AutoLoadNextPost /
auto-load-next-post
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | /** |
||
| 3 | * Auto Load Next Post Template |
||
| 4 | * |
||
| 5 | * Functions for the templating system. |
||
| 6 | * |
||
| 7 | * @since 1.6.0 |
||
| 8 | * @author Sébastien Dumont |
||
| 9 | * @category Core |
||
| 10 | * @package Auto Load Next Post/Functions |
||
| 11 | * @license GPL-2.0+ |
||
| 12 | */ |
||
| 13 | |||
| 14 | // Exit if accessed directly. |
||
| 15 | if ( ! defined( 'ABSPATH' ) ) { |
||
| 16 | exit; |
||
| 17 | } |
||
| 18 | |||
| 19 | if ( ! function_exists( 'alnp_template_redirect' ) ) { |
||
| 20 | /** |
||
| 21 | * When the 'alnp' endpoint is used on a singular post it forces |
||
| 22 | * the template redirect to retrieve only the post content. |
||
| 23 | * |
||
| 24 | * @since 1.0.0 |
||
| 25 | * @version 1.6.0 |
||
| 26 | * @global WP_Query $wp_query - The object information defining the current request and determines what type of query it's dealing with. See https://codex.wordpress.org/Class_Reference/WP_Query |
||
| 27 | */ |
||
| 28 | function alnp_template_redirect() { |
||
| 29 | global $wp_query; |
||
| 30 | |||
| 31 | // If this is not a request for alnp or a singular object then bail. |
||
| 32 | if ( ! isset( $wp_query->query_vars['alnp'] ) || ! is_singular() ) { |
||
| 33 | return; |
||
| 34 | } |
||
| 35 | |||
| 36 | /** |
||
| 37 | * Load the template file from the theme (child or parent) if one exists. |
||
| 38 | * If theme does not have a template file for Auto Load Next Post, |
||
| 39 | * the plugin will load a default template. |
||
| 40 | */ |
||
| 41 | $child_path = get_stylesheet_directory() . '/' . AUTO_LOAD_NEXT_POST_TEMPLATE_PATH; |
||
| 42 | $template_path = get_template_directory() . '/' . AUTO_LOAD_NEXT_POST_TEMPLATE_PATH; |
||
| 43 | $default_path = AUTO_LOAD_NEXT_POST_FILE_PATH; |
||
| 44 | $template_redirect = ''; |
||
| 45 | |||
| 46 | if ( file_exists( $child_path . 'content-alnp.php' ) ) { |
||
| 47 | $template_redirect = $child_path . 'content-alnp.php'; |
||
| 48 | } else if ( file_exists( $template_path . 'content-alnp.php' ) ) { |
||
| 49 | $template_redirect = $template_path . 'content-alnp.php'; |
||
| 50 | } else if ( file_exists( $default_path . '/templates/content-alnp.php' ) ) { |
||
| 51 | $template_redirect = $default_path . '/templates/content-alnp.php'; |
||
| 52 | } |
||
| 53 | |||
| 54 | $template_redirect = apply_filters( 'alnp_template_redirect', $template_redirect ); |
||
| 55 | |||
| 56 | include( $template_redirect ); |
||
| 57 | |||
| 58 | exit; |
||
| 59 | } // END alnp_template_redirect() |
||
| 60 | } |
||
| 61 | |||
| 62 | if ( ! function_exists( 'auto_load_next_post_comments' ) ) { |
||
| 63 | /** |
||
| 64 | * Adds the comments template after the post content. |
||
| 65 | * |
||
| 66 | * @since 1.4.8 |
||
| 67 | * @version 1.5.4 |
||
| 68 | */ |
||
| 69 | function auto_load_next_post_comments() { |
||
| 70 | // If comments are open or we have at least one comment, load up the comment template. |
||
| 71 | if ( comments_open() || get_comments_number() ) : |
||
| 72 | comments_template(); |
||
| 73 | endif; |
||
| 74 | } // END auto_load_next_post_comments() |
||
| 75 | } |
||
| 76 | |||
| 77 | if ( ! function_exists( 'auto_load_next_post_navigation' ) ) { |
||
| 78 | /** |
||
| 79 | * Adds the post navigation for the previous link only after the post content. |
||
| 80 | * |
||
| 81 | * @since 1.4.8 |
||
| 82 | * @version 1.5.4 |
||
| 83 | */ |
||
| 84 | function auto_load_next_post_navigation() { |
||
| 85 | ?> |
||
| 86 | <nav class="navigation post-navigation" role="navigation"> |
||
| 87 | <span class="nav-previous"><?php previous_post_link( '%link', '<span class="meta-nav">' . _x( '←', 'Previous post link', 'auto-load-next-post' ) . '</span> %title' ); ?></span> |
