1120 lines
37 KiB
PHP
1120 lines
37 KiB
PHP
<?php
|
|
/**
|
|
* Press This class and display functionality
|
|
*
|
|
* @package WordPress
|
|
* @subpackage Press_This
|
|
* @since 4.2.0
|
|
*/
|
|
|
|
/**
|
|
* Press This class
|
|
*
|
|
* @since 4.2.0
|
|
*/
|
|
class WP_Press_This {
|
|
|
|
/**
|
|
* Constructor.
|
|
*
|
|
* @since 4.2.0
|
|
* @access public
|
|
*/
|
|
public function __construct() {}
|
|
|
|
/**
|
|
* App and site settings data, including i18n strings for the client-side.
|
|
*
|
|
* @since 4.2.0
|
|
* @access public
|
|
*
|
|
* @return array Site settings.
|
|
*/
|
|
public function site_settings() {
|
|
$default_html = array(
|
|
'quote' => '<blockquote>%1$s</blockquote>',
|
|
'link' => '<p>' . _x( 'Source:', 'Used in Press This to indicate where the content comes from.' ) .
|
|
' <em><a href="%1$s">%2$s</a></em></p>',
|
|
);
|
|
|
|
return array(
|
|
// Used to trigger the bookmarklet update notice.
|
|
// Needs to be set here and in get_shortcut_link() in wp-includes/link-template.php.
|
|
'version' => '6',
|
|
|
|
/**
|
|
* Filter whether or not Press This should redirect the user in the parent window upon save.
|
|
*
|
|
* @since 4.2.0
|
|
*
|
|
* @param bool false Whether to redirect in parent window or not. Default false.
|
|
*/
|
|
'redirInParent' => apply_filters( 'press_this_redirect_in_parent', false ),
|
|
|
|
/**
|
|
* Filter the default HTML for the Press This editor.
|
|
*
|
|
* @since 4.2.0
|
|
*
|
|
* @param array $default_html Associative array with two keys: 'quote' where %1$s is replaced with the site description
|
|
* or the selected content, and 'link' there %1$s is link href, %2$s is link text.
|
|
*/
|
|
'html' => apply_filters( 'press_this_suggested_html', $default_html ),
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Get the source's images and save them locally, for posterity, unless we can't.
|
|
*
|
|
* @since 4.2.0
|
|
* @access public
|
|
*
|
|
* @param int $post_id Post ID.
|
|
* @param string $content Optional. Current expected markup for Press This. Default empty.
|
|
* @return string New markup with old image URLs replaced with the local attachment ones if swapped.
|
|
*/
|
|
public function side_load_images( $post_id, $content = '' ) {
|
|
$new_content = $content;
|
|
|
|
preg_match_all( '/<img [^>]+>/', $content, $matches );
|
|
|
|
if ( ! empty( $matches ) && current_user_can( 'upload_files' ) ) {
|
|
foreach ( (array) $matches[0] as $key => $image ) {
|
|
preg_match( '/src=["\']{1}([^"\']+)["\']{1}/', stripslashes( $image ), $url_matches );
|
|
|
|
if ( empty( $url_matches[1] ) ) {
|
|
continue;
|
|
}
|
|
|
|
$image_url = $url_matches[1];
|
|
|
|
// Don't try to sideload a file without a file extension, leads to WP upload error.
|
|
if ( ! preg_match( '/[^\?]+\.(jpe?g|jpe|gif|png)\b/i', $image_url ) )
|
|
continue;
|
|
|
|
// See if files exist in content - we don't want to upload non-used selected files.
|
|
if ( false !== strpos( $new_content, htmlspecialchars( $image_url ) ) ) {
|
|
|
|
// Sideload image, which ives us a new image tag, strip the empty alt that comes with it.
|
|
$upload = str_replace( ' alt=""', '', media_sideload_image( $image_url, $post_id ) );
|
|
|
|
// Preserve assigned class, id, width, height and alt attributes.
|
|
if ( preg_match_all( '/(class|width|height|id|alt)=\\\?(\"|\')[^"\']+\\\?(\2)/', $image, $attr_matches )
|
|
&& is_array( $attr_matches[0] )
|
|
) {
|
|
foreach ( $attr_matches[0] as $attr ) {
|
|
$upload = str_replace( '<img', '<img ' . $attr, $upload );
|
|
}
|
|
}
|
|
|
|
/*
|
|
* Replace the POSTED content <img> with correct uploaded ones.
|
|
* Regex contains fix for Magic Quotes.
|
|
*/
|
|
if ( ! is_wp_error( $upload ) ) {
|
|
$new_content = str_replace( $image, $upload, $new_content );
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// Error handling for media_sideload, send original content back.
|
|
if ( is_wp_error( $new_content ) ) {
|
|
return $content;
|
|
}
|
|
|
|
return $new_content;
|
|
}
|
|
|
|
/**
|
|
* AJAX handler for saving the post as draft or published.
