# ultimate-post/5.0.34/classes/Blocks.php
Post Grid Gutenberg Blocks – PostX, version 5.0.34. 767 lines.
- Page: https://pluginprobe.com/plugins/ultimate-post/5.0.34/code/classes/Blocks.php
- Raw: https://pluginprobe.com/plugins/ultimate-post/5.0.34/raw/classes/Blocks.php
- Modified: 2026-07-22T11:48:56+00:00
Line numbers below start at 1. Link to a line or a range by appending a fragment to the
page URL, for example `https://pluginprobe.com/plugins/ultimate-post/5.0.34/code/classes/Blocks.php#L10-L20`.
```php
include_all_blocks(); // Include Blocks .
add_action( 'wp_ajax_ultp_next_prev', array( $this, 'ultp_next_prev_callback' ) ); // Next Previous AJAX Call .
add_action( 'wp_ajax_nopriv_ultp_next_prev', array( $this, 'ultp_next_prev_callback' ) ); // Next Previous AJAX Call Logout User .
add_action( 'wp_ajax_ultp_filter', array( $this, 'ultp_filter_callback' ) ); // Next Previous AJAX Call .
add_action( 'wp_ajax_nopriv_ultp_filter', array( $this, 'ultp_filter_callback' ) ); // Next Previous AJAX Call Logout User .
add_action( 'wp_ajax_ultp_adv_filter', array( $this, 'ultp_adv_filter_callback' ) );
add_action( 'wp_ajax_nopriv_ultp_adv_filter', array( $this, 'ultp_adv_filter_callback' ) );
add_action( 'wp_ajax_ultp_pagination', array( $this, 'ultp_pagination_callback' ) ); // Page Number AJAX Call .
add_action( 'wp_ajax_nopriv_ultp_pagination', array( $this, 'ultp_pagination_callback' ) ); // Page Number AJAX Call Logout User .
add_action( 'wp_ajax_ultp_share_count', array( $this, 'ultp_share_count_callback' ) ); // share Count save .
add_action( 'wp_ajax_nopriv_ultp_share_count', array( $this, 'ultp_share_count_callback' ) ); // share Count save .
add_action( 'wp_ajax_ultp_get_nonce', array( $this, 'ultp_get_nonce_callback' ) ); // Nonce Generating Callback
add_action( 'wp_ajax_nopriv_ultp_get_nonce', array( $this, 'ultp_get_nonce_callback' ) ); // Nonce Generating Callback
}
/**
* Require Blocks
*
* @since v.1.0.0
* @return NULL
*/
public function include_all_blocks() {
spl_autoload_register(
function ( $class ) {
if ( strpos( $class, 'ULTP\blocks' ) === 0 ) {
$source = ULTP_PATH . 'blocks/' . explode( '\\', $class )[2] . '.php';
if ( file_exists( $source ) ) {
include_once $source;
} else {
$source = ULTP_PATH . 'addons/builder/blocks/' . explode( '\\', $class )[2] . '.php';
if ( file_exists( $source ) ) {
include_once $source;
}
}
}
}
);
$request = isset( $_POST['action'] ) ? sanitize_text_field( $_POST['action'] ) : '';
$get_action = isset( $_GET['action'] ) ? sanitize_text_field( $_GET['action'] ) : '';
if (
is_admin() &&
$request != 'et_fb_ajax_render_shortcode' && // Divi Module Check .
$get_action != 'elementor' && // Elementor Widget Check .
$request != 'elementor_ajax' // Elementor Widget Check .
