WebOrbiton
v1.0.0.1

StocketBase

← Changes All versions
848 lines · 34.3 KB
  1. <?php
  2. ​
  3. declare(strict_types=1);
  4. ​
  5. require_once __DIR__ . '/database.php';
  6. require_once __DIR__ . '/icons.php';
  7. require_once __DIR__ . '/social-icons.php';
  8. require_once __DIR__ . '/product-scheduler.php';
  9. require_once __DIR__ . '/languages.php';
  10. ​
  11. final class SiteFront
  12. {
  13. private static ?array $settings = null;
  14. ​
  15. public const AD_PLACEMENTS = [
  16. 'header' => 'Under the menu, on every page',
  17. 'homepage-top' => 'Home page, above featured products',
  18. 'catalog-top' => 'Between products in lists',
  19. 'product-page' => 'Product page, under the photos',
  20. 'checkout' => 'Checkout page',
  21. 'footer' => 'Just above the footer',
  22. ];
  23. ​
  24. public static function productUrl(string $slug, ?string $lang = null): string
  25. {
  26. $basePath = rtrim((string) Config::get('APP_BASE_PATH', ''), '/');
  27. $prefix = $lang === null ? Languages::prefix() : ($lang === '' ? '' : '/' . $lang);
  28. if ((self::settings()['clean_product_urls'] ?? '0') === '1') {
  29. return $basePath . $prefix . '/' . rawurlencode($slug);
  30. }
  31. ​
  32. return $basePath . $prefix . '/product.php?slug=' . rawurlencode($slug);
  33. }
  34. ​
  35. public static function resetSettings(): void
  36. {
  37. self::$settings = null;
  38. }
  39. ​
  40. public static function settings(): array
  41. {
  42. if (self::$settings !== null) {
  43. return self::$settings;
  44. }
  45. ​
  46. $defaults = [
  47. 'site_name' => Config::get('APP_NAME', 'StocketBase'),
  48. 'site_description' => '',
  49. 'seo_title' => '',
  50. 'seo_description' => '',
  51. 'seo_keywords' => '',
  52. 'seo_author' => '',
  53. 'seo_reply_to' => '',
  54. 'seo_application_name' => '',
  55. 'seo_robots_index' => '1',
  56. 'seo_robots_follow' => '1',
  57. 'seo_og_product_image_enabled' => '0',
  58. 'llms_txt_enabled' => '0',
  59. 'site_logo_url' => '',
  60. 'site_show_name_with_logo' => '0',
  61. 'site_short_name' => '',
  62. 'site_short_name_enabled' => '0',
  63. 'registration_enabled' => '1',
  64. 'login_enabled' => '1',
  65. 'require_account_to_purchase' => '0',
  66. 'download_link_expiry_days' => '30',
  67. 'download_link_max_downloads' => '10',
  68. 'contact_enabled' => '0',
  69. 'contact_recipient_email' => '',
  70. 'contact_provider' => 'php_mail',
  71. 'contact_subject_mode' => 'free',
  72. 'contact_subjects' => '',
  73. 'contact_from_email' => '',
  74. 'contact_resend_api_key' => '',
  75. 'contact_postmark_token' => '',
  76. 'custom_css' => '',
  77. 'custom_js' => '',
  78. 'custom_head_html' => '',
  79. 'custom_head_html_index' => '0',
  80. 'custom_head_html_product' => '0',
  81. 'custom_head_html_category' => '0',
  82. 'custom_head_html_pages' => '0',
  83. 'custom_body_html' => '',
  84. 'custom_body_html_index' => '0',
  85. 'custom_body_html_product' => '0',
  86. 'custom_body_html_category' => '0',
  87. 'custom_body_html_pages' => '0',
  88. 'menu_position' => 'top',
  89. 'featured_banner_enabled' => '0',
  90. 'featured_banner_mode' => 'static',
  91. 'featured_banner_hide_duplicates' => '0',
  92. 'featured_banner_product_1' => '0',
  93. 'featured_banner_product_2' => '0',
  94. 'featured_banner_product_3' => '0',
  95. 'featured_banner_product_4' => '0',
  96. 'featured_banner_product_5' => '0',
  97. 'featured_banner_auto_window_value' => '24',
  98. 'featured_banner_auto_window_unit' => 'hours',
  99. 'featured_banner_auto_category_mode' => 'mixed',
  100. 'related_products_enabled' => '1',
  101. 'product_show_buyers' => '0',
  102. 'product_show_downloads' => '0',
  103. 'back_to_top_enabled' => '0',
  104. 'back_to_top_progress_enabled' => '0',
  105. 'breadcrumbs_enabled' => '0',
  106. 'tags_enabled' => '0',
  107. 'shop_icon_choice' => 'cart',
  108. 'shop_icon_custom_svg' => '',
  109. 'activity_log_enabled' => '0',
  110. 'seo_preview_enabled' => '0',
  111. 'indexnow_enabled' => '0',
  112. 'indexnow_key' => '',
  113. 'sitemap_rss_enabled' => '1',
  114. 'reviews_enabled' => '1',
  115. 'consent_manager_enabled' => '0',
