OwlCyberSecurity - MANAGER

Edit File: snippets.php

<?php
if ( ! defined( 'ABSPATH' ) )
	exit;

global $wpdb;
$_GET = stripslashes_deep($_GET);
$xyz_ips_message =$search_name_db=$search_name= '';

if(isset($_GET['xyz_ips_msg'])){
	$xyz_ips_message = intval($_GET['xyz_ips_msg']);
}
if($_POST)
{
    if(isset($_POST['search']))
    {
        if(!isset($_REQUEST['_wpnonce'])||!wp_verify_nonce($_REQUEST['_wpnonce'],'snipp-manage_') ){
            wp_nonce_ays( 'snipp-manage_' );
            exit;
        }
    }
    // if(isset($_POST['textFieldButton2']))
    // {
    //     if(!isset($_REQUEST['_wpnonce'])||!wp_verify_nonce($_REQUEST['_wpnonce'],'bulk_actions_ips') ){
    //         wp_nonce_ays( 'bulk_actions_ips' );
    //         exit;
    //     }
    // }
	if (isset($_POST['apply_ips_bulk_actions'])){
		if (isset($_POST['ips_bulk_actions_snippet'])){
			if(!isset($_REQUEST['_wpnonce'])||!wp_verify_nonce($_REQUEST['_wpnonce'],'bulk_actions_ips') )
    	{
            wp_nonce_ays( 'bulk_actions_ips' );
            exit;
        }
		$xyz_ips_snippet_ids = [];
			$ips_bulk_actions_snippet=$_POST['ips_bulk_actions_snippet'];
			if (isset($_POST['xyz_ips_snippet_ids']) && is_array($_POST['xyz_ips_snippet_ids']))
			$xyz_ips_snippet_ids = array_map('intval', $_POST['xyz_ips_snippet_ids']);
 				$xyz_ips_pageno = isset( $_GET['pagenum'] ) ? absint( $_GET['pagenum'] ) : 1;
 				if (empty($xyz_ips_snippet_ids))
				{
					wp_safe_redirect(admin_url('admin.php?page=insert-php-code-snippet-manage&xyz_ips_msg=8&pagenum='.$xyz_ips_pageno));
					exit();
				}
				if ($ips_bulk_actions_snippet==2)//bulk-delete
				{
					foreach ($xyz_ips_snippet_ids as $snippet_id)
					{
						$wpdb->query($wpdb->prepare( 'DELETE FROM  '.$wpdb->prefix.'xyz_ips_short_code  WHERE id=%d',$snippet_id)) ;
					}
					wp_safe_redirect(admin_url('admin.php?page=insert-php-code-snippet-manage&xyz_ips_msg=3&pagenum='.$xyz_ips_pageno));
					exit();
				}
				elseif ($ips_bulk_actions_snippet==0)//bulk-Deactivate
				{
					foreach ($xyz_ips_snippet_ids as $xyz_ips_snippetId)
						$wpdb->update($wpdb->prefix.'xyz_ips_short_code', array('status'=>2), array('id'=>$xyz_ips_snippetId));
						wp_safe_redirect(admin_url('admin.php?page=insert-php-code-snippet-manage&xyz_ips_msg=4&pagenum='.$xyz_ips_pageno));
						exit();
				}
				elseif ($ips_bulk_actions_snippet==1)//bulk-activate
				{
					foreach ($xyz_ips_snippet_ids as $xyz_ips_snippetId)
						$wpdb->update($wpdb->prefix.'xyz_ips_short_code', array('status'=>1), array('id'=>$xyz_ips_snippetId));
						wp_safe_redirect(admin_url('admin.php?page=insert-php-code-snippet-manage&xyz_ips_msg=4&pagenum='.$xyz_ips_pageno));
						exit();
				}
				elseif ($ips_bulk_actions_snippet==-1)//no action selected
				{
					wp_safe_redirect(admin_url('admin.php?page=insert-php-code-snippet-manage&xyz_ips_msg=7&pagenum='.$xyz_ips_pageno));
					exit();
				}
		}

