wpallstars/wp-multisite-waas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Prep Plugin for release on WordPress.org (#23)

Browse Source 
* Update translation text domain
* Escape everything that should be escaped.
* Add nonce checks where needed.
* Sanitize all inputs.
* Apply Code style changes across the codebase.
* Correct many deprecation notices.
* Optimize load order of many filters.
* Add Proper Build script
* Use emojii flags
* Fix i18n deprecation  notice for translating too early
* Put all scripts in footer and load async
This commit is contained in:
David Stone
2025-04-14 11:36:46 -06:00
committed by GitHub
parent a31cfcb565
commit d88e50df38
1087 changed files with 12586 additions and 18535 deletions
Download Patch File Download Diff File Expand all files Collapse all files

56
inc/class-api.php
View File

@ -96,12 +96,12 @@ class API {
return $result;
}
$current_route = $_SERVER['REQUEST_URI'];
$current_route = sanitize_text_field(wp_unslash($_SERVER['REQUEST_URI'] ?? ''));
$rest_url = rest_url();
$rest_path = rtrim(parse_url($rest_url, PHP_URL_PATH), '/');
$rest_path = rtrim(wp_parse_url($rest_url, PHP_URL_PATH), '/');
if (! str_starts_with((string) $current_route, $rest_path . '/' . $this->get_namespace())) {
if (! str_starts_with($current_route, $rest_path . '/' . $this->get_namespace())) {
return $result;
}
@ -142,8 +142,8 @@ class API {
wu_register_settings_section(
'api',
[
'title' => __('API & Webhooks', 'wp-ultimo'),
'desc' => __('API & Webhooks', 'wp-ultimo'),
'title' => __('API & Webhooks', 'wp-multisite-waas'),
'desc' => __('API & Webhooks', 'wp-multisite-waas'),
'icon' => 'dashicons-wu-paper-plane',
'order' => 95,
]
@ -153,8 +153,8 @@ class API {
'api',
'api_header',
[
'title' => __('API Settings', 'wp-ultimo'),
'desc' => __('Options related to WP Multisite WaaS API endpoints.', 'wp-ultimo'),
'title' => __('API Settings', 'wp-multisite-waas'),
'desc' => __('Options related to WP Multisite WaaS API endpoints.', 'wp-multisite-waas'),
'type' => 'header',
]
);
@ -163,8 +163,8 @@ class API {
'api',
'enable_api',
[
'title' => __('Enable API', 'wp-ultimo'),
'desc' => __('Tick this box if you want WP Multisite WaaS to add its own endpoints to the WordPress REST API. This is required for some integrations to work, most notabily, Zapier.', 'wp-ultimo'),
'title' => __('Enable API', 'wp-multisite-waas'),
'desc' => __('Tick this box if you want WP Multisite WaaS to add its own endpoints to the WordPress REST API. This is required for some integrations to work, most notabily, Zapier.', 'wp-multisite-waas'),
'type' => 'toggle',
'default' => 1,
]
@ -173,14 +173,14 @@ class API {
$refreshed_tag = '';
if (wu_request('updated') && wu_request('api') === 'refreshed') {
$refreshed_tag = sprintf('<span class="wu-ml-2 wu-text-green-600">%s</span>', __('Credentials Refreshed', 'wp-ultimo'));
$refreshed_tag = sprintf('<span class="wu-ml-2 wu-text-green-600">%s</span>', __('Credentials Refreshed', 'wp-multisite-waas'));
}
wu_register_settings_field(
'api',
'api_url',
[
'title' => __('API URL', 'wp-ultimo'),
'title' => __('API URL', 'wp-multisite-waas'),
'desc' => '',
'tooltip' => '',
'copy' => true,
@ -196,7 +196,7 @@ class API {
'api',
'api_key',
[
'title' => __('API Key', 'wp-ultimo') . $refreshed_tag,
'title' => __('API Key', 'wp-multisite-waas') . $refreshed_tag,
'desc' => '',
'tooltip' => '',
'type' => 'text-display',
@ -213,7 +213,7 @@ class API {
'api',
'api_secret',
[
'title' => __('API Secret', 'wp-ultimo') . $refreshed_tag,
'title' => __('API Secret', 'wp-multisite-waas') . $refreshed_tag,
'tooltip' => '',
'type' => 'text-display',
'copy' => true,
@ -229,7 +229,7 @@ class API {
'api',
'api_note',
[
'desc' => __('This is your API Key. You cannot change it directly. To reset the API key and secret, use the button "Refresh API credentials" below.', 'wp-ultimo'),
