class-wp-inci-fields.php

<?php
/**
 * WP_Inci_Fields
 *
 * @category Plugin
 * @package  Wpinci
 * @author   xlthlx <wp-inci@piccioni.london>
 * @license  https://www.gnu.org/licenses/gpl-3.0.html GPL 3
 * @link     https://wordpress.org/plugins/wp-inci/
 */

/**
 * Check if the class exists.
 */
if ( ! class_exists( 'WP_Inci_Fields', false ) ) {
	/**
	 * Class for custom CMB2 fields
	 *
	 * @category Plugin
	 * @package  Wpinci
	 * @author   xlthlx <wp-inci@piccioni.london>
	 * @license  https://www.gnu.org/licenses/gpl-3.0.html GPL 3
	 * @link     https://wordpress.org/plugins/wp-inci/
	 */
	class WP_Inci_Fields extends WP_Inci {


		/**
		 * A static reference to track the single instance of this class.
		 *
		 * @var object
		 */
		private static $_instance;

		/**
		 * Constructor.
		 */
		public function __construct() {
			parent::__construct();
			$this->init();
			$this->url = plugins_url( '', __FILE__ );
		}

		/**
		 * Standard init.
		 *
		 * @return void
		 */
		public function init() {
			/**
			 * Add hooks and queue.
			 */
			add_action( 'cmb2_render_switch', array( $this, 'renderSwitch' ), 10, 5 );
			add_action( 'admin_footer', array( $this, 'adminFooter' ) );
			add_action(
				'cmb2_render_search_ajax',
				array( $this, 'renderSearchAjax' ),
				10,
				5
			);
			add_action(
				'cmb2_sanitize_search_ajax',
				array( $this, 'sanitizeSearchAjax' ),
				10,
				4
			);
			add_action( 'admin_enqueue_scripts', array( $this, 'setupAdminScripts' ) );
			add_action( 'wp_ajax_cmb2_search_ajax_get_results', array( $this, 'cmb2SearchAjaxGetResults' ) );
			add_action(
				'wp_ajax_cmb2_multiple_search_ajax_get_results',
				array( $this, 'cmb2MultipleSearchAjaxGetResults' )
			);

		}

		/**
		 * Method used to provide a single instance of this class.
		 *
		 * @return WP_Inci_Fields|null
		 */
		public static function get_instanceFields() {

			if ( null === self::$_instance ) {
				self::$_instance = new WP_Inci_Fields();
			}

			return self::$_instance;
		}

		/**
		 * Title filter.
		 *
		 * @param string $where    Query where.
		 * @param object $wp_query WP query.
		 *
		 * @return string
		 */
		public function setTitleFilter( $where, $wp_query ) {

			global $wpdb;
			$search_term = $wp_query->get( 'title_filter' );
			if ( $search_term ) {
				$search_term           = $wpdb->esc_like( $search_term );
				$search_term           = ' \'' . $search_term . '%\'';
				$title_filter_relation = ( strtoupper( $wp_query->get( 'title_filter_relation' ) ) === 'OR' ? 'OR' : 'AND' );
				$where                .= ' ' . $title_filter_relation . ' ' . $wpdb->posts . '.post_title LIKE ' . $search_term;
			}

			return $where;
		}

		/**
		 * Render switch button field.
		 *
		 * @param object $field             The field object.
		 * @param string $escaped_value     The escaped value.
		 * @param int    $object_id         Object ID.
		 * @param string $object_type       Object type.
		 * @param object $field_type_object The type object.
		 *
		 * @return void
		 */
		public function renderSwitch( $field, $escaped_value, $object_id, $object_type, $field_type_object ) {
			$field_name     = $field->_name();
			$active_value   = $field->args( 'active_value' ) ?? 'on';
			$inactive_value = $field->args( 'inactive_value' ) ?? 'off';

			$args = array(
				'id'    => $field_name,
				'name'  => $field_name,
			);

			if ( $escaped_value === $active_value ) {
				$args['checked'] = 'checked="checked"';
			} else {
				$args['checked'] = '';
			}

			echo '<label class="cmb2-switch">
				    <input type="checkbox" name="' . esc_attr( $args['name'] ) . '" id="' . esc_attr( $args['id'] ) . '" value="' . esc_attr( $active_value ) . '" data-inactive-value="' . esc_attr( $inactive_value ) . '" ' . esc_attr( $args['checked'] ) . ' />
				    <span class="cmb2-slider round"></span>
			      </label>';

