admin_url( 'admin-ajax.php' ),
'nonce' => wp_create_nonce( 'abilities_bridge_activity_log' ),
)
);
}
/**
* Verify the page navigation nonce.
*
* Returns true if nonce is valid or not present (first page load).
* Dies with error if nonce is present but invalid.
*
* @return bool True if request is valid.
*/
private static function verify_page_nonce() {
$nonce = filter_input( INPUT_GET, '_wpnonce', FILTER_SANITIZE_FULL_SPECIAL_CHARS );
// No nonce present = first page load, allow with defaults.
if ( empty( $nonce ) ) {
return false;
}
// Nonce present - verify it.
if ( ! wp_verify_nonce( $nonce, 'abilities_bridge_activity_log_nav' ) ) {
wp_die(
esc_html__( 'Security verification failed. Please use the navigation links provided.', 'abilities-bridge' ),
esc_html__( 'Security Check Failed', 'abilities-bridge' ),
array( 'response' => 403 )
);
}
return true;
}
/**
* Get a sanitized GET parameter for display purposes.
*
* Verifies nonce before accessing parameters. If no nonce is present
* (first page load), returns the default value.
*
* @param string $key Parameter key.
* @param string $default Default value.
* @return string Sanitized value.
*/
private static function get_display_param( $key, $default = '' ) {
// Verify nonce - returns false if no nonce (first load).
if ( ! self::verify_page_nonce() ) {
return $default;
}
$value = filter_input( INPUT_GET, $key, FILTER_SANITIZE_FULL_SPECIAL_CHARS );
return ! empty( $value ) ? sanitize_key( $value ) : $default;
}
/**
* Get a sanitized integer GET parameter for display purposes.
*
* Verifies nonce before accessing parameters. If no nonce is present
* (first page load), returns the default value.
*
* @param string $key Parameter key.
* @param int $default Default value.
* @return int Sanitized integer value.
*/
private static function get_display_int_param( $key, $default = 0 ) {
// Verify nonce - returns false if no nonce (first load).
if ( ! self::verify_page_nonce() ) {
return $default;
}
$value = filter_input( INPUT_GET, $key, FILTER_VALIDATE_INT );
return false !== $value && null !== $value ? max( 1, absint( $value ) ) : $default;
}
/**
* Render the page
*/
public static function render_page() {
$current_tab = self::get_display_param( 'tab', 'activity' );
?>
403 )
);
}
// Nonce is valid - build filters safely using filter_input.
// User ID filter.
$user_id = filter_input( INPUT_GET, 'user_id', FILTER_VALIDATE_INT );
if ( false !== $user_id && null !== $user_id && $user_id > 0 ) {
$filters['user_id'] = $user_id;
}
// Status filter.
$status = filter_input( INPUT_GET, 'status', FILTER_SANITIZE_FULL_SPECIAL_CHARS );
if ( ! empty( $status ) ) {
$filters['status'] = sanitize_key( $status );
}
// Search term filter.
$search = filter_input( INPUT_GET, 'search', FILTER_SANITIZE_FULL_SPECIAL_CHARS );
if ( ! empty( $search ) ) {
$filters['search'] = sanitize_text_field( $search );
}
return $filters;
}
/**
* Render Activity Log tab
*/
private static function render_activity_tab() {
// Get validated filters (handles all nonce checking internally).
$filters = self::get_validated_filters();
// Get filter options.
$users = get_users( array( 'fields' => array( 'ID', 'user_login' ) ) );
?>
1 ) : ?>
add_query_arg( 'paged', '%#%', $base_url ),
'format' => '',
'current' => $page,
'total' => $result['total_pages'],
'prev_text' => '«',
'next_text' => '»',
)
)
);
?>
|
|
|
|
MCP
Chat
|
|
|
✗
✓
|
|
1 ) :
?>
= 0 && $new_retention <= 90 ) {
update_option( 'abilities_bridge_log_retention_days', $new_retention );
$retention_days = $new_retention;
echo '' . esc_html__( 'Log retention settings saved.', 'abilities-bridge' ) . '
';
printf(
/* translators: 1: number of logs deleted, 2: number of conversations purged */
esc_html__( 'Cleanup complete: %1$d logs deleted, %2$d conversations purged.', 'abilities-bridge' ),
absint( $results['logs_deleted'] ),
absint( $results['conversations_deleted'] )
);
echo '