<?php // phpcs:ignore WordPress.Files.FileName.InvalidClassFileName
* Set up Sharing functionality and management in wp-admin.
* @package automattic/jetpack
// phpcs:disable Universal.Files.SeparateFunctionsFromOO.Mixed -- TODO: Move classes to appropriately-named class files.
use Automattic\Jetpack\Assets;
use Automattic\Jetpack\Redirect;
use Automattic\Jetpack\Status;
if ( ! defined( 'ABSPATH' ) ) {
if ( ! defined( 'WP_SHARING_PLUGIN_URL' ) ) {
define( 'WP_SHARING_PLUGIN_URL', plugin_dir_url( __FILE__ ) );
define( 'WP_SHARING_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );
* Utilities to manage sharing settings from wp-admin.
* Hook into WordPress to add our functionality.
public function __construct() {
require_once WP_SHARING_PLUGIN_DIR . 'sharing-service.php';
// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- nonces are handled in process_requests.
if ( isset( $_GET['page'] ) && ( $_GET['page'] === 'sharing.php' || $_GET['page'] === 'sharing' ) ) {
add_action( 'admin_init', array( $this, 'admin_init' ) );
add_action( 'admin_menu', array( $this, 'subscription_menu' ) );
add_action( 'load-settings_page_sharing', array( $this, 'sharing_head' ) );
add_action( 'wp_ajax_sharing_save_services', array( $this, 'ajax_save_services' ) );
add_action( 'wp_ajax_sharing_save_options', array( $this, 'ajax_save_options' ) );
add_action( 'wp_ajax_sharing_new_service', array( $this, 'ajax_new_service' ) );
add_action( 'wp_ajax_sharing_delete_service', array( $this, 'ajax_delete_service' ) );
* Enqueue scripts and styles on the sharing settings page.
public function sharing_head() {
Assets::get_file_url_for_environment(
'_inc/build/sharedaddy/admin-sharing.min.js',
'modules/sharedaddy/admin-sharing.js'
array( 'jquery', 'jquery-ui-draggable', 'jquery-ui-droppable', 'jquery-ui-sortable', 'jquery-form' ),
* Filters the switch that if set to true allows Jetpack to use minified assets. Defaults to true
* if the SCRIPT_DEBUG constant is not set or set to false. The filter overrides it.
* @param boolean $var should Jetpack use minified assets.
$postfix = apply_filters( 'jetpack_should_use_minified_assets', true ) ? '.min' : '';
wp_enqueue_style( 'sharing-admin', WP_SHARING_PLUGIN_URL . 'admin-sharing-rtl' . $postfix . '.css', false, JETPACK__VERSION );
wp_enqueue_style( 'sharing-admin', WP_SHARING_PLUGIN_URL . 'admin-sharing' . $postfix . '.css', false, JETPACK__VERSION );
wp_enqueue_style( 'sharing', WP_SHARING_PLUGIN_URL . 'sharing.css', false, JETPACK__VERSION );
wp_enqueue_style( 'social-logos' );
wp_enqueue_script( 'sharing-js-fe', WP_SHARING_PLUGIN_URL . 'sharing.js', array(), 4, false );
// On Jetpack sites, make sure we include CSS to style the admin page.
if ( ! defined( 'IS_WPCOM' ) || ! IS_WPCOM ) {
Jetpack_Admin_Page::load_wrapper_styles();
* Load the process that handles saving changes on the sharing settings page.
public function admin_init() {
$this->process_requests();
* Save changes to sharing settings.
public function process_requests() {
isset( $_POST['_wpnonce'] )
&& wp_verify_nonce( sanitize_key( wp_unslash( $_POST['_wpnonce'] ) ), 'sharing-options' )
$sharer = new Sharing_Service();
$sharer->set_global_options( $_POST );
* Fires when updating sharing settings.
do_action( 'sharing_admin_update' );
wp_safe_redirect( admin_url( 'options-general.php?page=sharing&update=saved' ) );
* Register Sharing settings menu page in Settings > Sharing.