) {
return;
}
$settings = ultimate_post()->get_setting();
$blocks = array(
'post_list_1' => 'Post_List_1',
'post_list_2' => 'Post_List_2',
'post_list_3' => 'Post_List_3',
'post_list_4' => 'Post_List_4',
'post_grid_1' => 'Post_Grid_1',
'post_grid_2' => 'Post_Grid_2',
'post_grid_3' => 'Post_Grid_3',
'post_grid_4' => 'Post_Grid_4',
'post_grid_5' => 'Post_Grid_5',
'post_grid_6' => 'Post_Grid_6',
'post_grid_7' => 'Post_Grid_7',
'post_slider_1' => 'Post_Slider_1',
'post_slider_2' => 'Post_Slider_2',
'post_module_1' => 'Post_Module_1',
'post_module_2' => 'Post_Module_2',
'heading' => 'Heading',
'image' => 'Image',
'taxonomy' => 'Taxonomy',
'news_ticker' => 'News_Ticker',
'advanced_search' => 'Advanced_Search',
'advanced_filter' => 'Advanced_Filter',
'dark_Light' => 'Dark_Light',
'advanced_list' => 'Advanced_List',
'button' => 'Button',
'youtube_gallery' => 'Youtube_Gallery',
);
foreach ( $blocks as $id => $block ) {
if ( isset( $settings[ $id ] ) && $settings[ $id ] != 'yes' ) {
} else {
$obj = '\ULTP\blocks\\' . $block;
new $obj();
}
}
if ( isset( $settings['ultp_builder'] ) && $settings['ultp_builder'] == 'true' ) {
$builder_blocks = array(
'builder_archive_title' => 'Archive_Title',
'builder_post_title' => 'Post_Title',
'builder_post_content' => 'Post_Content',
'builder_post_featured_image' => 'Post_Featured_Image',
'builder_post_breadcrumb' => 'Post_Breadcrumb',
'builder_post_tag' => 'Post_Tag',
'builder_post_category' => 'Post_Category',
'builder_post_next_previous' => 'Next_Previous',
'builder_post_excerpt' => 'Post_Excerpt',
'builder_author_box' => 'Author_Box',
'builder_post_comments' => 'Post_Comments',
'builder_post_view_count' => 'Post_View_Count',
'builder_post_reading_time' => 'Post_Reading_Time',
'builder_post_comment_count' => 'Post_Comment_Count',
'builder_post_author_meta' => 'Post_Author_Meta',
'builder_post_date_meta' => 'Post_Date_Meta',
'builder_post_social_share' => 'Post_Social_Share',
'builder_advance_post_meta' => 'Advance_Post_Meta',
);
foreach ( $builder_blocks as $id => $block ) {
if ( isset( $settings[ $id ] ) && $settings[ $id ] != 'yes' ) {
} else {
$obj = '\ULTP\blocks\\' . $block;
new $obj();
}
}
}
}
/**
* Blocks Content Start.
*
* @since v.1.0.0
*
* @param ARRAY $blocks The blocks array.
* @param STRING $paged The current page number.
* @param STRING $blockId The block ID.
* @param STRING $blockRaw The raw block name.
* @param STRING $blockName The block name.
* @param STRING $builder The builder flag.
* @param STRING $postId The post ID.
* @param STRING|ARRAY $filterValue The filter value.
* @param STRING $filterType The filter type.
* @param ARRAY $ultp_uniqueIds Unique IDs for pagination.
* @param ARRAY $ultp_current_unique_posts Current unique posts.
* @param STRING $widgetBlockId The widget block ID.
* @param STRING $exclude_post_id The post ID to exclude.
* @param ARRAY $adv_filter_data Advanced filter data.
* @return STRING The AJAX response.
*/
public function pagination_content_return( $blocks, $paged, $blockId, $blockRaw, $blockName, $builder, $postId, $filterValue, $filterType, $ultp_uniqueIds = array(), $ultp_current_unique_posts = array(), $widgetBlockId = '', $exclude_post_id = '', $adv_filter_data = array() ) {
foreach ( $blocks as $key => $value ) {
if ( $blockName == $value['blockName'] ) {
if ( $value['attrs']['blockId'] == $blockId ) {
$objName = str_replace( ' ', '_', ucwords( str_replace( array( 'ultimate-post/', '-' ), array( '', ' ' ), $blockName ) ) );
$new_obj = '\ULTP\blocks\\' . $objName;
$objectBlock = new $new_obj();
$attr = $objectBlock->get_attributes( true );
// Fix for grid blocks that do not support load more by default (pagination block)
if ( isset( $adv_filter_data['notFirstLoad'] ) && $adv_filter_data['notFirstLoad'] ) {
$attr['notFirstLoad'] = $adv_filter_data['notFirstLoad'];
}
$value['attrs']['paged'] = $paged;
if ( $builder ) {
$value['attrs']['builder'] = $builder;
}
if ( $postId ) {
$attr['current_post'] = $postId;
if ( get_post_type( $postId ) == 'ultp_builder' && ! $builder ) {
