<?php
defined('ABSPATH') || exit;
class NewsletterProfile extends NewsletterModule {
static $instance;
/**
* @return NewsletterProfile
*/
static function instance() {
if (self::$instance == null) {
self::$instance = new self();
}
return self::$instance;
}
function __construct() {
parent::__construct('profile');
add_shortcode('newsletter_profile', [$this, 'shortcode_newsletter_profile']);
add_shortcode('newsletter_profile_field', [$this, 'shortcode_newsletter_profile_field']);
add_filter('newsletter_replace', [$this, 'hook_newsletter_replace'], 10, 4);
//add_filter('newsletter_page_text', [$this, 'hook_newsletter_page_text'], 10, 3);
add_action('newsletter_shortcode', [$this, 'hook_newsletter_shortcode'], 12, 2);
add_action('newsletter_shortcode_dummy', [$this, 'hook_newsletter_shortcode_dummy'], 12, 2);
add_action('newsletter_action', [$this, 'hook_newsletter_action'], 12, 3);
add_action('newsletter_action_dummy', [$this, 'hook_newsletter_action_dummy'], 12, 3);
if (!is_admin() || defined('DOING_AJAX') && DOING_AJAX) {
add_shortcode('newsletter_export_button', [$this, 'shortcode_newsletter_export_button']);
add_shortcode('newsletter_profile_button', [$this, 'shortcode_newsletter_profile_button']);
}
}
/**
* URL to the subscriber profile edit action. This URL MUST NEVER be changed by
* 3rd party plugins. Plugins can change the final URL after the action has been executed using the
* <code>newsletter_profile_url</code> filter.
*
* @param stdClass $user
* @return string
*/
function get_profile_url($user) {
return $this->build_action_url('p', $user, null, 7 * DAY_IN_SECONDS);
}
/**
* Button to start the data export.
*
* @param array $attrs
* @param string $content Ignored
* @return string
*/
function shortcode_newsletter_export_button($attrs, $content = '') {
$user = $this->get_current_user();
if (!$user || $user->status !== TNP_User::STATUS_CONFIRMED) {
return '';
}
$label = empty($attrs['label']) ? __('Export your data', 'newsletter') : $attrs['label'];
$b = '<form action="' . esc_attr($this->build_action_url('px')) . '" method="post" class="tnp-button-form tnp-export" target="_blank">';
$b .= $this->get_user_key_field($user, 'px');
$b .= wp_nonce_field('newsletter-export', '_wpnonce', true, false);
$b .= '<button class="tnp-submit">' . esc_html($label) . '</button>';
$b .= '</form>';
return $b;
}
function shortcode_newsletter_profile_button($attrs, $content = '') {
$user = $this->get_current_user();
if (!$user || $user->status !== TNP_User::STATUS_CONFIRMED) {
return '';
}
$label = empty($attrs['label']) ? __('Profile edit', 'newsletter') : $attrs['label'];
$b = '<form action="' . esc_attr($this->build_action_url('p')) . '" method="post" class="tnp-button-form tnp-profile">';
$b .= $this->get_user_key_field($user, 'p');
$b .= wp_nonce_field('newsletter-profile', '_wpnonce', true, false);
$b .= '<button class="tnp-submit">' . esc_html($label) . '</button>';
$b .= '</form>';
return $b;
}
function get_profile_page_url($user, $alert = null) {
$this->switch_language($user);
$url = '';
$page_id = $this->get_option('page_id');
if (!empty($page_id)) {
if ($page_id === 'url') {
$url = sanitize_url($this->get_option('page_url'));
} else {
$url = get_permalink((int) $page_id);
}
}
$url = parent::build_message_url($url, 'p', null, null, $alert);
$this->restore_language();
return $url;
}
function hook_newsletter_action_dummy($action, $user, $email) {
if (!in_array($action, ['p', 'ps', 'px'], true)) {
return;
}
$this->set_user_cookie($user);
switch ($action) {
case 'p':
$this->redirect($this->get_profile_page_url($user));
case 'ps':
$this->redirect($this->get_profile_page_url($user, $this->get_text('saved') . ' [dummy]'));
case 'px':
header('Content-Type: application/json;charset=UTF-8');
echo $this->build_export_json($user);
die();
}
}
function hook_newsletter_action($action, $user, $email) {
if (!in_array($action, ['p', 'ps', 'px', 'profile-change', 'pc'])) {
