<?php

/**

 * WordPress Export Administration API

 *

 * @package WordPress

 * @subpackage Administration

 */

/**

 * Version number for the export format.

 *

 * Bump this when something changes that might affect compatibility.

 *

 * @since 2.5.0

 */

define( 'WXR_VERSION', '1.2' );

/**

 * Generates the WXR export file for download.

 *

 * Default behavior is to export all content, however, note that post content will only

 * be exported for post types with the `can_export` argument enabled. Any posts with the

 * 'auto-draft' status will be skipped.

 *

 * @since 2.1.0

 *

 * @global wpdb    $wpdb WordPress database abstraction object.

 * @global WP_Post $post Global post object.

 *

 * @param array $args {

 *     Optional. Arguments for generating the WXR export file for download. Default empty array.

 *

 *     @type string $content        Type of content to export. If set, only the post content of this post type

 *                                  will be exported. Accepts 'all', 'post', 'page', 'attachment', or a defined

 *                                  custom post. If an invalid custom post type is supplied, every post type for

 *                                  which `can_export` is enabled will be exported instead. If a valid custom post

 *                                  type is supplied but `can_export` is disabled, then 'posts' will be exported

 *                                  instead. When 'all' is supplied, only post types with `can_export` enabled will

 *                                  be exported. Default 'all'.

 *     @type string $author         Author to export content for. Only used when `$content` is 'post', 'page', or

 *                                  'attachment'. Accepts false (all) or a specific author ID. Default false (all).

 *     @type string $category       Category (slug) to export content for. Used only when `$content` is 'post'. If

 *                                  set, only post content assigned to `$category` will be exported. Accepts false

 *                                  or a specific category slug. Default is false (all categories).

 *     @type string $start_date     Start date to export content from. Expected date format is 'Y-m-d'. Used only

 *                                  when `$content` is 'post', 'page' or 'attachment'. Default false (since the

 *                                  beginning of time).

 *     @type string $end_date       End date to export content to. Expected date format is 'Y-m-d'. Used only when

 *                                  `$content` is 'post', 'page' or 'attachment'. Default false (latest publish date).

 *     @type string $status         Post status to export posts for. Used only when `$content` is 'post' or 'page'.

 *                                  Accepts false (all statuses except 'auto-draft'), or a specific status, i.e.

 *                                  'publish', 'pending', 'draft', 'auto-draft', 'future', 'private', 'inherit', or

 *                                  'trash'. Default false (all statuses except 'auto-draft').

 * }

 */

function export_wp( $args = array() ) {

	global $wpdb, $post;

	$defaults = array(

		'content'    => 'all',

		'author'     => false,

		'category'   => false,

		'start_date' => false,

		'end_date'   => false,

		'status'     => false,

	);

	$args     = wp_parse_args( $args, $defaults );

	/**

	 * Fires at the beginning of an export, before any headers are sent.

	 *

	 * @since 2.3.0

	 *

	 * @param array $args An array of export arguments.

	 */

	do_action( 'export_wp', $args );

	$sitename = sanitize_key( get_bloginfo( 'name' ) );

	if ( ! empty( $sitename ) ) {

		$sitename .= '.';

	}

	$date        = gmdate( 'Y-m-d' );

	$wp_filename = $sitename . 'WordPress.' . $date . '.xml';

	/**

	 * Filters the export filename.

	 *

	 * @since 4.4.0

	 *

	 * @param string $wp_filename The name of the file for download.

	 * @param string $sitename    The site name.

	 * @param string $date        Today's date, formatted.

	 */

	$filename = apply_filters( 'export_wp_filename', $wp_filename, $sitename, $date );

	header( 'Content-Description: File Transfer' );

	header( 'Content-Disposition: attachment; filename=' . $filename );

	header( 'Content-Type: text/xml; charset=' . get_option( 'blog_charset' ), true );

	if ( 'all' !== $args['content'] && post_type_exists( $args['content'] ) ) {

		$ptype = get_post_type_object( $args['content'] );

		if ( ! $ptype->can_export ) {

			$args['content'] = 'post';

		}

		$where = $wpdb->prepare( "{$wpdb->posts}.post_type = %s", $args['content'] );

	} else {

		$post_types = get_post_types( array( 'can_export' => true ) );

		$esses      = array_fill( 0, count( $post_types ), '%s' );

		// phpcs:ignore WordPress.DB.PreparedSQLPlaceholders.UnfinishedPrepare

		$where = $wpdb->prepare( "{$wpdb->posts}.post_type IN (" . implode( ',', $esses ) . ')', $post_types );

	}

	if ( $args['status'] && ( 'post' === $args['content'] || 'page' === $args['content'] ) ) {

