HEX
Server: Apache/2.4.68 (Debian)
System: Linux as-cs-widget-demo-us-central1 6.1.0-44-cloud-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.164-1 (2026-03-09) x86_64
User: root (0)
PHP: 8.2.32
Disabled: NONE
Upload Files
File: /var/www/html/wp-content/plugins/wp-recipe-maker/includes/public/class-wprm-changelog.php
<?php
/**
 * Track changes happening to recipes.
 *
 * @link       https://bootstrapped.ventures
 * @since      9.2.0
 *
 * @package    WP_Recipe_Maker
 * @subpackage WP_Recipe_Maker/includes/public
 */

/**
 * Track changes happening to recipes.
 *
 * @since      9.2.0
 * @package    WP_Recipe_Maker
 * @subpackage WP_Recipe_Maker/includes/public
 * @author     Brecht Vandersmissen <brecht@bootstrapped.ventures>
 */
class WPRM_Changelog {

	/**
	 * Register actions and filters.
	 *
	 * @since	9.2.0
	 */
	public static function init() {
		add_action( 'wprm_daily_cron', array( __CLASS__, 'remove_old_logs' ) );
	}

	/**
	 * Log a specific change.
	 *
	 * @since    9.2.0
	 * @param    string $type 		Type of action to log.
	 * @param    mixed 	$object_id 	ID being affected.
	 * @param    mixed 	$data 		Data related to the log.
	 */
	public static function log( $type, $object_id, $data = array() ) {
		if ( WPRM_Settings::get( 'changelog_enabled' ) ) {

			// Get object.
			$object_meta = isset( $data['object_meta'] ) && is_array( $data['object_meta'] ) ? self::sanitize_object_meta( $data['object_meta'] ) : self::get_object_meta( $object_id );

			// Add/sanitize meta.
			$sanitized_meta = array();

			switch ( $type ) {
				case 'recipe_trashed':
					if ( isset( $data['previous_status'] ) ) {
						$sanitized_meta['previous_status'] = $data['previous_status'];
					}
					break;
				case 'settings_updated':
					$sanitized_meta['changes'] = self::sanitize_settings_changes(
						isset( $data['changes'] ) && is_array( $data['changes'] ) ? $data['changes'] : array()
					);
					break;
			}

			// Construct and log change.
			$change = array(
				'type' => $type,
				'meta' => $sanitized_meta,
				'object_id' => $object_id,
				'object_meta' => $object_meta,
				'user_meta' => self::get_user_meta(),
			);

			WPRM_Changelog_Database::add( $change );

			// Maybe send email nofication.
			self::maybe_send_email_notification( $type );
		}
	}

	/**
	 * Maybe send email notification about change.
	 *
	 * @since    9.2.0
	 * @param    string $type Type of change.
	 */
	public static function maybe_send_email_notification( $type ) {
		$to = WPRM_Settings::get( 'changelog_admin_email' );
		$types = WPRM_Settings::get( 'changelog_email_notification_types' );

		if ( $to && is_email( $to ) && in_array( $type, $types ) ) {
			$manage_link = admin_url( 'admin.php?page=wprm_manage#changelog' );

			$subject = __( 'WP Recipe Maker Change:', 'wp-recipe-maker' ) . ' ' . $type;
			$message = __( 'Change detected that you wanted to be notified about.', 'wp-recipe-maker' );
			$message .= "\n";
			$message .= __( 'Find out more', 'wp-recipe-maker' );
			$message .= ': ' . $manage_link;
			$message .= "\n";

			wp_mail( $to, $subject, $message );
		}
	}

	/**
	 * Get object information.
	 *
	 * @since    9.2.0
	 * @param    string $id	ID of the object.
	 */
	public static function get_object_meta( $id ) {
		$meta = array();

		if ( $id ) {
			$post_type = get_post_type( $id );

			if ( $post_type && WPRM_POST_TYPE === $post_type ) {
				$recipe = WPRM_Recipe_Manager::get_recipe( $id );

				if ( $recipe ) {
					$recipe_data = $recipe->get_data();
					$recipe_size = strlen( json_encode( $recipe_data ) );