return;
}
if (!$user) {
$this->dienow(__('Subscriber not found or link expired.', 'newsletter'), '', 404);
}
if ($user->status !== TNP_User::STATUS_CONFIRMED) {
$this->dienow(__('Subscriber not confirmed.', 'newsletter'), '', 404);
}
$this->set_user_cookie($user);
switch ($action) {
case 'p':
$profile_url = $this->get_profile_page_url($user);
$profile_url = apply_filters('newsletter_profile_url', $profile_url, $user); // Compatibility
$this->redirect($profile_url);
case 'ps':
$verified = wp_verify_nonce($_REQUEST['_wpnonce'], 'newsletter-profile');
if (!$verified) {
die('Unverified request');
}
$res = $this->save_profile($user);
$alert = is_wp_error($res) ? $res->get_error_message() : $this->get_text('saved');
$this->redirect($this->get_profile_page_url($user, $alert));
case 'px':
$verified = wp_verify_nonce($_REQUEST['_wpnonce'], 'newsletter-export');
if (!$verified) {
die('Unverfied request');
}
header('Content-Type: application/json;charset=UTF-8');
echo $this->build_export_json($user);
die();
case 'profile-change':
case 'pc':
if ($this->antibot_form_check()) {
$list_id = (int) ($_REQUEST['list'] ?? 0);
// Check if the list is public
$list = $this->get_list($list_id);
if (!$list || $list->status == TNP_List::STATUS_PRIVATE) {
$this->dienow('List change not allowed.', 'Please check if the list is marked as "private".', 400);
}
$url = wp_validate_redirect($_REQUEST['redirect'] ?? '', home_url());
$this->set_user_list($user, $list_id, (int) $_REQUEST['value']);
$user = $this->get_user($user->id);
$this->add_user_log($user, 'cta');
wp_redirect($url);
} else {
$this->request_to_antibot_form('Continue');
}
die();
}
}
function hook_newsletter_shortcode_dummy($message, $user) {
if (!in_array($message, ['p'], true)) {
return;
}
if (!$user) {
echo 'Missing dummy user?';
return;
}
echo '<p style="', self::NOTICE_STYLE, '">';
echo 'Preview of the content with a dummy subscriber.';
echo '</p>';
echo $this->get_text('text');
}
function hook_newsletter_shortcode($message, $user) {
if (!in_array($message, ['p'], true)) {
return;
}
if (!$user || $user->status !== TNP_User::STATUS_CONFIRMED) {
echo __('Subscriber not found.', 'newsletter');
return;
}
// To help the administrator configuring the messages and reduce the support requests.
if (current_user_can('administrator')) {
echo '<p style="', self::NOTICE_STYLE, '">';
echo '<strong>Visible only to administrators</strong>. ';
echo '<a href="' . esc_attr($this->get_profile_admin_edit_url()) . '" target="_blank">Edit this content</a>.';
echo '</p>';
}
echo $this->get_text('text');
}
function get_profile_admin_edit_url() {
$edit_url = admin_url('admin.php?page=newsletter_profile_index');
if ($this->is_multilanguage()) {
$language = $this->language();
if (empty($language)) {
$language = 'all';
}
$edit_url .= '&lang=' . urldecode($language);
}
return $edit_url;
}
function build_export_json($user) {
if (!$user) {
return '{}';
}
$data = [
'email' => $user->email,
'first_name' => $user->name,
'last_name' => $user->surname,
'gender' => $user->sex,
'created' => $user->created,
'ip' => $user->ip,
];
// Lists
$lists = $this->get_lists_public();
$data['lists'] = [];
foreach ($lists as $list) {
$field = 'list_' . $list->id;
if ($user->$field == 1) {
$data['lists'][] = $list->name;
}
}
// Profile
$profiles = $this->get_profiles_public();
$data['profiles'] = [];
foreach ($profiles as $profile) {
$field = 'profile_' . $profile->id;
$data['profiles'][] = ['name' => $profile->name, 'value' => $user->$field];
}
return wp_json_encode($data, JSON_PRETTY_PRINT);
}
function hook_newsletter_replace($text, $user, $email, $html = true) {
if (!$user) {
$text = $this->replace_url($text, 'profile_url', $this->build_action_url('nul'));
return $text;
}
// Profile edit page URL and link
$url = $this->get_profile_url($user);
$text = $this->replace_url($text, 'profile_url', $url);
if (strpos($text, '{profile_form}') !== false) {
if ($user->_trusted) {
