| @@ -1,5 +1,6 @@ | ||
| 1 | 1 | <?php |
| 2 | + | |
| 2 | 3 | // +----------------------------------------------------------------------+ |
| 3 | 4 | // | Copyright 2013 Madpixels (email : visualizer@madpixels.net) | |
| 4 | 5 | // +----------------------------------------------------------------------+ |
| 5 | 6 | // | This program is free software; you can redistribute it and/or modify | |
| @@ -17,8 +18,9 @@ | ||
| 17 | 18 | // | MA 02110-1301 USA | |
| 18 | 19 | // +----------------------------------------------------------------------+ |
| 19 | 20 | // | Author: Eugene Manuilov <eugene@manuilov.org> | |
| 20 | 21 | // +----------------------------------------------------------------------+ |
| 22 | + | |
| 21 | 23 | /** |
| 22 | 24 | * The module for all stuff related to getting, editing, creating and deleting charts. |
| 23 | 25 | * |
| 24 | 26 | * @category Visualizer |
| @@ -45,13 +47,13 @@ | ||
| 45 | 47 | * |
| 46 | 48 | * @since 1.0.0 |
| 47 | 49 | * |
| 48 | 50 | * @access public |
| 49 | - * | |
| 50 | 51 | * @param Visualizer_Plugin $plugin The instance of the plugin. |
| 51 | 52 | */ |
| 52 | 53 | public function __construct( Visualizer_Plugin $plugin ) { |
| 53 | 54 | parent::__construct( $plugin ); |
| 55 | + | |
| 54 | 56 | $this->_addAjaxAction( Visualizer_Plugin::ACTION_GET_CHARTS, 'getCharts' ); |
| 55 | 57 | $this->_addAjaxAction( Visualizer_Plugin::ACTION_DELETE_CHART, 'deleteChart' ); |
| 56 | 58 | $this->_addAjaxAction( Visualizer_Plugin::ACTION_CREATE_CHART, 'renderChartPages' ); |
| 57 | 59 | $this->_addAjaxAction( Visualizer_Plugin::ACTION_EDIT_CHART, 'renderChartPages' ); |
| @@ -56,63 +58,24 @@ | ||
| 56 | 58 | $this->_addAjaxAction( Visualizer_Plugin::ACTION_CREATE_CHART, 'renderChartPages' ); |
| 57 | 59 | $this->_addAjaxAction( Visualizer_Plugin::ACTION_EDIT_CHART, 'renderChartPages' ); |
| 58 | 60 | $this->_addAjaxAction( Visualizer_Plugin::ACTION_UPLOAD_DATA, 'uploadData' ); |
| 59 | 61 | $this->_addAjaxAction( Visualizer_Plugin::ACTION_CLONE_CHART, 'cloneChart' ); |
| 60 | - // Added by Ash/Upwork | |
| 61 | - $this->_addAjaxAction( Visualizer_Plugin::ACTION_EXPORT_DATA, 'exportData' ); | |
| 62 | - // Added by Ash/Upwork | |
| 63 | 62 | } |
| 64 | 63 | |
| 65 | 64 | /** |
| 66 | - * Fetches charts from database. | |
| 65 | + * Sends json response. | |
| 67 | 66 | * |
| 68 | 67 | * @since 1.0.0 |
| 69 | 68 | * |
| 70 | - * @access public | |
| 69 | + * @access private | |
| 70 | + * @param array $results The response array. | |
| 71 | 71 | */ |
| 72 | - public function getCharts() { | |
| 73 | - $query_args = array( | |
| 74 | - 'post_type' => Visualizer_Plugin::CPT_VISUALIZER, | |
| 75 | - 'posts_per_page' => 9, | |
| 76 | - 'paged' => filter_input( | |
| 77 | - INPUT_GET, 'page', FILTER_VALIDATE_INT, array( | |
| 78 | - 'options' => array( | |
| 79 | - 'min_range' => 1, | |
| 80 | - 'default' => 1, | |
| 81 | - ), | |
| 82 | - ) | |
| 83 | - ), | |
| 84 | - ); | |
| 85 | - $filter = filter_input( INPUT_GET, 's', FILTER_SANITIZE_STRING ); | |
| 86 | - if ( empty( $filter ) ) { | |
| 87 | - // 'filter' is from the modal from the add media button. | |
| 88 | - $filter = filter_input( INPUT_GET, 'filter', FILTER_SANITIZE_STRING ); | |
| 89 | - } | |
| 72 | + private function _sendResponse( $results ) { | |
| 73 | + header( 'Content-type: application/json' ); | |
| 74 | + nocache_headers(); | |
| 90 | 75 | |
| 91 | - if ( $filter && in_array( $filter, Visualizer_Plugin::getChartTypes() ) ) { | |
| 92 | - $query_args['meta_query'] = array( | |
| 93 | - array( | |
| 94 | - 'key' => Visualizer_Plugin::CF_CHART_TYPE, | |
| 95 | - 'value' => $filter, | |
| 96 | - 'compare' => '=', | |
| 97 | - ), | |
| 98 | - ); | |
| 99 | - } | |
| 100 | - $query = new WP_Query( $query_args ); | |
| 101 | - $charts = array(); | |
| 102 | - while ( $query->have_posts() ) { | |
| 103 | - $chart = $query->next_post(); | |
| 104 | - $chart_data = $this->_getChartArray( $chart ); | |
| 105 | - $chart_data['id'] = $chart->ID; | |
| 106 | - $charts[] = $chart_data; | |
| 107 | - } | |
| 108 | - self::_sendResponse( | |
| 109 | - array( | |
| 110 | - 'success' => true, | |
| 111 | - 'data' => $charts, | |
| 112 | - 'total' => $query->max_num_pages, | |
| 113 | - ) | |
| 114 | - ); | |
| 76 | + echo json_encode( $results ); | |
| 77 | + exit; | |
| 115 | 78 | } |
| 116 | 79 | |
| 117 | 80 | /** |
| 118 | 81 | * Returns chart data required for rendering. |
| @@ -119,11 +82,9 @@ | ||
| 119 | 82 | * |
| 120 | 83 | * @since 1.0.0 |
| 121 | 84 | * |
| 122 | 85 | * @access private |
| 123 | - * | |
| 124 | 86 | * @param WP_Post $chart The chart object. |
| 125 | - * | |
| 126 | 87 | * @return array The array of chart data. |