$attr['current_post'] = $exclude_post_id;
}
}
if ( isset( $value['attrs']['queryUnique'] ) && $value['attrs']['queryUnique'] ) {
$value['attrs']['loadMoreQueryUnique'] = $ultp_uniqueIds;
$ultp_uniqueIds[ $value['attrs']['queryUnique'] ] = array_diff( $ultp_uniqueIds[ $value['attrs']['queryUnique'] ], $ultp_current_unique_posts );
$value['attrs']['savedQueryUnique'] = $ultp_uniqueIds;
$value['attrs']['ultp_current_unique_posts'] = $ultp_current_unique_posts;
}
if ( isset( $value['attrs']['queryUnique'] ) && $value['attrs']['queryUnique'] && ( $value['attrs']['paginationType'] == 'loadMore' || $value['attrs']['paginationType'] == 'navigation' ) && isset( $ultp_uniqueIds ) && ! isset( $ultp_current_unique_posts ) ) {
die();
}
if ( $filterValue ) {
$value['attrs']['queryTaxValue'] = $adv_filter_data['is_adv'] ? wp_json_encode( $filterValue ) : wp_json_encode( array( $filterValue ) );
$value['attrs']['queryTax'] = $filterType;
$value['attrs']['checkFilter'] = true;
$value['attrs']['filterShow'] = $adv_filter_data['filterShow'];
$value['attrs']['queryAuthor'] = $adv_filter_data['author'];
$value['attrs']['queryOrderBy'] = $adv_filter_data['orderby'];
$value['attrs']['queryOrder'] = $adv_filter_data['order'];
$value['attrs']['querySearch'] = $adv_filter_data['search'];
$value['attrs']['queryQuick'] = $adv_filter_data['adv_sort'];
if ( $adv_filter_data['is_adv'] ) {
$value['attrs']['queryRelation'] = 'AND';
}
}
// Exclude Current Post From Pagination
if ( $exclude_post_id ) {
$queryArr = json_decode( $value['attrs']['queryExclude'] );
$queryArr[] = array(
'value' => $exclude_post_id,
'title' => '',
);
$value['attrs']['queryExclude'] = wp_json_encode( $queryArr );
}
$attr = array_merge( $attr, $value['attrs'] );
echo $objectBlock->content($attr, true); //phpcs:ignore
die();
}
}
if ( ! empty( $value['innerBlocks'] ) ) {
$this->pagination_content_return( $value['innerBlocks'], $paged, $blockId, $blockRaw, $blockName, $builder, $postId, $filterValue, $filterType, $ultp_uniqueIds, $ultp_current_unique_posts, $widgetBlockId, $exclude_post_id, $adv_filter_data );
}
}
}
/**
* Next Preview Callback of the Blocks.
*
* @since v.1.0.0
*
* @return STRING The AJAX response.
*/
public function ultp_next_prev_callback() {
if ( ! ( isset( $_REQUEST['wpnonce'] ) && wp_verify_nonce( sanitize_key( wp_unslash( $_REQUEST['wpnonce'] ) ), 'ultp-nonce' ) ) ) {
return;
}
$paged = isset( $_POST['paged'] ) ? sanitize_text_field( $_POST['paged'] ) : '';
$blockId = isset( $_POST['blockId'] ) ? sanitize_text_field( $_POST['blockId'] ) : '';
$postId = isset( $_POST['postId'] ) ? sanitize_text_field( $_POST['postId'] ) : '';
$blockRaw = isset( $_POST['blockName'] ) ? sanitize_text_field( $_POST['blockName'] ) : '';
$builder = isset( $_POST['builder'] ) ? sanitize_text_field( $_POST['builder'] ) : '';
$blockName = str_replace( '_', '/', $blockRaw );
$widgetBlockId = isset( $_POST['widgetBlockId'] ) ? sanitize_text_field( $_POST['widgetBlockId'] ) : '';
$exclude_post_id = isset( $_POST['exclude'] ) ? sanitize_text_field( $_POST['exclude'] ) : '';
if ( $postId ) { // patch security issue
$post = get_post( (int) $postId );
if ( ! $post ) {
wp_send_json_error( array( 'message' => 'Post not found' ) );
return;
}
// Block private posts
if ( $post->post_status === 'private' && ! current_user_can( 'read_private_posts' ) ) {
wp_send_json_error( array( 'message' => 'Private post' ) );
return;
}
// Block draft/pending
if ( in_array( $post->post_status, array( 'draft', 'pending' ), true )
&& ! current_user_can( 'edit_post', $post->ID ) ) {
wp_send_json_error( array( 'message' => 'Not allowed' ) );
return;
}
// Block password protected
if ( post_password_required( $post ) ) {
wp_send_json_error( array( 'message' => 'Password protected' ) );
return;
}
}
$is_adv = isset( $_POST['isAdv'] ) ? ultimate_post()->ultp_rest_sanitize_params( $_POST['isAdv'] ) : false;
$filterValue = isset( $_POST['filterValue'] ) ?
(
is_array( $_POST['filterValue'] ) ?
