<?php

[0] Fix | Delete

[1] Fix | Delete

namespace WPForms\Admin\Education;

[2] Fix | Delete

[3] Fix | Delete

/**

[4] Fix | Delete

* Education core.

[5] Fix | Delete

*

[6] Fix | Delete

* @since 1.6.6

[7] Fix | Delete

*/

[8] Fix | Delete

class Core {

[9] Fix | Delete

[10] Fix | Delete

use StringsTrait;

[11] Fix | Delete

[12] Fix | Delete

/**

[13] Fix | Delete

* Indicate if Education core is allowed to load.

[14] Fix | Delete

*

[15] Fix | Delete

* @since 1.6.6

[16] Fix | Delete

*

[17] Fix | Delete

* @return bool

[18] Fix | Delete

*/

[19] Fix | Delete

public function allow_load(): bool {

[20] Fix | Delete

[21] Fix | Delete

return wp_doing_ajax() || wpforms_is_admin_page() || wpforms_is_admin_page( 'builder' );

[22] Fix | Delete

}

[23] Fix | Delete

[24] Fix | Delete

/**

[25] Fix | Delete

* Init.

[26] Fix | Delete

*

[27] Fix | Delete

* @since 1.6.6

[28] Fix | Delete

*/

[29] Fix | Delete

public function init() {

[30] Fix | Delete

[31] Fix | Delete

// Only proceed if allowed.

[32] Fix | Delete

if ( ! $this->allow_load() ) {

[33] Fix | Delete

return;

[34] Fix | Delete

}

[35] Fix | Delete

[36] Fix | Delete

$this->hooks();

[37] Fix | Delete

}

[38] Fix | Delete

[39] Fix | Delete

/**

[40] Fix | Delete

* Hooks.

[41] Fix | Delete

*

[42] Fix | Delete

* @since 1.6.6

[43] Fix | Delete

*/

[44] Fix | Delete

protected function hooks() {

[45] Fix | Delete

[46] Fix | Delete

if ( wp_doing_ajax() ) {

[47] Fix | Delete

add_action( 'wp_ajax_wpforms_education_dismiss', [ $this, 'ajax_dismiss' ] );

[48] Fix | Delete

[49] Fix | Delete

return;

[50] Fix | Delete

}

[51] Fix | Delete

[52] Fix | Delete

add_action( 'admin_enqueue_scripts', [ $this, 'enqueues' ] );

[53] Fix | Delete

}

[54] Fix | Delete

[55] Fix | Delete

/**

[56] Fix | Delete

* Load enqueues.

[57] Fix | Delete

*

[58] Fix | Delete

* @since 1.6.6

[59] Fix | Delete

*/

[60] Fix | Delete

public function enqueues() {

[61] Fix | Delete

[62] Fix | Delete

$min = wpforms_get_min_suffix();

[63] Fix | Delete

[64] Fix | Delete

wp_enqueue_script(

[65] Fix | Delete

'wpforms-admin-education-core',

[66] Fix | Delete

WPFORMS_PLUGIN_URL . "assets/js/admin/education/core{$min}.js",

[67] Fix | Delete

[ 'jquery', 'jquery-confirm' ],

[68] Fix | Delete

WPFORMS_VERSION,

[69] Fix | Delete

true

[70] Fix | Delete

);

[71] Fix | Delete

[72] Fix | Delete

wp_localize_script(

[73] Fix | Delete

'wpforms-admin-education-core',

[74] Fix | Delete

'wpforms_education',

[75] Fix | Delete

$this->get_js_strings()

[76] Fix | Delete

);

[77] Fix | Delete

}

[78] Fix | Delete

[79] Fix | Delete

/**

[80] Fix | Delete

* Ajax handler for the education dismisses buttons.

[81] Fix | Delete

*

[82] Fix | Delete

* @since 1.6.6

[83] Fix | Delete

*/

[84] Fix | Delete

public function ajax_dismiss() {

[85] Fix | Delete

[86] Fix | Delete

// Run a security check.

[87] Fix | Delete

check_ajax_referer( 'wpforms-education', 'nonce' );

[88] Fix | Delete

[89] Fix | Delete

// Section is the identifier of the education feature.

[90] Fix | Delete

// For example, in Builder/DidYouKnow feature used 'builder-did-you-know-notifications'

[91] Fix | Delete

// and 'builder-did-you-know-confirmations'.

[92] Fix | Delete

$section = ! empty( $_POST['section'] ) ? sanitize_key( $_POST['section'] ) : '';

[93] Fix | Delete

[94] Fix | Delete

if ( empty( $section ) ) {

[95] Fix | Delete

wp_send_json_error(

[96] Fix | Delete

[ 'error' => esc_html__( 'Please specify a section.', 'wpforms-lite' ) ]

[97] Fix | Delete

);

[98] Fix | Delete

}

[99] Fix | Delete

[100] Fix | Delete

// Check for permissions.

[101] Fix | Delete

if ( ! $this->current_user_can() ) {

[102] Fix | Delete

wp_send_json_error(

[103] Fix | Delete

[ 'error' => esc_html__( 'You do not have permission to perform this action.', 'wpforms-lite' ) ]

[104] Fix | Delete

);

[105] Fix | Delete

}

[106] Fix | Delete

[107] Fix | Delete

$user_id = get_current_user_id();

[108] Fix | Delete

$dismissed = get_user_meta( $user_id, 'wpforms_dismissed', true );

[109] Fix | Delete

[110] Fix | Delete

if ( empty( $dismissed ) ) {

[111] Fix | Delete

$dismissed = [];

[112] Fix | Delete

}

[113] Fix | Delete

[114] Fix | Delete

$dismissed[ 'edu-' . $section ] = time();

[115] Fix | Delete

[116] Fix | Delete

update_user_meta( $user_id, 'wpforms_dismissed', $dismissed );

[117] Fix | Delete

wp_send_json_success();

[118] Fix | Delete

}

[119] Fix | Delete

[120] Fix | Delete

/**

[121] Fix | Delete

* Whether the current user can perform an action.

[122] Fix | Delete

*

[123] Fix | Delete

* @since 1.8.0

[124] Fix | Delete

*

[125] Fix | Delete

* @return bool

[126] Fix | Delete

*/

[127] Fix | Delete

private function current_user_can(): bool {

[128] Fix | Delete

[129] Fix | Delete

// phpcs:ignore WordPress.Security.NonceVerification.Missing

[130] Fix | Delete

$page = ! empty( $_POST['page'] ) ? sanitize_key( $_POST['page'] ) : '';

[131] Fix | Delete

[132] Fix | Delete

// key is the same as $current_screen->id and the JS global 'pagenow', value - capability name(s).

[133] Fix | Delete

$caps = [

[134] Fix | Delete

'toplevel_page_wpforms-overview' => [ 'view_forms' ],

[135] Fix | Delete

'wpforms_page_wpforms-builder' => [ 'edit_forms' ],

[136] Fix | Delete

'wpforms_page_wpforms-entries' => [ 'view_entries' ],

[137] Fix | Delete

];

[138] Fix | Delete

[139] Fix | Delete

return isset( $caps[ $page ] ) ? wpforms_current_user_can( $caps[ $page ] ) : wpforms_current_user_can();

[140] Fix | Delete

}

[141] Fix | Delete

}

[142] Fix | Delete

[143] Fix | Delete