kollapsminoriteten/wp-content/plugins/simple-user-avatar/admin/class-sua-admin.php

<?php
if ( !class_exists('SimpleUserAvatar_Admin') ) {

  /**
   * PHP class SimpleUserAvatar_Admin
   *
   * @since 2.8
   */
  class SimpleUserAvatar_Admin {

    /**
     * Properties
     *
     * @since 3.6
     */
    private $avatar_size                = 96;
    private $notice_months_expiration   = 12;
    private $notices_enabled_pages      = [ 'users.php', 'profile.php', 'user-new.php', 'user-edit.php' ];
    private $donation_public_permalink  = 'https://www.paypal.com/donate/?cmd=_donations&business=matteomanna87%40gmail%2ecom';
    private $reference_public_permalink = 'https://developer.wordpress.org/reference/functions/set_transient/';
    private $plugin_public_permalink    = 'https://wordpress.org/plugins/simple-user-avatar/';


    public function __construct() {

      global $pagenow;

      // HTML render profile fields
      add_action( 'show_user_profile', [ $this, 'render_custom_user_profile_fields' ] );
      add_action( 'edit_user_profile', [ $this, 'render_custom_user_profile_fields' ] );

      // Update profile fields
      add_action( 'personal_options_update', [ $this, 'update_custom_user_profile_fields' ] );
      add_action( 'edit_user_profile_update', [ $this, 'update_custom_user_profile_fields' ] );

      // Delete user meta when attachment is deleted
      add_action( 'delete_attachment', [ $this, 'custom_delete_attachment' ] );

      // Post call to hide notice
      add_action( 'admin_post_hide_notice', [ $this, 'post_hide_notice' ] );

      // Load functions only if pages are enabled
      if ( in_array( $pagenow, $this->notices_enabled_pages ) ) {

        // Admin scripts
        add_action( 'admin_enqueue_scripts', [ $this, 'custom_admin_enqueue_scripts' ] );

        // HTML render of notices
        add_action( 'admin_notices', [ $this, 'render_admin_error_notices' ] );
        add_action( 'admin_notices', [ $this, 'render_admin_donation_notice' ] );

      }

    }


    public static function init() {

      new self;

    }


    /**
     * Load CSS and JavaScript for wp-admin
     *
     * @since  1.0
     * @return void
     */
    public function custom_admin_enqueue_scripts() {

      // Get current user
      global $current_user;

      // Enqueue WordPress Media Library
      wp_enqueue_media();

      // CSS for wp-admin
      wp_enqueue_style( 'sua', plugins_url( '/css/style.min.css', __FILE__ ), [], SUA_PLUGIN_VERSION, 'all' );

      // JavaScript for wp-admin
      wp_enqueue_script( 'sua', plugins_url( '/js/scripts.js', __FILE__ ), [ 'jquery' ], SUA_PLUGIN_VERSION, true );

      // Get default avatar URL by user_email
      $l10n = [
        'default_avatar_src'    => $this->get_default_avatar_url_by_email( $current_user->user_email, $this->avatar_size ),
        'default_avatar_srcset' => $this->get_default_avatar_url_by_email( $current_user->user_email, ( $this->avatar_size * 2 ) ) . ' 2x',
        'input_name'            => SUA_USER_META_KEY
      ];
      wp_localize_script( 'sua', 'sua_obj', $l10n );

    }


    /**
     * Default WordPress avatar URL by user email
     *
     * @since  2.8
     * @return string
     */
    private function get_default_avatar_url_by_email( $user_email = '', $size = 96 ) {

      // Check the email provided
      if ( empty($user_email) || !filter_var($user_email, FILTER_VALIDATE_EMAIL) ) {
        return null;
      }

      // Sanitize email and get md5
      $user_email     = sanitize_email( $user_email );
      $md5_user_email = md5( $user_email );

      // SSL Gravatar URL
      $url = 'https://secure.gravatar.com/avatar/' . $md5_user_email;

      // Add query args
      $url = add_query_arg( 's', $size, $url );
      $url = add_query_arg( 'd', 'mm', $url );
      $url = add_query_arg( 'r', 'g', $url );

      return esc_url( $url );

    }


    /**
     * Add table in user profile
     *
     * @since  1.0
     * @return void
     */
    public function render_custom_user_profile_fields( $user ) {

      // Get user meta
      $attachment_id = get_user_meta( $user->ID, SUA_USER_META_KEY, true );
      ?>
  
      <table class="form-table">
        <tbody>
          <tr>
            <th scope="row">
              <label for="btn-media-add"><?php _e('Profile picture', 'simple-user-avatar'); ?></label>
            </th>
            <td>
              <?php echo get_avatar( $user->ID, $this->avatar_size, '', $user->display_name, [ 'class' => 'sua-attachment-avatar' ] ); ?>
              <p class="description <?php if ( !empty($attachment_id) ) echo 'hidden'; ?>" id="sua-attachment-description"><?php _e("You're seeing the default profile picture.", 'simple-user-avatar'); ?></p>
              <div class="sua-btn-container">
                <button type="button" class="button" id="btn-media-add"><?php _e('Select', 'simple-user-avatar'); ?></button>
                <button type="button" class="button <?php if ( empty($attachment_id) ) echo 'hidden'; ?>" id="btn-media-remove"><?php _e('Remove', 'simple-user-avatar'); ?></button>
              </div>
            </td>
          </tr>
        </tbody>
      </table>

