(string) Database table name * * 'wpda_list_columns' => (object) Reference to a WPDA_List_Columns object * * 'singular' => (string) Singular object label * * 'plural' => (string) plural object label * * 'ajax' => (string) TRUE = list table support Ajax * * 'column_headers' => (array|string) Column headers * * 'title' => (string) Page title * * 'subtitle' => (string) Page subtitle * * 'bulk_export_enabled' => (boolean) * * 'search_box_enabled' => (boolean) * * 'bulk_actions_enabled' => (boolean) * * 'show_view_link' => (string) on|off * * 'allow_insert' => (string) on|off * * 'allow_update' => (string) on|off * * 'allow_delete' => (string) on|off * * 'allow_import' => (string) on|off * * 'hide_navigation' => (boolean) * * 'default_where' => (string) * * ] * @since 1.0.0 */ public function __construct( $args = array() ) { global $wpdb; if ( !isset( $args['table_name'] ) ) { // Calling WPDA_List_Table without a table_name doesn't make sense. wp_die( esc_attr__( 'ERROR: Wrong arguments [no table argument]', 'wp-data-access' ) ); } if ( !isset( $args['wpda_list_columns'] ) ) { // Calling WPDA_List_Table without a column list is not allowed. wp_die( esc_attr__( 'ERROR: Wrong arguments [no columns argument]', 'wp-data-access' ) ); } parent::__construct( array( 'singular' => ( isset( $args['singular'] ) ? $args['singular'] : __( 'Row', 'wp-data-access' ) ), 'plural' => ( isset( $args['plural'] ) ? $args['plural'] : __( 'Rows', 'wp-data-access' ) ), 'ajax' => ( isset( $args['ajax'] ) ? $args['ajax'] : false ), ) ); // Set schema name is available. if ( isset( $args['wpdaschema_name'] ) ) { $this->schema_name = $args['wpdaschema_name']; } // Set table name (availability already checked). $this->table_name = $args['table_name']; if ( self::LIST_BASE_TABLE !== $this->table_name ) { // Whenever a table name is provided through a URL we are risking an SQL injection attack. Our // defence mechanism here is to check whether the table name provided exists in our database. // If it does not we'll terminate the process with an error. // Although this check is only needed when a table name is provided through the URL we will perform // it in all situations. It is a fast query which makes our application much more safe and reliable. $this->wpda_data_dictionary = new WPDA_Dictionary_Exist($this->schema_name, $this->table_name); if ( !$this->wpda_data_dictionary->table_exists() ) { wp_die( esc_attr__( 'ERROR: Invalid table name or not authorized', 'wp-data-access' ) ); } } $this->pid = ( isset( $args['pid'] ) ? $args['pid'] : '' ); // Get menu slag of current page. if ( isset( $_REQUEST['page'] ) ) { $this->page = sanitize_text_field( wp_unslash( $_REQUEST['page'] ) ); } else { // In order to show a list table we need a page. wp_die( esc_attr__( 'ERROR: Wrong arguments [no page argument]', 'wp-data-access' ) ); } // Use column list: argument wpda_list_columns (availability already checked). $this->wpda_list_columns =& $args['wpda_list_columns']; // Set pagination. if ( is_admin() ) { $this->items_per_page = WPDA::get_option( WPDA::OPTION_BE_PAGINATION ); } else { $this->items_per_page = WPDA::get_option( WPDA::OPTION_FE_PAGINATION ); } // Overwrite column header text if column headers were provided. $this->column_headers = ( isset( $args['column_headers'] ) ? $args['column_headers'] : '' ); // Set title. if ( isset( $args['title'] ) ) { $this->title = $args['title']; } else { $this->title = __( 'Table', 'wp-data-access' ) . ' ' . strtoupper( $this->table_name ); } // Set subtitle. if ( isset( $args['subtitle'] ) ) { $this->subtitle = $args['subtitle']; } else { $wp_tables = $wpdb->tables( 'all', true ); if ( isset( $wp_tables[substr( $this->table_name, strlen( $wpdb->prefix ) )] ) ) { $this->subtitle = ' ' . WPDA::get_table_type_text( WPDA::TABLE_TYPE_WP ); } elseif ( WPDA::is_wpda_table( $this->table_name ) ) { $this->subtitle = ' ' . WPDA::get_table_type_text( WPDA::TABLE_TYPE_WPDA ); } } if ( !(isset( $args['allow_import'] ) && 'off' === $args['allow_import']) ) { try { // Instantiate WPDA_Import. $this->wpda_import = new WPDA_Import(( is_admin() ? "?page={$this->page}" : '' ), $this->schema_name, $this->table_name); } catch ( \Exception $e ) { // If import is turned off instantiation will fail. Handle is set to null (check in future calls). $this->wpda_import = null; } } if ( isset( $args['bulk_export_enabled'] ) ) { $this->bulk_export_enabled = $args['bulk_export_enabled']; } if ( isset( $args['search_box_enabled'] ) ) { $this->search_box_enabled = $args['search_box_enabled']; } if ( isset( $args['bulk_actions_enabled'] ) ) { $this->bulk_actions_enabled = $args['bulk_actions_enabled']; } if ( 'on' !== WPDA::get_option( WPDA::OPTION_BE_VIEW_LINK ) ) { $this->show_view_link = WPDA::get_option( WPDA::OPTION_BE_VIEW_LINK ); } else { if ( isset( $args['show_view_link'] ) ) { $this->show_view_link = $args['show_view_link']; } else { $this->show_view_link = WPDA::get_option( WPDA::OPTION_BE_VIEW_LINK ); } } if ( 'on' !== WPDA::get_option( WPDA::OPTION_BE_ALLOW_INSERT ) ) { $this->allow_insert = WPDA::get_option( WPDA::OPTION_BE_ALLOW_INSERT ); } else { if ( isset( $args['allow_insert'] ) ) { $this->allow_insert = $args['allow_insert']; } else { $this->allow_insert = WPDA::get_option( WPDA::OPTION_BE_ALLOW_INSERT ); } } if ( 'on' !== WPDA::get_option( WPDA::OPTION_BE_ALLOW_UPDATE ) ) { $this->allow_update = WPDA::get_option( WPDA::OPTION_BE_ALLOW_UPDATE ); } else { if ( isset( $args['allow_update'] ) ) { $this->allow_update = $args['allow_update']; } else { $this->allow_update = WPDA::get_option( WPDA::OPTION_BE_ALLOW_UPDATE ); } } if ( 'on' !== WPDA::get_option( WPDA::OPTION_BE_ALLOW_DELETE ) ) { $this->allow_delete = WPDA::get_option( WPDA::OPTION_BE_ALLOW_DELETE ); } else { if ( isset( $args['allow_delete'] ) ) { $this->allow_delete = $args['allow_delete']; } else { $this->allow_delete = WPDA::get_option( WPDA::OPTION_BE_ALLOW_DELETE ); } } if ( isset( $args['hide_navigation'] ) ) { $this->hide_navigation = $args['hide_navigation']; } $this->search_value = ( is_scalar( $this->get_search_value() ) ? str_replace( "\\'", '', (string) $this->get_search_value() ) : '' ); if ( isset( $_REQUEST["{$this->search_item_name}_old_value"] ) ) { $this->search_value_old = sanitize_text_field( wp_unslash( $_REQUEST["{$this->search_item_name}_old_value"] ) ); } else { $this->search_value_old = $this->search_value; } // Get page number(s). if ( 'page_number' !== $this->page_number_item_name ) { if ( isset( $_REQUEST['page_number'] ) ) { $requested_page_number = sanitize_text_field( wp_unslash( $_REQUEST['page_number'] ) ); $this->page_number_link = '&page_number=' . esc_attr( $requested_page_number ); $this->page_number_item = ""; } } $this->page_number_link .= '&paged=' . esc_attr( $this->get_pagenum() ); $this->page_number_item .= ""; // Add search arguments to link to return to same page. foreach ( $_REQUEST as $key => $value ) { if ( substr( $key, 0, 19 ) === 'wpda_search_column_' && count( array_filter( $this->wpda_list_columns->get_table_columns(), function ( $column ) use($key) { return $column['column_name'] === substr( $key, 19 ); } ) ) > 0 ) { if ( is_array( $value ) ) { foreach ( $value as $elem_key => $elem_value ) { $this->page_number_link .= '&' . esc_attr( $elem_key ) . '=' . esc_attr( $elem_value ); $this->page_number_item .= ""; } } else { $this->page_number_link .= '&' . esc_attr( $key ) . '=' . esc_attr( $value ); $this->page_number_item .