			$field_type_object->_desc( true, true );
		}

		/**
		 *  Adds styles for checked and focus based on WP color scheme.
		 *
		 * @return void
		 */
		public function adminFooter() {
			global $_wp_admin_css_colors;
			if ( ! empty( $_wp_admin_css_colors[ get_user_option( 'admin_color' ) ] ) ) {
				$scheme_colors = $_wp_admin_css_colors[ get_user_option( 'admin_color' ) ]->colors;
			}
			$toggle_color = ! empty( $scheme_colors ) ? end( $scheme_colors ) : '#2196F3';
			?>
			<style>
				input:checked + .cmb2-slider {
					background-color: <?php echo esc_attr( $toggle_color ); ?>;
				}

				input:focus + .cmb2-slider {
					box-shadow: 0 0 1px<?php echo esc_attr( $toggle_color ); ?>;
				}
			</style>
			<?php
		}

		/**
		 * Render Search Ajax field.
		 *
		 * @param object $field The field object.
		 * @param array  $values Field values.
		 * @param int    $object_id Object ID.
		 * @param string $object_type Object type.
		 * @param object $field_type The type object.
		 *
		 * @return void
		 * @throws JsonException Json exception.
		 */
		public function renderSearchAjax( $field, $values, $object_id, $object_type, $field_type ) {
			$field_name = $field->_name();

			echo '<div class="container-search-left">';
			echo '<h2 class="wi_single">' . esc_attr( __( 'Search', 'wp-inci' ) ) . '</h2>';

			$field_value = '';

			// @codingStandardsIgnoreStart
			echo $field_type->input(
				array(
					'type'           => 'text',
					'name'           => $field_name,
					'id'             => $field_name,
					'class'          => 'cmb2-search-ajax',
					'value'          => $field_value,
					'desc'           => false,
					'data-limit'     => $field->args( 'limit' ) ?? '1',
					'data-sortable'  => $field->args( 'sortable' ) ?? '0',
					'data-object'    => $field->args( 'object_type' ) ?? 'post',
					'data-queryargs' => ( null !== $field->args( 'query_args' ) ) ? htmlspecialchars(
						wp_json_encode( $field->args( 'query_args' ), JSON_THROW_ON_ERROR ),
						ENT_QUOTES,
						'UTF-8'
					) : '',
				)
			);
			// @codingStandardsIgnoreEnd

			echo '<img src="' . esc_url( admin_url( 'images/spinner.gif' ) ) . '" class="cmb2-search-ajax-spinner" />';

			$field_type->_desc( true, true );

			echo '<a target="_blank" href="' . esc_url( admin_url( 'post-new.php?post_type=ingredient' ) ) . '" class="button desc">' . esc_attr( __( 'Add new ingredient', 'wp-inci' ) ) . '</a>';

			echo '<h2 class="wi_multiple">' . esc_attr( __( 'Multiple search', 'wp-inci' ) ) . '</h2>';

			// @codingStandardsIgnoreStart
			echo $field_type->textarea(
				array(
					'type'  => 'textarea',
					'name'  => esc_attr( __( 'Multiple search', 'wp-inci' ) ),
					'id'    => esc_attr( $field_name ) . '_textarea_search',
					'class' => 'cmb2-multiple-search-ajax',
					'value' => false,
					'desc'  => '<p class="cmb2-metabox-description">' . esc_attr(
						__(
							'Enter multiple ingredients separated by a comma, then click on "Search Ingredients".',
							'wp-inci'
						)
					) . '</p>',
				)
			);

			echo '<button id="' . $field_name . '_button_search" type="button" class="button desc">' .
				__(
					'Search Ingredients',
					'wp-inci'
				) . '</button>';
			// @codingStandardsIgnoreEnd

			echo '<img src="' . esc_url( admin_url( 'images/spinner.gif' ) ) . '" class="cmb2-multiple-search-ajax-spinner" />';

			echo '</div>';

			echo '<div class="container-search-right">';