}

}
if($xyz_ips_message == 1){

?>
<div class="xyz_ips_system_notice_area_style1" id="xyz_ips_system_notice_area">
<span id="system_notice_area_common_msg">
PHP Snippet successfully added.&nbsp;&nbsp;&nbsp;
</span>
<span
id="xyz_ips_system_notice_area_dismiss">Dismiss</span>
</div>
<?php

}
if($xyz_ips_message == 2){

?>
<div class="xyz_ips_system_notice_area_style0" id="xyz_ips_system_notice_area">
<span id="system_notice_area_common_msg">
PHP Snippet not found.&nbsp;&nbsp;&nbsp;
</span>
<span
id="xyz_ips_system_notice_area_dismiss">Dismiss</span>
</div>
<?php

}
if($xyz_ips_message == 3){

?>
<div class="xyz_ips_system_notice_area_style1" id="xyz_ips_system_notice_area">
<span id="system_notice_area_common_msg">
PHP Snippet successfully deleted.&nbsp;&nbsp;&nbsp;
</span>
<span
id="xyz_ips_system_notice_area_dismiss">Dismiss</span>
</div>
<?php

}
if($xyz_ips_message == 4){

?>
<div class="xyz_ips_system_notice_area_style1" id="xyz_ips_system_notice_area">
<span id="system_notice_area_common_msg">
PHP Snippet status successfully changed.&nbsp;&nbsp;&nbsp;
</span>
<span
id="xyz_ips_system_notice_area_dismiss">Dismiss</span>
</div>
<?php

}
if($xyz_ips_message == 5){

?>
<div class="xyz_ips_system_notice_area_style1" id="xyz_ips_system_notice_area">
<span id="system_notice_area_common_msg">
PHP Snippet successfully updated.&nbsp;&nbsp;&nbsp;
</span>
<span
id="xyz_ips_system_notice_area_dismiss">Dismiss</span>
</div>
<?php

}
if($xyz_ips_message == 7)
{
	?>
	<div class="xyz_ips_system_notice_area_style1" id="xyz_ips_system_notice_area">
	<span id="system_notice_area_common_msg">	Please select an action to apply.&nbsp;&nbsp;&nbsp;
	</span>	
		<span id="xyz_ips_system_notice_area_dismiss">Dismiss</span>
	</div>
<?php
}
if($xyz_ips_message == 8)
{
	?>
	<div class="xyz_ips_system_notice_area_style1" id="xyz_ips_system_notice_area">
	<span id="system_notice_area_common_msg">
		Please select at least one snippet to perform this action.&nbsp;&nbsp;&nbsp;
		</span>
		<span id="xyz_ips_system_notice_area_dismiss">Dismiss</span>
	</div>
<?php
}
?>

<div >

<form method="post">
	<?php wp_nonce_field( 'bulk_actions_ips');?>
		<fieldset
			style="width: 99%; border: 1px solid #F7F7F7; padding: 10px 0px;">
			<legend><h3>PHP Code Snippets</h3></legend>
			<?php
			global $wpdb;
 			$pagenum = isset( $_GET['pagenum'] ) ? absint( $_GET['pagenum'] ) : 1;
			$limit = get_option('xyz_ips_limit');
			$offset = ( $pagenum - 1 ) * $limit;

$field=get_option('xyz_ips_sort_field_name');
			$order=get_option('xyz_ips_sort_order');
			if(isset($_POST['snippet_name']))
			{
			$search_name=sanitize_text_field($_POST['snippet_name']);
			$search_name_db=esc_sql($search_name);
			}
			if(isset($_POST['insertionMethod']))
			{
				$insertionMethod =intval($_POST["insertionMethod"]); 
			}
			else
			{
				$insertionMethod =0;
			}
			$strInsertionMethod='';
			if (intval($insertionMethod)>0)
			{
			$strInsertionMethod=" AND insertionMethod=$insertionMethod";
			}