||
| 88 | </nav> |
||
| 89 | <?php |
||
| 90 | } // END auto_load_next_post_navigation() |
||
| 91 | } |
||
| 92 | |||
| 93 | if ( ! function_exists( 'alnp_get_locations' ) ) { |
||
| 94 | /** |
||
| 95 | * Get list of locations as to where the content for the theme is located. |
||
| 96 | * The list is in the order to look for the templates that store the content. |
||
| 97 | * |
||
| 98 | * @since 1.6.0 |
||
| 99 | * @return array |
||
| 100 | */ |
||
| 101 | function alnp_get_locations() { |
||
| 102 | return array( |
||
| 103 | '', // Parent theme folder |
||
| 104 | 'components/', |
||
| 105 | 'components/post/', |
||
| 106 | 'components/page/', |
||
| 107 | 'template-parts/', |
||
| 108 | 'template-parts/content/', |
||
| 109 | 'template-parts/post/', |
||
| 110 | 'template-parts/page/', |
||
| 111 | 'templates/', |
||
| 112 | 'partials/', |
||
| 113 | 'loop-templates/' |
||
| 114 | ); |
||
| 115 | } // END alnp_get_locations() |
||
| 116 | } |
||
| 117 | |||
| 118 | if ( ! function_exists( 'alnp_get_templates' ) ) { |
||
| 119 | /** |
||
| 120 | * Get list of templates to look for. |
||
| 121 | * |
||
| 122 | * @since 1.6.0 |
||
| 123 | * @param string $post_type |
||
| 124 | * @param string $post_format |
||
| 125 | * @return array |
||
| 126 | */ |
||
| 127 | function alnp_get_templates( $post_type = 'post', $post_format = '' ) { |
||
| 128 | $get_standard = array( |
||
| 129 | 'content-single.php', |
||
| 130 | 'content-post.php', |
||
| 131 | 'content-' . $post_type . '.php', |
||
| 132 | 'content.php' |
||
| 133 | ); |
||
| 134 | |||
| 135 | if ( ! empty( $post_format ) ) { |
||
| 136 | $get_formats = array( |
||
| 137 | 'format-' . $post_format . '.php', |
||
| 138 | 'content' . $post_format . '.php' |
||
| 139 | ); |
||
| 140 | |||
| 141 | return array_merge( $get_standard, $get_formats ); |
||
| 142 | } |
||
| 143 | |||
| 144 | return $get_standard; |
||
| 145 | } // END alnp_get_templates() |
||
| 146 | } |
||
| 147 | |||
| 148 | if ( ! function_exists( 'alnp_scan_directories' ) ) { |
||
| 149 | /** |
||
| 150 | * Scans for the theme template directory depending on the post type requested and saves it. |
||
| 151 | * |
||
| 152 | * @since 1.6.0 |
||
| 153 | * @param string $post_type |
||
| 154 | * @param string $post_format |
||
| 155 | */ |
||
| 156 | function alnp_scan_directories( $post_type = 'post', $post_format = '' ) { |
||
| 157 | // Possible locations where the content files are found. |
||
| 158 | $locations = alnp_get_locations(); |
||
| 159 | |||
| 160 | // Templates to look for based on the post that is loaded. |
||
| 161 | $templates = alnp_get_templates( $post_type, $post_format ); |
||
| 162 | |||
| 163 | $content_found = false; |
||
| 164 | |||
| 165 | // Scanning all possible locations. |
||
| 166 | foreach( $locations as $location ) { |
||
| 167 | // Scanning all possible templates within the locations. |
||
| 168 | foreach( $templates as $template ) { |
||
| 169 | // Remove forwardslash if location is the parent theme folder. |
||
| 170 | if ( empty( $location ) ) { |
||
| 171 | $location = str_replace('/', '', $location); |
||
| 172 | } |
||
| 173 | |||
| 174 | // If a template has been found then save it. |
||
| 175 | if ( locate_template( $location . $template ) != '' && $content_found !== true ) { |
||
| 176 | // Save template found. |
||
| 177 | if ( ! empty( $post_format ) ) { |
||
| 178 | update_option( 'auto_load_next_post_directory_post_' . $post_format, $location ); |
||
| 179 | } else { |
||
| 180 | update_option( 'auto_load_next_post_directory_' . $post_type, $location ); |
||
| 181 | } |
||
| 182 | |||
| 183 | $content_found = true; |
||
| 184 | } |
||
