<?php
add_filter( 'media_upload_tabs', 'ngg_wp_upload_tabs' );
add_action( 'media_upload_nextgen', 'media_upload_nextgen' );
// TODO: attempting to enforce the following breaks the TinyMCE 'Add Media' button's import-from-NextGEN feature, and
// TODO: no nonce is provided by WordPress at the time.
//
// phpcs:disable WordPress.Security.NonceVerification.Missing
// phpcs:disable WordPress.Security.NonceVerification.Recommended
function ngg_wp_upload_tabs( $tabs ) {
$newtab = [ 'nextgen' => __( 'NextGEN Gallery', 'nggallery' ) ];
return array_merge( $tabs, $newtab );
}
function media_upload_nextgen() {
// Not in use.
$errors = false;
// Generate TinyMCE HTML output.
if ( isset( $_POST['send'] ) ) {
$keys = array_keys( $_POST['send'] );
$send_id = (int) array_shift( $keys );
$image = $_POST['image'][ $send_id ];
$alttext = stripslashes( htmlspecialchars( $image['alttext'], ENT_QUOTES ) );
$description = stripslashes( htmlspecialchars( $image['description'], ENT_QUOTES ) );
// here is no new line allowed.
$clean_description = preg_replace( "/\n|\r\n|\r$/", ' ', $description );
$img = nggdb::find_image( $send_id );
$thumbcode = $img->get_thumbcode();
$class = "ngg-singlepic ngg-{$image['align']}";
// Create a shell displayed-gallery so we can inspect its settings.
$args = new stdClass();
$args->display_type = NGG_BASIC_SINGLEPIC;
$displayed_gallery = new \Imagely\NGG\DataTypes\DisplayedGallery( $args );
$width = $displayed_gallery->display_settings['width'];
$height = $displayed_gallery->display_settings['height'];
// Build output.
if ( $image['size'] == 'thumbnail' ) {
$html = "<img src='{$image['thumb']}' alt='{$alttext}' class='{$class}' />";
} else {
$html = '';
}
// Wrap the link to the fullsize image around.
$html = "<a {$thumbcode} href='{$image['url']}' title='{$clean_description}'>{$html}</a>";
if ( $image['size'] == 'full' ) {
$html = "<img src='{$image['url']}' alt='{$alttext}' class='{$class}' />";
}
if ( $image['size'] == 'singlepic' ) {
$html = "[singlepic id={$send_id} w={$width} h={$height} float={$image['align']}]";
}
media_upload_nextgen_save_image();
// Return it to TinyMCE.
return media_send_to_editor( $html );
}
// Save button.
if ( isset( $_POST['save'] ) ) {
media_upload_nextgen_save_image();
}
wp_iframe( 'media_upload_nextgen_form', $errors );
die();
}
function media_upload_nextgen_save_image() {
global $wpdb;
check_admin_referer( 'ngg-media-form' );
if ( ! empty( $_POST['image'] ) ) {
foreach ( $_POST['image'] as $image_id => $image ) {
// create a unique slug.
$image_slug = nggdb::get_unique_slug( sanitize_title( $image['alttext'] ), 'image' );
$wpdb->query(
$wpdb->prepare(
"UPDATE {$wpdb->nggpictures} SET `image_slug` = %s, `alttext` = %s, `description` = %s WHERE pid = %d",
[
$image_slug,
$image['alttext'],
$image['description'],
$image_id,
]
)
);
wp_cache_delete( $image_id, 'ngg_image' );
}
}
}
function media_upload_nextgen_form( $errors ) {
global $wpdb, $ngg;
media_upload_header();
$from = isset( $_GET['from'] ) && 'block-editor' === $_GET['from'] ? 'block-editor' : 'classic-editor';
$post_id = intval( $_REQUEST['post_id'] );
$galleryID = 0;
$total = 1;
$picarray = [];
$chromeless = isset( $_GET['chromeless'] ) ? $_GET['chromeless'] : null;
$chromeless_url = $chromeless ? ( '&chromeless=' . $chromeless ) : null;
$form_action_url = site_url( "wp-admin/media-upload.php?type={$GLOBALS['type']}&tab=nextgen&post_id=$post_id" . $chromeless_url, 'admin' );
// Get number of images in gallery.
if ( isset( $_REQUEST['select_gal'] ) ) {
$galleryID = (int) $_REQUEST['select_gal'];
$total = $wpdb->get_var(
$wpdb->prepare(
"SELECT COUNT(*) FROM {$wpdb->nggpictures} WHERE `galleryid` = %d",
[
$galleryID,
]
)
);
}
// Build navigation.