|
|
*
|
|
* @since 4.2.0
|
|
* @access public
|
|
*/
|
|
public function save_post() {
|
|
if ( empty( $_POST['pressthis-nonce'] ) || ! wp_verify_nonce( $_POST['pressthis-nonce'], 'press-this' ) ) {
|
|
wp_send_json_error( array( 'errorMessage' => __( 'Cheatin’ uh?' ) ) );
|
|
}
|
|
|
|
if ( empty( $_POST['post_ID'] ) || ! $post_id = (int) $_POST['post_ID'] ) {
|
|
wp_send_json_error( array( 'errorMessage' => __( 'Missing post ID.' ) ) );
|
|
}
|
|
|
|
if ( ! current_user_can( 'edit_post', $post_id ) ) {
|
|
wp_send_json_error( array( 'errorMessage' => __( 'Cheatin’ uh?' ) ) );
|
|
}
|
|
|
|
$post = array(
|
|
'ID' => $post_id,
|
|
'post_title' => ( ! empty( $_POST['title'] ) ) ? sanitize_text_field( trim( $_POST['title'] ) ) : '',
|
|
'post_content' => ( ! empty( $_POST['pressthis'] ) ) ? trim( $_POST['pressthis'] ) : '',
|
|
'post_type' => 'post',
|
|
'post_status' => 'draft',
|
|
'post_format' => ( ! empty( $_POST['post_format'] ) ) ? sanitize_text_field( $_POST['post_format'] ) : '',
|
|
'tax_input' => ( ! empty( $_POST['tax_input'] ) ) ? $_POST['tax_input'] : array(),
|
|
'post_category' => ( ! empty( $_POST['post_category'] ) ) ? $_POST['post_category'] : array(),
|
|
);
|
|
|
|
if ( ! empty( $_POST['post_status'] ) && 'publish' === $_POST['post_status'] ) {
|
|
if ( current_user_can( 'publish_posts' ) ) {
|
|
$post['post_status'] = 'publish';
|
|
} else {
|
|
$post['post_status'] = 'pending';
|
|
}
|
|
}
|
|
|
|
$new_content = $this->side_load_images( $post_id, $post['post_content'] );
|
|
|
|
if ( ! is_wp_error( $new_content ) ) {
|
|
$post['post_content'] = $new_content;
|
|
}
|
|
|
|
$updated = wp_update_post( $post, true );
|
|
|
|
if ( is_wp_error( $updated ) || intval( $updated ) < 1 ) {
|
|
wp_send_json_error( array( 'errorMessage' => __( 'Error while saving the post. Please try again later.' ) ) );
|
|
} else {
|
|
if ( isset( $post['post_format'] ) ) {
|
|
if ( current_theme_supports( 'post-formats', $post['post_format'] ) ) {
|
|
set_post_format( $post_id, $post['post_format'] );
|
|
} elseif ( $post['post_format'] ) {
|
|
set_post_format( $post_id, false );
|
|
}
|
|
}
|
|
|
|
if ( 'publish' === get_post_status( $post_id ) ) {
|
|
/**
|
|
* Filter the URL to redirect to when Press This saves.
|
|
*
|
|
* @since 4.2.0
|
|
*
|
|
* @param string $url Redirect URL. If `$status` is 'publish', this will be the post permalink.
|
|
* Otherwise, the post edit URL will be used.
|
|
* @param int $post_id Post ID.
|
|
* @param string $status Post status.
|
|
*/
|
|
$redirect = apply_filters( 'press_this_save_redirect', get_post_permalink( $post_id ), $post_id, $post['post_status'] );
|
|
} else {
|
|
/** This filter is documented in wp-admin/includes/class-wp-press-this.php */
|
|
$redirect = apply_filters( 'press_this_save_redirect', get_edit_post_link( $post_id, 'raw' ), $post_id, $post['post_status'] );
|
|
}
|
|
|
|
wp_send_json_success( array( 'redirect' => $redirect ) );
|
|
}
|
|
}
|
|
|
|
/**
|
|
* AJAX handler for adding a new category.
|
|
*
|
|
* @since 4.2.0
|
|
* @access public
|
|
*/
|
|
public function add_category() {
|
|
if ( false === wp_verify_nonce( $_POST['new_cat_nonce'], 'add-category' ) ) {
|
|
wp_send_json_error();
|
|
}
|
|
|
|
$taxonomy = get_taxonomy( 'category' );
|
|
|
|
if ( ! current_user_can( $taxonomy->cap->edit_terms ) || empty( $_POST['name'] ) ) {
|
|
wp_send_json_error();
|
|
}
|
|
|
|
$parent = isset( $_POST['parent'] ) && (int) $_POST['parent'] > 0 ? (int) $_POST['parent'] : 0;
|
|
$names = explode( ',', $_POST['name'] );
|
|
$added = $data = array();
|
|
|
|
foreach ( $names as $cat_name ) {
|
|
$cat_name = trim( $cat_name );
|
|
$cat_nicename = sanitize_title( $cat_name );
|
|
|
|
if ( empty( $cat_nicename ) ) {
|
|
continue;
|
|
}
|
|
|
|
// @todo Find a more performant to check existence, maybe get_term() with a separate parent check.
|
|
if ( ! $cat_id = term_exists( $cat_name, $taxonomy->name, $parent ) ) {
|
|
$cat_id = wp_insert_term( $cat_name, $taxonomy->name, array( 'parent' => $parent ) );
|
|
}
|
|
|
|
if ( is_wp_error( $cat_id ) ) {
|
|
continue;
|
|
} elseif ( is_array( $cat_id ) ) {
|
|
$cat_id = $cat_id['term_id'];
|
|
}
|
|
|
|
$added[] = $cat_id;
|
|
}
|
|
|
|
if ( empty( $added ) ) {
|
|
wp_send_json_error( array( 'errorMessage' => __( 'This category cannot be added. Please change the name and try again.' ) ) );
|
|
}
|
|
|
|
foreach ( $added as $new_cat_id ) {
|
|
$new_cat = get_category( $new_cat_id );
|
|
|
|
if ( is_wp_error( $new_cat ) ) {
|
|
wp_send_json_error( array( 'errorMessage' => __( 'Error while adding the category. Please try again later.' ) ) );
|
|
}
|
|
|
|
$data[] = array(
|
|
'term_id' => $new_cat->term_id,
|
|
'name' => $new_cat->name,
|
|
'parent' => $new_cat->parent,
|
|
);
|
|
}
|
|
wp_send_json_success( $data );
|
|
}
|
|
|
|
/**
|
|
* Downloads the source's HTML via server-side call for the given URL.
|
|
*
|
|
* @since 4.2.0
|
|
* @access public
|
|
*
|
|
* @param string $url URL to scan.
|
|
* @return string Source's HTML sanitized markup
|
|
*/
|
|
public function fetch_source_html( $url ) {
|
|
// Download source page to tmp file.
|
|
$source_tmp_file = ( ! empty( $url ) ) ? download_url( $url, 30 ) : '';
|
|
$source_content = '';
|
|
|
|
if ( ! is_wp_error( $source_tmp_file ) && file_exists( $source_tmp_file ) ) {
|
|
// Get the content of the source page from the tmp file..