  116. 'consent_footer_icon_enabled' => '0',
  117. 'heading_font' => 'Plus Jakarta Sans',
  118. 'body_font' => 'PT Serif',
  119. 'interface_font' => 'Plus Jakarta Sans',
  120. 'store_category' => 'general',
  121. 'pricing_model' => 'per_product',
  122. 'store_currency' => 'USD',
  123. 'payment_provider' => 'stripe',
  124. 'payment_webhook_secret' => '',
  125. 'payment_polar_webhook_secret' => '',
  126. 'payment_stripe_secret_key' => '',
  127. 'payment_stripe_publishable_key' => '',
  128. 'payment_polar_access_token' => '',
  129. 'payment_polar_organization_id' => '',
  130. 'subscription_interval' => 'month',
  131. 'mail_transport' => 'smtp',
  132. 'mail_smtp_host' => '',
  133. 'mail_smtp_port' => '587',
  134. 'mail_smtp_username' => '',
  135. 'mail_smtp_password' => '',
  136. 'mail_smtp_encryption' => 'tls',
  137. 'mail_resend_api_key' => '',
  138. 'mail_postmark_server_token' => '',
  139. 'mail_from_email' => '',
  140. 'mail_from_name' => '',
  141. 'mail_reply_to' => '',
  142. 'footer_columns' => '[]',
  143. 'footer_social_links' => '[]',
  144. 'product_loading_mode' => 'scroll',
  145. 'pagination_style' => 'numbered',
  146. 'products_per_page_home' => '12',
  147. 'products_per_page_category' => '12',
  148. 'search_enabled' => '1',
  149. 'search_match_title' => '1',
  150. 'search_match_excerpt' => '1',
  151. 'search_match_content' => '0',
  152. 'search_style' => 'icon',
  153. 'search_show_in_nav' => '1',
  154. 'search_show_in_footer' => '0',
  155. 'share_enabled' => '0',
  156. 'share_facebook' => '1',
  157. 'share_twitter' => '1',
  158. 'share_linkedin' => '1',
  159. 'share_whatsapp' => '1',
  160. 'share_telegram' => '0',
  161. 'share_email' => '1',
  162. 'share_copy_link' => '1',
  163. 'pwa_enabled' => '0',
  164. 'pwa_name' => '',
  165. 'pwa_short_name' => '',
  166. 'pwa_description' => '',
  167. 'pwa_icon_url' => '',
  168. 'pwa_theme_color' => '#ffffff',
  169. 'pwa_background_color' => '#ffffff',
  170. 'app_banner_enabled' => '0',
  171. 'app_android_url' => '',
  172. 'app_ios_url' => '',
  173. 'multilang_enabled' => '0',
  174. 'multilang_default_code' => 'en',
  175. 'multilang_default_name' => 'English',
  176. 'multilang_switcher' => '1',
  177. ];
  178. ​
  179. $rows = Database::site()->query('SELECT setting_key, setting_value FROM site_settings')->fetchAll();
  180. $values = [];
  181. foreach ($rows as $row) {
  182. $values[$row['setting_key']] = $row['setting_value'];
  183. }
  184. ​
  185. self::$settings = array_merge($defaults, $values);
  186. self::$settings = Languages::applySiteTexts(self::$settings);
  187. ProductScheduler::publishDue();
  188. ​
  189. return self::$settings;
  190. }
  191. ​
  192. public static function navItems(): array
  193. {
  194. try {
  195. $rows = Database::site()->query(
  196. 'SELECT * FROM nav_items ORDER BY sort_order ASC, id ASC'
  197. )->fetchAll();
  198. } catch (PDOException $e) {
  199. return self::fallbackNavItems();
  200. }
  201. ​
  202. if (empty($rows)) {
  203. return self::fallbackNavItems();
  204. }
  205. ​
  206. $items = [];
  207. $navTitles = Languages::titles('nav', array_map('intval', array_column($rows, 'id')));
  208. foreach ($rows as $row) {
  209. if ($row['item_type'] === 'category') {
  210. $statement = Database::site()->prepare(
  211. 'SELECT id, name, slug FROM categories WHERE id = :id AND show_in_menu = 1 LIMIT 1'
  212. );
  213. $statement->execute(['id' => $row['ref_id']]);
  214. $category = $statement->fetch();
  215. if (!$category) {
  216. continue;
  217. }
  218. $category = Languages::categories([$category])[0];
  219. $items[] = [
  220. 'label' => $navTitles[(int) $row['id']] ?? ($row['label'] !== null && $row['label'] !== '' ? $row['label'] : $category['name']),
  221. 'url' => 'category.php?slug=' . urlencode($category['slug']),
  222. 'target' => '_self',
  223. 'icon_html' => self::navItemIconHtml($row['icon_key'] ?? null, $row['icon_svg'] ?? null),
  224. ];
  225. continue;
  226. }
  227. ​
  228. if ($row['item_type'] === 'page') {
  229. $statement = Database::site()->prepare(