$_GET['paged'] = isset( $_GET['paged'] ) ? intval( $_GET['paged'] ) : 0;
if ( $_GET['paged'] < 1 ) {
$_GET['paged'] = 1;
}
$start = ( $_GET['paged'] - 1 ) * 10;
if ( $start < 1 ) {
$start = 0;
}
// Get the images.
if ( $galleryID != 0 ) {
// Using %i in $wpdb->prepare() to signify column identifiers was only added in WP 6.2
//
// phpcs:disable WordPress.DB.PreparedSQL.InterpolatedNotPrepared
$picarray = $wpdb->get_col(
$wpdb->prepare(
"SELECT DISTINCT `pid` FROM {$wpdb->nggpictures} WHERE `galleryid` = %d AND `exclude` != 1 ORDER BY {$ngg->options['galSort']}, `pid` {$ngg->options['galSortDir']} LIMIT {$start}, 10",
[
$galleryID,
]
)
);
// phpcs:enable WordPress.DB.PreparedSQL.InterpolatedNotPrepared
}
// WP-Core code for Post-thumbnail.
$calling_post_id = 0;
if ( isset( $_GET['post_id'] ) ) {
$calling_post_id = $_GET['post_id'];
}
?>
<script>
function NGGSetAsThumbnail(id, wp_nonce, ngg_nonce) {
if (top.set_ngg_post_thumbnail) {
top.set_ngg_post_thumbnail(id, wp_nonce);
return;
}
var $link = jQuery('a#ngg-post-thumbnail-' + id);
$link.text(setPostThumbnailL10n.saving);
jQuery.post(
ajaxurl,
{
action: "ngg_set_post_thumbnail",
post_id: post_id,
thumbnail_id: id,
cookie: encodeURIComponent(document.cookie),
nonce: ngg_nonce
},
function(str) {
var win = window.dialogArguments || opener || parent || top;
$link.text( setPostThumbnailL10n.setThumbnail );
if ( str == '0' ) {
alert( setPostThumbnailL10n.error );
} else if (str == '-1') {
// image removed
} else {
jQuery('a.ngg-post-thumbnail').each(function() { jQuery(this).show(); });
jQuery('a.ngg-post-thumbnail-standin').each(function() { jQuery(this).hide(); });
$link.hide();
var $dummy = $link.next();
$dummy.attr('id', 'wp-post-thumbnail-' + str);
$dummy.show();
WPSetAsThumbnail(str, wp_nonce);
}
});
}
</script>
<form id="filter" action="" method="get">
<input type="hidden" name="from" value="<?php echo esc_attr( $from ); ?>"/>
<input type="hidden" name="type" value="<?php echo esc_attr( $GLOBALS['type'] ); ?>" />
<input type="hidden" name="tab" value="<?php echo esc_attr( $GLOBALS['tab'] ); ?>" />
<?php
if ( $chromeless ) {
?>
<input type="hidden" name="chromeless" value="<?php echo esc_attr( $chromeless ); ?>" />
<?php
}
?>
<input type="hidden" name="post_id" value="<?php echo (int) $post_id; ?>" />
<div class="tablenav">
<?php
$page_links = paginate_links(
[
'base' => add_query_arg( 'paged', '%#%' ),
'format' => '',
'total' => ceil( $total / 10 ),
'current' => $_GET['paged'],
]
);
if ( $page_links ) {
echo "<div class='tablenav-pages'>$page_links</div>";
}
?>
<div class="alignleft actions">
<select id="select_gal" name="select_gal" style="width:220px;">
<option value="0" <?php selected( '0', $galleryID ); ?> ><?php esc_attr_e( 'No gallery', 'nggallery' ); ?></option>
<?php
// Show gallery selection.