| 127 | 88 | */ |
| 128 | 89 | private function _getChartArray( WP_Post $chart = null ) { |
| 129 | 90 | if ( is_null( $chart ) ) { |
| @@ -128,11 +89,12 @@ | ||
| 128 | 89 | private function _getChartArray( WP_Post $chart = null ) { |
| 129 | 90 | if ( is_null( $chart ) ) { |
| 130 | 91 | $chart = $this->_chart; |
| 131 | 92 | } |
| 132 | - $type = get_post_meta( $chart->ID, Visualizer_Plugin::CF_CHART_TYPE, true ); | |
| 93 | + | |
| 94 | + $type = get_post_meta( $chart->ID, Visualizer_Plugin::CF_CHART_TYPE, true ); | |
| 133 | 95 | $series = apply_filters( Visualizer_Plugin::FILTER_GET_CHART_SERIES, get_post_meta( $chart->ID, Visualizer_Plugin::CF_SERIES, true ), $chart->ID, $type ); |
| 134 | - $data = apply_filters( Visualizer_Plugin::FILTER_GET_CHART_DATA, unserialize( $chart->post_content ), $chart->ID, $type ); | |
| 96 | + $data = apply_filters( Visualizer_Plugin::FILTER_GET_CHART_DATA, unserialize( $chart->post_content ), $chart->ID, $type ); | |
| 135 | 97 | |
| 136 | 98 | return array( |
| 137 | 99 | 'type' => $type, |
| 138 | 100 | 'series' => $series, |
| @@ -141,21 +103,54 @@ | ||
| 141 | 103 | ); |
| 142 | 104 | } |
| 143 | 105 | |
| 144 | 106 | /** |
| 145 | - * Sends json response. | |
| 107 | + * Fetches charts from database. | |
| 146 | 108 | * |
| 147 | 109 | * @since 1.0.0 |
| 148 | 110 | * |
| 149 | - * @access private | |
| 150 | - * | |
| 151 | - * @param array $results The response array. | |
| 111 | + * @access public | |
| 152 | 112 | */ |
| 153 | - public static function _sendResponse( $results ) { | |
| 154 | - header( 'Content-type: application/json' ); | |
| 155 | - nocache_headers(); | |
| 156 | - echo json_encode( $results ); | |
| 157 | - defined( 'WP_TESTS_DOMAIN' ) ? wp_die() : exit(); | |
| 113 | + public function getCharts() { | |
| 114 | + $query_args = array( | |
| 115 | + 'post_type' => Visualizer_Plugin::CPT_VISUALIZER, | |
| 116 | + 'posts_per_page' => 9, | |
| 117 | + 'paged' => filter_input( INPUT_GET, 'page', FILTER_VALIDATE_INT, array( | |
| 118 | + 'options' => array( | |
| 119 | + 'min_range' => 1, | |
| 120 | + 'default' => 1, | |
| 121 | + ) | |
| 122 | + ) ) | |
| 123 | + ); | |
| 124 | + | |
| 125 | + $filter = filter_input( INPUT_GET, 'filter' ); | |
| 126 | + if ( $filter && in_array( $filter, Visualizer_Plugin::getChartTypes() ) ) { | |
| 127 | + $query_args['meta_query'] = array( | |
| 128 | + array( | |
| 129 | + 'key' => Visualizer_Plugin::CF_CHART_TYPE, | |
| 130 | + 'value' => $filter, | |
| 131 | + 'compare' => '=', | |
| 132 | + ), | |
| 133 | + ); | |
| 134 | + } | |
| 135 | + | |
| 136 | + $query = new WP_Query( $query_args ); | |
| 137 | + | |
| 138 | + $charts = array(); | |
| 139 | + while( $query->have_posts() ) { | |
| 140 | + $chart = $query->next_post(); | |
| 141 | + | |
| 142 | + $chart_data = $this->_getChartArray( $chart ); | |
| 143 | + $chart_data['id'] = $chart->ID; | |
| 144 | + | |
| 145 | + $charts[] = $chart_data; | |
| 146 | + } | |
| 147 | + | |
| 148 | + $this->_sendResponse( array( | |
| 149 | + 'success' => true, | |
| 150 | + 'data' => $charts, | |
| 151 | + 'total' => $query->max_num_pages, | |
| 152 | + ) ); | |
| 158 | 153 | } |
| 159 | 154 | |
| 160 | 155 | /** |
| 161 | 156 | * Deletes a chart from database. |
| @@ -165,36 +160,30 @@ | ||
| 165 | 160 | * |
| 166 | 161 | * @access public |
| 167 | 162 | */ |
| 168 | 163 | public function deleteChart() { |
| 169 | - $is_post = $_SERVER['REQUEST_METHOD'] == 'POST'; | |
| 164 | + $is_post = $_SERVER['REQUEST_METHOD'] == 'POST'; | |
| 170 | 165 | $input_method = $is_post ? INPUT_POST : INPUT_GET; |
| 171 | - $chart_id = $success = false; | |
| 172 | - $nonce = wp_verify_nonce( filter_input( $input_method, 'nonce' ) ); | |
| 173 | - $capable = current_user_can( 'delete_posts' ); | |
| 166 | + | |
| 167 | + $chart_id = $success = false; | |
| 168 | + $nonce = Visualizer_Security::verifyNonce( filter_input( $input_method, 'nonce' ) ); | |
| 169 | + $capable = current_user_can( 'delete_posts' ); | |
| 174 | 170 | if ( $nonce && $capable ) { |
| 175 | - $chart_id = filter_input( | |
| 176 | - $input_method, 'chart', FILTER_VALIDATE_INT, array( | |
| 177 | - 'options' => array( | |
| 178 | - 'min_range' => 1, | |
| 179 | - ), | |
| 180 | - ) | |
| 181 | - ); | |
| 171 | + $chart_id = filter_input( $input_method, 'chart', FILTER_VALIDATE_INT, array( 'options' => array( 'min_range' => 1 ) ) ); | |
| 182 | 172 | if ( $chart_id ) { |
| 183 | - $chart = get_post( $chart_id ); | |
| 173 | + $chart = get_post( $chart_id ); | |
| 184 | 174 | $success = $chart && $chart->post_type == Visualizer_Plugin::CPT_VISUALIZER; |
| 185 | 175 | } |
| 186 | 176 | } |
| 177 | + | |
| 187 | 178 | if ( $success ) { |