= ""; } } } // Check if a WHERE clause (filter) was defined. if ( isset( $args['default_where'] ) ) { $this->where = $args['default_where']; } // Get table settings. $wpda_table_settings = WPDA_Table_Settings_Model::query( $this->table_name, $this->schema_name ); if ( isset( $wpda_table_settings[0]['wpda_table_settings'] ) ) { $this->wpda_table_settings = json_decode( $wpda_table_settings[0]['wpda_table_settings'] ); } // Get estimated row count. $this->row_count_estimate = WPDA::get_row_count_estimate( $this->schema_name, $this->table_name, $this->wpda_table_settings ); $this->table_rows = $this->row_count_estimate['row_count']; // Get project table settings. global $wpda_project_mode; if ( is_array( $wpda_project_mode ) ) { $setname = $wpda_project_mode['setname']; $wpda_project_table_settings = null; $wpda_project_table_settings_db = WPDP_Project_Design_Table_Model::static_query( $this->schema_name, $this->table_name, $setname ); if ( isset( $wpda_project_table_settings_db->tableinfo ) ) { $this->wpda_project_table_settings = $wpda_project_table_settings_db->tableinfo; } } if ( isset( $args['show_page_title'] ) && false === $args['show_page_title'] ) { $this->show_page_title = $args['show_page_title']; } if ( isset( $args['help_url'] ) ) { $this->help_url = $args['help_url']; } foreach ( $this->wpda_list_columns->get_table_columns() as $table_columns ) { $this->columns_indexed[$table_columns['column_name']] = $table_columns; } } /** * Overwrite method * * @return int|void */ public function get_pagenum() { if ( isset( $_REQUEST[$this->page_number_item_name] ) ) { $pagenum = ( isset( $_REQUEST[$this->page_number_item_name] ) ? absint( $_REQUEST[$this->page_number_item_name] ) : 0 ); if ( isset( $this->_pagination_args['total_pages'] ) && $pagenum > $this->_pagination_args['total_pages'] ) { $pagenum = $this->_pagination_args['total_pages']; } return max( 1, $pagenum ); } else { return parent::get_pagenum(); } } /** * Set columns to be queries * * Set columns to be queried and shown in the list table. * By default all columns in the table will be displayed. * * @param mixed $columns_queried Column list. * * @since 1.0.0 */ public function set_columns_queried( $columns_queried ) { $this->columns_queried = $columns_queried; } /** * Enable or disable bulk actions * * @param boolean $bulk_actions_enabled TRUE = allowed, FALSE = not allowed. * * @since 1.0.0 */ public function set_bulk_actions_enabled( $bulk_actions_enabled ) { $this->bulk_actions_enabled = $bulk_actions_enabled; } /** * Enable or disable bulk export options * * @param boolean $bulk_export_enabled TRUE = allowed, FALSE = not allowed. * * @since 1.0.0 */ public function set_bulk_export_enabled( $bulk_export_enabled ) { $this->bulk_export_enabled = $bulk_export_enabled; } /** * Show or hide search box * * @param boolean $search_box_enabled TRUE = show search box, FALSE = do not show search bow. * * @since 1.0.0 */ public function set_search_box_enabled( $search_box_enabled ) { $this->search_box_enabled = $search_box_enabled; } /** * Set page title * * @param string $title Page title. * * @since 1.0.0 */ public function set_title( $title ) { $this->title = $title; } /** * Set page subtitle * * @param string $subtitle Page subtitle. * * @since 1.0.0 */ public function set_subtitle( $subtitle ) { $this->subtitle = $subtitle; } /** * I18n text displayed when no data found * * @since 1.0.0 */ public function no_items() { echo esc_attr__( 'No data found', 'wp-data-access' ); } /** * Use this method to build parent child relationships. * * Overwrite this function if you want to use the list table as a child list table related to some parent * form. You can add parent arguments to calls to make sure you get back to the right parent. * * @param array $item Column info. * @return string String contains parent arguments. * @since 1.5.0 */ protected function add_parent_args_as_string( $item ) { return ''; } /** * Render columns * * Three links are provided for every list table row: * + 'View' => Link to view form (readonly data entry form) * + 'Edit' => Link to data entry form (updatable) * + 'Delete' => Link to delete record from database table * * Links to view, edit and delete records are only available if a primary key for the table is found. Without * a primary key unique identification of records is not possible. * * Links to action are offered through hidden forms to prevent long URL's and problem when refreshing pages * manually. More information about how and why is provided in source code at place where I thought the * information could be helpful. * * @param array $item Column info. * @param string $column_name Column name. * * @return mixed Value display in list table column * @since 1.0.0 */ public function column_default( $item, $column_name ) { if ( $this->wpda_list_columns->get_table_columns()[0]['column_name'] === $column_name || $column_name === $this->first_display_column ) { // First column: add row actions. $count = count( $this->wpda_list_columns->get_table_primary_key() ); // phpcs:ignore -- 8.1 proof if ( 0 === $count ) { // No actions without a primary key! // This automatically covers view processing correctly. return $this->render_column_content( $item, $column_name ) . $this->row_actions( array( 'wpda_hide_column' => '', ) ); } else { // Check rights. if ( 'off' === $this->show_view_link && 'off' === $this->allow_update && 'off' === $this->allow_delete ) { // No rights! $actions = array(); $this->column_default_add_action( $item, $column_name, $actions ); if ( is_array( $actions ) && count( $actions ) > 0 ) { // phpcs:ignore -- 8.1 proof return sprintf( '%1$s %2$s', $this->render_column_content( $item, $column_name ), $this->row_actions( $actions ) ); } else { return sprintf( '%1$s', $this->render_column_content( $item, $column_name ) ); } } // Check if row security is enabled. $row_security = isset( $this->wpda_table_settings->table_settings->row_level_security ) && 'true' === $this->wpda_table_settings->table_settings->row_level_security; // To prevent our URLs containing many arguments, we'll use post to submit row actions. Since our // list table is build within a form and we cannot use nested forms we'll use a container (id = // wpda_invisible_container) defined outside the list table, and add our forms to that container. // We'll use jQuery to add our forms to the container. From the links in our rows we can then just // submit any form in that container with jQuery as well. $form_id = '_' . self::$list_number++; $wp_nonce_keys = ''; $row_security_keys = ''; // We need to add keys and values for multi-column primary keys. foreach ( $this->wpda_list_columns->get_table_primary_key() as $key ) { $wp_nonce_keys .= "-{$item[$key]}"; if ( $row_security ) { $row_security_keys .= "-{$key}-{$item[$key]}"; } } if ( $row_security ) { $row_security_nonce = wp_create_nonce( "wpda-row-level-security-{$this->table_name}{$row_security_keys}" ); $row_security_nonce_field = ""; } else { $row_security_nonce_field = ''; } // Prepare url. if ( is_admin() ) { $url = "?page={$this->page}"; } else { $url = ''; } if ( 'on' === $this->show_view_link ) { $wp_nonce_action = "wpda-query-{$this->table_name}{$wp_nonce_keys}"; $wp_nonce = wp_create_nonce( $wp_nonce_action ); // Build the row action. Use jQuery to add form to container. // All items escaped in create_post_form(). $view_form = $this->create_post_form( $item, "view_form{$form_id}", 'view', $url, $wp_nonce, $row_security_nonce_field, $this->schema_name, $this->table_name ); ?> %s ', __( 'View row data', 'wp-data-access' ), "view_form{$form_id}", __( 'View', 'wp-data-access' ) ); } if ( 'on' === $this->allow_update || WPDA::is_wpda_table( $this->table_name ) ) { $wp_nonce_action = "wpda-query-{$this->table_name}{$wp_nonce_keys}"; $wp_nonce = wp_create_nonce( $wp_nonce_action ); // Build the row action. Use jQuery to add form to container. // All items escaped in create_post_form(). $edit_form = $this->create_post_form( $item, "edit_form{$form_id}", 'edit', $url, $wp_nonce, $row_security_nonce_field, $this->schema_name, $this->table_name ); ?