| 185 | } |
||
| 186 | } |
||
| 187 | } // END alnp_scan_directories() |
||
| 188 | } |
||
| 189 | |||
| 190 | View Code Duplication | if ( ! function_exists( 'alnp_get_template_directory' ) ) { |
|
| 191 | /** |
||
| 192 | * Returns the template directory saved. |
||
| 193 | * |
||
| 194 | * @since 1.6.0 |
||
| 195 | * @param string $post_type |
||
| 196 | * @param string $post_format |
||
| 197 | * @return string $template |
||
| 198 | */ |
||
| 199 | function alnp_get_template_directory( $post_type = 'post', $post_format = '' ) { |
||
| 200 | if ( ! empty( $post_format ) ) { |
||
| 201 | $template = get_option( 'auto_load_next_post_directory_post_' . $post_format ); |
||
| 202 | } else { |
||
| 203 | $template = get_option( 'auto_load_next_post_directory_' . $post_type ); |
||
| 204 | } |
||
| 205 | |||
| 206 | if ( !$template ) { |
||
| 207 | return ''; |
||
| 208 | } |
||
| 209 | |||
| 210 | return $template; |
||
| 211 | } // END alnp_get_template_directory() |
||
| 212 | } |
||
| 213 | |||
| 214 | View Code Duplication | if ( ! function_exists( 'alnp_get_template' ) ) { |
|
| 215 | /** |
||
| 216 | * Returns the template file saved. |
||
| 217 | * |
||
| 218 | * @since 1.6.0 |
||
| 219 | * @param string $post_type |
||
| 220 | * @param string $post_format |
||
| 221 | * @return string $template |
||
| 222 | */ |
||
| 223 | function alnp_get_template( $post_type = 'post', $post_format = '' ) { |
||
| 224 | if ( ! empty( $post_format ) ) { |
||
| 225 | $template = get_option( 'auto_load_next_post_template_post_' . strtolower( $post_format ) ); |
||
| 226 | } else { |
||
| 227 | $template = get_option( 'auto_load_next_post_template_' . strtolower( $post_type ) ); |
||
| 228 | } |
||
| 229 | |||
| 230 | if ( !$template ) { |
||
| 231 | return ''; |
||
| 232 | } |
||
| 233 | |||
| 234 | return $template; |
||
| 235 | } // END alnp_get_template() |
||
| 236 | } |
||
| 237 | |||
| 238 | if ( ! function_exists( 'alnp_find_template' ) ) { |
||
| 239 | /** |
||
| 240 | * Scans through the active theme to look for the content to load. |
||
| 241 | * If the content is not found then the fallback will be used. |
||
| 242 | * |
||
| 243 | * @since 1.6.0 |
||
| 244 | * @param string $location |
||
| 245 | * @param string $post_type |
||
| 246 | * @param string $post_format |
||
| 247 | * @return array |
||
| 248 | */ |
||
| 249 | function alnp_find_template( $location = '', $post_type, $post_format ) { |
||
| 250 | // Templates to look for based on the post that is loaded. |
||
| 251 | $templates = alnp_get_templates( $post_type, $post_format ); |
||
| 252 | |||
| 253 | $found = false; |
||
| 254 | |||
| 255 | // Scanning all possible templates within the set location. |
||
| 256 | foreach( $templates as $template ) { |
||
| 257 | // Remove forwardslash if location is the parent theme folder. |
||
| 258 | if ( empty( $location ) ) { |
||
| 259 | $location = str_replace('/', '', $location); |
||
| 260 | } |
||
| 261 | |||
| 262 | // If a template has been found then return it. |
||
| 263 | if ( locate_template( $location . $template ) != '' && $found != true ) { |
||
|
0 ignored issues
–
show
|
|||
| 264 | $file = $location . $template; |
||
| 265 | |||
| 266 | if ( ! empty( $post_format ) ) { |
||
| 267 | update_option( 'auto_load_next_post_template_post_' . strtolower( $post_format ), $file ); |
||
| 268 | } else { |
||
| 269 | update_option( 'auto_load_next_post_template_' . strtolower( $post_type ), $file ); |
||
| 270 | } |
||
| 271 | |||
| 272 | $found = true; |
||
| 273 | } |
||
| 274 | } |
||
| 275 | |||
| 276 | return array( |
||
| 277 | 'template' => $file, |
||
|
0 ignored issues
–
show
The variable
$file does not seem to be defined for all execution paths leading up to this point.