| 188 | 179 | wp_delete_post( $chart_id, true ); |
| 189 | 180 | } |
| 181 | + | |
| 190 | 182 | if ( $is_post ) { |
| 191 | - self::_sendResponse( | |
| 192 | - array( | |
| 193 | - 'success' => $success, | |
| 194 | - ) | |
| 195 | - ); | |
| 183 | + $this->_sendResponse( array( 'success' => $success ) ); | |
| 196 | 184 | } |
| 185 | + | |
| 197 | 186 | wp_redirect( wp_get_referer() ); |
| 198 | 187 | exit; |
| 199 | 188 | } |
| 200 | 189 | |
| @@ -206,166 +195,62 @@ | ||
| 206 | 195 | * |
| 207 | 196 | * @access public |
| 208 | 197 | */ |
| 209 | 198 | public function renderChartPages() { |
| 210 | - defined( 'IFRAME_REQUEST' ) || define( 'IFRAME_REQUEST', 1 ); | |
| 199 | + define ( 'IFRAME_REQUEST', 1 ); | |
| 200 | + | |
| 211 | 201 | // check chart, if chart not exists, will create new one and redirects to the same page with proper chart id |
| 212 | - $chart_id = isset( $_GET['chart'] ) ? filter_var( $_GET['chart'], FILTER_VALIDATE_INT ) : ''; | |
| 213 | - if ( ! $chart_id || ! ( $chart = get_post( $chart_id ) ) || $chart->post_type != Visualizer_Plugin::CPT_VISUALIZER ) { | |
| 202 | + $chart_id = filter_input( INPUT_GET, 'chart', FILTER_VALIDATE_INT ); | |
| 203 | + if ( !$chart_id || !( $chart = get_post( $chart_id ) ) || $chart->post_type != Visualizer_Plugin::CPT_VISUALIZER ) { | |
| 214 | 204 | $default_type = 'line'; |
| 215 | - $source = new Visualizer_Source_Csv( VISUALIZER_ABSPATH . DIRECTORY_SEPARATOR . 'samples' . DIRECTORY_SEPARATOR . $default_type . '.csv' ); | |
| 205 | + | |
| 206 | + $source = new Visualizer_Source_Csv( VISUALIZER_ABSPATH . DIRECTORY_SEPARATOR . 'samples' . DIRECTORY_SEPARATOR . $default_type . '.csv' ); | |
| 216 | 207 | $source->fetch(); |
| 217 | - $chart_id = wp_insert_post( | |
| 218 | - array( | |
| 219 | - 'post_type' => Visualizer_Plugin::CPT_VISUALIZER, | |
| 220 | - 'post_title' => 'Visualization', | |
| 221 | - 'post_author' => get_current_user_id(), | |
| 222 | - 'post_status' => 'auto-draft', | |
| 223 | - 'post_content' => $source->getData(), | |
| 224 | - ) | |
| 225 | - ); | |
| 226 | - if ( $chart_id && ! is_wp_error( $chart_id ) ) { | |
| 208 | + | |
| 209 | + $chart_id = wp_insert_post( array( | |
| 210 | + 'post_type' => Visualizer_Plugin::CPT_VISUALIZER, | |
| 211 | + 'post_title' => 'Visualization', | |
| 212 | + 'post_author' => get_current_user_id(), | |
| 213 | + 'post_status' => 'auto-draft', | |
| 214 | + 'post_content' => $source->getData(), | |
| 215 | + ) ); | |
| 216 | + | |
| 217 | + if ( $chart_id && !is_wp_error( $chart_id ) ) { | |
| 227 | 218 | add_post_meta( $chart_id, Visualizer_Plugin::CF_CHART_TYPE, $default_type ); |
| 228 | 219 | add_post_meta( $chart_id, Visualizer_Plugin::CF_DEFAULT_DATA, 1 ); |
| 229 | 220 | add_post_meta( $chart_id, Visualizer_Plugin::CF_SOURCE, $source->getSourceName() ); |
| 230 | 221 | add_post_meta( $chart_id, Visualizer_Plugin::CF_SERIES, $source->getSeries() ); |
| 231 | - add_post_meta( | |
| 232 | - $chart_id, Visualizer_Plugin::CF_SETTINGS, array( | |
| 233 | - 'focusTarget' => 'datum', | |
| 234 | - ) | |
| 235 | - ); | |
| 236 | - do_action( 'visualizer_pro_new_chart_defaults', $chart_id ); | |
| 222 | + add_post_meta( $chart_id, Visualizer_Plugin::CF_SETTINGS, array() ); | |
| 237 | 223 | } |
| 238 | - wp_redirect( add_query_arg( 'chart', (int) $chart_id ) ); | |
| 239 | - defined( 'WP_TESTS_DOMAIN' ) ? wp_die() : exit(); | |
| 224 | + | |
| 225 | + wp_redirect( add_query_arg( 'chart', (int)$chart_id ) ); | |
| 226 | + exit; | |
| 240 | 227 | } |
| 228 | + | |
| 241 | 229 | // enqueue and register scripts and styles |
| 242 | - wp_register_script( 'visualizer-chosen', VISUALIZER_ABSURL . 'js/lib/chosen.jquery.min.js', array( 'jquery' ), Visualizer_Plugin::VERSION ); | |
| 243 | - wp_register_style( 'visualizer-chosen', VISUALIZER_ABSURL . 'css/lib/chosen.min.css', array(), Visualizer_Plugin::VERSION ); | |
| 230 | + wp_register_style( 'visualizer-frame', VISUALIZER_ABSURL . 'css/frame.css', array(), Visualizer_Plugin::VERSION ); | |
| 244 | 231 | |
| 245 | - wp_register_style( 'visualizer-frame', VISUALIZER_ABSURL . 'css/frame.css', array( 'visualizer-chosen' ), Visualizer_Plugin::VERSION ); | |
| 246 | - wp_register_script( 'visualizer-frame', VISUALIZER_ABSURL . 'js/frame.js', array( 'visualizer-chosen' ), Visualizer_Plugin::VERSION, true ); | |
| 247 | - wp_register_script( 'google-jsapi-new', '//www.gstatic.com/charts/loader.js', array(), null, true ); | |
| 248 | - wp_register_script( 'google-jsapi-old', '//www.google.com/jsapi', array( 'google-jsapi-new' ), null, true ); | |
| 249 | - wp_register_script( | |
| 250 | - 'visualizer-render', VISUALIZER_ABSURL . 'js/render.js', array( | |
