page_type) there will be constructed an url part, for subpages and
* navigation.
*
* @var string
*/
protected $page_url;
/**
* The settings which will be used in the __construct.
*
* @var array
*/
protected $settings;
/**
* Holds the pagination config.
*
* @var array
*/
protected $pagination = array();
/**
* Holds the sanitized data from the user input.
*
* @var array
*/
protected $input_fields = array();
/**
* Class constructor.
*
* @param array $args The arguments.
*/
public function __construct( $args = array() ) {
parent::__construct( $this->settings );
$args = wp_parse_args(
$args,
array(
'nonce' => '',
'input_fields' => array(),
)
);
$this->input_fields = $args['input_fields'];
if ( isset( $_SERVER['REQUEST_URI'] ) ) {
$this->request_url = sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ) );
}
$this->current_page = ( ! empty( $this->input_fields['paged'] ) ) ? $this->input_fields['paged'] : 1;
$this->current_filter = ( ! empty( $this->input_fields['post_type_filter'] ) ) ? $this->input_fields['post_type_filter'] : 1;
$this->current_status = ( ! empty( $this->input_fields['post_status'] ) ) ? $this->input_fields['post_status'] : 1;
$this->current_order = array(
'order' => ( ! empty( $this->input_fields['order'] ) ) ? $this->input_fields['order'] : 'asc',
'orderby' => ( ! empty( $this->input_fields['orderby'] ) ) ? $this->input_fields['orderby'] : 'post_title',
);
$this->nonce = $args['nonce'];
$this->page_url = "&nonce={$this->nonce}&type={$this->page_type}#top#{$this->page_type}";
$this->populate_editable_post_types();
}
/**
* Prepares the data and renders the page.
*/
public function show_page() {
$this->prepare_page_navigation();
$this->prepare_items();
$this->views();
$this->display();
}
/**
* Used in the constructor to build a reference list of post types the current user can edit.
*/
protected function populate_editable_post_types() {
$post_types = get_post_types(
array(
'public' => true,
'exclude_from_search' => false,
),
'object'
);
$this->all_posts = array();
$this->own_posts = array();
if ( is_array( $post_types ) && $post_types !== array() ) {
foreach ( $post_types as $post_type ) {
if ( ! current_user_can( $post_type->cap->edit_posts ) ) {
continue;
}
if ( current_user_can( $post_type->cap->edit_others_posts ) ) {
$this->all_posts[] = esc_sql( $post_type->name );
}
else {
$this->own_posts[] = esc_sql( $post_type->name );
}
}
}
}
/**
* Will show the navigation for the table like pagenavigation and pagefilter.
*
* @param string $which Table nav location (such as top).
*/
public function display_tablenav( $which ) {
$post_status = sanitize_text_field( filter_input( INPUT_GET, 'post_status' ) );
?>
prepare(),
* passing the current user_id in as the first parameter.
*/
public function get_base_subquery() {
global $wpdb;
$all_posts_string = "'" . implode( "', '", $this->all_posts ) . "'";
$own_posts_string = "'" . implode( "', '", $this->own_posts ) . "'";
$post_author = esc_sql( (int) get_current_user_id() );
$subquery = "(
SELECT *
FROM {$wpdb->posts}
WHERE post_type IN ({$all_posts_string})
UNION ALL
SELECT *
FROM {$wpdb->posts}
WHERE post_type IN ({$own_posts_string}) AND post_author = {$post_author}
) sub_base";
return $subquery;
}
/**
* Gets the views.
*
* @return array The views.
