PluginProbe
Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! / 3.3.2
Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! v3.3.2
3.7.5 3.7.4 3.7.3 3.7.2 1-final 3.7.1 3.7.0 3.6.8 3.6.7 3.6.6 3.6.5 3.6.4 3.6.3 3.6.2 3.6.1 3.0.3 3.0.4 3.0.5 3.0.6 3.0.7 3.0.8 3.0.9 3.1.0 3.1.1 3.1.10 All 111 releases
← All changes | includes/Utils/Helper.php +120 -400 3.6.73.3.2 View file →
@@ -17,18 +17,8 @@
17 17 * @since 1.0.0
18 18 */
19 19 class Helper extends Base {
20 20 /**
21 - * Check if development API should be used
22 - *
23 - * @return bool True if development API should be used
24 - */
25 - public static function is_dev_api(){
26 - // Only check TEMPLATELY_DEV_API constant - no fallback mechanisms
27 - return defined( 'TEMPLATELY_DEV_API' ) && constant( 'TEMPLATELY_DEV_API' );
28 - }
29 -
30 - /**
31 21 * Get installed WordPress Plugin List
32 22 * @return array
33 23 */
34 24 public static function get_plugins() {
@@ -56,49 +46,24 @@
56 46
57 47 /**
58 48 * Collect IP from request.
59 49 *
60 - * Prefers REMOTE_ADDR since it cannot be spoofed by the client. When it is
61 - * a private/reserved address (reverse proxy, Docker bridge gateway like
62 - * 192.168.65.1, local dev), the forwarded headers are scanned for the first
63 - * public IP. If nothing public is found, the request is local: 127.0.0.1.
64 - *
65 50 * @return string
66 51 */
67 52 public static function get_ip() {
68 - $remote_addr = ! empty($_SERVER['REMOTE_ADDR']) ? sanitize_text_field($_SERVER['REMOTE_ADDR']) : '';
69 -
70 - if (self::is_public_ip($remote_addr)) {
71 - return $remote_addr;
53 + $ip = '127.0.0.1'; // Local IP
54 + if (! empty($_SERVER['HTTP_CLIENT_IP'])) {
55 + $ip = $_SERVER['HTTP_CLIENT_IP'];
56 + } elseif (! empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
57 + $ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
58 + } else {
59 + $ip = ! empty($_SERVER['REMOTE_ADDR']) ? $_SERVER['REMOTE_ADDR'] : $ip;
72 60 }
73 61
74 - foreach (['HTTP_X_FORWARDED_FOR', 'HTTP_CLIENT_IP'] as $header) {
75 - if (empty($_SERVER[$header])) {
76 - continue;
77 - }
78 - $candidates = explode(',', sanitize_text_field($_SERVER[$header]));
79 - foreach ($candidates as $candidate) {
80 - $candidate = trim($candidate);
81 - if (self::is_public_ip($candidate)) {
82 - return $candidate;
83 - }
84 - }
85 - }
86 -
87 - return '127.0.0.1';
62 + return sanitize_text_field($ip);
88 63 }
89 64
90 65 /**
91 - * Check whether a string is a valid public (non-private, non-reserved) IP.
92 - *
93 - * @param string $ip
94 - * @return bool
95 - */
96 - private static function is_public_ip($ip): bool {
97 - return (bool) filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE);
98 - }
99 -
100 - /**
101 66 * Get views for front-end display
102 67 *
103 68 * @param string $name it will be file name only from the view's folder.