| 251 | - 'google-jsapi-old', | |
| 252 | - 'google-jsapi-new', | |
| 253 | - 'visualizer-frame', | |
| 254 | - ), Visualizer_Plugin::VERSION, true | |
| 255 | - ); | |
| 256 | - wp_register_script( | |
| 257 | - 'visualizer-preview', VISUALIZER_ABSURL . 'js/preview.js', array( | |
| 258 | - 'wp-color-picker', | |
| 259 | - 'visualizer-render', | |
| 260 | - ), Visualizer_Plugin::VERSION, true | |
| 261 | - ); | |
| 262 | - // added by Ash/Upwork | |
| 263 | - if ( VISUALIZER_PRO ) { | |
| 264 | - global $Visualizer_Pro; | |
| 265 | - $Visualizer_Pro->_addScriptsAndStyles(); | |
| 266 | - } | |
| 232 | + wp_register_script( 'visualizer-frame', VISUALIZER_ABSURL . 'js/frame.js', array( 'jquery' ), Visualizer_Plugin::VERSION, true ); | |
| 233 | + wp_register_script( 'google-jsapi', '//www.google.com/jsapi', array(), null, true ); | |
| 234 | + wp_register_script( 'visualizer-render', VISUALIZER_ABSURL . 'js/render.js', array( 'google-jsapi', 'visualizer-frame' ), Visualizer_Plugin::VERSION, true ); | |
| 235 | + wp_register_script( 'visualizer-preview', VISUALIZER_ABSURL . 'js/preview.js', array( 'wp-color-picker', 'visualizer-render' ), Visualizer_Plugin::VERSION, true ); | |
| 236 | + | |
| 267 | 237 | // dispatch pages |
| 268 | - $this->_chart = get_post( $chart_id ); | |
| 269 | - $tab = isset( $_GET['tab'] ) && ! empty( $_GET['tab'] ) ? $_GET['tab'] : 'visualizer'; | |
| 270 | - | |
| 271 | - // skip chart type pages only for existing charts. | |
| 272 | - if ( VISUALIZER_SKIP_CHART_TYPE_PAGE && 'auto-draft' !== $this->_chart->post_status ) { | |
| 273 | - $tab = 'settings'; | |
| 274 | - } | |
| 275 | - | |
| 276 | - switch ( $tab ) { | |
| 238 | + $this->_chart = $chart; | |
| 239 | + switch ( filter_input( INPUT_GET, 'tab' ) ) { | |
| 240 | + case 'data': | |
| 241 | + $this->_handleDataPage(); | |
| 242 | + break; | |
| 277 | 243 | case 'settings': |
| 278 | - $this->_handleDataAndSettingsPage(); | |
| 244 | + $this->_handleSettingsPage(); | |
| 279 | 245 | break; |
| 280 | - case 'type': // fall through. | |
| 281 | - case 'visualizer': // fall through. | |
| 246 | + case 'type': | |
| 247 | + default: | |
| 282 | 248 | $this->_handleTypesPage(); |
| 283 | 249 | break; |
| 284 | - default: | |
| 285 | - do_action( 'visualizer_pro_handle_tab', $tab, $this->_chart ); | |
| 286 | - break; | |
| 287 | 250 | } |
| 288 | - defined( 'WP_TESTS_DOMAIN' ) ? wp_die() : exit(); | |
| 289 | - } | |
| 290 | 251 | |
| 291 | - /** | |
| 292 | - * Handle data and settings page | |
| 293 | - */ | |
| 294 | - private function _handleDataAndSettingsPage() { | |
| 295 | - if ( isset( $_POST['map_api_key'] ) ) { | |
| 296 | - update_option( 'visualizer-map-api-key', $_POST['map_api_key'] ); | |
| 297 | - } | |
| 298 | - if ( $_SERVER['REQUEST_METHOD'] == 'POST' && isset( $_GET['nonce'] ) && wp_verify_nonce( $_GET['nonce'] ) ) { | |
| 299 | - if ( $this->_chart->post_status == 'auto-draft' ) { | |
| 300 | - $this->_chart->post_status = 'publish'; | |
| 301 | - wp_update_post( $this->_chart->to_array() ); | |
| 302 | - } | |
| 303 | - update_post_meta( $this->_chart->ID, Visualizer_Plugin::CF_SETTINGS, $_POST ); | |
| 304 | - $render = new Visualizer_Render_Page_Send(); | |
| 305 | - $render->text = sprintf( '[visualizer id="%d"]', $this->_chart->ID ); | |
| 306 | - wp_iframe( array( $render, 'render' ) ); | |
| 307 | - | |
| 308 | - return; | |
| 309 | - } | |
| 310 | - $data = $this->_getChartArray(); | |
| 311 | - $sidebar = ''; | |
| 312 | - $sidebar_class = 'Visualizer_Render_Sidebar_Type_' . ucfirst( $data['type'] ); | |
| 313 | - if ( class_exists( $sidebar_class, true ) ) { | |
| 314 | - $sidebar = new $sidebar_class( $data['settings'] ); | |
| 315 | - $sidebar->__series = $data['series']; | |
| 316 | - $sidebar->__data = $data['data']; | |
| 317 | - } else { | |
| 318 | - $sidebar = apply_filters( 'visualizer_pro_chart_type_sidebar', '', $data ); | |
| 319 | - if ( $sidebar != '' ) { | |
| 320 | - $sidebar->__series = $data['series']; | |
| 321 | - $sidebar->__data = $data['data']; | |
| 322 | - } | |
| 323 | - } | |
| 324 | - unset( $data['settings']['width'], $data['settings']['height'] ); | |
| 325 | - wp_enqueue_style( 'visualizer-frame' ); | |
| 326 | - wp_enqueue_style( 'wp-color-picker' ); | |
| 327 | - wp_enqueue_style( 'visualizer-frame' ); | |
| 328 | - wp_enqueue_script( 'visualizer-preview' ); | |
| 329 | - wp_enqueue_script( 'visualizer-render' ); | |
| 330 | - wp_localize_script( | |
| 331 | - 'visualizer-render', 'visualizer', array( | |
| 332 | - 'l10n' => array( | |
| 333 | - 'invalid_source' => esc_html__( 'You have entered invalid URL. Please, insert proper URL.', 'visualizer' ), | |