ultimate_post()->ultp_rest_sanitize_params( $_POST['filterValue'] ) :
sanitize_text_field( $_POST['filterValue'] )
) :
'';
$filterType = isset( $_POST['filterType'] ) ? sanitize_text_field( $_POST['filterType'] ) : '';
$filterShow = isset( $_POST['filterShow'] ) ? sanitize_text_field( $_POST['filterShow'] ) : false;
$checkFilter = isset( $_POST['checkFilter'] ) ? sanitize_text_field( $_POST['checkFilter'] ) : false;
$author = isset( $_POST['author'] ) ? sanitize_text_field( $_POST['author'] ) : false;
$orderby = isset( $_POST['orderby'] ) ? sanitize_text_field( $_POST['orderby'] ) : 'date';
$order = isset( $_POST['order'] ) ? sanitize_text_field( $_POST['order'] ) : 'DESC';
$search = isset( $_POST['search'] ) ? sanitize_text_field( $_POST['search'] ) : '';
$adv_sort = isset( $_POST['adv_sort'] ) ? sanitize_text_field( $_POST['adv_sort'] ) : '';
$adv_filter_data = array(
'is_adv' => filter_var( $is_adv, FILTER_VALIDATE_BOOLEAN ),
'filterShow' => filter_var( $filterShow, FILTER_VALIDATE_BOOLEAN ),
'checkFilter' => filter_var( $checkFilter, FILTER_VALIDATE_BOOLEAN ),
'author' => $author ? wp_json_encode( $author ) : false,
'orderby' => $orderby,
'order' => $order,
'search' => $search,
'adv_sort' => $adv_sort,
'notFirstLoad' => true,
);
$ultp_uniqueIds = isset( $_POST['ultpUniqueIds'] ) ? json_decode( stripslashes( sanitize_text_field( $_POST['ultpUniqueIds'] ) ), true ) : array();
$ultp_current_unique_posts = isset( $_POST['ultpCurrentUniquePosts'] ) ? json_decode( stripslashes( sanitize_text_field( $_POST['ultpCurrentUniquePosts'] ) ), true ) : array();
if ( $widgetBlockId ) {
$blocks = parse_blocks( get_option( 'widget_block' )[ $widgetBlockId ]['content'] );
$this->pagination_content_return( $blocks, $paged, $blockId, $blockRaw, $blockName, $builder, '', $filterValue, $filterType, $ultp_uniqueIds, $ultp_current_unique_posts, $widgetBlockId, '', $adv_filter_data );
} elseif ( $paged && $blockId && $postId && $blockName ) {
$post = get_post( $postId );
if ( has_blocks( $post->post_content ) ) {
$blocks = parse_blocks( $post->post_content );
$this->pagination_content_return( $blocks, $paged, $blockId, $blockRaw, $blockName, $builder, $postId, $filterValue, $filterType, $ultp_uniqueIds, $ultp_current_unique_posts, '', $exclude_post_id, $adv_filter_data );
}
}
}
/**
* Filter Callback of the Blocks.
*
* @since v.1.0.0
*
* @return STRING The AJAX response.
*/
public function ultp_filter_callback() {
if ( ! ( isset( $_REQUEST['wpnonce'] ) && wp_verify_nonce( sanitize_key( wp_unslash( $_REQUEST['wpnonce'] ) ), 'ultp-nonce' ) ) ) {
return;
}
$taxtype = isset( $_POST['taxtype'] ) ? sanitize_text_field( $_POST['taxtype'] ) : '';
if ( $taxtype ) {
$blockId = isset( $_POST['blockId'] ) ? sanitize_text_field( $_POST['blockId'] ) : '';
$postId = isset( $_POST['postId'] ) ? sanitize_text_field( $_POST['postId'] ) : '';
$taxonomy = isset( $_POST['taxonomy'] ) ? sanitize_text_field( $_POST['taxonomy'] ) : '';
$blockRaw = isset( $_POST['blockName'] ) ? sanitize_text_field( $_POST['blockName'] ) : '';
$blockName = str_replace( '_', '/', $blockRaw );
$post = get_post( $postId );
$widgetBlockId = isset( $_POST['widgetBlockId'] ) ? sanitize_text_field( $_POST['widgetBlockId'] ) : '';
$ultp_uniqueIds = isset( $_POST['ultpUniqueIds'] ) ? json_decode( stripslashes( sanitize_text_field( $_POST['ultpUniqueIds'] ) ), true ) : array();
$ultp_current_unique_posts = isset( $_POST['ultpCurrentUniquePosts'] ) ? json_decode( stripslashes( sanitize_text_field( $_POST['ultpCurrentUniquePosts'] ) ), true ) : array();
$toReturn = array();
if ( $widgetBlockId ) {
$blocks = parse_blocks( get_option( 'widget_block' )[ $widgetBlockId ]['content'] );
$data = $this->filter_content_return( $blocks, $blockId, $blockRaw, $blockName, $taxtype, $taxonomy, $postId, $toReturn, $widgetBlockId, array(), $ultp_uniqueIds, $ultp_current_unique_posts );
} elseif ( has_blocks( $post->post_content ) ) {
$blocks = parse_blocks( $post->post_content );
$data = $this->filter_content_return( $blocks, $blockId, $blockRaw, $blockName, $taxtype, $taxonomy, $postId, $toReturn, '', array(), $ultp_uniqueIds, $ultp_current_unique_posts );
}
return wp_send_json_success(
array(
'filteredData' => $data,
)
);
}
}
/**
* Advanced Filter Callback of the Blocks.
*
* @since v.3.2.4
*
* @return STRING The AJAX response.