|
|
|
|
$source_content = wp_kses(
|
|
file_get_contents( $source_tmp_file ),
|
|
array(
|
|
'img' => array(
|
|
'src' => array(),
|
|
),
|
|
'iframe' => array(
|
|
'src' => array(),
|
|
),
|
|
'link' => array(
|
|
'rel' => array(),
|
|
'itemprop' => array(),
|
|
'href' => array(),
|
|
),
|
|
'meta' => array(
|
|
'property' => array(),
|
|
'name' => array(),
|
|
'content' => array(),
|
|
)
|
|
)
|
|
);
|
|
|
|
// All done with backward compatibility. Let's do some cleanup, for good measure :)
|
|
unlink( $source_tmp_file );
|
|
|
|
} else if ( is_wp_error( $source_tmp_file ) ) {
|
|
$source_content = new WP_Error( 'upload-error', sprintf( __( 'Error: %s' ), sprintf( __( 'Could not download the source URL (native error: %s).' ), $source_tmp_file->get_error_message() ) ) );
|
|
} else if ( ! file_exists( $source_tmp_file ) ) {
|
|
$source_content = new WP_Error( 'no-local-file', sprintf( __( 'Error: %s' ), __( 'Could not save or locate the temporary download file for the source URL.' ) ) );
|
|
}
|
|
|
|
return $source_content;
|
|
}
|
|
|
|
private function _limit_array( $value ) {
|
|
if ( is_array( $value ) ) {
|
|
if ( count( $value ) > 50 ) {
|
|
return array_slice( $value, 0, 50 );
|
|
}
|
|
|
|
return $value;
|
|
}
|
|
|
|
return array();
|
|
}
|
|
|
|
private function _limit_string( $value ) {
|
|
$return = '';
|
|
|
|
if ( is_numeric( $value ) || is_bool( $value ) ) {
|
|
$return = $value;
|
|
} else if ( is_string( $value ) ) {
|
|
if ( mb_strlen( $value ) > 5000 ) {
|
|
$return = mb_substr( $value, 0, 5000 );
|
|
} else {
|
|
$return = $value;
|
|
}
|
|
|
|
$return = html_entity_decode( $return, ENT_QUOTES, 'UTF-8' );
|
|
$return = sanitize_text_field( trim( $return ) );
|
|
}
|
|
|
|
return $return;
|
|
}
|
|
|
|
private function _limit_url( $url ) {
|
|
if ( ! is_string( $url ) ) {
|
|
return '';
|
|
}
|
|
|
|
$url = $this->_limit_string( $url );
|
|
|
|
// HTTP 1.1 allows 8000 chars but the "de-facto" standard supported in all current browsers is 2048.
|
|
if ( mb_strlen( $url ) > 2048 ) {
|
|
return ''; // Return empty rather than a trunacted/invalid URL
|
|
}
|
|
|
|
// Only allow http(s) or protocol relative URLs.
|
|
if ( ! preg_match( '%^(https?:)?//%i', $url ) ) {
|
|
return '';
|
|
}
|
|
|
|
if ( strpos( $url, '"' ) !== false || strpos( $url, ' ' ) !== false ) {
|
|
return '';
|
|
}
|
|
|
|
return $url;
|
|
}
|
|
|
|
private function _limit_img( $src ) {
|
|
$src = $this->_limit_url( $src );
|
|
|
|
if ( preg_match( '/\/ad[sx]{1}?\//', $src ) ) {
|
|
// Ads
|
|
return '';
|
|
} else if ( preg_match( '/(\/share-?this[^\.]+?\.[a-z0-9]{3,4})(\?.*)?$/', $src ) ) {
|
|
// Share-this type button
|
|
return '';
|
|
} else if ( preg_match( '/\/(spinner|loading|spacer|blank|rss)\.(gif|jpg|png)/', $src ) ) {
|
|
// Loaders, spinners, spacers
|
|
return '';
|
|
} else if ( preg_match( '/\/([^\.\/]+[-_]{1})?(spinner|loading|spacer|blank)s?([-_]{1}[^\.\/]+)?\.[a-z0-9]{3,4}/', $src ) ) {
|
|
// Fancy loaders, spinners, spacers
|
|
return '';
|
|
} else if ( preg_match( '/([^\.\/]+[-_]{1})?thumb[^.]*\.(gif|jpg|png)$/', $src ) ) {
|
|
// Thumbnails, too small, usually irrelevant to context
|
|
return '';
|
|
} else if ( preg_match( '/\/wp-includes\//', $src ) ) {
|
|
// Classic WP interface images
|
|
return '';
|
|
} else if ( preg_match( '/[^\d]{1}\d{1,2}x\d+\.(gif|jpg|png)$/', $src ) ) {
|
|
// Most often tiny buttons/thumbs (< 100px wide)
|
|
return '';
|
|
} else if ( preg_match( '/\/pixel\.(mathtag|quantserve)\.com/', $src ) ) {
|
|
// See mathtag.com and https://www.quantcast.com/how-we-do-it/iab-standard-measurement/how-we-collect-data/
|
|
return '';
|
|
} else if ( false !== strpos( $src, '/g.gif' ) ) {
|
|
// Classic WP stats gif
|
|
return '';
|
|
}
|
|
|
|
return $src;
|
|
}
|
|
|
|
private function _limit_embed( $src ) {
|
|
$src = $this->_limit_url( $src );
|
|
|
|
if ( preg_match( '/\/\/www\.youtube\.com\/(embed|v)\/([^\?]+)\?.+$/', $src, $src_matches ) ) {
|
|
$src = 'https://www.youtube.com/watch?v=' . $src_matches[2];
|
|
} else if ( preg_match( '/\/\/player\.vimeo\.com\/video\/([\d]+)([\?\/]{1}.*)?$/', $src, $src_matches ) ) {
|
|
$src = 'https://vimeo.com/' . (int) $src_matches[1];
|
|
} else if ( preg_match( '/\/\/vimeo\.com\/moogaloop\.swf\?clip_id=([\d]+)$/', $src, $src_matches ) ) {
|
|
$src = 'https://vimeo.com/' . (int) $src_matches[1];
|
|
} else if ( preg_match( '/\/\/vine\.co\/v\/([^\/]+)\/embed/', $src, $src_matches ) ) {
|
|
$src = 'https://vine.co/v/' . $src_matches[1];
|
|
} else if ( preg_match( '/\/\/(www\.)?dailymotion\.com\/embed\/video\/([^\/\?]+)([\/\?]{1}.+)?/', $src, $src_matches ) ) {
|
|
$src = 'https://www.dailymotion.com/video/' . $src_matches[2];
|
|
} else if ( ! preg_match( '/\/\/(m\.|www\.)?youtube\.com\/watch\?/', $src )
|
|
&& ! preg_match( '/\/youtu\.be\/.+$/', $src )
|
|