> %s ', __( 'Edit row data', 'wp-data-access' ), "edit_form{$form_id}", __( 'Edit', 'wp-data-access' ) ); } if ( 'on' === $this->allow_delete || WPDA::is_wpda_table( $this->table_name ) ) { $wp_nonce_action = "wpda-delete-{$this->table_name}{$wp_nonce_keys}"; $wp_nonce = wp_create_nonce( $wp_nonce_action ); // Build the row action. Use jQuery to add form to container. // All items escaped in create_post_form(). $delete_form = $this->create_post_form( $item, "delete_form{$form_id}", 'delete', $url, $wp_nonce, $row_security_nonce_field, $this->schema_name, $this->table_name ); ?> %s ', __( 'Delete row data (this cannot be undone)', 'wp-data-access' ), $warning, "delete_form{$form_id}", __( 'Delete', 'wp-data-access' ) ); } // Developers can add actions by adding their own implementation of following method. $this->column_default_add_action( $item, $column_name, $actions ); if ( has_filter( 'wpda_column_default' ) ) { // Use filter. $filter = apply_filters( 'wpda_column_default', '', $item, $column_name, $this->table_name, $this->schema_name, $this->wpda_list_columns, self::$list_number, $this ); if ( null !== $filter ) { return sprintf( '%1$s %2$s', $filter, $this->row_actions( $actions ) ); } } return sprintf( '%1$s %2$s', $this->render_column_content( $item, $column_name ), $this->row_actions( $actions ) ); } } else { if ( substr( $column_name, 0, 15 ) === 'wpda_hyperlink_' ) { $hyperlink_no = substr( $column_name, 15 ); if ( isset( $this->wpda_table_settings->hyperlinks[$hyperlink_no] ) ) { $hyperlink = $this->wpda_table_settings->hyperlinks[$hyperlink_no]; $hyperlink_html = ( isset( $hyperlink->hyperlink_html ) ? $hyperlink->hyperlink_html : '' ); if ( '' !== $hyperlink_html ) { // Substitute values. foreach ( $item as $key => $value ) { $hyperlink_html = str_replace( "\$\${$key}\$\$", str_replace( ' ', '%20', (string) $value ), $hyperlink_html ); } } $macro = new WPDA_Macro($hyperlink_html); $hyperlink_html = $macro->exe_macro(); if ( '' !== $hyperlink_html ) { // Link is not empty AFTER substitution. if ( false !== strpos( ltrim( $hyperlink_html ), '<' ) ) { return html_entity_decode( $hyperlink_html ); } else { $hyperlink_label = ( isset( $hyperlink->hyperlink_label ) ? $hyperlink->hyperlink_label : '' ); $hyperlink_target = ( isset( $hyperlink->hyperlink_target ) ? $hyperlink->hyperlink_target : false ); $target = ( true === $hyperlink_target ? "target='_blank'" : '' ); if ( false === $hyperlink_target ) { $json = json_decode( $hyperlink_html, true ); if ( isset( $json['url'] ) ) { $hyperlink_target = $json['url']; } } return "" . esc_attr( $hyperlink_label ) . ""; } } else { return ''; } } return 'ERROR'; } else { // Check if column is of type media. $media_type = WPDA_Media_Model::get_column_media( $this->table_name, $column_name, $this->schema_name ); if ( 'Image' === $media_type ) { $image_ids = explode( ',', (string) $item[$column_name] ); // phpcs:ignore -- 8.1 proof $image_src = ''; foreach ( $image_ids as $image_id ) { $url = wp_get_attachment_url( esc_attr( $image_id ) ); if ( false !== $url ) { $title = get_the_title( esc_attr( $image_id ) ); $image_src .= ( '' !== $image_src ? '
' : '' ); $image_src .= sprintf( '', esc_url( $url ), esc_attr( $title ) ); } } return $image_src; } elseif ( 'ImageURL' === $media_type ) { return sprintf( '', esc_url( $item[$column_name] ) ); } elseif ( 'Attachment' === $media_type ) { $media_ids = explode( ',', (string) $item[$column_name] ); // phpcs:ignore -- 8.1 proof $media_links = ''; foreach ( $media_ids as $media_id ) { $url = wp_get_attachment_url( esc_attr( $media_id ) ); if ( false !== $url ) { $mime_type = get_post_mime_type( $media_id ); if ( false !== $mime_type ) { $title = get_the_title( esc_attr( $media_id ) ); $media_links .= self::column_media_attachment( $url, $title, $mime_type ); } } } return $media_links; } elseif ( 'Hyperlink' === $media_type ) { if ( null === $item[$column_name] || '' === $item[$column_name] ) { return ''; } else { if ( !(isset( $this->wpda_table_settings->table_settings->hyperlink_definition ) && 'text' === $this->wpda_table_settings->table_settings->hyperlink_definition) ) { $hyperlink = json_decode( $item[$column_name], true ); if ( is_array( $hyperlink ) && isset( $hyperlink['label'] ) && isset( $hyperlink['url'] ) && isset( $hyperlink['target'] ) ) { if ( '' === $hyperlink['url'] ) { return ''; } else { return "" . esc_attr( $hyperlink['label'] ) . ""; } } else { return ''; } } else { $hyperlink_label = $this->wpda_list_columns->get_column_label( $column_name ); return "" . esc_attr( $hyperlink_label ) . ""; } } } elseif ( 'Audio' === $media_type ) { $audio_ids = explode( ',', (string) $item[$column_name] ); // phpcs:ignore -- 8.1 proof $audio_src = ''; foreach ( $audio_ids as $audio_id ) { if ( 'audio' === substr( get_post_mime_type( $audio_id ), 0, 5 ) ) { $url = wp_get_attachment_url( esc_attr( $audio_id ) ); if ( false !== $url ) { $title = get_the_title( esc_attr( $audio_id ) ); if ( false !== $url ) { $audio_src .= '
' . do_shortcode( '[audio src="' . esc_url_raw( $url ) . '"]' ) . '
'; } } } } return $audio_src; } elseif ( 'Video' === $media_type ) { $video_ids = explode( ',', (string) $item[$column_name] ); // phpcs:ignore -- 8.1 proof $video_src = ''; foreach ( $video_ids as $video_id ) { if ( 'video' === substr( get_post_mime_type( $video_id ), 0, 5 ) ) { $url = wp_get_attachment_url( esc_attr( $video_id ) ); if ( false !== $url ) { if ( false !== $url ) { $video_src .= do_shortcode( '[video src="' . esc_url_raw( $url ) . '"]' ); } } } } return $video_src; } } if ( has_filter( 'wpda_column_default' ) ) { // Use filter. $filter = apply_filters( 'wpda_column_default', '', $item, $column_name, $this->table_name, $this->schema_name, $this->wpda_list_columns, self::$list_number, $this ); if ( null !== $filter ) { return $filter; } } if ( 'csv' !== WPDA::get_option( WPDA::OPTION_PLUGIN_SET_FORMAT ) && isset( $this->columns_indexed[$column_name]['data_type'] ) && 'set' === $this->columns_indexed[$column_name]['data_type'] ) { $list = '<' . WPDA::get_option( WPDA::OPTION_PLUGIN_SET_FORMAT ) . '>'; $listarray = explode( ',', (string) $item[$column_name] ); // phpcs:ignore -- 8.1 proof foreach ( $listarray as $listitem ) { $list .= "
  • {$listitem}
    • "; } $list .= ''; return $list; } return $this->render_column_content( $item, $column_name ); } } /** * Create post form which is added to the invisible container * * @param array $item Column info. * @param string $form_id Form ID. * @param string $action Form action. * @param string $url URL admin page. * @param string $wp_nonce Nonce. * @param string $row_security_nonce_field Nonce for row level access security. * @param string $schema_name Database schema name. * @param string $table_name Database table name. * * @return array|string|string[] */ private function create_post_form( $item, $form_id, $action, $url, $wp_nonce, $row_security_nonce_field, $schema_name, $table_name ) { // Already escaped: $url, $row_security_nonce_field, get_key_input_fields(), add_parent_args_as_string(). $esc_attr = 'esc_attr'; $get_key_input_fields = $this->get_key_input_fields( $item ); $add_parent_args_as_string = $this->add_parent_args_as_string( $item ); $page_number_item = $this->page_number_item; $case_sensitive_search = ( isset( $_REQUEST['wpda_c'] ) && 'true' === $_REQUEST['wpda_c'] ? "" : '' ); $add_schema_and_table_name = ( !is_admin() ? '' : "\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t" ); // Hide schema and table name on front-end // phpcs:ignore PluginCheck.CodeAnalysis.Heredoc.NotAllowed $form = << \t\t\t\t\t{$get_key_input_fields} \t\t\t\t\t{$add_parent_args_as_string} \t\t\t\t\t{$add_schema_and_table_name} \t\t\t\t\t \t\t\t\t\t \t\t\t\t\t{$esc_attr( $row_security_nonce_field )} \t\t\t\t\t{$esc_attr( $page_number_item )} \t\t\t\t\t{$esc_attr( $case_sensitive_search )} \t\t\t\t EOT; return str_replace( array("\n", "\r"), '', $form ); } /** * Create media link * * @param string $url Media URL. * @param string $title Media title. * @param string $mime_type Mime type. * * @return string */ public static function column_media_attachment( $url, $title, $mime_type ) { if ( 'image' === substr( $mime_type, 0, 5 ) ) { $class = 'dashicons-format-image'; } elseif ( 'audio' === substr( $mime_type, 0, 5 ) ) { $class = 'dashicons-playlist-audio'; } elseif ( 'video' === substr( $mime_type, 0, 5 ) ) { $class = 'dashicons-playlist-video'; } elseif ( 'application' === substr( $mime_type, 0, 11 ) ) { $class = 'dashicons-media-document'; } else { $class = 'dashicons-external'; } return sprintf( '', esc_url( $url ), esc_attr( $title ), esc_attr( $class ) ); } /** * Overwrite method to prevent double row actions * * @param object $item Table column. * @param string $column_name Column name. * @param string $primary Primary key. * * @return string */ protected function handle_row_actions( $item, $column_name, $primary ) { return ''; } /** * Render column content * * Strip content if too long and replace & character. * * @param object $item Table column. * @param string $column_name Database column name. * * @return string Rendered column content */ protected function render_column_content( $item, $column_name, $substitute_newlines = true ) { $column_content = ( isset( $item["lookup_value_{$column_name}"] ) ? $item["lookup_value_{$column_name}"] : $item[$column_name] ); if ( 'off' === WPDA::get_option( WPDA::OPTION_BE_TEXT_WRAP_SWITCH ) && WPDA::get_option( WPDA::OPTION_BE_TEXT_WRAP ) < strlen( (string) $column_content ) ) { $title = sprintf( /* translators: %s = number of characters before text is wrapped */ __( 'Output limited to %1$s characters', 'wp-data-access' ), WPDA::get_option( WPDA::OPTION_BE_TEXT_WRAP ) ); if ( $substitute_newlines ) { return str_replace( "\n", '
    ', substr( esc_html( str_replace( '&', '&', (string) $column_content ) ), 0, WPDA::get_option( WPDA::OPTION_BE_TEXT_WRAP ) ) . ' •••' ); } else { return substr( esc_html( str_replace( '&', '&', (string) $column_content ) ), 0, WPDA::get_option( WPDA::OPTION_BE_TEXT_WRAP ) ) . ' •••'; } } else { $column_data_type = $this->wpda_list_columns->get_column_data_type( $column_name ); switch ( $column_data_type ) { case 'date': // date only. if ( '' === $column_content || null === $column_content ) { $column_content = ''; } else { $column_content = date_i18n( get_option( 'date_format' ), strtotime( $column_content ) ); } break; case 'time': // time only. if ( '' === $column_content || null === $column_content ) { $column_content = ''; } else { $column_content = date_i18n( get_option( 'time_format' ), strtotime( $column_content ) ); } break; case 'datetime': // date + time. case 'timestamp': if ( '' === $column_content || null === $column_content ) { $column_content = ''; } else { $column_content = date_i18n( get_option( 'date_format' ) . ' ' . get_option( 'time_format' ), strtotime( $column_content ) ); } } if ( $substitute_newlines ) { return str_replace( "\n", '
    ', esc_html( str_replace( '&', '&', (string) $column_content ) ) ); } else { return esc_html( str_replace( '&', '&', (string) $column_content ) ); } } } /** * Generate hidden fields for keys * * @param array $item Column info. * * @return string String containing key items and values. */ protected function get_key_input_fields( $item ) { $key_input_fields = ''; foreach ( $this->wpda_list_columns->get_table_primary_key() as $key ) { $key_name = esc_attr( $key ); $key_value = esc_attr( $item[$key] ); $key_input_fields .= ""; } return $key_input_fields; } /** * Override this method to add actions to first column of row * * @param array $item Item information. * @param string $column_name Column name. * @param array $actions Array of actions to be added to row. */ protected function column_default_add_action( $item, $column_name, &$actions ) { if ( has_filter( 'wpda_column_default_add_action' ) ) { $filter = apply_filters( 'wpda_column_default_add_action', '', $item, $column_name, $this->table_name, $this->schema_name, $this->wpda_list_columns, self::$list_number, $actions, $this ); if ( null !== $filter ) { $actions = $filter; } } } /** * Render bulk edit checkbox * * @param array $item Column list. * * @return string Content for checkbox column. * @since 1.0.0 */ public function column_cb( $item ) { if ( !$this->bulk_actions_enabled ) { // Bulk actions disabled. return ''; } if ( empty( $this->wpda_list_columns->get_table_primary_key() ) ) { // Table has no primary key: no bulk actions allowed! // Primary key is used to ensure uniqueness! return ''; } // Build CB value: Use json format for multi column primary keys. $cb_value = (object) null; foreach ( $this->wpda_list_columns->get_table_primary_key() as $primary_key_column ) { // JSON string key and values will be double quoted. Therefore a slash must be added to double quotes in values. $cb_value->{$primary_key_column} = esc_attr( str_replace( '"', '\\"', $item[$primary_key_column] ) ); } return ""; } /** * Show page title * * @return void */ protected function show_title() { if ( self::LIST_BASE_TABLE !== $this->table_name && (substr( $this->page, 0, 13 ) === \WP_Data_Access_Admin::PAGE_EXPLORER || \WP_Data_Access_Admin::PAGE_MAIN === $this->page) ) { $this->subtitle = $this->title; $this->title = 'Data Explorer'; } echo esc_attr( $this->title ); } /** * Show page sub title * * @return void */ protected function show_sub_title() { ?>
    subtitle, array( 'span' => array( 'class' => array(), ), ) ); ?>
    wpda_import ) { $this->wpda_import->check_post(); } // Prepare list table items. $this->prepare_items(); // Show list table. ?>
    show_page_title ) { ?>

    table_name && (WPDA::current_user_is_admin() && \WP_Data_Access_Admin::PAGE_MAIN === $this->page) ) { ?> show_title(); ?>

    page, 0, 10 ) || WPDP::PAGE_TEMPLATES === $this->page || substr( $this->page, 0, 13 ) === \WP_Data_Access_Admin::PAGE_EXPLORER ) { $this->add_header_button(); } $this->add_header_actions(); if ( 'diehard' === $this->page ) { $action_url = admin_url( 'admin-ajax.php' ); } else { $action_url = admin_url( 'admin.php' ); } ?> wpda_import ) { $this->wpda_import->add_container(); } // Add custom code before the list table. do_action_ref_array( 'wpda_before_list_table', array($this) ); // Prepare url. if ( is_admin() ) { $url = "?page={$this->page}"; } else { $url = ''; } ?>
    show_sub_title(); if ( $this->search_box_enabled ) { $this->search_box( __( 'search', 'wp-data-access' ), 'search_id' ); } $this->display(); if ( '' === $this->get_bulk_actions() ) { // Add action item containing value -1. This will allow sorting if no bulk action listbox is displayed. ?> table_name ) { ?> table_name ), '_wpnonce', false ); ?> table_name}", '_wpnonce2', false ); ?> table_name ) { wp_nonce_field( 'wpda-drop-' . WPDA::get_current_user_login(), '_wpnonce3', false ); wp_nonce_field( 'wpda-truncate-' . WPDA::get_current_user_login(), '_wpnonce4', false ); } ?> $value ) { if ( substr( $key, 0, 19 ) === 'wpda_search_column_' ) { if ( is_array( $value ) ) { foreach ( $value as $elem_key => $elem_value ) { echo ''; } } else { echo ''; } } } ?>
    bind_action_buttons(); ?> allow_insert ) { if ( null !== $this->wpda_import ) { $this->wpda_import->add_button(); } } else { // phpcs:ignore -- 8.1 proof if ( WPDA::is_wpda_table( $this->table_name ) || ('on' === WPDA::get_option( WPDA::OPTION_BE_ALLOW_INSERT ) && count( $this->wpda_list_columns->get_table_primary_key() )) > 0 ) { $storage_type = ( WPDA::is_wpda_table( $this->table_name ) ? __( 'respository', 'wp-data-access' ) : __( 'table', 'wp-data-access' ) ); // Prepare url. if ( is_admin() ) { $url = "?page={$this->page}"; } else { $url = ''; } ?>
    wpda_import ) { $this->wpda_import->add_button(); } ?>
