HEX
Server: Apache/2.4.65 (Debian)
System: Linux 88f31f35b0b8 6.1.0-38-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.147-1 (2025-08-02) x86_64
User: www-data (33)
PHP: 8.2.29
Disabled: NONE
Upload Files
File: /var/www/html/wp-content/plugins/publishpress/lib/Notifications/Shortcodes.php
<?php
/**
 * @package     PublishPress\Notifications
 * @author      PublishPress <help@publishpress.com>
 * @copyright   Copyright (c) 2022 PublishPress. All rights reserved.
 * @license     GPLv2 or later
 * @since       1.0.0
 */

namespace PublishPress\Notifications;

use Exception;
use PublishPress\Notifications\Traits\Dependency_Injector;
use PublishPress\Notifications\Traits\PublishPress_Module;
use WP_Post;

class Shortcodes
{
    use Dependency_Injector;
    use PublishPress_Module;

    /**
     * The post of the workflow.
     *
     * @var WP_Post
     */
    protected $workflow_post;

    /**
     * An array with arguments set by the action
     *
     * @var array
     */
    protected $event_args;

    /**
     * @var mixed
     */
    protected $cache_receiver;

    /**
     * Shortcodes constructor.
     */
    public function __construct()
    {
        add_action('publishpress_workflow_do_shortcode_in_content', [$this, 'setReceiverForShortcode'], 10, 2);
    }

    /**
     * Adds the shortcodes to replace text
     *
     * @param WP_Post $workflow_post
     * @param array $event_args
     */
    public function register($workflow_post, $event_args)
    {
        $this->set_properties($workflow_post, $event_args);

        add_shortcode('psppno_actor', [$this, 'handle_psppno_actor']);
        add_shortcode('psppno_post', [$this, 'handle_psppno_post']);
        add_shortcode('psppno_workflow', [$this, 'handle_psppno_workflow']);
        add_shortcode('psppno_edcomment', [$this, 'handle_psppno_edcomment']);
        add_shortcode('psppno_receiver', [$this, 'handle_psppno_receiver']);
    }

    /**
     * Set the instance properties
     *
     * @param WP_Post $workflow_post
     * @param array $event_args
     */
    protected function set_properties($workflow_post, $event_args)
    {
        $this->workflow_post = $workflow_post;
        $this->event_args    = $event_args;
    }

    /**
     * Returns the user who triggered the workflow for notification.
     * You can specify which user's property should be printed:
     *
     * [psppno_actor display_name]
     *
     * @param array $attrs
     *
     * @return string
     */
    public function handle_psppno_actor($attrs)
    {
        $user = $this->get_actor();

        return $this->get_user_data($user, $attrs);
    }

    /**
     * Returns the current user, the actor of the action
     *
     * @return bool|WP_User
     */
    protected function get_actor()
    {
        return get_user_by('ID', $this->event_args['user_id']);
    }

    /**
     * Returns the user's info. You can specify which user's property should be
     * printed passing that on the $attrs.
     *
     * If more than one attribute is given, we returns all the data
     * separated by comma (default) or specified separator, in the order it was
     * received.
     *
     * If no attribute is provided, we use display_name as default.
     *
     * Accepted attributes:
     *   - id
     *   - login
     *   - url
     *   - display_name
     *   - first_name
     *   - last_name
     *   - email
     *   - separator
     *
     * @param WP_User $user
     * @param array $attrs
     *
     * @return string
     */
    protected function get_user_data($user, $attrs)
    {
        if (!is_array($attrs)) {
            if (!empty($attrs)) {
                $attrs[] = $attrs;
            } else {
                $attrs = [];
            }
        }

        // No attributes? Set the default one.
        if (empty($attrs)) {
            $attrs[] = 'display_name';
        }

        // Set the separator
        if (!isset($attrs['separator'])) {
            $attrs['separator'] = ', ';
        }

        // Get the user's info
        $info = [];

        foreach ($attrs as $index => $field) {
            $data = $this->get_user_field($user, $field, $attrs);

            if (false !== $data) {
                $info[] = $data;
            }
        }

        return implode($attrs['separator'], $info);
    }

    private function get_user_field($user, $field, $attrs)
    {
        $result = false;

        if (empty($field)) {
            $field = 'name';
        }

        switch ($field) {
            case 'id':
                $result = $user->ID;
                break;

            case 'login':
                $result = $user->user_login;
                break;

            case 'url':
                $result = $user->user_url;
                break;

            case 'name':
            case 'display_name':
                $result = $user->display_name;
                break;

            case 'first_name':
                $result = $user->first_name;
                break;

            case 'last_name':
                $result = $user->last_name;
                break;

            case 'email':
                $result = $user->user_email;
                break;

            default:
                if ($custom = apply_filters(
                    'publishpress_notif_shortcode_user_data',
                    false,
                    $field,
                    $user,
                    $attrs
                )) {
                    $result = $custom;
                }
                break;
        }

        return $result;
    }

    /**
     * Returns data from the receiver, if available.
     * Available attributes:
     *   - name (display_name - default)
     *   - email
     *   - first_name
     *   - last_name
     *   - login
     *   - nickname
     *
     * [psppno_receiver name]
     *
     * @param array $attrs
     *
     * @return string
     */
    public function handle_psppno_receiver($attrs)
    {
        $receiver = $this->cache_receiver;

