Changeset 3300993

Timestamp:

05/26/2025 08:37:48 PM (10 months ago)

Author:

Milmor

Message:

Update to version 4.0 from GitHub

Location:

telegram-bot

Files:

• tags/4.0 (copied) (copied from telegram-bot/trunk)
• tags/4.0/admin-messages.php (modified) (1 diff)
• tags/4.0/columns.php (modified) (4 diffs)
• tags/4.0/custom-post-types.php (modified) (1 diff)
• tags/4.0/panel/main.php (modified) (1 diff)
• tags/4.0/panel/send.php (modified) (2 diffs)
• tags/4.0/panel/settings.php (modified) (1 diff)
• tags/4.0/parse.php (modified) (5 diffs)
• tags/4.0/readme.txt (modified) (1 diff)
• tags/4.0/telegram-bot.php (modified) (7 diffs)
• trunk/admin-messages.php (modified) (1 diff)
• trunk/columns.php (modified) (4 diffs)
• trunk/custom-post-types.php (modified) (1 diff)
• trunk/panel/main.php (modified) (1 diff)
• trunk/panel/send.php (modified) (2 diffs)
• trunk/panel/settings.php (modified) (1 diff)
• trunk/parse.php (modified) (5 diffs)
• trunk/readme.txt (modified) (1 diff)
• trunk/telegram-bot.php (modified) (7 diffs)

telegram-bot/tags/4.0/admin-messages.php

@@ -1 +1 @@
 <?php
-    add_action( 'admin_notices', function() {
-
-        global $current_screen;
-        if ( 'telegram_subscribers' == $current_screen->post_type  ) {
-            echo '
-            <div class="notice notice-info">
-                <p>List of bot subscribers. New users will automatically appear once they /start on the bot</p>
-            </div>';
-        } else if ( 'telegram_groups' == $current_screen->post_type  ) {
-            echo '
-            <div class="notice notice-info">
-                <p>List of groups where your bot has been added.<br>
-                <small>Some <strong>BotFather</strong> actions could be required to get this working.</small></p>
-            </div>';
-        } else if ( 'telegram_commands' == $current_screen->post_type  ) {
-            echo '
-            <div class="notice notice-info">
-                <p>List of active commands of your bot<br>
-                <small>You can use the <strong>/command</strong> format as well as <strong>command</strong> (they are different).
-                <br>You can define multiple commands by typing, without spaces, a succession of comma-separated values (example: <strong>/command,command,/command2</strong>)</small></p>
-            </div>';
-        } else if ( 'telegram_lists' == $current_screen->taxonomy ) {
-            echo '
-            <div class="notice notice-info">
-                <p>You can create different distribution lists in this page. This can be used for people and groups as well.</p>
-            </div>';
+    add_action('admin_notices', function() {
+        if (!function_exists('get_current_screen')) {
+            return;
+        }
+        $screen = get_current_screen();
+        if (!$screen) {
+            return;
+        }
+        $notices = [
+            'telegram_subscribers' => [
+                'type' => 'info',
+                'message' => __('List of users who have subscribed to your bot.', 'telegram-bot'),
+            ],
+            'telegram_groups' => [
+                'type' => 'info',
+                'message' => __('List of groups where your bot has been added.<br><small>Some <strong>BotFather</strong> actions could be required to get this working.</small>', 'telegram-bot'),
+            ],
+            'telegram_commands' => [
+                'type' => 'info',
+                'message' => __('List of active commands of your bot<br><small>You can use the <strong>/command</strong> format as well as <strong>command</strong> (they are different).<br>You can define multiple commands by typing, without spaces, a succession of comma-separated values (example: <strong>/command,command,/command2</strong>)</small>', 'telegram-bot'),
+            ],
+        ];
+        if (isset($screen->post_type) && isset($notices[$screen->post_type])) {
+            $notice = $notices[$screen->post_type];
+            printf(
+                '<div class="notice notice-%s"><p>%s</p></div>',
+                esc_attr($notice['type']),
+                $notice['message']
+            );
+        } elseif (isset($screen->taxonomy) && $screen->taxonomy === 'telegram_lists') {
+            printf(
+                '<div class="notice notice-info"><p>%s</p></div>',
+                __('You can create different distribution lists on this page. This can be used for people and groups as well.', 'telegram-bot')
+            );
         }
     });

telegram-bot/tags/4.0/columns.php

@@ -16 +16 @@
         $columns['name'] ='Group Name';
         $columns['sdate'] ='Subscribed on';
+        unset($columns['cb']);
         unset($columns['date']);
         if ( defined('WP_DEBUG') && false === WP_DEBUG) {
@@ -23 +24 @@
     } );
 
-    function bulk_actions_telegram_send($bulk_actions) {
+    add_filter('bulk_actions-edit-telegram_subscribers', function($bulk_actions) {
         $bulk_actions['telegram-send'] = __('Send message', 'telegram-bot');
         return $bulk_actions;
-    }
-    add_filter('bulk_actions-edit-telegram_subscribers', 'bulk_actions_telegram_send' );
-    add_filter('bulk_actions-edit-telegram_groups', 'bulk_actions_telegram_send' );
+    });
 
-    function handle_bulk_actions_telegram_send($redirect_url, $action, $post_ids) {
+    add_filter('handle_bulk_actions-edit-telegram_subscribers', function($redirect_url, $action, $post_ids) {
         if ($action == 'telegram-send') {
             
@@ -37 +36 @@
         }
         return $redirect_url;
-    }
-    add_filter('handle_bulk_actions-edit-telegram_subscribers', 'handle_bulk_actions_telegram_send', 10, 3);
-    add_filter('handle_bulk_actions-edit-telegram_groups', 'handle_bulk_actions_telegram_send', 10, 3);
+    }, 10, 3);
+
+    #add_filter('bulk_actions-edit-telegram_subscribers', function($actions){ unset( $actions['edit'] ); return apply_filters( 'bulk_actions-edit-telegram_subscribers_filter', $actions ); });
+    #add_filter('bulk_actions-edit-telegram_groups', function($actions){ unset( $actions['edit'] ); return apply_filters( 'bulk_actions-edit-telegram_groups_filter', $actions ); });
 
     add_action('manage_telegram_subscribers_posts_custom_column', 't_manage_columns', 10, 2);
@@ -47 +47 @@
         switch ($column) {
             case 'name':
-                echo '<a class="row-title" href="'.get_edit_post_link( $post_id ).'">'.get_post_meta($post_id, 'telegram_name', true).'</a>';
+                printf(get_post_meta($post_id, 'telegram_name', true));
                 break;
             case 'user_name':

telegram-bot/tags/4.0/custom-post-types.php

@@ -90 +90 @@
     );
     if ( defined('WP_DEBUG') && false === WP_DEBUG) {
-        $args['capabilities'] = array( 'create_posts' => 'false' );
-        $args['map_meta_cap'] = true;
+        $args['capabilities'] = array( 'create_posts' => 'do_not_allow' );
+        $args['map_meta_cap'] = false;
     }
     $args = apply_filters('telegram_groups_register_capabilities', $args ); 

telegram-bot/tags/4.0/panel/main.php

@@ +1 @@
+<?php
+// Security: Only allow admins to view this page
+if (!current_user_can('manage_options')) {
+    wp_die(__('You do not have sufficient permissions to access this page.'));
+}
 
-<div class="wrap">
-    <div class="wrap about__container">
+// Fetch stats
+$version = esc_html(get_option('wp_telegram_version'));
+$dispatches = number_format_i18n(intval(get_option('wp_telegram_dispatches')));
+$subscribers = number_format_i18n(wp_count_posts('telegram_subscribers')->publish);
+$groups = number_format_i18n(wp_count_posts('telegram_groups')->publish);
 
-        <div class="about__section is-feature has-accent-background-color">
-            <h1>Telegram Bot & Channel</h1>
-            <p>Version <?php echo get_option('wp_telegram_version'); ?></p>
+// Fetch recent log entries (last 5)
+$log = get_option('wp_telegram_log');
+$recent_log = is_array($log) ? array_slice($log, 0, 5) : array();
+
+// Fetch plugin settings link
+$settings_url = admin_url('admin.php?page=telegram_settings');
+
+// Fetch log page link
+$log_url = admin_url('admin.php?page=telegram_log');
+
+?>
+<div class="wrap telegram-dashboard" style="max-width:900px;margin:auto;">
+    <div class="telegram-header" style="display:flex;align-items:center;justify-content:space-between;padding:32px 0 16px 0;">
+        <div>
+            <h1 style="margin:0;font-size:2.5em;">🤖 Telegram Bot & Channel</h1>
+            <span style="color:#888;font-size:1.1em;">v<?php echo $version; ?></span>
         </div>
-        <div class=" wp-clearfix"></div>
-    
-        <div class="about__section has-3-columns" style="text-align:center;">
-            <div class="column has-subtle-background-color">
-                <span style="font-size:3em;"><?php echo get_option('wp_telegram_dispatches'); ?></span>
-                <br>
-                messages sent
-            </div>
-            <div class="column has-subtle-background-color">
-                <span style="font-size:3em;"><?php echo wp_count_posts('telegram_subscribers')->publish; ?></span>
-                <br>
-                subscribers
-            </div>
-            <div class="column has-subtle-background-color">
-                <span style="font-size:3em;"><?php echo wp_count_posts('telegram_groups')->publish; ?></span>
-                <br>
-                groups
-            </div>
+        <div>
+            <a href="<?php echo esc_url($settings_url); ?>" class="button button-primary" style="font-size:1.1em;">⚙️ <?php _e('Settings', 'telegram-bot'); ?></a>
         </div>
     </div>
+    <div class="telegram-stats" style="display:flex;gap:32px;justify-content:space-between;margin:32px 0;">
+        <div class="telegram-stat-card" style="flex:1;background:#f6f8fa;padding:32px 0;border-radius:12px;text-align:center;box-shadow:0 2px 8px #0001;">
+            <div style="font-size:2.5em;color:#2271b1;font-weight:bold;"><?php echo $dispatches; ?></div>
+            <div style="color:#666;margin-top:8px;">Messages Sent</div>
+        </div>
+        <div class="telegram-stat-card" style="flex:1;background:#f6f8fa;padding:32px 0;border-radius:12px;text-align:center;box-shadow:0 2px 8px #0001;">
+            <div style="font-size:2.5em;color:#46b450;font-weight:bold;"><?php echo $subscribers; ?></div>
+            <div style="color:#666;margin-top:8px;">Subscribers</div>
+        </div>
+        <div class="telegram-stat-card" style="flex:1;background:#f6f8fa;padding:32px 0;border-radius:12px;text-align:center;box-shadow:0 2px 8px #0001;">
+            <div style="font-size:2.5em;color:#d63638;font-weight:bold;"><?php echo $groups; ?></div>
+            <div style="color:#666;margin-top:8px;">Groups</div>
+        </div>
+    </div>
+    <div class="telegram-actions" style="display:flex;gap:16px;justify-content:flex-end;margin-bottom:24px;">
+        <a href="<?php echo esc_url($log_url); ?>" class="button button-secondary">📝 <?php _e('View Log', 'telegram-bot'); ?></a>
+        <a href="<?php echo esc_url(admin_url('admin.php?page=telegram_send')); ?>" class="button button-primary">✉️ <?php _e('Send Message', 'telegram-bot'); ?></a>
+    </div>
+    <div class="telegram-recent-log" style="background:#fff;border-radius:10px;box-shadow:0 1px 4px #0001;padding:24px;">
+        <h2 style="margin-top:0;font-size:1.3em;"><?php _e('Recent Activity', 'telegram-bot'); ?></h2>
+        <?php if (!empty($recent_log)) : ?>
+            <table class="widefat striped" style="margin-top:12px;">
+                <thead>
+                    <tr>
+                        <th><?php _e('Type', 'telegram-bot'); ?></th>
+                        <th><?php _e('Date', 'telegram-bot'); ?></th>
+                        <th><?php _e('Author', 'telegram-bot'); ?></th>
+                        <th><?php _e('Description', 'telegram-bot'); ?></th>
+                    </tr>
+                </thead>
+                <tbody>
+                    <?php foreach ($recent_log as $line) : ?>
+                        <tr>
+                            <td><span style="font-weight:bold;color:#2271b1;"><?php echo isset($line[0]) ? esc_html($line[0]) : ''; ?></span></td>
+                            <td><?php echo isset($line[1]) ? esc_html($line[1]) : ''; ?></td>
+                            <td><?php echo isset($line[2]) ? esc_html($line[2]) : ''; ?></td>
+                            <td><?php echo isset($line[3]) ? esc_html($line[3]) : ''; ?></td>
+                        </tr>
+                    <?php endforeach; ?>
+                </tbody>
+            </table>
+        <?php else : ?>
+            <div style="color:#888;text-align:center;padding:24px 0;">No recent activity found.</div>
+        <?php endif; ?>
+    </div>
+    <div class="telegram-quick-actions" style="margin-top:32px;display:flex;gap:24px;">
+        <div style="flex:1;background:#f6f8fa;padding:20px 24px;border-radius:10px;">
+            <h3 style="margin-top:0;">Subscriber Search</h3>
+            <form method="get" action="<?php echo esc_url(admin_url('edit.php')); ?>">
+                <input type="hidden" name="post_type" value="telegram_subscribers" />
+                <input type="search" name="s" style="width:100%;margin-bottom:8px;" placeholder="Search subscribers by name or ID..." />
+                <button type="submit" class="button">Search</button>
+            </form>
+        </div>
+    </div>
+    <style>
+        .telegram-dashboard h1, .telegram-dashboard h2, .telegram-dashboard h3 { font-family: 'Segoe UI', 'Arial', sans-serif; }
+        .telegram-dashboard .button-primary { background:#2271b1;border-color:#2271b1; }
+        .telegram-dashboard .button-primary:hover { background:#1a5a8a;border-color:#1a5a8a; }
+        .telegram-dashboard .button-danger { background:#d63638;border-color:#d63638;color:#fff; }
+        .telegram-dashboard .button-danger:hover { background:#a00;border-color:#a00; }
+    </style>
 </div>

telegram-bot/tags/4.0/panel/send.php

@@ -4 +4 @@
         $count = 0;
         $send_to_custom_ids = false;
-        echo '<div class="wrap"><h2>'.__('Send a message', 'telegram-bot').'</h2>';
+        echo '<div class="wrap telegram-send-panel" style="max-width:700px;margin:auto;">';
+        echo '<h1 style="margin-bottom:24px;">' . __('Send a Message', 'telegram-bot') . '</h1>';
         if (isset($_POST["telegram_new_message"])) {
+            if (!isset($_POST['_wpnonce']) || !wp_verify_nonce($_POST['_wpnonce'], 'telegram_send_message')) {
+                wp_die(__('Security check failed.','telegram-bot'));
+            }
             $message = $_POST["telegram_new_message"];
             