    wpda_import ) { $this->wpda_import->add_button(); } } } } /** * Prepares the list of items for displaying * * Overwrites WP_List_Table::prepare_items() * * @since 1.0.0 */ public function prepare_items() { // Construct where clause with search values provided in the search box. // Result (where clause) is written to $this->where. $this->construct_where_clause(); $this->process_bulk_action(); if ( is_admin() ) { if ( $this->table_name === self::LIST_BASE_TABLE ) { $option = 'wpda_rows_per_page_' . str_replace( '.', '_', self::LIST_BASE_TABLE ); } else { $option = 'wpda_rows_per_page_' . str_replace( '.', '_', $this->schema_name . $this->table_name ); } $this->items_per_page = $this->get_items_per_page( $option, WPDA::get_option( WPDA::OPTION_BE_PAGINATION ) ); } else { $this->items_per_page = WPDA::get_option( WPDA::OPTION_FE_PAGINATION ); } $this->current_page = $this->get_pagenum(); $total_items = $this->record_count(); $total_pages = ceil( $total_items / $this->items_per_page ); if ( $this->search_value !== $this->search_value_old ) { $this->current_page = 1; } if ( $this->current_page > $total_pages ) { $this->current_page = $total_pages; } $this->set_pagination_args( array( 'total_items' => $total_items, 'total_pages' => $total_pages, 'per_page' => $this->items_per_page, ) ); $this->get_rows(); // Written to $this->items in base class (WP_List_Table). $columns = $this->get_columns(); $hidden = $this->get_hidden_columns(); if ( false === $hidden ) { if ( is_admin() ) { // List table in backend. if ( self::LIST_BASE_TABLE === $this->table_name ) { $table_name = str_replace( '.', '_', self::LIST_BASE_TABLE ); } else { global $wpdb; if ( $this->schema_name === $wpdb->dbname && WPDA_CSV_Uploads_Model::get_base_table_name() === $this->table_name ) { $table_name = $this->table_name; // csv upload = exception. } else { $table_name = str_replace( '.', '_', $this->schema_name . $this->table_name ); } } $hidden = get_user_option( WPDA_List_View::HIDDENCOLUMNS_PREFIX . get_current_screen()->id . $table_name ); if ( false === $hidden ) { $hidden = array(); } } } if ( !is_array( $hidden ) ) { $hidden = array(); } $sortable = $this->get_sortable_columns(); $primary = $this->get_primary_column(); $this->_column_headers = array( $columns, $hidden, $sortable, $primary ); } /** * Build where clause * * Arguments might come from the URL so we need to check for SQL injection and use prepare. The resulting * where clause is written directly to member $this->where. * * @since 1.0.0 */ protected function construct_where_clause() { $whereclause = $this->get_where_clause(); if ( '' !== $whereclause ) { $this->where = ( '' === $this->where ? " where ({$whereclause}) " : " {$this->where} and ({$whereclause}) " ); } } /** * Returns the where clause (uses filters if available) * * @return string */ public function get_where_clause() { return WPDA::construct_where_clause( $this->schema_name, $this->table_name, $this->wpda_list_columns->get_searchable_table_columns(), $this->search_value, isset( $_REQUEST['wpda_c'] ) && 'true' === $_REQUEST['wpda_c'] ); } /** * Process bulk actions * * Delete and bulk-delete actions use the primary key list as a reference. Before performing the actual delete * statement(s) we'll check the provided column names against the data dictionary. This will protect us against * SQL injection attacks. * * For export actions table names will not be checked here. They are handed over WPDA_Export where the validity * and access rights are checked anyway (to be safe). * * All actions can be processed only with a valid wpnonce value. * * To perform actions the user must have the appropriate rights. * * @since 1.0.0 */ public function process_bulk_action() { switch ( $this->current_action() ) { case 'delete': // Check access rights. if ( 'on' !== $this->allow_delete ) { // Deleting records from list table is not allowed. wp_die( esc_attr__( 'ERROR: Not authorized [delete not allowed]', 'wp-data-access' ) ); } // Prepare wp_nonce action security check. $wp_nonce_action = "wpda-delete-{$this->table_name}"; $row_to_be_deleted = array(); // Gonna hold the row to be deleted. $i = 0; // Index, necessary for multi column keys. // Check all key columns. foreach ( $this->wpda_list_columns->get_table_primary_key() as $key ) { // Check if key is available. if ( !isset( $_REQUEST[$key] ) ) { // input var okay. wp_die( esc_attr__( 'ERROR: Invalid URL [missing primary key values]', 'wp-data-access' ) ); } // Write key value pair to array. $row_to_be_deleted[$i]['key'] = $key; $row_to_be_deleted[$i]['value'] = sanitize_text_field( wp_unslash( $_REQUEST[$key] ) ); // input var okay. $i++; // Add key values to wp_nonce action. $wp_nonce_action .= '-' . sanitize_text_field( wp_unslash( $_REQUEST[$key] ) ); // input var okay. } // Check if delete is allowed. $wp_nonce = ( isset( $_REQUEST['_wpnonce'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['_wpnonce'] ) ) : '' ); // input var okay. if ( !wp_verify_nonce( $wp_nonce, $wp_nonce_action ) ) { wp_die( esc_attr__( 'ERROR: Not authorized', 'wp-data-access' ) ); } // All key column values available: delete record. // Prepare named array for delete operation. $next_row_to_be_deleted = array(); $count_rows = count( $row_to_be_deleted ); // phpcs:ignore -- 8.1 proof for ($i = 0; $i < $count_rows; $i++) { $next_row_to_be_deleted[$row_to_be_deleted[$i]['key']] = $row_to_be_deleted[$i]['value']; } $engine = WPDA::get_table_engine( $this->schema_name, $this->table_name ); if ( $this->delete_row( $next_row_to_be_deleted, $engine ) ) { $msg = new WPDA_Message_Box(array( 'message_text' => __( 'Row deleted', 'wp-data-access' ), )); $msg->box(); } else { $msg = new WPDA_Message_Box(array( 'message_text' => __( 'Could not delete row', 'wp-data-access' ), 'message_type' => 'error', 'message_is_dismissible' => false, )); $msg->box(); } break; case 'bulk-delete': // Check access rights. if ( 'on' !== $this->allow_delete ) { // Deleting records from list table is not allowed. die( esc_attr__( 'ERROR: Not authorized [delete not allowed]', 'wp-data-access' ) ); } // We first need to check if all the necessary information is available. if ( !isset( $_REQUEST['bulk-selected'] ) ) { // input var okay. // Nothing to delete. $msg = new WPDA_Message_Box(array( 'message_text' => __( 'Nothing to delete', 'wp-data-access' ), )); $msg->box(); return; } // Check if delete is allowed. $wp_nonce_action = "wpda-delete-{$this->table_name}"; $wp_nonce = ( isset( $_REQUEST['_wpnonce2'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['_wpnonce2'] ) ) : '' ); // input var okay. if ( !wp_verify_nonce( $wp_nonce, $wp_nonce_action ) ) { die( esc_attr__( 'ERROR: Not authorized', 'wp-data-access' ) ); } // phpcs:disable WordPress.Security.ValidatedSanitizedInput $bulk_rows = (array) $_REQUEST['bulk-selected']; // phpcs:enable WordPress.Security.ValidatedSanitizedInput $no_rows = count( $bulk_rows ); // # rows to be deleted. // phpcs:ignore -- 8.1 proof being safe $rows_to_be_deleted = array(); // Gonna hold rows to be deleted. for ($i = 0; $i < $no_rows; $i++) { // Write "json" to named array. Need to strip slashes twice. Once for the normal conversion // and once extra for the pre-conversion of double quotes in method column_cb(). $row_object = json_decode( stripslashes( stripslashes( $bulk_rows[$i] ) ), true ); if ( $row_object ) { $j = 0; // Index used to build array. // Check all key columns. foreach ( $this->wpda_list_columns->get_table_primary_key() as $key ) { // Check if key is available. if ( !isset( $row_object[$key] ) ) { wp_die( esc_attr__( 'ERROR: Invalid URL [missing primary key values]', 'wp-data-access' ) ); } // Write key value pair to array. $rows_to_be_deleted[$i][$j]['key'] = $key; $rows_to_be_deleted[$i][$j]['value'] = $row_object[$key]; $j++; } } } // Looks like everything is there. Delete records from table... $no_key_cols = count( $this->wpda_list_columns->get_table_primary_key() ); // phpcs:ignore -- 8.1 proof $rows_successfully_deleted = 0; // Number of rows successfully deleted. $rows_with_errors = 0; // Number of rows that could not be deleted. $engine = WPDA::get_table_engine( $this->schema_name, $this->table_name ); for ($i = 0; $i < $no_rows; $i++) { // Prepare named array for delete operation. $next_row_to_be_deleted = array(); $row_found = true; for ($j = 0; $j < $no_key_cols; $j++) { if ( isset( $rows_to_be_deleted[$i][$j]['key'] ) ) { $next_row_to_be_deleted[$rows_to_be_deleted[$i][$j]['key']] = $rows_to_be_deleted[$i][$j]['value']; } else { $row_found = false; } } if ( $row_found ) { if ( $this->delete_row( $next_row_to_be_deleted, $engine ) ) { // Row(s) successfully deleted. $rows_successfully_deleted++; } else { // An error occurred during the delete operation: increase error count. $rows_with_errors++; } } else { // An error occurred during the delete operation: increase error count. $rows_with_errors++; } } // Inform user about the results of the operation. $message = ''; if ( 1 === $rows_successfully_deleted ) { $message = __( 'Row deleted', 'wp-data-access' ); } elseif ( $rows_successfully_deleted > 1 ) { $message = "{$rows_successfully_deleted} " . __( 'rows deleted', 'wp-data-access' ); } if ( '' !