$gallerylist = \Imagely\NGG\DataMappers\Gallery::get_instance()->find_all();
if ( is_array( $gallerylist ) ) {
foreach ( $gallerylist as $gallery ) {
$selected = ( $gallery->gid == $galleryID ) ? ' selected="selected"' : '';
$gallery_title = apply_filters( 'ngg_gallery_title_select_field', $gallery->title, $gallery, $gallery->gid == $galleryID );
echo "<option value='{$gallery->gid}'{$selected}>{$gallery_title}</option>\n";
}
}
?>
</select>
<input type="submit" id="show-gallery" value="<?php esc_attr_e( 'Select »', 'nggallery' ); ?>" class="button-secondary" />
</div>
<br style="clear:both;" />
</div>
</form>
<br style="clear:both;"/>
<form enctype="multipart/form-data" method="post" action="<?php echo esc_attr( $form_action_url ); ?>" class="media-upload-form" id="library-form">
<?php wp_nonce_field( 'ngg-media-form' ); ?>
<script type="text/javascript">
<!--
jQuery(function($){
var preloaded = $(".media-item.preloaded");
if ( preloaded.length > 0 ) {
preloaded.each(function(){prepareMediaItem({id:this.id.replace(/[^0-9]/g, '')},'');});
updateMediaForm();
}
});
-->
</script>
<style type="text/css">
.ngg-from-block-editor .ml-submit,
.ngg-from-block-editor .describe .alttext,
.ngg-from-block-editor .describe .caption,
.ngg-from-block-editor .describe .align,
.ngg-from-block-editor .describe .alttext,
.ngg-from-block-editor .describe .image-size,
.ngg-from-block-editor .describe .ngg-mlitp
{
display: none;
}
</style>
<div id="media-items" class="ngg-from-<?php echo esc_attr( $from ); ?>">
<?php
if ( is_array( $picarray ) ) {
$ajax_nonce = wp_create_nonce( "set_post_thumbnail-$calling_post_id" );
$storage = \Imagely\NGG\DataStorage\Manager::get_instance();
foreach ( $picarray as $picid ) {
// TODO:Reduce SQL Queries.
$picture = nggdb::find_image( $picid );
$dimensions = $storage->get_image_dimensions( $picid, 'thumb' );
extract( $dimensions );
$thumb_url = $storage->get_image_url( $picid, 'thumb' );
?>
<div id='media-item-<?php echo $picid; ?>' class='media-item preloaded'>
<div class='filename'></div>
<a class='toggle describe-toggle-on' href='#'><?php esc_html_e( 'Show', 'nggallery' ); ?></a>
<a class='toggle describe-toggle-off' href='#'><?php esc_html_e( 'Hide', 'nggallery' ); ?></a>
<div class='filename new'><?php echo ( empty( $picture->alttext ) ) ? wp_html_excerpt( esc_html( $picture->filename ), 60 ) : stripslashes( wp_html_excerpt( esc_html( $picture->alttext ), 60 ) ); ?></div>
<table class='slidetoggle describe startclosed'><tbody>
<tr class="thumb">
<td rowspan='4'><img class='thumbnail' alt='<?php echo esc_attr( $picture->alttext ); ?>' src='<?php echo esc_url( $thumb_url ); ?>'/></td>
<td><?php esc_html_e( 'Image ID:', 'nggallery' ); ?><?php echo $picid; ?></td>
</tr>
<tr><td><?php echo esc_html( $picture->filename ); ?></td></tr>
<tr><td><?php echo esc_html( stripslashes( $picture->alttext ) ); ?></td></tr>
<tr><td> </td></tr>
<tr class="alttext">
<td class="label"><label for="image[<?php echo $picid; ?>][alttext]"><?php esc_attr_e( 'Alt/Title text', 'nggallery' ); ?></label></td>
<td class="field"><input id="image[<?php echo $picid; ?>][alttext]" name="image[<?php echo $picid; ?>][alttext]" value="<?php echo esc_attr( stripslashes( $picture->alttext ) ); ?>" type="text"/></td>
</tr>
<tr class="caption">
<td class="label"><label for="image[<?php echo $picid; ?>][description]"><?php esc_attr_e( 'Description', 'nggallery' ); ?></label></td>
<td class="field"><textarea name="image[<?php echo $picid; ?>][description]" id="image[<?php echo $picid; ?>][description]"><?php echo esc_attr( stripslashes( $picture->description ) ); ?></textarea></td>
</tr>
<tr class="align">
<td class="label"><label for="image[<?php echo $picid; ?>][align]"><?php esc_attr_e( 'Alignment', 'nggallery' ); ?></label></td>
<td class="field">