public function subscription_menu() {
__( 'Sharing Settings', 'jetpack' ),
__( 'Sharing', 'jetpack' ),
array( $this, 'wrapper_admin_page' )
* Save changes to sharing services via AJAX.
public function ajax_save_services() {
isset( $_POST['_wpnonce'] )
&& wp_verify_nonce( sanitize_key( wp_unslash( $_POST['_wpnonce'] ) ), 'sharing-options' )
&& isset( $_POST['hidden'] )
&& isset( $_POST['visible'] )
$sharer = new Sharing_Service();
$sharer->set_blog_services(
explode( ',', sanitize_text_field( wp_unslash( $_POST['visible'] ) ) ),
explode( ',', sanitize_text_field( wp_unslash( $_POST['hidden'] ) ) )
* Create a new custom sharing service via AJAX.
public function ajax_new_service() {
isset( $_POST['_wpnonce'] )
&& isset( $_POST['sharing_name'] )
&& isset( $_POST['sharing_url'] )
&& isset( $_POST['sharing_icon'] )
&& wp_verify_nonce( sanitize_key( wp_unslash( $_POST['_wpnonce'] ) ), 'sharing-new_service' )
$sharer = new Sharing_Service();
$service = $sharer->new_service(
sanitize_text_field( wp_unslash( $_POST['sharing_name'] ) ),
esc_url_raw( wp_unslash( $_POST['sharing_url'] ) ),
esc_url_raw( wp_unslash( $_POST['sharing_icon'] ) )
$this->output_service( $service->get_id(), $service );
$service->button_style = 'icon-text';
$this->output_preview( $service );
* Delete a sharing service via AJAX.
public function ajax_delete_service() {
isset( $_POST['_wpnonce'] )
&& isset( $_POST['service'] )
sanitize_key( wp_unslash( $_POST['_wpnonce'] ) ),
'sharing-options_' . sanitize_text_field( wp_unslash( $_POST['service'] ) )
$sharer = new Sharing_Service();
$sharer->delete_service( sanitize_text_field( wp_unslash( $_POST['service'] ) ) );
* Save changes to sharing settings via AJAX.
public function ajax_save_options() {
isset( $_POST['_wpnonce'] )
&& isset( $_POST['service'] )
sanitize_key( wp_unslash( $_POST['_wpnonce'] ) ),
'sharing-options_' . sanitize_text_field( wp_unslash( $_POST['service'] ) )
$sharer = new Sharing_Service();
$service = $sharer->get_service( sanitize_text_field( wp_unslash( $_POST['service'] ) ) );
if ( $service && $service instanceof Sharing_Advanced_Source ) {
$service->update_options( $_POST );
$sharer->set_service( sanitize_text_field( wp_unslash( $_POST['service'] ) ), $service );
$this->output_service( $service->get_id(), $service, true );
$service->button_style = 'icon-text';
$this->output_preview( $service );
* Display a preview of a sharing service.
* @param object $service Sharing service object.
public function output_preview( $service ) {
$klasses = array( 'advanced', 'preview-item' );
if ( $service->button_style !== 'text' || $service->has_custom_button_style() ) {
$klasses[] = 'preview-' . $service->get_class();
$klasses[] = 'share-' . $service->get_class();
if ( $service->is_deprecated() ) {
$klasses[] = 'share-deprecated';
if ( $service->get_class() !== $service->get_id() ) {
$klasses[] = 'preview-' . $service->get_id();
echo '<li class="' . esc_attr( implode( ' ', $klasses ) ) . '">';
$service->display_preview();
* Display a specific sharing service.
* @param int $id Service unique ID.
* @param object $service Sharing service.