$entries = $wpdb->get_results( "SELECT * FROM ".$wpdb->prefix."xyz_ips_short_code  	WHERE title like '%".$search_name_db."%'".$strInsertionMethod." ORDER BY  $field $order LIMIT $offset,$limit" );

?>
			<input  id="xyz_ips_submit_ips"
				style="cursor: pointer; margin-bottom:10px; margin-left:8px;" type="button"
				name="textFieldButton2" value="Add New PHP Code Snippet"
				 onClick='document.location.href="<?php echo admin_url('admin.php?page=insert-php-code-snippet-manage&action=snippet-add');?>"'>
			<br>
<span style="padding-left: 6px;color:#21759B;">With Selected : </span>
 <select name="ips_bulk_actions_snippet" id="ips_bulk_actions_snippet" style="width:130px;height:29px;">
	<option value="-1">Bulk Actions</option>
	<option value="0">Deactivate</option>
	<option value="1">Activate</option>
	<option value="2">Delete</option>
</select>
<input type="submit" title="Apply" name="apply_ips_bulk_actions" value="Apply" style="color:#21759B;cursor:pointer;padding: 5px;background:linear-gradient(to top, #ECECEC, #F9F9F9) repeat scroll 0 0 #F1F1F1;border: 2px solid #DFDFDF;">
</form>

<table class="xyz-ips-manage-header">
	<tr>
		<td>
<form name="manage_snippets" action="" method="post">
							         <?php wp_nonce_field('snipp-manage_');?>
							<div class="xyz_ips_search_div"  style="float:right;">
				            	<table class="xyz_ips_search_div_table" style="width:100%;">
								&nbsp;&nbsp;

<span>Snippet Placement</span>&nbsp;
   <select name="insertionMethod" id="insertionMethod" >
  <option value="0" <?php if($insertionMethod==0) { echo "selected"; } ?>>All</option>
	  <option value="1" <?php if($insertionMethod==1) { echo "selected"; } ?>>Automatic</option>
	<option value="2" <?php if($insertionMethod==2) { echo "selected"; } ?>>Short Code</option>
	<option value="3" <?php if($insertionMethod==3) { echo "selected"; } ?>>Execute On Demand</option>
</select>
  &nbsp;&nbsp;
				                	<tr>
				                  		 	 <input type="text" name="snippet_name" value= "<?php if(isset($search_name)){echo esc_attr($search_name);}?>" placeholder="Search" >
				                   			<input type="submit" name="search" class="xyz-ips-go" value="Go" />
				              		</tr>
				           		</table>
	          				</div>
</form>

</td>
	</tr>
</table>
<table class="widefat" style="width: 99%; margin: 0 auto; border-bottom:none;">
	<thead>
		<tr>
		    <th scope="col" width="3%"><input type="checkbox" id="chkAllSnippets" /></th>
			<th scope="col" >Tracking Name</th>
			<th scope="col">Snippet Placement 
</th>
			<th scope="col" >Status</th>
			<th scope="col" colspan="4" style="text-align: center;">Action</th>
		</tr>
	</thead>
	<tbody>
		<?php
		if( !empty($entries) )//if( count($entries)>0 )
		 {
			$count=1;
			$class = '';
			foreach( $entries as $entry ) {
				$class = ( $count % 2 == 0 ) ? ' class="alternate"' : '';
				$snippetId=intval($entry->id);
				?>
		<tr <?php echo $class; ?>>
		<td style="vertical-align: middle !important;padding-left: 18px;">
		<input type="checkbox" class="chk" value="<?php echo $snippetId; ?>" name="xyz_ips_snippet_ids[]" id="xyz_ips_snippet_ids" />
		</td>
			<td id="xyz_ips_vAlign" title="<?php echo esc_attr($entry->description); ?>" ><?php
			echo esc_html($entry->title);
			?></td>
			<td>
				
