lightspeeddevelopment / lsx-projects

includes/class-lsx-projects-scpo-engine.php

<?php

$lsx_projects_scporder = new LSX_Projects_SCPO_Engine();

/**
 * SCPO Engine
 *
 * @package   LSX Projects
 * @author    LightSpeed
 * @license   GPL3
 * @link
 * @copyright 2016 LightSpeed
 */
class LSX_Projects_SCPO_Engine {

	function __construct() {
		if ( ! get_option( 'lsx_projects_scporder_install' ) ) {
			$this->lsx_projects_scporder_install();
		}

		add_action( 'admin_init', array( $this, 'refresh' ) );
		add_action( 'admin_init', array( $this, 'load_script_css' ) );

		add_action( 'wp_ajax_update-menu-order', array( $this, 'update_menu_order' ) );

		add_action( 'pre_get_posts', array( $this, 'lsx_projects_scporder_pre_get_posts' ) );

		add_filter( 'get_previous_post_where', array( $this, 'lsx_projects_scporder_previous_post_where' ) );
		add_filter( 'get_previous_post_sort', array( $this, 'lsx_projects_scporder_previous_post_sort' ) );
		add_filter( 'get_next_post_where', array( $this, 'lsx_projects_scporder_next_post_where' ) );
		add_filter( 'get_next_post_sort', array( $this, 'lsx_projects_scporder_next_post_sort' ) );
	}

	function lsx_projects_scporder_install() {
		update_option( 'lsx_projects_scporder_install', 1 );
	}

	function _check_load_script_css() {
		$active = false;
		$objects = $this->get_lsx_projects_scporder_options_objects();

		if ( empty( $objects ) ) {
			return false;
		}

		if ( isset( $_GET['orderby'] ) || strstr( sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ) ), 'action=edit' ) || strstr( sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ) ), 'wp-admin/post-new.php' ) ) {

Processing form data without nonce verification.

Detected usage of a possibly undefined superglobal array index: $_SERVER['REQUEST_URI']. Use isset() or empty() to check the index exists before using it

			return false;
		}

		if ( ! empty( $objects ) ) {
			if ( isset( $_GET['post_type'] ) && ! isset( $_GET['taxonomy'] ) && array_key_exists( sanitize_text_field( wp_unslash( $_GET['post_type'] ) ), $objects ) ) { // if page or custom post types

Processing form data without nonce verification.

				$active = true;
			}

			if ( ! isset( $_GET['post_type'] ) && strstr( sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ) ), 'wp-admin/edit.php' ) && array_key_exists( 'post', $objects ) ) { // if post

Processing form data without nonce verification.

Detected usage of a possibly undefined superglobal array index: $_SERVER['REQUEST_URI']. Use isset() or empty() to check the index exists before using it

				$active = true;
			}
		}

		return $active;
	}

	function load_script_css() {
		if ( $this->_check_load_script_css() ) {
			wp_enqueue_script( 'scporderjs', LSX_PROJECTS_URL . 'assets/js/scporder.min.js', array( 'jquery', 'jquery-ui-sortable' ), null, true );

Resource version not set in call to wp_enqueue_script(). This means new versions of the script will not always be loaded due to browser caching.

			$scporderjs_params = array(
				'ajax_url' => admin_url( 'admin-ajax.php' ),

Array double arrow not aligned correctly; expected 3 space(s) between "'ajax_url'" and double arrow, but found 1.

				'ajax_nonce' => wp_create_nonce( 'scporder' ),
			);

			wp_localize_script( 'scporderjs', 'scporderjs_params', $scporderjs_params );

			wp_enqueue_style( 'scporder', LSX_PROJECTS_URL . 'assets/css/scporder.css', array(), null );

Resource version not set in call to wp_enqueue_style(). This means new versions of the style will not always be loaded due to browser caching.

		}
	}

	function refresh() {
		global $wpdb;

		$objects = $this->get_lsx_projects_scporder_options_objects();

		if ( ! empty( $objects ) ) {
			foreach ( $objects as $object => $object_data ) {
				$result = $wpdb->get_results($wpdb->prepare("

Usage of a direct database call is discouraged.

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

					SELECT count(*) as cnt, max(menu_order) as max, min(menu_order) as min
					FROM $wpdb->posts
					WHERE post_type = '%s' AND post_status IN ('publish', 'pending', 'draft', 'private', 'future')

Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%s'.

				", $object));

				if ( 0 == $result[0]->cnt || $result[0]->cnt == $result[0]->max ) {

Found: ==. Use strict comparisons (=== or !==).

					continue;
				}

				$results = $wpdb->get_results( $wpdb->prepare("

Usage of a direct database call is discouraged.

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

					SELECT ID
					FROM $wpdb->posts
					WHERE post_type = '%s' AND post_status IN ('publish', 'pending', 'draft', 'private', 'future')

Simple placeholders should not be quoted in the query string in $wpdb->prepare(). Found: '%s'.

					ORDER BY menu_order ASC
				", $object ) );

				foreach ( $results as $key => $result ) {
					$wpdb->update(

Usage of a direct database call is discouraged.

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

						$wpdb->posts,
						array(
							'menu_order' => $key + 1,
						),
						array(
							'ID' => $result->ID,
						)
					);
				}
			}
		}
	}

	function update_menu_order() {
		check_ajax_referer( 'scporder', 'security' );

		global $wpdb;

		parse_str( sanitize_text_field( wp_unslash( $_POST['order'] ) ), $data );

Detected usage of a possibly undefined superglobal array index: $_POST['order']. Use isset() or empty() to check the index exists before using it

		if ( ! is_array( $data ) ) {
			return false;
		}

		$id_arr = array();

		foreach ( $data as $key => $values ) {
			foreach ( $values as $position => $id ) {
				$id_arr[] = $id;
			}
		}

		$menu_order_arr = array();

		foreach ( $id_arr as $key => $id ) {
			$results = $wpdb->get_results( "SELECT menu_order FROM $wpdb->posts WHERE ID = " . intval( $id ) );

Usage of a direct database call is discouraged.