*/
public function get_views() {
global $wpdb;
$status_links = array();
$states = get_post_stati( array( 'show_in_admin_all_list' => true ) );
$states = esc_sql( $states );
$all_states = "'" . implode( "', '", $states ) . "'";
$subquery = $this->get_base_subquery();
$total_posts = $wpdb->get_var(
"
SELECT COUNT(ID) FROM {$subquery}
WHERE post_status IN ({$all_states})
"
);
$post_status = filter_input( INPUT_GET, 'post_status' );
$current_link_attributes = empty( $post_status ) ? ' class="current" aria-current="page"' : '';
$localized_text = sprintf(
/* translators: %s expands to the number of posts in localized format. */
_nx( 'All (%s)', 'All (%s)', $total_posts, 'posts', 'wordpress-seo' ),
number_format_i18n( $total_posts )
);
$status_links['all'] = '' . $localized_text . '';
$post_stati = get_post_stati( array( 'show_in_admin_all_list' => true ), 'objects' );
if ( is_array( $post_stati ) && $post_stati !== array() ) {
foreach ( $post_stati as $status ) {
$status_name = esc_sql( $status->name );
$total = (int) $wpdb->get_var(
$wpdb->prepare(
"
SELECT COUNT(ID) FROM {$subquery}
WHERE post_status = %s
",
$status_name
)
);
if ( $total === 0 ) {
continue;
}
$current_link_attributes = '';
if ( $status_name === $post_status ) {
$current_link_attributes = ' class="current" aria-current="page"';
}
$status_links[ $status_name ] = '' . sprintf( translate_nooped_plural( $status->label_count, $total ), number_format_i18n( $total ) ) . '';
}
}
unset( $post_stati, $status, $status_name, $total, $current_link_attributes );
$trashed_posts = $wpdb->get_var(
"
SELECT COUNT(ID) FROM {$subquery}
WHERE post_status IN ('trash')
"
);
$current_link_attributes = '';
if ( 'trash' === $post_status ) {
$current_link_attributes = 'class="current" aria-current="page"';
}
$localized_text = sprintf(
/* translators: %s expands to the number of trashed posts in localized format. */
_nx( 'Trash (%s)', 'Trash (%s)', $trashed_posts, 'posts', 'wordpress-seo' ),
number_format_i18n( $trashed_posts )
);
$status_links['trash'] = '' . $localized_text . '';
return $status_links;
}
/**
* Outputs extra table navigation.
*
* @param string $which Table nav location (such as top).
*/
public function extra_tablenav( $which ) {
if ( 'top' === $which ) {
$post_types = get_post_types(
array(
'public' => true,
'exclude_from_search' => false,
)
);
$instance_type = esc_attr( $this->page_type );
if ( is_array( $post_types ) && $post_types !== array() ) {
global $wpdb;
echo '';
$post_types = esc_sql( $post_types );
$post_types = "'" . implode( "', '", $post_types ) . "'";
$states = get_post_stati( array( 'show_in_admin_all_list' => true ) );
$states['trash'] = 'trash';
$states = esc_sql( $states );
$all_states = "'" . implode( "', '", $states ) . "'";
$subquery = $this->get_base_subquery();
$post_types = $wpdb->get_results(
"
SELECT DISTINCT post_type FROM {$subquery}
WHERE post_status IN ({$all_states})
ORDER BY 'post_type' ASC
"
);
$post_type_filter = filter_input( INPUT_GET, 'post_type_filter' );
$selected = ( ! empty( $post_type_filter ) ) ? sanitize_text_field( $post_type_filter ) : '-1';
$options = '';
if ( is_array( $post_types ) && $post_types !== array() ) {
foreach ( $post_types as $post_type ) {
$obj = get_post_type_object( $post_type->post_type );
$options .= sprintf(
'',
esc_html( $obj->labels->name ),
esc_attr( $post_type->post_type ),
selected( $selected, $post_type->post_type, false )
);
}
}
printf(
'',
esc_attr( 'post-type-filter-' . $instance_type ),
esc_html__( 'Filter by content type', 'wordpress-seo' )
);
printf(
'',
// phpcs:ignore WordPress.Security.EscapeOutput -- Reason: $options is properly escaped above.
$options,
esc_attr( 'post-type-filter-' . $instance_type )
);
submit_button( esc_html__( 'Filter', 'wordpress-seo' ), 'button', false, false, array( 'id' => 'post-query-submit' ) );
echo '
';
}
}
}
/**
* Gets a list of sortable columns.
*
* The format is: 'internal-name' => array( 'orderby', bool ).