  230. "SELECT id, title, slug FROM pages WHERE id = :id AND show_in_menu = 1 AND status = 'published' AND is_home = 0 LIMIT 1"
  231. );
  232. $statement->execute(['id' => $row['ref_id']]);
  233. $page = $statement->fetch();
  234. if (!$page) {
  235. continue;
  236. }
  237. $page = Languages::pages([$page])[0];
  238. $items[] = [
  239. 'label' => $navTitles[(int) $row['id']] ?? ($row['label'] !== null && $row['label'] !== '' ? $row['label'] : $page['title']),
  240. 'url' => 'page.php?slug=' . urlencode($page['slug']),
  241. 'target' => '_self',
  242. 'icon_html' => self::navItemIconHtml($row['icon_key'] ?? null, $row['icon_svg'] ?? null),
  243. ];
  244. continue;
  245. }
  246. ​
  247. if ($row['item_type'] === 'custom') {
  248. if (empty($row['label']) || empty($row['url'])) {
  249. continue;
  250. }
  251. $items[] = [
  252. 'label' => $navTitles[(int) $row['id']] ?? $row['label'],
  253. 'url' => $row['url'],
  254. 'target' => $row['target'] === '_blank' ? '_blank' : '_self',
  255. 'icon_html' => self::navItemIconHtml($row['icon_key'] ?? null, $row['icon_svg'] ?? null),
  256. ];
  257. }
  258. }
  259. ​
  260. return $items;
  261. }
  262. ​
  263. public static function appendToCustomMenu(string $itemType, int $refId): void
  264. {
  265. if (!in_array($itemType, ['category', 'page'], true) || $refId <= 0) {
  266. return;
  267. }
  268. ​
  269. try {
  270. $db = Database::site();
  271. if ((int) $db->query('SELECT COUNT(*) FROM nav_items')->fetchColumn() === 0) {
  272. return;
  273. }
  274. ​
  275. $existing = $db->prepare('SELECT 1 FROM nav_items WHERE item_type = :type AND ref_id = :ref_id LIMIT 1');
  276. $existing->execute(['type' => $itemType, 'ref_id' => $refId]);
  277. if ($existing->fetchColumn()) {
  278. return;
  279. }
  280. ​
  281. $nextOrder = (int) $db->query('SELECT COALESCE(MAX(sort_order), -1) + 1 FROM nav_items')->fetchColumn();
  282. $db->prepare('INSERT INTO nav_items (item_type, ref_id, sort_order) VALUES (:type, :ref_id, :sort_order)')
  283. ->execute(['type' => $itemType, 'ref_id' => $refId, 'sort_order' => $nextOrder]);
  284. } catch (PDOException $exception) {
  285. error_log('StocketBase: could not add ' . $itemType . ' ' . $refId . ' to the menu: ' . $exception->getMessage());
  286. }
  287. }
  288. ​
  289. private static function navItemIconHtml(?string $iconKey, ?string $iconSvg): string
  290. {
  291. if ($iconKey === 'custom' && !empty($iconSvg)) {
  292. return '<span class="nav-item-icon" aria-hidden="true">' . $iconSvg . '</span>';
  293. }
  294. ​
  295. if (!empty($iconKey) && Icons::isNavIcon($iconKey)) {
  296. return Icons::icon($iconKey, 'icon icon-sm nav-item-icon');
  297. }
  298. ​
  299. return '';
  300. }
  301. ​
  302. private static function fallbackNavItems(): array
  303. {
  304. $items = [];
  305. ​
  306. $categories = Database::site()->query(
  307. 'SELECT id, name, slug FROM categories WHERE show_in_menu = 1 ORDER BY sort_order ASC, name ASC'
  308. )->fetchAll();
  309. $categories = Languages::categories($categories);
  310. foreach ($categories as $category) {
  311. $items[] = [
  312. 'label' => $category['name'],
  313. 'url' => 'category.php?slug=' . urlencode($category['slug']),
  314. 'target' => '_self',
  315. ];
  316. }
  317. ​
  318. try {
  319. $pages = Database::site()->query(
  320. "SELECT id, title, slug FROM pages WHERE show_in_menu = 1 AND status = 'published' AND is_home = 0 ORDER BY sort_order ASC, title ASC"
  321. )->fetchAll();
  322. } catch (PDOException $e) {
  323. $pages = [];
  324. }
  325. $pages = Languages::pages($pages);
  326. foreach ($pages as $page) {
  327. $items[] = [
  328. 'label' => $page['title'],
  329. 'url' => 'page.php?slug=' . urlencode($page['slug']),
  330. 'target' => '_self',
  331. ];
  332. }
  333. ​
  334. return $items;
  335. }
  336. ​
  337. public static function renderSearchControl(string $context): string
  338. {
  339. $settings = self::settings();
  340. ​
  341. if ($settings['search_enabled'] !== '1') {
  342. return '';
  343. }
  344. ​
  345. $placementKey = $context === 'footer' ? 'search_show_in_footer' : 'search_show_in_nav';