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

			foreach ( $results as $result ) {
				$menu_order_arr[] = $result->menu_order;
			}
		}

		sort( $menu_order_arr );

		foreach ( $data as $key => $values ) {
			foreach ( $values as $position => $id ) {
				$wpdb->update(

Usage of a direct database call is discouraged.

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

					$wpdb->posts,
					array(
						'menu_order' => $menu_order_arr[ $position ],
					),
					array(
						'ID' => intval( $id ),
					)
				);
			}
		}
	}

	function lsx_projects_scporder_previous_post_where( $where ) {
		global $post;

		$objects = $this->get_lsx_projects_scporder_options_objects();

		if ( empty( $objects ) ) {
			return $where;
		}

		if ( isset( $post->post_type ) && array_key_exists( $post->post_type, $objects ) ) {
			$current_menu_order = $post->menu_order;
			$where = "WHERE p.menu_order > '" . $current_menu_order . "' AND p.post_type = '" . $post->post_type . "' AND p.post_status = 'publish'";
		}

		return $where;
	}

	function lsx_projects_scporder_previous_post_sort( $orderby ) {
		global $post;

		$objects = $this->get_lsx_projects_scporder_options_objects();

		if ( empty( $objects ) ) {
			return $orderby;
		}

		if ( isset( $post->post_type ) && array_key_exists( $post->post_type, $objects ) ) {
			$orderby = 'ORDER BY p.menu_order ASC LIMIT 1';
		}

		return $orderby;
	}

	function lsx_projects_scporder_next_post_where( $where ) {
		global $post;

		$objects = $this->get_lsx_projects_scporder_options_objects();

		if ( empty( $objects ) ) {
			return $where;
		}

		if ( isset( $post->post_type ) && array_key_exists( $post->post_type, $objects ) ) {
			$current_menu_order = $post->menu_order;
			$where = "WHERE p.menu_order < '" . $current_menu_order . "' AND p.post_type = '" . $post->post_type . "' AND p.post_status = 'publish'";
		}

		return $where;
	}

	function lsx_projects_scporder_next_post_sort( $orderby ) {
		global $post;

		$objects = $this->get_lsx_projects_scporder_options_objects();

		if ( empty( $objects ) ) {
			return $orderby;
		}

		if ( isset( $post->post_type ) && array_key_exists( $post->post_type, $objects ) ) {
			$orderby = 'ORDER BY p.menu_order DESC LIMIT 1';
		}

		return $orderby;
	}

	function lsx_projects_scporder_pre_get_posts( $wp_query ) {
		$objects = $this->get_lsx_projects_scporder_options_objects();

		if ( empty( $objects ) ) {
			return false;
		}

		if ( is_admin() ) {
			if ( isset( $wp_query->query['post_type'] ) && ! isset( $_GET['orderby'] ) ) {

Processing form data without nonce verification.

				if ( array_key_exists( $wp_query->query['post_type'], $objects ) ) {
					$wp_query->set( 'orderby', 'menu_order' );
					$wp_query->set( 'order', 'ASC' );
				}
			}
		} else {
			$active = false;

			if ( isset( $wp_query->query['post_type'] ) ) {
				if ( ! is_array( $wp_query->query['post_type'] ) ) {
					if ( array_key_exists( $wp_query->query['post_type'], $objects ) ) {
						$active = true;
					}
				}
			} else {
				if ( array_key_exists( 'post', $objects ) ) {
					$active = true;
				}
			}

			if ( ! $active ) {
				return false;
			}

			if ( isset( $wp_query->query['suppress_filters'] ) ) {
				if ( $wp_query->get( 'orderby' ) == 'date' ) {

Found: ==. Use strict comparisons (=== or !==).

					$wp_query->set( 'orderby', 'menu_order' );
				}

				if ( $wp_query->get( 'order' ) == 'DESC' ) {

Found: ==. Use strict comparisons (=== or !==).

					$wp_query->set( 'order', 'ASC' );
				}
			} else {
				if ( ! $wp_query->get( 'orderby' ) ) {
					$wp_query->set( 'orderby', 'menu_order' );
				}

				if ( ! $wp_query->get( 'order' ) ) {
					$wp_query->set( 'order', 'ASC' );
				}
			}
		}
	}

	function get_lsx_projects_scporder_options_objects() {
		return array(
			'project' => esc_html_x( 'Project', 'post type singular name', 'lsx-project' ),
		);
	}

}

/**
 * SCP Order Uninstall hook
 */
register_uninstall_hook( __FILE__, 'lsx_projects_scporder_uninstall' );

function lsx_projects_scporder_uninstall() {
	global $wpdb;

	if ( function_exists( 'is_multisite' ) && is_multisite() ) {
		$curr_blog = $wpdb->blogid;
		$blogids = $wpdb->get_col( "SELECT blog_id FROM $wpdb->blogs" );

Usage of a direct database call is discouraged.

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

		foreach ( $blogids as $blog_id ) {
			switch_to_blog( $blog_id );
			lsx_projects_scporder_uninstall_db();
		}

		switch_to_blog( $curr_blog );
	} else {
		lsx_projects_scporder_uninstall_db();
	}
}

function lsx_projects_scporder_uninstall_db() {
	delete_option( 'lsx_projects_scporder_install' );
}