← All changes | classes/Visualizer/Module/Wizard.php +32 -94 4.0.8 → 3.10.7 View file →

		@@ -72,9 +72,8 @@
72	72	add_action( "load-$hook", array( $this, 'visualizer_load_setup_wizard_page' ) );
73	73	}
74	74	}
75	75
76		-
77	76	/**
78	77	* Method to register the setup wizard page.
79	78	*
80	79	* @access public
		@@ -152,14 +151,8 @@
152	151	* @param bool $redirect_to_dashboard Redirect to dashboard.
153	152	* @return bool|void
154	153	*/
155	154	public function dismissWizard( $redirect_to_dashboard = true ) {
156		- if ( ! current_user_can( 'manage_options' ) ) {
157		- wp_die( esc_html__( 'You do not have permission to perform this action.', 'visualizer' ), '', array( 'response' => 403 ) );
158		- }
159		- if ( false !== $redirect_to_dashboard ) {
160		- check_admin_referer( 'visualizer_dismiss_wizard' );
161		- }
162	155	// phpcs:ignore WordPress.Security.NonceVerification.Recommended
163	156	$status = isset( $_REQUEST['status'] ) ? (int) $_REQUEST['status'] : 0;
164	157	update_option( 'visualizer_fresh_install', $status );
165	158	delete_option( 'visualizer_wizard_data' );
		@@ -174,12 +167,9 @@
174	167	* Setup wizard process.
175	168	*/
176	169	public function visualizer_wizard_step_process() {
177	170	check_ajax_referer( VISUALIZER_ABSPATH, 'security' );
178		- if ( ! current_user_can( 'manage_options' ) ) {
179		- wp_send_json( array( 'status' => 0 ), 403 );
180		- }
181		- $step = ! empty( $_POST['step'] ) ? sanitize_text_field( wp_unslash( $_POST['step'] ) ) : 1;
	171	+ $step = ! empty( $_POST['step'] ) ? filter_input( INPUT_POST, 'step', FILTER_SANITIZE_STRING ) : 1;
182	172	switch ( $step ) {
183	173	case 'step_2':
184	174	$this->setup_wizard_import_chart();
185	175	break;
		@@ -202,9 +192,9 @@
202	192	* Step: 2 import chart.
203	193	*/
204	194	private function setup_wizard_import_chart() {
205	195	// phpcs:ignore WordPress.Security.NonceVerification.Missing
206		- $chart_type = ! empty( $_POST['chart_type'] ) ? sanitize_text_field( wp_unslash( $_POST['chart_type'] ) ) : '';
	196	+ $chart_type = ! empty( $_POST['chart_type'] ) ? filter_input( INPUT_POST, 'chart_type', FILTER_SANITIZE_STRING ) : '';
207	197	$chart_status = Visualizer_Module_Admin::checkChartStatus( $chart_type );
208	198	if ( ! $chart_status ) {
209	199	wp_send_json(
210	200	array(
		@@ -242,9 +232,9 @@
242	232	update_post_meta( $chart_id, Visualizer_Plugin::CF_SOURCE, $source->getSourceName() );
243	233	update_post_meta( $chart_id, Visualizer_Plugin::CF_SERIES, $series );
244	234	update_post_meta( $chart_id, Visualizer_Plugin::CF_CHART_LIBRARY, '' );
245	235
246		- $data = Visualizer_Module::decode_content( $data );
	236	+ $data = maybe_unserialize( $data );
247	237	$setting_series = array();
248	238	$setting_slices = array();
249	239	foreach ( $data as $s ) {
250	240	$setting_series[] = array(
		@@ -350,45 +340,8 @@
350	340	'max' => '',
351	341	'min' => '',
352	342	),
353	343	),
354		- 'customcss' => array(
355		- 'headerRow' => array(
356		- 'background-color' => '',
357		- 'color' => '',
358		- 'transform' => '',
359		- ),
360		- 'tableRow' => array(
361		- 'background-color' => '',
362		- 'color' => '',
363		- 'transform' => '',
364		- ),
365		- 'oddTableRow' => array(
366		- 'background-color' => '',
367		- 'color' => '',
368		- 'transform' => '',
369		- ),
370		- 'selectedTableRow' => array(
371		- 'background-color' => '',
372		- 'color' => '',
373		- 'transform' => '',
374		- ),
375		- 'hoverTableRow' => array(
376		- 'background-color' => '',
377		- 'color' => '',
378		- 'transform' => '',
379		- ),
380		- 'headerCell' => array(
381		- 'background-color' => '',
382		- 'color' => '',
383		- 'transform' => '',
384		- ),
385		- 'tableCell' => array(
386		- 'background-color' => '',
387		- 'color' => '',
388		- 'transform' => '',
389		- ),
390		- ),
391	344	)
392	345	);
393	346	$wizard_data = array(
394	347	'chart_type' => $chart_type,
		@@ -395,10 +348,9 @@
395	348	'chart_id' => $chart_id,
396	349	);
397	350	$this->update_wizard_data( $wizard_data, false );
398	351	$response = array(
399		- 'success' => 1,
400		- 'chart_id' => $chart_id,
	352	+ 'success' => 1,
401	353	);
402	354	}
403	355	wp_send_json( $response );
404	356	exit;
		@@ -426,9 +378,9 @@
426	378	*/
427	379	private function setup_wizard_create_draft_page( $return_page_id = false ) {
428	380	$add_basic_shortcode = ! empty( $_POST['add_basic_shortcode'] ) ? sanitize_text_field( wp_unslash( $_POST['add_basic_shortcode'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Missing
429	381	$add_basic_shortcode = 'true' === $add_basic_shortcode ? true : false;
430		- $basic_shortcode = ! empty( $_POST['basic_shortcode'] ) ? sanitize_text_field( wp_unslash( $_POST['basic_shortcode'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Missing
	382	+ $basic_shortcode = ! empty( $_POST['basic_shortcode'] ) ? filter_input( INPUT_POST, 'basic_shortcode', FILTER_SANITIZE_STRING ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Missing
431	383
432	384	if ( ! $add_basic_shortcode ) {
433	385	wp_send_json(
434	386	array(
		@@ -486,9 +438,9 @@
486	438	* Step: 3 Install plugin.