104 69 * @param array $data
@@ -114,132 +79,8 @@
114 79 }
115 80 }
116 81
117 82 /**
118 - * Get API URL for Templately endpoints
119 - *
120 - * @param string $endpoint API endpoint path (e.g., 'v2/import/pack/123')
121 - * @return string Complete API URL
122 - */
123 - public static function get_api_url($endpoint): string {
124 - $base_url = self::is_dev_api() ? 'https://app.templately.dev' : 'https://app.templately.com';
125 -
126 - /**
127 - * Filter the base URL for development API
128 - *
129 - * @since 3.5.0
130 - * @param string $base_url The default base URL
131 - */
132 - $base_url = apply_filters('templately_dev_api_base_url', $base_url);
133 -
134 - return "{$base_url}/api/{$endpoint}";
135 - }
136 -
137 - /**
138 - * Make a unified API request to Templately API
139 - *
140 - * @param string $method HTTP method (GET or POST)
141 - * @param string $api_url Complete API URL
142 - * @param array $body Request body data (for POST requests)
143 - * @param array $extra_headers Additional headers beyond the standard ones
144 - * @param int $timeout Request timeout in seconds (default: 30)
145 - * @return array|WP_Error Response array or WP_Error on failure
146 - */
147 - private static function make_api_request($method, $api_url, $body = [], $extra_headers = [], $timeout = 30) {
148 - $api_key = Options::get_instance()->get('api_key');
149 -
150 - $headers = [
151 - 'Authorization' => 'Bearer ' . $api_key,
152 - 'x-templately-ip' => self::get_ip(),
153 - 'x-templately-url' => home_url('/'),
154 - 'x-templately-version' => defined( 'TEMPLATELY_VERSION' ) ? constant( 'TEMPLATELY_VERSION' ) : '1.0.0',
155 - // Force JSON responses so the cloud returns JSON errors instead of an HTML
156 - // error page (which json_decode() cannot parse). Binary/XML downloads
157 - // (zip pack, attachment WXR) use their own wp_remote_* calls and bypass
158 - // this helper, so they are unaffected. Callers can override via $extra_headers.
159 - 'Accept' => 'application/json',
160 - ];
161 -
162 - // Add Content-Type for POST requests
163 - if (strtoupper($method) === 'POST') {
164 - $headers['Content-Type'] = 'application/json';
165 - }
166 -
167 - // Resolve requested platform: $_REQUEST wins (frontend-supplied), then caller's extra_headers, then default.
168 - if ( isset( $_REQUEST['requested_platform'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
169 - $extra_headers['x-templately-requested-platform'] = sanitize_text_field( wp_unslash( $_REQUEST['requested_platform'] ) );
170 - } elseif ( ! isset( $extra_headers['x-templately-requested-platform'] ) ) {
171 - $extra_headers['x-templately-requested-platform'] = 'templately';
172 - }
173 -
174 - // Merge additional headers
175 - $headers = array_merge($headers, $extra_headers);
176 -
177 - $args = [
178 - 'timeout' => $timeout,
179 - 'headers' => $headers,
180 - ];
181 -
182 - // Apply filter to allow network admin or other functionality to modify request args
183 - $args = apply_filters( 'templately_api_request_params', $args, $method, $api_url );
184 -
185 - // Add body for POST requests
186 - if (strtoupper($method) === 'POST') {
187 - $args['body'] = is_array($body) ? json_encode($body) : $body;
188 - }
189 -
190 - // Make the appropriate request
191 - if (strtoupper($method) === 'POST') {
192 - $response = wp_remote_post($api_url, $args);
193 - } else {
194 - $response = wp_remote_get($api_url, $args);
195 - }
196 -
197 - // Check for verification header in the response
198 - self::check_verification_header($response);
199 -
200 -
201 - // Check for site disconnection in response body
202 - self::check_site_disconnection($response);