*/
public function ultp_adv_filter_callback() {
if ( ! ( isset( $_REQUEST['wpnonce'] ) && wp_verify_nonce( sanitize_key( wp_unslash( $_REQUEST['wpnonce'] ) ), 'ultp-nonce' ) ) ) {
return;
}
$blockId = isset( $_POST['blockId'] ) ? sanitize_text_field( $_POST['blockId'] ) : '';
$postId = isset( $_POST['postId'] ) ? sanitize_text_field( $_POST['postId'] ) : '';
$taxonomy = isset( $_POST['taxonomy'] ) ? ultimate_post()->ultp_rest_sanitize_params( $_POST['taxonomy'] ) : '[]';
$builder_id = isset( $_POST['builder_id'] ) ? sanitize_text_field( $_POST['builder_id'] ) : '';
$author = isset( $_POST['author'] ) ? ultimate_post()->ultp_rest_sanitize_params( $_POST['author'] ) : false;
$orderby = isset( $_POST['orderby'] ) ? sanitize_text_field( $_POST['orderby'] ) : ''; // default orderbyt title requested from support
$order = isset( $_POST['order'] ) ? sanitize_text_field( $_POST['order'] ) : 'DESC';
$search = isset( $_POST['search'] ) ? sanitize_text_field( $_POST['search'] ) : '';
$adv_sort = isset( $_POST['adv_sort'] ) ? sanitize_text_field( $_POST['adv_sort'] ) : '';
$adv_filter_data = array(
'is_adv' => true,
'filterShow' => true,
'checkFilter' => true,
'author' => $author ? wp_json_encode( $author ) : false,
'orderby' => $orderby,
'order' => $order,
'search' => $search,
'adv_sort' => $adv_sort,
'builder' => $builder_id,
);
$blockRaw = isset( $_POST['blockName'] ) ? sanitize_text_field( $_POST['blockName'] ) : '';
$blockName = str_replace( '_', '/', $blockRaw );
$post = get_post( $postId );
$widgetBlockId = isset( $_POST['widgetBlockId'] ) ? sanitize_text_field( $_POST['widgetBlockId'] ) : '';
$toReturn = array();
$ultp_uniqueIds = isset( $_POST['ultpUniqueIds'] ) ? json_decode( stripslashes( sanitize_text_field( $_POST['ultpUniqueIds'] ) ), true ) : array();
$ultp_current_unique_posts = isset( $_POST['ultpCurrentUniquePosts'] ) ? json_decode( stripslashes( sanitize_text_field( $_POST['ultpCurrentUniquePosts'] ) ), true ) : array();
if ( $widgetBlockId ) {
$blocks = parse_blocks( get_option( 'widget_block' )[ $widgetBlockId ]['content'] );
$data = $this->filter_content_return( $blocks, $blockId, $blockRaw, $blockName, 'multiTaxonomy', $taxonomy, $postId, $toReturn, $widgetBlockId, $adv_filter_data, $ultp_uniqueIds, $ultp_current_unique_posts );
} elseif ( has_blocks( $post->post_content ) ) {
$blocks = parse_blocks( $post->post_content );
$data = $this->filter_content_return( $blocks, $blockId, $blockRaw, $blockName, 'multiTaxonomy', $taxonomy, $postId, $toReturn, '', $adv_filter_data, $ultp_uniqueIds, $ultp_current_unique_posts );
}
return wp_send_json_success(
array(
'filteredData' => $data,
)
);
}
/**
* Pagination of the Blocks.
*
* @since v.1.0.0
*
* @return STRING The AJAX response.
*/
public function ultp_pagination_callback() {
if ( ! ( isset( $_REQUEST['wpnonce'] ) && wp_verify_nonce( sanitize_key( wp_unslash( $_REQUEST['wpnonce'] ) ), 'ultp-nonce' ) ) ) {
return;
}
$paged = isset( $_POST['paged'] ) ? sanitize_text_field( $_POST['paged'] ) : '';
if ( $paged ) {
$blockId = isset( $_POST['blockId'] ) ? sanitize_text_field( $_POST['blockId'] ) : '';
$postId = isset( $_POST['postId'] ) ? sanitize_text_field( $_POST['postId'] ) : '';
$blockRaw = isset( $_POST['blockName'] ) ? sanitize_text_field( $_POST['blockName'] ) : '';
$builder = isset( $_POST['builder'] ) ? sanitize_text_field( $_POST['builder'] ) : '';
$blockName = str_replace( '_', '/', $blockRaw );
$post = get_post( $postId );
$widgetBlockId = isset( $_POST['widgetBlockId'] ) ? sanitize_text_field( $_POST['widgetBlockId'] ) : '';
$exclude_post_id = isset( $_POST['exclude'] ) ? sanitize_text_field( $_POST['exclude'] ) : '';
$is_adv = isset( $_POST['isAdv'] ) ? ultimate_post()->ultp_rest_sanitize_params( $_POST['isAdv'] ) : false;
$filterValue = array();
if ( isset( $_POST['filterValue'] ) ) {
if ( is_array( $_POST['filterValue'] ) ) {
$filterValue = ultimate_post()->ultp_rest_sanitize_params( $_POST['filterValue'] );
} else {
$decoded = json_decode( $_POST['filterValue'] );
if ( is_array( $decoded ) ) {
$filterValue = ultimate_post()->ultp_rest_sanitize_params( $decoded );
} elseif ( $decoded ) {
$filterValue = sanitize_text_field( $_POST['filterValue'] );
}
}