  346. if (($settings[$placementKey] ?? '0') !== '1') {
  347. return '';
  348. }
  349. ​
  350. $searchLabel = Language::get('nav_search', 'Search');
  351. $searchPlaceholder = Language::get('search_placeholder', 'Search');
  352. $magnifierSvg = '<svg class="icon icon-sm" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="11" cy="11" r="7"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line></svg>';
  353. ​
  354. if ($settings['search_style'] === 'field') {
  355. return '<form action="search.php" method="get" class="site-search-form site-search-form-' . htmlspecialchars($context, ENT_QUOTES)
  356. . '" role="search">'
  357. . '<span class="site-search-form-icon">' . $magnifierSvg . '</span>'
  358. . '<input type="text" name="q" class="site-search-input" placeholder="' . htmlspecialchars($searchPlaceholder, ENT_QUOTES) . '" aria-label="' . htmlspecialchars($searchLabel, ENT_QUOTES) . '">'
  359. . '</form>';
  360. }
  361. ​
  362. return '<a href="search.php" class="site-search-icon-link" aria-label="' . htmlspecialchars($searchLabel, ENT_QUOTES) . '">' . $magnifierSvg . '</a>';
  363. }
  364. ​
  365. public static function renderShareControl(array $article): string
  366. {
  367. $settings = self::settings();
  368. if (($settings['share_enabled'] ?? '0') !== '1') {
  369. return '';
  370. }
  371. ​
  372. $url = self::currentUrl();
  373. $encodedUrl = urlencode($url);
  374. $encodedTitle = urlencode((string) ($article['title'] ?? ''));
  375. ​
  376. $platformDefs = [
  377. 'facebook' => [
  378. 'label' => Language::get('share_facebook', 'Facebook'),
  379. 'url' => 'https://www.facebook.com/sharer/sharer.php?u=' . $encodedUrl,
  380. 'svg' => SocialIcons::builtinSvg('facebook'),
  381. ],
  382. 'twitter' => [
  383. 'label' => Language::get('share_twitter', 'Twitter / X'),
  384. 'url' => 'https://twitter.com/intent/tweet?url=' . $encodedUrl . '&text=' . $encodedTitle,
  385. 'svg' => SocialIcons::builtinSvg('twitter'),
  386. ],
  387. 'linkedin' => [
  388. 'label' => Language::get('share_linkedin', 'LinkedIn'),
  389. 'url' => 'https://www.linkedin.com/sharing/share-offsite/?url=' . $encodedUrl,
  390. 'svg' => SocialIcons::builtinSvg('linkedin'),
  391. ],
  392. 'whatsapp' => [
  393. 'label' => Language::get('share_whatsapp', 'WhatsApp'),
  394. 'url' => 'https://wa.me/?text=' . $encodedTitle . '%20' . $encodedUrl,
  395. 'svg' => '<svg viewBox="0 0 24 24"><path d="M12.04 2c-5.52 0-10 4.48-10 10 0 1.77.46 3.5 1.34 5.02L2 22l5.13-1.35a9.96 9.96 0 0 0 4.91 1.29h.01c5.52 0 10-4.48 10-10S17.56 2 12.04 2zm5.87 14.24c-.25.7-1.45 1.34-2 1.42-.51.08-1.16.12-1.87-.12-.43-.14-.98-.32-1.69-.63-2.97-1.28-4.9-4.27-5.05-4.47-.15-.2-1.21-1.61-1.21-3.07s.76-2.18 1.03-2.48c.27-.3.59-.37.79-.37.2 0 .4 0 .57.01.18.01.43-.07.67.51.25.6.85 2.08.92 2.23.07.15.12.33.02.53-.1.2-.15.33-.3.5-.15.18-.31.4-.45.54-.15.15-.3.31-.13.61.17.3.77 1.27 1.65 2.06 1.13 1.01 2.09 1.32 2.39 1.47.3.15.48.13.65-.08.18-.2.75-.87.95-1.17.2-.3.4-.25.67-.15.27.1 1.73.82 2.03.97.3.15.5.22.57.35.08.13.08.73-.17 1.43z"/></svg>',
  396. ],
  397. 'telegram' => [
  398. 'label' => Language::get('share_telegram', 'Telegram'),
  399. 'url' => 'https://t.me/share/url?url=' . $encodedUrl . '&text=' . $encodedTitle,
  400. 'svg' => '<svg viewBox="0 0 24 24"><path d="M21.9 4.3 18.8 19.5c-.23 1.05-.85 1.3-1.72.81l-4.75-3.5-2.29 2.2c-.25.25-.47.47-.96.47l.34-4.85 8.8-7.95c.38-.34-.09-.53-.6-.19L6.9 12.6l-4.7-1.47c-1.02-.32-1.04-1.02.21-1.5L20.6 2.9c.85-.32 1.6.2 1.3 1.4z"/></svg>',
  401. ],
  402. 'email' => [
  403. 'label' => Language::get('share_email', 'Email'),
  404. 'url' => 'mailto:?subject=' . $encodedTitle . '&body=' . $encodedUrl,
  405. 'svg' => '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect x="3" y="5" width="18" height="14" rx="2"></rect><path d="M3 7l9 6 9-6"></path></svg>',
  406. ],
  407. ];
  408. ​
  409. $platforms = [];
  410. foreach ($platformDefs as $key => $platform) {
  411. if (($settings['share_' . $key] ?? '0') === '1') {
  412. $platforms[$key] = $platform;
  413. }
  414. }
  415. ​
  416. $copyLinkEnabled = ($settings['share_copy_link'] ?? '0') === '1';