203 -
204 - return $response;
205 - }
206 -
207 - /**
208 - * Make a GET request to Templately API
209 - *
210 - * @param string $endpoint API endpoint path (e.g., 'v2/import/pack/123')
211 - * @param array $query_params Query parameters as key-value pairs
212 - * @param array $extra_headers Additional headers beyond the standard ones
213 - * @param int $timeout Request timeout in seconds (default: 30)
214 - * @return array|WP_Error Response array or WP_Error on failure
215 - */
216 - public static function make_api_get_request($endpoint, $query_params = [], $extra_headers = [], $timeout = 30) {
217 - $api_url = self::get_api_url($endpoint);
218 -
219 - // Add query parameters if provided
220 - if (!empty($query_params)) {
221 - $api_url = add_query_arg($query_params, $api_url);
222 - }
223 -
224 - return self::make_api_request('GET', $api_url, [], $extra_headers, $timeout);
225 - }
226 -
227 - /**
228 - * Make a POST request to Templately API
229 - *
230 - * @param string $endpoint API endpoint path (e.g., 'v2/feedback/store')
231 - * @param array $body Request body data
232 - * @param array $extra_headers Additional headers beyond the standard ones
233 - * @param int $timeout Request timeout in seconds (default: 30)
234 - * @return array|WP_Error Response array or WP_Error on failure
235 - */
236 - public static function make_api_post_request($endpoint, $body = [], $extra_headers = [], $timeout = 30) {
237 - $api_url = self::get_api_url($endpoint);
238 - return self::make_api_request('POST', $api_url, $body, $extra_headers, $timeout);
239 - }
240 -
241 - /**
242 83 * Sanitize Helper
243 84 *
244 85 * @param mixed $value
245 86 * @param string $type
@@ -259,194 +100,8 @@
259 100 return $sanitized_value;
260 101 }
261 102
262 103 /**
263 - * Escape a string for safe embedding inside a GraphQL or JSON string literal.
264 - *
265 - * GraphQL string escaping rules are identical to JSON string escaping (per the
266 - * GraphQL spec), so wp_json_encode() is the authoritative escaper. We strip the
267 - * outer quotes it adds and return only the escaped inner content, ready to be
268 - * wrapped in your own quote pair.
269 - *
270 - * Handles pre-encoded JSON: when the caller has already run json_encode() +
271 - * wp_slash() on a value (e.g. categories, dependencies in Items.php), the
272 - * quotes are already escaped as \" and the string is ready to embed. Calling
273 - * wp_json_encode() again would double-escape those backslashes. We detect this
274 - * case by checking whether wp_unslash() produces valid JSON, and if so, return
275 - * the value directly without further encoding.
276 - *
277 - * @param string $value Raw string or wp_slash(json_encode()) output.
278 - * @return string Escaped string, safe to place between double quotes in GraphQL/JSON.
279 - */
280 - public static function esc_json_string( $value ) {
281 - $value = (string) $value;
282 -
283 - // If wp_slash() was applied to a JSON string upstream, the quotes are
284 - // already escaped (e.g. {\"key\":\"val\"}). Detect this by unslashing and
285 - // checking for valid JSON — if it matches, the value is already suitable
286 - // for embedding in a string literal; return it as-is to avoid doubling backslashes.
287 - $unslashed = wp_unslash( $value );
288 - if ( $unslashed !== $value ) {
289 - $decoded = json_decode( $unslashed, true );
290 - if ( json_last_error() === JSON_ERROR_NONE && null !== $decoded ) {
291 - return $value;
292 - }
293 - }
294 -
295 - $encoded = wp_json_encode( $value );
296 - // wp_json_encode wraps the value in "...", strip those outer quotes.