$text = str_replace('{profile_form}', $this->get_profile_form($user), $text);
} else {
$text = str_replace('{profile_form}', '', $text);
}
}
return $text;
}
function shortcode_newsletter_profile_field($attrs = [], $content = '') {
static $user = null;
// Optimization
if (!$user) {
$user = $this->get_current_user();
}
$name = $attrs['name'] ?? '';
$options = $this->get_options();
$buffer = '';
if ('email' === $name) {
$label = $attrs['label'] ?? NewsletterSubscription::instance()->get_form_text('email');
$buffer .= '<div class="tnp-field tnp-field-email">';
$buffer .= '<label>' . esc_html($label) . '</label>';
$buffer .= '<input class="tnp-email" type="text" name="ne" required value="' . esc_attr($user->email) . '">';
$buffer .= "</div>\n";
}
if ('first_name' === $name) {
$label = $attrs['label'] ?? NewsletterSubscription::instance()->get_form_text('name');
$value = $this->sanitize_name($user->name);
$buffer .= '<div class="tnp-field tnp-field-firstname">';
$buffer .= '<label>' . esc_html($label) . '</label>';
$buffer .= '<input class="tnp-firstname" type="text" name="nn" value="' . esc_attr($value) . '"' . (!empty($options['name_required']) ? ' required' : '') . '>';
$buffer .= "</div>\n";
}
if ('last_name' === $name) {
$label = $attrs['label'] ?? NewsletterSubscription::instance()->get_form_text('surname');
$value = $this->sanitize_name($user->surname);
$buffer .= '<div class="tnp-field tnp-field-lastname">';
$buffer .= '<label>' . esc_html($label) . '</label>';
$buffer .= '<input class="tnp-lastname" type="text" name="ns" value="' . esc_attr($value) . '"' . (!empty($options['surname_required']) ? ' required' : '') . '>';
$buffer .= "</div>\n";
}
if ('gender' === $name) {
if (empty($user->sex)) {
$user->sex = 'n';
}
$label = $attrs['label'] ?? NewsletterSubscription::instance()->get_form_text('sex');
$buffer .= '<div class="tnp-field tnp-field-gender">';
$buffer .= '<label>' . esc_html($label) . '</label>';
$buffer .= '<select name="nx" class="tnp-gender"';
$buffer .= '>';
$buffer .= '<option value="n"' . ($user->sex === 'n' ? ' selected' : '') . '>' . esc_html(NewsletterSubscription::instance()->get_form_text('sex_none')) . '</option>';
$buffer .= '<option value="f"' . ($user->sex === 'f' ? ' selected' : '') . '>' . esc_html(NewsletterSubscription::instance()->get_form_text('sex_female')) . '</option>';
$buffer .= '<option value="m"' . ($user->sex === 'm' ? ' selected' : '') . '>' . esc_html(NewsletterSubscription::instance()->get_form_text('sex_male')) . '</option>';
$buffer .= '</select>';
$buffer .= "</div>\n";
}
if ('language' === $name) {
if ($this->is_multilanguage()) {
$label = $attrs['label'] ?? __('Language', 'newsletter');
$languages = $this->get_languages();
$buffer .= '<div class="tnp-field tnp-field-language">';
$buffer .= '<label>' . esc_html($label) . '</label>';
$buffer .= '<select name="nlng" class="tnp-language">';
$buffer .= '<option value="" disabled ' . ( empty($user->language) ? ' selected' : '' ) . '>' . __('Select language', 'newsletter') . '</option>';
foreach ($languages as $key => $l) {
$buffer .= '<option value="' . esc_attr($key) . '"' . ( $user->language == $key ? ' selected' : '' ) . '>' . esc_html($l) . '</option>';
}
$buffer .= '</select>';
$buffer .= "</div>\n";
}
}
// All profiles enabled on profile page configuration
if ('customfields' === $name || 'profiles' === $name) {
$profiles = $this->get_customfields_public();
foreach ($profiles as $profile) {
if (!in_array($profile->id, $options['profiles'])) {
continue;
}
$field = 'profile_' . $profile->id;
$value = $this->sanitize_user_field($user->$field);
$buffer .= '<div class="tnp-field tnp-field-profile">';
$buffer .= '<label>' . esc_html($profile->name) . '</label>';
if ($profile->is_text()) {
$buffer .= '<input class="tnp-profile tnp-profile-' . esc_attr($profile->id) . '" type="text" name="np' . esc_attr($profile->id) . '" value="' . esc_attr($value) . '"' .