&& ! preg_match( '/\/\/vimeo\.com\/[\d]+$/', $src )
|
|
&& ! preg_match( '/\/\/(www\.)?dailymotion\.com\/video\/.+$/', $src )
|
|
&& ! preg_match( '/\/\/soundcloud\.com\/.+$/', $src )
|
|
&& ! preg_match( '/\/\/twitter\.com\/[^\/]+\/status\/[\d]+$/', $src )
|
|
&& ! preg_match( '/\/\/vine\.co\/v\/[^\/]+/', $src ) ) {
|
|
$src = '';
|
|
}
|
|
|
|
return $src;
|
|
}
|
|
|
|
private function _process_meta_entry( $meta_name, $meta_value, $data ) {
|
|
if ( preg_match( '/:?(title|description|keywords)$/', $meta_name ) ) {
|
|
$data['_meta'][ $meta_name ] = $meta_value;
|
|
} else {
|
|
switch ( $meta_name ) {
|
|
case 'og:url':
|
|
case 'og:video':
|
|
case 'og:video:secure_url':
|
|
$meta_value = $this->_limit_embed( $meta_value );
|
|
|
|
if ( ! isset( $data['_embed'] ) ) {
|
|
$data['_embed'] = array();
|
|
}
|
|
|
|
if ( ! empty( $meta_value ) && ! in_array( $meta_value, $data['_embed'] ) ) {
|
|
$data['_embed'][] = $meta_value;
|
|
}
|
|
|
|
break;
|
|
case 'og:image':
|
|
case 'og:image:secure_url':
|
|
case 'twitter:image0:src':
|
|
case 'twitter:image0':
|
|
case 'twitter:image:src':
|
|
case 'twitter:image':
|
|
$meta_value = $this->_limit_img( $meta_value );
|
|
|
|
if ( ! isset( $data['_img'] ) ) {
|
|
$data['_img'] = array();
|
|
}
|
|
|
|
if ( ! empty( $meta_value ) && ! in_array( $meta_value, $data['_img'] ) ) {
|
|
$data['_img'][] = $meta_value;
|
|
}
|
|
|
|
break;
|
|
}
|
|
}
|
|
|
|
return $data;
|
|
}
|
|
|
|
/**
|
|
* Fetches and parses _meta, _img, and _links data from the source.
|
|
*
|
|
* @since 4.2.0
|
|
* @access public
|
|
*
|
|
* @param string $url URL to scan.
|
|
* @param array $data Optional. Existing data array if you have one. Default empty array.
|
|
* @return array New data array.
|
|
*/
|
|
public function source_data_fetch_fallback( $url, $data = array() ) {
|
|
if ( empty( $url ) ) {
|
|
return array();
|
|
}
|
|
|
|
// Download source page to tmp file.
|
|
$source_content = $this->fetch_source_html( $url );
|
|
if ( is_wp_error( $source_content ) ) {
|
|
return array( 'errors' => $source_content->get_error_messages() );
|
|
}
|
|
|
|
// Fetch and gather <meta> data first, so discovered media is offered 1st to user.
|
|
if ( empty( $data['_meta'] ) ) {
|
|
$data['_meta'] = array();
|
|
}
|
|
|
|
if ( preg_match_all( '/<meta [^>]+>/', $source_content, $matches ) ) {
|
|
$items = $this->_limit_array( $matches[0] );
|
|
|
|
foreach ( $items as $value ) {
|
|
if ( preg_match( '/(property|name)="([^"]+)"[^>]+content="([^"]+)"/', $value, $new_matches ) ) {
|
|
$meta_name = $this->_limit_string( $new_matches[2] );
|
|
$meta_value = $this->_limit_string( $new_matches[3] );
|
|
|
|
// Sanity check. $key is usually things like 'title', 'description', 'keywords', etc.
|
|
if ( strlen( $meta_name ) > 100 ) {
|
|
continue;
|
|
}
|
|
|
|
$data = $this->_process_meta_entry( $meta_name, $meta_value, $data );
|
|
}
|
|
}
|
|
}
|
|
|
|
// Fetch and gather <img> data.
|
|
if ( empty( $data['_img'] ) ) {
|
|
$data['_img'] = array();
|
|
}
|
|
|
|
if ( preg_match_all( '/<img [^>]+>/', $source_content, $matches ) ) {
|
|
$items = $this->_limit_array( $matches[0] );
|
|
|
|
foreach ( $items as $value ) {
|
|
if ( preg_match( '/src=(\'|")([^\'"]+)\\1/', $value, $new_matches ) ) {
|
|
$src = $this->_limit_img( $new_matches[2] );
|
|
if ( ! empty( $src ) && ! in_array( $src, $data['_img'] ) ) {
|
|
$data['_img'][] = $src;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// Fetch and gather <iframe> data.
|
|
if ( empty( $data['_embed'] ) ) {
|
|
$data['_embed'] = array();
|
|
}
|
|
|
|
if ( preg_match_all( '/<iframe [^>]+>/', $source_content, $matches ) ) {
|
|
$items = $this->_limit_array( $matches[0] );
|
|
|
|
foreach ( $items as $value ) {
|
|
if ( preg_match( '/src=(\'|")([^\'"]+)\\1/', $value, $new_matches ) ) {
|
|
$src = $this->_limit_embed( $new_matches[2] );
|
|
|
|
if ( ! empty( $src ) && ! in_array( $src, $data['_embed'] ) ) {
|
|
$data['_embed'][] = $src;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// Fetch and gather <link> data
|
|
if ( empty( $data['_links'] ) ) {
|
|
$data['_links'] = array();
|
|
}
|
|
|
|
if ( preg_match_all( '/<link [^>]+>/', $source_content, $matches ) ) {
|
|
$items = $this->_limit_array( $matches[0] );
|
|
|
|
foreach ( $items as $value ) {
|
|
if ( preg_match( '/(rel|itemprop)="([^"]+)"[^>]+href="([^"]+)"/', $value, $new_matches ) ) {
|
|
if ( 'alternate' === $new_matches[2] || 'thumbnailUrl' === $new_matches[2] || 'url' === $new_matches[2] ) {
|
|
$url = $this->_limit_url( $new_matches[3] );
|
|
|
|
if ( ! empty( $url ) && empty( $data['_links'][ $new_matches[2] ] ) ) {
|
|
$data['_links'][ $new_matches[2] ] = $url;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
return $data;
|
|
}
|
|
|
|
/**
|
|
* Handles backward-compat with the legacy version of Press This by supporting its query string params.