297 - return substr( $encoded, 1, -1 );
298 - }
299 -
300 - /**
301 - * Check for X-Templately-Verified header and update user verification status
302 - *
303 - * @param array|WP_Error $response The HTTP response array from wp_remote_get/wp_remote_post
304 - * @return void
305 - */
306 - public static function check_verification_header($response) {
307 - // Only process if response is not a WP_Error and contains headers
308 - if (is_wp_error($response)) {
309 - return;
310 - }
311 -
312 - // Retrieve the X-Templately-Verified header
313 - $verification_header = wp_remote_retrieve_header($response, 'X-Templately-Verified');
314 -
315 - // Check if header exists and has a truthy value
316 - if (!empty($verification_header) && filter_var($verification_header, FILTER_VALIDATE_BOOLEAN)) {
317 - try {
318 - // Get current user data
319 - $options = Options::get_instance();
320 - $user = $options->get('user');
321 -
322 - // Only update if user data exists and is not already verified
323 - if (!empty($user) && is_array($user) && empty($user['is_verified'])) {
324 - // Set verification flag
325 - $user['is_verified'] = true;
326 -
327 - // Save updated user data
328 - $options->set('user', $user);
329 -
330 - }
331 -
332 - if (!empty($user['is_verified'])){
333 - if(!headers_sent()){
334 - header( 'X-Templately-Verified: true' );
335 - if (defined('TEMPLATELY_DEBUG_LOG') && constant('TEMPLATELY_DEBUG_LOG')) {
336 - self::log('User verification status already updated via X-Templately-Verified header');
337 - }
338 - }
339 -
340 - return true;
341 - }
342 - } catch (\Exception $e) {
343 - // Log error if debug logging is enabled
344 - if (defined('TEMPLATELY_DEBUG_LOG') && constant('TEMPLATELY_DEBUG_LOG')) {
345 - self::log('Error updating user verification status: ' . $e->getMessage());
346 - }
347 - }
348 - }
349 -
350 - return false;
351 - }
352 -
353 - /**
354 - * Check for site disconnection status in API response body
355 - *
356 - * Detects SiteNotConnected errors and updates user disconnection status.
357 - * Sends X-Templately-Disconnected header for frontend detection.
358 - *
359 - *
360 - * @param array|WP_Error|mixed $response The response object or body array
361 - * @return bool True if site is disconnected, false otherwise
362 - */
363 - public static function check_site_disconnection($response) {
364 - if (is_wp_error($response)) {
365 - return false;
366 - }
367 -
368 - $response_body = $response;
369 -
370 - // If it's a raw WP response array with body, decode it
371 - if (is_array($response) && isset($response['body']) && is_string($response['body'])) {
372 - $response_body = json_decode(wp_remote_retrieve_body($response), true);
373 - }
374 -
375 - // Check if response body indicates site disconnection
376 - if (!is_array($response_body)) {
377 - return false;
378 - }
379 -
380 - $status = $response_body['status'] ?? null;
381 - $status_text = $response_body['statusText'] ?? null;
382 -
383 - // Check for SiteNotConnected error
384 - if ($status === 'error' && $status_text === 'SiteNotConnected') {
385 - try {
386 - // Get current user data
387 - $options = Options::get_instance();
388 - $user = $options->get('user');
389 -
390 - // Only update if user data exists
391 - if (!empty($user) && is_array($user)) {
392 - // Set disconnection flag
393 - $user['is_disconnected'] = true;
394 -
395 - // Save updated user data
396 - $options->set('user', $user);
397 -
398 - if (defined('TEMPLATELY_DEBUG_LOG') && constant('TEMPLATELY_DEBUG_LOG')) {
399 - self::log('Site disconnection detected: SiteNotConnected status');
400 - }
401 - }
402 -
403 - // Send header for frontend detection
404 - if (!headers_sent()) {
405 - header('X-Templately-Disconnected: true');
406 - }
407 -
408 - return true;
409 - } catch (\Exception $e) {
410 - // Log error if debug logging is enabled
411 - if (defined('TEMPLATELY_DEBUG_LOG') && constant('TEMPLATELY_DEBUG_LOG')) {
412 - self::log('Error updating site disconnection status: ' . $e->getMessage());
413 - }
414 - }
415 - }
416 -
417 - return false;
418 - }
419 -
420 - /**
421 - * Clear site disconnection status
422 - *
423 - * Called after successful site migration to reset the disconnection flag.