*
* @return array
*/
public function get_sortable_columns() {
return array(
'col_page_title' => array( 'post_title', true ),
'col_post_type' => array( 'post_type', false ),
'col_post_date' => array( 'post_date', false ),
);
}
/**
* Sets the correct pagenumber and pageurl for the navigation.
*/
public function prepare_page_navigation() {
$request_url = $this->request_url . $this->page_url;
$current_page = $this->current_page;
$current_filter = $this->current_filter;
$current_status = $this->current_status;
$current_order = $this->current_order;
/*
* If current type doesn't compare with objects page_type, then we have to unset
* some vars in the requested url (which will be used for internal table urls).
*/
if ( isset( $this->input_fields['type'] ) && $this->input_fields['type'] !== $this->page_type ) {
$request_url = remove_query_arg( 'paged', $request_url ); // Page will be set with value 1 below.
$request_url = remove_query_arg( 'post_type_filter', $request_url );
$request_url = remove_query_arg( 'post_status', $request_url );
$request_url = remove_query_arg( 'orderby', $request_url );
$request_url = remove_query_arg( 'order', $request_url );
$request_url = add_query_arg( 'pages', 1, $request_url );
$current_page = 1;
$current_filter = '-1';
$current_status = '';
$current_order = array(
'orderby' => 'post_title',
'order' => 'asc',
);
}
$_SERVER['REQUEST_URI'] = $request_url;
$_GET['paged'] = $current_page;
$_REQUEST['paged'] = $current_page;
$_REQUEST['post_type_filter'] = $current_filter;
$_GET['post_type_filter'] = $current_filter;
$_GET['post_status'] = $current_status;
$_GET['orderby'] = $current_order['orderby'];
$_GET['order'] = $current_order['order'];
}
/**
* Preparing the requested pagerows and setting the needed variables.
*/
public function prepare_items() {
$post_type_clause = $this->get_post_type_clause();
$all_states = $this->get_all_states();
$subquery = $this->get_base_subquery();
// Setting the column headers.
$this->set_column_headers();
// Count the total number of needed items and setting pagination given $total_items.
$total_items = $this->count_items( $subquery, $all_states, $post_type_clause );
$this->set_pagination( $total_items );
// Getting items given $query.
$query = $this->parse_item_query( $subquery, $all_states, $post_type_clause );
$this->get_items( $query );
// Get the metadata for the current items ($this->items).
$this->get_meta_data();
}
/**
* Getting the columns for first row.
*
* @return array
*/
public function get_columns() {
return $this->merge_columns();
}
/**
* Setting the column headers.
*/
protected function set_column_headers() {
$columns = $this->get_columns();
$hidden = array();
$sortable = $this->get_sortable_columns();
$this->_column_headers = array( $columns, $hidden, $sortable );
}
/**
* Counting total items.
*
* @param string $subquery SQL FROM part.
* @param string $all_states SQL IN part.
* @param string $post_type_clause SQL post type part.
*
* @return mixed
*/
protected function count_items( $subquery, $all_states, $post_type_clause ) {
global $wpdb;
$total_items = $wpdb->get_var(
"
SELECT COUNT(ID)
FROM {$subquery}
WHERE post_status IN ({$all_states}) $post_type_clause
"
);
return $total_items;
}
/**
* Getting the post_type_clause filter.
*
* @return string
*/
protected function get_post_type_clause() {
// Filter Block.
$post_types = null;
$post_type_clause = '';
$post_type_filter = filter_input( INPUT_GET, 'post_type_filter' );
if ( ! empty( $post_type_filter ) && get_post_type_object( sanitize_text_field( $post_type_filter ) ) ) {
$post_types = esc_sql( sanitize_text_field( $post_type_filter ) );
$post_type_clause = "AND post_type IN ('{$post_types}')";
}
return $post_type_clause;
}
/**
* Setting the pagination.
*
* Total items is the number of all visible items.
*
* @param int $total_items Total items counts.
*/
protected function set_pagination( $total_items ) {
// Calculate items per page.