* @param bool $show_dropdown Display a dropdown. Not in use at the moment.
public function output_service( $id, $service, $show_dropdown = false ) { // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable
$klasses = array( 'service', 'advanced', 'share-' . $service->get_class() );
$displayed_klasses = implode( ' ', $klasses );
if ( $service->is_deprecated() ) {
/* translators: %1$s is the name of a deprecated Sharing Service like "Google+" */
$title = sprintf( __( 'The %1$s sharing service has shut down or discontinued support for sharing buttons. This sharing button is not displayed to your visitors and should be removed.', 'jetpack' ), $service->get_name() );
$klasses[] = 'share-deprecated';
<li class="<?php echo esc_attr( $displayed_klasses ); ?>" id="<?php echo esc_attr( $service->get_id() ); ?>" tabindex="0" title="<?php echo esc_attr( $title ); ?>">
<span class="options-left"><?php echo esc_html( $service->get_name() ); ?></span>
<?php if ( str_starts_with( $service->get_id(), 'custom-' ) || $service->has_advanced_options() ) : ?>
<span class="close"><a href="#" class="remove">×</a></span>
<form method="post" action="<?php echo esc_url( admin_url( 'admin-ajax.php' ) ); ?>">
<input type="hidden" name="action" value="sharing_delete_service" />
<input type="hidden" name="service" value="<?php echo esc_attr( $id ); ?>" />
<input type="hidden" name="_wpnonce" value="<?php echo esc_attr( wp_create_nonce( 'sharing-options_' . $id ) ); ?>" />
* Display admin UI within a Jetpack header and footer.
public function wrapper_admin_page() {
Jetpack_Admin_Page::wrap_ui( array( $this, 'management_page' ), array( 'is-wide' => true ) );
* Sharing settings inner page structure.
public function management_page() {
if ( ! function_exists( 'mb_stripos' ) ) {
echo '<div id="message" class="updated fade"><h3>' . esc_html__( 'Warning! Multibyte support missing!', 'jetpack' ) . '</h3>';
/* Translators: placeholder is a link to a PHP support document. */
__( 'This plugin will work without it, but multibyte support is used <a href="%s" rel="noopener noreferrer" target="_blank">if available</a>. You may see minor problems with Tweets and other sharing services.', 'jetpack' ),
'https://www.php.net/manual/en/mbstring.installation.php'
if ( isset( $_GET['update'] ) && 'saved' === $_GET['update'] ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- only used to display a message.
echo '<div class="updated"><p>' . esc_html__( 'Settings have been saved', 'jetpack' ) . '</p></div>';
<div class="icon32" id="icon-options-general"><br /></div>
<h1><?php esc_html_e( 'Sharing Settings', 'jetpack' ); ?></h1>
* Fires at the top of the admin sharing settings screen.
do_action( 'pre_admin_screen_sharing' );
$block_availability = Jetpack_Gutenberg::get_cached_availability();
$is_block_available = (bool) isset( $block_availability['sharing-buttons'] ) && $block_availability['sharing-buttons']['available'];
$is_block_theme = wp_is_block_theme();
$show_block_message = $is_block_available && $is_block_theme;
// We either show old services config or the sharing block message.
if ( current_user_can( 'manage_options' ) ) :
$show_block_message ? $this->sharing_block_display() : $this->services_config_display();
<script type="text/javascript">
var sharing_loading_icon = '<?php echo esc_js( admin_url( '/images/loading.gif' ) ); ?>';
// phpcs:disable WordPress.Security.NonceVerification.Recommended -- we handle the nonce on the PHP side.
isset( $_GET['create_new_service'] ) && isset( $_GET['name'] ) && isset( $_GET['url'] ) && isset( $_GET['icon'] )
&& 'true' == $_GET['create_new_service'] // phpcs:ignore Universal.Operators.StrictComparisons.LooseEqual
jQuery(document).ready(function() {
// Prefill new service box and then open it
jQuery( '#new_sharing_name' ).val( '<?php echo esc_js( sanitize_text_field( wp_unslash( $_GET['name'] ) ) ); ?>' );
jQuery( '#new_sharing_url' ).val( '<?php echo esc_js( sanitize_text_field( wp_unslash( $_GET['url'] ) ) ); ?>' );
jQuery( '#new_sharing_icon' ).val( '<?php echo esc_js( sanitize_text_field( wp_unslash( $_GET['icon'] ) ) ); ?>' );
jQuery( '#add-a-new-service' ).click();
// phpcs:enable WordPress.Security.NonceVerification.Recommended
* Display services admin UI for settings.