== $message ) { $msg = new WPDA_Message_Box(array( 'message_text' => $message, )); $msg->box(); } $message = ''; if ( $rows_with_errors > 0 ) { $message = __( 'Not all rows have been deleted', 'wp-data-access' ); } if ( '' !== $message ) { $msg = new WPDA_Message_Box(array( 'message_text' => $message, 'message_type' => 'error', 'message_is_dismissible' => false, )); $msg->box(); } break; case 'bulk-export': case 'bulk-export-xml': case 'bulk-export-json': case 'bulk-export-excel': case 'bulk-export-csv': // Check access rights. if ( !WPDA::is_wpda_table( $this->table_name ) ) { if ( 'on' !== WPDA::get_option( WPDA::OPTION_BE_EXPORT_ROWS ) ) { // Exporting rows from list table is not allowed. die( esc_attr__( 'ERROR: Not authorized [export not allowed]', 'wp-data-access' ) ); } } // We first need to check if all the necessary information is available. if ( !isset( $_REQUEST['bulk-selected'] ) ) { // input var okay. // Nothing to export. $msg = new WPDA_Message_Box(array( 'message_text' => __( 'Nothing to export', 'wp-data-access' ), )); $msg->box(); return; } // Check if export is allowed. $wp_nonce = ( isset( $_REQUEST['_wpnonce'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['_wpnonce'] ) ) : '' ); // input var okay. if ( !wp_verify_nonce( $wp_nonce, 'wpda-export-' . wp_json_encode( $this->table_name ) ) ) { die( esc_attr__( 'ERROR: Not authorized', 'wp-data-access' ) ); } // phpcs:disable WordPress.Security.ValidatedSanitizedInput $bulk_rows = (array) $_REQUEST['bulk-selected']; // phpcs:enable WordPress.Security.ValidatedSanitizedInput $no_rows = count( $bulk_rows ); // # rows to be exported. // phpcs:ignore -- 8.1 proof being safe $format_type = ''; switch ( $this->current_action() ) { case 'bulk-export-xml': $format_type = 'xml'; break; case 'bulk-export-json': $format_type = 'json'; break; case 'bulk-export-excel': $format_type = 'excel'; break; case 'bulk-export-csv': $format_type = 'csv'; } if ( 'diehard' === $this->page && null !== $this->pid ) { $wp_nonce = wp_create_nonce( "wpda-export-{$this->pid}" ); $submit_schema_name = ''; $submit_table_name = ''; } else { $submit_schema_name = $this->schema_name; $submit_table_name = $this->table_name; } $j = 0; $columns = array(); for ($i = 0; $i < $no_rows; $i++) { // Write "json" to named array. Need to strip slashes twice. Once for the normal conversion // and once extra for the pre-conversion of double quotes in method column_cb(). $row_object = json_decode( stripslashes( stripslashes( $bulk_rows[$i] ) ), true ); if ( $row_object ) { // Check all key columns. foreach ( $this->wpda_list_columns->get_table_primary_key() as $key ) { // Check if key is available. if ( !isset( $row_object[$key] ) ) { wp_die( esc_attr__( 'ERROR: Invalid URL', 'wp-data-access' ) ); } if ( !isset( $columns[$key] ) ) { $columns[$key] = array(); } $columns[$key][] = $row_object[$key]; } $j++; } } ?> schema_name ); if ( null === $wpdadb ) { if ( is_admin() ) { /* translators: %s = remote database name */ wp_die( esc_attr( sprintf( __( 'ERROR - Remote database %s not available', 'wp-data-access' ), $this->schema_name ) ) ); } else { /* translators: %s = remote database name */ die( esc_attr( sprintf( __( 'ERROR - Remote database %s not available', 'wp-data-access' ), $this->schema_name ) ) ); } } $row_deleted = $wpdadb->delete( $this->table_name, $where ); if ( 'connect' === strtolower( $engine ) ) { // Connect engine does not return number of rows deleted. // Presuming delete was successful when no error message was returned. return '' === $wpdadb->last_error; } return $row_deleted; } /** * Number of records in database table * * Returns the number of records in the database table. Where clause must be prepared in advance and written * to $this->where ({@see WPDA_List_Table::construct_where_clause()}) * * @return null|string Number of rows in the current table * @since 1.0.0 */ public function record_count() { if ( !$this->row_count_estimate['do_real_count'] && '' === $this->where ) { // Use estimate row count. return $this->table_rows; } // Get real row count. $wpdadb = WPDADB::get_db_connection( $this->schema_name ); if ( null === $wpdadb ) { if ( is_admin() ) { /* translators: %s = remote database name */ wp_die( esc_attr( sprintf( __( 'ERROR - Remote database %s not available', 'wp-data-access' ), $this->schema_name ) ) ); } else { /* translators: %s = remote database name */ die( esc_attr( sprintf( __( 'ERROR - Remote database %s not available', 'wp-data-access' ), $this->schema_name ) ) ); } } if ( '' === $this->schema_name ) { $query = "\n\t\t\t\t\tselect count(*)\n\t\t\t\t\tfrom `{$this->table_name}`\n\t\t\t\t\t{$this->where}\n\t\t\t\t"; } else { if ( self::LIST_BASE_TABLE === $this->table_name ) { $query = "\n\t\t\t\t\t\tselect count(*)\n\t\t\t\t\t\tfrom {$this->table_name}\n\t\t\t\t\t\t{$this->where}\n\t\t\t\t\t"; } else { $query = "\n\t\t\t\t\t\tselect count(*)\n\t\t\t\t\t\tfrom `{$wpdadb->dbname}`.`{$this->table_name}`\n\t\t\t\t\t\t{$this->where}\n\t\t\t\t\t"; } } return $wpdadb->get_var( $query ); } /** * Perform query to retrieve rows from database * * Where clause must be prepared in advance and written to $this->where * ({@see WPDA_List_Table::construct_where_clause()}). * * No return value. Result is directly written to $this->items (base class member). * * @since 1.0.0 */ public function get_rows() { $wpdadb = WPDADB::get_db_connection( $this->schema_name ); if ( null === $wpdadb ) { if ( is_admin() ) { /* translators: %s = remote database name */ wp_die( esc_attr( sprintf( __( 'ERROR - Remote database %s not available', 'wp-data-access' ), $this->schema_name ) ) ); } else { /* translators: %s = remote database name */ die( esc_attr( sprintf( __( 'ERROR - Remote database %s not available', 'wp-data-access' ), $this->schema_name ) ) ); } } // Selected columns cannot be changed by the user at this time. No check for SQL injection needed now. // This might change in the future when users are allowed to change or set this value. A method named // column_exists() in WPDA_Dictionary_Checks is already available for this purpose. $selected_columns = '*'; if ( isset( $this->columns_queried ) ) { $selected_columns = implode( ',', $this->columns_queried ); } if ( isset( $this->wpda_table_settings->hyperlinks ) ) { $i = 0; foreach ( $this->wpda_table_settings->hyperlinks as $hyperlink ) { $skip_column = false; if ( null !== $this->wpda_project_table_settings ) { $hyperlink_label = $hyperlink->hyperlink_label; if ( !property_exists( $this, 'is_child' ) ) { if ( isset( $this->wpda_project_table_settings->hyperlinks_parent->{$hyperlink_label} ) && !$this->wpda_project_table_settings->hyperlinks_parent->{$hyperlink_label} ) { $skip_column = true; } } else { if ( isset( $this->wpda_project_table_settings->hyperlinks_child->{$hyperlink_label} ) && !