sudar /
bulk-delete
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
| 1 | <?php |
||
| 2 | /** |
||
| 3 | * Utility class for deleting Misc stuff. |
||
| 4 | * |
||
| 5 | * @since 5.3 |
||
| 6 | * |
||
| 7 | * @author Sudar |
||
| 8 | * |
||
| 9 | * @package BulkDelete\Misc |
||
| 10 | */ |
||
| 11 | defined( 'ABSPATH' ) || exit; // Exit if accessed directly |
||
| 12 | |||
| 13 | class Bulk_Delete_Misc { |
||
| 14 | /** |
||
| 15 | * Slug for *misc* page. |
||
| 16 | * |
||
| 17 | * @since 5.3 |
||
| 18 | */ |
||
| 19 | const MISC_PAGE_SLUG = 'bulk-delete-misc'; |
||
| 20 | |||
| 21 | const VISIBLE_MISC_BOXES = 'metaboxhidden_bulk-delete_page_bulk-delete-misc'; |
||
| 22 | |||
| 23 | /** |
||
| 24 | * Add *misc* menu. |
||
| 25 | * |
||
| 26 | * @static |
||
| 27 | * |
||
| 28 | * @since 5.3 |
||
| 29 | */ |
||
| 30 | public static function add_menu() { |
||
| 31 | $bd = BULK_DELETE(); |
||
| 32 | |||
| 33 | $bd->misc_page = add_submenu_page( |
||
| 34 | Bulk_Delete::POSTS_PAGE_SLUG, |
||
| 35 | __( 'Bulk Delete Miscellaneous Items', 'bulk-delete' ), |
||
| 36 | __( 'Bulk Delete Misc', 'bulk-delete' ), |
||
| 37 | 'manage_options', |
||
| 38 | self::MISC_PAGE_SLUG, |
||
| 39 | array( __CLASS__, 'display_misc_page' ) |
||
| 40 | ); |
||
| 41 | |||
| 42 | // enqueue JavaScript |
||
| 43 | add_action( 'admin_print_scripts-' . $bd->misc_page, array( $bd, 'add_script' ) ); |
||
|
0 ignored issues
–
show
Bug
introduced
by
Loading history...
|
|||
| 44 | |||
| 45 | // delete menus page |
||
| 46 | add_action( "load-{$bd->misc_page}", array( __CLASS__, 'add_delete_misc_settings_panel' ) ); |
||
| 47 | add_action( "add_meta_boxes_{$bd->misc_page}", array( __CLASS__, 'add_delete_misc_meta_boxes' ) ); |
||
| 48 | |||
| 49 | // hooks |
||
| 50 | add_action( 'bd_add_meta_box_for_misc' , array( 'Bulk_Delete_Jetpack_Contact_Form_Message', 'add_delete_jetpack_messages_meta_box' ) ); |
||
| 51 | add_action( 'bd_delete_jetpack_messages', array( 'Bulk_Delete_Jetpack_Contact_Form_Message', 'do_delete_jetpack_messages' ) ); |
||
| 52 | |||
| 53 | add_filter( 'bd_javascript_array', array( 'Bulk_Delete_Jetpack_Contact_Form_Message', 'filter_js_array' ) ); |
||
| 54 | add_action( 'bd_delete_jetpack_messages_form', array( 'Bulk_Delete_Jetpack_Contact_Form_Message', 'add_filtering_options' ) ); |
||
| 55 | |||
| 56 | add_filter( 'bd_delete_jetpack_messages_delete_options', array( 'Bulk_Delete_Jetpack_Contact_Form_Message', 'process_filtering_options' ), 10, 2 ); |
||
| 57 | add_filter( 'bd_delete_jetpack_messages_can_delete', array( 'Bulk_Delete_Jetpack_Contact_Form_Message', 'can_delete' ), 10, 2 ); |
||
| 58 | |||
| 59 | // cron hooks |
||
| 60 | add_action( Bulk_Delete_Jetpack_Contact_Form_Message::CRON_HOOK, array( 'Bulk_Delete_Jetpack_Contact_Form_Message', 'do_delete_jetpack_messages_cron' ), 10, 1 ); |
||
| 61 | } |
||
| 62 | |||
| 63 | /** |
||
| 64 | * Add settings Panel for delete misc page. |
||
| 65 | * |
||
| 66 | * @static |
||
| 67 | * |
||
| 68 | * @since 5.3 |
||
| 69 | */ |
||
| 70 | public static function add_delete_misc_settings_panel() { |
||
| 71 | $bd = BULK_DELETE(); |
||
| 72 | |||
| 73 | /** |
||
| 74 | * Add contextual help for admin screens. |
||
| 75 | * |
||
| 76 | * @since 5.3 |
||
| 77 | */ |
||
| 78 | do_action( 'bd_add_contextual_help', $bd->misc_page ); |
||
| 79 | |||
| 80 | /* Trigger the add_meta_boxes hooks to allow meta boxes to be added */ |
||
| 81 | do_action( 'add_meta_boxes_' . $bd->misc_page, null ); |
||
| 82 | |||
| 83 | /* Enqueue WordPress' script for handling the meta boxes */ |
||
| 84 | wp_enqueue_script( 'postbox' ); |