			if ( 1 !== $field->args( 'limit' ) ) {
				echo '<ol class="cmb2-search-ajax-results" id="' . esc_attr( $field_name ) . '_results">';
				if ( ! empty( $values ) ) {
					foreach ( $values as $val ) {
						$handle = ( $field->args( 'sortable' ) ) ? '<span class="handle"></span>' : '';
						if ( $field->args( 'object_type' ) === 'user' ) {
							$guid  = get_edit_user_link( $val );
							$user  = get_userdata( $val );
							$title = $user->display_name;
						} else {
							$guid  = get_edit_post_link( $val );
							$title = get_the_title( $val );
						}

						$safety = ( WP_Inci::get_instance() )->get_safety_html( $val );
						$title  = '<div class="wi_wrapper">' . $safety . '<div class="wi_value">' . $title . '</div></div>';

						// @codingStandardsIgnoreStart
						echo '<li><input type="hidden" name="' . $field_name . '_results[]" value="' . $val . '">' . $handle . '<a href="' . $guid . '" target="_blank" class="edit-link">' . $title . '</a><a class="remover"><span class="dashicons dashicons-no"></span><span class="dashicons dashicons-dismiss"></span></a></li>';
						// @codingStandardsIgnoreEnd
					}
				}
				echo '</ol>';
			}

			echo '</div>';

		}

		/**
		 * Sanitize the Ajax search.
		 *
		 * @param string $override_value The override value.
		 * @param array  $value          The field value.
		 * @param int    $object_id      The object ID.
		 * @param array  $field_args     The field args.
		 *
		 * @return bool|mixed
		 */
		public function sanitizeSearchAjax( $override_value, $value, $object_id, $field_args ) {
			$fid = $field_args['id'];
			if ( ! empty( $field_args['render_row_cb'][0]->data_to_save[ $fid . '_results' ] ) ) {
				$value = $field_args['render_row_cb'][0]->data_to_save[ $fid . '_results' ];
			} elseif ( ! defined( 'DOING_AJAX' ) ) {
				$value = array();
			}

			return $value;
		}

		/**
		 * Enqueue scripts and styles.
		 *
		 * @return void
		 */
		public function setupAdminScripts() {
			wp_register_script(
				'jquery-autocomplete',
				$this->url . '/admin/js/jquery.autocomplete.min.js',
				array( 'jquery' ),
				get_bloginfo( 'version' ),
				array( 'in_footer' => true )
			);
			wp_register_script(
				'search-ajax',
				$this->url . '/admin/js/search-ajax.min.js',
				array( 'jquery', 'jquery-autocomplete', 'jquery-ui-sortable' ),
				get_bloginfo( 'version' ),
				array( 'in_footer' => true )
			);
			wp_localize_script(
				'search-ajax',
				'wi',
				array(
					'ajaxurl'    => admin_url( 'admin-ajax.php' ),
					'nonce'      => wp_create_nonce( 'cmb2_search_ajax_get_results' ),
					'notice'     => __( 'No results found.', 'wp-inci' ),
				)
			);
			wp_enqueue_script( 'search-ajax' );

			wp_register_script(
				'multiple-search-ajax',
				$this->url . '/admin/js/multiple-search-ajax.min.js',
				array( 'jquery' ),
				get_bloginfo( 'version' ),
				array( 'in_footer' => true )
			);
			wp_localize_script(
				'multiple-search-ajax',
				'wi_mu',
				array(
					'ajaxurl' => admin_url( 'admin-ajax.php' ),
					'nonce'   => wp_create_nonce( 'cmb2_multiple_search_ajax_get_results' ),
				)
			);
			wp_enqueue_script( 'multiple-search-ajax' );

		}

		/**
		 * Ajax request: get results for single search.
		 *
		 * @return void
		 * @throws JsonException Json exception.
		 */
		public function cmb2SearchAjaxGetResults() {
			if ( isset( $_POST['wicheck'] ) && ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_POST['wicheck'] ) ), 'cmb2_search_ajax_get_results' ) ) {
				die( wp_json_encode( array( 'error' => __( 'Error : Unauthorized action', 'wp-inci' ) ), JSON_THROW_ON_ERROR ) );
			}
			// @codingStandardsIgnoreStart
            $args = isset( $_POST['query_args'] ) ? json_decode( wp_specialchars_decode( stripslashes( $_POST['query_args'] ) ), true, 512, JSON_THROW_ON_ERROR ) : '';
            add_filter( 'posts_where', array( $this, 'setTitleFilter' ), 10, 2 );