        // Decide what field to display.
        if (empty($attrs)) {
            $field = 'name';
        } else {
            $whitelist = [
                'name',
                'email',
                'first_name',
                'last_name',
                'login',
                'nickname',
            ];

            if (in_array($attrs[0], $whitelist)) {
                $field = $attrs[0];
            } else {
                $field = 'name';
            }
        }

        if (is_numeric($receiver)) {
            // Do we have an user?
            $user   = get_user_by('id', $receiver);
            $result = '';

            switch ($field) {
                case 'name':
                    $result = $user->display_name;
                    break;

                case 'first_name':
                    $result = $user->first_name;
                    break;

                case 'last_name':
                    $result = $user->last_name;
                    break;

                case 'login':
                    $result = $user->user_login;
                    break;

                case 'nickname':
                    $result = $user->nickname;
                    break;

                default:
                    $result = $user->user_email;
                    break;
            }

            if (empty($result)) {
                $result = $user->display_name;
            }
        } else {
            $result = $receiver;

            // Do we have an email address?
            if (strpos($receiver, '@') > 0) {
                // Do we have a name?
                $separatorPos = strpos($receiver, '/');
                if ($separatorPos > 0) {
                    if (in_array('name', $attrs)) {
                        $result = substr($receiver, 0, $separatorPos);
                    } else {
                        $result = substr($receiver, $separatorPos + 1, strlen($receiver));
                    }
                }
            }
        }

        return $result;
    }

    /**
     * Returns the info from the post related to the notification.
     * You can specify which post's property should be printed:
     *
     * [psppno_post title]
     *
     * If no attribute is provided, we use title as default.
     *
     * Accepted attributes:
     *   - id
     *   - title
     *   - url
     *
     * @param array $attrs
     *
     * @return string
     */
    public function handle_psppno_post($attrs)
    {
        $post = $this->get_post();

        return $this->get_post_data($post, $attrs);
    }

    /**
     * Returns the post related to the notification.
     *
     * @return WP_Post
     */
    protected function get_post()
    {
        return get_post($this->event_args['params']['post_id']);
    }

    /**
     * Returns the post's info. You can specify which post's property should be
     * printed passing that on the $attrs.
     *
     * If more than one attribute is given, we returns all the data
     * separated by comma (default) or specified separator, in the order it was
     * received.
     *
     * If no attribute is provided, we use title as default.
     *
     * Accepted attributes:
     *   - id
     *   - title
     *   - permalink
     *   - date
     *   - time
     *   - old_status
     *   - new_status
     *   - separator
     *   - edit_link
     *
     * @param WP_Post $post
     * @param array $attrs
     *
     * @return string
     * @throws Exception
     *
     */
    protected function get_post_data($post, $attrs)
    {
        // No attributes? Set the default one.
        if (empty($attrs)) {
            $attrs = ['title'];
        }

        // Set the separator
        if (!isset($attrs['separator'])) {
            $attrs['separator'] = ', ';
        }

        // Get the post's info
        $info = [];

        foreach ($attrs as $field) {
            $data = $this->get_post_field($post, $field, $attrs);

            if (false !== $data) {
                $info[] = $data;
            }
        }

        return implode($attrs['separator'], $info);
    }

    private function get_post_field($post, $field, $attrs)
    {
        $publishpress = $this->get_service('publishpress');

        $result = false;

        if (is_null($field)) {
            $field = 'title';
        }

        switch ($field) {
            case 'id':
                $result = $post->ID;
                break;

            case 'title':
                $result = $post->post_title;
                break;

            case 'post_type':
                $postType = get_post_type_object($post->post_type);

                if (!empty($postType) && !is_wp_error($postType)) {
                    $result = $postType->labels->singular_name;
                }
                break;

            case 'permalink':
                $result = get_permalink($post->ID);
                break;

            case 'date':
                $result = get_the_date('', $post);
                break;

            case 'time':
                $result = get_the_time('', $post);
                break;

            case 'old_status':
            case 'new_status':
                $status_name = apply_filters('publishpress_notifications_status', $this->event_args['params'][$field], $post);

                $status = $publishpress->getPostStatusBy(
                    'slug',
                    $status_name
                );

                if (empty($status) || 'WP_Error' === get_class($status)) {
                    break;
                }