$this->wpda_project_table_settings->hyperlinks_child->{$hyperlink_label} ) { $skip_column = true; } } } if ( !$skip_column && isset( $hyperlink->hyperlink_list ) && true === $hyperlink->hyperlink_list ) { $hyperlink_label = ( isset( $hyperlink->hyperlink_label ) ? $hyperlink->hyperlink_label : '' ); $hyperlink_html = ( isset( $hyperlink->hyperlink_html ) ? $hyperlink->hyperlink_html : '' ); if ( '' !== $hyperlink_label && '' !== $hyperlink_html ) { // Add hyperlink columns (details are added in method column_default). $selected_columns .= ", '' as wpda_hyperlink_{$i}"; } } $i++; } } if ( '' === $this->schema_name ) { $query = "\n\t\t\t\t\tselect {$selected_columns}\n\t\t\t\t\tfrom `{$this->table_name}`\n\t\t\t\t\t{$this->where}\n\t\t\t\t"; } else { if ( self::LIST_BASE_TABLE === $this->table_name ) { $query = "\n\t\t\t\t\t\tselect {$selected_columns}\n\t\t\t\t\t\tfrom {$this->table_name}\n\t\t\t\t\t\t{$this->where}\n\t\t\t\t\t"; } else { $query = "\n\t\t\t\t\t\tselect {$selected_columns}\n\t\t\t\t\t\tfrom `{$wpdadb->dbname}`.`{$this->table_name}`\n\t\t\t\t\t\t{$this->where}\n\t\t\t\t\t"; } } $query .= $this->get_order_by(); // Add order by. $query .= " limit {$this->items_per_page}"; $offset = ($this->current_page - 1) * $this->items_per_page; if ( $offset > 0 ) { $query .= " offset {$offset}"; } // Debug query. // var_dump( $query ); $this->items = $wpdadb->get_results( $query, 'ARRAY_A' ); } /** * Get order by * * @return string|void */ protected function get_order_by() { if ( !empty( $_REQUEST['orderby'] ) ) { $orderby_arg = sanitize_sql_orderby( wp_unslash( $_REQUEST['orderby'] ) ); if ( !empty( $_REQUEST['order'] ) ) { $order_arg = sanitize_text_field( wp_unslash( $_REQUEST['order'] ) ); } else { $order_arg = ''; } $columns = $this->get_sortable_columns(); // Check column name for SQL injection. if ( isset( $columns[$orderby_arg] ) || $this->wpda_data_dictionary->column_exists( $orderby_arg ) ) { // Column name exists in current table, safely continue... $orderby = ' order by `' . WPDA::remove_backticks( $orderby_arg ) . '`'; // Prevent SQL injection for order. If 'desc' is found result will be ordered desc. In all other // cases we'll order asc. $orderby .= ( strtolower( trim( $order_arg ) ) === 'desc' ? ' desc' : ' asc' ); return $orderby; } else { // The user provided a column name which is not in the table. Most probably the result of a // SQL injection attack, so let's terminate. wp_die( esc_attr__( 'ERROR: Invalid URL [invalid column name]', 'wp-data-access' ) ); } } else { return ''; } } /** * Return an associative array of columns * * @return array * @since 1.0.0 */ public function get_columns() { if ( null !== $this->wpda_cached_columns && is_array( $this->wpda_cached_columns ) ) { return $this->wpda_cached_columns; } $columns = array(); if ( $this->bulk_actions_enabled ) { if ( !empty( $this->wpda_list_columns->get_table_primary_key() ) ) { // Tables has primary key: bulk actions allowed! // Primary key is used to ensure uniqueness. $actions = $this->get_bulk_actions(); if ( is_array( $actions ) && 0 < count( $actions ) ) { // phpcs:ignore -- 8.1 proof $columns = array( 'cb' => '', ); } } } $columnlist = $this->wpda_list_columns->get_table_column_headers(); foreach ( $columnlist as $key => $value ) { $columns[$key] = $value; // Check for alternative column header. if ( isset( $this->column_headers[$key] ) ) { // Alternative header found: use it. $columns[$key] = $this->column_headers[$key]; } else { // Default behaviour: get column header from generated label. $columns[$key] = $this->wpda_list_columns->get_column_label( $key ); } } if ( isset( $this->wpda_table_settings->hyperlinks ) ) { $i = 0; foreach ( $this->wpda_table_settings->hyperlinks as $hyperlink ) { if ( isset( $hyperlink->hyperlink_list ) && true === $hyperlink->hyperlink_list ) { $skip_column = false; if ( null !== $this->wpda_project_table_settings ) { $hyperlink_label = $hyperlink->hyperlink_label; if ( !property_exists( $this, 'is_child' ) ) { if ( isset( $this->wpda_project_table_settings->hyperlinks_parent->{$hyperlink_label} ) && !$this->wpda_project_table_settings->hyperlinks_parent->{$hyperlink_label} ) { $skip_column = true; } } else { if ( isset( $this->wpda_project_table_settings->hyperlinks_child->{$hyperlink_label} ) && !$this->wpda_project_table_settings->hyperlinks_child->{$hyperlink_label} ) { $skip_column = true; } } } if ( !$skip_column ) { $hyperlink_label = ( isset( $hyperlink->hyperlink_label ) ? $hyperlink->hyperlink_label : '' ); $columns["wpda_hyperlink_{$i}"] = $hyperlink_label; // Add hyperlink label. } } $i++; } } // Cache columns. $this->wpda_cached_columns = $columns; return $columns; } /** * List of columns to make sortable * * @return array * @since 1.0.0 */ public function get_sortable_columns() { $columns = array(); // Get column names from result set. if ( $this->items ) { foreach ( $this->items[0] as $key => $value ) { if ( 'wpda_hyperlink_' !== substr( $key, 0, 15 ) ) { $columns[$key] = array($key, false); } } } return $columns; } /** * Display the search box * * @param string $text The 'submit' button label. * @param string $input_id ID attribute value for the search input field. * * @since 1.0.0 */ public function search_box( $text, $input_id ) { $input_id = $input_id . '-search-input'; // Allow external user to add search actions (like icons) to the search box. do_action( 'wpda_add_search_actions', $this->schema_name, $this->table_name, $this->wpda_table_settings, $this->wpda_list_columns ); ?>

    has_items() ? 'style="padding-bottom:10px;"' : '' ); ?>> 'search-submit', ) ); } else { wpdadiehard_submit_button( $text, '', '', false, array( 'id' => 'search-submit', ) ); } ?>

    schema_name, $this->table_name, $this->wpda_table_settings, $this->wpda_list_columns ); } /** * Get search value (entered by the user or taken from cookie). * * @return string * @since 1.5.0 */ protected function get_search_value() { if ( 'off' === WPDA::get_option( WPDA::OPTION_BE_REMEMBER_SEARCH ) ) { if ( isset( $_REQUEST[$this->search_item_name] ) ) { // phpcs:disable WordPress.Security.ValidatedSanitizedInput $value = wp_filter_nohtml_kses( wp_unslash( $_REQUEST[$this->search_item_name] ) ); // phpcs:enable WordPress.Security.ValidatedSanitizedInput return $value; } } if ( 'wpda_wpdp_' === substr( $this->page, 0, 10 ) ) { $cookie_name = $this->page; if ( isset( $_REQUEST['child_request'] ) ) { $cookie_name = 'NOCOOKIESFORCHILDREQUESTS'; // No search values stored for child tables. } foreach ( $_REQUEST as $key => $val ) { if ( strpos( $key, 'WPDA_PARENT_KEY*' ) === 0 ) { $cookie_name = 'NOCOOKIESFORCHILDREQUESTS'; // No search values stored for child tables. } } } else { $cookie_name = $this->page . '_search_' . str_replace( '.', '_', $this->table_name ); } if ( isset( $_REQUEST[$this->search_item_name] ) && '' !