424 - *
425 - * @return void
426 - */
427 - public static function clear_site_disconnection() {
428 - try {
429 - $options = Options::get_instance();
430 - $user = $options->get('user');
431 -
432 - if (!empty($user) && is_array($user)) {
433 - $user['site_url'] = base64_encode( home_url('/') );
434 - $user['is_disconnected'] = false;
435 - $options->set('user', $user);
436 -
437 - if (defined('TEMPLATELY_DEBUG_LOG') && constant('TEMPLATELY_DEBUG_LOG')) {
438 - self::log('Site disconnection status cleared and URL updated.');
439 - }
440 - }
441 - } catch (\Exception $e) {
442 - if (defined('TEMPLATELY_DEBUG_LOG') && constant('TEMPLATELY_DEBUG_LOG')) {
443 - self::log('Error clearing site disconnection status: ' . $e->getMessage());
444 - }
445 - }
446 - }
447 -
448 - /**
449 104 * API Error Formatter
450 105 *
451 106 * @param int $error_code
452 107 * @param mixed $error_message
@@ -540,59 +195,21 @@
540 195
541 196 /**
542 197 * Printing Error Logs in debug.log file.
543 198 *
544 - * @param mixed $log The data to log
545 - * @param string $context Optional context for categorizing log entries
546 - * @param string $level Optional log level (debug, info, warning, error)
199 + * @param mixed $log
547 200 * @return void
548 201 */
549 - public static function log($log, $context = '', $level = 'info') {
550 - // Allow complete override of logging behavior
551 - $override_result = apply_filters('templately_log_override', null, $log, $context, $level);
552 - if ($override_result !== null) {
553 - return;
202 + public static function log($log) {
203 + if (defined('WP_DEBUG_LOG') && WP_DEBUG_LOG) {
204 + if (is_array($log) || is_object($log)) {
205 + error_log(print_r($log, true));
206 + } else {
207 + error_log($log ?: '');
208 + }
554 209 }
555 -
556 - // Only log if WP_DEBUG_LOG is enabled
557 - if (!defined('WP_DEBUG_LOG') || !WP_DEBUG_LOG) {
558 - return;
559 - }
560 -
561 - // Format the log message
562 - $formatted_message = self::format_log_message($log, $context, $level);
563 -
564 - // Write to error log
565 - error_log($formatted_message);
566 210 }
567 211
568 - /**
569 - * Format log message with context and level
570 - *
571 - * @param mixed $log The data to log
572 - * @param string $context Context for categorizing log entries
573 - * @param string $level Log level
574 - * @return string Formatted log message
575 - */
576 - private static function format_log_message($log, $context = '', $level = 'info') {
577 - // Convert arrays and objects to readable format
578 - if (is_array($log) || is_object($log)) {
579 - $log_content = print_r($log, true);
580 - } else {
581 - $log_content = (string) ($log ?: '');
582 - }
583 -
584 - // Build the formatted message
585 - $timestamp = current_time('Y-m-d H:i:s');
586 - $level_upper = strtoupper($level);
587 -
588 - if (!empty($context)) {
589 - return "[{$timestamp}] [{$level_upper}] [{$context}] {$log_content}";
590 - } else {
591 - return "[{$timestamp}] [{$level_upper}] {$log_content}";
592 - }
593 - }
594 -
595 212 public static function should_flush() {
596 213 if (isset($_REQUEST['is_lightspeed']) && $_REQUEST['is_lightspeed'] === 'true') {
597 214 return false;
598 215 }
@@ -707,9 +324,9 @@
707 324 */
708 325 public static function enable_elementor_container() {
709 326 if (class_exists('Elementor\Plugin')) {
710 327 $control_name = Plugin::instance()->experiments->get_feature_option_key('container');
711 - if (get_option($control_name) !== 'active') {
328 + if (get_option($control_name) === 'inactive') {
712 329 update_option($control_name, 'active');
713 330 return true;
714 331 }
715 332 }
@@ -749,5 +366,108 @@
749 366 }
