| @@ -45,11 +45,22 @@ | ||
| 45 | 45 | } |
| 46 | 46 | return self::$instance; |
| 47 | 47 | } |
| 48 | 48 | |
| 49 | + /** | |
| 50 | + * Newsletter list endpoint the welcome step's opt-in posts to. | |
| 51 | + */ | |
| 52 | + const SUBSCRIBE_ENDPOINT = 'https://marketing.sigmative.com/newsletter/rui/lists/6a9943aacbe70/embedded-form-subscribe'; | |
| 53 | + | |
| 54 | + /** | |
| 55 | + * Customer identifier required by the newsletter endpoint. | |
| 56 | + */ | |
| 57 | + const SUBSCRIBE_CUSTOMER_UID = '6a93d39ce0ebd'; | |
| 58 | + | |
| 49 | 59 | // Initialize hooks |
| 50 | 60 | private function init_hooks() { |
| 51 | 61 | add_action( 'wp_ajax_ultimate_post_kit_setup_wizard_install_plugins', array( $this, 'install_plugins' ) ); |
| 62 | + add_action( 'wp_ajax_ultimate_post_kit_setup_wizard_subscribe', array( $this, 'ajax_subscribe' ) ); | |
| 52 | 63 | add_action( 'admin_enqueue_scripts', array( $this, 'enqueue_scripts' ) ); |
| 53 | 64 | add_action( 'admin_init', array( $this, 'activate_default_widgets' ) ); |
| 54 | 65 | add_action( 'admin_init', array( $this, 'maybe_display_setup_wizard' ) ); |
| 55 | 66 | add_action( 'admin_init', array( $this, 'check_manual_wizard_request' ) ); |
| @@ -266,8 +277,105 @@ | ||
| 266 | 277 | return $core_widgets; |
| 267 | 278 | } |
| 268 | 279 | ); |
| 269 | 280 | return $arr_obj; |
| 281 | + } | |
| 282 | + | |
| 283 | + /** | |
| 284 | + * Handle the newsletter opt-in on the welcome step. | |
| 285 | + * | |
| 286 | + * Opt-in only: nothing is sent unless the administrator ticked the box, | |
| 287 | + * which is unticked by default. The choice is recorded either way so the | |
| 288 | + * wizard can show it again on a re-run. Runs server side so the | |
| 289 | + * cross-origin POST is not subject to CORS. | |
| 290 | + */ | |
| 291 | + public function ajax_subscribe() { | |
| 292 | + check_ajax_referer( 'ultimate_post_kit_setup_wizard_nonce', 'nonce' ); | |
| 293 | + | |
| 294 | + if ( ! current_user_can( 'manage_options' ) ) { | |
| 295 | + wp_send_json_error( array( 'message' => esc_html__( 'Unauthorized', 'ultimate-post-kit' ) ) ); | |
| 296 | + } | |
| 297 | + | |
| 298 | + // Record the choice first, whichever way it went. | |
| 299 | + $consent = isset( $_POST['consent'] ) && 'yes' === sanitize_text_field( wp_unslash( $_POST['consent'] ) ); | |
| 300 | + | |
| 301 | + update_option( 'bdtupk_subscribe_optin', $consent ? 'yes' : 'no' ); | |
| 302 | + | |
| 303 | + if ( ! $consent ) { | |
| 304 | + // No opt-in: the choice is stored and nothing leaves the site. | |
| 305 | + wp_send_json_success( | |
| 306 | + array( | |
| 307 | + 'subscribed' => false, | |
| 308 | + 'message' => esc_html__( 'Preferences saved.', 'ultimate-post-kit' ), | |
| 309 | + ) | |
| 310 | + ); | |
| 311 | + } | |
| 312 | + | |
| 313 | + // Keep the raw value: sanitize_email() flattens anything malformed to an | |
| 314 | + // empty string, which would otherwise be indistinguishable from "left blank". | |
| 315 | + $raw_email = isset( $_POST['email'] ) ? sanitize_text_field( wp_unslash( $_POST['email'] ) ) : ''; | |
| 316 | + $email = sanitize_email( $raw_email ); | |
| 317 | + | |
| 318 | + if ( '' === trim( $raw_email ) ) { | |
| 319 | + wp_send_json_success( | |
| 320 | + array( | |
| 321 | + 'subscribed' => false, | |
| 322 | + 'message' => esc_html__( 'Preferences saved.', 'ultimate-post-kit' ), | |
| 323 | + ) | |
| 324 | + ); | |
| 325 | + } | |
| 326 | + | |
| 327 | + if ( ! is_email( $email ) ) { | |
| 328 | + wp_send_json_error( array( 'message' => esc_html__( 'Please enter a valid email address.', 'ultimate-post-kit' ) ) ); | |
| 329 | + } | |
| 330 | + | |
| 331 | + // Never subscribe the same address twice from this site. | |
| 332 | + if ( get_option( 'bdtupk_subscribed_email' ) === $email ) { | |
| 333 | + wp_send_json_success( | |
| 334 | + array( | |
| 335 | + 'subscribed' => true, | |
| 336 | + 'message' => esc_html__( 'You are already subscribed.', 'ultimate-post-kit' ), | |
| 337 | + ) | |
| 338 | + ); | |
| 339 | + } | |
| 340 | + | |
| 341 | + $current_user = wp_get_current_user(); | |
| 342 | + | |
| 343 | + $body = array( | |
| 344 | + 'customer_uid' => apply_filters( 'bdtupk/setup_wizard/subscribe_customer_uid', self::SUBSCRIBE_CUSTOMER_UID ), | |
| 345 | + 'EMAIL' => $email, | |
| 346 | + 'FIRST_NAME' => $current_user ? $current_user->first_name : '', | |
| 347 | + 'LAST_NAME' => $current_user ? $current_user->last_name : '', | |
| 348 | + ); | |
| 349 | + | |
| 350 | + $response = wp_safe_remote_post( | |
| 351 | + apply_filters( 'bdtupk/setup_wizard/subscribe_url', self::SUBSCRIBE_ENDPOINT ), | |
| 352 | + array( | |
| 353 | + 'timeout' => 15, | |
| 354 | + 'body' => apply_filters( 'bdtupk/setup_wizard/subscribe_body', $body, $email ), | |
| 355 | + 'headers' => array( 'Accept' => '*/*' ), | |
| 356 | + 'sslverify' => true, | |
| 357 | + ) | |
| 358 | + ); | |
| 359 | + | |
| 360 | + if ( is_wp_error( $response ) ) { | |
| 361 | + wp_send_json_error( array( 'message' => esc_html__( 'Could not reach the subscription service. Please try again later.', 'ultimate-post-kit' ) ) ); | |
| 362 | + } | |
| 363 | + | |
| 364 | + $code = wp_remote_retrieve_response_code( $response ); | |
| 365 | + | |
| 366 | + if ( $code < 200 || $code >= 400 ) { | |
| 367 | + wp_send_json_error( array( 'message' => esc_html__( 'The subscription service rejected the request.', 'ultimate-post-kit' ) ) ); | |
| 368 | + } | |
| 369 | + | |
| 370 | + update_option( 'bdtupk_subscribed_email', $email ); | |
| 371 | + | |
| 372 | + wp_send_json_success( | |
| 373 | + array( | |
| 374 | + 'subscribed' => true, | |
| 375 | + 'message' => esc_html__( 'Thanks for subscribing!', 'ultimate-post-kit' ), | |
| 376 | + ) | |
| 377 | + ); | |
| 270 | 378 | } |
| 271 | 379 | |
| 272 | 380 | // Install plugins |
| 273 | 381 | public function install_plugins() { |
