fooplugins /
foogallery
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | /** |
||
| 3 | * The default Gallery Datasource which pulls attachments from the WP media library |
||
| 4 | */ |
||
| 5 | if ( ! class_exists( 'FooGalleryDatasource_MediaLibrary' ) ) { |
||
| 6 | |||
| 7 | class FooGalleryDatasource_MediaLibrary implements IFooGalleryDatasource { |
||
|
0 ignored issues
–
show
|
|||
| 8 | |||
| 9 | /** |
||
| 10 | * @var FooGallery |
||
| 11 | */ |
||
| 12 | private $foogallery; |
||
| 13 | |||
| 14 | /** |
||
| 15 | * Sets the FooGallery object we are dealing with |
||
| 16 | * |
||
| 17 | * @param $foogallery FooGallery |
||
| 18 | */ |
||
| 19 | public function setGallery( $foogallery ) { |
||
| 20 | $this->foogallery = $foogallery; |
||
| 21 | } |
||
| 22 | |||
| 23 | function __construct() { |
||
|
0 ignored issues
–
show
|
|||
| 24 | add_filter( 'foogallery_attachment_get_posts_args', array( $this, 'apply_query_args' ) ); |
||
| 25 | } |
||
| 26 | |||
| 27 | /** |
||
| 28 | * Returns the number of attachments used from the media library |
||
| 29 | * @return int |
||
| 30 | */ |
||
| 31 | public function getCount() { |
||
| 32 | return sizeof( $this->foogallery->attachment_ids ); |
||
| 33 | } |
||
| 34 | |||
| 35 | /** |
||
| 36 | * Returns a serialized string that represents the media in the datasource. |
||
| 37 | * This string is persisted when saving a FooGallery |
||
| 38 | * |
||
| 39 | * @return string |
||
| 40 | */ |
||
| 41 | public function getSerializedData() { |
||
| 42 | if ( is_array( $this->foogallery->attachment_ids ) ) { |
||
| 43 | return implode( ',', $this->foogallery->attachment_ids ); |
||
| 44 | } |
||
| 45 | |||
| 46 | return ''; |
||
| 47 | } |
||
| 48 | |||
| 49 | /** |
||
| 50 | * Returns an array of FooGalleryAttachments from the datasource |
||
| 51 | * @return array(FooGalleryAttachment) |
||
|
0 ignored issues
–
show
The doc-type
array(FooGalleryAttachment) could not be parsed: Expected "|" or "end of type", but got "(" at position 5. (view supported doc-types)
This check marks PHPDoc comments that could not be parsed by our parser. To see which comment annotations we can parse, please refer to our documentation on supported doc-types. Loading history...
|
|||
| 52 | */ |
||
| 53 | public function getAttachments() { |
||
| 54 | $attachments = array(); |
||
| 55 | |||
| 56 | if ( ! empty( $this->foogallery->attachment_ids ) ) { |
||
| 57 | |||
| 58 | global $current_foogallery_arguments; |
||
| 59 | |||
| 60 | //check if a sorting override has been applied |
||
| 61 | if ( isset( $current_foogallery_arguments ) && isset( $current_foogallery_arguments['sort'] ) ) { |
||
| 62 | $this->foogallery->sorting = $current_foogallery_arguments['sort']; |
||
| 63 | } |
||
| 64 | |||
| 65 | add_action( 'pre_get_posts', array( $this, 'force_gallery_ordering' ), 99 ); |
||
| 66 | add_action( 'pre_get_posts', array( $this, 'force_suppress_filters' ), PHP_INT_MAX ); |
||
| 67 | |||
| 68 | $attachment_query_args = apply_filters( 'foogallery_attachment_get_posts_args', array( |
||
| 69 | 'post_type' => 'attachment', |
||
| 70 | 'posts_per_page' => -1, |
||
| 71 | 'post__in' => $this->foogallery->attachment_ids, |
||
| 72 | 'orderby' => foogallery_sorting_get_posts_orderby_arg( $this->foogallery->sorting ), |
||
| 73 | 'order' => foogallery_sorting_get_posts_order_arg( $this->foogallery->sorting ) |
||
| 74 | ) ); |
||
| 75 | |||
| 76 | $attachment_posts = get_posts( $attachment_query_args ); |
||
| 77 | |||
| 78 | remove_action( 'pre_get_posts', array( $this, 'force_gallery_ordering' ), 99 ); |
||
| 79 | remove_action( 'pre_get_posts', array( $this, 'force_suppress_filters' ), PHP_INT_MAX ); |
||
| 80 | |||
| 81 | $attachments = array_map( array( $this, 'build_attachment' ), $attachment_posts ); |