($profile->is_required() ? ' required' : '') . '>';
}
if ($profile->is_select()) {
$buffer .= '<select class="tnp-profile tnp-profile-' . esc_attr($profile->id) . '" name="np' . esc_attr($profile->id) . '"' . ($profile->is_required() ? ' required' : '') . '>';
foreach ($profile->options as $option) {
$buffer .= '<option';
if ($option == $user->$field) {
$buffer .= ' selected';
}
$buffer .= '>' . esc_html($option) . '</option>';
}
$buffer .= '</select>';
}
$buffer .= "</div>\n";
}
}
if ('customfield' === $name) {
$number = (int) $attrs['number'] ?? 0;
$cf = $this->get_customfield($number);
if (!$cf) {
return $this->build_field_admin_notice('Custom field ' . $number . ' is not configured ot the number is wrong or not specified');
}
if ($cf->is_private()) {
return $this->build_field_admin_notice('Custom field ' . $number . ' is private and cannot be shown.');
}
$field = 'profile_' . $cf->id;
$value = $this->sanitize_user_field($user->$field);
$label = $attrs['label'] ?? $cf->name;
$buffer .= '<div class="tnp-field tnp-field-profile">';
$buffer .= '<label>' . esc_html($label) . '</label>';
if ($cf->is_text()) {
$buffer .= '<input class="tnp-profile tnp-profile-' . esc_attr($cf->id) . '" type="text" name="np' . esc_attr($cf->id) . '" value="' . esc_attr($value) . '"' .
($cf->is_required() ? ' required' : '') . '>';
}
if ($cf->is_select()) {
$buffer .= '<select class="tnp-profile tnp-profile-' . esc_attr($cf->id) . '" name="np' . esc_attr($cf->id) . '"' . ($cf->is_required() ? ' required' : '') . '>';
foreach ($cf->options as $option) {
$buffer .= '<option';
if ($option == $user->$field) {
$buffer .= ' selected';
}
$buffer .= '>' . esc_html($option) . '</option>';
}
$buffer .= '</select>';
}
$buffer .= "</div>\n";
}
if ('lists' === $name) {
$lists = $this->get_lists_public();
$tmp = '';
foreach ($lists as $list) {
if (!in_array($list->id, $options['lists']) || $list->is_private()) {
continue;
}
$tmp .= '<div class="tnp-field tnp-field-list">';
$tmp .= '<label><input class="tnp-list tnp-list-' . esc_attr($list->id) . '" type="checkbox" name="nl[]" value="' . esc_attr($list->id) . '"';
$field = 'list_' . $list->id;
// isset() for dummy subscribers
if (isset($user->$field) && $user->$field == 1) {
$tmp .= ' checked';
}
$tmp .= '><span class="tnp-list-label">' . esc_html($list->name) . '</span></label>';
$tmp .= "</div>\n";
}
if (!empty($tmp)) {
$buffer .= '<div class="tnp-lists">' . "\n" . $tmp . "\n" . '</div>';
}
}
if ('track' === $name) {
$value = $user->track;
$label = $attrs['label'] ?? NewsletterSubscription::instance()->get_form_text('track');
$buffer .= '<div class="tnp-field tnp-field-track">';
$buffer .= '<label>';
$buffer .= '<input class="tnp-track" type="checkbox" name="ntr_cb"' . ($value ? ' checked' : '') . '> ';
$buffer .= esc_html($label) . '</label>';
$buffer .= '<input type="hidden" name="ntr" value="1">';
$buffer .= "</div>\n";
}
return $buffer;
}
function build_field_admin_notice($message) {
if (!current_user_can('administrator')) {
return '';
}
return '<p style="background-color: #eee; color: #000; padding: 10px; margin: 10px 0">' . $message . ' <strong>This notice is shown only to administrators to help with configuration.</strong></p>';
}
function shortcode_newsletter_profile($attrs, $content = '') {
$user = $this->get_current_user();
if (!$user) {
return __('Subscriber not found.', 'newsletter');
}
if (!$user->status === TNP_User::STATUS_CONFIRMED) {
return __('Subscriber not confirmed.', 'newsletter');
}
if ($content) {
$this->switch_language($user->language);
$buffer = '';