| 334 | - 'loading' => esc_html__( 'Loading...', 'visualizer' ), | |
| 335 | - ), | |
| 336 | - 'charts' => array( | |
| 337 | - 'canvas' => $data, | |
| 338 | - ), | |
| 339 | - 'map_api_key' => get_option( 'visualizer-map-api-key' ), | |
| 340 | - 'ajax' => array( | |
| 341 | - 'url' => admin_url( 'admin-ajax.php' ), | |
| 342 | - 'nonces' => array( | |
| 343 | - 'permissions' => wp_create_nonce( Visualizer_Plugin::ACTION_FETCH_PERMISSIONS_DATA ), | |
| 344 | - ), | |
| 345 | - 'actions' => array( | |
| 346 | - 'permissions' => Visualizer_Plugin::ACTION_FETCH_PERMISSIONS_DATA, | |
| 347 | - ), | |
| 348 | - ), | |
| 349 | - ) | |
| 350 | - ); | |
| 351 | - $render = new Visualizer_Render_Page_Data(); | |
| 352 | - $render->chart = $this->_chart; | |
| 353 | - $render->type = $data['type']; | |
| 354 | - $render->sidebar = $sidebar; | |
| 355 | - if ( filter_input( INPUT_GET, 'library', FILTER_VALIDATE_BOOLEAN ) ) { | |
| 356 | - $render->button = filter_input( INPUT_GET, 'action' ) == Visualizer_Plugin::ACTION_EDIT_CHART | |
| 357 | - ? esc_html__( 'Save Chart', 'visualizer' ) | |
| 358 | - : esc_html__( 'Create Chart', 'visualizer' ); | |
| 359 | - } else { | |
| 360 | - $render->button = esc_attr__( 'Insert Chart', 'visualizer' ); | |
| 361 | - } | |
| 362 | - if ( VISUALIZER_PRO ) { | |
| 363 | - global $Visualizer_Pro; | |
| 364 | - $Visualizer_Pro->_enqueueScriptsAndStyles( $data ); | |
| 365 | - } | |
| 366 | - $this->_addAction( 'admin_head', 'renderFlattrScript' ); | |
| 367 | - wp_iframe( array( $render, 'render' ) ); | |
| 252 | + exit; | |
| 368 | 253 | } |
| 369 | 254 | |
| 370 | 255 | /** |
| 371 | 256 | * Handles chart type selection page. |
| @@ -375,50 +260,133 @@ | ||
| 375 | 260 | * @access private |
| 376 | 261 | */ |
| 377 | 262 | private function _handleTypesPage() { |
| 378 | 263 | // process post request |
| 379 | - if ( $_SERVER['REQUEST_METHOD'] == 'POST' && wp_verify_nonce( filter_input( INPUT_POST, 'nonce' ) ) ) { | |
| 264 | + if ( $_SERVER['REQUEST_METHOD'] == 'POST' && Visualizer_Security::verifyNonce( filter_input( INPUT_POST, 'nonce' ) ) ) { | |
| 380 | 265 | $type = filter_input( INPUT_POST, 'type' ); |
| 381 | 266 | if ( in_array( $type, Visualizer_Plugin::getChartTypes() ) ) { |
| 382 | 267 | // save new chart type |
| 383 | 268 | update_post_meta( $this->_chart->ID, Visualizer_Plugin::CF_CHART_TYPE, $type ); |
| 269 | + | |
| 384 | 270 | // if the chart has default data, update it with appropriate default data for new type |
| 385 | 271 | if ( filter_var( get_post_meta( $this->_chart->ID, Visualizer_Plugin::CF_DEFAULT_DATA, true ), FILTER_VALIDATE_BOOLEAN ) ) { |
| 386 | 272 | $source = new Visualizer_Source_Csv( VISUALIZER_ABSPATH . DIRECTORY_SEPARATOR . 'samples' . DIRECTORY_SEPARATOR . $type . '.csv' ); |
| 387 | 273 | $source->fetch(); |
| 274 | + | |
| 388 | 275 | $this->_chart->post_content = $source->getData(); |
| 389 | 276 | wp_update_post( $this->_chart->to_array() ); |
| 277 | + | |
| 390 | 278 | update_post_meta( $this->_chart->ID, Visualizer_Plugin::CF_SERIES, $source->getSeries() ); |
| 391 | 279 | } |
| 280 | + | |
| 392 | 281 | // redirect to next tab |
| 393 | - // changed by Ash/Upwork | |
| 394 | - wp_redirect( add_query_arg( 'tab', 'settings' ) ); | |
| 395 | - | |
| 282 | + wp_redirect( add_query_arg( 'tab', 'data' ) ); | |
| 396 | 283 | return; |
| 397 | 284 | } |
| 398 | 285 | } |
| 399 | - $render = new Visualizer_Render_Page_Types(); | |
| 400 | - $render->type = get_post_meta( $this->_chart->ID, Visualizer_Plugin::CF_CHART_TYPE, true ); | |
| 401 | - $render->types = Visualizer_Module_Admin::_getChartTypesLocalized(); | |
| 286 | + | |
| 287 | + $render = new Visualizer_Render_Page_Types(); | |
| 288 | + $render->type = get_post_meta( $this->_chart->ID, Visualizer_Plugin::CF_CHART_TYPE, true ); | |
| 289 | + $render->types = Visualizer_Plugin::getChartTypes(); | |
| 402 | 290 | $render->chart = $this->_chart; |
| 291 | + | |
| 403 | 292 | wp_enqueue_style( 'visualizer-frame' ); |
| 404 | 293 | wp_enqueue_script( 'visualizer-frame' ); |
| 405 | - wp_iframe( array( $render, 'render' ) ); | |
| 294 | + | |
| 295 | + wp_iframe( array( $render, 'render') ); | |
| 406 | 296 | } |
| 407 | 297 | |
| 408 | 298 | /** |
| 409 | - * Renders flattr script in the iframe <head> | |
| 299 | + * Handles chart data page. | |
| 410 | 300 | * |
| 411 | - * @since 1.4.2 | |
| 412 | - * @action admin_head | |
| 301 | + * @since 1.0.0 | |
| 413 | 302 | * |
| 414 | - * @access public | |
| 303 | + * @access private | |
| 415 | 304 | */ |
| 416 | - public function renderFlattrScript() { | |
| 417 | - echo ''; | |
| 305 | + private function _handleDataPage() { | |
| 306 | + $data = $this->_getChartArray(); | |