|
|
*
|
|
* @since 4.2.0
|
|
* @access public
|
|
*
|
|
* @return array
|
|
*/
|
|
public function merge_or_fetch_data() {
|
|
// Get data from $_POST and $_GET, as appropriate ($_POST > $_GET), to remain backward compatible.
|
|
$data = array();
|
|
|
|
// Only instantiate the keys we want. Sanity check and sanitize each one.
|
|
foreach ( array( 'u', 's', 't', 'v', '_version' ) as $key ) {
|
|
if ( ! empty( $_POST[ $key ] ) ) {
|
|
$value = wp_unslash( $_POST[ $key ] );
|
|
} else if ( ! empty( $_GET[ $key ] ) ) {
|
|
$value = wp_unslash( $_GET[ $key ] );
|
|
} else {
|
|
continue;
|
|
}
|
|
|
|
if ( 'u' === $key ) {
|
|
$value = $this->_limit_url( $value );
|
|
} else {
|
|
$value = $this->_limit_string( $value );
|
|
}
|
|
|
|
if ( ! empty( $value ) ) {
|
|
$data[ $key ] = $value;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Filter whether to enable in-source media discovery in Press This.
|
|
*
|
|
* @since 4.2.0
|
|
*
|
|
* @param bool $enable Whether to enable media discovery.
|
|
*/
|
|
if ( apply_filters( 'enable_press_this_media_discovery', true ) ) {
|
|
/*
|
|
* If no title, _img, _embed, and _meta was passed via $_POST, fetch data from source as fallback,
|
|
* making PT fully backward compatible with the older bookmarklet.
|
|
*/
|
|
if ( empty( $_POST ) && ! empty( $data['u'] ) ) {
|
|
$data = $this->source_data_fetch_fallback( $data['u'], $data );
|
|
} else {
|
|
foreach ( array( '_img', '_embed', '_meta' ) as $type ) {
|
|
if ( empty( $_POST[ $type ] ) ) {
|
|
continue;
|
|
}
|
|
|
|
$data[ $type ] = array();
|
|
$items = $this->_limit_array( $_POST[ $type ] );
|
|
$items = wp_unslash( $items );
|
|
|
|
foreach ( $items as $key => $value ) {
|
|
if ( ! is_numeric( $key ) ) {
|
|
$key = $this->_limit_string( wp_unslash( $key ) );
|
|
|
|
// Sanity check. $key is usually things like 'title', 'description', 'keywords', etc.
|
|
if ( empty( $key ) || strlen( $key ) > 100 ) {
|
|
continue;
|
|
}
|
|
}
|
|
|
|
if ( $type === '_meta' ) {
|
|
$value = $this->_limit_string( $value );
|
|
|
|
if ( ! empty( $value ) ) {
|
|
$data = $this->_process_meta_entry( $key, $value, $data );
|
|
}
|
|
} else if ( $type === '_img' ) {
|
|
$value = $this->_limit_img( $value );
|
|
|
|
if ( ! empty( $value ) ) {
|
|
$data[ $type ][] = $value;
|
|
}
|
|
} else if ( $type === '_embed' ) {
|
|
$value = $this->_limit_embed( $value );
|
|
|
|
if ( ! empty( $value ) ) {
|
|
$data[ $type ][] = $value;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Filter the Press This data array.
|
|
*
|
|
* @since 4.2.0
|
|
*
|
|
* @param array $data Press This Data array.
|
|
*/
|
|
return apply_filters( 'press_this_data', $data );
|
|
}
|
|
|
|
/**
|
|
* Adds another stylesheet inside TinyMCE.
|
|
*
|
|
* @since 4.2.0
|
|
* @access public
|
|
*
|
|
* @param string $styles URL to editor stylesheet.
|
|
* @return string Possibly modified stylesheets list.
|
|
*/
|
|
public function add_editor_style( $styles ) {
|
|
if ( ! empty( $styles ) ) {
|
|
$styles .= ',';
|
|
}
|
|
|
|
$press_this = admin_url( 'css/press-this-editor.css' );
|
|
if ( is_rtl() ) {
|
|
$press_this = str_replace( '.css', '-rtl.css', $press_this );
|
|
}
|
|
|
|
return $styles . $press_this;
|
|
}
|
|
|
|
/**
|
|
* Outputs the post format selection HTML.
|
|
*
|
|
* @since 4.2.0
|
|
* @access public
|
|
*
|
|
* @param WP_Post $post Post object.
|
|
*/
|
|
public function post_formats_html( $post ) {
|
|
if ( current_theme_supports( 'post-formats' ) && post_type_supports( $post->post_type, 'post-formats' ) ) {
|
|
$post_formats = get_theme_support( 'post-formats' );
|
|
|
|
if ( is_array( $post_formats[0] ) ) {
|
|
$post_format = get_post_format( $post->ID );
|
|
|
|
if ( ! $post_format ) {
|
|
$post_format = '0';
|
|
}
|
|
|
|
// Add in the current one if it isn't there yet, in case the current theme doesn't support it.
|
|
if ( $post_format && ! in_array( $post_format, $post_formats[0] ) ) {
|
|
$post_formats[0][] = $post_format;
|
|
}
|
|
|
|
?>
|
|
<div id="post-formats-select">
|
|
<fieldset><legend class="screen-reader-text"><?php _e( 'Post formats' ); ?></legend>
|
|
<input type="radio" name="post_format" class="post-format" id="post-format-0" value="0" <?php checked( $post_format, '0' ); ?> />
|
|
<label for="post-format-0" class="post-format-icon post-format-standard"><?php echo get_post_format_string( 'standard' ); ?></label>
|
|
<?php
|
|
|
|
foreach ( $post_formats[0] as $format ) {
|
|
$attr_format = esc_attr( $format );
|
|
?>
|
|
<br />
|
|
<input type="radio" name="post_format" class="post-format" id="post-format-<?php echo $attr_format; ?>" value="<?php echo $attr_format; ?>" <?php checked( $post_format, $format ); ?> />
|
|
<label for="post-format-<?php echo $attr_format ?>" class="post-format-icon post-format-<?php echo $attr_format; ?>"><?php echo esc_html( get_post_format_string( $format ) ); ?></label>
|
|
<?php
|
|
}
|
|
?>
|
|
</fieldset>
|
|
</div>
|
|
<?php
|
|
}
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Outputs the categories HTML.