                $result = $status->label;
                break;

            case 'content':
                $result = $post->post_content;
                break;

            case 'excerpt':
                $result = $post->post_excerpt;
                break;

            case 'edit_link':
                $admin_path = 'post.php?post=' . $post->ID . '&action=edit';
                $result     = htmlspecialchars_decode(admin_url($admin_path));
                break;

            case 'author_display_name':
            case 'author_email':
            case 'author_login':
                $author_data = get_userdata($post->post_author);

                $field_map = [
                    'author_display_name' => 'display_name',
                    'author_email'        => 'user_email',
                    'author_login'        => 'user_login',
                ];

                $user_field = $field_map[$field];
                $data       = $author_data->{$user_field};

                $result = apply_filters('pp_get_author_data', $data, $field, $post);
                break;

            default:
                // Meta data attribute
                if (0 === strpos($field, 'meta')) {
                    $arr = explode(':', $field);
                    if (!empty($arr[1])) {
                        if (substr_count($arr[1], '.')) {
                            $meta_fragments = explode('.', $arr[1]);

                            $meta_name      = $meta_fragments[0];
                            $meta_sub_field = $meta_fragments[1];
                        } else {
                            $meta_name      = $arr[1];
                            $meta_sub_field = null;
                        }

                        $meta = get_post_meta($post->ID, $meta_name, true);
                        if ($meta && is_scalar($meta)) {
                            if ('meta-date' == $arr[0]) {
                                $result = date_i18n(get_option('date_format'), $meta);
                            } elseif ('meta-relationship' == $arr[0] || 'meta-post' == $arr[0]) {
                                $rel_post = get_post((int)$meta);

                                if (!empty($rel_post) && !is_wp_error($rel_post)) {
                                    $result = $this->get_post_field($rel_post, $meta_sub_field, $attrs);
                                }
                            } elseif ('meta-user' == $arr[0] || strpos($meta_name, '_pp_editorial_meta_user') === 0) {
                                $rel_user = get_user_by('ID', (int)$meta);

                                if (!empty($rel_user) && !is_wp_error($rel_user)) {
                                    $result = $this->get_user_field($rel_user, $meta_sub_field, $attrs);
                                }
                            } else {
                                $result = $meta;
                            }
                        } elseif (is_array($meta)) {
                            if (!empty($meta)) {
                                switch ($arr[0]) {
                                    case 'meta-post':
                                    case 'meta-relationship':
                                        if (is_null($meta_sub_field)) {
                                            $meta_sub_field = 'title';
                                        }

                                        $rel_result = [];

                                        foreach ($meta as $rel_post_ID) {
                                            $rel_post = get_post($rel_post_ID);

                                            if (!empty($rel_post) && !is_wp_error($rel_post)) {
                                                $rel_result[] = $this->get_post_field($rel_post, $meta_sub_field, $attrs);
                                            }
                                        }

                                        if (!empty($rel_result)) {
                                            $result = implode($attrs['separator'], $rel_result);
                                        }
                                        break;

                                    case 'meta-link':
                                        $result = sprintf(
                                            '<a href="%s" target="%s">%s</a>',
                                            $meta['url'],
                                            $meta['target'],
                                            $meta['title']
                                        );
                                        break;

                                    case 'meta-term':
                                        if (is_null($meta_sub_field)) {
                                            $meta_sub_field = 'name';
                                        }

                                        $rel_result = [];

                                        foreach ($meta as $rel_term_ID) {
                                            $rel_term = get_term($rel_term_ID);

                                            if (!empty($rel_term) && !is_wp_error($rel_term)) {
                                                $rel_result[] = $this->get_term_field($rel_term, $meta_sub_field, $attrs);
                                            }
                                        }

                                        if (!empty($rel_result)) {
                                            $result = implode($attrs['separator'], $rel_result);
                                        }
                                        break;

                                    case 'meta-user':
                                        if (is_null($meta_sub_field)) {
                                            $meta_sub_field = 'name';
                                        }

                                        $rel_result = [];

                                        foreach ($meta as $rel_user_ID) {
                                            $rel_user = get_user_by('ID', $rel_user_ID);

                                            if (!empty($rel_user) && !is_wp_error($rel_user)) {
                                                $rel_result[] = $this->get_user_field($rel_user, $meta_sub_field, $attrs);
                                            }
                                        }

