403 ] );
}
check_admin_referer( 'aiep_create_policy_page' );
// Re-use an existing page we previously created (option keeps the ID).
$existing_id = (int) get_option( 'aiep_policy_page_id', 0 );
if ( $existing_id ) {
$existing = get_post( $existing_id );
if ( $existing && 'page' === $existing->post_type && 'trash' !== $existing->post_status ) {
wp_safe_redirect( get_edit_post_link( $existing_id, 'redirect' ) );
exit;
}
}
$site_name = get_bloginfo( 'name' );
$body = self::policy_starter_template( $site_name );
$page_id = wp_insert_post( [
'post_title' => __( 'AI Content Policy', 'ai-explainer-pro' ),
'post_status' => 'draft',
'post_type' => 'page',
'post_content' => $body,
'post_excerpt' => __( 'How this site uses AI in the content we publish — required by EU AI Act Art. 50.', 'ai-explainer-pro' ),
'comment_status' => 'closed',
'ping_status' => 'closed',
] );
if ( is_wp_error( $page_id ) ) {
wp_die( esc_html( $page_id->get_error_message() ) );
}
update_option( 'aiep_policy_page_id', (int) $page_id, false );
wp_safe_redirect( get_edit_post_link( $page_id, 'redirect' ) );
exit;
}
/**
* Starter content for the AI policy page. Plain HTML, valid in
* Gutenberg as a "Classic" or free-text block — the user can then
* convert to Gutenberg blocks if they want.
*/
private static function policy_starter_template( $site_name ) {
$site = esc_html( $site_name );
// Plain string concatenation — Plugin Check rejects heredoc
// syntax in plugins distributed via WordPress.org, so we build
// the template piece by piece. The result is byte-identical to
// the heredoc we previously shipped.
$tpl = "\n";
$tpl .= "AI Content Policy
\n";
$tpl .= "\n\n";
$tpl .= "\n";
$tpl .= "Last updated: " . $site . " — adapt the date when you publish this page.
\n";
$tpl .= "\n\n";
$tpl .= "\n1. Why this page exists
\n\n\n";
$tpl .= "\n";
$tpl .= "" . $site . " publishes content for our readers. We are transparent about how artificial intelligence (AI) tools are involved in producing that content. This page describes our practices, in line with Article 50 of the EU AI Act (Regulation 2024/1689).
\n";
$tpl .= "\n\n";
$tpl .= "\n2. How we classify our content
\n\n\n";
$tpl .= "\n";
$tpl .= "Every post on " . $site . " is analysed by the AI Explainer detection engine, which combines five complementary heuristics (statistical, linguistic, structural, vocabulary, repetition) to estimate whether the text is human-authored, AI-generated, or mixed. Authors can also manually declare the status of any post they publish. The result is displayed as a badge at the top of each article.
\n";
$tpl .= "\n\n";
$tpl .= "\n\n";
$tpl .= " - Human — the post was written by a person. AI may have been used to brainstorm, spell-check, or translate, but the substantive writing is human.
\n";
$tpl .= " - AI — the post was produced primarily by a large language model. A human editor reviewed it before publication.
\n";
$tpl .= " - Mixed — the post combines human writing and AI-generated sections.
\n";
$tpl .= "
\n\n\n";
$tpl .= "\n3. Human oversight
\n\n\n";
$tpl .= "\n";
$tpl .= "Every post — regardless of classification — is reviewed by a member of our editorial team before publication. We are accountable for what appears on this site.
\n";
$tpl .= "\n\n";
$tpl .= "\n4. AI tools we use
\n\n\n";
$tpl .= "\n\n";
$tpl .= " - List the providers and models you use here — e.g. OpenAI GPT-4, Anthropic Claude, Mistral, etc.
\n";
$tpl .= " - Mention any image-generation tools — DALL-E, Midjourney, Stable Diffusion.
\n";
$tpl .= " - Mention any translation tools — DeepL, Google Translate.
\n";
$tpl .= "
\n\n\n";
$tpl .= "\n5. Public authenticity report
\n\n\n";
$tpl .= "\n";
$tpl .= "You can review our content classification stats at any time on our public authenticity page. The page is regenerated automatically as new content is published and scanned.
\n";
$tpl .= "\n\n";
$tpl .= "\n6. Contact
\n\n\n";
$tpl .= "\n";
$tpl .= "Questions about our AI usage or this policy? Reach us at your-contact-email@example.com.
\n";
$tpl .= "\n";
return $tpl;
}
public static function handle_download_html() {
if ( ! current_user_can( 'manage_options' ) ) {
wp_die( esc_html__( 'Unauthorized.', 'ai-explainer-pro' ), '', [ 'response' => 403 ] );
}
check_admin_referer( 'aiep_compliance_report' );
$html = AI_Explainer_Pro_Compliance::generate_report_html();
$filename = 'ai-explainer-pro-compliance-report-' . gmdate( 'Y-m-d' ) . '.html';
// Discard any buffered output (PHP warnings, debug prints) so our
// Content-Disposition header is the first thing the browser sees.
while ( ob_get_level() ) {
ob_end_clean();
}
nocache_headers();
header( 'Content-Type: text/html; charset=utf-8' );
header( 'Content-Disposition: attachment; filename="' . $filename . '"' );
header( 'Content-Length: ' . strlen( $html ) );
// phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Full HTML document.
echo $html;
exit;
}
public function render() {
$data = AI_Explainer_Pro_Compliance::evaluate();
$inv = $data['inventory'];
$risk = $data['risk'];
$never_used = ( 0 === (int) $inv['scanned'] );
?>
[] ]
),
(int) $data['passed'],
(int) $data['total'],
'' . esc_html( strtoupper( $risk ) ) . ''
);
?>
0 ) : ?>
|
|
|
|
|
$item ) :
$r = $data['results'][ $key ];
$passed = ! empty( $r['passed'] );
$row_cls = $passed ? 'aiep-row--passed' : 'aiep-row--failed';
$sev = sanitize_html_class( $item['severity'] );
$how_to = isset( $item['how_to'] ) ? $item['how_to'] : '';
$action_url = isset( $item['action_url'] ) ? admin_url( $item['action_url'] ) : '';
?>
|
|
?
|
|
|
|
$item ) {
if ( ! $data['results'][ $key ]['passed'] ) {
$failing[] = $item;
}
}
if ( ! empty( $failing ) ) : ?>