== $_REQUEST[$this->search_item_name] ) { // phpcs:disable WordPress.Security.ValidatedSanitizedInput $value = wp_filter_nohtml_kses( wp_unslash( $_REQUEST[$this->search_item_name] ) ); // phpcs:enable WordPress.Security.ValidatedSanitizedInput return $value; } elseif ( isset( $_COOKIE[$cookie_name] ) ) { // phpcs:disable WordPress.Security.ValidatedSanitizedInput $value = wp_filter_nohtml_kses( wp_unslash( $_COOKIE[$cookie_name] ) ); // phpcs:enable WordPress.Security.ValidatedSanitizedInput return $value; } else { return null; } } /** * Print column headers * * Overriding original method print_column_headers to support post instead of get. * Changes are marked! * * @param boolean $with_id Whether to set the id attribute or not. * * @since 1.0.0 * * @staticvar $cb_counter int */ public function print_column_headers( $with_id = true ) { list( $columns, $hidden, $sortable, $primary ) = $this->get_column_info(); // phpcs:ignore -- 8.1 proof // ********************* // *** BEGIN CHANGES *** // ********************* // Code removed. // ******************* // *** END CHANGES *** // ******************* if ( isset( $_REQUEST['orderby'] ) ) { $current_orderby = sanitize_text_field( wp_unslash( $_REQUEST['orderby'] ) ); } else { $current_orderby = ''; } if ( isset( $_REQUEST['order'] ) && 'desc' === $_REQUEST['order'] ) { $current_order = 'desc'; } else { $current_order = 'asc'; } if ( !empty( $columns['cb'] ) ) { static $cb_counter = 1; $columns['cb'] = '' . ''; $cb_counter++; } foreach ( $columns as $column_key => $column_display_name ) { $class = array('manage-column', "column-{$column_key}"); if ( in_array( $column_key, (array) $hidden ) ) { // phpcs:ignore -- 8.1 proof $class[] = 'hidden'; } if ( 'cb' === $column_key ) { $class[] = 'check-column'; } elseif ( in_array( $column_key, array('posts', 'comments', 'links') ) ) { $class[] = 'num'; } if ( $column_key === $primary ) { $class[] = 'column-primary'; } if ( isset( $sortable[$column_key] ) ) { list( $orderby, $desc_first ) = (array) $sortable[$column_key]; // phpcs:ignore -- 8.1 proof if ( $current_orderby === $orderby ) { $order = ( 'asc' === $current_order ? 'desc' : 'asc' ); $class[] = 'sorted'; $class[] = $current_order; } else { $order = ( $desc_first ? 'desc' : 'asc' ); $class[] = 'sortable'; $class[] = ( $desc_first ? 'asc' : 'desc' ); } // ********************* // *** BEGIN CHANGES *** // ********************* // Code removed. // ******************* // *** END CHANGES *** // ******************* } $tag = ( 'cb' === $column_key ? 'td' : 'th' ); $scope = ( 'th' === $tag ? 'scope="col"' : '' ); $id = ( $with_id ? "id='{$column_key}'" : '' ); if ( !empty( $class ) ) { $class = "class='" . join( ' ', $class ) . "'"; } // ********************* // *** BEGIN CHANGES *** // ********************* echo '<' . esc_attr( $tag ) . ' ' . wp_kses_data( $scope ) . ' ' . wp_kses_data( $id ) . ' ' . wp_kses_data( $class ) . '>'; if ( isset( $sortable[$column_key] ) ) { ?> array( 'id' => array(), 'type' => array(), ), 'label' => array( 'class' => array(), 'for' => array(), ), ) ); } echo ''; // ******************* // *** END CHANGES *** // ******************* } } /** * Returns an associative array containing the bulk action * * @return array * @since 1.0.0 */ public function get_bulk_actions() { if ( !$this->bulk_actions_enabled ) { // Bulk actions disabled. return ''; } if ( empty( $this->wpda_list_columns->get_table_primary_key() ) ) { // Tables has no primary key: no bulk actions allowed! // Primary key is necessary to ensure uniqueness. return ''; } $actions = array(); if ( 'on' === $this->allow_delete ) { $actions = array( 'bulk-delete' => __( 'Delete Permanently', 'wp-data-access' ), ); } if ( $this->bulk_export_enabled && (WPDA::is_wpda_table( $this->table_name ) || WPDA::get_option( WPDA::OPTION_BE_EXPORT_ROWS ) === 'on') ) { if ( 'diehard' !== $this->page ) { // Not allowed on web page. $actions['bulk-export'] = __( 'Export to SQL', 'wp-data-access' ); } $actions['bulk-export-xml'] = __( 'Export to XML', 'wp-data-access' ); $actions['bulk-export-json'] = __( 'Export to JSON', 'wp-data-access' ); $actions['bulk-export-excel'] = __( 'Export to Excel', 'wp-data-access' ); $actions['bulk-export-csv'] = __( 'Export to CSV', 'wp-data-access' ); } return $actions; } /** * Generates the table navigation * * Generates the table navigation above or bellow the table and removes the * _wp_http_referrer and _wpnonce because it generates a error about URL too large. * * @param string $which CSS Class name. * * @return void * @since 1.0.0 */ protected function display_tablenav( $which ) { if ( !$this->hide_navigation && $this->items ) { ?>
    bulk_actions( $which ); ?>
    add_full_table_downloads(); $this->extra_tablenav( $which ); $this->pagination( $which ); ?>

    _pagination_args ) ) { return; } $total_items = $this->_pagination_args['total_items']; $total_pages = $this->_pagination_args['total_pages']; $infinite_scroll = false; if ( isset( $this->_pagination_args['infinite_scroll'] ) ) { $infinite_scroll = $this->_pagination_args['infinite_scroll']; } if ( 'top' === $which && $total_pages > 1 ) { $this->screen->render_screen_reader_content( 'heading_pagination' ); } // Add estimate character if row_count_estimate is enabled. $estimate = ( $this->row_count_estimate['is_estimate'] ? '~' : '' ); /* translators: %s: number of items (2x) */ $output = '' . sprintf( _n( '%s item', '%s items', $total_items, 'wp-data-access' ), $estimate . number_format_i18n( $total_items ) ) . ''; $current = $this->get_pagenum(); if ( $this->search_value !== $this->search_value_old ) { $current = 1; } // ********************* // *** BEGIN CHANGES *** // ********************* // Code removed. // ******************* // *** END CHANGES *** // ******************* $page_links = array(); $total_pages_before = ''; $total_pages_after = ''; $disable_first = $disable_last = $disable_prev = $disable_next = false; if ( 1 === (int) $current ) { $disable_first = true; $disable_prev = true; } if ( 2 === (int) $current ) { $disable_first = true; } if ( (int) $current === (int) $total_pages ) { $disable_last = true; $disable_next = true; } if ( (int) $current === (int) $total_pages - 1 ) { $disable_last = true; } // ********************* // *** BEGIN CHANGES *** // ********************* $link_with_post_support = "\n \n %s\n \n "; // ******************* // *** END CHANGES *** // ******************* if ( $disable_first ) { $page_links[] = ''; } else { // ********************* // *** BEGIN CHANGES *** // ********************* $page_links[] = sprintf( $link_with_post_support, 'first-page button', '', __( 'First page', 'wp-data-access' ), '«' ); // ******************* // *** END CHANGES *** // ******************* } if ( $disable_prev ) { $page_links[] = ''; } else { // ********************* // *** BEGIN CHANGES *** // ********************* $page_links[] = sprintf( $link_with_post_support, 'prev-page button', max( 1, $current - 1 ), __( 'Previous page', 'wp-data-access' ), '‹' ); // ******************* // *** END CHANGES *** // ******************* } if ( 'bottom' === $which ) { $html_current_page = $current; $total_pages_before = '' . __( 'Current Page', 'wp-data-access' ) . ''; } else { $html_current_page = sprintf( "%s", '', $current, strlen( (string) $total_pages ) ); } $html_total_pages = sprintf( "%s", number_format_i18n( $total_pages ) ); /* translators: %s: current page/total pages */ $page_links[] = $total_pages_before . sprintf( _x( '%1$s of %2$s', 'paging', 'wp-data-access' ), $html_current_page, $html_total_pages ) . $total_pages_after; if ( $disable_next ) { $page_links[] = ''; } else { // ********************* // *** BEGIN CHANGES *** // ********************* $page_links[] = sprintf( $link_with_post_support, 'next-page button', min( $total_pages, $current + 1 ), __( 'Next page', 'wp-data-access' ), '›' ); // ******************* // *** END CHANGES *** // ******************* } if ( $disable_last ) { $page_links[] = ''; } else { // ********************* // *** BEGIN CHANGES *** // ********************* $page_links[] = sprintf( $link_with_post_support, 'last-page button', $total_pages, __( 'Last page', 'wp-data-access' ), '»' ); // ******************* // *** END CHANGES *** // ******************* } $pagination_links_class = 'pagination-links'; if ( !empty( $infinite_scroll ) ) { $pagination_links_class = ' hide-if-js'; } $output .= "\n" . join( "\n", $page_links ) . ''; if ( $total_pages ) { $page_class = ( $total_pages < 2 ? ' one-page' : '' ); } else { $page_class = ' no-pages'; } $this->_pagination = "
    {$output}
    "; // phpcs:disable WordPress.Security.EscapeOutput echo $this->_pagination; // phpcs:enable WordPress.Security.EscapeOutput } } // phpcs:enable WordPress.Security.NonceVerification.Recommended, WordPress.Security.NonceVerification.Missing