easy_accordion_preview_action(); } /** * Public Action * * @return void */ private function easy_accordion_preview_action() { // admin Preview. add_action( 'wp_ajax_sp_eap_preview_meta_box', array( $this, 'sp_eap_backend_preview' ) ); } /** * Function Backed preview. * * @since 2.2.5 */ public function sp_eap_backend_preview() { $capability = apply_filters( 'sp_easy_accordion_ui_permission', 'manage_options' ); if ( ! current_user_can( $capability ) ) { wp_send_json_error( array( 'error' => esc_html__( 'You do not have permission to perform this action.', 'easy-accordion-free' ) ) ); } $nonce = isset( $_POST['ajax_nonce'] ) ? sanitize_text_field( wp_unslash( $_POST['ajax_nonce'] ) ) : ''; if ( ! wp_verify_nonce( $nonce, 'eapro_metabox_nonce' ) ) { return; } $setting = array(); // XSS ok. // No worries, This "POST" requests is sanitizing in the below array map. $data = ! empty( $_POST['data'] ) ? wp_unslash( $_POST['data'] ) : ''; // phpcs:ignore parse_str( $data, $setting ); // Preset Layouts. $post_id = $setting['post_ID']; $upload_data = $setting['sp_eap_upload_options']; $accordion_id = $post_id; $shortcode_data = $setting['sp_eap_shortcode_options']; $main_section_title = $setting['post_title']; $ea_dynamic_css = SP_EA_Front_Scripts::load_dynamic_style( $post_id, $shortcode_data ); echo ''; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped SP_EAP_FRONTEND::sp_eap_html_show( $post_id, $upload_data, $shortcode_data, $main_section_title ); die(); } } new Easy_Accordion_Free_Preview();