$per_page = $this->get_items_per_page( 'wpseo_posts_per_page', 10 );
$paged = esc_sql( sanitize_text_field( filter_input( INPUT_GET, 'paged' ) ) );
if ( empty( $paged ) || ! is_numeric( $paged ) || $paged <= 0 ) {
$paged = 1;
}
$this->set_pagination_args(
array(
'total_items' => $total_items,
'total_pages' => ceil( $total_items / $per_page ),
'per_page' => $per_page,
)
);
$this->pagination = array(
'per_page' => $per_page,
'offset' => ( $paged - 1 ) * $per_page,
);
}
/**
* Parse the query to get items from database.
*
* Based on given parameters there will be parse a query which will get all the pages/posts and other post_types
* from the database.
*
* @param string $subquery SQL FROM part.
* @param string $all_states SQL IN part.
* @param string $post_type_clause SQL post type part.
*
* @return string
*/
protected function parse_item_query( $subquery, $all_states, $post_type_clause ) {
// Order By block.
$orderby = filter_input( INPUT_GET, 'orderby' );
$orderby = ! empty( $orderby ) ? esc_sql( sanitize_text_field( $orderby ) ) : 'post_title';
$orderby = $this->sanitize_orderby( $orderby );
// Order clause.
$order = filter_input( INPUT_GET, 'order' );
$order = ! empty( $order ) ? esc_sql( strtoupper( sanitize_text_field( $order ) ) ) : 'ASC';
$order = $this->sanitize_order( $order );
// Get all needed results.
$query = "
SELECT ID, post_title, post_type, post_status, post_modified, post_date
FROM {$subquery}
WHERE post_status IN ({$all_states}) $post_type_clause
ORDER BY {$orderby} {$order}
LIMIT %d,%d
";
return $query;
}
/**
* Heavily restricts the possible columns by which a user can order the table
* in the bulk editor, thereby preventing a possible CSRF vulnerability.
*
* @param string $orderby The column by which we want to order.
*
* @return string $orderby
*/
protected function sanitize_orderby( $orderby ) {
$valid_column_names = array(
'post_title',
'post_type',
'post_date',
);
if ( in_array( $orderby, $valid_column_names, true ) ) {
return $orderby;
}
return 'post_title';
}
/**
* Makes sure the order clause is always ASC or DESC for the bulk editor table,
* thereby preventing a possible CSRF vulnerability.
*
* @param string $order Whether we want to sort ascending or descending.
*
* @return string $order SQL order string (ASC, DESC).
*/
protected function sanitize_order( $order ) {
if ( in_array( strtoupper( $order ), array( 'ASC', 'DESC' ), true ) ) {
return $order;
}
return 'ASC';
}
/**
* Getting all the items.
*
* @param string $query SQL query to use.
*/
protected function get_items( $query ) {
global $wpdb;
$this->items = $wpdb->get_results(
$wpdb->prepare(
$query,
$this->pagination['offset'],
$this->pagination['per_page']
)
);
}
/**
* Getting all the states.
*
* @return string
*/
protected function get_all_states() {
$states = get_post_stati( array( 'show_in_admin_all_list' => true ) );
$states['trash'] = 'trash';
if ( ! empty( $this->input_fields['post_status'] ) ) {
$requested_state = $this->input_fields['post_status'];
if ( in_array( $requested_state, $states, true ) ) {
$states = array( $requested_state );
}
if ( $requested_state !== 'trash' ) {
unset( $states['trash'] );
}
}
$states = esc_sql( $states );
$all_states = "'" . implode( "', '", $states ) . "'";
return $all_states;
}
/**
* Based on $this->items and the defined columns, the table rows will be displayed.