|
|
*
|
|
* @since 4.2.0
|
|
* @access public
|
|
*
|
|
* @param WP_Post $post Post object.
|
|
*/
|
|
public function categories_html( $post ) {
|
|
$taxonomy = get_taxonomy( 'category' );
|
|
|
|
if ( current_user_can( $taxonomy->cap->edit_terms ) ) {
|
|
?>
|
|
<button type="button" class="add-cat-toggle button-subtle" aria-expanded="false">
|
|
<span class="dashicons dashicons-plus"></span><span class="screen-reader-text"><?php _e( 'Toggle add category' ); ?></span>
|
|
</button>
|
|
<div class="add-category is-hidden">
|
|
<label class="screen-reader-text" for="new-category"><?php echo $taxonomy->labels->add_new_item; ?></label>
|
|
<input type="text" id="new-category" class="add-category-name" placeholder="<?php echo esc_attr( $taxonomy->labels->new_item_name ); ?>" value="" aria-required="true">
|
|
<label class="screen-reader-text" for="new-category-parent"><?php echo $taxonomy->labels->parent_item_colon; ?></label>
|
|
<div class="postform-wrapper">
|
|
<?php
|
|
wp_dropdown_categories( array(
|
|
'taxonomy' => 'category',
|
|
'hide_empty' => 0,
|
|
'name' => 'new-category-parent',
|
|
'orderby' => 'name',
|
|
'hierarchical' => 1,
|
|
'show_option_none' => '— ' . $taxonomy->labels->parent_item . ' —'
|
|
) );
|
|
?>
|
|
</div>
|
|
<button type="button" class="button add-cat-submit"><?php _e( 'Add' ); ?></button>
|
|
</div>
|
|
<?php } ?>
|
|
<div class="categories-search-wrapper">
|
|
<input id="categories-search" type="search" class="categories-search" placeholder="<?php esc_attr_e( 'Search categories by name' ) ?>">
|
|
<label for="categories-search">
|
|
<span class="dashicons dashicons-search"></span><span class="screen-reader-text"><?php _e( 'Search categories' ); ?></span>
|
|
</label>
|
|
</div>
|
|
<ul class="categories-select" aria-label="<?php esc_attr_e( 'Categories' ); ?>">
|
|
<?php wp_terms_checklist( $post->ID, array( 'taxonomy' => 'category' ) ); ?>
|
|
</ul>
|
|
<?php
|
|
}
|
|
|
|
/**
|
|
* Outputs the tags HTML.
|
|
*
|
|
* @since 4.2.0
|
|
* @access public
|
|
*
|
|
* @param WP_Post $post Post object.
|
|
*/
|
|
public function tags_html( $post ) {
|
|
$taxonomy = get_taxonomy( 'post_tag' );
|
|
$user_can_assign_terms = current_user_can( $taxonomy->cap->assign_terms );
|
|
$esc_tags = get_terms_to_edit( $post->ID, 'post_tag' );
|
|
|
|
if ( ! $esc_tags || is_wp_error( $esc_tags ) ) {
|
|
$esc_tags = '';
|
|
}
|
|
?>
|
|
<div class="tagsdiv" id="post_tag">
|
|
<div class="jaxtag">
|
|
<input type="hidden" name="tax_input[post_tag]" class="the-tags" value="<?php echo $esc_tags; // escaped in get_terms_to_edit() ?>">
|
|
|
|
<?php
|
|
if ( $user_can_assign_terms ) {
|
|
?>
|
|
<div class="ajaxtag hide-if-no-js">
|
|
<label class="screen-reader-text" for="new-tag-post_tag"><?php _e( 'Tags' ); ?></label>
|
|
<p>
|
|
<input type="text" id="new-tag-post_tag" name="newtag[post_tag]" class="newtag form-input-tip" size="16" autocomplete="off" value="" />
|
|
<button type="button" class="button tagadd"><?php _e( 'Add' ); ?></button>
|
|
</p>
|
|
</div>
|
|
<p class="howto">
|
|
<?php echo $taxonomy->labels->separate_items_with_commas; ?>
|
|
</p>
|
|
<?php } ?>
|
|
</div>
|
|
<div class="tagchecklist"></div>
|
|
</div>
|
|
<?php
|
|
if ( $user_can_assign_terms ) {
|
|
?>
|
|
<button type="button" class="button-reset button-link tagcloud-link" id="link-post_tag"><?php echo $taxonomy->labels->choose_from_most_used; ?></button>
|
|
<?php
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Serves the app's base HTML, which in turns calls the load script.
|
|
*
|
|
* @since 4.2.0
|
|
* @access public
|
|
*/
|
|
public function html() {
|
|
global $wp_locale, $wp_version;
|
|
|
|
// Get data, new (POST) and old (GET).
|
|
$data = $this->merge_or_fetch_data();
|
|
|
|
// Get site settings array/data.
|
|
$site_settings = $this->site_settings();
|
|
|
|
// Set the passed data.
|
|
$data['_version'] = $site_settings['version'];
|
|
|
|
// Add press-this-editor.css and remove theme's editor-style.css, if any.