		$where .= $wpdb->prepare( " AND {$wpdb->posts}.post_status = %s", $args['status'] );

	} else {

		$where .= " AND {$wpdb->posts}.post_status != 'auto-draft'";

	}

	$join = '';

	if ( $args['category'] && 'post' === $args['content'] ) {

		$term = term_exists( $args['category'], 'category' );

		if ( $term ) {

			$join   = "INNER JOIN {$wpdb->term_relationships} ON ({$wpdb->posts}.ID = {$wpdb->term_relationships}.object_id)";

			$where .= $wpdb->prepare( " AND {$wpdb->term_relationships}.term_taxonomy_id = %d", $term['term_taxonomy_id'] );

		}

	}

	if ( in_array( $args['content'], array( 'post', 'page', 'attachment' ), true ) ) {

		if ( $args['author'] ) {

			$where .= $wpdb->prepare( " AND {$wpdb->posts}.post_author = %d", $args['author'] );

		}

		if ( $args['start_date'] ) {

			$where .= $wpdb->prepare( " AND {$wpdb->posts}.post_date >= %s", gmdate( 'Y-m-d', strtotime( $args['start_date'] ) ) );

		}

		if ( $args['end_date'] ) {

			$where .= $wpdb->prepare( " AND {$wpdb->posts}.post_date < %s", gmdate( 'Y-m-d', strtotime( '+1 month', strtotime( $args['end_date'] ) ) ) );

		}

	}

	// Grab a snapshot of post IDs, just in case it changes during the export.

	$post_ids = $wpdb->get_col( "SELECT ID FROM {$wpdb->posts} $join WHERE $where" );

	/*

	 * Get the requested terms ready, empty unless posts filtered by category

	 * or all content.

	 */

	$cats  = array();

	$tags  = array();

	$terms = array();

	if ( isset( $term ) && $term ) {

		$cat  = get_term( $term['term_id'], 'category' );

		$cats = array( $cat->term_id => $cat );

		unset( $term, $cat );

	} elseif ( 'all' === $args['content'] ) {

		$categories = (array) get_categories( array( 'get' => 'all' ) );

		$tags       = (array) get_tags( array( 'get' => 'all' ) );

		$custom_taxonomies = get_taxonomies( array( '_builtin' => false ) );

		$custom_terms      = (array) get_terms(

			array(

				'taxonomy' => $custom_taxonomies,

				'get'      => 'all',

			)

		);

		// Put categories in order with no child going before its parent.

		while ( $cat = array_shift( $categories ) ) {

				$cats[ $cat->term_id ] = $cat;

			} else {

				$categories[] = $cat;

			}

		}

		// Put terms in order with no child going before its parent.

		while ( $t = array_shift( $custom_terms ) ) {

				$terms[ $t->term_id ] = $t;

			} else {

				$custom_terms[] = $t;

			}

		}

		unset( $categories, $custom_taxonomies, $custom_terms );

	}

	/**

	 * Wrap given string in XML CDATA tag.

	 *

	 * @since 2.1.0

	 *

	 * @param string $str String to wrap in XML CDATA tag.

	 * @return string

	 */

	function wxr_cdata( $str ) {

		if ( ! seems_utf8( $str ) ) {

			$str = utf8_encode( $str );

		}

		// $str = ent2ncr(esc_html($str));

		$str = '<![CDATA[' . str_replace( ']]>', ']]]]><![CDATA[>', $str ) . ']]>';

		return $str;

	}

	/**

	 * Return the URL of the site

	 *

	 * @since 2.5.0

	 *

	 * @return string Site URL.

	 */

	function wxr_site_url() {

		if ( is_multisite() ) {

			// Multisite: the base URL.

			return network_home_url();

		} else {

			// WordPress (single site): the blog URL.

			return get_bloginfo_rss( 'url' );

		}

	}

	/**

	 * Output a cat_name XML tag from a given category object

	 *

	 * @since 2.1.0

	 *

	 */

	function wxr_cat_name( $category ) {

		if ( empty( $category->name ) ) {

			return;

		}

		echo '<wp:cat_name>' . wxr_cdata( $category->name ) . "</wp:cat_name>\n";

	}

	/**

	 * Output a category_description XML tag from a given category object

	 *

	 * @since 2.1.0

	 *

	 */

	function wxr_category_description( $category ) {

		if ( empty( $category->description ) ) {

			return;

		}

		echo '<wp:category_description>' . wxr_cdata( $category->description ) . "</wp:category_description>\n";

	}

	/**

	 * Output a tag_name XML tag from a given tag object

	 *

	 * @since 2.3.0

	 *

	 */

	function wxr_tag_name( $tag ) {

		if ( empty( $tag->name ) ) {

			return;