<input name="image[<?php echo $picid; ?>][align]" id="image-align-none-<?php echo $picid; ?>" checked="checked" value="none" type="radio" />
<label for="image-align-none-<?php echo $picid; ?>" class="align image-align-none-label"><?php esc_attr_e( 'None', 'nggallery' ); ?></label>
<input name="image[<?php echo $picid; ?>][align]" id="image-align-left-<?php echo $picid; ?>" value="left" type="radio" />
<label for="image-align-left-<?php echo $picid; ?>" class="align image-align-left-label"><?php esc_attr_e( 'Left', 'nggallery' ); ?></label>
<input name="image[<?php echo $picid; ?>][align]" id="image-align-center-<?php echo $picid; ?>" value="center" type="radio" />
<label for="image-align-center-<?php echo $picid; ?>" class="align image-align-center-label"><?php esc_attr_e( 'Center', 'nggallery' ); ?></label>
<input name="image[<?php echo $picid; ?>][align]" id="image-align-right-<?php echo $picid; ?>" value="right" type="radio" />
<label for="image-align-right-<?php echo $picid; ?>" class="align image-align-right-label"><?php esc_attr_e( 'Right', 'nggallery' ); ?></label>
</td>
</tr>
<tr class="image-size">
<th class="label"><label for="image[<?php echo $picid; ?>][size]"><span class="alignleft"><?php esc_attr_e( 'Size', 'nggallery' ); ?></span></label>
</th>
<td class="field">
<input name="image[<?php echo $picid; ?>][size]" id="image-size-thumb-<?php echo $picid; ?>" type="radio" checked="checked" value="thumbnail" />
<label for="image-size-thumb-<?php echo $picid; ?>"><?php esc_attr_e( 'Thumbnail', 'nggallery' ); ?></label>
<input name="image[<?php echo $picid; ?>][size]" id="image-size-full-<?php echo $picid; ?>" type="radio" value="full" />
<label for="image-size-full-<?php echo $picid; ?>"><?php esc_attr_e( 'Full size', 'nggallery' ); ?></label>
<input name="image[<?php echo $picid; ?>][size]" id="image-size-singlepic-<?php echo $picid; ?>" type="radio" value="singlepic" />
<label for="image-size-singlepic-<?php echo $picid; ?>"><?php esc_attr_e( 'Singlepic', 'nggallery' ); ?></label>
</td>
</tr>
<tr class="submit">
<td>
<input type="hidden" name="image[<?php echo $picid; ?>][thumb]" value="<?php echo esc_attr( $picture->thumbURL ); ?>" />
<input type="hidden" name="image[<?php echo $picid; ?>][url]" value="<?php echo esc_attr( $picture->imageURL ); ?>" />
</td>
<td class="savesend">
<?php
if ( $calling_post_id && current_theme_supports( 'post-thumbnails', get_post_type( $calling_post_id ) ) ) {
$ajax_nonce = wp_create_nonce( "set_post_thumbnail-$calling_post_id" );
}
$second_nonce = wp_create_nonce( 'ngg_set_post_thumbnails' );
echo "<a class='ngg-post-thumbnail' id='ngg-post-thumbnail-" . $picid . "' href='#' onclick='NGGSetAsThumbnail(\"$picid\", \"$ajax_nonce\", \"$second_nonce\"); return false;'>" . esc_html__( 'Use as featured image', 'nggallery' ) . '</a>';
echo "<a class='ngg-post-thumbnail-standin' href='#' style='display:none;'></a>";
?>
<button type="submit" id="ngg-mlitp-<?php echo esc_attr( $picid ); ?>" class="button ngg-mlitp" value="1" name="send[<?php echo $picid; ?>]"><?php esc_html_e( 'Insert into Post', 'nggallery' ); ?></button>
</td>
</tr>
</tbody></table>
</div>
<?php
}
}
?>
</div>
<p class="ml-submit">
<input type="submit" class="button savebutton" name="save" value="<?php esc_attr_e( 'Save all changes', 'nggallery' ); ?>" />
</p>
<input type="hidden" name="post_id" id="post_id" value="<?php echo (int) $post_id; ?>" />
<input type="hidden" name="select_gal" id="select_gal" value="<?php echo (int) $galleryID; ?>" />
</form>
<script type="text/javascript">
jQuery(function($) {
if (window.location.toString().indexOf('block-editor') == -1) {
// reset the media library modal tab
var mlmodal = top.wp.media.editor.get();
if (mlmodal) {
mlmodal.on('close', function() {
mlmodal.setState('insert');
});
}
}
});
</script>
<?php
}