@@ -34 +38 @@
             }
             
-            echo '<div class="notice notice-success">
-            <p>Your message have been sent!</p>
-            </div>';
+            echo '<div class="notice notice-success" style="margin-bottom:24px;"><p>' . __('Your message has been sent!', 'telegram-bot') . '</p></div>';
         }
-        echo '<form method="post" id="telegram_new_message">';
+        echo '<form method="post" id="telegram_new_message" style="background:#fff;padding:32px 32px 24px 32px;border-radius:10px;box-shadow:0 2px 8px #0001;">';
+        wp_nonce_field('telegram_send_message');
         if ( isset( $_GET['telegram_post_ids'] ) ) {
             $telegram_post_ids = explode( ',', $_GET['telegram_post_ids']);
-            echo '<div class="notice notice-warning"><p>Note: You are sending this message to <b>'.count( $telegram_post_ids ).' subscribers</b></p></div>';
+            echo '<div class="notice notice-warning" style="margin-bottom:16px;"><p>' . __('Note: You are sending this message to', 'telegram-bot') . ' <b>' . count( $telegram_post_ids ) . ' ' . __('subscribers', 'telegram-bot') . '</b></p></div>';
             $send_to_custom_ids = true;
         }
-        echo '<textarea name="telegram_new_message" cols="100" rows="10"></textarea><br>';
+        echo '<label for="telegram_new_message" style="font-weight:bold;font-size:1.1em;">' . __('Message', 'telegram-bot') . '</label><br>';
+        echo '<textarea name="telegram_new_message" id="telegram_new_message" cols="80" rows="7" style="width:100%;margin-bottom:18px;font-size:1.1em;"></textarea><br>';
         $target = $send_to_custom_ids ? 'custom_ids' : telegram_option('target');
         
         if ( !$send_to_custom_ids ) {
-            echo __('Send to', 'telegram-bot').':';
-            ?>
-        <select name="telegram_target">
-            <option value="0"><?php _e('Users, Groups, Channel', 'telegram-bot'); ?></option>
-            <option value="1"<?php if ($target==1 ) { echo ' selected="selected"'; } ?>><?php _e('Users', 'telegram-bot'); ?></option>
-            <option value="2"<?php if ($target==2 ) { echo ' selected="selected"'; } ?>><?php _e('Groups', 'telegram-bot'); ?></option>
-            <option value="3"<?php if ($target==3 ) { echo ' selected="selected"'; } ?>><?php _e('Users, Groups', 'telegram-bot'); ?></option>
-            <option value="4"<?php if ($target==4 ) { echo ' selected="selected"'; } ?>><?php _e('Channel', 'telegram-bot'); ?></option>
-        </select>
-        <?php }
-
-        submit_button( __('Send Now', 'telegram-bot'), 'primary');
+            echo '<label for="telegram_target" style="font-weight:bold;">' . __('Send to', 'telegram-bot') . ':</label> ';
+            echo '<select name="telegram_target" id="telegram_target" style="margin-bottom:18px;">';
+            echo '<option value="0"' . ($target == 0 ? ' selected' : '') . '>' . __('Users, Groups, Channel', 'telegram-bot') . '</option>';
+            echo '<option value="1"' . ($target == 1 ? ' selected' : '') . '>' . __('Users', 'telegram-bot') . '</option>';
+            echo '<option value="2"' . ($target == 2 ? ' selected' : '') . '>' . __('Groups', 'telegram-bot') . '</option>';
+            echo '<option value="3"' . ($target == 3 ? ' selected' : '') . '>' . __('Users, Groups', 'telegram-bot') . '</option>';
+            echo '<option value="4"' . ($target == 4 ? ' selected' : '') . '>' . __('Channel', 'telegram-bot') . '</option>';
+            echo '</select><br>';
+        }
+        echo '<button type="submit" class="button button-primary" style="font-size:1.1em;padding:8px 32px;">' . __('Send Now', 'telegram-bot') . '</button>';
         echo '</form>';
-
+        echo '<style>.telegram-send-panel textarea { font-family: inherit; } .telegram-send-panel .notice-success { border-left: 4px solid #46b450; } .telegram-send-panel .notice-warning { border-left: 4px solid #ffb900; }</style>';
         echo '</div>';
     }

telegram-bot/tags/4.0/panel/settings.php

@@ -1 @@
-<?php function telegram_settings_page() { ?>
+<?php
+// Security: Only allow admins to view this page
+if (!current_user_can('manage_options')) {
+    wp_die(__('You do not have sufficient permissions to access this page.'));
+}
 
-<div class="wrap">
-  <h2>Settings</h2>
+$options = get_option('wp_telegram');
+foreach ($options as $k => $v) {
+    $options[$k] = esc_attr($v);
+}
 
-<?php if ( $_SERVER["SERVER_ADDR"] == '127.0.0.1' ) {
-  echo '<div class="notice notice-warning"><p>'.__('Warning: the plugin <b>does not</b> work in localhost environments!', 'telegram-bot').'</p></div>';
-} ?>
-
-<form method="post" action="options.php">
-  <?php
-    settings_fields( 'wp_telegram_options');
-    $options=get_option( 'wp_telegram');
-    foreach( $options as $k => $v ) {
-      $options[$k] = esc_attr( $v );
-    }
-
-    if ( isset($_GET['settings-updated']) ) {
-
-        $url=telegram_geturl() . 'setWebhook?url=' . telegram_getapiurl();
-        
-        json_decode(file_get_contents($url), true);
-        telegram_log( 'sys', 'Webhook update', $url);
-    }
-  ?>
-
-    <table class="form-table">
-      <tr valign="top">
-        <th scope="row">
-          <label for="apikey">Plugin Api Key
-          </label>
-        </th>
-        <td>
-          <input readonly="readonly" id="apikey" type="text" name="wp_telegram_apikey" value="<?php echo get_option('wp_telegram_apikey'); ?>" size="55" />
-          <br>
-          <small>The unique key for your website: <b>Keep it secret!</b></small>
-        </td>
-      </tr>
-      <tr valign="top">
-        <th scope="row">
-          <label for="token">Bot Token<br><span style="background:darkred;font-size:0.8em;padding:2px;color:white;"><?php _e('Required', 'telegram-bot'); ?></span></label>
-        </th>
-        <td>
-          <input id="token" type="text" name="wp_telegram[token]" value="<?php echo $options['token']; ?>" size="55" />
-          <br>
-          <small><?php _e( 'Paste here your bot token. You can obtain it from Telegram <b>BotFather</b>', 'telegram-bot'); ?></small>
-        </td>
-      </tr
-      <tr valign="top">
-        <th scope="row">
-          <label for="username">Bot Username<br><span style="background:darkred;font-size:0.8em;padding:2px;color:white;"><?php _e('Required', 'telegram-bot'); ?></span></label>
-        </th>
-        <td>
-          <input id="username" type="text" name="wp_telegram[username]" value="<?php echo isset( $options['username'] ) ? $options['username'] : ''; ?>" size="55" />
-          <br>
-          <small>Telegram Bot username. Example: <b>mywebsite_bot</b></small>
-        </td>
-      </tr>
-      <tr valign="top">
-        <th scope="row">
-          <label for="channelusername">
-            <?php _e('Channel Username', 'telegram-bot'); ?>
-          </label>
-        </th>
-        <td>
-          <input id="channelusername" type="text" name="wp_telegram[channelusername]" value="<?php echo isset( $options['channelusername'] ) ? $options['channelusername'] : ''; ?>" size="55" />
-          <br>
-          <small>Insert your channel username (if you want to broadcast). Example: <b>@mywebsite</b>
-            <br>The bot must be admin in your channel
-          </small>
-        </td>
-      </tr>
-  <tr valign="top">
-    <th scope="row">
-      <label>
-        Webhook
-      </label>
-    </th>
-    <td>
-        <a class="page-title-action" onclick="alert('<?php echo telegram_getapiurl(); ?>');">Show private endpoint</a>
-        <p style="font-size:0.9em;">
-          This is your private Telegram webhook. Please keep it private and make sure it bypasses cache and firewall.
+// Handle webhook update after settings are saved
+if (isset($_GET['settings-updated'])) {
+    $url = telegram_geturl() . 'setWebhook?url=' . telegram_getapiurl();
+    json_decode(@file_get_contents($url), true);
+    telegram_log('sys', 'Webhook update', $url);
+}
+?>
+<div class="wrap telegram-settings" style="max-width:900px;margin:auto;">
+    <h1 style="margin-bottom:24px;"><?php _e('Telegram Bot Settings', 'telegram-bot'); ?></h1>
+    <p style="font-size:1.1em;">
+        <?php _e('This plugin is capable of broadcasting to channel and creating interactive bots.', 'telegram-bot'); ?><br>
+        <?php _e('You need to create a bot with BotFather and obtain the token.', 'telegram-bot'); ?><br>
+        <?php _e('To broadcast to a channel, add the bot as admin in your channel.', 'telegram-bot'); ?>
+    </p>
+    <?php if ($_SERVER["SERVER_ADDR"] == '127.0.0.1') {
+        echo '<div class="notice notice-warning"><p>' . __('Warning: the plugin <b>does not</b> work in localhost environments!', 'telegram-bot') . '</p></div>';
+    } ?>
+    <form method="post" action="options.php">
+        <?php settings_fields('wp_telegram_options'); ?>
+        <div id="telegram-tabs" style="margin-top:32px;">
+            <nav class="nav-tab-wrapper">
+                <a href="#tab-general" class="nav-tab nav-tab-active">General</a>
+                <a href="#tab-broadcast" class="nav-tab">Broadcast</a>
+                <a href="#tab-bot" class="nav-tab">Bot</a>
+            </nav>
+            <div id="tab-general" class="telegram-tab-content" style="display:block;">
+                <table class="form-table">
+                    <tr valign="top">
+                        <th scope="row"><label for="apikey">Plugin Api Key</label></th>
+                        <td>
+                            <input readonly="readonly" id="apikey" type="text" name="wp_telegram_apikey" value="<?php echo get_option('wp_telegram_apikey'); ?>" size="55" />
+                            <br><small><?php _e('The unique key for your website: <b>Keep it secret!</b>', 'telegram-bot'); ?></small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="token">Bot Token</label></th>
+                        <td>
+                            <input id="token" type="text" name="wp_telegram[token]" value="<?php echo $options['token']; ?>" size="55" autocomplete="off" />
+                            <br><small><?php _e('Telegram Bot authentication key. <b>Keep it secret!</b>', 'telegram-bot'); ?></small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="username">Bot Username</label></th>
+                        <td>
+                            <input id="username" type="text" name="wp_telegram[username]" value="<?php echo isset($options['username']) ? $options['username'] : ''; ?>" size="55" />
+                            <br><small><?php _e('Telegram Bot username. Example: <b>mywebsite_bot</b>', 'telegram-bot'); ?></small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="channelusername"><?php _e('Channel Username', 'telegram-bot'); ?></label></th>
+                        <td>
+                            <input id="channelusername" type="text" name="wp_telegram[channelusername]" value="<?php echo isset($options['channelusername']) ? $options['channelusername'] : ''; ?>" size="55" />
+                            <br><small><?php _e('Insert your channel username (if you want to broadcast). Example: <b>@mywebsite</b><br>The bot must be admin in your channel', 'telegram-bot'); ?></small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="mode"><?php _e('Connection Mode', 'telegram-bot'); ?></label></th>
+                        <td>
+                            <select name="wp_telegram[mode]" disabled>
+                                <option value="0" selected><?php _e('Telegram WebHooks (required)', 'telegram-bot'); ?></option>
+                            </select>
+                            <br><small><?php _e('Telegram WebHooks are now required. SSL is mandatory for webhook delivery.', 'telegram-bot'); ?></small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label>Webhook</label></th>
+                        <td>
+                            <a class="page-title-action" onclick="alert('<?php echo telegram_getapiurl(); ?>');">Show private endpoint</a>
+                            <p style="font-size:0.9em;">
+                                <?php _e('This is your private Telegram webhook. Please keep it private and make sure it bypasses cache and firewall.', 'telegram-bot'); ?>
+                            </p>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="zapier"><?php _e('Enable Zapier', 'telegram-bot'); ?></label></th>
+                        <td>
+                            <input id="zapier" name="wp_telegram[zapier]" type="checkbox" value="1" <?php checked('1', (isset($options['zapier']) && $options['zapier']) ? 1 : 0); ?> />
+                            <br><small><?php _e('Enable Zapier integration • Beta •', 'telegram-bot'); ?>
+                                <a href="https://zapier.com/developer/invite/26805/1ec54299d4307c0b86b7417d0866ff25/" target="_blank">Click here to get an invite</a>
+                            </small>
+                        </td>
+                    </tr>
+                </table>
+            </div>
+            <div id="tab-broadcast" class="telegram-tab-content" style="display:none;">
+                <table class="form-table">
+                    <tr valign="top">
+                        <td colspan="2">
+                            <h3><?php _e('Posts broadcast', 'telegram-bot'); ?></h3>
+                            <p><?php _e('You can send post or custom post to Telegram when you publish or edit it.', 'telegram-bot'); ?></p>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="target"><?php _e('Default content broadcast', 'telegram-bot'); ?></label></th>
+                        <td>
+                            <select name="wp_telegram[target]">
+                                <option><?php _e('Users, Groups, Channel', 'telegram-bot'); ?></option>
+                                <option value="1"<?php if (isset($options['target']) && $options['target'] == 1) { echo ' selected="selected"'; } ?>><?php _e('Users', 'telegram-bot'); ?></option>
+                                <option value="2"<?php if (isset($options['target']) && $options['target'] == 2) { echo ' selected="selected"'; } ?>><?php _e('Groups', 'telegram-bot'); ?></option>
+                                <option value="3"<?php if (isset($options['target']) && $options['target'] == 3) { echo ' selected="selected"'; } ?>><?php _e('Users, Groups', 'telegram-bot'); ?></option>
+                                <option value="4"<?php if (isset($options['target']) && $options['target'] == 4) { echo ' selected="selected"'; } ?>><?php _e('Channel', 'telegram-bot'); ?></option>
+                                <option value="5"<?php if (isset($options['target']) && $options['target'] == 5) { echo ' selected="selected"'; } ?>><?php _e('All', 'telegram-bot'); ?></option>
+                            </select>
+                            <br><small><?php _e('Define the post broadcast targeting when you send content (for example posts or manual text).<br>You can also change this behaviour manually.', 'telegram-bot'); ?></small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="posttemplate"><?php _e('Post Template', 'telegram-bot'); ?></label></th>
+                        <td>
+                            <textarea id="posttemplate" rows="4" class="widefat" name="wp_telegram[posttemplate]"><?php echo $options['posttemplate']; ?></textarea>
+                            <br><small><?php _e('Allowed placeholders: <b>%TITLE% %LINK% %EXCERPT% %CHAT_ID%</b>', 'telegram-bot'); ?></small>
+                        </td>
+                    </tr>
+                </table>
+            </div>
+            <div id="tab-bot" class="telegram-tab-content" style="display:none;">
+                <table class="form-table">
+                    <tr valign="top">
+                        <td colspan="2">
+                            <h3><?php _e('Interactive bot', 'telegram-bot'); ?></h3>
+                            <p><?php _e('Only use this section if you want to build an interactive bot', 'telegram-bot'); ?></p>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="wmuser"><?php _e('Start Message', 'telegram-bot'); ?><br><small><?php _e('for users', 'telegram-bot'); ?></small></label></th>
+                        <td>
+                            <input id="wmuser" type="text" name="wp_telegram[wmuser]" value="<?php echo $options['wmuser']; ?>" size="55" />
+                            <br><small><?php _e('Cannot be blank', 'telegram-bot'); ?>.</small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="bmuser"><?php _e('Bye Message', 'telegram-bot'); ?><br><small><?php _e('for Private Conversations', 'telegram-bot'); ?></small></label></th>
+                        <td>
+                            <input id="bmuser" type="text" name="wp_telegram[bmuser]" value="<?php echo $options['bmuser']; ?>" size="55" />
+                            <br><small><?php _e('Cannot be blank', 'telegram-bot'); ?>.</small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="emuser"><?php _e('Error Message', 'telegram-bot'); ?><br><small><?php _e('for users', 'telegram-bot'); ?></small></label></th>
+                        <td>
+                            <input id="emuser" type="text" name="wp_telegram[emuser]" value="<?php echo isset($options['emuser']) ? $options['emuser'] : ''; ?>" size="55" />
+                            <br><small><?php _e('This will be shown when the command doesn\'t exist.', 'telegram-bot'); ?></small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="wmgroup"><?php _e('Start Message', 'telegram-bot'); ?><br><small><?php _e('for Groups', 'telegram-bot'); ?></small></label></th>
+                        <td>
+                            <input id="wmgroup" type="text" name="wp_telegram[wmgroup]" value="<?php echo $options['wmgroup']; ?>" size="55" />
+                            <br><small><?php _e('Cannot be blank', 'telegram-bot'); ?>.</small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="keyboard"><?php _e('Keyboard Template', 'telegram-bot'); ?><br><small><?php _e('for users', 'telegram-bot'); ?></small></label></th>
+                        <td>
+                            <input id="keyboard" type="text" name="wp_telegram[keyboard]" value="<?php echo $options['keyboard']; ?>" size="55" />
+                            <br><small><?php _e('Example: <b>1,2,3;4,5,6;Text</b>', 'telegram-bot'); ?></small>
+                        </td>
+                    </tr>
+                </table>
+            </div>
+        </div>
+        <div class="clear"></div>
+        <hr>
+        <p class="submit">
+            <input type="submit" class="button-primary" value="<?php _e('Save Changes'); ?>" />
         </p>
-    </td>
-  </tr>
-<tr valign="top">
-  <th scope="row">
-    <label for="zapier">
-      <?php _e('Enable Zapier', 'telegram-bot'); ?>
-    </label>
-  </th>
-  <td>
-    <input id="zapier" name="wp_telegram[zapier]" type="checkbox" value="1"
-          <?php checked( '1', ( isset( $options[ 'zapier'] ) && $options[ 'zapier'] ) ? 1 : 0 ); ?> />
-    <br>
-    <small>Zapier allows you to send messages from your own platforms
-      <a href="https://zapier.com/developer/public-invite/88225/1d9f5d9ec76cde2aac6e356298aee8e8/">Click here to get an invite</a>
-    </small>
-  </td>
-</tr>
-<tr valign="top">
-      <td colspan="2">
-        <h3><?php _e('Posts broadcast', 'telegram-bot'); ?></h3>
-        <p><?php _e('You can send post or custom post to Telegram when you publish or edit it.', 'telegram-bot'); ?></p>
-        <p><?php _e('If you want to broadcast to a channel, please add the bot as admin in your channel.', 'telegram-bot'); ?></p>        
-      </td>
-    </tr>
-    <tr valign="top">
-      <th scope="row">
-        <label for="mode">
-          <?php _e('Default content broadcast', 'telegram-bot'); ?>
-        </label>
-      </th>
-      <td>
-        <select name="wp_telegram[target]">
-          <option><?php _e('Users, Groups, Channel', 'telegram-bot'); ?></option>
-          <option value="1"<?php if (isset($options['target'])&&$options['target']==1 ) { echo ' selected="selected"'; } ?>><?php _e('Users', 'telegram-bot'); ?></option>
-          <option value="2"<?php if (isset($options['target'])&&$options['target']==2 ) { echo ' selected="selected"'; } ?>><?php _e('Groups', 'telegram-bot'); ?></option>
-          <option value="3"<?php if (isset($options['target'])&&$options['target']==3 ) { echo ' selected="selected"'; } ?>><?php _e('Users, Groups', 'telegram-bot'); ?></option>
-          <option value="4"<?php if (isset($options['target'])&&$options['target']==4 ) { echo ' selected="selected"'; } ?>><?php _e('Channel', 'telegram-bot'); ?></option>
-          <option value="5"<?php if (isset($options['target'])&&$options['target']==5 ) { echo ' selected="selected"'; } ?>><?php _e('All', 'telegram-bot'); ?></option>
-        </select>
-      <br>
-      <small>
-        <?php _e('Define the post broadcast targeting when you send content (for example posts or manual text).', 'telegram-bot'); ?>
-        <br>
-        <?php _e('You can also change this behaviour manually.', 'telegram-bot'); ?>
-      </small>
-      </td>
-    </tr>
-    <tr valign="top">
-        <th scope="row">
-            <label for="posttemplate"><?php _e('Post Template', 'telegram-bot'); ?></label>
-        </th>
-        <td>
-        <textarea id="posttemplate" rows="4" class="widefat" name="wp_telegram[posttemplate]"><?php echo $options['posttemplate']; ?></textarea>
-        <br><small><?php _e('Allowed placeholders: <b>%TITLE% %LINK% %EXCERPT% %CHAT_ID%</b>', 'telegram-bot'); ?></small> </td></td>
-    </tr>
-    <tr valign="top">
-      <td colspan="2">
-        <h3><?php _e('Interactive bot', 'telegram-bot'); ?></h3>
-        <p>Only use this section if you want to build an interactive bot</p>
-      </td>
-    </tr>
-    <tr valign="top">
-      <th scope="row">
-        <label for="wmuser">
-          <?php _e('Start Message', 'telegram-bot'); ?>
-          <br>
-          <small>
-            <?php _e('for users', 'telegram-bot'); ?>
-          </small>
-        </label>
-      </th>
-      <td>
-        <input id="wmuser" type="text" name="wp_telegram[wmuser]" value="<?php echo $options['wmuser']; ?>" size="55" />
-        <br>
-        <small>
-          <?php _e('Cannot be blank', 'telegram-bot'); ?>.
-        </small>
-      </td>
-    </tr>
-    <tr valign="top">
-      <th scope="row">
-        <label for="bmuser">
-          <?php _e('Bye Message', 'telegram-bot'); ?>
-          <br>
-          <small>
-            <?php _e('for Private Conversations', 'telegram-bot'); ?>
-          </small>
-        </label>
-      </th>
-      <td>
-        <input id="bmuser" type="text" name="wp_telegram[bmuser]" value="<?php echo $options['bmuser']; ?>" size="55" />
-        <br>
-        <small>
-          <?php _e('Cannot be blank', 'telegram-bot'); ?>.
-        </small>
-      </td>
-    </tr>
-    <tr valign="top">
-      <th scope="row">
-        <label for="emuser">
-          <?php _e('Error Message', 'telegram-bot'); ?>
-          <br>
-          <small>
-            <?php _e('for users', 'telegram-bot'); ?>
-          </small>
-        </label>
-      </th>
-      <td>
-        <input id="emuser" type="text" name="wp_telegram[emuser]" value="<?php echo isset( $options['emuser'] ) ? $options['emuser'] : ''; ?>" size="55" />
-        <br>
-        <small><?php _e('This will be shown when the command doesn\'t exist.', 'telegram-bot'); ?></small>
-      </td>
-    </tr>
-    <tr valign="top">
-      <th scope="row">
-        <label for="wmgroup">
-          <?php _e('Start Message', 'telegram-bot'); ?>
-          <br>
-          <small>for Groups
-          </small>
-        </label>
-      </th>
-      <td>
-        <input id="wmgroup" type="text" name="wp_telegram[wmgroup]" value="<?php echo $options['wmgroup']; ?>" size="55" />
-        <br>
-        <small>
-          <?php _e('Cannot be blank', 'telegram-bot'); ?>.
-        </small>
-      </td>
-    </tr>
-    <tr valign="top">
-      <th scope="row">
-        <label for="keyboard">
-          <?php _e('Keyboard Template', 'telegram-bot'); ?>
-          <br>
-          <small><?php _e('for users', 'telegram-bot'); ?></small>
-        </label>
-      </th>
-      <td>
-        <input id="keyboard" type="text" name="wp_telegram[keyboard]" value="<?php echo $options['keyboard']; ?>" size="55" />
-        <br>
-        <small><?php _e('Example: <b>1,2,3;4,5,6;Text</b>', 'telegram-bot'); ?></small>
-      </td>
-    </tr>
-</table>
-
-<p class="submit">
-  <input type="submit" class="button-primary" value="<?php _e('Save Changes'); ?>" />
-</p>
-</form>
+    </form>
+    <style>
+        .telegram-settings .nav-tab-wrapper { margin-bottom: 0; }
+        .telegram-settings .nav-tab { font-size: 1.1em; }
+        .telegram-settings .telegram-tab-content { background: #fff; border: 1px solid #ccd0d4; border-top: none; padding: 24px 32px; border-radius: 0 0 8px 8px; }
+        .telegram-settings table.form-table { width: 100%; }
+        .telegram-settings th { width: 220px; }
+    </style>
+    <script>
+        (function(){
+            const tabs = document.querySelectorAll('.nav-tab');
+            const contents = document.querySelectorAll('.telegram-tab-content');
+            tabs.forEach(tab => {
+                tab.addEventListener('click', function(e) {
+                    e.preventDefault();
+                    tabs.forEach(t => t.classList.remove('nav-tab-active'));
+                    this.classList.add('nav-tab-active');
+                    contents.forEach(c => c.style.display = 'none');
+                    const sel = this.getAttribute('href');
+                    document.querySelector(sel).style.display = 'block';
+                });
+            });
+        })();
+    </script>
 </div>
-<?php } ?>

