HEX
Server: Apache/2.4.58 (Ubuntu)
System: Linux bsx-1-dev 6.8.0-101-generic #101-Ubuntu SMP PREEMPT_DYNAMIC Mon Feb 9 10:15:05 UTC 2026 x86_64
User: www-data (33)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /var/www/html/wp-content/plugins/memberpress/app/lib/MeprSubscriptionsWidget.php
<?php
defined('ABSPATH') || exit;

/**
 * Adds MeprSubscriptionsWidget widget.
 */
class MeprSubscriptionsWidget extends WP_Widget
{
    /**
     * Constructor
     */
    public function __construct()
    {
        parent::__construct(
            'mepr_subscriptions_widget', // Base ID.
            'MemberPress Subscriptions', // Name.
            ['description' => __('Show a list of the current member\'s Subscriptions with optional links to each Membership\'s "Membership Access URL" setting.', 'memberpress')] // Args.
        );
    }

    /**
     * Register the widget
     *
     * @return void
     */
    public static function register_widget()
    {
        if (MeprHooks::apply_filters('mepr_enable_legacy_widgets', !current_theme_supports('widgets-block-editor'))) {
            register_widget('MeprSubscriptionsWidget');
        }
    }

    /**
     * Widget
     *
     * @param  array $args     The arguments.
     * @param  array $instance The instance.
     * @return void
     */
    public function widget($args, $instance)
    {
        extract($args);

        $title              = $instance['title'];
        $top_desc           = $instance['top_desc'];
        $bottom_desc        = $instance['bottom_desc'];
        $not_logged_in_msg  = $instance['not_logged_in_msg'];
        $member_no_subs_msg = $instance['member_no_subs_msg'];
        $show_link          = (isset($instance['show_link']) && $instance['show_link']);
        $user               = MeprUtils::get_currentuserinfo();

        echo $before_widget; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped

        if (!empty($title)) {
            echo $before_title . esc_html($title) . $after_title; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
        }

        if ($user !== false && !empty($top_desc)) {
            echo '<div><span class="mepr-subscriptions-widget-top-description">' . esc_html($top_desc) . '</span></div>';
        }

        echo '<ul>';

        if ($user !== false) {
            $subs = $user->active_product_subscriptions('products');

            if (empty($subs)) {
                echo '<li class="mepr-subscriptions-widget-row mepr-widget-error">' . esc_html($member_no_subs_msg) . '</li>';
            } else {
                $prev_dups = [];

                foreach ($subs as $prd) {
                    if (empty($prev_dups) || !in_array($prd->ID, $prev_dups, true)) {
                        $prev_dups[] = $prd->ID;

                        if ($show_link && !empty($prd->access_url)) {
                            echo '<li class="mepr-subscriptions-widget-row mepr-widget-link"><a href="' . esc_url(stripslashes($prd->access_url)) . '">' . esc_html($prd->post_title) . '</a></li>';
                        } else {
                            echo '<li class="mepr-subscriptions-widget-row mepr-widget-text">' . esc_html($prd->post_title) . '</li>';
                        }
                    }
                }
            }
        } else {
            echo '<li class="mepr-subscriptions-widget-row mepr-widget-error">' . esc_html($not_logged_in_msg) . '</li>';
        }

        echo '</ul>';

        if ($user !== false && !empty($bottom_desc)) {
            echo '<div><span class="mepr-subscriptions-widget-bottom-description">' . esc_html($bottom_desc) . '</span></div>';
        }

        echo $after_widget; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
    }

    /**
     * Update the widget
     *
     * @param  array $new_instance The new instance.
     * @param  array $old_instance The old instance.
     * @return array The instance
     */
    public function update($new_instance, $old_instance)
    {
        $instance                       = [];
        $instance['title']              = stripslashes(wp_strip_all_tags($new_instance['title']));
        $instance['top_desc']           = stripslashes($new_instance['top_desc']);
        $instance['bottom_desc']        = stripslashes($new_instance['bottom_desc']);
        $instance['not_logged_in_msg']  = stripslashes($new_instance['not_logged_in_msg']);
        $instance['member_no_subs_msg'] = stripslashes($new_instance['member_no_subs_msg']);
        $instance['show_link']          = isset($new_instance['show_link']);