				
			<?php if($entry->status == 2){
				echo 'NA';
			 } else{ 
				 echo ($entry->insertionMethod == 1) ? 'Automatic' : 
(($entry->insertionMethod == 2) ?  
'<span onclick=xyz_ips_copy_shortcode('.$entry->id.') class="xyz_ic_copy_shortcode"  id="xyz_ips_shortcode_'.$entry->id.'">[xyz-ips snippet="'.esc_html($entry->title).'"]</span>'.
'<span onclick=xyz_ips_copy_shortcode('.$entry->id.')><img class="xyz_ips_img xyz_ips_img_table" title="Click to copy" src="'.plugins_url('insert-php-code-snippet/images/copy-document.png').'"></span>'

:
 (($entry->insertionMethod == 3) ? 'Execute on demand'.'<img onclick=xyz_ips_execute_shortcode('.$entry->id.') class="xyz_ips_img xyz_ips_img_table" id="xyz_ips_img_execute_shortcode" title="Click to execute" src="'.plugins_url('xyz-wp-insert-code-snippet/images/play-button.png').'">':
'')); }?>
</td>
			<td id="xyz_ips_vAlign">
				<?php
					if($entry->status == 2){
						echo "Inactive";
					}elseif ($entry->status == 1){
					echo "Active";
					}

?>
			</td>
			<?php
					if($entry->status == 2){
						$stat1 = admin_url('admin.php?page=insert-php-code-snippet-manage&action=snippet-status&snippetId='.$snippetId.'&status=1&pageno='.$pagenum);
			?>
			<td style="text-align: center;"><a
				href='<?php echo wp_nonce_url($stat1,'ips-pstat_'.$snippetId); ?>'><img
					id="xyz_ips_img" title="Activate"
					src="<?php echo plugins_url('images/activate.png',XYZ_INSERT_PHP_PLUGIN_FILE)?>">
			</a>
			</td>
				<?php
					}elseif ($entry->status == 1){
						$stat2 = admin_url('admin.php?page=insert-php-code-snippet-manage&action=snippet-status&snippetId='.$snippetId.'&status=2&pageno='.$pagenum);
					?>
			<td style="text-align: center;"><a
				href='<?php echo wp_nonce_url($stat2,'ips-pstat_'.$snippetId); ?>'><img
					id="xyz_ips_img" title="Deactivate"
					src="<?php echo plugins_url('images/pause.png',XYZ_INSERT_PHP_PLUGIN_FILE)?>">
			</a>
			</td>
					<?php
					}

<?php $delurl = admin_url('admin.php?page=insert-php-code-snippet-manage&action=snippet-delete&snippetId='.$snippetId.'&pageno='.$pagenum);?>
			<td style="text-align: center;" ><a
				href='<?php echo wp_nonce_url($delurl,'ips-pdel_'.$snippetId); ?>'
				onclick="javascript: return confirm('Please click \'OK\' to confirm ');"><img
					id="xyz_ips_img" title="Delete Snippet"
					src="<?php echo plugins_url('images/delete.png',XYZ_INSERT_PHP_PLUGIN_FILE)?>">
			</a></td>

<?php
			$page_url =xyz_ips_get_link_by_slug('xyz-ics-preview-page');
			$page_url =add_query_arg( 'preview', 'true', $page_url );
			$page_url =add_query_arg( 'snippetId', $snippetId, $page_url );
			$prewurl =esc_url($page_url);
			?>
			<td style="text-align: center;" >
			<?php if($entry->insertionMethod ==2) {?>
				<a href='<?php echo $prewurl;?>' target="_blank">
					<img id="xyz_ips_img" title="Preview" src="<?php echo plugins_url('images/preview.png',XYZ_INSERT_PHP_PLUGIN_FILE)?>">
				</a>
				<?php }?>
			</td>
		</tr>
		<?php
		$count++;
			}
		} else { ?>
		<tr>
			<td colspan="7" >PHP Code Snippets not found</td>
		</tr>
		<?php } ?>
	</tbody>
</table>