      <!-- Hidden attachment ID -->
      <input type="hidden" name="<?php echo SUA_USER_META_KEY; ?>" value="<?php echo $attachment_id; ?>" />

      <?php

    }


    /**
     * Update the user meta when user save
     *
     * @since  1.0
     * @return bool
     */
    public function update_custom_user_profile_fields( $user_id ) {

      // If user don't have permissions
      if ( !current_user_can( 'edit_user', $user_id ) ) {
        return false;
      }

      // Delete old user meta
      delete_user_meta( $user_id, SUA_USER_META_KEY );

      // Validate POST data and, if is ok, add it
      if ( isset($_POST[SUA_USER_META_KEY]) && is_numeric($_POST[SUA_USER_META_KEY]) ) {
        add_user_meta( $user_id, SUA_USER_META_KEY, (int)$_POST[SUA_USER_META_KEY] );
      }

      return true;

    }


    /**
     * Delete user meta when attachment is deleted
     *
     * @since  3.9
     * @return void
     */
    public function custom_delete_attachment( $post_id ) {

      global $wpdb;

      // Delete all user meta where deleted attachment post ID exists
      $wpdb->delete(
        $wpdb->usermeta,
        [
          'meta_key'   => SUA_USER_META_KEY,
          'meta_value' => (int)$post_id
        ],
        [
          '%s',
          '%d'
        ]
      );

    }
    

    /**
     * Admin notices for errors
     *
     * @since  3.9
     * @return void
     */
    public function render_admin_error_notices() {

      // Check if there is a GET error
      if ( isset( $_GET['error'] ) ) {

        // Notice error container
        $notice_error_container = '<div class="notice notice-error is-dismissible">%s</div>';
        
        // Switch errors
        switch( $_GET['error'] ) {

          // Transient not saved
          case 'sua_transient_not_set':
            printf(
              $notice_error_container,
              sprintf(
                __( '<p>An error occurred while <strong>saving the transient</strong>. Please make sure this website can <a href="%s" title="WordPress code reference" target="_blank" rel="noopener">save transients</a>.</p>', 'simple-user-avatar' ),
                esc_url( $this->reference_public_permalink )
              )
            );
            break;

        }
          
      }

    }


    /**
     * Admin notice for donations, if transient not exists or is expired
     *
     * @since  2.6
     * @return void
     */
    public function render_admin_donation_notice() {

      // Get Current user
      global $current_user;

      // Get the transient
      $notice_is_expired = get_transient( SUA_TRANSIENT_NAME );

      // Check the return of transient, if it's okay empty return
      if ( $notice_is_expired !== false && is_numeric($notice_is_expired) && $notice_is_expired == 1 ) {
        return;
      }

      // Set the nonce field
      $wp_nonce_field = wp_nonce_field( SUA_TRANSIENT_NAME, '_wpnonce', true, false );
      $wp_nonce_field = preg_replace( '/id=("|\').*?("|\')/', '', $wp_nonce_field );
      ?>

      <div class="notice notice-info">
        <form method="post" action="<?php echo admin_url( 'admin-post.php' ); ?>">
          <p>
            <?php
            printf(
              __( 'Dear <strong>%s</strong>, thank you for using my plugin <a href="%s" title="Simple User Avatar" target="_blank" rel="noopener">Simple User Avatar</a>! Even a small amount, such as <strong>1$</strong> for one coffee &#x2615 will be greatly appreciated to <strong>support</strong> the development of the plugin in the future. Best regards, Matteo.', 'simple-user-avatar' ),
              sanitize_text_field( $current_user->display_name ),
              esc_url( $this->plugin_public_permalink )
            );
            ?>
          </p>
          <p>
            <a href="<?php echo esc_url( $this->donation_public_permalink ); ?>" class="button button-primary" target="_blank" rel="noopener"><?php _e( 'Donate now', 'simple-user-avatar' ); ?></a>
            <button type="submit" class="button"><?php printf( __('Hide for %d months', 'simple-user-avatar' ), $this->notice_months_expiration ); ?></button>
          </p>
          <input type="hidden" name="action" value="hide_notice" />
          <?php echo $wp_nonce_field; ?>
        </form>
      </div>

      <?php

    }


    /**
     * Set the transient
     * Add query arg if there is an error
     *
     * @since  2.6
     * @return void
     */
    public function post_hide_notice() {

      // Set default redirect URL
      $redirect_url = !empty( $_POST['_wp_http_referer'] ) ? $_POST['_wp_http_referer'] : admin_url( 'users.php' ) ;

      // Verify nonce
      if ( isset( $_POST['_wpnonce'] ) && wp_verify_nonce( $_POST['_wpnonce'], SUA_TRANSIENT_NAME ) ) {

        // Transient settings
        $transient  = SUA_TRANSIENT_NAME;
        $value      = 1;
        $expiration = (86400 * 30) * $this->notice_months_expiration;

        // Set the transient but, if an error has occurred, add query arg at redirect URL
        if ( set_transient( $transient, $value, $expiration ) === false ) {
          $redirect_url = add_query_arg( 'error', 'sua_transient_not_set', $redirect_url );
        }

      }

      // Safe redirect
      if ( wp_safe_redirect( esc_url( $redirect_url ) ) ) {
        exit;
      }

    }

  }

  add_action( 'plugins_loaded', [ 'SimpleUserAvatar_Admin', 'init' ] );

}