  417. if (empty($platforms) && !$copyLinkEnabled) {
  418. return '';
  419. }
  420. ​
  421. $shareLabel = Language::get('article_share', 'Share');
  422. $shareSvg = '<svg class="icon icon-sm" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="18" cy="5" r="3"></circle><circle cx="6" cy="12" r="3"></circle><circle cx="18" cy="19" r="3"></circle><line x1="8.6" y1="10.6" x2="15.4" y2="6.4"></line><line x1="8.6" y1="13.4" x2="15.4" y2="17.6"></line></svg>';
  423. ​
  424. $html = '<div class="article-share">';
  425. $html .= '<button type="button" class="share-toggle-btn" id="share-toggle-btn" aria-expanded="false" aria-haspopup="true">' . $shareSvg . '<span>' . htmlspecialchars($shareLabel) . '</span></button>';
  426. $html .= '<div class="share-panel" id="share-panel">';
  427. ​
  428. foreach ($platforms as $key => $platform) {
  429. $html .= '<a href="' . htmlspecialchars($platform['url'], ENT_QUOTES) . '" class="share-panel-item" target="_blank" rel="noopener noreferrer">'
  430. . '<span class="share-panel-item-icon share-panel-item-icon-' . htmlspecialchars($key, ENT_QUOTES) . '" aria-hidden="true">' . $platform['svg'] . '</span>'
  431. . '<span>' . htmlspecialchars($platform['label']) . '</span>'
  432. . '</a>';
  433. }
  434. ​
  435. if ($copyLinkEnabled) {
  436. $linkSvg = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M10 13a5 5 0 0 0 7.07 0l2.83-2.83a5 5 0 0 0-7.07-7.07l-1.42 1.41"></path><path d="M14 11a5 5 0 0 0-7.07 0L4.1 13.83a5 5 0 0 0 7.07 7.07l1.41-1.41"></path></svg>';
  437. $html .= '<button type="button" class="share-panel-item share-panel-item-copy" id="share-copy-btn" data-share-url="' . htmlspecialchars($url, ENT_QUOTES) . '" data-default-text="' . htmlspecialchars(Language::get('share_copy_link', 'Copy link'), ENT_QUOTES) . '" data-copied-text="' . htmlspecialchars(Language::get('share_link_copied', 'Link copied!'), ENT_QUOTES) . '">'
  438. . '<span class="share-panel-item-icon" aria-hidden="true">' . $linkSvg . '</span>'
  439. . '<span class="js-share-copy-label">' . htmlspecialchars(Language::get('share_copy_link', 'Copy link')) . '</span>'
  440. . '</button>';
  441. }
  442. ​
  443. $html .= '</div></div>';
  444. ​
  445. return $html;
  446. }
  447. ​
  448. public static function menuPages(): array
  449. {
  450. return Database::site()->query(
  451. "SELECT title, slug FROM pages WHERE status = 'published' AND show_in_menu = 1 AND is_home = 0 ORDER BY sort_order ASC, title ASC"
  452. )->fetchAll();
  453. }
  454. ​
  455. public static function homePage(): ?array
  456. {
  457. require_once __DIR__ . '/block-editor.php';
  458. ​
  459. $db = Database::site();
  460. $row = $db->query('SELECT * FROM pages WHERE is_home = 1 ORDER BY id ASC LIMIT 1')->fetch();
  461. if ($row) {
  462. return $row;
  463. }
  464. ​
  465. $settings = self::settings();
  466. $locked = false;
  467. ​
  468. try {
  469. $locked = (int) $db->query("SELECT GET_LOCK('stocketbase_home_page', 5)")->fetchColumn() === 1;
  470. ​
  471. $row = $db->query('SELECT * FROM pages WHERE is_home = 1 ORDER BY id ASC LIMIT 1')->fetch();
  472. if (!$row) {
  473. $slugCheck = $db->prepare('SELECT COUNT(*) FROM pages WHERE slug = :slug');
  474. $slug = '_home';
  475. for ($attempt = 2; $attempt < 100; $attempt++) {
  476. $slugCheck->execute(['slug' => $slug]);
  477. if ((int) $slugCheck->fetchColumn() === 0) {
  478. break;
  479. }
  480. $slug = '_home-' . $attempt;
  481. }
  482. ​
  483. $insert = $db->prepare(
  484. "INSERT INTO pages (author_id, title, slug, content_blocks, status, show_in_menu, sort_order, is_home) VALUES (NULL, :title, :slug, :content, 'published', 0, -1000, 1)"
  485. );
  486. $insert->execute([
  487. 'title' => 'Home page',
  488. 'slug' => $slug,
  489. 'content' => BlockEditor::defaultHomepageBlocks(trim((string) ($settings['site_description'] ?? '')) !== ''),
  490. ]);
  491. ​
  492. $row = $db->query('SELECT * FROM pages WHERE is_home = 1 ORDER BY id ASC LIMIT 1')->fetch();
  493. }
  494. } catch (PDOException $exception) {
  495. $row = false;
  496. } finally {
  497. if ($locked) {
  498. $db->query("SELECT RELEASE_LOCK('stocketbase_home_page')");