public function services_config_display() {
$sharer = new Sharing_Service();
$enabled = $sharer->get_blog_services();
$global = $sharer->get_global_options();
$shows = array_values( get_post_types( array( 'public' => true ) ) );
array_unshift( $shows, 'index' );
if ( ! isset( $global['sharing_label'] ) ) {
$global['sharing_label'] = __( 'Share this:', 'jetpack' );
<div class="share_manage_options">
<h2><?php esc_html_e( 'Sharing Buttons', 'jetpack' ); ?></h2>
<p><?php esc_html_e( 'Add sharing buttons to your blog and allow your visitors to share posts with their friends.', 'jetpack' ); ?></p>
<div id="services-config">
<table id="available-services">
<h3><?php esc_html_e( 'Available Services', 'jetpack' ); ?></h3>
<p><?php esc_html_e( "Drag and drop the services you'd like to enable into the box below.", 'jetpack' ); ?></p>
<p><a href="#TB_inline?height=395&width=600&inlineId=new-service" class="thickbox" id="add-a-new-service"><?php esc_html_e( 'Add a new service', 'jetpack' ); ?></a></p>
<ul class="services-available" style="height: 100px;">
<?php foreach ( $sharer->get_all_services_blog() as $id => $service ) : ?>
if ( ! isset( $enabled['all'][ $id ] ) ) {
$this->output_service( $id, $service );
if ( ( new Status() )->is_private_site() ) {
echo '<p><strong>' . esc_html__( 'Please note that your services have been restricted because your site is private.', 'jetpack' ) . '</strong></p>';
<table id="enabled-services">
<?php esc_html_e( 'Enabled Services', 'jetpack' ); ?>
<img src="<?php echo esc_url( admin_url( 'images/loading.gif' ) ); ?>" width="16" height="16" alt="loading" style="vertical-align: middle; display: none" />
<p><?php esc_html_e( 'Services dragged here will appear individually.', 'jetpack' ); ?></p>
<td class="services" id="share-drop-target">
<h2 id="drag-instructions"
if ( is_countable( $enabled['visible'] ) && count( $enabled['visible'] ) > 0 ) {
echo ' style="display: none"';}
><?php esc_html_e( 'Drag and drop available services here.', 'jetpack' ); ?></h2>
<ul class="services-enabled">
<?php foreach ( $enabled['visible'] as $id => $service ) : ?>
<?php $this->output_service( $id, $service, true ); ?>
<li class="end-fix"></li>
<td id="hidden-drop-target" class="services">
<p><?php esc_html_e( 'Services dragged here will be hidden behind a share button.', 'jetpack' ); ?></p>
<ul class="services-hidden">
<?php foreach ( $enabled['hidden'] as $id => $service ) : ?>
<?php $this->output_service( $id, $service, true ); ?>
<li class="end-fix"></li>
<table id="live-preview">
<h3><?php esc_html_e( 'Live Preview', 'jetpack' ); ?></h3>
<h2 <?php echo ( is_countable( $enabled['all'] ) && count( $enabled['all'] ) > 0 ) ? ' style="display: none"' : ''; ?>><?php esc_html_e( 'Sharing is off. Add services above to enable.', 'jetpack' ); ?></h2>
<div class="sharedaddy sd-sharing-enabled">
<?php if ( is_countable( $enabled['all'] ) && count( $enabled['all'] ) > 0 ) : ?>
<h3 class="sd-title"><?php echo esc_html( $global['sharing_label'] ); ?></h3>
<?php foreach ( $enabled['visible'] as $id => $service ) : ?>