kollapsminoriteten/wp-content/plugins/simple-user-avatar/admin/class-sua-admin.php

<?php
if (!class_exists('SimpleUserAvatar_Admin')) {

  /**
   * PHP class SimpleUserAvatar_Admin
   *
   * @since 2.8
   */
  class SimpleUserAvatar_Admin {

    /**
     * Properties
     *
     * @since 3.6
     */
    private $avatar_size                = 96;
    private $notice_months_expiration   = 12;
    private $notices_enabled_pages      = ['users.php', 'profile.php', 'user-new.php', 'user-edit.php'];
    private $donation_public_permalink  = 'https://www.paypal.com/donate/?cmd=_donations&business=matteomanna87%40gmail%2ecom';
    private $reference_public_permalink = 'https://developer.wordpress.org/reference/functions/set_transient/';
    private $plugin_public_permalink    = 'https://wordpress.org/plugins/simple-user-avatar/';


    public function __construct() {

      // Global $pagenow
      global $pagenow;

      // HTML render profile fields
      add_action('show_user_profile', [$this, 'render_custom_user_profile_fields']);
      add_action('edit_user_profile', [$this, 'render_custom_user_profile_fields']);

      // Update profile fields
      add_action('personal_options_update', [$this, 'update_custom_user_profile_fields']);
      add_action('edit_user_profile_update', [$this, 'update_custom_user_profile_fields']);

      // Delete user meta when attachment is deleted
      add_action('delete_attachment', [$this, 'custom_delete_attachment']);

      // Post call to hide notice
      add_action('admin_post_hide_notice', [$this, 'post_hide_notice']);

      // Load functions only if pages are enabled
      if (in_array($pagenow, $this->notices_enabled_pages)) {

        // Admin scripts
        add_action('admin_enqueue_scripts', [$this, 'custom_admin_enqueue_scripts']);

        // HTML render of notices
        add_action('admin_notices', [$this, 'render_admin_error_notices']);
        add_action('admin_notices', [$this, 'render_admin_donation_notice']);

      }

    }


    public static function init() {

      new self;

    }


    /**
     * Load CSS and JavaScript for wp-admin
     *
     * @since  1.0
     * @return void
     */
    public function custom_admin_enqueue_scripts() {

      // Get current user
      global $current_user;

      // Enqueue WordPress Media Library
      wp_enqueue_media();

      // CSS for wp-admin
      wp_enqueue_style('sua', plugins_url('/css/style.min.css', __FILE__), [], SUA_PLUGIN_VERSION, 'all');

      // JavaScript for wp-admin
      wp_enqueue_script('sua', plugins_url('/js/scripts.js', __FILE__), ['jquery'], SUA_PLUGIN_VERSION, true);

      // Get default avatar URL by user_email
      $l10n = [
        'default_avatar_src'    => $this->get_default_avatar_url_by_email($current_user->user_email, $this->avatar_size),
        'default_avatar_srcset' => $this->get_default_avatar_url_by_email($current_user->user_email, ($this->avatar_size * 2)) . ' 2x',
        'input_name'            => SUA_USER_META_KEY
      ];
      wp_localize_script('sua', 'sua_obj', $l10n);

    }


    /**
     * Default WordPress avatar URL by user email
     *
     * @since  2.8
     * @return string
     */
    private function get_default_avatar_url_by_email($user_email = '', $size = 96) {

      // Check the email provided
      if (empty($user_email) || !filter_var($user_email, FILTER_VALIDATE_EMAIL)) {
        return null;
      }

      // Sanitize email and get md5
      $user_email     = sanitize_email($user_email);
      $md5_user_email = md5($user_email);

      // SSL Gravatar URL
      $url = 'https://secure.gravatar.com/avatar/' . $md5_user_email;

      // Add query args
      $url = add_query_arg('s', $size, $url);
      $url = add_query_arg('d', 'mm', $url);
      $url = add_query_arg('r', 'g', $url);

      return esc_url($url);

    }


    /**
     * Add table in user profile
     *
     * @since  1.0
     * @return void
     */
    public function render_custom_user_profile_fields($user) {

      // Get user meta
      $attachment_id = get_user_meta($user->ID, SUA_USER_META_KEY, true);
      ?>
  
      <table class="form-table">
        <tbody>
          <tr>
            <th scope="row">
              <label for="btn-media-add"><?php _e('Profile picture', 'simple-user-avatar'); ?></label>
            </th>
            <td>
              <?php echo get_avatar($user->ID, $this->avatar_size, '', $user->display_name, ['class' => 'sua-attachment-avatar']); ?>
              <p class="description <?php if (!empty($attachment_id)) echo 'hidden'; ?>" id="sua-attachment-description"><?php _e("You're seeing the default profile picture.", 'simple-user-avatar'); ?></p>
              <div class="sua-btn-container">
                <button type="button" class="button" id="btn-media-add"><?php _e('Select', 'simple-user-avatar'); ?></button>
                <button type="button" class="button <?php if (empty($attachment_id)) echo 'hidden'; ?>" id="btn-media-remove"><?php _e('Remove', 'simple-user-avatar'); ?></button>
              </div>
            </td>
          </tr>
        </tbody>
      </table>