            $args['title_filter'] = $_POST['query'] ?? '';
			// @codingStandardsIgnoreEnd
			$data = array();

			$results = new WP_Query( $args );
			if ( $results->have_posts() ) :
				while ( $results->have_posts() ) :
					$results->the_post();
					// Define filter "cmb2_search_ajax_result" to allow customize ajax results.
					$data[] = apply_filters(
						'cmb2_search_ajax_result',
						array(
							'value'  => get_the_title(),
							'data'   => get_the_ID(),
							'guid'   => get_edit_post_link(),
							'safety' => ( WP_Inci::get_instance() )->get_safety_html( get_the_ID() ),
						)
					);
				endwhile;
				endif;

				wp_reset_postdata();
				remove_filter( 'posts_where', array( $this, 'setTitleFilter' ) );
				die( wp_json_encode( $data ) );
		}

		/**
		 * Ajax request: get results for multiple search.
		 *
		 * @return void
		 */
		public function cmb2MultipleSearchAjaxGetResults() {
			global $wpdb;

			if ( isset( $_POST['wimucheck'] ) && ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_POST['wimucheck'] ) ), 'cmb2_multiple_search_ajax_get_results' ) ) {
				die( wp_json_encode( array( 'error' => __( 'Error: Unauthorized action', 'wp-inci' ) ), JSON_THROW_ON_ERROR ) );
			}

			$string = '';
			$data   = array();
			$i      = 0;

			$text     = isset( $_POST['text'] ) ? sanitize_text_field( wp_unslash( $_POST['text'] ) ) : '';
			$results  = explode( ',', trim( $text ) );
			$field_id = isset( $_POST['field_id'] ) ? sanitize_key( wp_unslash( $_POST['field_id'] ) ) : '';

			foreach ( $results as $result ) {
				$i ++;
				$name = strtoupper( trim( $result ) );

				$wild        = '%';
				$like_single = $wild . $wpdb->esc_like( $name ) . $wild;
				$like_double = $wpdb->esc_like( $name ) . $wild;

				// @codingStandardsIgnoreStart
				$ingredient_id = $wpdb->get_col(
					$wpdb->prepare(
						"SELECT ID from $wpdb->posts 
                    WHERE ( post_title = %s OR post_title LIKE %s OR post_content LIKE %s ) 
                    AND post_type = 'ingredient' 
                    AND post_status = 'publish';",
						$name,
						$like_single,
						$like_double
					)
				);
				// @codingStandardsIgnoreEnd

				if ( $ingredient_id ) {
					$data['row'][] = $this->setResults( $ingredient_id[0], $field_id );
				} else {
					$string .= $i . '. ' . $name . ': ' . __( 'Not found', 'wp-inci' ) . " \n";
				}

				$data['string'] = $string;
			}

			die( wp_json_encode( $data, JSON_THROW_ON_ERROR ) );
		}

		/**
		 * Returns a list item from the post ID.
		 *
		 * @param int $post_id  The post ID.
		 * @param int $field_id The field ID.
		 *
		 * @return string
		 */
		public function setResults( $post_id, $field_id ) {
			$post = get_post( $post_id );

			$guid   = get_edit_post_link( $post->ID );
			$safety = ( WP_Inci::get_instance() )->get_safety_html( $post->ID );
			$title  = '<div class="wi_wrapper">' . $safety . '<div class="wi_value">' . $post->post_title . '</div></div>';

			return '<li><span class="handle"></span><input type="hidden" name="' . $field_id . '_results[]" value="' . $post->ID . '"><a href="' . $guid . '" target="_blank" class="edit-link">' . $title . '</a><a class="remover"><span class="dashicons dashicons-no"></span><span class="dashicons dashicons-dismiss"></span></a></li>';

		}
	}

	add_action( 'plugins_loaded', array( 'WP_Inci_Fields', 'get_instanceFields' ) );
}