sur toutes les pages du site. // // On exige donc ici les memes capacites que la branche qu'elle // remplace. Un administrateur de site simple les a toutes ; c'est // exactement l'admin de sous-site multisite, et un site sous // DISALLOW_UNFILTERED_HTML, que ca ecarte. if ( ! current_user_can( 'edit_theme_options' ) || ! current_user_can( 'unfiltered_html' ) ) { add_settings_error( 'linkquiver_messages', 'linkquiver_key_forbidden', __( 'You do not have permission to set the API key on this site.', 'linkquiver' ), 'error' ); return; } $key = sanitize_text_field( wp_unslash( $_POST['linkquiver_api_key'] ) ); if ( ! empty( $key ) ) { Linkquiver_API_Key::save( $key ); add_settings_error( 'linkquiver_messages', 'linkquiver_key_saved', __( 'API key saved successfully.', 'linkquiver' ), 'updated' ); } else { add_settings_error( 'linkquiver_messages', 'linkquiver_key_empty', __( 'Please enter a valid API key.', 'linkquiver' ), 'error' ); } } // ── Redirect actions ──────────────────────────────────────────── if ( 'add_redirect' === $action ) { $old_path = sanitize_text_field( wp_unslash( $_POST['redirect_old_path'] ?? '' ) ); $new_url = esc_url_raw( wp_unslash( $_POST['redirect_new_url'] ?? '' ) ); $type = absint( $_POST['redirect_type'] ?? 301 ); if ( ! empty( $old_path ) && ! empty( $new_url ) ) { // upsert() returns 0 when it rejects the input (non-http(s) // scheme, protocol-relative //evil.com, or a root-path rule). // Report that instead of claiming success. $saved = Linkquiver_Redirect_Engine::upsert( $old_path, $new_url, null, $type ); if ( $saved > 0 ) { add_settings_error( 'linkquiver_messages', 'linkquiver_redirect_added', __( 'Redirect added.', 'linkquiver' ), 'updated' ); } else { add_settings_error( 'linkquiver_messages', 'linkquiver_redirect_error', __( 'Redirect rejected: destination must be an absolute http(s) URL and the source path cannot be the homepage.', 'linkquiver' ), 'error' ); } } else { add_settings_error( 'linkquiver_messages', 'linkquiver_redirect_error', __( 'Both old path and new URL are required.', 'linkquiver' ), 'error' ); } } if ( 'edit_redirect' === $action ) { $id = absint( $_POST['redirect_id'] ?? 0 ); $old_path = sanitize_text_field( wp_unslash( $_POST['redirect_old_path'] ?? '' ) ); $new_url = esc_url_raw( wp_unslash( $_POST['redirect_new_url'] ?? '' ) ); $type = absint( $_POST['redirect_type'] ?? 301 ); // Apply the same http(s) scheme allowlist the REST upsert()/import() // paths enforce — esc_url_raw() alone lets protocol-relative // //evil.com through, which wp_validate_redirect() only reliably // blocks on WP >= 6.4. $scheme = strtolower( wp_parse_url( $new_url, PHP_URL_SCHEME ) ?? '' ); $norm_path = '/' . trim( $old_path, '/' ); // Never allow a rule on the homepage: a 301 on '/' would trap the // site in a redirect loop. upsert() blocks this on the REST path; // the manual editor must not be a way around it. $is_root = ( '' === $norm_path || '/' === $norm_path ); if ( $id && ! empty( $old_path ) && ! empty( $new_url ) && in_array( $scheme, array( 'http', 'https' ), true ) && ! $is_root ) { global $wpdb; $table = Linkquiver_Redirect_Engine::table_name(); $updated = $wpdb->update( $table, array( 'old_path' => $norm_path, 'new_url' => $new_url, 'type' => $type, ), array( 'id' => $id ), array( '%s', '%s', '%d' ), array( '%d' ) ); // $wpdb->update returns false on a SQL error (e.g. the new // old_path collides with another row's UNIQUE index). Only claim // success when the write did not error. if ( false === $updated ) { add_settings_error( 'linkquiver_messages', 'linkquiver_redirect_error', __( 'Update failed: that source path is already mapped by another redirect.', 'linkquiver' ), 'error' ); } else { Linkquiver_Redirect_Engine::flush_cache_group(); add_settings_error( 'linkquiver_messages', 'linkquiver_redirect_updated', __( 'Redirect updated.', 'linkquiver' ), 'updated' ); } } else { add_settings_error( 'linkquiver_messages', 'linkquiver_redirect_error', __( 'A valid http(s) destination URL is required, and the source path cannot be the homepage.', 'linkquiver' ), 'error' ); } } if ( 'delete_redirect' === $action ) { $id = absint( $_POST['redirect_id'] ?? 