*/
public function display_rows() {
$records = $this->items;
list( $columns, $hidden, $sortable, $primary ) = $this->get_column_info();
if ( ( is_array( $records ) && $records !== array() ) && ( is_array( $columns ) && $columns !== array() ) ) {
foreach ( $records as $rec ) {
echo '';
foreach ( $columns as $column_name => $column_display_name ) {
$classes = '';
if ( $primary === $column_name ) {
$classes .= ' has-row-actions column-primary';
}
$attributes = $this->column_attributes( $column_name, $hidden, $classes, $column_display_name );
$column_value = $this->parse_column( $column_name, $rec );
if ( method_exists( $this, 'parse_page_specific_column' ) && empty( $column_value ) ) {
$column_value = $this->parse_page_specific_column( $column_name, $rec, $attributes );
}
if ( ! empty( $column_value ) ) {
printf( '| %1$s | ', $column_value, $attributes );
}
}
echo '
';
}
}
}
/**
* Getting the attributes for each table cell.
*
* @param string $column_name Column name string.
* @param array $hidden Set of hidden columns.
* @param string $classes Additional CSS classes.
* @param string $column_display_name Column display name string.
*
* @return string
*/
protected function column_attributes( $column_name, $hidden, $classes, $column_display_name ) {
$attributes = '';
$class = array( $column_name, "column-$column_name$classes" );
if ( in_array( $column_name, $hidden, true ) ) {
$class[] = 'hidden';
}
if ( ! empty( $class ) ) {
$attributes = 'class="' . esc_attr( implode( ' ', $class ) ) . '"';
}
$attributes .= ' data-colname="' . esc_attr( $column_display_name ) . '"';
return $attributes;
}
/**
* Parsing the title.
*
* @param WP_Post $rec Post object.
*
* @return string
*/
protected function parse_page_title_column( $rec ) {
$title = empty( $rec->post_title ) ? __( '(no title)', 'wordpress-seo' ) : $rec->post_title;
$return = sprintf( '%1$s', stripslashes( wp_strip_all_tags( $title ) ) );
$post_type_object = get_post_type_object( $rec->post_type );
$can_edit_post = current_user_can( $post_type_object->cap->edit_post, $rec->ID );
$actions = array();
if ( $can_edit_post && 'trash' !== $rec->post_status ) {
$actions['edit'] = sprintf(
'%s',
esc_url( get_edit_post_link( $rec->ID, true ) ),
/* translators: %s: post title */
esc_attr( sprintf( __( 'Edit “%s”', 'wordpress-seo' ), $title ) ),
__( 'Edit', 'wordpress-seo' )
);
}
if ( $post_type_object->public ) {
if ( in_array( $rec->post_status, array( 'pending', 'draft', 'future' ), true ) ) {
if ( $can_edit_post ) {
$actions['view'] = sprintf(
'%s',
esc_url( add_query_arg( 'preview', 'true', get_permalink( $rec->ID ) ) ),
/* translators: %s: post title */
esc_attr( sprintf( __( 'Preview “%s”', 'wordpress-seo' ), $title ) ),
__( 'Preview', 'wordpress-seo' )
);
}
}
elseif ( 'trash' !== $rec->post_status ) {
$actions['view'] = sprintf(
'%s',
esc_url( get_permalink( $rec->ID ) ),
/* translators: %s: post title */
esc_attr( sprintf( __( 'View “%s”', 'wordpress-seo' ), $title ) ),
__( 'View', 'wordpress-seo' )
);
}
}
$return .= $this->row_actions( $actions );
return $return;
}
/**
* Parsing the column based on the $column_name.
*
* @param string $column_name Column name.
* @param WP_Post $rec Post object.
*
* @return string
*/
protected function parse_column( $column_name, $rec ) {
static $date_format;
if ( ! isset( $date_format ) ) {
$date_format = get_option( 'date_format' );
}
switch ( $column_name ) {
case 'col_page_title':
$column_value = $this->parse_page_title_column( $rec );
break;
case 'col_page_slug':
$permalink = get_permalink( $rec->ID );
$display_slug = str_replace( get_bloginfo( 'url' ), '', $permalink );
$column_value = sprintf( '%1$s', stripslashes( rawurldecode( $display_slug ) ), esc_url( $permalink ) );
break;
case 'col_post_type':
$post_type = get_post_type_object( $rec->post_type );
$column_value = $post_type->labels->singular_name;
break;
case 'col_post_status':
$post_status = get_post_status_object( $rec->post_status );
$column_value = $post_status->label;
break;
case 'col_post_date':
$column_value = date_i18n( $date_format, strtotime( $rec->post_date ) );
break;
case 'col_row_action':
$column_value = sprintf(
'%2$s | %3$s',
$rec->ID,
esc_html__( 'Save', 'wordpress-seo' ),
esc_html__( 'Save all', 'wordpress-seo' )
);
break;
}
if ( ! empty( $column_value ) ) {
return $column_value;
}
}
/**
* Parse the field where the existing meta-data value is displayed.