||
| 82 | } |
||
| 83 | |||
| 84 | return $attachments; |
||
| 85 | } |
||
| 86 | |||
| 87 | function apply_query_args( $query_args ) { |
||
|
0 ignored issues
–
show
|
|||
| 88 | global $current_foogallery_arguments; |
||
| 89 | |||
| 90 | //check if a limit has been applied |
||
| 91 | if ( isset( $current_foogallery_arguments ) && isset( $current_foogallery_arguments['limit'] ) ) { |
||
| 92 | $query_args['posts_per_page'] = $current_foogallery_arguments['limit']; |
||
| 93 | } |
||
| 94 | |||
| 95 | //check if an offset has been applied |
||
| 96 | if ( isset( $current_foogallery_arguments ) && isset( $current_foogallery_arguments['offset'] ) ) { |
||
| 97 | $query_args['offset'] = $current_foogallery_arguments['offset']; |
||
| 98 | } |
||
| 99 | |||
| 100 | return $query_args; |
||
| 101 | } |
||
| 102 | |||
| 103 | function build_attachment( $attachment_post ) { |
||
|
0 ignored issues
–
show
|
|||
| 104 | $attachment = apply_filters( 'foogallery_attachment_load', FooGalleryAttachment::get( $attachment_post ), $this->foogallery ); |
||
| 105 | return $attachment; |
||
| 106 | } |
||
| 107 | |||
| 108 | /** |
||
| 109 | * This forces the attachments to be fetched using the correct ordering. |
||
| 110 | * Some plugins / themes override this globally for some reason, so this is a preventative measure to ensure sorting is correct |
||
| 111 | * @param $query WP_Query |
||
| 112 | */ |
||
| 113 | public function force_gallery_ordering( $query ) { |
||
| 114 | //only care about attachments |
||
| 115 | if ( array_key_exists( 'post_type', $query->query ) && |
||
| 116 | 'attachment' === $query->query['post_type'] ) { |
||
| 117 | $query->set( 'orderby', foogallery_sorting_get_posts_orderby_arg( $this->foogallery->sorting ) ); |
||
| 118 | $query->set( 'order', foogallery_sorting_get_posts_order_arg( $this->foogallery->sorting ) ); |
||
| 119 | } |
||
| 120 | } |
||
| 121 | |||
| 122 | /** |
||
| 123 | * This forces the attachments to be fetched without any other filters. |
||
| 124 | * Some plugins override attachment queries, so this is a preventative measure to ensure sorting is correct |
||
| 125 | * @param $query WP_Query |
||
| 126 | */ |
||
| 127 | public function force_suppress_filters( $query ) { |
||
| 128 | //only care about attachments |
||
| 129 | if ( array_key_exists( 'post_type', $query->query ) && |
||
| 130 | 'attachment' === $query->query['post_type'] ) { |
||
| 131 | $query->set( 'suppress_filters', true ); |
||
| 132 | } |
||
| 133 | } |
||
| 134 | |||
| 135 | /** |
||
| 136 | * Returns the featured FooGalleryAttachment from the datasource |
||
| 137 | * @return bool|FooGalleryAttachment |
||
| 138 | */ |
||
| 139 | public function getFeaturedAttachment() { |
||
| 140 | $attachment_id = $this->find_featured_attachment_id(); |
||
| 141 | |||
| 142 | if ( $attachment_id ) { |
||
| 143 | return FooGalleryAttachment::get_by_id( $attachment_id ); |
||
| 144 | } |
||
| 145 | |||
| 146 | return false; |
||
| 147 | } |
||
| 148 | |||
| 149 | private function find_featured_attachment_id() { |
||
| 150 | $attachment_id = get_post_thumbnail_id( $this->foogallery->ID ); |
||
| 151 | |||
| 152 | //if no featured image could be found then get the first image |
||
| 153 | if ( ! $attachment_id && $this->foogallery->attachment_ids ) { |
||
| 154 | $attachment_id_values = array_values( $this->foogallery->attachment_ids ); |
||
| 155 | $attachment_id = array_shift( $attachment_id_values ); |
||
| 156 | } |
||
| 157 | return $attachment_id; |
||
| 158 | } |
||
| 159 | } |
||
| 160 | } |
You can fix this by adding a namespace to your class:
When choosing a vendor namespace, try to pick something that is not too generic to avoid conflicts with other libraries.