1#@!#!123s

https 1#@!#!123s
: / dom737635 / wp-content / plugins / user-role-editor / includes / classes /
Filename : role-additional-options.php
back
<?php
defined( 'ABSPATH' ) || exit;

class URE_Role_Additional_Options {
    
    private static $instance = null;
    private $lib = null;
    private $items = null;
    private $active_items = null;
    const STORAGE_ID = 'ure_role_additional_options_values';
    
    private function __construct($lib) {
    
        $this->lib = $lib;
        $this->init();
    }
    // end of __construct()
    
    
    public static function get_instance($lib) {
    
        if (self::$instance===null) {
            self::$instance = new URE_Role_Additional_Options($lib);
        }
        
        return self::$instance;
    }
    // end of get_instance()
    
        
    public static function create_item($id, $label, $hook, $routine) {
        $item = new stdClass();
        $item->id = $id;
        $item->label = $label;
        $item->hook = $hook;
        $item->routine = $routine;
        
        return $item;
    }
    // end of create_item()
            

    public static function get_active_items() {
        
        $data = get_option(self::STORAGE_ID, array());

        return $data;
    }    
    
    
    private function init() {
        
        $this->items = array();
        $item = self::create_item('hide_admin_bar', esc_html__('Hide admin bar', 'user-role-editor'), 'init', 'ure_hide_admin_bar');
        $this->items[$item->id] = $item;
        
        // Allow other developers to modify the list of role's additonal options 
        $this->items = apply_filters('ure_role_additional_options', $this->items);
    
        $this->active_items = self::get_active_items();        
    }
    // end of init()

    
    public function set_active_items_hooks() {
                        
        $current_user = wp_get_current_user();
        foreach($current_user->roles as $role) {
            if (!isset($this->active_items[$role])) {
                continue;
            }
            foreach(array_keys($this->active_items[$role]) as $item_id) {
                if (isset($this->items[$item_id])) {
                    add_action($this->items[$item_id]->hook, $this->items[$item_id]->routine, 99);
                }
            }            
        }
        
    }
    // end of set_active_items_hooks()
    
    
    public function save($current_role) {

        if ( !current_user_can( 'ure_edit_roles' ) ) {
            return;
        }

        $wp_roles = wp_roles();
        $this->active_items = self::get_active_items();
        
        // remove non-existing roles
        foreach(array_keys($this->active_items) as $role_id) {
            if (!isset($wp_roles->roles[$role_id])) {
                unset($this->active_items[$role_id]);
            }
        }
        
        // Save additonal options section for the current role
        $this->active_items[$current_role] = array();
        // phpcs:disable WordPress.Security.NonceVerification.Missing -- save() is only reached via URE_Editor::save_roles(), itself only reachable through the AJAX update_role/update_network actions, which URE_Ajax_Processor::dispatch() already nonce-gates via valid_nonce() before routing here; WPCS can't trace nonce verification across that method-call boundary, same limitation documented for check_nonce()/valid_nonce() in custom-ruleset.xml's WordPress.Security.NonceVerification rule comment.
        foreach( $this->items as $item ) {
            if ( isset( $_POST['values'][$item->id] ) ) {
                $this->active_items[$current_role][$item->id] = 1;
            }
        }
        // phpcs:enable
        
        update_option( self::STORAGE_ID, $this->active_items );
        
    }
    // end of save()
    
        
    public function show($current_role) {
        
?>        
    
    <hr />
    <?php echo esc_html__('Additional Options', 'user-role-editor');?>:
    <table id="additional_options" class="form-table" style="clear:none;" cellpadding="0" cellspacing="0">
        <tr>
            <td>

<?php
    $first_time = true;
    foreach($this->items as $item) {
        $checked = (isset($this->active_items[$current_role]) && 
                    isset($this->active_items[$current_role][$item->id])) ? 'checked="checked"' : '';
        if (!$first_time) {
?>
                <br/>
<?php            
        }
?>
                <input type="checkbox" name="<?php echo esc_attr( $item->id );?>" id="<?php echo esc_attr( $item->id );?>" value="<?php echo esc_attr( $item->id );?>" <?php echo $checked; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- $checked is one of two hardcoded literals set above, not user input.?> >
                <label for="<?php echo esc_attr( $item->id );?>"><?php echo esc_html( $item->label );?></label>
<?php
        $first_time = false;
    } 
?>
            </td>
            <td></td>
        </tr>                
    </table>    
<?php        
    }   
    // end of show()
    
}
// end of URE_Role_Additional_Options class