telegram-bot/tags/4.0/parse.php

@@ -3 +3 @@
 
     if (!$json) {
-        telegram_log('Warning','Webhook URL','Endpoint was called without input.');
+        telegram_log('returned','','');
         return;
     }
@@ -13 +13 @@
         die();
     }
-    update_option('wp_telegram_last_id', $data['message']['message_id'] );
+    update_option('wp_telegram_last_id', $data['message']['message_id']);
 
     if ( $data['message']['chat']['type'] == 'private' ) {
@@ -25 +25 @@
         $GROUP = true; $PRIVATE = false;
         $COMMAND = $data['message']['text'];
-    } else if ( $data['my_chat_member']['chat']['type'] == 'supergroup' ) {
-        $USERID = $data['my_chat_member']['chat']['id'];
-        $CPT = 'telegram_groups';
-        $GROUP = true; $PRIVATE = false;
-        $COMMAND = '';
     } else if ( $data['callback_query']['message']['text'] ) {
         $USERID = $data['callback_query']['message']['chat']['id'];
@@ -60 +55 @@
             telegram_sendmessage( $USERID, telegram_option('wmuser') );
         } else if ( $GROUP ) {
-            $name = '';
-            if ( isset( $data['message']['chat']['title'] ) ) {
-                $name = $data['message']['chat']['title'];
-            } else if ( isset( $data['my_chat_member']['chat']['title'] ) ) {
-                $name = $data['my_chat_member']['chat']['title'];
-            }
-            update_post_meta($p, 'telegram_name', $name );
+            update_post_meta($p, 'telegram_name', $data['message']['chat']['title']);
             telegram_log('', '', 'Bot added to <strong>'.$data['message']['chat']['title'].'</strong>');
             telegram_sendmessage( $USERID, telegram_option('wmgroup') );
@@ -83 +72 @@
         update_post_meta( $POST_ID, 'telegram_counter', $counter );
     } else if ($GROUP) {
-        update_post_meta($o->ID, 'telegram_name', 'xx');
+        update_post_meta($o->ID, 'telegram_name', $data['message']['chat']['title']);
     }
 

telegram-bot/tags/4.0/readme.txt

@@ -1 +1 @@
 === Telegram Bot & Channel ===
-Contributors: Milmor
-Version:    3.8.2
-Stable tag: 3.8.2
-Author:     Marco Milesi
-Author URI:   https://profiles.wordpress.org/milmor/
+Contributors: Milmor, marcomilesi
+Version: 4.0
+Stable tag: 4.0
+Author: Marco Milesi
+Author URI: https://profiles.wordpress.org/milmor/
 Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=F2JK36SCXKTE2
-Tags: telegram, bot, newsletter, channel, group, automatic, stream, classicpress
-Requires at least: 3.8
-Requires PHP: 5.6
-Tested up to: 6.5
+Tags: telegram, bot, newsletter, channel, group, broadcast, automation, notifications, autoresponder, webhook, ssl, zapier, integration, marketing, customer-engagement, chatbot, wordpress, classicpress
+Requires at least: 4.6
+Requires PHP: 7.0
+Tested up to: 6.9
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
 
-Send your posts to Telegram and build an interactive bot. Zapier integrated!
+Supercharge your WordPress site with Telegram! Broadcast posts, automate notifications, and build interactive bots for your users, groups, and channels. Secure, modern, and easy to use. Zapier integration included!
 
 == Description ==
 
-This  plugin allows you to accomplish a variety of tasks, including teaching, playing, searching, broadcasting, reminding, connecting, and integrating with your services.
-
-With this powerful bot builder, you can: 
-
-🤖 **Build a bot**: create interactive autoresponders for users and groups
-📣 **Broadcast to a channel**: utilize the broadcast feature to send messages to your channels and bot subscribers
-
-https://youtu.be/8fckoWSmAks
-
-= Bot features =
-
-Enhance your content distribution strategy with these **free** advanced features:
-
-📰 Send your content (post, page or custom messages) with templates
-📅 Support for scheduled post broadcast
-⌨️ Utilize **keyboards** and **inline buttons** for enhanced user engagement
-💬 Broadcast to various channels including chats, groups, supergroups, and channels
-↩️ Create unlimited autoresponders
-📊 View insights about users and groups subscribed to your bot
-📡 Haversine algorithm to get users' location and provide geo-focused content
-🎨 Create custom applicatons with **/$command $var1 $var2** format for custom application creation
-💡 **[Zapier](https://zapier.com)** integration to ensure seamless connectivity with your other tools
-
-= Channel features =
-📰 Send your content (post, page or custom messages) with configurable templates
-📅 Support for scheduled post broadcast
-💡 **[Zapier](https://zapier.com)** integration
-
-**Note:** your bot must be administrator of your channel for sending messages
-
-🔐 Every connection relies on secure webhooks for maximum security. Telegram requires **SSL** to manage a Telegram Bot. If you don't have it, just choose the free opt-in service [botpress.org](https://botpress.org) in options (the feature will send some data to our server).
-
-= Zapier and IoT features = 
-Zapier makes it easy to automate tasks between web apps. For example:
-
-* send a news published on a website (based on RSS)
-* send the weather to your subscribers, every day
-* inform users when you upload an image on Instagram
-* and much more… With 400+ Zapier Apps supported!
-
-https://www.youtube.com/watch?v=14aEV0_FHFk
-
-= DEMO =
-* **[CosenzApp_bot](http://telegram.me/CosenzApp_bot)** (italian) - Guide for Cosenza city
-Want to showcase your work? contact us!
+**Telegram Bot & Channel** is the all-in-one solution to connect your WordPress site with Telegram. Instantly broadcast posts, automate notifications, and create interactive bots for your audience. No coding required!
+
+**Key Features:**
+- 🤖 **Bot builder:** Create interactive autoresponders for users and groups
+- 📣 **Broadcast:** Send posts, pages, or custom messages to your channels, groups, and subscribers
+- 🔔 **Automated notifications:** Instantly notify your audience about new content
+- 🔗 **Zapier integration:** Connect Telegram with 400+ apps and automate your workflows
+- 🔐 **Secure:** All connections use Telegram WebHooks and require SSL for maximum security
+- 🛡️ **Modern UI:** Clean, user-friendly admin panels with stats, logs, and quick actions
+
+**Why choose this plugin?**
+- 100% free and open source
+- No third-party servers: your data stays on your site
+- Easy setup: just add your bot token and go
+- Developer-friendly: extend with custom PHP actions and filters
+
+== Features ==
+
+**Bot & Broadcast:**
+- Send posts, pages, or custom messages with flexible templates
+- Schedule broadcasts for future posts
+- Use custom keyboards and inline buttons for rich user interaction
+- Broadcast to users, groups, supergroups, and channels
+- Unlimited autoresponders and command triggers
+- View insights about your Telegram audience
+- Haversine algorithm for geo-targeted content
+- Create custom applications with command variables
+
+**Zapier & Automation:**
+- Connect Telegram to 400+ apps (RSS, Instagram, Google Sheets, and more)
+- Automate news, weather, social, and IoT notifications
+- Easy Zapier invite and setup
+
+**Security & Privacy:**
+- All actions protected by WordPress nonces (CSRF protection)
+- Only supports secure Telegram WebHooks (SSL required)
+- No data sent to third-party servers (except optional Zapier integration)
+
+**Screenshots:**
+1. Modern dashboard with stats and recent activity
+2. Subscribers list
+3. Commands and autoresponders
+4. Zapier integration
+5. Plugin settings with tabs
+6. Dynamic replies and inline buttons
+7. Keyboard example
+8. Post broadcasting
+9. Native Gutenberg support
 
 == Installation ==
-This section describes how to install the plugin and get it working.
-
-1. Upload `telegram-bot` directory to the `/wp-content/plugins/` directory
-2. Activate the plugin through the 'Plugins' menu in WordPress
+1. Upload the `telegram-bot` directory to `/wp-content/plugins/`
+2. Activate the plugin in the WordPress admin
 3. Go to the Telegram settings page
-4. Go through the steps and hit update!
+4. Enter your bot token and configure your preferences
+5. Enjoy automated Telegram notifications and bot features!
 