		}

		echo '<wp:tag_name>' . wxr_cdata( $tag->name ) . "</wp:tag_name>\n";

	}

	/**

	 * Output a tag_description XML tag from a given tag object

	 *

	 * @since 2.3.0

	 *

	 */

	function wxr_tag_description( $tag ) {

		if ( empty( $tag->description ) ) {

			return;

		}

		echo '<wp:tag_description>' . wxr_cdata( $tag->description ) . "</wp:tag_description>\n";

	}

	/**

	 * Output a term_name XML tag from a given term object

	 *

	 * @since 2.9.0

	 *

	 */

	function wxr_term_name( $term ) {

		if ( empty( $term->name ) ) {

			return;

		}

		echo '<wp:term_name>' . wxr_cdata( $term->name ) . "</wp:term_name>\n";

	}

	/**

	 * Output a term_description XML tag from a given term object

	 *

	 * @since 2.9.0

	 *

	 */

	function wxr_term_description( $term ) {

		if ( empty( $term->description ) ) {

			return;

		}

		echo "\t\t<wp:term_description>" . wxr_cdata( $term->description ) . "</wp:term_description>\n";

	}

	/**

	 * Output term meta XML tags for a given term object.

	 *

	 * @since 4.6.0

	 *

	 * @param WP_Term $term Term object.

	 */

	function wxr_term_meta( $term ) {

		global $wpdb;

		$termmeta = $wpdb->get_results( $wpdb->prepare( "SELECT * FROM $wpdb->termmeta WHERE term_id = %d", $term->term_id ) );

		foreach ( $termmeta as $meta ) {

			/**

			 * Filters whether to selectively skip term meta used for WXR exports.

			 *

			 * Returning a truthy value from the filter will skip the current meta

			 * object from being exported.

			 *

			 * @since 4.6.0

			 *

			 * @param bool   $skip     Whether to skip the current piece of term meta. Default false.

			 * @param string $meta_key Current meta key.

			 * @param object $meta     Current meta object.

			 */

			if ( ! apply_filters( 'wxr_export_skip_termmeta', false, $meta->meta_key, $meta ) ) {

				printf( "\t\t<wp:termmeta>\n\t\t\t<wp:meta_key>%s</wp:meta_key>\n\t\t\t<wp:meta_value>%s</wp:meta_value>\n\t\t</wp:termmeta>\n", wxr_cdata( $meta->meta_key ), wxr_cdata( $meta->meta_value ) );

			}

		}

	}

	/**

	 * Output list of authors with posts

	 *

	 * @since 3.1.0

	 *

	 * @global wpdb $wpdb WordPress database abstraction object.

	 *

	 * @param int[] $post_ids Optional. Array of post IDs to filter the query by.

	 */

	function wxr_authors_list( array $post_ids = null ) {

		global $wpdb;

		if ( ! empty( $post_ids ) ) {

			$post_ids = array_map( 'absint', $post_ids );

			$and      = 'AND ID IN ( ' . implode( ', ', $post_ids ) . ')';

		} else {

			$and = '';

		}

		$authors = array();

		$results = $wpdb->get_results( "SELECT DISTINCT post_author FROM $wpdb->posts WHERE post_status != 'auto-draft' $and" );

		foreach ( (array) $results as $result ) {

			$authors[] = get_userdata( $result->post_author );

		}

		$authors = array_filter( $authors );

		foreach ( $authors as $author ) {

			echo "\t<wp:author>";

			echo '<wp:author_login>' . wxr_cdata( $author->user_login ) . '</wp:author_login>';

			echo '<wp:author_email>' . wxr_cdata( $author->user_email ) . '</wp:author_email>';

			echo '<wp:author_display_name>' . wxr_cdata( $author->display_name ) . '</wp:author_display_name>';

			echo '<wp:author_first_name>' . wxr_cdata( $author->first_name ) . '</wp:author_first_name>';

			echo '<wp:author_last_name>' . wxr_cdata( $author->last_name ) . '</wp:author_last_name>';

			echo "</wp:author>\n";

		}

	}

	/**

	 * Output all navigation menu terms

	 *

	 * @since 3.1.0

	 */

	function wxr_nav_menu_terms() {

		$nav_menus = wp_get_nav_menus();

		if ( empty( $nav_menus ) || ! is_array( $nav_menus ) ) {

			return;

		}

		foreach ( $nav_menus as $menu ) {

			echo "\t<wp:term>";

			echo '<wp:term_taxonomy>nav_menu</wp:term_taxonomy>';

			echo '<wp:term_slug>' . wxr_cdata( $menu->slug ) . '</wp:term_slug>';

			wxr_term_name( $menu );