
546 - $override_result = apply_filters('templately_log_override', null, $log, $context, $level);
547 - if ($override_result !== null) {
548 - return;
202 + public static function log($log) {
203 + if (defined('WP_DEBUG_LOG') && WP_DEBUG_LOG) {
204 + if (is_array($log) || is_object($log)) {
205 + error_log(print_r($log, true));
206 + } else {
207 + error_log($log ?: '');
208 + }
549 209 }
550 -
551 - // Only log if WP_DEBUG_LOG is enabled
552 - if (!defined('WP_DEBUG_LOG') || !WP_DEBUG_LOG) {
553 - return;
554 - }
555 -
556 - // Format the log message
557 - $formatted_message = self::format_log_message($log, $context, $level);
558 -
559 - // Write to error log
560 - error_log($formatted_message);
561 210 }
562 211
563 - /**
564 - * Format log message with context and level
565 - *
566 - * @param mixed $log The data to log
567 - * @param string $context Context for categorizing log entries
568 - * @param string $level Log level
569 - * @return string Formatted log message
570 - */
571 - private static function format_log_message($log, $context = '', $level = 'info') {
572 - // Convert arrays and objects to readable format
573 - if (is_array($log) || is_object($log)) {
574 - $log_content = print_r($log, true);
575 - } else {
576 - $log_content = (string) ($log ?: '');
577 - }
578 -
579 - // Build the formatted message
580 - $timestamp = current_time('Y-m-d H:i:s');
581 - $level_upper = strtoupper($level);
582 -
583 - if (!empty($context)) {
584 - return "[{$timestamp}] [{$level_upper}] [{$context}] {$log_content}";
585 - } else {
586 - return "[{$timestamp}] [{$level_upper}] {$log_content}";
587 - }
588 - }
589 -
590 212 public static function should_flush() {
591 213 if (isset($_REQUEST['is_lightspeed']) && $_REQUEST['is_lightspeed'] === 'true') {
592 214 return false;
593 215 }
@@ -702,9 +324,9 @@
702 324 */
703 325 public static function enable_elementor_container() {
704 326 if (class_exists('Elementor\Plugin')) {
705 327 $control_name = Plugin::instance()->experiments->get_feature_option_key('container');
706 - if (get_option($control_name) !== 'active') {
328 + if (get_option($control_name) === 'inactive') {
707 329 update_option($control_name, 'active');
708 330 return true;
709 331 }
710 332 }
@@ -744,5 +366,108 @@
744 366 }
745 367 return $r;
746 368 }
747 369
370 + /**
371 + * Save template data to file
372 + *
373 + * Common function for saving templates to files, used by AI content operations
374 + *
375 + * @param string $process_id The process ID
376 + * @param string $content_id The content ID
377 + * @param string $template The template data (base64 encoded or raw)
378 + * @param array $ai_page_ids Array of AI page IDs
379 + * @param bool $is_preview Whether this is a preview operation
380 + * @param bool $is_skipped Whether the template was skipped
381 + * @return array|WP_Error Result array with status and data
382 + */
383 + public static function save_template_to_file($process_id, $content_id, $template, $ai_page_ids, $is_preview = false, $is_skipped = false) {
384 + $upload_dir = wp_upload_dir();
385 +
386 + // Always save to preview directory for AI content workflow
387 + $tmp_dir = trailingslashit($upload_dir['basedir']) . 'templately' . DIRECTORY_SEPARATOR . 'preview' . DIRECTORY_SEPARATOR . $process_id . DIRECTORY_SEPARATOR;
388 +
389 + // Decode template if it's base64 encoded
390 + if (! empty($template) && base64_decode($template, true) !== false) {
391 + $template = base64_decode($template);
392 + }
393 +
394 + // Handle empty template (skipped)
395 + if (empty($template)) {
396 + $template = json_encode([
397 + "isSkipped" => true,
398 + ]);
399 + }
400 +
401 + // Find the correct directory for the content ID
402 + $found_key = null;
403 + foreach ($ai_page_ids as $key => $ids) {
404 + if (in_array($content_id, $ids)) {
405 + $found_key = $key;
406 + break;
407 + }
408 + }
409 +
410 + if ($found_key === null) {
411 + return self::error('invalid_content_id', __('Content ID not found in AI page IDs.', 'templately'), 'save_template_to_file', 400);
412 + }
413 +
414 + // Create directory and file path
415 + $page_dir = $tmp_dir . $found_key . DIRECTORY_SEPARATOR;
416 + $file_path = $page_dir . $content_id . '.ai.json';
417 + wp_mkdir_p($page_dir);
418 +
419 + // Save the file
420 + $is_success = file_put_contents($file_path, $template);
421 +
422 + if ($is_success) {
423 + // Update processed pages option
424 + $processed_pages = get_option("templately_ai_processed_pages", []);
425 + $processed_pages[$process_id] = $processed_pages[$process_id] ?? [];
426 + $processed_pages[$process_id]['pages'][$content_id] = $is_skipped;
427 + update_option("templately_ai_processed_pages", $processed_pages, false);
428 +
429 + return [
430 + 'status' => 'success',
431 + 'data' => [
432 + 'process_id' => $process_id,
433 + // 'file_path' => $file_path,
434 + 'content_id' => $content_id,
435 + ],
436 + ];
437 + }
438 +
439 + return self::error('file_save_failed', __('Failed to save template file.', 'templately'), 'save_template_to_file', 500);
440 + }
441 +
442 + /**
443 + * Get matched session data by process ID
444 + *
445 + * Helper function to retrieve session data for a given process ID
446 + *
447 + * @param string $process_id The process ID to match
448 + * @return array|false Returns matched data array or false if not found
449 + */
450 + public static function get_matched_session_data($process_id) {
451 + if (empty($process_id)) {
452 + return false;
453 + }
454 +
455 + $all_data = Utils::get_all_session_data();
456 +
457 + if (empty($all_data) || ! is_array($all_data)) {
458 + return false;
459 + }
460 +
461 + // INSERT_YOUR_CODE
462 + if (is_array($all_data)) {
463 + $all_data = array_reverse($all_data);
464 + }
465 + foreach ($all_data as $data) {
466 + if (isset($data['process_id']) && ($data['process_id'] === $process_id)) {
467 + return $data;
468 + }
469 + }
470 +
471 + return false;
472 + }
748 473 }