$buffer .= '<div class="tnp tnp-form tnp-profile">';
$buffer .= '<form action="' . esc_attr($this->build_action_url('ps')) . '" method="post">';
$buffer .= wp_nonce_field('newsletter-profile', '_wpnonce', true, false);
$buffer .= $this->get_user_key_field($user, 'ps');
$buffer .= do_shortcode($content);
$buffer .= '<div class="tnp-field tnp-field-button">';
$buffer .= '<input class="tnp-submit" type="submit" value="' . esc_attr($this->get_text('save_label')) . '">';
$buffer .= "</div>\n";
$buffer .= "</form>\n</div>\n";
if (isset($_REQUEST['alert'])) {
// slashes are already added by wordpress!
$buffer .= '<script>alert("' . esc_js(strip_tags($_REQUEST['alert'])) . '");</script>';
}
$this->restore_language();
return $buffer;
}
$buffer = $this->get_profile_form($user);
if (isset($_REQUEST['alert'])) {
// slashes are already added by wordpress!
$buffer .= '<script>alert("' . esc_js(strip_tags($_REQUEST['alert'])) . '");</script>';
}
return $buffer;
}
/**
* Build the profile editing form for the specified subscriber.
*
* @param TNP_User $user
* @return string
*/
function get_profile_form($user) {
$this->switch_language($user->language);
$options = $this->get_options(); // Per language
$subscription = NewsletterSubscription::instance();
$buffer = '';
$buffer .= '<div class="tnp tnp-form tnp-profile">';
$buffer .= '<form action="' . esc_attr($this->build_action_url('ps')) . '" method="post">';
$buffer .= $this->get_user_key_field($user, 'ps');
$buffer .= wp_nonce_field('newsletter-profile', '_wpnonce', true, false);
if (!empty($options['email'])) {
$buffer .= '<div class="tnp-field tnp-field-email">';
$buffer .= '<label>' . esc_html($subscription->get_form_text('email')) . '</label>';
$buffer .= '<input class="tnp-email" type="text" name="ne" required value="' . esc_attr($user->email) . '">';
$buffer .= "</div>\n";
}
if (!empty($options['name'])) {
$value = $this->sanitize_name($user->name);
$buffer .= '<div class="tnp-field tnp-field-firstname">';
$buffer .= '<label>' . esc_html($subscription->get_form_text('name')) . '</label>';
$buffer .= '<input class="tnp-firstname" type="text" name="nn" value="' . esc_attr($value) . '"' . (!empty($options['name_required']) ? ' required' : '') . '>';
$buffer .= "</div>\n";
}
if (!empty($options['surname'])) {
$value = $this->sanitize_name($user->surname);
$buffer .= '<div class="tnp-field tnp-field-lastname">';
$buffer .= '<label>' . esc_html($subscription->get_form_text('surname')) . '</label>';
$buffer .= '<input class="tnp-lastname" type="text" name="ns" value="' . esc_attr($value) . '"' . (!empty($options['surname_required']) ? ' required' : '') . '>';
$buffer .= "</div>\n";
}
if (!empty($options['sex'])) {
if (empty($user->sex)) {
$user->sex = 'n';
}
$buffer .= '<div class="tnp-field tnp-field-gender">';
$buffer .= '<label>' . esc_html($subscription->get_form_text('sex')) . '</label>';
$buffer .= '<select name="nx" class="tnp-gender"';
$buffer .= '>';
$buffer .= '<option value="n"' . ($user->sex === 'n' ? ' selected' : '') . '>' . esc_html($subscription->get_form_text('sex_none')) . '</option>';
$buffer .= '<option value="f"' . ($user->sex === 'f' ? ' selected' : '') . '>' . esc_html($subscription->get_form_text('sex_female')) . '</option>';
$buffer .= '<option value="m"' . ($user->sex === 'm' ? ' selected' : '') . '>' . esc_html($subscription->get_form_text('sex_male')) . '</option>';
$buffer .= '</select>';
$buffer .= "</div>\n";
}
if (!empty($options['language'])) {
if ($this->is_multilanguage()) {
$languages = $this->get_languages();