'desc' => __('This is your API Key. You cannot change it directly. To reset the API key and secret, use the button "Refresh API credentials" below.', 'wp-multisite-waas'),
'type' => 'note',
'classes' => 'wu-text-gray-700 wu-text-xs',
'wrapper_classes' => 'wu-bg-white sm:wu-border-t-0 sm:wu-mt-0 sm:wu-pt-0',
@ -243,7 +243,7 @@ class API {
'api',
'refresh_api_credentials',
[
'title' => __('Refresh API Credentials', 'wp-ultimo'),
'title' => __('Refresh API Credentials', 'wp-multisite-waas'),
'type' => 'submit',
'classes' => 'button wu-ml-auto',
'wrapper_classes' => 'wu-bg-white sm:wu-border-t-0 sm:wu-mt-0 sm:wu-pt-0',
@ -257,8 +257,8 @@ class API {
'api',
'api_log_calls',
[
'title' => __('Log API calls (Advanced)', 'wp-ultimo'),
'desc' => __('Tick this box if you want to log all calls received via WP Multisite WaaS API endpoints. You can access the logs on WP Multisite WaaS &rarr; System Info &rarr; Logs.', 'wp-ultimo'),
'title' => __('Log API calls (Advanced)', 'wp-multisite-waas'),
'desc' => __('Tick this box if you want to log all calls received via WP Multisite WaaS API endpoints. You can access the logs on WP Multisite WaaS &rarr; System Info &rarr; Logs.', 'wp-multisite-waas'),
'type' => 'toggle',
'default' => 0,
'require' => [
@ -271,8 +271,8 @@ class API {
'api',
'webhook_header',
[
'title' => __('Webhook Settings', 'wp-ultimo'),
'desc' => __('Options related to WP Multisite WaaS API webhooks.', 'wp-ultimo'),
'title' => __('Webhook Settings', 'wp-multisite-waas'),
'desc' => __('Options related to WP Multisite WaaS API webhooks.', 'wp-multisite-waas'),
'type' => 'header',
]
);
@ -281,8 +281,8 @@ class API {
'api',
'webhook_calls_blocking',
[
'title' => __('Wait for Response (Advanced)', 'wp-ultimo'),
'desc' => __('Tick this box if you want the WP Multisite WaaS\'s webhook calls to wait for the remote server to respond. Keeping this option enabled can have huge effects on your network\'s performance, only enable it if you know what you are doing and need to debug webhook calls.', 'wp-ultimo'),
'title' => __('Wait for Response (Advanced)', 'wp-multisite-waas'),
'desc' => __('Tick this box if you want the WP Multisite WaaS\'s webhook calls to wait for the remote server to respond. Keeping this option enabled can have huge effects on your network\'s performance, only enable it if you know what you are doing and need to debug webhook calls.', 'wp-multisite-waas'),
'type' => 'toggle',
'default' => 0,
]
@ -324,7 +324,7 @@ class API {
*/
public function validate_credentials($api_key, $api_secret) {
return compact('api_key', 'api_secret') === $this->get_auth(); // phpcs:ignore
return [$api_key, $api_secret] === $this->get_auth();
}
/**
@ -355,7 +355,7 @@ class API {
'body_params' => $request->get_body(),
];
wu_log_add('api-calls', json_encode($payload, JSON_PRETTY_PRINT));
wu_log_add('api-calls', wp_json_encode($payload, JSON_PRETTY_PRINT));
}
}
@ -383,7 +383,7 @@ class API {
'body_params' => $request->get_body(),
];
wu_log_add('api-errors', json_encode($payload, JSON_PRETTY_PRINT));
wu_log_add('api-errors', wp_json_encode($payload, JSON_PRETTY_PRINT));
}
wu_log_add('api-errors', $result);
@ -401,9 +401,9 @@ class API {
*/
public function check_authorization($request) {
if (isset($_SERVER['PHP_AUTH_USER']) && $_SERVER['PHP_AUTH_USER']) {
$api_key = $_SERVER['PHP_AUTH_USER'];
$api_secret = $_SERVER['PHP_AUTH_PW'];
if (! empty($_SERVER['PHP_AUTH_USER']) && ! empty($_SERVER['PHP_AUTH_PW'])) {
$api_key = sanitize_text_field(wp_unslash($_SERVER['PHP_AUTH_USER']));
$api_secret = sanitize_text_field(wp_unslash($_SERVER['PHP_AUTH_PW']));
} else {
$params = $request->get_params();
@ -486,7 +486,7 @@ class API {
[
'success' => true,
'label' => $current_site->site_name,
'message' => __('Welcome to our API', 'wp-ultimo'),
'message' => __('Welcome to our API', 'wp-multisite-waas'),
]
);
}