        return $instance;
    }

    /**
     * Form for the widget
     *
     * @param  array $instance The instance.
     * @return void
     */
    public function form($instance)
    {
        $title              = (isset($instance['title'])) ? $instance['title'] : __('Your Subscriptions', 'memberpress');
        $top_desc           = (isset($instance['top_desc'])) ? $instance['top_desc'] : '';
        $bottom_desc        = (isset($instance['bottom_desc'])) ? $instance['bottom_desc'] : '';
        $not_logged_in_msg  = (isset($instance['not_logged_in_msg'])) ? $instance['not_logged_in_msg'] : 'You are not logged in.';
        $member_no_subs_msg = (isset($instance['member_no_subs_msg'])) ? $instance['member_no_subs_msg'] : 'You have no Subscriptions yet.';
        $show_link          = (isset($instance['show_link']) && $instance['show_link']);

        ?>
    <p>
      <label for="<?php echo esc_attr($this->get_field_id('title')); ?>"><?php esc_html_e('Title:', 'memberpress'); ?></label>
      <input class="widefat" id="<?php echo esc_attr($this->get_field_id('title')); ?>" name="<?php echo esc_attr($this->get_field_name('title')); ?>" type="text" value="<?php echo esc_attr($title); ?>" />
    </p>
    <p>
      <label for="<?php echo esc_attr($this->get_field_id('not_logged_in_msg')); ?>"><?php esc_html_e('Not Logged In Message:', 'memberpress'); ?></label>
      <textarea class="widefat" id="<?php echo esc_attr($this->get_field_id('not_logged_in_msg')); ?>" name="<?php echo esc_attr($this->get_field_name('not_logged_in_msg')); ?>"><?php echo esc_textarea($not_logged_in_msg); ?></textarea>
    </p>
    <p>
      <label for="<?php echo esc_attr($this->get_field_id('member_no_subs_msg')); ?>"><?php esc_html_e('No Subscriptions Message:', 'memberpress'); ?></label>
      <textarea class="widefat" id="<?php echo esc_attr($this->get_field_id('member_no_subs_msg')); ?>" name="<?php echo esc_attr($this->get_field_name('member_no_subs_msg')); ?>"><?php echo esc_textarea($member_no_subs_msg); ?></textarea>
    </p>
    <p>
      <label for="<?php echo esc_attr($this->get_field_id('top_desc')); ?>"><?php esc_html_e('Top Description (optional):', 'memberpress'); ?></label>
      <textarea class="widefat" id="<?php echo esc_attr($this->get_field_id('top_desc')); ?>" name="<?php echo esc_attr($this->get_field_name('top_desc')); ?>"><?php echo esc_textarea($top_desc); ?></textarea>
    </p>
    <p>
      <label for="<?php echo esc_attr($this->get_field_id('bottom_desc')); ?>"><?php esc_html_e('Bottom Description (optional):', 'memberpress'); ?></label>
      <textarea class="widefat" id="<?php echo esc_attr($this->get_field_id('bottom_desc')); ?>" name="<?php echo esc_attr($this->get_field_name('bottom_desc')); ?>"><?php echo esc_textarea($bottom_desc); ?></textarea>
    </p>
    <p>
      <input type="checkbox" id="<?php echo esc_attr($this->get_field_id('show_link')); ?>" name="<?php echo esc_attr($this->get_field_name('show_link')); ?>" <?php checked($show_link); ?> />
      <label for="<?php echo esc_attr($this->get_field_id('show_link')); ?>"><?php esc_html_e('Use Membership Access URLs?', 'memberpress'); ?></label><br/>
      <small style="display:block;padding-left:24px;"><?php esc_html_e('Makes the Subscription name clickable, pointing to the Membership Access URL you have set in the Membership settings (Advanced tab).', 'memberpress'); ?></small>
    </p>
        <?php
    }
}