$buffer .= '<div class="tnp-field tnp-field-language">';
$buffer .= '<label>' . esc_html__('Language', 'newsletter') . '</label>';
$buffer .= '<select name="nlng" class="tnp-language">';
$buffer .= '<option value="" disabled ' . ( empty($user->language) ? ' selected' : '' ) . '>' . __('Select language', 'newsletter') . '</option>';
foreach ($languages as $key => $l) {
$buffer .= '<option value="' . esc_attr($key) . '"' . ( $user->language == $key ? ' selected' : '' ) . '>' . esc_html($l) . '</option>';
}
$buffer .= '</select>';
$buffer .= "</div>\n";
}
}
// Custom fields
if (!empty($options['profiles'])) {
$profiles = $this->get_customfields_public();
foreach ($profiles as $profile) {
if (!in_array($profile->id, $options['profiles'])) {
continue;
}
$field = 'profile_' . $profile->id;
$value = $this->sanitize_user_field($user->$field);
$buffer .= '<div class="tnp-field tnp-field-profile">';
$buffer .= '<label>' . esc_html($profile->name) . '</label>';
if ($profile->is_text()) {
$buffer .= '<input class="tnp-profile tnp-profile-' . esc_attr($profile->id) . '" type="text" name="np' . esc_attr($profile->id) . '" value="' . esc_attr($value) . '"' .
($profile->is_required() ? ' required' : '') . '>';
}
if ($profile->is_select()) {
$buffer .= '<select class="tnp-profile tnp-profile-' . esc_attr($profile->id) . '" name="np' . esc_attr($profile->id) . '"' . ($profile->is_required() ? ' required' : '') . '>';
foreach ($profile->options as $option) {
$buffer .= '<option';
if ($option == $user->$field) {
$buffer .= ' selected';
}
$buffer .= '>' . esc_html($option) . '</option>';
}
$buffer .= '</select>';
}
$buffer .= "</div>\n";
}
}
// Lists
if (!empty($options['lists'])) {
$lists = $this->get_lists_public();
$tmp = '';
foreach ($lists as $list) {
if (!in_array($list->id, $options['lists']) || $list->is_private()) {
continue;
}
$tmp .= '<div class="tnp-field tnp-field-list">';
$tmp .= '<label><input class="tnp-list tnp-list-' . esc_attr($list->id) . '" type="checkbox" name="nl[]" value="' . esc_attr($list->id) . '"';
$field = 'list_' . $list->id;
// isset() for dummy subscribers
if (isset($user->$field) && $user->$field == 1) {
$tmp .= ' checked';
}
$tmp .= '><span class="tnp-list-label">' . esc_html($list->name) . '</span></label>';
$tmp .= "</div>\n";
}
if (!empty($tmp)) {
$buffer .= '<div class="tnp-lists">' . "\n" . $tmp . "\n" . '</div>';
}
}
if (!empty($options['track'])) {
$value = $user->track ?? 1;
$buffer .= '<div class="tnp-field tnp-field-track">';
$buffer .= '<label>';
$buffer .= '<input class="tnp-track" type="checkbox" name="ntr_cb"' . ($value ? ' checked' : '') . '> ';
$buffer .= esc_html($subscription->get_form_text('track')) . '</label>';
$buffer .= '<input type="hidden" name="ntr" value="1">';
$buffer .= "</div>\n";
}
// Privacy
$privacy_url = $subscription->get_privacy_url();
if (!empty($this->get_text('privacy_label')) && !empty($privacy_url)) {
$buffer .= '<div class="tnp-field tnp-field-privacy">';
if ($privacy_url) {
$buffer .= '<a href="' . $privacy_url . '" target="_blank">';
}
$buffer .= $this->get_text('privacy_label');
if ($privacy_url) {
$buffer .= '</a>';
}
$buffer .= "</div>\n";
}
$buffer .= '<div class="tnp-field tnp-field-button">';
$buffer .= '<input class="tnp-submit" type="submit" value="' . esc_attr($this->get_text('save_label')) . '">';
$buffer .= "</div>\n";
$buffer .= "</form>\n</div>\n";
$this->restore_language();
return $buffer;
}
/**
* Saves the subscriber data extracting them from the $_REQUEST and for the
* subscriber identified by the <code>$user</code> object.