      <!-- Hidden attachment ID -->
      <input type="hidden" name="<?php echo SUA_USER_META_KEY; ?>" value="<?php echo $attachment_id; ?>" />

      <?php

    }


    /**
     * Update the user meta when user save
     *
     * @since  1.0
     * @return bool
     */
    public function update_custom_user_profile_fields($user_id) {

      // If user don't have permissions
      if (!current_user_can('edit_user', $user_id)) {
        return false;
      }

      // Delete old user meta
      delete_user_meta($user_id, SUA_USER_META_KEY);

      // Validate POST data and, if is ok, add it
      if (isset($_POST[SUA_USER_META_KEY]) && is_numeric($_POST[SUA_USER_META_KEY])) {
        add_user_meta($user_id, SUA_USER_META_KEY, (int)$_POST[SUA_USER_META_KEY]);
      }

      return true;

    }


    /**
     * Delete user meta when attachment is deleted
     *
     * @since  3.9
     * @return void
     */
    public function custom_delete_attachment($post_id) {

      global $wpdb;

      // Delete all user meta where deleted attachment post ID exists
      $wpdb->delete(
        $wpdb->usermeta,
        [
          'meta_key'   => SUA_USER_META_KEY,
          'meta_value' => (int)$post_id
        ],
        [
          '%s',
          '%d'
        ]
      );

    }
    

    /**
     * Admin notices for errors
     *
     * @since  3.9
     * @return void
     */
    public function render_admin_error_notices() {

      // Check if there is a GET error
      if (isset( $_GET['error']) ) {

        // Notice error container
        $notice_error_container = '<div class="notice notice-error is-dismissible">%s</div>';
        
        // Switch errors
        switch($_GET['error']) {

          // Transient not saved
          case 'sua_transient_not_set':
            printf(
              $notice_error_container,
              sprintf(
                __('<p>An error occurred while <strong>saving the transient</strong>. Please make sure this website can <a href="%s" title="WordPress code reference" target="_blank" rel="noopener">save transients</a>.</p>', 'simple-user-avatar'),
                esc_url($this->reference_public_permalink)
              )
            );
            break;

        }
          
      }

    }


    /**
     * Admin notice for donations, if transient not exists or is expired
     *
     * @since  2.6
     * @return void
     */
    public function render_admin_donation_notice() {

      // Get Current user
      global $current_user;

      // Get the transient
      $notice_is_expired = get_transient(SUA_TRANSIENT_NAME);

      // Check the return of transient, if it's okay empty return
      if ($notice_is_expired !== false && is_numeric($notice_is_expired) && $notice_is_expired == 1) {
        return;
      }

      // Set the nonce field
      $wp_nonce_field = wp_nonce_field(SUA_TRANSIENT_NAME, '_wpnonce', true, false);
      $wp_nonce_field = preg_replace('/id=("|\').*?("|\')/', '', $wp_nonce_field);
      ?>

      <div class="notice notice-info">
        <form method="post" action="<?php echo admin_url('admin-post.php'); ?>">
          <p>
            <?php
            printf(
              __( 'Dear <strong>%s</strong>, thank you for using my plugin <a href="%s" title="Simple User Avatar" target="_blank" rel="noopener">Simple User Avatar</a>! Even a small amount, such as <strong>1$</strong> for one coffee &#x2615 will be greatly appreciated to <strong>support</strong> the development of the plugin in the future. Best regards, Matteo.', 'simple-user-avatar' ),
              sanitize_text_field($current_user->display_name),
              esc_url($this->plugin_public_permalink)
            );
            ?>
          </p>
          <p>
            <a href="<?php echo esc_url($this->donation_public_permalink); ?>" class="button button-primary" target="_blank" rel="noopener"><?php _e('Donate now', 'simple-user-avatar'); ?></a>
            <button type="submit" class="button"><?php printf(__('Hide for %d months', 'simple-user-avatar' ), $this->notice_months_expiration); ?></button>
          </p>
          <input type="hidden" name="action" value="hide_notice" />
          <?php echo $wp_nonce_field; ?>
        </form>
      </div>

      <?php

    }


    /**
     * Set the transient
     * Add query arg if there is an error
     *
     * @since  2.6
     * @return void
     */
    public function post_hide_notice() {

      // Set default redirect URL
      $redirect_url = !empty($_POST['_wp_http_referer']) ? $_POST['_wp_http_referer'] : admin_url('users.php') ;

      // Verify nonce
      if (isset($_POST['_wpnonce']) && wp_verify_nonce($_POST['_wpnonce'], SUA_TRANSIENT_NAME)) {

        // Transient settings
        $transient  = SUA_TRANSIENT_NAME;
        $value      = 1;
        $expiration = (86400 * 30) * $this->notice_months_expiration;

        // Set the transient but, if an error has occurred, add query arg at redirect URL
        if (set_transient($transient, $value, $expiration) === false) {
          $redirect_url = add_query_arg('error', 'sua_transient_not_set', $redirect_url);
        }

      }

      // Safe redirect
      if (wp_safe_redirect(esc_url($redirect_url))) {
        exit;
      }

    }

  }

  add_action('plugins_loaded', ['SimpleUserAvatar_Admin', 'init']);

}