Foundation - Source Excerpt 17

Back to Foundation

Summary

This source excerpt preserves a bounded section of Anti-Christ.org/wp-content/plugins/fftac-foundation-core/inc/foundation.php so readers can inspect the evidence without opening the full source file.

**Source path:** Anti-Christ.org/wp-content/plugins/fftac-foundation-core/inc/foundation.php

&& 1 === preg_match('#^https?://#i', (string) $url);

    if ($is_valid) {
        return (string) $url;
    }

    if (function_exists('add_settings_error')) {
        add_settings_error(
            'antichrist_engine_support_url',
            'antichrist_engine_support_url_invalid',
            __('The support destination must be a full http or https URL. The previous value was kept.', 'antichrist-engine'),
            'error'
        );
    }

    return (string) get_option('antichrist_engine_support_url', '');
}

/**
 * Registers the Foundation Core admin settings page.
 *
 * @return void
 */
function antichrist_engine_foundation_register_settings_page()
{
    add_options_page(
        __('FFTAC Foundation', 'antichrist-engine'),
        __('FFTAC Foundation', 'antichrist-engine'),
        'manage_options',
        'fftac-foundation',
        'antichrist_engine_foundation_render_settings_page'
    );
}
add_action('admin_menu', 'antichrist_engine_foundation_register_settings_page');

/**
 * Registers Foundation-owned settings.
 *
 * @return void
 */
function antichrist_engine_foundation_register_launch_visibility_setting()
{
    register_setting('antichrist_engine_foundation', 'antichrist_engine_launch_visibility', array(
        'type'              => 'string',
        'sanitize_callback' => 'antichrist_engine_foundation_sanitize_launch_visibility_option',
        'default'           => 'public',
    ));

    register_setting('antichrist_engine_foundation', 'antichrist_engine_support_url', array(
        'type'              => 'string',
        'sanitize_callback' => 'antichrist_engine_foundation_sanitize_support_url_option',
        'default'           => '',
    ));

    add_settings_section(
        'antichrist_engine_foundation_public_section',
        __('Public site settings', 'antichrist-engine'),
        'antichrist_engine_foundation_render_public_settings_section',
        'fftac-foundation'
    );

    add_settings_field(
        'antichrist_engine_launch_visibility',
        __('FFTAC launch visibility', 'antichrist-engine'),
        'antichrist_engine_foundation_render_launch_visibility_setting',
        'fftac-foundation',
        'antichrist_engine_foundation_public_section',
        array(
            'label_for' => 'antichrist_engine_launch_visibility',
            'class'     => 'antichrist-engine-launch-visibility-setting',
        )
    );

    add_settings_field(
        'antichrist_engine_support_url',
        __('Support destination URL', 'antichrist-engine'),
        'antichrist_engine_foundation_render_support_url_setting',
        'fftac-foundation',
        'antichrist_engine_foundation_public_section',
        array(
            'label_for' => 'antichrist_engine_support_url',
            'class'     => 'antichrist-engine-support-url-setting',
        )
    );
}
add_action('admin_init', 'antichrist_engine_foundation_register_launch_visibility_setting');

/**
 * Renders the Foundation Core settings page.
 *
 * @return void
 */
function antichrist_engine_foundation_render_settings_page()
{
    if (!current_user_can('manage_options')) {
        return;
    }

    echo '<div class="wrap">';
    echo '<h1>' . esc_html__('FFTAC Foundation', 'antichrist-engine') . '</h1>';
    echo '<p>' . esc_html__('Configure Foundation-owned public site settings. Operational launch checks and intake exports remain under Tools -> FFTAC Launch Readiness.', 'antichrist-engine') . '</p>';
    settings_errors();
    echo '<form method="post" action="options.php">';
    settings_fields('antichrist_engine_foundation');
    do_settings_sections('fftac-foundation');
    submit_button(__('Save Foundation settings', 'antichrist-engine'));
    echo '</form>';
    echo '</div>';
}

/**
 * Renders the Foundation public settings section.
 *
 * @return void
 */
function antichrist_engine_foundation_render_public_settings_section()
{
    echo '<p>' . esc_html__('These settings affect public launch visibility and the support call-to-action destination.', 'antichrist-engine') . '</p>';
}