| 307 | + | |
| 308 | + $render = new Visualizer_Render_Page_Data(); | |
| 309 | + $render->chart = $this->_chart; | |
| 310 | + $render->type = $data['type']; | |
| 311 | + | |
| 312 | + unset( $data['settings']['width'], $data['settings']['height'] ); | |
| 313 | + | |
| 314 | + wp_enqueue_style( 'visualizer-frame' ); | |
| 315 | + wp_enqueue_script( 'visualizer-render' ); | |
| 316 | + wp_localize_script( 'visualizer-render', 'visualizer', array( | |
| 317 | + 'l10n' => array( | |
| 318 | + 'remotecsv_prompt' => esc_html__( 'Please, enter the URL of CSV file:', Visualizer_Plugin::NAME ), | |
| 319 | + 'invalid_source' => esc_html__( 'You have entered invalid URL. Please, insert proper URL.', Visualizer_Plugin::NAME ), | |
| 320 | + ), | |
| 321 | + 'charts' => array( | |
| 322 | + 'canvas' => $data, | |
| 323 | + ), | |
| 324 | + ) ); | |
| 325 | + | |
| 326 | + wp_iframe( array( $render, 'render') ); | |
| 418 | 327 | } |
| 419 | - // changed by Ash/Upwork | |
| 328 | + | |
| 420 | 329 | /** |
| 330 | + * Handles chart settigns page. | |
| 331 | + * | |
| 332 | + * @since 1.0.0 | |
| 333 | + * | |
| 334 | + * @access private | |
| 335 | + */ | |
| 336 | + private function _handleSettingsPage() { | |
| 337 | + if ( $_SERVER['REQUEST_METHOD'] == 'POST' && Visualizer_Security::verifyNonce( filter_input( INPUT_GET, 'nonce' ) ) ) { | |
| 338 | + if ( $this->_chart->post_status == 'auto-draft' ) { | |
| 339 | + $this->_chart->post_status = 'publish'; | |
| 340 | + wp_update_post( $this->_chart->to_array() ); | |
| 341 | + } | |
| 342 | + | |
| 343 | + update_post_meta( $this->_chart->ID, Visualizer_Plugin::CF_SETTINGS, $_POST ); | |
| 344 | + | |
| 345 | + $render = new Visualizer_Render_Page_Send(); | |
| 346 | + $render->text = sprintf( '[visualizer id="%d"]', $this->_chart->ID ); | |
| 347 | + | |
| 348 | + wp_iframe( array( $render, 'render') ); | |
| 349 | + return; | |
| 350 | + } | |
| 351 | + | |
| 352 | + $data = $this->_getChartArray(); | |
| 353 | + | |
| 354 | + $sidebar = ''; | |
| 355 | + $sidebar_class = 'Visualizer_Render_Sidebar_Type_' . ucfirst( $data['type'] ); | |
| 356 | + if ( class_exists( $sidebar_class, true ) ) { | |
| 357 | + $sidebar = new $sidebar_class( $data['settings'] ); | |
| 358 | + $sidebar->__series = $data['series']; | |
| 359 | + $sidebar->__data = $data['data']; | |
| 360 | + } | |
| 361 | + | |
| 362 | + unset( $data['settings']['width'], $data['settings']['height'] ); | |
| 363 | + | |
| 364 | + wp_enqueue_style( 'wp-color-picker' ); | |
| 365 | + wp_enqueue_style( 'visualizer-frame' ); | |
| 366 | + | |
| 367 | + wp_enqueue_script( 'visualizer-preview' ); | |
| 368 | + wp_localize_script( 'visualizer-render', 'visualizer', array( | |
| 369 | + 'charts' => array( | |
| 370 | + 'canvas' => $data, | |
| 371 | + ), | |
| 372 | + ) ); | |
| 373 | + | |
| 374 | + $render = new Visualizer_Render_Page_Settings(); | |
| 375 | + | |
| 376 | + $render->sidebar = $sidebar; | |
| 377 | + if ( filter_input( INPUT_GET, 'library', FILTER_VALIDATE_BOOLEAN ) ) { | |
| 378 | + $render->button = filter_input( INPUT_GET, 'action' ) == Visualizer_Plugin::ACTION_EDIT_CHART | |
| 379 | + ? esc_html__( 'Save Chart', Visualizer_Plugin::NAME ) | |
| 380 | + : esc_html__( 'Create Chart', Visualizer_Plugin::NAME ); | |
| 381 | + } else { | |
| 382 | + $render->button = esc_attr__( 'Insert Chart', Visualizer_Plugin::NAME ); | |
| 383 | + } | |
| 384 | + | |
| 385 | + wp_iframe( array( $render, 'render') ); | |
| 386 | + } | |
| 387 | + | |
| 388 | + /** | |
| 421 | 389 | * Parses uploaded CSV file and saves new data for the chart. |
| 422 | 390 | * |
| 423 | 391 | * @since 1.0.0 |
| 424 | 392 | * |
| @@ -425,61 +393,48 @@ | ||
| 425 | 393 | * @access public |
| 426 | 394 | */ |
| 427 | 395 | public function uploadData() { |
| 428 | 396 | // validate nonce |
| 429 | - // do not use filter_input as it does not work for phpunit test cases, use filter_var instead | |
| 430 | - if ( ! isset( $_GET['nonce'] ) || ! wp_verify_nonce( $_GET['nonce'] ) ) { | |
| 397 | + if ( !Visualizer_Security::verifyNonce( filter_input( INPUT_GET, 'nonce' ) ) ) { | |
| 431 | 398 | status_header( 403 ); |
| 432 | 399 | exit; |
| 433 | 400 | } |
| 401 | + | |
| 434 | 402 | // check chart, if chart exists |
| 435 | - $chart_id = isset( $_GET['chart'] ) ? filter_var( $_GET['chart'], FILTER_VALIDATE_INT ) : ''; | |
| 436 | - if ( ! $chart_id || ! ( $chart = get_post( $chart_id ) ) || $chart->post_type != Visualizer_Plugin::CPT_VISUALIZER ) { | |
| 403 | + $chart_id = filter_input( INPUT_GET, 'chart', FILTER_VALIDATE_INT ); | |
| 404 | + if ( !$chart_id || !( $chart = get_post( $chart_id ) ) || $chart->post_type != Visualizer_Plugin::CPT_VISUALIZER ) { | |
