FileXXXXXXXXXXX

dvadf

File manager - Edit - /home/centroca/public_html/wp/wp-content/plugins/nextgen-gallery/src/REST/Admin/AttachToPost.php

Back
<?php namespace Imagely\NGG\REST\Admin; use Imagely\NGG\DataMappers\Album as AlbumMapper; use Imagely\NGG\DataMappers\Gallery as GalleryMapper; use Imagely\NGG\DataMappers\Image as ImageMapper; use Imagely\NGG\DataStorage\Manager as StorageManager; use Imagely\NGG\DataTypes\DisplayedGallery; /** * REST API controller for Attach to Post functionality. / class AttachToPost extends \WP_REST_Controller { public function __construct() { $this->namespace = 'ngg/v1'; $this->rest_base = 'admin/attach_to_post/'; } public function register_routes() { \register_rest_route( $this->namespace, '/' . $this->rest_base . 'galleries', [ [ 'methods' => \WP_REST_Server::ALLMETHODS, 'callback' => [ $this, 'get_galleries' ], 'permission_callback' => [ $this, 'get_items_permissions_check' ], ], ] ); \register_rest_route( $this->namespace, '/' . $this->rest_base . 'albums', [ [ 'methods' => \WP_REST_Server::ALLMETHODS, 'callback' => [ $this, 'get_albums' ], 'permission_callback' => [ $this, 'get_items_permissions_check' ], ], ] ); \register_rest_route( $this->namespace, '/' . $this->rest_base . 'tags', [ [ 'methods' => \WP_REST_Server::ALLMETHODS, 'callback' => [ $this, 'get_tags' ], 'permission_callback' => [ $this, 'get_items_permissions_check' ], ], ] ); \register_rest_route( $this->namespace, '/' . $this->rest_base . 'images', [ [ 'methods' => \WP_REST_Server::ALLMETHODS, 'callback' => [ $this, 'get_images' ], 'permission_callback' => [ $this, 'get_items_permissions_check' ], ], ] ); } public function get_items_permissions_check( $request ) { // phpcs:ignore WordPress.WP.Capabilities.Unknown return current_user_can( 'NextGEN Attach Interface' ); } public function get_galleries( $request ) { $galleries = GalleryMapper::get_instance()->find_all(); $storage = StorageManager::get_instance(); $image_mapper = ImageMapper::get_instance(); // Enhance each gallery with preview image URL and image count foreach ( $galleries as &$gallery ) { // Add image count - use ImageMapper's find_all_for_gallery method $images = $image_mapper->find_all_for_gallery( $gallery->gid, false ); $gallery->image_count = is_array( $images ) ? count( $images ) : 0; // Add preview image URL if preview pic exists if ( $gallery->previewpic && $gallery->previewpic > 0 ) { $preview_image = $image_mapper->find( $gallery->previewpic ); if ( $preview_image ) { $gallery->previewpic_image_url = $storage->get_image_url( $preview_image, 'thumb', true ); } } } return new \WP_REST_Response( [ 'items' => $galleries, ] ); } public function get_albums( $request ) { return new \WP_REST_Response( [ 'items' => AlbumMapper::get_instance()->find_all(), ] ); } public function get_tags( $request ) { $response = []; $response['items'] = []; $params = [ 'fields' => 'names' ]; foreach ( \get_terms( array_merge( [ 'taxonomy' => 'ngg_tag' ], $params ) ) as $term ) { $response['items'][] = [ 'id' => $term, 'title' => $term, 'name' => $term, ]; } return new \WP_REST_Response( $response ); } public function get_images( $request ) { $response = []; $params = $request->get_param( 'displayed_gallery' ); if ( ! is_array( $params ) ) { $params = []; } $storage = StorageManager::get_instance(); $image_mapper = ImageMapper::get_instance(); $displayed_gallery = new DisplayedGallery(); // Per-property allowlist + type cast for DisplayedGallery params arriving from the REST body. // Anything outside the allowlist is silently dropped; values are cast per group rather than // piped through esc_sql() (which is not a substitute for $wpdb->prepare()). // sortorder belongs with the ID arrays: it is the user's drag-and-drop order, a list of pids. // Classifying it as a string ran every array payload through is_scalar() and coerced it to '', // wiping the custom order so the modal reopened with the default gallery sort. $id_array_props = [ 'container_ids', 'entity_ids', 'excluded_container_ids', 'gallery_ids', 'image_ids', 'tag_ids', 'album_ids', 'ids', 'exclusions', 'sortorder' ]; $string_props = [ 'display_type', 'order_by', 'order_direction', 'returns', 'source', 'src', 'slug', 'transient_id' ]; $int_props = [ 'ID', 'id', 'maximum_entity_count', 'images_list_count' ]; $bool_props = [ 'is_album_gallery', 'skip_excluding_globally_excluded_images', 'tagcloud' ]; $assoc_props = [ 'display_settings' ]; $text_props = [ 'effect_code', 'inner_content', 'display' ]; foreach ( $params as $raw_key => $raw_value ) { if ( ! is_string( $raw_key ) ) { continue; } $key = sanitize_key( $raw_key ); if ( '' === $key ) { continue; } if ( in_array( $key, $id_array_props, true ) ) { if ( is_array( $raw_value ) ) { $value = array_values( array_filter( array_map( 'absint', $raw_value ) ) ); } elseif ( is_string( $raw_value ) ) { $value = array_values( array_filter( array_map( 'absint', array_map( 'trim', explode( ',', $raw_value ) ) ) ) ); } else { $value = []; } } elseif ( in_array( $key, $string_props, true ) ) { $value = is_scalar( $raw_value ) ? sanitize_text_field( (string) $raw_value ) : ''; } elseif ( in_array( $key, $int_props, true ) ) { $value = is_scalar( $raw_value ) ? (int) $raw_value : 0; } elseif ( in_array( $key, $bool_props, true ) ) { $value = (bool) $raw_value; } elseif ( in_array( $key, $assoc_props, true ) ) { if ( is_array( $raw_value ) ) { $value = $raw_value; } elseif ( is_string( $raw_value ) ) { $decoded = json_decode( $raw_value, true ); $value = is_array( $decoded ) ? $decoded : []; } else { $value = []; } } elseif ( in_array( $key, $text_props, true ) ) { $value = is_scalar( $raw_value ) ? wp_kses_post( (string) $raw_value ) : ''; } else { continue; } $displayed_gallery->$key = $value; } $response['items'] = $displayed_gallery->get_entities( false, false, false, 'both' ); foreach ( $response['items'] as &$entity ) { $image = $entity; // phpcs:ignore WordPress.PHP.StrictInArray.MissingTrueStrict if ( in_array( $displayed_gallery->source, [ 'album','albums' ] ) ) { // Set the alttext of the preview image to the name of the gallery or album $image = $image_mapper->find( $entity->previewpic ); if ( $image ) { if ( $entity->is_album ) { / translators: %s: album name / $image->alttext = sprintf( \__( 'Album: %s', 'nggallery' ), $entity->name ); } else { / translators: %s: gallery title */ $image->alttext = sprintf( \__( 'Gallery: %s', 'nggallery' ), $entity->title ); } } // Prefix the id of an album with 'a' if ( $entity->is_album ) { $id = $entity->{$entity->id_field}; $entity->{$entity->id_field} = 'a' . $id; } } // Get the thumbnail $entity->thumb_url = $storage->get_image_url( $image, 'thumb', true ); $entity->thumb_html = $storage->get_image_html( $image, 'thumb' ); } return new \WP_REST_Response( $response ); } }

dvadf

dvadf