|
|
remove_editor_styles();
|
|
|
|
add_filter( 'mce_css', array( $this, 'add_editor_style' ) );
|
|
|
|
if ( ! empty( $GLOBALS['is_IE'] ) ) {
|
|
@header( 'X-UA-Compatible: IE=edge' );
|
|
}
|
|
|
|
@header( 'Content-Type: ' . get_option( 'html_type' ) . '; charset=' . get_option( 'blog_charset' ) );
|
|
|
|
?>
|
|
<!DOCTYPE html>
|
|
<!--[if IE 7]> <html class="lt-ie9 lt-ie8" <?php language_attributes(); ?>> <![endif]-->
|
|
<!--[if IE 8]> <html class="lt-ie9" <?php language_attributes(); ?>> <![endif]-->
|
|
<!--[if gt IE 8]><!--> <html <?php language_attributes(); ?>> <!--<![endif]-->
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="<?php esc_attr( bloginfo( 'html_type' ) ); ?>; charset=<?php echo esc_attr( get_option( 'blog_charset' ) ); ?>" />
|
|
<meta name="viewport" content="width=device-width">
|
|
<title><?php esc_html_e( 'Press This!' ) ?></title>
|
|
|
|
<script>
|
|
window.wpPressThisData = <?php echo wp_json_encode( $data ) ?>;
|
|
window.wpPressThisConfig = <?php echo wp_json_encode( $site_settings ) ?>;
|
|
</script>
|
|
|
|
<script type="text/javascript">
|
|
var ajaxurl = '<?php echo esc_js( admin_url( 'admin-ajax.php', 'relative' ) ); ?>',
|
|
pagenow = 'press-this',
|
|
typenow = 'post',
|
|
adminpage = 'press-this-php',
|
|
thousandsSeparator = '<?php echo addslashes( $wp_locale->number_format['thousands_sep'] ); ?>',
|
|
decimalPoint = '<?php echo addslashes( $wp_locale->number_format['decimal_point'] ); ?>',
|
|
isRtl = <?php echo (int) is_rtl(); ?>;
|
|
</script>
|
|
|
|
<?php
|
|
/*
|
|
* $post->ID is needed for the embed shortcode so we can show oEmbed previews in the editor.
|
|
* Maybe find a way without it.
|
|
*/
|
|
$post = get_default_post_to_edit( 'post', true );
|
|
$post_ID = (int) $post->ID;
|
|
|
|
wp_enqueue_media( array( 'post' => $post_ID ) );
|
|
wp_enqueue_style( 'press-this' );
|
|
wp_enqueue_script( 'press-this' );
|
|
wp_enqueue_script( 'json2' );
|
|
wp_enqueue_script( 'editor' );
|
|
|
|
$supports_formats = false;
|
|
$post_format = 0;
|
|
|
|
if ( current_theme_supports( 'post-formats' ) && post_type_supports( $post->post_type, 'post-formats' ) ) {
|
|
$supports_formats = true;
|
|
|
|
if ( ! ( $post_format = get_post_format( $post_ID ) ) ) {
|
|
$post_format = 0;
|
|
}
|
|
}
|
|
|
|
/** This action is documented in wp-admin/admin-header.php */
|
|
do_action( 'admin_enqueue_scripts', 'press-this.php' );
|
|
|
|
/** This action is documented in wp-admin/admin-header.php */
|
|
do_action( 'admin_print_styles-press-this.php' );
|
|
|
|
/** This action is documented in wp-admin/admin-header.php */
|
|
do_action( 'admin_print_styles' );
|
|
|
|
/** This action is documented in wp-admin/admin-header.php */
|
|
do_action( 'admin_print_scripts-press-this.php' );
|
|
|
|
/** This action is documented in wp-admin/admin-header.php */
|
|
do_action( 'admin_print_scripts' );
|
|
|
|
/** This action is documented in wp-admin/admin-header.php */
|
|
do_action( 'admin_head-press-this.php' );
|
|
|
|
/** This action is documented in wp-admin/admin-header.php */
|
|
do_action( 'admin_head' );
|
|
?>
|
|
</head>
|
|
<?php
|
|
$admin_body_class = 'press-this';
|
|
$admin_body_class .= ( is_rtl() ) ? ' rtl' : '';
|
|
$admin_body_class .= ' branch-' . str_replace( array( '.', ',' ), '-', floatval( $wp_version ) );
|
|
$admin_body_class .= ' version-' . str_replace( '.', '-', preg_replace( '/^([.0-9]+).*/', '$1', $wp_version ) );
|
|
$admin_body_class .= ' admin-color-' . sanitize_html_class( get_user_option( 'admin_color' ), 'fresh' );
|
|
$admin_body_class .= ' locale-' . sanitize_html_class( strtolower( str_replace( '_', '-', get_locale() ) ) );
|
|
|
|
/** This filter is documented in wp-admin/admin-header.php */
|
|
$admin_body_classes = apply_filters( 'admin_body_class', '' );
|
|
?>
|
|
<body class="wp-admin wp-core-ui <?php echo $admin_body_classes . ' ' . $admin_body_class; ?>">
|
|
<div id="adminbar" class="adminbar">
|
|
<h1 id="current-site" class="current-site">
|
|
<span class="dashicons dashicons-wordpress"></span>
|
|
<span><?php bloginfo( 'name' ); ?></span>
|
|
</h1>
|
|
<button type="button" class="options-open button-subtle">
|
|
<span class="dashicons dashicons-tag"></span><span class="screen-reader-text"><?php _e( 'Show post options' ); ?></span>
|
|
</button>
|
|
<button type="button" class="options-close button-subtle is-hidden"><?php _e( 'Done' ); ?></button>
|
|
</div>
|
|
|
|
<div id="scanbar" class="scan">
|
|
<form method="GET">
|
|
<label for="url-scan" class="screen-reader-text"><?php _e( 'Scan site for content' ); ?></label>
|
|
<input type="url" name="u" id="url-scan" class="scan-url" value="" placeholder="<?php esc_attr_e( 'Enter a URL to scan' ) ?>" />
|
|
<input type="submit" name="url-scan-submit" id="url-scan-submit" class="scan-submit" value="<?php esc_attr_e( 'Scan' ) ?>" />
|
|
</form>
|
|
</div>
|
|
|
|
<form id="pressthis-form" name="pressthis-form" method="POST" autocomplete="off">
|
|
<input type="hidden" name="post_ID" id="post_ID" value="<?php echo $post_ID; ?>" />
|
|
<input type="hidden" name="action" value="press-this-save-post" />
|
|
<input type="hidden" name="post_status" id="post_status" value="draft" />
|
|
<?php
|
|
wp_nonce_field( 'press-this', 'pressthis-nonce', false );
|
|
