????

Your IP : 216.73.216.79


Current Path : /proc/thread-self/root/home/arabianr/www/wp-content/plugins/simplybook/app/Traits/
Upload File :
Current File : //proc/thread-self/root/home/arabianr/www/wp-content/plugins/simplybook/app/Traits/HasViews.php

<?php

namespace SimplyBook\Traits;

use SimplyBook\Bootstrap\App;
use SimplyBook\Support\Helpers\Storages\EnvironmentConfig;

trait HasViews
{
    /**
     * Method for returning the desired view as a string
     * @throws \LogicException|\ReflectionException
     */
    public function view(string $path, array $variables = [], string $extension = 'php'): string
    {
        $basePath = App::getInstance()->get(EnvironmentConfig::class)->getString('plugin.view_path');
        $filePath = realpath($basePath . $path . '.' . $extension);

        // Someone is doing something dirty
        if (!$filePath || strpos($filePath, $basePath) !== 0) {
            throw new \LogicException('Given path is not valid: ' . esc_html($filePath));
        }

        if (!file_exists($filePath) || !is_readable($filePath)) {
            return '';
        }

        extract($variables);

        ob_start();
        require $filePath;
        return ob_get_clean();
    }

    /**
     * Method for outputting the desired view.
     * @internal we can ignore the phpcs error because we validate in {@see view}
     * that the executed path is in our plugin. And we escape all variables
     * in our views, so we have full control.
     */
    public function render(string $path, array $variables = [], string $extension = 'php'): void
    {
        // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
        echo $this->view($path, $variables, $extension);
    }
}