  499. }
  500. }
  501. ​
  502. return $row ?: null;
  503. }
  504. ​
  505. public static function categories(): array
  506. {
  507. return Database::site()->query('SELECT id, name, slug FROM categories ORDER BY sort_order ASC, name ASC')->fetchAll();
  508. }
  509. ​
  510. public static function activeAds(string $placement): array
  511. {
  512. $statement = Database::site()->prepare(
  513. 'SELECT * FROM ads WHERE is_active = 1 AND placement = :placement ORDER BY created_at DESC'
  514. );
  515. $statement->execute(['placement' => $placement]);
  516. return $statement->fetchAll();
  517. }
  518. ​
  519. public static function renderAd(array $ad): string
  520. {
  521. switch ($ad['type']) {
  522. case 'static_text':
  523. $html = '<div class="ad-slot ad-text">' . nl2br(htmlspecialchars($ad['content'])) . '</div>';
  524. break;
  525. case 'static_image':
  526. $img = '<img src="' . htmlspecialchars($ad['content']) . '" alt="' . htmlspecialchars($ad['name']) . '">';
  527. $html = '<div class="ad-slot ad-image">' . ($ad['link_url'] ? '<a href="' . htmlspecialchars($ad['link_url']) . '" rel="sponsored noopener" target="_blank">' . $img . '</a>' : $img) . '</div>';
  528. break;
  529. case 'script':
  530. $html = '<div class="ad-slot ad-script" data-requires-consent="0">' . $ad['content'] . '</div>';
  531. break;
  532. default:
  533. $html = '';
  534. }
  535. ​
  536. return $html;
  537. }
  538. ​
  539. public static function activeAnalyticsScripts(string $placement): array
  540. {
  541. $statement = Database::site()->prepare(
  542. 'SELECT * FROM analytics_scripts WHERE is_active = 1 AND placement = :placement ORDER BY created_at ASC'
  543. );
  544. $statement->execute(['placement' => $placement]);
  545. return $statement->fetchAll();
  546. }
  547. ​
  548. public static function renderAnalyticsScripts(string $placement): string
  549. {
  550. $scripts = self::activeAnalyticsScripts($placement);
  551. $consentManagerEnabled = self::settings()['consent_manager_enabled'] === '1';
  552. $html = '';
  553. ​
  554. foreach ($scripts as $script) {
  555. $code = $script['script_code'];
  556. ​
  557. $looksLikeHtml = str_contains($code, '<script') || str_contains($code, '<style') || str_contains($code, '<link') || str_contains($code, '<noscript');
  558. ​
  559. if (!$looksLikeHtml) {
  560. $code = '<script>' . $code . '</script>';
  561. }
  562. ​
  563. if ($script['requires_consent'] && $consentManagerEnabled) {
  564. $safeCode = str_replace('</script>', '<\/script>', $code);
  565. $html .= '<script type="text/plain" class="consent-gated-script" data-placement="' . htmlspecialchars($placement) . '">' . $safeCode . '</script>';
  566. } else {
  567. $html .= $code;
  568. }
  569. }
  570. ​
  571. return $html;
  572. }
  573. ​
  574. public static function renderFontFaces(): string
  575. {
  576. require_once __DIR__ . '/font-library.php';
  577. ​
  578. $settings = self::settings();
  579. $emitted = [];
  580. $css = '';
  581. ​
  582. foreach ([$settings['heading_font'], $settings['body_font'], $settings['interface_font']] as $fontName) {
  583. if ($fontName === '' || in_array($fontName, $emitted, true)) {
  584. continue;
  585. }
  586. $css .= FontLibrary::fontFaceCss($fontName, $fontName);
  587. $emitted[] = $fontName;
  588. }
  589. ​
  590. return $css;
  591. }
  592. ​
  593. public static function fontVariablesCss(): string
  594. {
  595. $settings = self::settings();
  596. $headingFamily = addslashes($settings['heading_font']);
  597. $bodyFamily = addslashes($settings['body_font']);
  598. $interfaceFamily = addslashes($settings['interface_font']);
  599. ​
  600. return ":root{"
  601. . "--font-heading:\"{$headingFamily}\", -apple-system, BlinkMacSystemFont, sans-serif;"
  602. . "--font-body:\"{$bodyFamily}\", Georgia, serif;"
  603. . "--font-ui:\"{$interfaceFamily}\", -apple-system, BlinkMacSystemFont, sans-serif;"
  604. . "}";
  605. }
  606. ​
  607. private const TRACKING_PARAMS = ['fbclid', 'gclid', 'msclkid', 'yclid', 'igshid', 'mc_cid', 'mc_eid', '_ga', 'ref_src'];
  608. ​
  609. private static function configuredUrl(): string