}
$filterType = isset( $_POST['filterType'] ) ? sanitize_text_field( $_POST['filterType'] ) : '';
$filterShow = isset( $_POST['filterShow'] ) ? sanitize_text_field( $_POST['filterShow'] ) : false;
$checkFilter = isset( $_POST['checkFilter'] ) ? sanitize_text_field( $_POST['checkFilter'] ) : false;
$author = isset( $_POST['author'] ) ? sanitize_text_field( $_POST['author'] ) : false;
$orderby = isset( $_POST['orderby'] ) ? sanitize_text_field( $_POST['orderby'] ) : 'title'; // default orderbyt title requested from support
$order = isset( $_POST['order'] ) ? sanitize_text_field( $_POST['order'] ) : 'DESC';
$search = isset( $_POST['search'] ) ? sanitize_text_field( $_POST['search'] ) : '';
$adv_sort = isset( $_POST['adv_sort'] ) ? sanitize_text_field( $_POST['adv_sort'] ) : '';
$adv_filter_data = array(
'is_adv' => filter_var( $is_adv, FILTER_VALIDATE_BOOLEAN ),
'filterShow' => filter_var( $filterShow, FILTER_VALIDATE_BOOLEAN ),
'checkFilter' => filter_var( $checkFilter, FILTER_VALIDATE_BOOLEAN ),
'author' => $author ? wp_json_encode( $author ) : false,
'orderby' => $orderby,
'order' => $order,
'search' => $search,
'adv_sort' => $adv_sort,
);
$ultp_uniqueIds = isset( $_POST['ultpUniqueIds'] ) ? json_decode( stripslashes( sanitize_text_field( $_POST['ultpUniqueIds'] ) ), true ) : array();
$ultp_current_unique_posts = isset( $_POST['ultpCurrentUniquePosts'] ) ? json_decode( stripslashes( sanitize_text_field( $_POST['ultpCurrentUniquePosts'] ) ), true ) : array();
if ( $widgetBlockId ) {
$blocks = parse_blocks( get_option( 'widget_block' )[ $widgetBlockId ]['content'] );
$this->pagination_content_return( $blocks, $paged, $blockId, $blockRaw, $blockName, $builder, '', $filterValue, $filterType, $ultp_uniqueIds, $ultp_current_unique_posts, $widgetBlockId, '', $adv_filter_data );
} elseif ( has_blocks( $post->post_content ) ) {
$blocks = parse_blocks( $post->post_content );
$this->pagination_content_return( $blocks, $paged, $blockId, $blockRaw, $blockName, $builder, $postId, $filterValue, $filterType, $ultp_uniqueIds, $ultp_current_unique_posts, '', $exclude_post_id, $adv_filter_data );
}
}
}
/**
* Share Count callback.
*
* @since v.1.0.0
*
* @return void
*/
public function ultp_share_count_callback() {
if ( ! ( isset( $_REQUEST['wpnonce'] ) && wp_verify_nonce( sanitize_key( wp_unslash( $_REQUEST['wpnonce'] ) ), 'ultp-nonce' ) ) ) {
return;
}
$post_id = isset( $_POST['postId'] ) ? absint( $_POST['postId'] ) : 0;
// Validate post ID
if ( ! $post_id ) {
wp_send_json_error( array( 'message' => 'Invalid post ID' ) );
return;
}
// Check if post exists
$post = get_post( $post_id );
if ( ! $post ) {
wp_send_json_error( array( 'message' => 'Post not found' ) );
return;
}
// Block private posts
if ( $post->post_status === 'private' && ! current_user_can( 'read_private_posts' ) ) {
wp_send_json_error( array( 'message' => 'Private post' ) );
return;
}
// Block draft/pending posts
if ( in_array( $post->post_status, array( 'draft', 'pending' ), true )
&& ! current_user_can( 'edit_post', $post->ID ) ) {
wp_send_json_error( array( 'message' => 'Not allowed' ) );
return;
}
// Block password protected posts
if ( post_password_required( $post ) ) {
wp_send_json_error( array( 'message' => 'Password protected' ) );
return;
}
// Only allow published posts to have share count updated
if ( $post->post_status !== 'publish' ) {
wp_send_json_error( array( 'message' => 'Post not published' ) );
return;
}
// Rate limiting - 60 second cooldown per user per post
$user_identifier = is_user_logged_in() ? 'user_' . get_current_user_id() : 'ip_' . sanitize_text_field( wp_unslash( $_SERVER['REMOTE_ADDR'] ?? '' ) );
$transient_key = 'ultp_share_' . $post_id . '_' . md5( $user_identifier );
if ( get_transient( $transient_key ) ) {
return; // Already shared within last 60 seconds
}
set_transient( $transient_key, true, 60 ); // 60 seconds cooldown
// Always increment by 1 from database - ignore POST shareCount
$current_count = get_post_meta( $post_id, 'share_count', true );
$current_count = $current_count ? absint( $current_count ) : 0;
$new_count = $current_count + 1;
update_post_meta( $post_id, 'share_count', $new_count );
}
/**
* Filter Callback of the Blocks.