*
* @param integer $record_id Record ID.
* @param string $attributes HTML attributes.
* @param bool|array $values Optional values data array.
*
* @return string
*/
protected function parse_meta_data_field( $record_id, $attributes, $values = false ) {
// Fill meta data if exists in $this->meta_data.
$meta_data = ( ! empty( $this->meta_data[ $record_id ] ) ) ? $this->meta_data[ $record_id ] : array();
$meta_key = WPSEO_Meta::$meta_prefix . $this->target_db_field;
$meta_value = ( ! empty( $meta_data[ $meta_key ] ) ) ? $meta_data[ $meta_key ] : '';
if ( ! empty( $values ) ) {
$meta_value = $values[ $meta_value ];
}
$id = "wpseo-existing-$record_id-$this->target_db_field";
// $attributes correctly escaped, verified by Alexander. See WPSEO_Bulk_Description_List_Table::parse_page_specific_column.
// phpcs:ignore WordPress.Security.EscapeOutput
return sprintf( '%1$s | ', esc_html( $meta_value ), $attributes, esc_attr( $id ) );
}
/**
* Method for setting the meta data, which belongs to the records that will be shown on the current page.
*
* This method will loop through the current items ($this->items) for getting the post_id. With this data
* ($needed_ids) the method will query the meta-data table for getting the title.
*/
protected function get_meta_data() {
$post_ids = $this->get_post_ids();
$meta_data = $this->get_meta_data_result( $post_ids );
$this->parse_meta_data( $meta_data );
// Little housekeeping.
unset( $post_ids, $meta_data );
}
/**
* Getting all post_ids from to $this->items.
*
* @return string
*/
protected function get_post_ids() {
$needed_ids = array();
foreach ( $this->items as $item ) {
$needed_ids[] = $item->ID;
}
$post_ids = "'" . implode( "', '", $needed_ids ) . "'";
return $post_ids;
}
/**
* Getting the meta_data from database.
*
* @param string $post_ids Post IDs string for SQL IN part.
*
* @return mixed
*/
protected function get_meta_data_result( $post_ids ) {
global $wpdb;
$meta_data = $wpdb->get_results(
"
SELECT *
FROM {$wpdb->postmeta}
WHERE post_id IN({$post_ids}) && meta_key = '" . WPSEO_Meta::$meta_prefix . $this->target_db_field . "'
"
);
return $meta_data;
}
/**
* Setting $this->meta_data.
*
* @param array $meta_data Meta data set.
*/
protected function parse_meta_data( $meta_data ) {
foreach ( $meta_data as $row ) {
$this->meta_data[ $row->post_id ][ $row->meta_key ] = $row->meta_value;
}
}
/**
* This method will merge general array with given parameter $columns.
*
* @param array $columns Optional columns set.
*
* @return array
*/
protected function merge_columns( $columns = array() ) {
$columns = array_merge(
array(
'col_page_title' => __( 'WP Page Title', 'wordpress-seo' ),
'col_post_type' => __( 'Content Type', 'wordpress-seo' ),
'col_post_status' => __( 'Post Status', 'wordpress-seo' ),
'col_post_date' => __( 'Publication date', 'wordpress-seo' ),
'col_page_slug' => __( 'Page URL/Slug', 'wordpress-seo' ),
),
$columns
);
$columns['col_row_action'] = __( 'Action', 'wordpress-seo' );
return $columns;
}
} /* End of class */