/**
 * Renders the launch visibility dropdown.
 *
 * @return void
 */
function antichrist_engine_foundation_render_launch_visibility_setting()
{
    $environment_mode      = getenv('ANTICHRIST_ENGINE_LAUNCH_VISIBILITY');
    $environment_overrides = false !== $environment_mode && '' !== trim((string) $environment_mode);
    $is_overridden         = defined('ANTICHRIST_ENGINE_LAUNCH_VISIBILITY') || $environment_overrides;
    $mode                  = antichrist_engine_foundation_get_launch_visibility_mode();
    $saved_mode            = antichrist_engine_foundation_sanitize_launch_visibility_option(get_option('antichrist_engine_launch_visibility', 'public'));
    $options               = array(
        'public'  => __('Public - allow indexing when WordPress allows it', 'antichrist-engine'),
        'preview' => __('Preview - block indexing but allow browsing', 'antichrist-engine'),
        'private' => __('Private - block indexing and crawler following', 'antichrist-engine'),
    );

    echo '<select id="antichrist_engine_launch_visibility" name="antichrist_engine_launch_visibility"' . disabled($is_overridden, true, false) . '>';

    foreach ($options as $value => $label) {
        echo '<option value="' . esc_attr($value) . '"' . selected($mode, $value, false) . '>' . esc_html($label) . '</option>';
    }

    echo '</select>';
    echo '<p class="description">' . esc_html__('Use public for launch. Use preview or private only for staging, review, or intentionally hidden environments.', 'antichrist-engine') . '</p>';

    if ($is_overridden) {
        echo '<input type="hidden" name="antichrist_engine_launch_visibility" value="' . esc_attr($saved_mode) . '">';
        echo '<p class="description">' . esc_html__('This value is currently controlled by ANTICHRIST_ENGINE_LAUNCH_VISIBILITY in code or the hosting environment, so the saved Foundation setting cannot override it.', 'antichrist-engine') . '</p>';
    }
}

/**
 * Renders the public support URL field.
 *
 * @return void
 */
function antichrist_engine_foundation_render_support_url_setting()
{
    $url = (string) get_option('antichrist_engine_support_url', '');
    $destination = antichrist_engine_foundation_get_support_destination();

    echo '<input id="antichrist_engine_support_url" name="antichrist_engine_support_url" type="url" class="regular-text" value="' . esc_attr($url) . '" placeholder="https://">';
    echo '<p class="description">' . esc_html__('Set a live donation or support URL. Leave blank to route support through the contact desk fallback.', 'antichrist-engine') . '</p>';
    echo '<p class="description">' . esc_html(sprintf(__('Current public destination: %s', 'antichrist-engine'), (string) ($destination['url'] ?? ''))) . '</p>';
}

/**
 * Returns true when the public site may be indexed by search engines.
 *
 * @return bool
 */
function antichrist_engine_foundation_allows_public_indexing()
{
    if ('public' !== antichrist_engine_foundation_get_launch_visibility_mode()) {
        return false;
    }

    return '0' !== (string) get_option('blog_public', '1');
}

/**
 * Returns the launch visibility status for internal notices and tests.
 *
 * @return array<string, string|bool>
 */
function antichrist_engine_foundation_get_launch_visibility_status()
{
    $mode = antichrist_engine_foundation_get_launch_visibility_mode();
    $blog_public = '0' !== (string) get_option('blog_public', '1');
    $allows_indexing = antichrist_engine_foundation_allows_public_indexing();
    $reason = '';

    if (!$allows_indexing) {
        $reason = !$blog_public ? 'wordpress_search_visibility' : 'launch_visibility_' . $mode;
    }

    return array(
        'mode'            => $mode,
        'blog_public'     => $blog_public,
        'allows_indexing' => $allows_indexing,
        'reason'          => $reason,
    );
}

/**
 * Returns baseline security headers owned by the theme.
 *
 * Host-level TLS, WAF, and caching rules still belong to production
 * infrastructure; these are safe defaults the theme can enforce everywhere.
 *
 * @return array<string, string>
 */
function antichrist_engine_foundation_get_security_headers()
{
    $headers = array(
        'X-Content-Type-Options' => 'nosniff',
        'X-Frame-Options' => 'SAMEORIGIN',
        'Referrer-Policy' => 'strict-origin-when-cross-origin',
        'X-Permitted-Cross-Domain-Policies' => 'none',
        'Permissions-Policy' => implode(', ', array(
            'accelerometer=()',
            'autoplay=()',
            'camera=()',
            'display-capture=()',
            'geolocation=()',
            'gyroscope=()',
            'magnetometer=()',
            'microphone=()',
            'payment=()',