*
* @since v.1.0.0
*
* @param ARRAY $blocks The blocks array.
* @param STRING $blockId The block ID.
* @param STRING $blockRaw The raw block name.
* @param STRING $blockName The block name.
* @param STRING $taxtype The taxonomy type.
* @param STRING|ARRAY $taxonomy The taxonomy.
* @param STRING $postId The post ID.
* @param ARRAY $toReturn The array to return.
* @param STRING $widgetBlockId The widget block ID.
* @param ARRAY $adv_filter_data The advanced filter data.
* @param ARRAY $ultp_uniqueIds The unique IDs.
* @param ARRAY $ultp_current_unique_posts The current unique posts.
* @return ARRAY
*/
public function filter_content_return( $blocks, $blockId, $blockRaw, $blockName, $taxtype, $taxonomy, $postId, &$toReturn, $widgetBlockId = '', $adv_filter_data = array(), $ultp_uniqueIds = array(), $ultp_current_unique_posts = array() ) {
foreach ( $blocks as $key => $value ) {
if ( ( $value['blockName'] ?? '' ) === 'core/shortcode' ) {
if ( preg_match( '/id="([^"]+)"/', $value['innerHTML'] ?? '', $matches ) ) {
$template_post = get_post( $matches[1] );
if ( $template_post && ! empty( $template_post->post_content ) ) {
$template_blocks = parse_blocks( $template_post->post_content );
// recurse into the expanded blocks instead
$this->filter_content_return( $template_blocks, $blockId, $blockRaw, $blockName, $taxtype, $taxonomy, $postId, $toReturn, $widgetBlockId, $adv_filter_data, $ultp_uniqueIds, $ultp_current_unique_posts );
continue; // skip the shortcode block itself
}
}
}
if ( $blockName == $value['blockName'] ) {
if ( $value['attrs']['blockId'] == $blockId ) {
$objName = str_replace( ' ', '_', ucwords( str_replace( array( 'ultimate-post/', '-' ), array( '', ' ' ), $blockName ) ) );
$new_obj = '\ULTP\blocks\\' . $objName;
$objectBlock = new $new_obj();
$attr = $objectBlock->get_attributes( true );
if ( $taxonomy ) {
if ( isset( $adv_filter_data['is_adv'] ) && $adv_filter_data['is_adv'] ) {
$value['attrs']['queryTaxValue'] = wp_json_encode( $taxonomy );
$value['attrs']['queryRelation'] = 'AND';
$value['attrs']['queryAuthor'] = $adv_filter_data['author'];
$value['attrs']['queryOrder'] = $adv_filter_data['order'];
$value['attrs']['querySearch'] = $adv_filter_data['search'];
$value['attrs']['queryQuick'] = $adv_filter_data['adv_sort'];
if ( ! empty( $adv_filter_data['orderby'] ) ) {
$value['attrs']['queryOrderBy'] = $adv_filter_data['orderby'];
}
} else {
$value['attrs']['queryTaxValue'] = wp_json_encode( array( $taxonomy ) );
}
$value['attrs']['queryTax'] = $taxtype;
$value['attrs']['ajaxCall'] = true;
}
if ( isset( $value['attrs']['queryNumber'] ) ) {
$value['attrs']['queryNumber'] = $value['attrs']['queryNumber'];
}
if ( isset( $value['attrs']['queryUnique'] ) && $value['attrs']['queryUnique'] ) {
$value['attrs']['loadMoreQueryUnique'] = $ultp_uniqueIds;
$ultp_uniqueIds[ $value['attrs']['queryUnique'] ] = array_diff( $ultp_uniqueIds[ $value['attrs']['queryUnique'] ], $ultp_current_unique_posts );
$value['attrs']['savedQueryUnique'] = $ultp_uniqueIds;
$value['attrs']['ultp_current_unique_posts'] = $ultp_current_unique_posts;
}
if ( $adv_filter_data['builder'] ) {
$value['attrs']['builder'] = $adv_filter_data['builder'];
}
$attr = array_merge( $attr, $value['attrs'] );
$filter_attributes = array();
$filter_attributes['isAdv'] = isset( $adv_filter_data['is_adv'] ) ? $adv_filter_data['is_adv'] : false;
$filter_attributes['queryTaxValue'] = $filter_attributes['isAdv'] ? wp_json_encode( $taxonomy ) : $taxonomy;
$filter_attributes['queryTax'] = $taxtype;
if ( $filter_attributes['isAdv'] ) {
$filter_attributes['queryAuthor'] = $adv_filter_data['author'];
$filter_attributes['queryOrder'] = $adv_filter_data['order'];
