| Server IP : 104.21.26.5 / Your IP :
216.73.216.221 [
Web Server : LiteSpeed System : Linux premium35.web-hosting.com 4.18.0-553.44.1.lve.el8.x86_64 #1 SMP Thu Mar 13 14:29:12 UTC 2025 x86_64 User : lasanffc ( 2331) PHP Version : 8.0.30 Disable Function : NONE Domains : 1 Domains MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : OFF | Pkexec : OFF Directory : /home/lasanffc/public_html/wp-content/themes/theme-check/checks/ |
Upload File : |
<?php
/**
* Checks if Customizer settings have sanitization callbacks
*
* @package Theme Check
*/
/**
* Check whether every Customizer setting has a sanitization callback set.
*
* Check whether every Customizer setting has a sanitization callback set and that it is not empty.
*/
class Customizer_Check implements themecheck {
/**
* Error messages, warnings and info notices.
*
* @var array $error
*/
protected $error = array();
/**
* Check that return true for good/okay/acceptable, false for bad/not-okay/unacceptable.
*
* @param array $php_files File paths and content for PHP files.
* @param array $css_files File paths and content for CSS files.
* @param array $other_files Folder names, file paths and content for other files.
*/
public function check( $php_files, $css_files, $other_files ) {
$ret = true;
checkcount();
foreach ( $php_files as $file_path => $file_content ) {
// Get the arguments passed to the add_setting method.
if ( preg_match_all( '/\$wp_customize->add_setting\(([^;]+)/', $file_content, $matches ) ) {
// The full match is in [0], the match group in [1].
foreach ( $matches[1] as $match ) {
// Check if we have sanitize_callback or sanitize_js_callback.
if (
false === strpos( $match, 'sanitize_callback' ) &&
false === strpos( $match, 'sanitize_js_callback' )
) {
/*
* Clean up our match to be able to present the results better.
*
* Note: The delimiter in the below regex using $match MUST be a special regex character per preg_quote().
*/
$ret = false;
$match = preg_split( '/,/', $match );
$grep = tc_preg( '!' . preg_quote( $match[0], '!' ) . '!', $file_path );
$grep = preg_split( '/,/', $grep );
$this->error[] = sprintf(
'<span class="tc-lead tc-required">%s</span>: %s %s',
__( 'REQUIRED', 'theme-check' ),
sprintf(
__( 'Found a Customizer setting called %1$s in %2$s that did not have a sanitization callback function. ', 'theme-check' ) . __( 'Every call to the <strong>add_setting()</strong> method needs to have a sanitization callback function passed.', 'theme-check' ),
'<strong>' . $match[0] . '</strong>',
'<strong>' . tc_filename( $file_path ) . '</strong>'
),
$grep[0]
);
} else {
// There's a callback, check that no empty parameter is passed.
if ( preg_match( '/[\'"](?:sanitize_callback|sanitize_js_callback)[\'"]\s*=>\s*[\'"]\s*[\'"]/', $match ) ) {
$ret = false;
$match = preg_split( '/,/', $match );
$grep = tc_preg( '/[\'"](?:sanitize_callback|sanitize_js_callback)[\'"]\s*=>\s*[\'"]\s*[\'"]/', $file_path );
$grep = preg_split( '/,/', $grep );
$this->error[] = sprintf(
'<span class="tc-lead tc-required">%s</span>: %s %s',
__( 'REQUIRED', 'theme-check' ),
sprintf(
__( 'Found a Customizer setting called %1$s in %2$s that had an empty value passed as sanitization callback. You need to pass a function name as sanitization callback.', 'theme-check' ),
'<strong>' . $match[0] . '</strong>',
'<strong>' . tc_filename( $file_path ) . '</strong>'
),
$grep[0]
);
}
}
}
}
}
return $ret;
}
/**
* Get error messages from the checks.
*
* @return array Error message.
*/
public function getError() {
return $this->error;
}
}
$themechecks[] = new Customizer_Check();