487	439	*/
488	440	private function setup_wizard_install_plugin() {
489	441	// phpcs:ignore WordPress.Security.NonceVerification.Missing
490		- $slug = ! empty( $_POST['slug'] ) ? sanitize_text_field( wp_unslash( $_POST['slug'] ) ) : '';
	442	+ $slug = ! empty( $_POST['slug'] ) ? filter_input( INPUT_POST, 'slug', FILTER_SANITIZE_STRING ) : '';
491	443	if ( empty( $slug ) ) {
492	444	wp_send_json(
493	445	array(
494	446	'status' => 0,
		@@ -506,12 +458,10 @@
506	458	);
507	459	}
508	460
509	461	if ( ! empty( $slug ) ) {
510		- $wizard_data = get_option( self::OPTION_NAME, array() );
511	462	require_once ABSPATH . 'wp-admin/includes/class-wp-upgrader.php';
512	463	include_once ABSPATH . 'wp-admin/includes/plugin-install.php';
513		- require_once ABSPATH . 'wp-admin/includes/plugin.php';
514	464
515	465	$api = plugins_api(
516	466	'plugin_information',
517	467	array(
		@@ -571,38 +521,13 @@
571	521
572	522	wp_send_json( $status );
573	523	}
574	524
575		- $installed_plugins = get_plugins( '/' . sanitize_key( wp_unslash( $slug ) ) );
576		- if ( ! empty( $installed_plugins ) ) {
577		- $plugin_files = array_keys( $installed_plugins );
578		- $plugin_file = sanitize_key( wp_unslash( $slug ) ) . '/' . $plugin_files[0];
579		- activate_plugin( $plugin_file );
580		- }
581		- $wizard_data_updated = false;
582		- if ( 'optimole-wp' === $slug ) {
583		- delete_transient( 'optml_fresh_install' );
584		- // Update wizard data.
585		- $wizard_data['enable_perfomance'] = true;
586		- $wizard_data_updated = true;
587		- }
588		- if ( 'otter-blocks' === $slug ) {
589		- // Update wizard data.
590		- $wizard_data['enable_otter_blocks'] = true;
591		- $wizard_data_updated = true;
592		- // Suppress Otter's post-activation redirects so the user stays in Visualizer.
593		- update_option( 'themeisle_blocks_settings_redirect', '0' );
594		- update_option( 'themeisle_blocks_settings_onboarding', '0' );
595		- }
596		- if ( 'wp-cloudflare-page-cache' === $slug ) {
597		- // Update wizard data.
598		- $wizard_data['enable_page_cache'] = true;
599		- $wizard_data_updated = true;
600		- update_option( 'swcfpc_dashboard_redirect', false );
601		- }
602		- if ( $wizard_data_updated ) {
603		- $this->update_wizard_data( $wizard_data );
604		- }
	525	+ activate_plugin( 'optimole-wp/optimole-wp.php' );
	526	+ delete_transient( 'optml_fresh_install' );
	527	+ // Update wizard data.
	528	+ $wizard_data['enable_perfomance'] = true;
	529	+ $this->update_wizard_data( $wizard_data );
605	530
606	531	wp_send_json(
607	532	array(
608	533	'status' => 1,
		@@ -651,19 +576,18 @@
651	576	);
652	577	}
653	578
654	579	if ( $with_subscribe && is_email( $email ) ) {
655		- wp_remote_post(
	580	+ $request_res = wp_remote_post(
656	581	VISUALIZER_SUBSCRIBE_API,
657	582	array(
658		- 'timeout' => 5,
659		- 'blocking' => false,
660		- 'headers' => array(
	583	+ 'timeout' => 100,
	584	+ 'headers' => array(
661	585	'Content-Type' => 'application/json',
662	586	'Cache-Control' => 'no-cache',
663	587	'Accept' => 'application/json, */*;q=0.1',
664	588	),
665		- 'body' => wp_json_encode(
	589	+ 'body' => wp_json_encode(
666	590	array(
667	591	'slug' => 'visualizer',
668	592	'site' => home_url(),
669	593	'email' => $email,
		@@ -673,12 +597,26 @@
673	597	)
674	598	),
675	599	)
676	600	);
	601	+ if ( ! is_wp_error( $request_res ) ) {
	602	+ $body = json_decode( wp_remote_retrieve_body( $request_res ) );
	603	+ if ( 'success' === $body->code ) {
	604	+ $this->dismissWizard( false );
	605	+ wp_send_json( $response );
	606	+ }
	607	+ }
	608	+ wp_send_json(
	609	+ array(
	610	+ 'status' => 0,
	611	+ 'redirect_to' => '',
	612	+ 'message' => '',
	613	+ )
	614	+ );
	615	+ } else {
	616	+ $this->dismissWizard( false );
	617	+ wp_send_json( $response );
677	618	}
678		-
679		- $this->dismissWizard( false );
680		- wp_send_json( $response );
681	619	}
682	620
683	621	/**
684	622	* Filter chart setting.