$filter_attributes['querySearch'] = $adv_filter_data['search'];
$filter_attributes['queryQuick'] = $adv_filter_data['adv_sort'];
$filter_attributes['queryOrderBy'] =
! empty( $adv_filter_data['orderby'] ) ? $adv_filter_data['orderby'] : ( $value['attrs']['queryOrderBy'] ?? '' );
}
$pagination = $this->pagination_for_filter( $attr, $postId, $blockRaw, $filter_attributes );
$toReturn = array(
'blocks' => $objectBlock->content( $attr, true ),
'notFound' => isset( $attr['notFoundMessage'] ) ? $attr['notFoundMessage'] : '',
'pagination' => $pagination['pagination_content'],
'data_attrs' => $pagination['data_attrs'],
'data_all_attrs' => $pagination['data_attrs'],
'paginationType' => $attr['paginationType'],
'paginationShow' => $attr['paginationShow'],
);
}
}
if ( ! empty( $value['innerBlocks'] ) ) {
$this->filter_content_return( $value['innerBlocks'], $blockId, $blockRaw, $blockName, $taxtype, $taxonomy, $postId, $toReturn, $widgetBlockId, $adv_filter_data, $ultp_uniqueIds, $ultp_current_unique_posts );
}
}
return $toReturn;
}
/**
* Pagination for filter callback
*
* @since v.2.8.9
*
* @param ARRAY $attr .
* @param STRING $postId .
* @param STRING $blockRaw .
* @param ARRAY $filter_attributes .
* @return STRING
*/
public function pagination_for_filter( $attr, $postId, $blockRaw, $filter_attributes ) {
$attr['queryNumber'] = ultimate_post()->get_post_number( 4, $attr['queryNumber'], $attr['queryNumPosts'] );
$recent_posts = new \WP_Query( ultimate_post()->get_query( $attr ) );
$pageNum = ultimate_post()->get_page_number( $attr, $recent_posts->found_posts );
$datasets = ultimate_post()->get_adv_data_attrs( null, $filter_attributes );
$datasets .= ' data-for="ultp-block-' . sanitize_html_class( $attr['blockId'] ) . '" ';
$wraper_after = '';
$style = $pageNum == 1 ? 'style="display:none"' : '';
if ( $attr['paginationType'] == 'loadMore' ) {
$wraper_after .= '';
$wraper_after .= 'get_builder_attr( $attr['queryType'] ) . $datasets . '>' . ( isset( $attr['loadMoreText'] ) ? $attr['loadMoreText'] : 'Load More' ) . ' ' . ultimate_post()->get_svg_icon( 'refresh' ) . '';
$wraper_after .= '
';
} elseif ( $attr['paginationType'] == 'navigation' ) {
$wraper_after .= 'get_builder_attr( $attr['queryType'] ) . $datasets . '>';
$wraper_after .= ultimate_post()->next_prev();
$wraper_after .= '
';
} elseif ( $attr['paginationType'] == 'pagination' ) {
$wraper_after .= '';
}
wp_reset_query();
// queryQuick
return array(
'pagination_content' => $wraper_after,
'data_attrs' => wp_json_encode( array(
'paged' => 1,
'blockid' => $attr['blockId'],
'postid' => $postId,
'pages' => $pageNum,
'blockname' => $blockRaw,
'filter_value' => isset( $filter_attributes['queryTaxValue'] ) ? $filter_attributes['queryTaxValue'] : '',
'filter_type' => isset( $filter_attributes['queryTax'] ) ? $filter_attributes['queryTax'] : '',
'filter_author' => isset( $filter_attributes['queryAuthor'] ) ? $filter_attributes['queryAuthor'] : '',
'filter_order' => isset( $filter_attributes['queryOrder'] ) ? $filter_attributes['queryOrder'] : 'DESC',
'filter_orderby' => isset( $filter_attributes['queryOrderBy'] ) ? $filter_attributes['queryOrderBy'] : '',
'filter_search' => isset( $filter_attributes['querySearch'] ) ? $filter_attributes['querySearch'] : '',
'filter_queryQuick' => isset( $filter_attributes['queryQuick'] ) ? $filter_attributes['queryQuick'] : '',
'filter_for' => 'ultp-block-' . $attr['blockId'],
)),
);
}
/**
* Nonce Generation Callback
*
* @since v.5.0.6
*
* @return STRING The AJAX response.
*/
public function ultp_get_nonce_callback() {
nocache_headers();
wp_send_json_success(
array(
'nonce' => wp_create_nonce( 'ultp-nonce' ),
)
);
}
}
```