||
| 85 | } |
||
| 86 | |||
| 87 | /** |
||
| 88 | * Register meta boxes for delete misc page. |
||
| 89 | * |
||
| 90 | * @static |
||
| 91 | * |
||
| 92 | * @since 5.3 |
||
| 93 | */ |
||
| 94 | public static function add_delete_misc_meta_boxes() { |
||
| 95 | /** |
||
| 96 | * Add meta box in misc page |
||
| 97 | * This hook can be used for adding additional meta boxes in *misc* page. |
||
| 98 | * |
||
| 99 | * @since 5.3 |
||
| 100 | */ |
||
| 101 | do_action( 'bd_add_meta_box_for_misc' ); |
||
| 102 | } |
||
| 103 | |||
| 104 | /** |
||
| 105 | * Show the delete misc page. |
||
| 106 | * |
||
| 107 | * @static |
||
| 108 | * |
||
| 109 | * @since 5.3 |
||
| 110 | */ |
||
| 111 | public static function display_misc_page() { |
||
| 112 | ?> |
||
| 113 | <div class="wrap"> |
||
| 114 | <h2><?php _e( 'Bulk Delete Miscellaneous Items', 'bulk-delete' );?></h2> |
||
| 115 | <?php settings_errors(); ?> |
||
| 116 | |||
| 117 | <form method = "post"> |
||
| 118 | <?php |
||
| 119 | // nonce for bulk delete |
||
| 120 | wp_nonce_field( 'sm-bulk-delete-misc', 'sm-bulk-delete-misc-nonce' ); |
||
| 121 | |||
| 122 | /* Used to save closed meta boxes and their order */ |
||
| 123 | wp_nonce_field( 'meta-box-order', 'meta-box-order-nonce', false ); |
||
| 124 | wp_nonce_field( 'closedpostboxes', 'closedpostboxesnonce', false ); |
||
| 125 | ?> |
||
| 126 | <div id = "poststuff"> |
||
| 127 | <div id="post-body" class="metabox-holder columns-1"> |
||
| 128 | |||
| 129 | <div class="notice notice-warning"> |
||
| 130 | <p><strong><?php _e( 'WARNING: Posts deleted once cannot be retrieved back. Use with caution.', 'bulk-delete' ); ?></strong></p> |
||
| 131 | </div> |
||
| 132 | |||
| 133 | <div id="postbox-container-2" class="postbox-container"> |
||
| 134 | <?php do_meta_boxes( '', 'advanced', null ); ?> |
||
| 135 | </div> <!-- #postbox-container-2 --> |
||
| 136 | |||
| 137 | </div> <!-- #post-body --> |
||
| 138 | </div><!-- #poststuff --> |
||
| 139 | </form> |
||
| 140 | </div><!-- .wrap --> |
||
| 141 | |||
| 142 | <?php |
||
| 143 | /** |
||
| 144 | * Runs just before displaying the footer text in the "Bulk Delete Misc" admin page. |
||
| 145 | * |
||
| 146 | * This action is primarily for adding extra content in the footer of "Bulk Delete Misc" admin page. |
||
| 147 | * |
||
| 148 | * @since 5.3 |
||
| 149 | */ |
||
| 150 | do_action( 'bd_admin_footer_misc_page' ); |
||
| 151 | } |
||
| 152 | |||
| 153 | /** |
||
| 154 | * Check whether the meta box in misc page is hidden or not. |
||
| 155 | * |
||
| 156 | * @static |
||
| 157 | * @access private |
||
| 158 | * |
||
| 159 | * @since 5.3 |
||
| 160 | * |
||
| 161 | * @param string $box The name of the box to check |
||
| 162 | * |
||
| 163 | * @return bool True if the box is hidden, False otherwise |
||
| 164 | */ |
||
| 165 | public static function is_misc_box_hidden( $box ) { |
||
| 166 | $hidden_boxes = self::get_misc_hidden_boxes(); |
||
| 167 | |||
| 168 | return is_array( $hidden_boxes ) && in_array( $box, $hidden_boxes ); |
||
| 169 | } |
||
| 170 | |||
| 171 | /** |
||
| 172 | * Get the list of hidden boxes in misc page. |
||
| 173 | * |
||
| 174 | * @static |
||
| 175 | * @access private |
||
| 176 | * |
||
| 177 | * @since 5.3 |
||
| 178 | * |
||
| 179 | * @return array The array of hidden meta boxes |
||
| 180 | */ |
||
| 181 | private static function get_misc_hidden_boxes() { |
||
| 182 | $current_user = wp_get_current_user(); |
||
| 183 | |||
| 184 | return get_user_meta( $current_user->ID, self::VISIBLE_MISC_BOXES, true ); |
||
| 185 | } |
||
| 186 | } |
||
| 187 |