 == Frequently Asked Questions ==
-More documentation is available on [www.botpress.org/docs](https://www.botpress.org/docs)
-
-= How do I create a bot? =
-[www.botpress.org/docs/telegram/how-to-create-a-bot](https://www.botpress.org/docs/telegram/how-to-create-a-bot/)
-
-= How can i let users subscribe? =
-[www.botpress.org/docs/telegram/how-do-users-subscribe](https://www.botpress.org/docs/telegram/how-do-users-subscribe/)
-
-= What is Zapier and how do i integrate it? =
-[www.botpress.org/docs/telegram/zapier-integration](https://www.botpress.org/docs/telegram/zapier-integration/)
-
-= How to enable debug mode? =
-If you are a developer, or just want a more complete "Telegram > Log" enable WP_DEBUG mode.
-The plugin debug mode also allows to explore Telegram users and groups as standard posts. This let you to check custom fields for each users and modify them in real time. You'll notice a new column (= Telegram id for the user) in Subscribers and Groups page.
-We don't suggest to keep WP_DEBUG if not for testing purposes.
-
-= How to make dynamic replies? (PHP required) =
-The best way to integrate PHP code is to build a custom integration plugin, but you can also add PHP to /$commands directly in your WordPress admin dashboard using the [Insert Php](https://wordpress.org/plugins/insert-php) plugin.
-
-In case you want to scale and choose the first option, you can create a new file called **telegram-bot-custom.php** and upload it to wp-content/plugins.
-
-The following example, once activated in the plugins list, will reply to `/command`:
-
-`<?php
-/*
-Plugin Name: Telegram Bot & Channel (Custom)
-Description: My Custom Telegram Plugin
-Author: My name
-Version: 1
-*/
-
-add_action('telegram_parse','telegramcustom_parse', 10, 2);
-
-function telegramcustom_parse( $telegram_user_id, $text ) {
-    $plugin_post_id = telegram_getid( $telegram_user_id );
-
-    if ( !$plugin_post_id ) {
-        return;
-    }
-
-    /*
-    Here is the dynamic processing and how to reply.
-    You can:
-    - use if, switch and everything that works in php
-    - check if $text is made of multiple words (create an array from $text)
-    - customize and code other actions (ex. create WordPress post is $telegram_user_id is your id)
-    */
-
-    if ( $text == '/command') {
-        telegram_sendmessage( $telegram_user_id, 'Oh, yes you typed /command');
-    }
-
-    return;
-}
-
-?>`
-
-= How to set up dynamic keyboards? =
-You can send custom keyboards directly in php. Every keyboard can be set only when you send a message, and is kept in the client side until another keyboard is sent (in another message). You can also change this behaviour by setting the $one_time_keyboard true or false.
-
-`telegram_sendmessage( $telegram_user_id, 'Hello from the other side!'); //Message with no keyboard (or with default one if set in plugin options)
-telegram_sendmessage( $telegram_user_id, 'Hello from the other side!', telegram_build_reply_markup( '11,12,13;21,22', true )); //Message with custom keyboard`
-
-Here is the details of telegram_build_reply_markup (an array is returned):
-`telegram_build_reply_markup(
- '11,12,13;21,22', //The keyboard template (eg. 2 row, 3 columns for the first one and two columns for the second one
- true, // $one_time_keyboard (optional) (default false = kept until a new keyboard is sent) (true = kept until the user send something to the bot)
- true // $resize_keyboard (optional) (default true)
-);`
-
-You can also alter keyboards for commands defined in the **admin area**. Start from the previous custom plugin created, and add the following filter:
-
-`add_filter( 'telegram_get_reply_markup_filter', 'telegram_get_reply_markup_filter_custom', 1 );
-
-function telegram_get_reply_markup_filter_custom( $id ) {
-    if ( $id ) {
-        switch ( $id ) {
-            case 7: //Your command ID (found in the url while editing the command)
-                telegram_log('####', $id, 'custom keyboard'); //Useful for debug
-                return array(
-                    'keyboard' => array(array('Top Left', 'Top Right'),array('Bottom')),
-                    'resize_keyboard' => true, //true or false (suggested: true)
-                    'one_time_keyboard' => true //true or false
-                    );            
-            default:
-                return;
-        }
-    }
-}`
-
-= How to get user location? =
-It's easy, with harvesine algorithm (one-point radius) or standard geolocation (4-points).
-These snippets only cover the harvesine algorithm, that is simple and supported by the plugin. To use the standard 4-points geolocation it's enough to do some php-calc with basic if-then structures.
-
-You can start from the previous custom plugin created, and add the following action:
-
-`add_action('telegram_parse_location','telegramcustom_c_parse_location', 10, 3);
-
-function telegramcustom_c_parse_location ( $telegram_user_id, $lat, $long  ) {
-
-  if ( telegram_location_haversine_check ( 45.85, 9.70, $lat, $long, 20 ) ) {
-    telegram_sendmessage( $telegram_user_id, 'Inside the radius');
-  }
-
-}`
-
-The examples sends a "Inside the radius" message when the user is inside the **20-meters** radius centered in 45.85 Lat, 9.70 Long.
-
-You have two developer functions to use:
-
-`//Check if point is within a distance (max_distance required)
-$boolean = telegram_location_haversine_check ( $latitudeFrom, $longitudeFrom, $latitudeTo, $longitudeTo, $max_distance, $min_distance = 0, $earthRadius = 6371000);
-
-//Calculate the distance
-$int = telegram_location_haversine_distance ( $latitudeFrom, $longitudeFrom, $latitudeTo, $longitudeTo, $earthRadius = 6371000);`
-
-The first function returns a boolean (true/false) depending on given parameters. Please note that $min_distance and $earthRadius are optional.
-The second one returns a int (in meters) of the distance. $earthRadius optional.
-
-Both the functions calculates distances on meters. If you want another type of result, just change the $earthRadius.
-
-= How to get user photos? =
-We've written simple functions to let developers build everything.
-Photos are saved in **/wp-content/uploads/telegram-bot/'.$plugin_post_id.'/'.$file_name** where $plugin_post_id is the custom post type id associated with the Telegram subscription (ex. '24') and $file_name is time().$extension
-
-`<?php
-/*
-Plugin Name: Telegram Bot & Channel (Custom)
-Description: My Custom Telegram Plugin
-Author: My name
-Version: 1
-*/
-
-add_action('telegram_parse_photo','telegramcustom_parse_photo', 10, 2);
-
-function telegramcustom_parse_photo ( $telegram_user_id, $photo  ) {
-
- $plugin_post_id = telegram_getid( $telegram_user_id );
-
- if ( !$plugin_post_id ) {
-  return;
- }
-
- /*
-  Here is the dynamic processing and how to reply.
-  You can:
-   - use if, switch and everything that works in php
-   - check if $text is made of multiple words (create an array from $text)
-   - customize and code other actions (ex. create WordPress post is $telegram_user_id is your id)
- */
- 
- /*
-   $photo[2]['file_id'] is only one of available sizes. You should make sure that this size exist, or check for another size.
-   $photo[1]['file_id'] has lower resolution
- */
- $url = telegram_download_file( $telegram_user_id, $photo[2]['file_id'] ); //Fetch and save photo to your server
- 
- if ( $url ) { //$url is the local url because photo is already saved
-
-  //You can save the entry in your db
-  global $wpdb;
-  $arr = array( 'telegram_id' => $telegram_user_id, 'plugin_post_id' => $plugin_post_id, 'url' => $url );
-  
-  $wpdb->insert(
-   $wpdb->prefix . 'your_table_name_that_must_already_exist', $arr, array( '%s' )
-  );
-
-  //Or save it as custom field and use it for a Finite State Machine
-  update_post_meta( $plugin_post_id, 'telegram_custom_last_photo_received', $url );
-
-  telegram_sendmessage( $telegram_user_id, 'Photo received. Thank you!');
-}
-
-?>`
-
-Another example, that is a "emergency bot" created for the mid-italy earthquake (24 august 2016) is available on [GitHub](https://github.com/milesimarco/terremotocentroitalia-bot-telegram/)
+
+= How do I create a Telegram bot? =
+Visit [Telegram’s BotFather](https://core.telegram.org/bots#botfather) and follow the instructions to create a new bot and get your token.
+
+= How do users subscribe? =
+Users can start your bot or join your channel/group where the bot is an admin.
+
+= How do I enable Zapier integration? =
+Enable Zapier in the plugin settings and follow the invite link for setup instructions.
+
+= Is SSL required? =
+Yes, Telegram WebHooks require SSL. Your site must use HTTPS for the plugin to work.
+
+= Can I extend the plugin? =
+Yes! Use WordPress hooks and filters to add custom commands, keyboards, and integrations. See the FAQ and code comments for examples.
 
 == Screenshots ==
-1. Plugin dashboard
+1. Modern dashboard with stats and recent activity
 2. Subscribers list
-3. Commands list
-4. Autoresponders
-5. Zapier integration
-6. plugin options
-7. Dynamic repliles and inline buttons example from [IcBrendola_bot](http://telegram.me/IcBrendola_bot)
-8. Keyboard example from [CosenzApp_bot](http://telegram.me/CosenzApp_bot)
-9. Post broadcasting (all post types)
-10. Native Gutenberg support
+3. Commands and autoresponders
+4. Zapier integration
+5. Plugin settings with tabs
+6. Dynamic replies and inline buttons
+7. Keyboard example
+8. Post broadcasting
+9. Native Gutenberg support
 
 == Changelog ==
 
-= 3.8 2024-07-01 =
-
-* [IMPROVE] Redesigned settings page with old settings cleanup
-* [IMPROVE] Better Zapier handling
-* [IMPROVE] Minor changes, code cleanup, security hardening and optimizations
-
-= 3.7 20231020 =
-* [NEW] Added ability to selectively send message to subscribed groups
-* [BUGFIX] Fixed critical bug when sending to groups
-* [BUGFIX] Minor changes and optimizations
-* [NEW] Github deploy flow setup - https://github.com/WPGov/telegram-bot
+= 4.0 20250526 =
+* [SECURITY] Added CSRF protection (WordPress nonces) to all sensitive actions (log clear, send message, etc.)
+* [SECURITY] Hardened webhook and Zapier endpoints, removed BotPress.org fallback (now only Telegram WebHooks are supported)
+* [SECURITY] Improved admin access checks and output escaping throughout the plugin
+* [IMPROVE] Redesigned all admin pages for a modern, user-friendly experience (dashboard, log, send message, settings)
+* [IMPROVE] Settings page now uses tabs for easier navigation and clarity
+* [IMPROVE] Removed all BotPress.org logic and references (service discontinued, SSL is now required)
+* [IMPROVE] Inlined and refactored plugin defaults (removed defaults.php)
+* [IMPROVE] Refactored admin notices for maintainability
+* [IMPROVE] Enhanced log panel with better design and empty state
+* [IMPROVE] Enhanced dashboard with stats, recent activity, and quick actions
+* [IMPROVE] Improved send message panel with modern UI
+* [IMPROVE] Cleaned up and secured Zapier integration
+* [IMPROVE] General code cleanup, improved maintainability and best practices
+* [IMPROVE] Updated documentation and removed outdated references
+* [DEPRECATED] Removed all support for BotPress.org and non-SSL fallback
+* [NOTE] This is a major update. Please review your settings and test your integration after updating.
 
 = 3.6.3 20230527 =

telegram-bot/tags/4.0/telegram-bot.php

@@ -4 +4 @@
 Plugin URI:  https://wordpress.org/plugins/telegram-bot/
 Description: Broadcast your content to Telegram, build interactive bots and boost your omnichannel customer experience
-Version: 3.8.2
+Version: 3.6.3
 Author: Marco Milesi
 Author URI: https://www.marcomilesi.com
@@ -15 +15 @@
 require 'admin-messages.php';
 require 'panel/send.php';
-require 'panel/settings.php';
 
 add_action( 'plugins_loaded', function(){
@@ -27 +26 @@
     add_submenu_page('telegram_main', __('Send a message', 'telegram-bot'), __('Send a message', 'telegram-bot'), 'manage_options', 'telegram_send', 'telegram_send_panel' );
     add_submenu_page('telegram_main', __('Responders', 'telegram-bot'), __('Responders', 'telegram-bot'), 'manage_options', 'edit.php?post_type=telegram_commands');
-    add_submenu_page('telegram_main', __('Settings', 'telegram-bot'), __('Settings', 'telegram-bot'), 'manage_options', 'telegram_settings', function(){ telegram_settings_page(); });
+    add_submenu_page('telegram_main', __('Settings', 'telegram-bot'), __('Settings', 'telegram-bot'), 'manage_options', 'telegram_settings', function(){require 'panel/settings.php';});
     add_submenu_page('telegram_main', 'Log', 'Log', 'manage_options', 'telegram_log', 'telegram_log_panel');
 });
 
 function telegram_log_panel() {
-    if (isset($_GET['tbclear'])) {
-        delete_option('wp_telegram_log');
-    }
+    if (isset($_GET['tbclear'])) {
+        if (!isset($_GET['_wpnonce']) || !wp_verify_nonce($_GET['_wpnonce'], 'telegram_log_clear')) {
+            wp_die(__('Security check failed.','telegram-bot'));
+        }
+        delete_option('wp_telegram_log');
+    }
     $log = get_option('wp_telegram_log');
-    
-    echo '<div class="wrap"><h2>Activity log <a href="admin.php?page=telegram_log" class="add-new-h2">'.__('Reload', 'telegram-bot').'</a><a href="admin.php?page=telegram_log&tbclear=1" class="add-new-h2">'.__('Clear', 'telegram-bot').'</a></h2>
-    <table class="widefat fixed" cellspacing="0">
-    <thead>
-    <tr>
-    <th style="width: 5%;" class="manage-column" scope="col">'.__('Type', 'telegram-bot').'</th>
-    <th style="width: 10%;" class="manage-column" scope="col">'.__('Date', 'telegram-bot').'</th>
-    <th style="width: 10%;" class="manage-column" scope="col">'.__('Author', 'telegram-bot').'</th>
-    <th id="columnname" class="manage-column" scope="col">'.__('Description', 'telegram-bot').'</th>
-    </tr>
-    </thead>
-    <tbody>';
-    if ( is_array( $log ) ) {
+    echo '<div class="wrap telegram-log-panel">';
+    echo '<h1 style="margin-bottom:24px;">'.__('Activity Log', 'telegram-bot').'</h1>';
+    echo '<div style="margin-bottom:20px;">';
+    echo '<a href="admin.php?page=telegram_log" class="button button-secondary" style="margin-right:10px;">'.__('Reload', 'telegram-bot').'</a>';
+    echo '<a href="'.wp_nonce_url('admin.php?page=telegram_log&tbclear=1', 'telegram_log_clear').'" class="button button-danger" style="color:#fff;background:#d63638;border-color:#d63638;">'.__('Clear Log', 'telegram-bot').'</a>';
+    echo '</div>';
+    echo '<div style="overflow-x:auto;">';
+    echo '<table class="widefat fixed striped" cellspacing="0" style="min-width:700px;">';
+    echo '<thead><tr>';
+    echo '<th style="width: 7%;">'.__('Type', 'telegram-bot').'</th>';
+    echo '<th style="width: 15%;">'.__('Date', 'telegram-bot').'</th>';
+    echo '<th style="width: 15%;">'.__('Author', 'telegram-bot').'</th>';
+    echo '<th>'.__('Description', 'telegram-bot').'</th>';
+    echo '</tr></thead><tbody>';
+    if ( is_array( $log ) && count($log) ) {
         foreach ( $log as $line ) {
             echo '<tr>';
-            echo '<td>' . ( isset( $line[0] ) ? $line[0] : '' ) . '</td>';
-            echo '<td>' . ( isset( $line[1] ) ? $line[1] : '' ) . '</td>';
-            echo '<td>' . ( isset( $line[2] ) ? $line[2] : '' ) . '</td>';
-            echo '<td>' . ( isset( $line[3] ) ? $line[3] : '' ) . '</td>';
+            echo '<td><span style="font-weight:bold;color:#2271b1;">' . ( isset( $line[0] ) ? esc_html($line[0]) : '' ) . '</span></td>';
+            echo '<td>' . ( isset( $line[1] ) ? esc_html($line[1]) : '' ) . '</td>';
+            echo '<td>' . ( isset( $line[2] ) ? esc_html($line[2]) : '' ) . '</td>';
+            echo '<td>' . ( isset( $line[3] ) ? esc_html($line[3]) : '' ) . '</td>';
             echo '</tr>';
         }
-    }
-   
-    echo '</tbody>
-    </table></div>';
+    } else {
+        echo '<tr><td colspan="4" style="text-align:center;color:#888;">'.__('No log entries found.', 'telegram-bot').'</td></tr>';
+    }
+    echo '</tbody></table></div>';
+    echo '<style>.telegram-log-panel .button-danger:hover{background:#a00!important;border-color:#a00!important;}</style>';
+    echo '</div>';
 }
 