                                        if (!empty($rel_result)) {
                                            $result = implode($attrs['separator'], $rel_result);
                                        }
                                        break;
                                }
                            }
                        }
                    }
                } else {
                    if ($custom = apply_filters(
                        'publishpress_notif_shortcode_post_data',
                        false,
                        $field,
                        $post,
                        $attrs
                    )) {
                        $result = $custom;
                    }
                }

                break;
        }

        return $result;
    }

    private function get_term_field($term, $field, $attrs)
    {
        $result = false;

        if (is_null($field)) {
            $field = 'name';
        }

        switch ($field) {
            case 'id':
                $result = $term->term_id;
                break;

            case 'name':
                $result = $term->name;
                break;

            case 'slug':
                $result = $term->slug;
                break;

            default:
                if ($custom = apply_filters(
                    'publishpress_notif_shortcode_term_data',
                    false,
                    $field,
                    $term,
                    $attrs
                )) {
                    $result = $custom;
                }
        }

        return $result;
    }

    /**
     * Returns the info from the post related to the workflow.
     * You can specify which workflow's property should be printed:
     *
     * [psppno_workflow title]
     *
     * If no attribute is provided, we use title as default.
     *
     * Accepted attributes:
     *   - id
     *   - title
     *
     * @param array $attrs
     *
     * @return string
     */
    public function handle_psppno_workflow($attrs)
    {
        if (is_string($attrs)) {
            $attrs = [$attrs];
        }

        $post = $this->workflow_post;

        // No attributes? Set the default one.
        if (empty($attrs) || empty($attrs[0])) {
            $attrs[] = 'title';
        }

        // Set the separator
        if (!isset($attrs['separator'])) {
            $attrs['separator'] = ', ';
        }

        // Get the post's info
        $info = [];

        foreach ($attrs as $index => $item) {
            switch ($item) {
                case 'id':
                    $info[] = $post->ID;
                    break;

                case 'title':
                    $info[] = $post->post_title;
                    break;

                default:
                    break;
            }
        }

        return implode($attrs['separator'], $info);
    }

    /**
     * Returns the info from the comment related to the workflow.
     * You can specify which comment's property should be printed:
     *
     * [psppno_comment content]
     *
     * If no attribute is provided, we use content as default.
     *
     * Accepted attributes:
     *   - id
     *   - content
     *   - author
     *   - author_email
     *   - author_url
     *   - author_ip
     *   - date
     *
     * @param array $attrs
     *
     * @return string
     */
    public function handle_psppno_edcomment($attrs)
    {
        // No attributes? Set the default one.
        if (empty($attrs)) {
            $attrs   = [];
            $attrs[] = 'content';
        }

        // Set the separator
        if (!isset($attrs['separator'])) {
            $attrs['separator'] = ', ';
        }

        // Set the number of comments to return
        if (!isset($attrs['number'])) {
            $attrs['number'] = 1;
        } else {
            $attrs['number'] = (int)$attrs['number'];
        }

        if (empty($attrs['number'])) {
            $attrs['number'] = 1;
        }

        $post = $this->get_post();

        if (!empty($post) && !is_wp_error($post)) {
            $comments = get_comments(
                [
                    'post_id' => $post->ID,
                    'status'  => 'editorial-comment',
                    'number'  => $attrs['number'],
                    'orderby' => 'comment_post_ID',
                    'order'   => 'DESC',
                ]
            );

            if (!empty($comments) && !is_wp_error($comments)) {
                $commentIds = [];

                foreach ($comments as $comment) {
                    $commentIds[] = $this->parse_comment($comment, $attrs);
                }

                $commentIds = array_reverse($commentIds);

                return implode('<br /><br />', $commentIds);
            }
        }

        return '';
    }

    private function parse_comment($comment, $attrs) {
        // Get the post's info
        $info = [];

        foreach ($attrs as $index => $item) {
            switch ($item) {
                case 'id':
                    $info[] = $comment->comment_ID;
                    break;

                case 'content':
                    $info[] = $comment->comment_content;
                    break;

                case 'author':
                    $info[] = $comment->comment_author;
                    break;

                case 'author_email':
                    $info[] = $comment->comment_author_email;
                    break;

                case 'author_url':
                    $info[] = $comment->comment_author_url;
                    break;

                case 'author_ip':
                    if (isset($comment->comment_author_ip)) {
                        $info[] = $comment->comment_author_ip;
                    } else {
                        $info[] = $comment->comment_author_IP;
                    }

                    break;

                case 'date':
                    $info[] = $comment->comment_date;
                    break;

                default:
                    break;
            }
        }

        return implode($attrs['separator'], $info);
    }

    /**
     * @param string $content
     * @param mixed $receiver
     */
    public function setReceiverForShortcode($content, $receiver)
    {
        $this->cache_receiver = $receiver;
    }

    /**
     * Removes the shortcodes
     */
    public function unregister()
    {
        remove_shortcode('psppno_actor');
        remove_shortcode('psppno_post');
        remove_shortcode('psppno_workflow');
        remove_shortcode('psppno_edcomment');
        remove_shortcode('psppno_receiver');

        $this->cleanup();
    }

    /**
     * Cleanup the data
     */
    protected function cleanup()
    {
        $this->workflow_post = null;
        $this->event_args    = null;
    }
}