					$meta['type'] = 'recipe';
					$meta['name'] = $recipe->name();
					$meta['size'] = $recipe_size;
				}
			}
		}

		return $meta;
	}

	/**
	 * Sanitize object meta before logging it.
	 *
	 * @since    10.6.0
	 * @param    array $object_meta Object meta to sanitize.
	 */
	public static function sanitize_object_meta( $object_meta ) {
		$sanitized = array();

		if ( isset( $object_meta['type'] ) ) {
			$sanitized['type'] = sanitize_key( $object_meta['type'] );
		}

		if ( isset( $object_meta['name'] ) ) {
			$sanitized['name'] = sanitize_text_field( $object_meta['name'] );
		}

		if ( isset( $object_meta['size'] ) ) {
			$sanitized['size'] = intval( $object_meta['size'] );
		}

		if ( isset( $object_meta['source'] ) ) {
			$sanitized['source'] = sanitize_key( $object_meta['source'] );
		}

		if ( isset( $object_meta['changed_count'] ) ) {
			$sanitized['changed_count'] = intval( $object_meta['changed_count'] );
		}

		return $sanitized;
	}

	/**
	 * Sanitize settings changes before logging them.
	 *
	 * @since    10.6.0
	 * @param    array $changes Settings changes.
	 */
	public static function sanitize_settings_changes( $changes ) {
		$sanitized_changes = array();

		foreach ( $changes as $change ) {
			if ( ! is_array( $change ) ) {
				continue;
			}

			$sanitized_changes[] = array(
				'id' => isset( $change['id'] ) ? sanitize_key( $change['id'] ) : '',
				'label' => isset( $change['label'] ) ? sanitize_text_field( $change['label'] ) : '',
				'before' => isset( $change['before'] ) ? sanitize_text_field( $change['before'] ) : '',
				'after' => isset( $change['after'] ) ? sanitize_text_field( $change['after'] ) : '',
				'masked' => ! empty( $change['masked'] ),
			);
		}

		return $sanitized_changes;
	}

	/**
	 * Get user information.
	 *
	 * @since    9.2.0
	 */
	public static function get_user_meta() {
		$user = array(
			'ip' => self::get_user_ip(),
		);

		if ( isset( $_SERVER['HTTP_USER_AGENT'] ) ) {
			$user['user_agent'] = sanitize_text_field( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ) );
		}

		return $user;
	}

	/**
	 * Get the IP address of the current user.
	 * Source: http://stackoverflow.com/questions/6717926/function-to-get-user-ip-address
	 *
	 * @since    9.2.0
	 */
	public static function get_user_ip() {
		foreach ( array( 'REMOTE_ADDR', 'HTTP_CLIENT_IP', 'HTTP_X_FORWARDED_FOR', 'HTTP_X_FORWARDED', 'HTTP_X_CLUSTER_CLIENT_IP', 'HTTP_FORWARDED_FOR', 'HTTP_FORWARDED' ) as $key ) {
			if ( array_key_exists( $key, $_SERVER ) === true ) {
				$server_value = sanitize_text_field( wp_unslash( $_SERVER[ $key ] ) );
				foreach ( array_map( 'trim', explode( ',', $server_value ) ) as $ip ) {
					if ( filter_var( $ip, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE ) !== false ) {
						return $ip;
					}
				}
			}
		}
		return 'unknown';
	}

	/**
	 * Remove old changelogs.
	 *
	 * @since	9.2.0
	 */
	public static function remove_old_logs() {
		if ( WPRM_Settings::get( 'changelog_enabled' ) ) {
			$days_to_keep = WPRM_Settings::get( 'changelog_days_to_keep' );
			
			if ( 'unlimited' !== $days_to_keep ) {
				$days_to_keep = intval( $days_to_keep );
				$days_to_keep = 0 < $days_to_keep ? $days_to_keep : 90;

				WPRM_Changelog_Database::purge( $days_to_keep );
			}
		}
	}
}

WPRM_Changelog::init();