| 437 | 405 | status_header( 400 ); |
| 438 | 406 | exit; |
| 439 | 407 | } |
| 440 | - if ( ! isset( $_POST['vz-import-time'] ) ) { | |
| 441 | - apply_filters( 'visualizer_pro_remove_schedule', $chart_id ); | |
| 442 | - } | |
| 443 | 408 | |
| 444 | - if ( ! isset( $_POST['chart_data_src'] ) || Visualizer_Plugin::CF_SOURCE_FILTER !== $_POST['chart_data_src'] ) { | |
| 445 | - // delete the filters in case this chart is being uploaded from other data sources | |
| 446 | - delete_post_meta( $chart_id, 'visualizer-filter-config' ); | |
| 447 | - } | |
| 448 | - | |
| 449 | 409 | $source = null; |
| 450 | 410 | $render = new Visualizer_Render_Page_Update(); |
| 451 | - if ( isset( $_POST['remote_data'] ) && filter_var( $_POST['remote_data'], FILTER_VALIDATE_URL ) ) { | |
| 452 | - $source = new Visualizer_Source_Csv_Remote( $_POST['remote_data'] ); | |
| 453 | - if ( isset( $_POST['vz-import-time'] ) ) { | |
| 454 | - apply_filters( 'visualizer_pro_chart_schedule', $chart_id, $_POST['remote_data'], $_POST['vz-import-time'] ); | |
| 455 | - } | |
| 411 | + if ( filter_input( INPUT_POST, 'remote_data', FILTER_VALIDATE_URL ) ) { | |
| 412 | + $source = new Visualizer_Source_Csv_Remote( $_POST['remote_data'] ); | |
| 456 | 413 | } elseif ( isset( $_FILES['local_data'] ) && $_FILES['local_data']['error'] == 0 ) { |
| 457 | - $source = new Visualizer_Source_Csv( $_FILES['local_data']['tmp_name'] ); | |
| 458 | - // Added by Ash/Upwork | |
| 459 | - } elseif ( isset( $_POST['chart_data'] ) && strlen( $_POST['chart_data'] ) > 0 ) { | |
| 460 | - $source = apply_filters( 'visualizer_pro_handle_chart_data', $_POST['chart_data'], '' ); | |
| 461 | - // Added by Ash/Upwork | |
| 462 | - } else { | |
| 463 | - $render->message = esc_html__( 'CSV file with chart data was not uploaded. Please, try again.', 'visualizer' ); | |
| 414 | + $source = new Visualizer_Source_Csv( $_FILES['local_data']['tmp_name'] ); | |
| 415 | + } else { | |
| 416 | + $render->message = esc_html__( "CSV file with chart data was not uploaded. Please, try again.", Visualizer_Plugin::NAME ); | |
| 464 | 417 | } |
| 418 | + | |
| 465 | 419 | if ( $source ) { |
| 466 | 420 | if ( $source->fetch() ) { |
| 467 | 421 | $chart->post_content = $source->getData(); |
| 468 | 422 | wp_update_post( $chart->to_array() ); |
| 423 | + | |
| 469 | 424 | update_post_meta( $chart->ID, Visualizer_Plugin::CF_SERIES, $source->getSeries() ); |
| 470 | 425 | update_post_meta( $chart->ID, Visualizer_Plugin::CF_SOURCE, $source->getSourceName() ); |
| 471 | 426 | update_post_meta( $chart->ID, Visualizer_Plugin::CF_DEFAULT_DATA, 0 ); |
| 472 | - $render->data = json_encode( $source->getRawData() ); | |
| 427 | + | |
| 428 | + $render->data = json_encode( $source->getRawData() ); | |
| 473 | 429 | $render->series = json_encode( $source->getSeries() ); |
| 474 | 430 | } else { |
| 475 | - $render->message = esc_html__( 'CSV file is broken or invalid. Please, try again.', 'visualizer' ); | |
| 431 | + $render->message = esc_html__( "CSV file is broken or invalid. Please, try again.", Visualizer_Plugin::NAME ); | |
| 476 | 432 | } |
| 477 | 433 | } |
| 434 | + | |
| 478 | 435 | $render->render(); |
| 479 | - if ( ! ( defined( 'VISUALIZER_DO_NOT_DIE' ) && VISUALIZER_DO_NOT_DIE ) ) { | |
| 480 | - defined( 'WP_TESTS_DOMAIN' ) ? wp_die() : exit(); | |
| 481 | - } | |
| 436 | + exit; | |
| 482 | 437 | } |
| 483 | 438 | |
| 484 | 439 | /** |
| 485 | 440 | * Clones the chart. |
| @@ -489,113 +444,43 @@ | ||
| 489 | 444 | * @access public |
| 490 | 445 | */ |
| 491 | 446 | public function cloneChart() { |
| 492 | 447 | $chart_id = $success = false; |
| 493 | - $nonce = wp_verify_nonce( filter_input( INPUT_GET, 'nonce' ), Visualizer_Plugin::ACTION_CLONE_CHART ); | |
| 494 | - $capable = current_user_can( 'edit_posts' ); | |
| 448 | + $nonce = Visualizer_Security::verifyNonce( filter_input( INPUT_GET, 'nonce' ), Visualizer_Plugin::ACTION_CLONE_CHART ); | |
| 449 | + $capable = current_user_can( 'edit_posts' ); | |
| 495 | 450 | if ( $nonce && $capable ) { |
| 496 | - $chart_id = filter_input( | |
| 497 | - INPUT_GET, 'chart', FILTER_VALIDATE_INT, array( | |
| 498 | - 'options' => array( | |
| 499 | - 'min_range' => 1, | |
| 500 | - ), | |
| 501 | - ) | |
| 502 | - ); | |
| 451 | + $chart_id = filter_input( INPUT_GET, 'chart', FILTER_VALIDATE_INT, array( 'options' => array( 'min_range' => 1 ) ) ); | |
| 503 | 452 | if ( $chart_id ) { |
| 504 | - $chart = get_post( $chart_id ); | |
| 453 | + $chart = get_post( $chart_id ); | |
| 505 | 454 | $success = $chart && $chart->post_type == Visualizer_Plugin::CPT_VISUALIZER; |
| 506 | 455 | } |
| 507 | 456 | } |
| 457 | + | |