@@ -89 +95 @@
 
 function telegram_defaults() {
+    // Set API key if not set
     if (!get_option('wp_telegram_apikey')) {
         update_option('wp_telegram_apikey', md5(microtime() . rand() . get_site_url()));
     }
-  
+    // Set dispatches if not set
     if (!get_option('wp_telegram_dispatches')) {
         update_option('wp_telegram_dispatches', 0);
     }
-  
-    $defaults   = array(
-        array('token', ''),
-        array('zapier', ''),
-        array('wmgroup', 'Welcome!'),
-        array('wmuser', 'Welcome, %FIRST_NAME%!'),
-        array('posttemplate', '%TITLE%'.PHP_EOL.PHP_EOL.'%LINK%'),
-        array('bmuser', 'Bye, %FIRST_NAME%. Type /start to enable the bot again.'),
-        array('keyboard', '')
+    // Set main plugin options
+    $defaults = array(
+        'token'         => '',
+        'zapier'        => '',
+        'wmgroup'       => 'Welcome!',
+        'wmuser'        => 'Welcome, %FIRST_NAME%!',
+        'posttemplate'  => '%TITLE%' . PHP_EOL . PHP_EOL . '%LINK%',
+        'bmuser'        => 'Bye, %FIRST_NAME%. Type /start to enable the bot again.',
+        'keyboard'      => ''
     );
-  
     $my_options = get_option('wp_telegram');
-  
-    $conta = count($defaults);
-  
-    for ($i = 0; $i < $conta; $i++) {
-        if (!isset( $my_options[$defaults[$i][0]] ) || !$my_options[$defaults[$i][0]]) {
-            $my_options[$defaults[$i][0]] = $defaults[$i][1];
-            update_option('wp_telegram', $my_options);
-        }
+    if (!is_array($my_options)) {
+        $my_options = array();
+    }
+    $changed = false;
+    foreach ($defaults as $key => $value) {
+        if (!isset($my_options[$key])) {
+            $my_options[$key] = $value;
+            $changed = true;
+        }
+    }
+    if ($changed) {
+        update_option('wp_telegram', $my_options);
     }
 }
@@ -127 +137 @@
         if ($_GET['zap'] == get_option('wp_telegram_apikey') && telegram_option('zapier')) {
             status_header( 200 );
-            
             $json = file_get_contents('php://input');
             if (!$json) {
@@ -135 +144 @@
             telegram_log('------>', 'ZAPIER', json_encode((array) file_get_contents("php://input")));
             telegram_sendmessagetoall($data['hook']);
-
         }
     }
@@ -198 +206 @@
         if ($o) {
             $text = str_replace('%FIRST_NAME%', get_post_meta($o->ID, 'telegram_name', true), $text);
+            $text = str_replace('%LAST_NAME%', get_post_meta($o->ID, '', true), $text);
         }
     }

telegram-bot/trunk/admin-messages.php

@@ -1 +1 @@
 <?php
-    add_action( 'admin_notices', function() {
-
-        global $current_screen;
-        if ( 'telegram_subscribers' == $current_screen->post_type  ) {
-            echo '
-            <div class="notice notice-info">
-                <p>List of bot subscribers. New users will automatically appear once they /start on the bot</p>
-            </div>';
-        } else if ( 'telegram_groups' == $current_screen->post_type  ) {
-            echo '
-            <div class="notice notice-info">
-                <p>List of groups where your bot has been added.<br>
-                <small>Some <strong>BotFather</strong> actions could be required to get this working.</small></p>
-            </div>';
-        } else if ( 'telegram_commands' == $current_screen->post_type  ) {
-            echo '
-            <div class="notice notice-info">
-                <p>List of active commands of your bot<br>
-                <small>You can use the <strong>/command</strong> format as well as <strong>command</strong> (they are different).
-                <br>You can define multiple commands by typing, without spaces, a succession of comma-separated values (example: <strong>/command,command,/command2</strong>)</small></p>
-            </div>';
-        } else if ( 'telegram_lists' == $current_screen->taxonomy ) {
-            echo '
-            <div class="notice notice-info">
-                <p>You can create different distribution lists in this page. This can be used for people and groups as well.</p>
-            </div>';
+    add_action('admin_notices', function() {
+        if (!function_exists('get_current_screen')) {
+            return;
+        }
+        $screen = get_current_screen();
+        if (!$screen) {
+            return;
+        }
+        $notices = [
+            'telegram_subscribers' => [
+                'type' => 'info',
+                'message' => __('List of users who have subscribed to your bot.', 'telegram-bot'),
+            ],
+            'telegram_groups' => [
+                'type' => 'info',
+                'message' => __('List of groups where your bot has been added.<br><small>Some <strong>BotFather</strong> actions could be required to get this working.</small>', 'telegram-bot'),
+            ],
+            'telegram_commands' => [
+                'type' => 'info',
+                'message' => __('List of active commands of your bot<br><small>You can use the <strong>/command</strong> format as well as <strong>command</strong> (they are different).<br>You can define multiple commands by typing, without spaces, a succession of comma-separated values (example: <strong>/command,command,/command2</strong>)</small>', 'telegram-bot'),
+            ],
+        ];
+        if (isset($screen->post_type) && isset($notices[$screen->post_type])) {
+            $notice = $notices[$screen->post_type];
+            printf(
+                '<div class="notice notice-%s"><p>%s</p></div>',
+                esc_attr($notice['type']),
+                $notice['message']
+            );
+        } elseif (isset($screen->taxonomy) && $screen->taxonomy === 'telegram_lists') {
+            printf(
+                '<div class="notice notice-info"><p>%s</p></div>',
+                __('You can create different distribution lists on this page. This can be used for people and groups as well.', 'telegram-bot')
+            );
         }
     });

telegram-bot/trunk/columns.php

@@ -16 +16 @@
         $columns['name'] ='Group Name';
         $columns['sdate'] ='Subscribed on';
+        unset($columns['cb']);
         unset($columns['date']);
         if ( defined('WP_DEBUG') && false === WP_DEBUG) {
@@ -23 +24 @@
     } );
 
-    function bulk_actions_telegram_send($bulk_actions) {
+    add_filter('bulk_actions-edit-telegram_subscribers', function($bulk_actions) {
         $bulk_actions['telegram-send'] = __('Send message', 'telegram-bot');
         return $bulk_actions;
-    }
-    add_filter('bulk_actions-edit-telegram_subscribers', 'bulk_actions_telegram_send' );
-    add_filter('bulk_actions-edit-telegram_groups', 'bulk_actions_telegram_send' );
+    });
 
-    function handle_bulk_actions_telegram_send($redirect_url, $action, $post_ids) {
+    add_filter('handle_bulk_actions-edit-telegram_subscribers', function($redirect_url, $action, $post_ids) {
         if ($action == 'telegram-send') {
             
@@ -37 +36 @@
         }
         return $redirect_url;
-    }
-    add_filter('handle_bulk_actions-edit-telegram_subscribers', 'handle_bulk_actions_telegram_send', 10, 3);
-    add_filter('handle_bulk_actions-edit-telegram_groups', 'handle_bulk_actions_telegram_send', 10, 3);
+    }, 10, 3);
+
+    #add_filter('bulk_actions-edit-telegram_subscribers', function($actions){ unset( $actions['edit'] ); return apply_filters( 'bulk_actions-edit-telegram_subscribers_filter', $actions ); });
+    #add_filter('bulk_actions-edit-telegram_groups', function($actions){ unset( $actions['edit'] ); return apply_filters( 'bulk_actions-edit-telegram_groups_filter', $actions ); });
 
     add_action('manage_telegram_subscribers_posts_custom_column', 't_manage_columns', 10, 2);
@@ -47 +47 @@
         switch ($column) {
             case 'name':
-                echo '<a class="row-title" href="'.get_edit_post_link( $post_id ).'">'.get_post_meta($post_id, 'telegram_name', true).'</a>';
+                printf(get_post_meta($post_id, 'telegram_name', true));
                 break;
             case 'user_name':

telegram-bot/trunk/custom-post-types.php

@@ -90 +90 @@
     );
     if ( defined('WP_DEBUG') && false === WP_DEBUG) {
-        $args['capabilities'] = array( 'create_posts' => 'false' );
-        $args['map_meta_cap'] = true;
+        $args['capabilities'] = array( 'create_posts' => 'do_not_allow' );
+        $args['map_meta_cap'] = false;
     }
     $args = apply_filters('telegram_groups_register_capabilities', $args ); 

telegram-bot/trunk/panel/main.php

@@ +1 @@
+<?php
+// Security: Only allow admins to view this page
+if (!current_user_can('manage_options')) {
+    wp_die(__('You do not have sufficient permissions to access this page.'));
+}
 
-<div class="wrap">
-    <div class="wrap about__container">
+// Fetch stats
+$version = esc_html(get_option('wp_telegram_version'));
+$dispatches = number_format_i18n(intval(get_option('wp_telegram_dispatches')));
+$subscribers = number_format_i18n(wp_count_posts('telegram_subscribers')->publish);
+$groups = number_format_i18n(wp_count_posts('telegram_groups')->publish);
 
-        <div class="about__section is-feature has-accent-background-color">
-            <h1>Telegram Bot & Channel</h1>
-            <p>Version <?php echo get_option('wp_telegram_version'); ?></p>
+// Fetch recent log entries (last 5)
+$log = get_option('wp_telegram_log');
+$recent_log = is_array($log) ? array_slice($log, 0, 5) : array();
+
+// Fetch plugin settings link
+$settings_url = admin_url('admin.php?page=telegram_settings');
+
+// Fetch log page link
+$log_url = admin_url('admin.php?page=telegram_log');
+
+?>
+<div class="wrap telegram-dashboard" style="max-width:900px;margin:auto;">
+    <div class="telegram-header" style="display:flex;align-items:center;justify-content:space-between;padding:32px 0 16px 0;">
+        <div>
+            <h1 style="margin:0;font-size:2.5em;">🤖 Telegram Bot & Channel</h1>
+            <span style="color:#888;font-size:1.1em;">v<?php echo $version; ?></span>
         </div>
-        <div class=" wp-clearfix"></div>
-    
-        <div class="about__section has-3-columns" style="text-align:center;">
-            <div class="column has-subtle-background-color">
-                <span style="font-size:3em;"><?php echo get_option('wp_telegram_dispatches'); ?></span>
-                <br>
-                messages sent
-            </div>
-            <div class="column has-subtle-background-color">
-                <span style="font-size:3em;"><?php echo wp_count_posts('telegram_subscribers')->publish; ?></span>
-                <br>
-                subscribers
-            </div>
-            <div class="column has-subtle-background-color">
-                <span style="font-size:3em;"><?php echo wp_count_posts('telegram_groups')->publish; ?></span>
-                <br>
-                groups
-            </div>
+        <div>
+            <a href="<?php echo esc_url($settings_url); ?>" class="button button-primary" style="font-size:1.1em;">⚙️ <?php _e('Settings', 'telegram-bot'); ?></a>
         </div>
     </div>
+    <div class="telegram-stats" style="display:flex;gap:32px;justify-content:space-between;margin:32px 0;">
+        <div class="telegram-stat-card" style="flex:1;background:#f6f8fa;padding:32px 0;border-radius:12px;text-align:center;box-shadow:0 2px 8px #0001;">
+            <div style="font-size:2.5em;color:#2271b1;font-weight:bold;"><?php echo $dispatches; ?></div>
+            <div style="color:#666;margin-top:8px;">Messages Sent</div>
+        </div>
+        <div class="telegram-stat-card" style="flex:1;background:#f6f8fa;padding:32px 0;border-radius:12px;text-align:center;box-shadow:0 2px 8px #0001;">
+            <div style="font-size:2.5em;color:#46b450;font-weight:bold;"><?php echo $subscribers; ?></div>
+            <div style="color:#666;margin-top:8px;">Subscribers</div>
+        </div>
+        <div class="telegram-stat-card" style="flex:1;background:#f6f8fa;padding:32px 0;border-radius:12px;text-align:center;box-shadow:0 2px 8px #0001;">
+            <div style="font-size:2.5em;color:#d63638;font-weight:bold;"><?php echo $groups; ?></div>
+            <div style="color:#666;margin-top:8px;">Groups</div>
+        </div>
+    </div>
+    <div class="telegram-actions" style="display:flex;gap:16px;justify-content:flex-end;margin-bottom:24px;">
+        <a href="<?php echo esc_url($log_url); ?>" class="button button-secondary">📝 <?php _e('View Log', 'telegram-bot'); ?></a>
+        <a href="<?php echo esc_url(admin_url('admin.php?page=telegram_send')); ?>" class="button button-primary">✉️ <?php _e('Send Message', 'telegram-bot'); ?></a>
+    </div>
+    <div class="telegram-recent-log" style="background:#fff;border-radius:10px;box-shadow:0 1px 4px #0001;padding:24px;">
+        <h2 style="margin-top:0;font-size:1.3em;"><?php _e('Recent Activity', 'telegram-bot'); ?></h2>
+        <?php if (!empty($recent_log)) : ?>
+            <table class="widefat striped" style="margin-top:12px;">
+                <thead>
+                    <tr>
+                        <th><?php _e('Type', 'telegram-bot'); ?></th>
+                        <th><?php _e('Date', 'telegram-bot'); ?></th>
+                        <th><?php _e('Author', 'telegram-bot'); ?></th>
+                        <th><?php _e('Description', 'telegram-bot'); ?></th>
+                    </tr>
+                </thead>
+                <tbody>
+                    <?php foreach ($recent_log as $line) : ?>
+                        <tr>
+                            <td><span style="font-weight:bold;color:#2271b1;"><?php echo isset($line[0]) ? esc_html($line[0]) : ''; ?></span></td>
+                            <td><?php echo isset($line[1]) ? esc_html($line[1]) : ''; ?></td>
+                            <td><?php echo isset($line[2]) ? esc_html($line[2]) : ''; ?></td>
+                            <td><?php echo isset($line[3]) ? esc_html($line[3]) : ''; ?></td>
+                        </tr>
+                    <?php endforeach; ?>
+                </tbody>
+            </table>
+        <?php else : ?>
+            <div style="color:#888;text-align:center;padding:24px 0;">No recent activity found.</div>
+        <?php endif; ?>
+    </div>
+    <div class="telegram-quick-actions" style="margin-top:32px;display:flex;gap:24px;">
+        <div style="flex:1;background:#f6f8fa;padding:20px 24px;border-radius:10px;">
+            <h3 style="margin-top:0;">Subscriber Search</h3>
+            <form method="get" action="<?php echo esc_url(admin_url('edit.php')); ?>">
+                <input type="hidden" name="post_type" value="telegram_subscribers" />
+                <input type="search" name="s" style="width:100%;margin-bottom:8px;" placeholder="Search subscribers by name or ID..." />
+                <button type="submit" class="button">Search</button>
+            </form>
+        </div>
+    </div>
+    <style>
+        .telegram-dashboard h1, .telegram-dashboard h2, .telegram-dashboard h3 { font-family: 'Segoe UI', 'Arial', sans-serif; }
+        .telegram-dashboard .button-primary { background:#2271b1;border-color:#2271b1; }
+        .telegram-dashboard .button-primary:hover { background:#1a5a8a;border-color:#1a5a8a; }
+        .telegram-dashboard .button-danger { background:#d63638;border-color:#d63638;color:#fff; }
+        .telegram-dashboard .button-danger:hover { background:#a00;border-color:#a00; }
+    </style>
 </div>

telegram-bot/trunk/panel/send.php

@@ -4 +4 @@
         $count = 0;
         $send_to_custom_ids = false;
-        echo '<div class="wrap"><h2>'.__('Send a message', 'telegram-bot').'</h2>';
+        echo '<div class="wrap telegram-send-panel" style="max-width:700px;margin:auto;">';
+        echo '<h1 style="margin-bottom:24px;">' . __('Send a Message', 'telegram-bot') . '</h1>';
         if (isset($_POST["telegram_new_message"])) {
+            if (!isset($_POST['_wpnonce']) || !wp_verify_nonce($_POST['_wpnonce'], 'telegram_send_message')) {
+                wp_die(__('Security check failed.','telegram-bot'));
+            }
             $message = $_POST["telegram_new_message"];
             
@@ -34 +38 @@
             }
             
-            echo '<div class="notice notice-success">
-            <p>Your message have been sent!</p>
-            </div>';
+            echo '<div class="notice notice-success" style="margin-bottom:24px;"><p>' . __('Your message has been sent!', 'telegram-bot') . '</p></div>';
         }
-        echo '<form method="post" id="telegram_new_message">';
+        echo '<form method="post" id="telegram_new_message" style="background:#fff;padding:32px 32px 24px 32px;border-radius:10px;box-shadow:0 2px 8px #0001;">';
+        wp_nonce_field('telegram_send_message');
         if ( isset( $_GET['telegram_post_ids'] ) ) {
             $telegram_post_ids = explode( ',', $_GET['telegram_post_ids']);
-            echo '<div class="notice notice-warning"><p>Note: You are sending this message to <b>'.count( $telegram_post_ids ).' subscribers</b></p></div>';
+            echo '<div class="notice notice-warning" style="margin-bottom:16px;"><p>' . __('Note: You are sending this message to', 'telegram-bot') . ' <b>' . count( $telegram_post_ids ) . ' ' . __('subscribers', 'telegram-bot') . '</b></p></div>';
             $send_to_custom_ids = true;
         }
-        echo '<textarea name="telegram_new_message" cols="100" rows="10"></textarea><br>';
+        echo '<label for="telegram_new_message" style="font-weight:bold;font-size:1.1em;">' . __('Message', 'telegram-bot') . '</label><br>';
+        echo '<textarea name="telegram_new_message" id="telegram_new_message" cols="80" rows="7" style="width:100%;margin-bottom:18px;font-size:1.1em;"></textarea><br>';
         $target = $send_to_custom_ids ? 'custom_ids' : telegram_option('target');
         
         if ( !$send_to_custom_ids ) {
-            echo __('Send to', 'telegram-bot').':';
-            ?>
-        <select name="telegram_target">
-            <option value="0"><?php _e('Users, Groups, Channel', 'telegram-bot'); ?></option>
-            <option value="1"<?php if ($target==1 ) { echo ' selected="selected"'; } ?>><?php _e('Users', 'telegram-bot'); ?></option>
-            <option value="2"<?php if ($target==2 ) { echo ' selected="selected"'; } ?>><?php _e('Groups', 'telegram-bot'); ?></option>
-            <option value="3"<?php if ($target==3 ) { echo ' selected="selected"'; } ?>><?php _e('Users, Groups', 'telegram-bot'); ?></option>
-            <option value="4"<?php if ($target==4 ) { echo ' selected="selected"'; } ?>><?php _e('Channel', 'telegram-bot'); ?></option>
-        </select>
-        <?php }
-
-        submit_button( __('Send Now', 'telegram-bot'), 'primary');
+            echo '<label for="telegram_target" style="font-weight:bold;">' . __('Send to', 'telegram-bot') . ':</label> ';
+            echo '<select name="telegram_target" id="telegram_target" style="margin-bottom:18px;">';
+            echo '<option value="0"' . ($target == 0 ? ' selected' : '') . '>' . __('Users, Groups, Channel', 'telegram-bot') . '</option>';
+            echo '<option value="1"' . ($target == 1 ? ' selected' : '') . '>' . __('Users', 'telegram-bot') . '</option>';
+            echo '<option value="2"' . ($target == 2 ? ' selected' : '') . '>' . __('Groups', 'telegram-bot') . '</option>';
+            echo '<option value="3"' . ($target == 3 ? ' selected' : '') . '>' . __('Users, Groups', 'telegram-bot') . '</option>';
+            echo '<option value="4"' . ($target == 4 ? ' selected' : '') . '>' . __('Channel', 'telegram-bot') . '</option>';
+            echo '</select><br>';
+        }
+        echo '<button type="submit" class="button button-primary" style="font-size:1.1em;padding:8px 32px;">' . __('Send Now', 'telegram-bot') . '</button>';
         echo '</form>';
-
+        echo '<style>.telegram-send-panel textarea { font-family: inherit; } .telegram-send-panel .notice-success { border-left: 4px solid #46b450; } .telegram-send-panel .notice-warning { border-left: 4px solid #ffb900; }</style>';
         echo '</div>';
     }

telegram-bot/trunk/panel/settings.php

@@ -1 @@
-<?php function telegram_settings_page() { ?>
+<?php
+// Security: Only allow admins to view this page
+if (!current_user_can('manage_options')) {
+    wp_die(__('You do not have sufficient permissions to access this page.'));
+}
 