If you define a variable conditionally, it can happen that it is not defined for all execution paths. Let’s take a look at an example: function myFunction($a) {
switch ($a) {
case 'foo':
$x = 1;
break;
case 'bar':
$x = 2;
break;
}
// $x is potentially undefined here.
echo $x;
}
In the above example, the variable $x is defined if you pass “foo” or “bar” as argument for $a. However, since the switch statement has no default case statement, if you pass any other value, the variable $x would be undefined. Available Fixes
Loading history...
|
|||
| 278 | 'found' => $found |
||
| 279 | ); |
||
| 280 | } // END alnp_find_template() |
||
| 281 | } |
||
| 282 | |||
| 283 | if ( ! function_exists( 'alnp_load_content' ) ) { |
||
| 284 | /** |
||
| 285 | * Loads theme template set either by theme support or setup wizard. |
||
| 286 | * If the content is not found then a fallback template will be used. |
||
| 287 | * |
||
| 288 | * @since 1.6.0 |
||
| 289 | * @param string $post_type |
||
| 290 | * @param string $post_format |
||
| 291 | */ |
||
| 292 | function alnp_load_content( $post_type, $post_format ) { |
||
| 293 | // Returns template location for supported themes. |
||
| 294 | $template_location = alnp_template_location(); |
||
| 295 | |||
| 296 | $content_found = false; |
||
| 297 | |||
| 298 | // Check and return directory and template if already found. |
||
| 299 | if ( empty( $template_location ) ) { |
||
| 300 | $directory = alnp_get_template_directory( $post_type, $post_format ); |
||
| 301 | } else { |
||
| 302 | $directory = $template_location; |
||
| 303 | } |
||
| 304 | |||
| 305 | $template = alnp_get_template( $post_type, $post_format ); |
||
| 306 | |||
| 307 | if ( ! empty( $directory ) && ! empty( $template ) ) { |
||
| 308 | $template = $directory . $template; |
||
| 309 | $content_found = true; |
||
| 310 | } else { |
||
| 311 | // Possible locations where the content files are found. |
||
| 312 | $locations = alnp_get_locations(); |
||
| 313 | |||
| 314 | // Scanning all possible locations. |
||
| 315 | foreach( $locations as $location ) { |
||
| 316 | $template = alnp_find_template( $directory, $post_type, $post_format ); |
||
|
0 ignored issues
–
show
It seems like
$directory defined by $template_location on line 302 can also be of type boolean; however, alnp_find_template() does only seem to accept string, maybe add an additional type check?
If a method or function can return multiple different values and unless you are sure that you only can receive a single value in this context, we recommend to add an additional type check: /**
* @return array|string
*/
function returnsDifferentValues($x) {
if ($x) {
return 'foo';
}
return array();
}
$x = returnsDifferentValues($y);
if (is_array($x)) {
// $x is an array.
}
If this a common case that PHP Analyzer should handle natively, please let us know by opening an issue. Loading history...
|
|||
| 317 | $content_found = $template['found']; |
||
| 318 | } |
||
| 319 | } |
||
| 320 | |||
| 321 | // Can be overridden. |
||
| 322 | $content_found = apply_filters( 'alnp_content_found', $content_found ); |
||
| 323 | |||
| 324 | // Check if the user has forced the use of the fallback template. |
||
| 325 | $use_fallback = get_option( 'auto_load_next_post_use_fallback' ); |
||
| 326 | |||
| 327 | // If content is found then load the template part. |
||
| 328 | if ( $content_found && empty( $use_fallback ) ) { |
||
| 329 | locate_template( $template, true, false ); |
||
| 330 | } |
||
| 331 | else { |
||
| 332 | do_action( 'alnp_load_content', $post_type ); |
||
| 333 | } |
||
| 334 | } // END alnp_load_content() |
||
| 335 | } |
||
| 336 | |||
| 337 | if ( ! function_exists( 'alnp_load_fallback_content' ) ) { |
||
| 338 | /** |
||
| 339 | * Load fallback template should no content file be found. |
||
| 340 | * |
||
| 341 | * @since 1.6.0 |
||
| 342 | * @param string $post_type |
||
| 343 | */ |
||
| 344 | function alnp_load_fallback_content( $post_type ) { |
||
| 345 | get_template_part( AUTO_LOAD_NEXT_POST_FILE_PATH . '/templates/content/content', $post_type ); |
||
| 346 | } // END alnp_load_fallback_content() |
||
| 347 | } |
||
| 348 |
When comparing two booleans, it is generally considered safer to use the strict comparison operator.