0 ); if ( $id ) { global $wpdb; $table = Linkquiver_Redirect_Engine::table_name(); $wpdb->delete( $table, array( 'id' => $id ), array( '%d' ) ); Linkquiver_Redirect_Engine::flush_cache_group(); add_settings_error( 'linkquiver_messages', 'linkquiver_redirect_deleted', __( 'Redirect deleted.', 'linkquiver' ), 'updated' ); } } if ( 'flush_redirects' === $action ) { Linkquiver_Redirect_Engine::flush_all(); add_settings_error( 'linkquiver_messages', 'linkquiver_redirects_flushed', __( 'All redirects deleted.', 'linkquiver' ), 'updated' ); } if ( 'toggle_catchall' === $action ) { $current = get_option( 'linkquiver_catchall_404', 'no' ); update_option( 'linkquiver_catchall_404', 'yes' === $current ? 'no' : 'yes' ); add_settings_error( 'linkquiver_messages', 'linkquiver_catchall_toggled', __( 'Catch-all setting updated.', 'linkquiver' ), 'updated' ); } // ── AI crawler log ────────────────────────────────────────────── if ( 'toggle_ai_crawlers' === $action ) { $enabled = ( 'no' !== get_option( Linkquiver_AI_Crawlers::OPT_ENABLED, 'yes' ) ); update_option( Linkquiver_AI_Crawlers::OPT_ENABLED, $enabled ? 'no' : 'yes' ); if ( $enabled ) { add_settings_error( 'linkquiver_messages', 'linkquiver_ai_off', __( 'AI crawler logging disabled.', 'linkquiver' ), 'updated' ); } else { Linkquiver_AI_Crawlers::schedule_cron(); add_settings_error( 'linkquiver_messages', 'linkquiver_ai_on', __( 'AI crawler logging enabled.', 'linkquiver' ), 'updated' ); } } if ( 'save_ai_retention' === $action ) { $days = absint( $_POST['linkquiver_ai_retention'] ?? 90 ); update_option( Linkquiver_AI_Crawlers::OPT_RETENTION, $days ); add_settings_error( 'linkquiver_messages', 'linkquiver_ai_retention', __( 'Retention updated.', 'linkquiver' ), 'updated' ); } if ( 'refresh_ai_ranges' === $action ) { Linkquiver_AI_Crawlers::refresh_ranges(); $at = (int) get_option( Linkquiver_AI_Crawlers::OPT_RANGES_AT, 0 ); if ( $at > 0 ) { add_settings_error( 'linkquiver_messages', 'linkquiver_ai_ranges_ok', __( 'Verification list refreshed.', 'linkquiver' ), 'updated' ); } else { add_settings_error( 'linkquiver_messages', 'linkquiver_ai_ranges_ko', __( 'Could not reach the verification list. Hits will keep being recorded, but counted as unverified.', 'linkquiver' ), 'error' ); } } } public function render_page() { if ( ! current_user_can( 'manage_options' ) ) { return; } $is_preconfigured = Linkquiver_API_Key::is_preconfigured(); $has_key = Linkquiver_API_Key::has_key(); $last_validated_at = (int) get_option( 'linkquiver_last_validated_at', 0 ); // "Validated" means the SaaS authenticated against this plugin in the // last 7 days — proof the key is actually connected end-to-end, not // just stored locally. $is_validated = $has_key && $last_validated_at > 0 && ( time() - $last_validated_at ) < 7 * DAY_IN_SECONDS; $seo = new Linkquiver_SEO_Handler(); $seo_info = $seo->detect(); settings_errors( 'linkquiver_messages' ); ?>

LinkQuiver

' . esc_html__( 'Settings → Permalinks', 'linkquiver' ) . '' ); ?>

  1. 1

    →

  2. 2

linkquiver.com' ); ?>

••••••••••••••••

=' ) ? esc_html__( 'OK', 'linkquiver' ) : esc_html__( 'Update recommended', 'linkquiver' ); ?>
render_ai_crawlers_card(); ?>

' . ( 'yes' === $catchall ? esc_html__( 'enabled', 'linkquiver' ) : esc_html__( 'disabled', 'linkquiver' ) ) . '' ); ?>

→
1000 redirects // (bulk expired-domain imports) stay fully browsable/editable — // the previous fetch-then-slice capped visibility at 1000 rows. $per_page = 20; $total = Linkquiver_Redirect_Engine::count(); $total_pages = max( 1, (int) ceil( $total / $per_page ) ); $current_page = min( $total_pages, max( 1, absint( $_GET['redir_page'] ?? 1 ) ) ); $offset = ( $current_page - 1 ) * $per_page; $page_items = $total > 0 ? Linkquiver_Redirect_Engine::list_all( $per_page, $offset ) : array(); if ( ! empty( $page_items ) ) : ?>
1 ) : ?>
()

0 ) : ?>

$counts ) : ?>