-<div class="wrap">
-  <h2>Settings</h2>
+$options = get_option('wp_telegram');
+foreach ($options as $k => $v) {
+    $options[$k] = esc_attr($v);
+}
 
-<?php if ( $_SERVER["SERVER_ADDR"] == '127.0.0.1' ) {
-  echo '<div class="notice notice-warning"><p>'.__('Warning: the plugin <b>does not</b> work in localhost environments!', 'telegram-bot').'</p></div>';
-} ?>
-
-<form method="post" action="options.php">
-  <?php
-    settings_fields( 'wp_telegram_options');
-    $options=get_option( 'wp_telegram');
-    foreach( $options as $k => $v ) {
-      $options[$k] = esc_attr( $v );
-    }
-
-    if ( isset($_GET['settings-updated']) ) {
-
-        $url=telegram_geturl() . 'setWebhook?url=' . telegram_getapiurl();
-        
-        json_decode(file_get_contents($url), true);
-        telegram_log( 'sys', 'Webhook update', $url);
-    }
-  ?>
-
-    <table class="form-table">
-      <tr valign="top">
-        <th scope="row">
-          <label for="apikey">Plugin Api Key
-          </label>
-        </th>
-        <td>
-          <input readonly="readonly" id="apikey" type="text" name="wp_telegram_apikey" value="<?php echo get_option('wp_telegram_apikey'); ?>" size="55" />
-          <br>
-          <small>The unique key for your website: <b>Keep it secret!</b></small>
-        </td>
-      </tr>
-      <tr valign="top">
-        <th scope="row">
-          <label for="token">Bot Token<br><span style="background:darkred;font-size:0.8em;padding:2px;color:white;"><?php _e('Required', 'telegram-bot'); ?></span></label>
-        </th>
-        <td>
-          <input id="token" type="text" name="wp_telegram[token]" value="<?php echo $options['token']; ?>" size="55" />
-          <br>
-          <small><?php _e( 'Paste here your bot token. You can obtain it from Telegram <b>BotFather</b>', 'telegram-bot'); ?></small>
-        </td>
-      </tr
-      <tr valign="top">
-        <th scope="row">
-          <label for="username">Bot Username<br><span style="background:darkred;font-size:0.8em;padding:2px;color:white;"><?php _e('Required', 'telegram-bot'); ?></span></label>
-        </th>
-        <td>
-          <input id="username" type="text" name="wp_telegram[username]" value="<?php echo isset( $options['username'] ) ? $options['username'] : ''; ?>" size="55" />
-          <br>
-          <small>Telegram Bot username. Example: <b>mywebsite_bot</b></small>
-        </td>
-      </tr>
-      <tr valign="top">
-        <th scope="row">
-          <label for="channelusername">
-            <?php _e('Channel Username', 'telegram-bot'); ?>
-          </label>
-        </th>
-        <td>
-          <input id="channelusername" type="text" name="wp_telegram[channelusername]" value="<?php echo isset( $options['channelusername'] ) ? $options['channelusername'] : ''; ?>" size="55" />
-          <br>
-          <small>Insert your channel username (if you want to broadcast). Example: <b>@mywebsite</b>
-            <br>The bot must be admin in your channel
-          </small>
-        </td>
-      </tr>
-  <tr valign="top">
-    <th scope="row">
-      <label>
-        Webhook
-      </label>
-    </th>
-    <td>
-        <a class="page-title-action" onclick="alert('<?php echo telegram_getapiurl(); ?>');">Show private endpoint</a>
-        <p style="font-size:0.9em;">
-          This is your private Telegram webhook. Please keep it private and make sure it bypasses cache and firewall.
+// Handle webhook update after settings are saved
+if (isset($_GET['settings-updated'])) {
+    $url = telegram_geturl() . 'setWebhook?url=' . telegram_getapiurl();
+    json_decode(@file_get_contents($url), true);
+    telegram_log('sys', 'Webhook update', $url);
+}
+?>
+<div class="wrap telegram-settings" style="max-width:900px;margin:auto;">
+    <h1 style="margin-bottom:24px;"><?php _e('Telegram Bot Settings', 'telegram-bot'); ?></h1>
+    <p style="font-size:1.1em;">
+        <?php _e('This plugin is capable of broadcasting to channel and creating interactive bots.', 'telegram-bot'); ?><br>
+        <?php _e('You need to create a bot with BotFather and obtain the token.', 'telegram-bot'); ?><br>
+        <?php _e('To broadcast to a channel, add the bot as admin in your channel.', 'telegram-bot'); ?>
+    </p>
+    <?php if ($_SERVER["SERVER_ADDR"] == '127.0.0.1') {
+        echo '<div class="notice notice-warning"><p>' . __('Warning: the plugin <b>does not</b> work in localhost environments!', 'telegram-bot') . '</p></div>';
+    } ?>
+    <form method="post" action="options.php">
+        <?php settings_fields('wp_telegram_options'); ?>
+        <div id="telegram-tabs" style="margin-top:32px;">
+            <nav class="nav-tab-wrapper">
+                <a href="#tab-general" class="nav-tab nav-tab-active">General</a>
+                <a href="#tab-broadcast" class="nav-tab">Broadcast</a>
+                <a href="#tab-bot" class="nav-tab">Bot</a>
+            </nav>
+            <div id="tab-general" class="telegram-tab-content" style="display:block;">
+                <table class="form-table">
+                    <tr valign="top">
+                        <th scope="row"><label for="apikey">Plugin Api Key</label></th>
+                        <td>
+                            <input readonly="readonly" id="apikey" type="text" name="wp_telegram_apikey" value="<?php echo get_option('wp_telegram_apikey'); ?>" size="55" />
+                            <br><small><?php _e('The unique key for your website: <b>Keep it secret!</b>', 'telegram-bot'); ?></small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="token">Bot Token</label></th>
+                        <td>
+                            <input id="token" type="text" name="wp_telegram[token]" value="<?php echo $options['token']; ?>" size="55" autocomplete="off" />
+                            <br><small><?php _e('Telegram Bot authentication key. <b>Keep it secret!</b>', 'telegram-bot'); ?></small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="username">Bot Username</label></th>
+                        <td>
+                            <input id="username" type="text" name="wp_telegram[username]" value="<?php echo isset($options['username']) ? $options['username'] : ''; ?>" size="55" />
+                            <br><small><?php _e('Telegram Bot username. Example: <b>mywebsite_bot</b>', 'telegram-bot'); ?></small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="channelusername"><?php _e('Channel Username', 'telegram-bot'); ?></label></th>
+                        <td>
+                            <input id="channelusername" type="text" name="wp_telegram[channelusername]" value="<?php echo isset($options['channelusername']) ? $options['channelusername'] : ''; ?>" size="55" />
+                            <br><small><?php _e('Insert your channel username (if you want to broadcast). Example: <b>@mywebsite</b><br>The bot must be admin in your channel', 'telegram-bot'); ?></small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="mode"><?php _e('Connection Mode', 'telegram-bot'); ?></label></th>
+                        <td>
+                            <select name="wp_telegram[mode]" disabled>
+                                <option value="0" selected><?php _e('Telegram WebHooks (required)', 'telegram-bot'); ?></option>
+                            </select>
+                            <br><small><?php _e('Telegram WebHooks are now required. SSL is mandatory for webhook delivery.', 'telegram-bot'); ?></small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label>Webhook</label></th>
+                        <td>
+                            <a class="page-title-action" onclick="alert('<?php echo telegram_getapiurl(); ?>');">Show private endpoint</a>
+                            <p style="font-size:0.9em;">
+                                <?php _e('This is your private Telegram webhook. Please keep it private and make sure it bypasses cache and firewall.', 'telegram-bot'); ?>
+                            </p>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="zapier"><?php _e('Enable Zapier', 'telegram-bot'); ?></label></th>
+                        <td>
+                            <input id="zapier" name="wp_telegram[zapier]" type="checkbox" value="1" <?php checked('1', (isset($options['zapier']) && $options['zapier']) ? 1 : 0); ?> />
+                            <br><small><?php _e('Enable Zapier integration • Beta •', 'telegram-bot'); ?>
+                                <a href="https://zapier.com/developer/invite/26805/1ec54299d4307c0b86b7417d0866ff25/" target="_blank">Click here to get an invite</a>
+                            </small>
+                        </td>
+                    </tr>
+                </table>
+            </div>
+            <div id="tab-broadcast" class="telegram-tab-content" style="display:none;">
+                <table class="form-table">
+                    <tr valign="top">
+                        <td colspan="2">
+                            <h3><?php _e('Posts broadcast', 'telegram-bot'); ?></h3>
+                            <p><?php _e('You can send post or custom post to Telegram when you publish or edit it.', 'telegram-bot'); ?></p>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="target"><?php _e('Default content broadcast', 'telegram-bot'); ?></label></th>
+                        <td>
+                            <select name="wp_telegram[target]">
+                                <option><?php _e('Users, Groups, Channel', 'telegram-bot'); ?></option>
+                                <option value="1"<?php if (isset($options['target']) && $options['target'] == 1) { echo ' selected="selected"'; } ?>><?php _e('Users', 'telegram-bot'); ?></option>
+                                <option value="2"<?php if (isset($options['target']) && $options['target'] == 2) { echo ' selected="selected"'; } ?>><?php _e('Groups', 'telegram-bot'); ?></option>
+                                <option value="3"<?php if (isset($options['target']) && $options['target'] == 3) { echo ' selected="selected"'; } ?>><?php _e('Users, Groups', 'telegram-bot'); ?></option>
+                                <option value="4"<?php if (isset($options['target']) && $options['target'] == 4) { echo ' selected="selected"'; } ?>><?php _e('Channel', 'telegram-bot'); ?></option>
+                                <option value="5"<?php if (isset($options['target']) && $options['target'] == 5) { echo ' selected="selected"'; } ?>><?php _e('All', 'telegram-bot'); ?></option>
+                            </select>
+                            <br><small><?php _e('Define the post broadcast targeting when you send content (for example posts or manual text).<br>You can also change this behaviour manually.', 'telegram-bot'); ?></small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="posttemplate"><?php _e('Post Template', 'telegram-bot'); ?></label></th>
+                        <td>
+                            <textarea id="posttemplate" rows="4" class="widefat" name="wp_telegram[posttemplate]"><?php echo $options['posttemplate']; ?></textarea>
+                            <br><small><?php _e('Allowed placeholders: <b>%TITLE% %LINK% %EXCERPT% %CHAT_ID%</b>', 'telegram-bot'); ?></small>
+                        </td>
+                    </tr>
+                </table>
+            </div>
+            <div id="tab-bot" class="telegram-tab-content" style="display:none;">
+                <table class="form-table">
+                    <tr valign="top">
+                        <td colspan="2">
+                            <h3><?php _e('Interactive bot', 'telegram-bot'); ?></h3>
+                            <p><?php _e('Only use this section if you want to build an interactive bot', 'telegram-bot'); ?></p>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="wmuser"><?php _e('Start Message', 'telegram-bot'); ?><br><small><?php _e('for users', 'telegram-bot'); ?></small></label></th>
+                        <td>
+                            <input id="wmuser" type="text" name="wp_telegram[wmuser]" value="<?php echo $options['wmuser']; ?>" size="55" />
+                            <br><small><?php _e('Cannot be blank', 'telegram-bot'); ?>.</small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="bmuser"><?php _e('Bye Message', 'telegram-bot'); ?><br><small><?php _e('for Private Conversations', 'telegram-bot'); ?></small></label></th>
+                        <td>
+                            <input id="bmuser" type="text" name="wp_telegram[bmuser]" value="<?php echo $options['bmuser']; ?>" size="55" />
+                            <br><small><?php _e('Cannot be blank', 'telegram-bot'); ?>.</small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="emuser"><?php _e('Error Message', 'telegram-bot'); ?><br><small><?php _e('for users', 'telegram-bot'); ?></small></label></th>
+                        <td>
+                            <input id="emuser" type="text" name="wp_telegram[emuser]" value="<?php echo isset($options['emuser']) ? $options['emuser'] : ''; ?>" size="55" />
+                            <br><small><?php _e('This will be shown when the command doesn\'t exist.', 'telegram-bot'); ?></small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="wmgroup"><?php _e('Start Message', 'telegram-bot'); ?><br><small><?php _e('for Groups', 'telegram-bot'); ?></small></label></th>
+                        <td>
+                            <input id="wmgroup" type="text" name="wp_telegram[wmgroup]" value="<?php echo $options['wmgroup']; ?>" size="55" />
+                            <br><small><?php _e('Cannot be blank', 'telegram-bot'); ?>.</small>
+                        </td>
+                    </tr>
+                    <tr valign="top">
+                        <th scope="row"><label for="keyboard"><?php _e('Keyboard Template', 'telegram-bot'); ?><br><small><?php _e('for users', 'telegram-bot'); ?></small></label></th>
+                        <td>
+                            <input id="keyboard" type="text" name="wp_telegram[keyboard]" value="<?php echo $options['keyboard']; ?>" size="55" />
+                            <br><small><?php _e('Example: <b>1,2,3;4,5,6;Text</b>', 'telegram-bot'); ?></small>
+                        </td>
+                    </tr>
+                </table>
+            </div>
+        </div>
+        <div class="clear"></div>
+        <hr>
+        <p class="submit">
+            <input type="submit" class="button-primary" value="<?php _e('Save Changes'); ?>" />
         </p>
-    </td>
-  </tr>
-<tr valign="top">
-  <th scope="row">
-    <label for="zapier">
-      <?php _e('Enable Zapier', 'telegram-bot'); ?>
-    </label>
-  </th>
-  <td>
-    <input id="zapier" name="wp_telegram[zapier]" type="checkbox" value="1"
-          <?php checked( '1', ( isset( $options[ 'zapier'] ) && $options[ 'zapier'] ) ? 1 : 0 ); ?> />
-    <br>
-    <small>Zapier allows you to send messages from your own platforms
-      <a href="https://zapier.com/developer/public-invite/88225/1d9f5d9ec76cde2aac6e356298aee8e8/">Click here to get an invite</a>
-    </small>
-  </td>
-</tr>
-<tr valign="top">
-      <td colspan="2">
-        <h3><?php _e('Posts broadcast', 'telegram-bot'); ?></h3>
-        <p><?php _e('You can send post or custom post to Telegram when you publish or edit it.', 'telegram-bot'); ?></p>
-        <p><?php _e('If you want to broadcast to a channel, please add the bot as admin in your channel.', 'telegram-bot'); ?></p>        
-      </td>
-    </tr>
-    <tr valign="top">
-      <th scope="row">
-        <label for="mode">
-          <?php _e('Default content broadcast', 'telegram-bot'); ?>
-        </label>
-      </th>
-      <td>
-        <select name="wp_telegram[target]">
-          <option><?php _e('Users, Groups, Channel', 'telegram-bot'); ?></option>
-          <option value="1"<?php if (isset($options['target'])&&$options['target']==1 ) { echo ' selected="selected"'; } ?>><?php _e('Users', 'telegram-bot'); ?></option>
-          <option value="2"<?php if (isset($options['target'])&&$options['target']==2 ) { echo ' selected="selected"'; } ?>><?php _e('Groups', 'telegram-bot'); ?></option>
-          <option value="3"<?php if (isset($options['target'])&&$options['target']==3 ) { echo ' selected="selected"'; } ?>><?php _e('Users, Groups', 'telegram-bot'); ?></option>
-          <option value="4"<?php if (isset($options['target'])&&$options['target']==4 ) { echo ' selected="selected"'; } ?>><?php _e('Channel', 'telegram-bot'); ?></option>
-          <option value="5"<?php if (isset($options['target'])&&$options['target']==5 ) { echo ' selected="selected"'; } ?>><?php _e('All', 'telegram-bot'); ?></option>
-        </select>
-      <br>
-      <small>
-        <?php _e('Define the post broadcast targeting when you send content (for example posts or manual text).', 'telegram-bot'); ?>
-        <br>
-        <?php _e('You can also change this behaviour manually.', 'telegram-bot'); ?>
-      </small>
-      </td>
-    </tr>
-    <tr valign="top">
-        <th scope="row">
-            <label for="posttemplate"><?php _e('Post Template', 'telegram-bot'); ?></label>
-        </th>
-        <td>
-        <textarea id="posttemplate" rows="4" class="widefat" name="wp_telegram[posttemplate]"><?php echo $options['posttemplate']; ?></textarea>
-        <br><small><?php _e('Allowed placeholders: <b>%TITLE% %LINK% %EXCERPT% %CHAT_ID%</b>', 'telegram-bot'); ?></small> </td></td>
-    </tr>
-    <tr valign="top">
-      <td colspan="2">
-        <h3><?php _e('Interactive bot', 'telegram-bot'); ?></h3>
-        <p>Only use this section if you want to build an interactive bot</p>
-      </td>
-    </tr>
-    <tr valign="top">
-      <th scope="row">
-        <label for="wmuser">
-          <?php _e('Start Message', 'telegram-bot'); ?>
-          <br>
-          <small>
-            <?php _e('for users', 'telegram-bot'); ?>
-          </small>
-        </label>
-      </th>
-      <td>
-        <input id="wmuser" type="text" name="wp_telegram[wmuser]" value="<?php echo $options['wmuser']; ?>" size="55" />
-        <br>
-        <small>
-          <?php _e('Cannot be blank', 'telegram-bot'); ?>.
-        </small>
-      </td>
-    </tr>
-    <tr valign="top">
-      <th scope="row">
-        <label for="bmuser">
-          <?php _e('Bye Message', 'telegram-bot'); ?>
-          <br>
-          <small>
-            <?php _e('for Private Conversations', 'telegram-bot'); ?>
-          </small>
-        </label>
-      </th>
-      <td>
-        <input id="bmuser" type="text" name="wp_telegram[bmuser]" value="<?php echo $options['bmuser']; ?>" size="55" />
-        <br>
-        <small>
-          <?php _e('Cannot be blank', 'telegram-bot'); ?>.
-        </small>
-      </td>
-    </tr>
-    <tr valign="top">
-      <th scope="row">
-        <label for="emuser">
-          <?php _e('Error Message', 'telegram-bot'); ?>
-          <br>
-          <small>
-            <?php _e('for users', 'telegram-bot'); ?>
-          </small>
-        </label>
-      </th>
-      <td>
-        <input id="emuser" type="text" name="wp_telegram[emuser]" value="<?php echo isset( $options['emuser'] ) ? $options['emuser'] : ''; ?>" size="55" />
-        <br>
-        <small><?php _e('This will be shown when the command doesn\'t exist.', 'telegram-bot'); ?></small>
-      </td>
-    </tr>
-    <tr valign="top">
-      <th scope="row">
-        <label for="wmgroup">
-          <?php _e('Start Message', 'telegram-bot'); ?>
-          <br>
-          <small>for Groups
-          </small>
-        </label>
-      </th>
-      <td>
-        <input id="wmgroup" type="text" name="wp_telegram[wmgroup]" value="<?php echo $options['wmgroup']; ?>" size="55" />
-        <br>
-        <small>
-          <?php _e('Cannot be blank', 'telegram-bot'); ?>.
-        </small>
-      </td>
-    </tr>
-    <tr valign="top">
-      <th scope="row">
-        <label for="keyboard">
-          <?php _e('Keyboard Template', 'telegram-bot'); ?>
-          <br>
-          <small><?php _e('for users', 'telegram-bot'); ?></small>
-        </label>
-      </th>
-      <td>
-        <input id="keyboard" type="text" name="wp_telegram[keyboard]" value="<?php echo $options['keyboard']; ?>" size="55" />
-        <br>
-        <small><?php _e('Example: <b>1,2,3;4,5,6;Text</b>', 'telegram-bot'); ?></small>
-      </td>
-    </tr>
-</table>
-
-<p class="submit">
-  <input type="submit" class="button-primary" value="<?php _e('Save Changes'); ?>" />
-</p>
-</form>
+    </form>
+    <style>
+        .telegram-settings .nav-tab-wrapper { margin-bottom: 0; }
+        .telegram-settings .nav-tab { font-size: 1.1em; }
+        .telegram-settings .telegram-tab-content { background: #fff; border: 1px solid #ccd0d4; border-top: none; padding: 24px 32px; border-radius: 0 0 8px 8px; }
+        .telegram-settings table.form-table { width: 100%; }
+        .telegram-settings th { width: 220px; }
+    </style>
+    <script>
+        (function(){
+            const tabs = document.querySelectorAll('.nav-tab');
+            const contents = document.querySelectorAll('.telegram-tab-content');
+            tabs.forEach(tab => {
+                tab.addEventListener('click', function(e) {
+                    e.preventDefault();
+                    tabs.forEach(t => t.classList.remove('nav-tab-active'));
+                    this.classList.add('nav-tab-active');
+                    contents.forEach(c => c.style.display = 'none');
+                    const sel = this.getAttribute('href');
+                    document.querySelector(sel).style.display = 'block';
+                });
+            });
+        })();
+    </script>
 </div>
-<?php } ?>