| 508 | 458 | $redirect = wp_get_referer(); |
| 509 | 459 | if ( $success ) { |
| 510 | - $new_chart_id = wp_insert_post( | |
| 511 | - array( | |
| 512 | - 'post_type' => Visualizer_Plugin::CPT_VISUALIZER, | |
| 513 | - 'post_title' => 'Visualization', | |
| 514 | - 'post_author' => get_current_user_id(), | |
| 515 | - 'post_status' => $chart->post_status, | |
| 516 | - 'post_content' => $chart->post_content, | |
| 517 | - ) | |
| 518 | - ); | |
| 519 | - if ( $new_chart_id && ! is_wp_error( $new_chart_id ) ) { | |
| 460 | + $new_chart_id = wp_insert_post( array( | |
| 461 | + 'post_type' => Visualizer_Plugin::CPT_VISUALIZER, | |
| 462 | + 'post_title' => 'Visualization', | |
| 463 | + 'post_author' => get_current_user_id(), | |
| 464 | + 'post_status' => $chart->post_status, | |
| 465 | + 'post_content' => $chart->post_content, | |
| 466 | + ) ); | |
| 467 | + | |
| 468 | + if ( $new_chart_id && !is_wp_error( $new_chart_id ) ) { | |
| 520 | 469 | add_post_meta( $new_chart_id, Visualizer_Plugin::CF_CHART_TYPE, get_post_meta( $chart_id, Visualizer_Plugin::CF_CHART_TYPE, true ) ); |
| 521 | 470 | add_post_meta( $new_chart_id, Visualizer_Plugin::CF_DEFAULT_DATA, get_post_meta( $chart_id, Visualizer_Plugin::CF_DEFAULT_DATA, true ) ); |
| 522 | 471 | add_post_meta( $new_chart_id, Visualizer_Plugin::CF_SOURCE, get_post_meta( $chart_id, Visualizer_Plugin::CF_SOURCE, true ) ); |
| 523 | 472 | add_post_meta( $new_chart_id, Visualizer_Plugin::CF_SERIES, get_post_meta( $chart_id, Visualizer_Plugin::CF_SERIES, true ) ); |
| 524 | 473 | add_post_meta( $new_chart_id, Visualizer_Plugin::CF_SETTINGS, get_post_meta( $chart_id, Visualizer_Plugin::CF_SETTINGS, true ) ); |
| 525 | - $redirect = add_query_arg( | |
| 526 | - array( | |
| 527 | - 'page' => 'visualizer', | |
| 528 | - 'type' => filter_input( INPUT_GET, 'type' ), | |
| 529 | - ), admin_url( 'upload.php' ) | |
| 530 | - ); | |
| 474 | + | |
| 475 | + $redirect = add_query_arg( array( | |
| 476 | + 'page' => 'visualizer', | |
| 477 | + 'type' => filter_input( INPUT_GET, 'type' ), | |
| 478 | + ), admin_url( 'upload.php' ) ); | |
| 531 | 479 | } |
| 532 | 480 | } |
| 481 | + | |
| 533 | 482 | wp_redirect( $redirect ); |
| 534 | 483 | exit; |
| 535 | 484 | } |
| 536 | 485 | |
| 537 | - /** | |
| 538 | - * Exports the chart data | |
| 539 | - * | |
| 540 | - * @since 1.0.0 | |
| 541 | - * | |
| 542 | - * @access public | |
| 543 | - */ | |
| 544 | - public function exportData() { | |
| 545 | - check_ajax_referer( Visualizer_Plugin::ACTION_EXPORT_DATA . Visualizer_Plugin::VERSION, 'security' ); | |
| 546 | - $capable = current_user_can( 'edit_posts' ); | |
| 547 | - if ( $capable ) { | |
| 548 | - $chart_id = isset( $_GET['chart'] ) ? filter_var( | |
| 549 | - $_GET['chart'], FILTER_VALIDATE_INT, array( | |
| 550 | - 'options' => array( | |
| 551 | - 'min_range' => 1, | |
| 552 | - ), | |
| 553 | - ) | |
| 554 | - ) : ''; | |
| 555 | - if ( $chart_id ) { | |
| 556 | - $data = $this->_getDataAs( $chart_id, 'csv' ); | |
| 557 | - if ( $data ) { | |
| 558 | - echo wp_send_json_success( $data ); | |
| 559 | - } | |
| 560 | - } | |
| 561 | - } | |
| 562 | - | |
| 563 | - defined( 'WP_TESTS_DOMAIN' ) ? wp_die() : exit(); | |
| 564 | - } | |
| 565 | - | |
| 566 | - /** | |
| 567 | - * Handles chart data page. | |
| 568 | - * | |
| 569 | - * @since 1.0.0 | |
| 570 | - * | |
| 571 | - * @access private | |
| 572 | - */ | |
| 573 | - private function _handleDataPage() { | |
| 574 | - $data = $this->_getChartArray(); | |
| 575 | - $render = new Visualizer_Render_Page_Data(); | |
| 576 | - $render->chart = $this->_chart; | |
| 577 | - $render->type = $data['type']; | |
| 578 | - unset( $data['settings']['width'], $data['settings']['height'] ); | |
| 579 | - wp_enqueue_style( 'visualizer-frame' ); | |
| 580 | - wp_enqueue_script( 'visualizer-render' ); | |
| 581 | - wp_localize_script( | |
| 582 | - 'visualizer-render', 'visualizer', array( | |
| 583 | - 'l10n' => array( | |
| 584 | - 'invalid_source' => esc_html__( 'You have entered invalid URL. Please, insert proper URL.', 'visualizer' ), | |
| 585 | - 'loading' => esc_html__( 'Loading...', 'visualizer' ), | |
| 586 | - ), | |
| 587 | - 'charts' => array( | |
| 588 | - 'canvas' => $data, | |
| 589 | - ), | |
| 590 | - ) | |
| 591 | - ); | |
| 592 | - // Added by Ash/Upwork | |
| 593 | - if ( VISUALIZER_PRO ) { | |
| 594 | - global $Visualizer_Pro; | |
| 595 | - $Visualizer_Pro->_enqueueScriptsAndStyles( $data ); | |
| 596 | - } | |
| 597 | - // Added by Ash/Upwork | |
| 598 | - $this->_addAction( 'admin_head', 'renderFlattrScript' ); | |
| 599 | - wp_iframe( array( $render, 'render' ) ); | |
| 600 | - } | |
| 601 | -} | |
| 486 | +} | |