  610. {
  611. $url = trim((string) Config::get('APP_URL', ''));
  612. if ($url === '') {
  613. return '';
  614. }
  615. ​
  616. if (!preg_match('#^[a-z][a-z0-9+.-]*://#i', $url)) {
  617. $url = 'https://' . $url;
  618. }
  619. ​
  620. return rtrim($url, '/');
  621. }
  622. ​
  623. private static function normalizeHost(string $host, string $scheme = ''): string
  624. {
  625. $host = strtolower(rtrim(trim($host), '.'));
  626. if ($host === '') {
  627. return '';
  628. }
  629. ​
  630. $port = '';
  631. if (preg_match('/^(.*):(\d+)$/', $host, $matches) && !str_ends_with($matches[1], ']')) {
  632. $host = $matches[1];
  633. $port = $matches[2];
  634. } elseif (preg_match('/^(\[.*\]):(\d+)$/', $host, $matches)) {
  635. $host = $matches[1];
  636. $port = $matches[2];
  637. }
  638. ​
  639. $defaultPorts = ['80', '443'];
  640. if ($scheme === 'http') {
  641. $defaultPorts = ['80'];
  642. } elseif ($scheme === 'https') {
  643. $defaultPorts = ['443'];
  644. }
  645. ​
  646. return in_array($port, $defaultPorts, true) || $port === '' ? $host : $host . ':' . $port;
  647. }
  648. ​
  649. private static function requestHost(): string
  650. {
  651. $forwarded = trim(explode(',', (string) ($_SERVER['HTTP_X_FORWARDED_HOST'] ?? ''))[0]);
  652. $host = $forwarded !== '' ? $forwarded : (string) ($_SERVER['HTTP_HOST'] ?? $_SERVER['SERVER_NAME'] ?? '');
  653. ​
  654. return self::normalizeHost($host);
  655. }
  656. ​
  657. private static function requestScheme(): string
  658. {
  659. $forwarded = strtolower(trim(explode(',', (string) ($_SERVER['HTTP_X_FORWARDED_PROTO'] ?? ''))[0]));
  660. if ($forwarded === 'https' || $forwarded === 'http') {
  661. return $forwarded;
  662. }
  663. ​
  664. $https = strtolower((string) ($_SERVER['HTTPS'] ?? ''));
  665. if (($https !== '' && $https !== 'off') || (string) ($_SERVER['SERVER_PORT'] ?? '') === '443') {
  666. return 'https';
  667. }
  668. ​
  669. return 'http';
  670. }
  671. ​
  672. public static function isConfiguredHost(): bool
  673. {
  674. $configured = self::configuredUrl();
  675. if ($configured === '') {
  676. return true;
  677. }
  678. ​
  679. $parts = parse_url($configured);
  680. $configuredHost = self::normalizeHost((string) ($parts['host'] ?? '') . (isset($parts['port']) ? ':' . $parts['port'] : ''), (string) ($parts['scheme'] ?? ''));
  681. $currentHost = self::requestHost();
  682. ​
  683. if ($configuredHost === '' || $currentHost === '') {
  684. return true;
  685. }
  686. ​
  687. return $configuredHost === $currentHost;
  688. }
  689. ​
  690. private static function cleanRequestUri(): string
  691. {
  692. $uri = (string) ($_SERVER['REQUEST_URI'] ?? '/');
  693. $path = (string) parse_url($uri, PHP_URL_PATH);
  694. $query = (string) parse_url($uri, PHP_URL_QUERY);
  695. ​
  696. if ($path === '') {
  697. $path = '/';
  698. }
  699. ​
  700. if ($query === '') {
  701. return $path;
  702. }
  703. ​
  704. $kept = [];
  705. foreach (explode('&', $query) as $pair) {
  706. if ($pair === '') {
  707. continue;
  708. }
  709. $name = strtolower(urldecode(explode('=', $pair, 2)[0]));
  710. if (str_starts_with($name, 'utm_') || in_array($name, self::TRACKING_PARAMS, true)) {
  711. continue;
  712. }
  713. $kept[] = $pair;
  714. }
  715. ​
  716. return $kept === [] ? $path : $path . '?' . implode('&', $kept);
  717. }
  718. ​
  719. public static function currentUrl(): string
  720. {
  721. $baseUrl = self::configuredUrl();
  722. if ($baseUrl === '') {
  723. $host = self::requestHost();
  724. $baseUrl = $host === '' ? '' : self::requestScheme() . '://' . $host;
  725. }
  726. ​
  727. return $baseUrl . self::cleanRequestUri();
  728. }
  729. ​
  730. public static function renderSeoMeta(): string
  731. {
  732. $settings = self::settings();
  733. $html = '';
  734. ​
  735. if ($settings['seo_keywords'] !== '') {
  736. $html .= '<meta name="keywords" content="' . htmlspecialchars($settings['seo_keywords'], ENT_QUOTES) . '">' . "\n";
  737. }
  738. ​
  739. if ($settings['seo_author'] !== '') {