telegram-bot/trunk/parse.php

@@ -3 +3 @@
 
     if (!$json) {
-        telegram_log('Warning','Webhook URL','Endpoint was called without input.');
+        telegram_log('returned','','');
         return;
     }
@@ -13 +13 @@
         die();
     }
-    update_option('wp_telegram_last_id', $data['message']['message_id'] );
+    update_option('wp_telegram_last_id', $data['message']['message_id']);
 
     if ( $data['message']['chat']['type'] == 'private' ) {
@@ -25 +25 @@
         $GROUP = true; $PRIVATE = false;
         $COMMAND = $data['message']['text'];
-    } else if ( $data['my_chat_member']['chat']['type'] == 'supergroup' ) {
-        $USERID = $data['my_chat_member']['chat']['id'];
-        $CPT = 'telegram_groups';
-        $GROUP = true; $PRIVATE = false;
-        $COMMAND = '';
     } else if ( $data['callback_query']['message']['text'] ) {
         $USERID = $data['callback_query']['message']['chat']['id'];
@@ -60 +55 @@
             telegram_sendmessage( $USERID, telegram_option('wmuser') );
         } else if ( $GROUP ) {
-            $name = '';
-            if ( isset( $data['message']['chat']['title'] ) ) {
-                $name = $data['message']['chat']['title'];
-            } else if ( isset( $data['my_chat_member']['chat']['title'] ) ) {
-                $name = $data['my_chat_member']['chat']['title'];
-            }
-            update_post_meta($p, 'telegram_name', $name );
+            update_post_meta($p, 'telegram_name', $data['message']['chat']['title']);
             telegram_log('', '', 'Bot added to <strong>'.$data['message']['chat']['title'].'</strong>');
             telegram_sendmessage( $USERID, telegram_option('wmgroup') );
@@ -83 +72 @@
         update_post_meta( $POST_ID, 'telegram_counter', $counter );
     } else if ($GROUP) {
-        update_post_meta($o->ID, 'telegram_name', 'xx');
+        update_post_meta($o->ID, 'telegram_name', $data['message']['chat']['title']);
     }
 

telegram-bot/trunk/readme.txt

@@ -1 +1 @@
 === Telegram Bot & Channel ===
-Contributors: Milmor
-Version:    3.8.2
-Stable tag: 3.8.2
-Author:     Marco Milesi
-Author URI:   https://profiles.wordpress.org/milmor/
+Contributors: Milmor, marcomilesi
+Version: 4.0
+Stable tag: 4.0
+Author: Marco Milesi
+Author URI: https://profiles.wordpress.org/milmor/
 Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=F2JK36SCXKTE2
-Tags: telegram, bot, newsletter, channel, group, automatic, stream, classicpress
-Requires at least: 3.8
-Requires PHP: 5.6
-Tested up to: 6.5
+Tags: telegram, bot, newsletter, channel, group, broadcast, automation, notifications, autoresponder, webhook, ssl, zapier, integration, marketing, customer-engagement, chatbot, wordpress, classicpress
+Requires at least: 4.6
+Requires PHP: 7.0
+Tested up to: 6.9
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
 
-Send your posts to Telegram and build an interactive bot. Zapier integrated!
+Supercharge your WordPress site with Telegram! Broadcast posts, automate notifications, and build interactive bots for your users, groups, and channels. Secure, modern, and easy to use. Zapier integration included!
 
 == Description ==
 
-This  plugin allows you to accomplish a variety of tasks, including teaching, playing, searching, broadcasting, reminding, connecting, and integrating with your services.
-
-With this powerful bot builder, you can: 
-
-🤖 **Build a bot**: create interactive autoresponders for users and groups
-📣 **Broadcast to a channel**: utilize the broadcast feature to send messages to your channels and bot subscribers
-
-https://youtu.be/8fckoWSmAks
-
-= Bot features =
-
-Enhance your content distribution strategy with these **free** advanced features:
-
-📰 Send your content (post, page or custom messages) with templates
-📅 Support for scheduled post broadcast
-⌨️ Utilize **keyboards** and **inline buttons** for enhanced user engagement
-💬 Broadcast to various channels including chats, groups, supergroups, and channels
-↩️ Create unlimited autoresponders
-📊 View insights about users and groups subscribed to your bot
-📡 Haversine algorithm to get users' location and provide geo-focused content
-🎨 Create custom applicatons with **/$command $var1 $var2** format for custom application creation
-💡 **[Zapier](https://zapier.com)** integration to ensure seamless connectivity with your other tools
-
-= Channel features =
-📰 Send your content (post, page or custom messages) with configurable templates
-📅 Support for scheduled post broadcast
-💡 **[Zapier](https://zapier.com)** integration
-
-**Note:** your bot must be administrator of your channel for sending messages
-
-🔐 Every connection relies on secure webhooks for maximum security. Telegram requires **SSL** to manage a Telegram Bot. If you don't have it, just choose the free opt-in service [botpress.org](https://botpress.org) in options (the feature will send some data to our server).
-
-= Zapier and IoT features = 
-Zapier makes it easy to automate tasks between web apps. For example:
-
-* send a news published on a website (based on RSS)
-* send the weather to your subscribers, every day
-* inform users when you upload an image on Instagram
-* and much more… With 400+ Zapier Apps supported!
-
-https://www.youtube.com/watch?v=14aEV0_FHFk
-
-= DEMO =
-* **[CosenzApp_bot](http://telegram.me/CosenzApp_bot)** (italian) - Guide for Cosenza city
-Want to showcase your work? contact us!
+**Telegram Bot & Channel** is the all-in-one solution to connect your WordPress site with Telegram. Instantly broadcast posts, automate notifications, and create interactive bots for your audience. No coding required!
+
+**Key Features:**
+- 🤖 **Bot builder:** Create interactive autoresponders for users and groups
+- 📣 **Broadcast:** Send posts, pages, or custom messages to your channels, groups, and subscribers
+- 🔔 **Automated notifications:** Instantly notify your audience about new content
+- 🔗 **Zapier integration:** Connect Telegram with 400+ apps and automate your workflows
+- 🔐 **Secure:** All connections use Telegram WebHooks and require SSL for maximum security
+- 🛡️ **Modern UI:** Clean, user-friendly admin panels with stats, logs, and quick actions
+
+**Why choose this plugin?**
+- 100% free and open source
+- No third-party servers: your data stays on your site
+- Easy setup: just add your bot token and go
+- Developer-friendly: extend with custom PHP actions and filters
+
+== Features ==
+
+**Bot & Broadcast:**
+- Send posts, pages, or custom messages with flexible templates
+- Schedule broadcasts for future posts
+- Use custom keyboards and inline buttons for rich user interaction
+- Broadcast to users, groups, supergroups, and channels
+- Unlimited autoresponders and command triggers
+- View insights about your Telegram audience
+- Haversine algorithm for geo-targeted content
+- Create custom applications with command variables
+
+**Zapier & Automation:**
+- Connect Telegram to 400+ apps (RSS, Instagram, Google Sheets, and more)
+- Automate news, weather, social, and IoT notifications
+- Easy Zapier invite and setup
+
+**Security & Privacy:**
+- All actions protected by WordPress nonces (CSRF protection)
+- Only supports secure Telegram WebHooks (SSL required)
+- No data sent to third-party servers (except optional Zapier integration)
+
+**Screenshots:**
+1. Modern dashboard with stats and recent activity
+2. Subscribers list
+3. Commands and autoresponders
+4. Zapier integration
+5. Plugin settings with tabs
+6. Dynamic replies and inline buttons
+7. Keyboard example
+8. Post broadcasting
+9. Native Gutenberg support
 
 == Installation ==
-This section describes how to install the plugin and get it working.
-
-1. Upload `telegram-bot` directory to the `/wp-content/plugins/` directory
-2. Activate the plugin through the 'Plugins' menu in WordPress
+1. Upload the `telegram-bot` directory to `/wp-content/plugins/`
+2. Activate the plugin in the WordPress admin
 3. Go to the Telegram settings page
-4. Go through the steps and hit update!
+4. Enter your bot token and configure your preferences
+5. Enjoy automated Telegram notifications and bot features!
 