*
* @return string|WP_Error If not an error the string represent the message to show
*/
function save_profile($user) {
$options = $this->get_options();
$subscription_module = NewsletterSubscription::instance();
// Conatains the cleaned up user data to be saved
$data = ['id' => $user->id];
require_once NEWSLETTER_INCLUDES_DIR . '/antispam.php';
$antispam = NewsletterAntispam::instance();
$email_changed = false;
$posted = stripslashes_deep($_POST);
if ($options['email']) {
$email = $this->normalize_email($posted['ne']);
if ($antispam->is_address_blacklisted($email)) {
return new WP_Error('spam', $this->get_text('error'));
}
if (!$email) {
return new WP_Error('email', $this->get_text('error'));
}
$email_changed = ($email != $user->email);
// If the email has been changed, check if it is available
if ($email_changed) {
$tmp = $this->get_user($email);
if ($tmp != null && $tmp->id != $user->id) {
return new WP_Error('inuse', $this->get_text('error'));
}
}
if ($email_changed && $subscription_module->is_double_optin()) {
set_transient('newsletter_user_' . $user->id . '_email', $email, DAY_IN_SECONDS);
} else {
$data['email'] = $email;
}
}
if (isset($posted['nn'])) {
if ($antispam->is_spam_text($posted['nn'])) {
return new WP_Error('spam', $this->get_text('error'));
}
$data['name'] = $this->sanitize_name($posted['nn']);
}
if (isset($posted['ns'])) {
if ($antispam->is_spam_text($posted['ns'])) {
return new WP_Error('spam', $this->get_text('error'));
}
$data['surname'] = $this->sanitize_name($posted['ns']);
}
if (isset($posted['nx'])) {
$data['sex'] = $this->sanitize_gender($posted['nx']);
}
if (isset($posted['nlng'])) {
$data['language'] = $this->sanitize_language($posted['nlng']);
}
// Lists. If not list is present or there is no list to choose or all are unchecked.
$nl = $posted['nl'] ?? [];
$ids = $this->get_main_option('lists');
foreach ($ids as $id) {
$list = $this->get_list($id);
if (!$list || $list->is_private()) {
continue;
}
$field_name = 'list_' . $id;
$data['list_' . $id] = in_array($id, $nl) ? 1 : 0;
}
// Profile
$ids = $this->get_main_option('profiles');
if ($ids) {
foreach ($ids as $id) {
if (isset($posted['np' . $id])) {
$profile = $this->get_profile($id);
if ($profile && $profile->is_public()) {
$data['profile_' . $id] = $this->sanitize_user_field($posted['np' . $id]);
}
}
}
}
if (isset($posted['ntr'])) {
$data['track'] = isset($posted['ntr_cb']) ? 1 : 0;
}
if ($user->status == TNP_User::STATUS_NOT_CONFIRMED) {
$data['status'] = TNP_User::STATUS_CONFIRMED;
}
$user = $this->save_user($data);
$this->add_user_log($user, 'profile');
// Send the activation again only if we use double opt-in, otherwise it has no meaning
if ($email_changed && $subscription_module->is_double_optin()) {
$user->email = $email;
$subscription_module->send_activation_email($user);
return $this->get_text('email_changed');
}
return $this->get_text('saved');
}
}
NewsletterProfile::instance();