750 367 return $r;
751 368 }
752 369
370 + /**
371 + * Save template data to file
372 + *
373 + * Common function for saving templates to files, used by AI content operations
374 + *
375 + * @param string $process_id The process ID
376 + * @param string $content_id The content ID
377 + * @param string $template The template data (base64 encoded or raw)
378 + * @param array $ai_page_ids Array of AI page IDs
379 + * @param bool $is_preview Whether this is a preview operation
380 + * @param bool $is_skipped Whether the template was skipped
381 + * @return array|WP_Error Result array with status and data
382 + */
383 + public static function save_template_to_file($process_id, $content_id, $template, $ai_page_ids, $is_preview = false, $is_skipped = false) {
384 + $upload_dir = wp_upload_dir();
385 +
386 + // Always save to preview directory for AI content workflow
387 + $tmp_dir = trailingslashit($upload_dir['basedir']) . 'templately' . DIRECTORY_SEPARATOR . 'preview' . DIRECTORY_SEPARATOR . $process_id . DIRECTORY_SEPARATOR;
388 +
389 + // Decode template if it's base64 encoded
390 + if (! empty($template) && base64_decode($template, true) !== false) {
391 + $template = base64_decode($template);
392 + }
393 +
394 + // Handle empty template (skipped)
395 + if (empty($template)) {
396 + $template = json_encode([
397 + "isSkipped" => true,
398 + ]);
399 + }
400 +
401 + // Find the correct directory for the content ID
402 + $found_key = null;
403 + foreach ($ai_page_ids as $key => $ids) {
404 + if (in_array($content_id, $ids)) {
405 + $found_key = $key;
406 + break;
407 + }
408 + }
409 +
410 + if ($found_key === null) {
411 + return self::error('invalid_content_id', __('Content ID not found in AI page IDs.', 'templately'), 'save_template_to_file', 400);
412 + }
413 +
414 + // Create directory and file path
415 + $page_dir = $tmp_dir . $found_key . DIRECTORY_SEPARATOR;
416 + $file_path = $page_dir . $content_id . '.ai.json';
417 + wp_mkdir_p($page_dir);
418 +
419 + // Save the file
420 + $is_success = file_put_contents($file_path, $template);
421 +
422 + if ($is_success) {
423 + // Update processed pages option
424 + $processed_pages = get_option("templately_ai_processed_pages", []);
425 + $processed_pages[$process_id] = $processed_pages[$process_id] ?? [];
426 + $processed_pages[$process_id]['pages'][$content_id] = $is_skipped;
427 + update_option("templately_ai_processed_pages", $processed_pages, false);
428 +
429 + return [
430 + 'status' => 'success',
431 + 'data' => [
432 + 'process_id' => $process_id,
433 + // 'file_path' => $file_path,
434 + 'content_id' => $content_id,
435 + ],
436 + ];
437 + }
438 +
439 + return self::error('file_save_failed', __('Failed to save template file.', 'templately'), 'save_template_to_file', 500);
440 + }
441 +
442 + /**
443 + * Get matched session data by process ID
444 + *
445 + * Helper function to retrieve session data for a given process ID
446 + *
447 + * @param string $process_id The process ID to match
448 + * @return array|false Returns matched data array or false if not found
449 + */
450 + public static function get_matched_session_data($process_id) {
451 + if (empty($process_id)) {
452 + return false;
453 + }
454 +
455 + $all_data = Utils::get_all_session_data();
456 +
457 + if (empty($all_data) || ! is_array($all_data)) {
458 + return false;
459 + }
460 +
461 + // INSERT_YOUR_CODE
462 + if (is_array($all_data)) {
463 + $all_data = array_reverse($all_data);
464 + }
465 + foreach ($all_data as $data) {
466 + if (isset($data['process_id']) && ($data['process_id'] === $process_id)) {
467 + return $data;
468 + }
469 + }
470 +
471 + return false;
472 + }
753 473 }