 == Frequently Asked Questions ==
-More documentation is available on [www.botpress.org/docs](https://www.botpress.org/docs)
-
-= How do I create a bot? =
-[www.botpress.org/docs/telegram/how-to-create-a-bot](https://www.botpress.org/docs/telegram/how-to-create-a-bot/)
-
-= How can i let users subscribe? =
-[www.botpress.org/docs/telegram/how-do-users-subscribe](https://www.botpress.org/docs/telegram/how-do-users-subscribe/)
-
-= What is Zapier and how do i integrate it? =
-[www.botpress.org/docs/telegram/zapier-integration](https://www.botpress.org/docs/telegram/zapier-integration/)
-
-= How to enable debug mode? =
-If you are a developer, or just want a more complete "Telegram > Log" enable WP_DEBUG mode.
-The plugin debug mode also allows to explore Telegram users and groups as standard posts. This let you to check custom fields for each users and modify them in real time. You'll notice a new column (= Telegram id for the user) in Subscribers and Groups page.
-We don't suggest to keep WP_DEBUG if not for testing purposes.
-
-= How to make dynamic replies? (PHP required) =
-The best way to integrate PHP code is to build a custom integration plugin, but you can also add PHP to /$commands directly in your WordPress admin dashboard using the [Insert Php](https://wordpress.org/plugins/insert-php) plugin.
-
-In case you want to scale and choose the first option, you can create a new file called **telegram-bot-custom.php** and upload it to wp-content/plugins.
-
-The following example, once activated in the plugins list, will reply to `/command`:
-
-`<?php
-/*
-Plugin Name: Telegram Bot & Channel (Custom)
-Description: My Custom Telegram Plugin
-Author: My name
-Version: 1
-*/
-
-add_action('telegram_parse','telegramcustom_parse', 10, 2);
-
-function telegramcustom_parse( $telegram_user_id, $text ) {
-    $plugin_post_id = telegram_getid( $telegram_user_id );
-
-    if ( !$plugin_post_id ) {
-        return;
-    }
-
-    /*
-    Here is the dynamic processing and how to reply.
-    You can:
-    - use if, switch and everything that works in php
-    - check if $text is made of multiple words (create an array from $text)
-    - customize and code other actions (ex. create WordPress post is $telegram_user_id is your id)
-    */
-
-    if ( $text == '/command') {
-        telegram_sendmessage( $telegram_user_id, 'Oh, yes you typed /command');
-    }
-
-    return;
-}
-
-?>`
-
-= How to set up dynamic keyboards? =
-You can send custom keyboards directly in php. Every keyboard can be set only when you send a message, and is kept in the client side until another keyboard is sent (in another message). You can also change this behaviour by setting the $one_time_keyboard true or false.
-
-`telegram_sendmessage( $telegram_user_id, 'Hello from the other side!'); //Message with no keyboard (or with default one if set in plugin options)
-telegram_sendmessage( $telegram_user_id, 'Hello from the other side!', telegram_build_reply_markup( '11,12,13;21,22', true )); //Message with custom keyboard`
-
-Here is the details of telegram_build_reply_markup (an array is returned):
-`telegram_build_reply_markup(
- '11,12,13;21,22', //The keyboard template (eg. 2 row, 3 columns for the first one and two columns for the second one
- true, // $one_time_keyboard (optional) (default false = kept until a new keyboard is sent) (true = kept until the user send something to the bot)
- true // $resize_keyboard (optional) (default true)
-);`
-
-You can also alter keyboards for commands defined in the **admin area**. Start from the previous custom plugin created, and add the following filter:
-
-`add_filter( 'telegram_get_reply_markup_filter', 'telegram_get_reply_markup_filter_custom', 1 );
-
-function telegram_get_reply_markup_filter_custom( $id ) {
-    if ( $id ) {
-        switch ( $id ) {
-            case 7: //Your command ID (found in the url while editing the command)
-                telegram_log('####', $id, 'custom keyboard'); //Useful for debug
-                return array(
-                    'keyboard' => array(array('Top Left', 'Top Right'),array('Bottom')),
-                    'resize_keyboard' => true, //true or false (suggested: true)
-                    'one_time_keyboard' => true //true or false
-                    );            
-            default:
-                return;
-        }
-    }
-}`
-
-= How to get user location? =
-It's easy, with harvesine algorithm (one-point radius) or standard geolocation (4-points).
-These snippets only cover the harvesine algorithm, that is simple and supported by the plugin. To use the standard 4-points geolocation it's enough to do some php-calc with basic if-then structures.
-
-You can start from the previous custom plugin created, and add the following action:
-
-`add_action('telegram_parse_location','telegramcustom_c_parse_location', 10, 3);
-
-function telegramcustom_c_parse_location ( $telegram_user_id, $lat, $long  ) {
-
-  if ( telegram_location_haversine_check ( 45.85, 9.70, $lat, $long, 20 ) ) {
-    telegram_sendmessage( $telegram_user_id, 'Inside the radius');
-  }
-
-}`
-
-The examples sends a "Inside the radius" message when the user is inside the **20-meters** radius centered in 45.85 Lat, 9.70 Long.
-
-You have two developer functions to use:
-
-`//Check if point is within a distance (max_distance required)
-$boolean = telegram_location_haversine_check ( $latitudeFrom, $longitudeFrom, $latitudeTo, $longitudeTo, $max_distance, $min_distance = 0, $earthRadius = 6371000);
-
-//Calculate the distance
-$int = telegram_location_haversine_distance ( $latitudeFrom, $longitudeFrom, $latitudeTo, $longitudeTo, $earthRadius = 6371000);`
-
-The first function returns a boolean (true/false) depending on given parameters. Please note that $min_distance and $earthRadius are optional.
-The second one returns a int (in meters) of the distance. $earthRadius optional.
-
-Both the functions calculates distances on meters. If you want another type of result, just change the $earthRadius.
-
-= How to get user photos? =
-We've written simple functions to let developers build everything.
-Photos are saved in **/wp-content/uploads/telegram-bot/'.$plugin_post_id.'/'.$file_name** where $plugin_post_id is the custom post type id associated with the Telegram subscription (ex. '24') and $file_name is time().$extension
-
-`<?php
-/*
-Plugin Name: Telegram Bot & Channel (Custom)
-Description: My Custom Telegram Plugin
-Author: My name
-Version: 1
-*/
-
-add_action('telegram_parse_photo','telegramcustom_parse_photo', 10, 2);
-
-function telegramcustom_parse_photo ( $telegram_user_id, $photo  ) {
-
- $plugin_post_id = telegram_getid( $telegram_user_id );
-
- if ( !$plugin_post_id ) {
-  return;
- }
-
- /*
-  Here is the dynamic processing and how to reply.
-  You can:
-   - use if, switch and everything that works in php
-   - check if $text is made of multiple words (create an array from $text)
-   - customize and code other actions (ex. create WordPress post is $telegram_user_id is your id)
- */
- 
- /*
-   $photo[2]['file_id'] is only one of available sizes. You should make sure that this size exist, or check for another size.
-   $photo[1]['file_id'] has lower resolution
- */
- $url = telegram_download_file( $telegram_user_id, $photo[2]['file_id'] ); //Fetch and save photo to your server
- 
- if ( $url ) { //$url is the local url because photo is already saved
-
-  //You can save the entry in your db
-  global $wpdb;
-  $arr = array( 'telegram_id' => $telegram_user_id, 'plugin_post_id' => $plugin_post_id, 'url' => $url );
-  
-  $wpdb->insert(
-   $wpdb->prefix . 'your_table_name_that_must_already_exist', $arr, array( '%s' )
-  );
-
-  //Or save it as custom field and use it for a Finite State Machine
-  update_post_meta( $plugin_post_id, 'telegram_custom_last_photo_received', $url );
-
-  telegram_sendmessage( $telegram_user_id, 'Photo received. Thank you!');
-}
-
-?>`
-
-Another example, that is a "emergency bot" created for the mid-italy earthquake (24 august 2016) is available on [GitHub](https://github.com/milesimarco/terremotocentroitalia-bot-telegram/)
+
+= How do I create a Telegram bot? =
+Visit [Telegram’s BotFather](https://core.telegram.org/bots#botfather) and follow the instructions to create a new bot and get your token.
+
+= How do users subscribe? =
+Users can start your bot or join your channel/group where the bot is an admin.
+
+= How do I enable Zapier integration? =
+Enable Zapier in the plugin settings and follow the invite link for setup instructions.
+
+= Is SSL required? =
+Yes, Telegram WebHooks require SSL. Your site must use HTTPS for the plugin to work.
+
+= Can I extend the plugin? =
+Yes! Use WordPress hooks and filters to add custom commands, keyboards, and integrations. See the FAQ and code comments for examples.
 
 == Screenshots ==
-1. Plugin dashboard
+1. Modern dashboard with stats and recent activity
 2. Subscribers list
-3. Commands list
-4. Autoresponders
-5. Zapier integration
-6. plugin options
-7. Dynamic repliles and inline buttons example from [IcBrendola_bot](http://telegram.me/IcBrendola_bot)
-8. Keyboard example from [CosenzApp_bot](http://telegram.me/CosenzApp_bot)
-9. Post broadcasting (all post types)
-10. Native Gutenberg support
+3. Commands and autoresponders
+4. Zapier integration
+5. Plugin settings with tabs
+6. Dynamic replies and inline buttons
+7. Keyboard example
+8. Post broadcasting
+9. Native Gutenberg support
 
 == Changelog ==
 
-= 3.8 2024-07-01 =
-
-* [IMPROVE] Redesigned settings page with old settings cleanup
-* [IMPROVE] Better Zapier handling
-* [IMPROVE] Minor changes, code cleanup, security hardening and optimizations
-
-= 3.7 20231020 =
-* [NEW] Added ability to selectively send message to subscribed groups
-* [BUGFIX] Fixed critical bug when sending to groups
-* [BUGFIX] Minor changes and optimizations
-* [NEW] Github deploy flow setup - https://github.com/WPGov/telegram-bot
+= 4.0 20250526 =
+* [SECURITY] Added CSRF protection (WordPress nonces) to all sensitive actions (log clear, send message, etc.)
+* [SECURITY] Hardened webhook and Zapier endpoints, removed BotPress.org fallback (now only Telegram WebHooks are supported)
+* [SECURITY] Improved admin access checks and output escaping throughout the plugin
+* [IMPROVE] Redesigned all admin pages for a modern, user-friendly experience (dashboard, log, send message, settings)
+* [IMPROVE] Settings page now uses tabs for easier navigation and clarity
+* [IMPROVE] Removed all BotPress.org logic and references (service discontinued, SSL is now required)
+* [IMPROVE] Inlined and refactored plugin defaults (removed defaults.php)
+* [IMPROVE] Refactored admin notices for maintainability
+* [IMPROVE] Enhanced log panel with better design and empty state
+* [IMPROVE] Enhanced dashboard with stats, recent activity, and quick actions
+* [IMPROVE] Improved send message panel with modern UI
+* [IMPROVE] Cleaned up and secured Zapier integration
+* [IMPROVE] General code cleanup, improved maintainability and best practices
+* [IMPROVE] Updated documentation and removed outdated references
+* [DEPRECATED] Removed all support for BotPress.org and non-SSL fallback
+* [NOTE] This is a major update. Please review your settings and test your integration after updating.
 
 = 3.6.3 20230527 =

telegram-bot/trunk/telegram-bot.php

@@ -4 +4 @@
 Plugin URI:  https://wordpress.org/plugins/telegram-bot/
 Description: Broadcast your content to Telegram, build interactive bots and boost your omnichannel customer experience
-Version: 3.8.2
+Version: 3.6.3
 Author: Marco Milesi
 Author URI: https://www.marcomilesi.com
@@ -15 +15 @@
 require 'admin-messages.php';
 require 'panel/send.php';
-require 'panel/settings.php';
 
 add_action( 'plugins_loaded', function(){
@@ -27 +26 @@
     add_submenu_page('telegram_main', __('Send a message', 'telegram-bot'), __('Send a message', 'telegram-bot'), 'manage_options', 'telegram_send', 'telegram_send_panel' );
     add_submenu_page('telegram_main', __('Responders', 'telegram-bot'), __('Responders', 'telegram-bot'), 'manage_options', 'edit.php?post_type=telegram_commands');
-    add_submenu_page('telegram_main', __('Settings', 'telegram-bot'), __('Settings', 'telegram-bot'), 'manage_options', 'telegram_settings', function(){ telegram_settings_page(); });
+    add_submenu_page('telegram_main', __('Settings', 'telegram-bot'), __('Settings', 'telegram-bot'), 'manage_options', 'telegram_settings', function(){require 'panel/settings.php';});
     add_submenu_page('telegram_main', 'Log', 'Log', 'manage_options', 'telegram_log', 'telegram_log_panel');
 });
 
 function telegram_log_panel() {
-    if (isset($_GET['tbclear'])) {
-        delete_option('wp_telegram_log');
-    }
+    if (isset($_GET['tbclear'])) {
+        if (!isset($_GET['_wpnonce']) || !wp_verify_nonce($_GET['_wpnonce'], 'telegram_log_clear')) {
+            wp_die(__('Security check failed.','telegram-bot'));
+        }
+        delete_option('wp_telegram_log');
+    }
     $log = get_option('wp_telegram_log');
-    
-    echo '<div class="wrap"><h2>Activity log <a href="admin.php?page=telegram_log" class="add-new-h2">'.__('Reload', 'telegram-bot').'</a><a href="admin.php?page=telegram_log&tbclear=1" class="add-new-h2">'.__('Clear', 'telegram-bot').'</a></h2>
-    <table class="widefat fixed" cellspacing="0">
-    <thead>
-    <tr>
-    <th style="width: 5%;" class="manage-column" scope="col">'.__('Type', 'telegram-bot').'</th>
-    <th style="width: 10%;" class="manage-column" scope="col">'.__('Date', 'telegram-bot').'</th>
-    <th style="width: 10%;" class="manage-column" scope="col">'.__('Author', 'telegram-bot').'</th>
-    <th id="columnname" class="manage-column" scope="col">'.__('Description', 'telegram-bot').'</th>
-    </tr>
-    </thead>
-    <tbody>';
-    if ( is_array( $log ) ) {
+    echo '<div class="wrap telegram-log-panel">';
+    echo '<h1 style="margin-bottom:24px;">'.__('Activity Log', 'telegram-bot').'</h1>';
+    echo '<div style="margin-bottom:20px;">';
+    echo '<a href="admin.php?page=telegram_log" class="button button-secondary" style="margin-right:10px;">'.__('Reload', 'telegram-bot').'</a>';
+    echo '<a href="'.wp_nonce_url('admin.php?page=telegram_log&tbclear=1', 'telegram_log_clear').'" class="button button-danger" style="color:#fff;background:#d63638;border-color:#d63638;">'.__('Clear Log', 'telegram-bot').'</a>';
+    echo '</div>';
+    echo '<div style="overflow-x:auto;">';
+    echo '<table class="widefat fixed striped" cellspacing="0" style="min-width:700px;">';
+    echo '<thead><tr>';
+    echo '<th style="width: 7%;">'.__('Type', 'telegram-bot').'</th>';
+    echo '<th style="width: 15%;">'.__('Date', 'telegram-bot').'</th>';
+    echo '<th style="width: 15%;">'.__('Author', 'telegram-bot').'</th>';
+    echo '<th>'.__('Description', 'telegram-bot').'</th>';
+    echo '</tr></thead><tbody>';
+    if ( is_array( $log ) && count($log) ) {
         foreach ( $log as $line ) {
             echo '<tr>';
-            echo '<td>' . ( isset( $line[0] ) ? $line[0] : '' ) . '</td>';
-            echo '<td>' . ( isset( $line[1] ) ? $line[1] : '' ) . '</td>';
-            echo '<td>' . ( isset( $line[2] ) ? $line[2] : '' ) . '</td>';
-            echo '<td>' . ( isset( $line[3] ) ? $line[3] : '' ) . '</td>';
+            echo '<td><span style="font-weight:bold;color:#2271b1;">' . ( isset( $line[0] ) ? esc_html($line[0]) : '' ) . '</span></td>';
+            echo '<td>' . ( isset( $line[1] ) ? esc_html($line[1]) : '' ) . '</td>';
+            echo '<td>' . ( isset( $line[2] ) ? esc_html($line[2]) : '' ) . '</td>';
+            echo '<td>' . ( isset( $line[3] ) ? esc_html($line[3]) : '' ) . '</td>';
             echo '</tr>';
         }
-    }
-   
-    echo '</tbody>
-    </table></div>';
+    } else {
+        echo '<tr><td colspan="4" style="text-align:center;color:#888;">'.__('No log entries found.', 'telegram-bot').'</td></tr>';
+    }
+    echo '</tbody></table></div>';
+    echo '<style>.telegram-log-panel .button-danger:hover{background:#a00!important;border-color:#a00!important;}</style>';
+    echo '</div>';
 }
 
@@ -89 +95 @@
 
 function telegram_defaults() {
+    // Set API key if not set
     if (!get_option('wp_telegram_apikey')) {
         update_option('wp_telegram_apikey', md5(microtime() . rand() . get_site_url()));
     }
-  
+    // Set dispatches if not set
     if (!get_option('wp_telegram_dispatches')) {
         update_option('wp_telegram_dispatches', 0);
     }
-  
-    $defaults   = array(
-        array('token', ''),
-        array('zapier', ''),
-        array('wmgroup', 'Welcome!'),
-        array('wmuser', 'Welcome, %FIRST_NAME%!'),
-        array('posttemplate', '%TITLE%'.PHP_EOL.PHP_EOL.'%LINK%'),
-        array('bmuser', 'Bye, %FIRST_NAME%. Type /start to enable the bot again.'),
-        array('keyboard', '')
+    // Set main plugin options
+    $defaults = array(
+        'token'         => '',
+        'zapier'        => '',
+        'wmgroup'       => 'Welcome!',
+        'wmuser'        => 'Welcome, %FIRST_NAME%!',
+        'posttemplate'  => '%TITLE%' . PHP_EOL . PHP_EOL . '%LINK%',
+        'bmuser'        => 'Bye, %FIRST_NAME%. Type /start to enable the bot again.',
+        'keyboard'      => ''
     );
-  
     $my_options = get_option('wp_telegram');
-  
-    $conta = count($defaults);
-  
-    for ($i = 0; $i < $conta; $i++) {
-        if (!isset( $my_options[$defaults[$i][0]] ) || !$my_options[$defaults[$i][0]]) {
-            $my_options[$defaults[$i][0]] = $defaults[$i][1];
-            update_option('wp_telegram', $my_options);
-        }
+    if (!is_array($my_options)) {
+        $my_options = array();
+    }
+    $changed = false;
+    foreach ($defaults as $key => $value) {
+        if (!isset($my_options[$key])) {
+            $my_options[$key] = $value;
+            $changed = true;
+        }
+    }
+    if ($changed) {
+        update_option('wp_telegram', $my_options);
     }
 }
@@ -127 +137 @@
         if ($_GET['zap'] == get_option('wp_telegram_apikey') && telegram_option('zapier')) {
             status_header( 200 );
-            
             $json = file_get_contents('php://input');
             if (!$json) {
@@ -135 +144 @@
             telegram_log('------>', 'ZAPIER', json_encode((array) file_get_contents("php://input")));
             telegram_sendmessagetoall($data['hook']);
-
         }
     }
@@ -198 +206 @@
         if ($o) {
             $text = str_replace('%FIRST_NAME%', get_post_meta($o->ID, 'telegram_name', true), $text);
+            $text = str_replace('%LAST_NAME%', get_post_meta($o->ID, '', true), $text);
         }
     }