wp_nonce_field( 'add-category', '_ajax_nonce-add-category', false );
|
|
?>
|
|
<input type="hidden" name="title" id="title-field" value="" />
|
|
|
|
<div class="wrapper">
|
|
<div class="editor-wrapper">
|
|
<div class="alerts">
|
|
<p class="alert is-notice is-hidden should-upgrade-bookmarklet">
|
|
<?php printf( __( 'You should upgrade <a href="%s" target="_blank">your bookmarklet</a> to the latest version!' ), admin_url( 'tools.php' ) ); ?>
|
|
</p>
|
|
</div>
|
|
|
|
<div id='app-container' class="editor">
|
|
<span id="title-container-label" class="post-title-placeholder" aria-hidden="true"><?php _e( 'Post title' ); ?></span>
|
|
<h2 id="title-container" class="post-title" contenteditable="true" spellcheck="true" aria-label="<?php esc_attr_e( 'Post title' ); ?>" tabindex="0"></h2>
|
|
<div id='featured-media-container' class="featured-container no-media">
|
|
<div id='all-media-widget' class="all-media">
|
|
<div id='all-media-container'></div>
|
|
</div>
|
|
</div>
|
|
|
|
<?php
|
|
wp_editor( '', 'pressthis', array(
|
|
'drag_drop_upload' => true,
|
|
'editor_height' => 600,
|
|
'media_buttons' => false,
|
|
'teeny' => true,
|
|
'tinymce' => array(
|
|
'resize' => false,
|
|
'wordpress_adv_hidden' => false,
|
|
'add_unload_trigger' => false,
|
|
'statusbar' => false,
|
|
'autoresize_min_height' => 600,
|
|
'wp_autoresize_on' => true,
|
|
'plugins' => 'lists,media,paste,tabfocus,fullscreen,wordpress,wpautoresize,wpeditimage,wpgallery,wplink,wpview',
|
|
'toolbar1' => 'bold,italic,bullist,numlist,blockquote,link,unlink',
|
|
'toolbar2' => 'undo,redo',
|
|
),
|
|
'quicktags' => false,
|
|
) );
|
|
|
|
?>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="options-panel is-off-screen is-hidden">
|
|
<div class="post-options">
|
|
|
|
<?php if ( $supports_formats ) : ?>
|
|
<button type="button" class="button-reset post-option">
|
|
<span class="dashicons dashicons-admin-post"></span>
|
|
<span class="post-option-title"><?php _e( 'Format' ); ?></span>
|
|
<span class="post-option-contents" id="post-option-post-format"><?php echo esc_html( get_post_format_string( $post_format ) ); ?></span>
|
|
<span class="dashicons post-option-forward"></span>
|
|
</button>
|
|
<?php endif; ?>
|
|
|
|
<button type="button" class="button-reset post-option">
|
|
<span class="dashicons dashicons-category"></span>
|
|
<span class="post-option-title"><?php _e( 'Categories' ); ?></span>
|
|
<span class="post-option-contents" id="post-option-category"></span>
|
|
<span class="dashicons post-option-forward"></span>
|
|
</button>
|
|
|
|
<button type="button" class="button-reset post-option">
|
|
<span class="dashicons dashicons-tag"></span>
|
|
<span class="post-option-title"><?php _e( 'Tags' ); ?></span>
|
|
<span class="post-option-contents" id="post-option-tags"></span>
|
|
<span class="dashicons post-option-forward"></span>
|
|
</button>
|
|
</div>
|
|
|
|
<?php if ( $supports_formats ) : ?>
|
|
<div class="setting-modal is-off-screen is-hidden">
|
|
<button type="button" class="button-reset modal-close">
|
|
<span class="dashicons post-option-back"></span>
|
|
<span class="setting-title" aria-hidden="true"><?php _e( 'Post format' ); ?></span>
|
|
<span class="screen-reader-text"><?php _e( 'Back to post options' ) ?></span>
|
|
</button>
|
|
<?php $this->post_formats_html( $post ); ?>
|
|
</div>
|
|
<?php endif; ?>
|
|
|
|
<div class="setting-modal is-off-screen is-hidden">
|
|
<button type="button" class="button-reset modal-close">
|
|
<span class="dashicons post-option-back"></span>
|
|
<span class="setting-title" aria-hidden="true"><?php _e( 'Categories' ); ?></span>
|
|
<span class="screen-reader-text"><?php _e( 'Back to post options' ) ?></span>
|
|
</button>
|
|
<?php $this->categories_html( $post ); ?>
|
|
</div>
|
|
|
|
<div class="setting-modal tags is-off-screen is-hidden">
|
|
<button type="button" class="button-reset modal-close">
|
|
<span class="dashicons post-option-back"></span>
|
|
<span class="setting-title" aria-hidden="true"><?php _e( 'Tags' ); ?></span>
|
|
<span class="screen-reader-text"><?php _e( 'Back to post options' ) ?></span>
|
|
</button>
|
|
<?php $this->tags_html( $post ); ?>
|
|
</div>
|
|
</div><!-- .options-panel -->
|
|
</div><!-- .wrapper -->
|
|
|
|
<div class="press-this-actions">
|
|
<div class="pressthis-media-buttons">
|
|
<button type="button" class="insert-media button-subtle" data-editor="pressthis">
|
|
<span class="dashicons dashicons-admin-media"></span>
|
|
<span class="screen-reader-text"><?php _e( 'Add Media' ); ?></span>
|
|
</button>
|
|
</div>
|
|
<div class="post-actions">
|
|
<button type="button" class="button-subtle" id="draft-field"><?php _e( 'Save Draft' ); ?></button>
|
|
<button type="button" class="button-primary" id="publish-field"><?php _e( 'Publish' ); ?></button>
|
|
</div>
|
|
</div>
|
|
</form>
|
|
|
|
<?php
|
|
/** This action is documented in wp-admin/admin-footer.php */
|
|
do_action( 'admin_footer' );
|
|
|
|
/** This action is documented in wp-admin/admin-footer.php */
|
|
do_action( 'admin_print_footer_scripts' );
|
|
|
|
/** This action is documented in wp-admin/admin-footer.php */
|
|
do_action( 'admin_footer-press-this.php' );
|
|
?>
|
|
</body>
|
|
</html>
|
|
<?php
|
|
die();
|
|
}
|
|
}
|
|
|
|
$GLOBALS['wp_press_this'] = new WP_Press_This;
|