Linux webm002.cluster126.gra.hosting.ovh.net 6.18.39-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Tue Jul 21 12:03:15 CEST 2026 x86_64
/home/ariannadhf/www/wp-content/plugins/xml-sitemap-feed/inc/admin/
/home/ariannadhf/www/wp-content/plugins/xml-sitemap-feed/inc/admin/class-gsc-connect-settings.php
 <?php
/**
 * Status301 Premium Google Search Console Connection Onboarding
 *
 * @package XML Sitemap & Google News
 */

namespace XMLSF\Admin;

use XMLSF\Secret;

/**
 * Helper class with public methods to set up a Google Search Console connection.
 *
 * @author RavanH
 * @version 5.6
 */
class GSC_Connect_Settings extends GSC_Connect {
	/**
	 * Placeholder for the saved password.
	 * This is used to avoid showing the actual password in the settings page.
	 * If this value is present, it means the password is saved and should not be changed.
	 *
	 * @var string
	 */
	public static $pw_placeholder = 'DONT_BOTHER_CLIENT_SECRET_ENCRYPTED';

	/**
	 * Display the plugin options page HTML.
	 */
	public static function options_page_render() {
		// Check user capabilities.
		if ( ! \current_user_can( 'manage_options' ) ) {
			return;
		}
		?>
		<div class="wrap">
			<h1><?php echo \esc_html( get_admin_page_title() ); ?></h1>

			<form action="options.php" method="post">
				<?php
				// Output security fields for the registered setting section.
				\settings_fields( self::$option_group );

				// Output setting sections and fields.
				\do_settings_sections( self::$page_slug );

				// Output save settings button.
				\submit_button();
				?>
			</form>
		</div>
		<?php
	}

	/**
	 * Callback function for the Google Search Console OAuth Settings section header.
	 */
	public static function oauth_section_callback() {
		// Set referrer transient to redirect to after connection.
		isset( $_GET['ref'] ) && in_array( $_GET['ref'], array( 'xmlsf', 'xmlsf_news' ), true ) && \set_transient( 'gsc_connect_origin', \sanitize_key( $_GET['ref'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended

		// Prepare the option if it does not already exist. Sets it as non-autoloaded option.
		\add_option( self::$option_group, '', '', false );

		// Get existing data from DB.
		$options = (array) \get_option( self::$option_group, array() );

		\settings_errors();

		// Intro.
		include XMLSF_DIR . '/views/admin/section-gsc-oauth-intro.php';

		// Check if the Google Client ID and Secret are set.
		if ( empty( $options['google_client_id'] ) || empty( $options['google_client_secret'] ) ) {
			// Stage 1.
			include XMLSF_DIR . '/views/admin/section-gsc-oauth-stage-1-2.php';
		} else {
			$redirect_uri = \site_url( 'index.php?' . self::$query_var );
			$oauth_url    = \add_query_arg(
				array(
					'client_id'     => $options['google_client_id'],
					'redirect_uri'  => \rawurlencode( $redirect_uri ),
					'scope'         => \rawurlencode( 'https://www.googleapis.com/auth/webmasters' ),
					'response_type' => 'code',
					'access_type'   => 'offline', // Request a refresh token.
					'prompt'        => 'consent', // Ensure consent screen is shown.
				),
				'https://accounts.google.com/o/oauth2/auth'
			);

			// Stage 2.
			include XMLSF_DIR . '/views/admin/section-gsc-oauth-stage-3.php';
		}
	}

	/**
	 * Render the text field for the Google Client ID.
	 */
	public static function google_client_id_render() {
		$options   = (array) \get_option( self::$option_group, array() );
		$client_id = isset( $options['google_client_id'] ) ? \sanitize_text_field( $options['google_client_id'] ) : '';
		?>
		<input type="text" autocomplete="off" name="<?php echo \esc_attr( self::$option_group ); ?>[google_client_id]" id="xmlsf_notifier_google_client_id" value="<?php echo \esc_attr( $client_id ); ?>" class="regular-text">
		<p class="description">
			<?php \esc_html_e( 'Enter your Google Cloud Project Client ID. You can find this in the Google Cloud Console under APIs & Services > Credentials.', 'xml-sitemap-feed' ); ?>
		</p>
		<?php
	}

	/**
	 * Render the text field for the Google Client Secret.
	 */
	public static function google_client_secret_render() {
		$options       = (array) \get_option( self::$option_group, array() );
		$client_secret = ! empty( $options['google_client_secret'] ) ? self::$pw_placeholder : '';
		?>
		<input type="password" autocomplete="new-password" name="<?php echo \esc_attr( self::$option_group ); ?>[google_client_secret]" id="xmlsf_notifier_google_client_secret" value="<?php echo \esc_attr( $client_secret ); ?>" class="regular-text">
		<p class="description">
			<?php \esc_html_e( 'Enter your Google Cloud Project Client Secret. Keep this secret confidential. If you loose it, you will need to create a new one in the Google Cloud Console under APIs & Services > Credentials.', 'xml-sitemap-feed' ); ?>
		</p>
		<?php
	}

	/**
	 * Sanitize the plugin options before saving.
	 *
	 * @param array $input The options array submitted by the form.
	 *
	 * @return array The sanitized options array.
	 */
	public static function sanitize_settings( $input ) {
		$sanitized = array();
		$input     = (array) $input;
		$options   = (array) \get_option( self::$option_group, array() ); // Not strictly needed if only sanitizing submitted input.

		// Sanitize Google Client ID.
		if ( isset( $input['google_client_id'] ) ) {
			$sanitized['google_client_id'] = \sanitize_text_field( $input['google_client_id'] );
		} else {
			$sanitized['google_client_id'] = isset( $options['google_client_id'] ) ? $options['google_client_id'] : '';
		}

		// Sanitize Google Client Secret.
		if ( isset( $input['google_client_secret'] ) && self::$pw_placeholder !== $input['google_client_secret'] && ( empty( $options['google_client_secret'] ) || $options['google_client_secret'] !== $input['google_client_secret'] ) ) {
			$sanitized['google_client_secret'] = Secret::encrypt( \sanitize_text_field( $input['google_client_secret'] ) );
		} else {
			$sanitized['google_client_secret'] = isset( $options['google_client_secret'] ) ? $options['google_client_secret'] : '';
		}

		// Make sure to not loose existing refresh token, but only if client id was not changed. Allows clearing the token with an empty string.
		if ( isset( $input['google_refresh_token'] ) ) {
			$sanitized['google_refresh_token'] = \sanitize_text_field( $input['google_refresh_token'] );
		} else {
			$sanitized['google_refresh_token'] = isset( $options['google_refresh_token'] ) && ! empty( $options['google_client_id'] ) && $sanitized['google_client_id'] === $options['google_client_id'] ? $options['google_refresh_token'] : '';
		}

		if ( isset( $input['property_url'] ) ) {
			$sanitized['property_url'] = \sanitize_text_field( $input['property_url'] );
		} else {
			$sanitized['property_url'] = isset( $options['property_url'] ) ? $options['property_url'] : '';
		}

		return $sanitized;
	}
}