<?php
			$total = $wpdb->get_var( "SELECT COUNT(`id`) FROM ".$wpdb->prefix."xyz_ips_short_code" );
			$num_of_pages = ceil( $total / $limit );

$page_links = paginate_links( array(
					'base' => add_query_arg( 'pagenum','%#%'),
				    'format' => '',
				    'prev_text' =>  '&laquo;',
				    'next_text' =>  '&raquo;',
				    'total' => $num_of_pages,
				    'current' => $pagenum
			) );

if ( $page_links ) {
				echo '<div class="tablenav" style="width:99%"><div class="tablenav-pages" style="margin: 1em 0">' . $page_links . '</div></div>';
			}

</fieldset>

</div>
<script type="text/javascript">
jQuery(document).ready(function(){
	jQuery("#chkAllSnippets").click(function(){
		jQuery(".chk").prop("checked",jQuery("#chkAllSnippets").prop("checked"));
    });
});
const xyz_ips_copy_shortcode = (id) => {

var span = document.getElementById("xyz_ips_shortcode_" + id);
    var tempTextarea = document.createElement("textarea");
    tempTextarea.value = span.textContent;
    document.body.appendChild(tempTextarea);
    tempTextarea.select();
    tempTextarea.setSelectionRange(0, 99999); // For mobile devices
    document.execCommand("copy");
    document.body.removeChild(tempTextarea);

(typeof xyz_ips_notice === 'function')? xyz_ips_notice('Short code copied successfully',1):null;

};

const xyz_ips_notice = (msg = '', flag = 0) => {

const noticeElement = jQuery('#xyz_ips_system_notice_area');
if (noticeElement.length > 0) 
{

jQuery('#system_notice_area_common_msg').text(msg);
  if (flag === 0) {
  if(noticeElement.hasClass('xyz_ips_system_notice_area_style1'))
  noticeElement.removeClass('xyz_ips_system_notice_area_style1')
  if(! noticeElement.hasClass('xyz_ips_system_notice_area_style0'))
  noticeElement.addClass('xyz_ips_system_notice_area_style0');

} else {
  if(noticeElement.hasClass('xyz_ips_system_notice_area_style0'))
  noticeElement.removeClass('xyz_ips_system_notice_area_style0')
  if(! noticeElement.hasClass('xyz_ips_system_notice_area_style1'))
  noticeElement.addClass('xyz_ips_system_notice_area_style1');

}
  noticeElement.animate({
    opacity: 'show',
    height: 'show'
  }, 500);

}
else{

let noticeElementString = 
  `<div class="xyz_ips_system_notice_area_style${flag}" id="xyz_ips_system_notice_area">
    <span id="system_notice_area_common_msg">${msg}.&nbsp;&nbsp;&nbsp;</span>
    <span id="xyz_ips_system_notice_area_dismiss">Dismiss</span>
  </div>`;

let noticeElement = jQuery(noticeElementString);
  jQuery('body').append(noticeElement);
  noticeElement.animate({
    opacity: 'show',
    height: 'show'
  }, 500);

}

};

function xyz_ips_execute_shortcode(id) {

var nonce= '<?php echo wp_create_nonce('xyz_ips_execute_shortcode');?>';
jQuery.ajax({
    url: ajaxurl, 
    type: 'POST',
    dataType: 'json',
    data: {
        action: 'xyz_ips_execute_shortcode', 
        _wpnonce: nonce,
        id: id
    },
    success: function(response) {
        if (response.status === 1) {
          xyz_ips_notice(response.message,1);

} else {
          xyz_ips_notice(response.message,0);
        }
    },
    error: function(xhr, status, error) {
      xyz_ips_notice('An error occurred: ' + error, 0);
    }
});
}
</script>