  740. $html .= '<meta name="author" content="' . htmlspecialchars($settings['seo_author'], ENT_QUOTES) . '">' . "\n";
  741. }
  742. ​
  743. if ($settings['seo_reply_to'] !== '') {
  744. $html .= '<meta name="reply-to" content="' . htmlspecialchars($settings['seo_reply_to'], ENT_QUOTES) . '">' . "\n";
  745. }
  746. ​
  747. if ($settings['seo_application_name'] !== '') {
  748. $html .= '<meta name="application-name" content="' . htmlspecialchars($settings['seo_application_name'], ENT_QUOTES) . '">' . "\n";
  749. }
  750. ​
  751. $robotsIndex = $settings['seo_robots_index'] === '1' && self::isConfiguredHost() ? 'index' : 'noindex';
  752. $robotsFollow = $settings['seo_robots_follow'] === '1' ? 'follow' : 'nofollow';
  753. $html .= '<meta name="robots" content="' . $robotsIndex . ',' . $robotsFollow . '">' . "\n";
  754. ​
  755. $html .= '<link rel="canonical" href="' . htmlspecialchars(self::currentUrl(), ENT_QUOTES) . '">';
  756. ​
  757. return $html;
  758. }
  759. ​
  760. public static function renderOpenGraph(string $title, string $description, string $type = 'website', ?string $imagePath = null): string
  761. {
  762. $settings = self::settings();
  763. ​
  764. $html = '<meta property="og:title" content="' . htmlspecialchars($title, ENT_QUOTES) . '">' . "\n";
  765. $html .= '<meta property="og:type" content="' . htmlspecialchars($type, ENT_QUOTES) . '">' . "\n";
  766. $html .= '<meta property="og:url" content="' . htmlspecialchars(self::currentUrl(), ENT_QUOTES) . '">' . "\n";
  767. $html .= '<meta property="og:site_name" content="' . htmlspecialchars($settings['site_name'], ENT_QUOTES) . '">' . "\n";
  768. ​
  769. if ($description !== '') {
  770. $html .= '<meta property="og:description" content="' . htmlspecialchars($description, ENT_QUOTES) . '">' . "\n";
  771. }
  772. ​
  773. $ogImage = null;
  774. if ($imagePath !== null && $settings['seo_og_product_image_enabled'] === '1') {
  775. $ogImage = $imagePath;
  776. } elseif ($settings['site_logo_url'] !== '') {
  777. $ogImage = $settings['site_logo_url'];
  778. }
  779. ​
  780. if ($ogImage !== null && $ogImage !== '') {
  781. $html .= '<meta property="og:image" content="' . htmlspecialchars($ogImage, ENT_QUOTES) . '">';
  782. }
  783. ​
  784. return $html;
  785. }
  786. ​
  787. public static function renderOrganizationSchema(): string
  788. {
  789. $settings = self::settings();
  790. ​
  791. $schema = [
  792. '@context' => 'https://schema.org',
  793. '@graph' => [
  794. [
  795. '@type' => 'Organization',
  796. 'name' => $settings['site_name'],
  797. 'url' => rtrim(Config::get('APP_URL', ''), '/') . '/',
  798. ],
  799. [
  800. '@type' => 'WebSite',
  801. 'name' => $settings['site_name'],
  802. 'url' => rtrim(Config::get('APP_URL', ''), '/') . '/',
  803. ],
  804. ],
  805. ];
  806. ​
  807. if ($settings['site_logo_url'] !== '') {
  808. $schema['@graph'][0]['logo'] = $settings['site_logo_url'];
  809. }
  810. ​
  811. if ($settings['site_description'] !== '') {
  812. $schema['@graph'][1]['description'] = $settings['site_description'];
  813. }
  814. ​
  815. return '<script type="application/ld+json">' . json_encode($schema, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE) . '</script>';
  816. }
  817. ​
  818. private static function isCustomHtmlEnabledFor(string $slot, ?string $pageType): bool
  819. {
  820. if ($pageType === null || !in_array($pageType, ['index', 'product', 'category', 'pages'], true)) {
  821. return false;
  822. }
  823. ​
  824. $settings = self::settings();
  825. $key = 'custom_' . $slot . '_html_' . $pageType;
  826. ​
  827. return ($settings[$key] ?? '0') === '1';
  828. }
  829. ​
  830. public static function renderCustomHeadHtml(?string $pageType): string
  831. {
  832. if (!self::isCustomHtmlEnabledFor('head', $pageType)) {
  833. return '';
  834. }
  835. ​
  836. return self::settings()['custom_head_html'];
  837. }
  838. ​
  839. public static function renderCustomBodyHtml(?string $pageType): string
  840. {
  841. if (!self::isCustomHtmlEnabledFor('body', $pageType)) {
  842. return '';
  843. }
  844. ​
  845. return self::settings()['custom_body_html'];
  846. }
  847. }
  848. ​