HEX
Server: nginx/1.24.0
System: Linux ip-10-50-20-85 6.5.0-1022-aws #22~22.04.1-Ubuntu SMP Fri Jun 14 16:31:00 UTC 2024 x86_64
User: usefuloffices.org (1001)
PHP: 8.1.2-1ubuntu2.23
Disabled: NONE
Upload Files
File: //proc/self/cwd/wp-content/plugins/insert-php-code-snippet/widget.php
<?php
if ( ! defined( 'ABSPATH' ) )
    exit;
/**
* XYZScripts Insert PHP Snippet Widget Class
*/
////*****************************Sidebar Widget**********************************////
class Xyz_Insert_Php_Widget extends WP_Widget {
    /** constructor -- name this the same as the class above */
    function __construct() {
        parent::__construct(false, $name = 'Insert PHP Snippet');
    }
    /** @see WP_Widget::widget -- do not rename this */
    function widget($args, $instance){
        extract( $args );
        global $wpdb;
        $title    = apply_filters('widget_title', $instance['title']);
        $xyz_ips_id = $instance['message'];
        $entries = $wpdb->get_results($wpdb->prepare( "SELECT content FROM ".$wpdb->prefix."xyz_ips_short_code  WHERE id=%d",$xyz_ips_id ));
        $entry = $entries[0];
        echo $before_widget;
        if ( $title )
            echo $before_title . $title . $after_title;
        $content_to_eval=$entry->content;
        /***** to handle old codes : start *****/
        if(get_option('xyz_ips_auto_insert')==1){
            $xyz_ips_content_start='<?php';
            $new_line="\r\n";
            $xyz_ips_content_end='?>';
            if (stripos($content_to_eval, '<?php') !== false)
                $tag_start_position=stripos($content_to_eval,'<?php');
            else
                $tag_start_position="-1";
            if (stripos($content_to_eval, '?>') !== false)
                $tag_end_position=stripos($content_to_eval,'?>');
            else
                $tag_end_position="-1";
            if(stripos($content_to_eval, '<?php') === false && stripos($content_to_eval, '?>') === false)
            {
                $content_to_eval=$xyz_ips_content_start.$new_line.$content_to_eval;
            }
            else if(stripos($content_to_eval, '<?php') !== false)
            {
                if($tag_start_position>=0 && $tag_end_position>=0 && $tag_start_position>$tag_end_position)
                {
                    $content_to_eval=$xyz_ips_content_start.$new_line.$content_to_eval;
                }
            }
            else if(stripos($content_to_eval, '<?php') === false)
            {
                if (stripos($content_to_eval, '?>') !== false)
                {
                    $content_to_eval=$xyz_ips_content_start.$new_line.$content_to_eval;
                }
            }
            $content_to_eval='?>'.$content_to_eval;
        }
        /***** to handle old codes : end *****/
        else{
            if(substr(trim($content_to_eval), 0,5)=='<?php')
                $content_to_eval='?>'.$content_to_eval;
        }
        
        eval($content_to_eval);
        echo $after_widget;
    }
    /** @see WP_Widget::update -- do not rename this */
    function update($new_instance, $old_instance) {
        $instance = $old_instance;
        $instance['title'] = strip_tags($new_instance['title']);
        $instance['message'] = strip_tags($new_instance['message']);
        return $instance;
    }
    /** @see WP_Widget::form -- do not rename this */
    function form($instance) {
        global $wpdb;
        $entries = $wpdb->get_results($wpdb->prepare( "SELECT * FROM ".$wpdb->prefix."xyz_ips_short_code WHERE status=%d  ORDER BY id DESC",1 ));
        if(isset($instance['title'])){
            $title  = esc_attr($instance['title']);
        }else{
            $title = '';
        }
        if(isset($instance['message'])){
            $message  = esc_attr($instance['message']);
        }else{
            $message = '';
        }
?>
<p>
    <label for="<?php echo $this->get_field_id('title'); ?>"><?php _e('Title:'); ?></label>
    <input class="widefat" id="<?php echo $this->get_field_id('title'); ?>" name="<?php echo $this->get_field_name('title'); ?>" type="text" value="<?php echo $title; ?>" />
</p>
<p>
    <label for="<?php echo $this->get_field_id('message'); ?>"><?php _e('Choose Snippet :'); ?></label>
    <select name="<?php echo $this->get_field_name('message'); ?>">
        <?php
        if( count($entries)>0 ) {
            $count=1;
            $class = '';
            foreach( $entries as $entry ) {
        ?>
        <option value="<?php echo $entry->id;?>" <?php if($message==$entry->id)echo "selected"; ?>><?php echo $entry->title;?></option>
        <?php
            }
        }
        ?>
    </select>
</p>
<?php
    }
} // end class Xyz_Insert_Php_Widget

function xyz_ips_add_snippet_widget(){
       register_widget("Xyz_Insert_Php_Widget");
}
add_action('widgets_init','xyz_ips_add_snippet_widget');

?>