From a501c3c84bd425a2104da2871ace34d7ea041b29 Mon Sep 17 00:00:00 2001
From: mgiannopoulos24 <79588074+mgiannopoulos24@users.noreply.github.com>
Date: Thu, 18 Dec 2025 20:55:59 +0200
Subject: [PATCH 1/6] Implement Snippet Lock Feature to Prevent Accidental
 Deletion and Modification

---
 src/css/edit/_sidebar.scss                    | 38 +++++++++++---
 src/css/manage.scss                           | 25 +++++++--
 .../EditorSidebar/EditorSidebar.tsx           |  5 +-
 .../EditorSidebar/actions/DeleteButton.tsx    |  4 +-
 .../EditorSidebar/controls/LockControl.tsx    | 52 +++++++++++++++++++
 src/js/hooks/useSnippetForm.tsx               |  7 ++-
 src/js/hooks/useSubmitSnippet.ts              | 34 +++++++-----
 src/js/types/Snippet.ts                       |  3 +-
 src/js/types/schema/SnippetSchema.ts          |  3 +-
 src/js/utils/snippets/api.ts                  |  4 +-
 src/js/utils/snippets/objects.ts              |  4 +-
 src/php/class-db.php                          |  8 ++-
 src/php/class-list-table.php                  | 46 ++++++++++++----
 src/php/class-snippet.php                     |  7 ++-
 .../class-snippets-rest-controller.php        |  6 ++-
 src/php/snippet-ops.php                       | 25 ++++++++-
 16 files changed, 223 insertions(+), 48 deletions(-)
 create mode 100644 src/js/components/EditorSidebar/controls/LockControl.tsx

diff --git a/src/css/edit/_sidebar.scss b/src/css/edit/_sidebar.scss
index 919ce70e..7eac0bcc 100644
--- a/src/css/edit/_sidebar.scss
+++ b/src/css/edit/_sidebar.scss
@@ -23,14 +23,19 @@
 	.delete-button {
 		color: #cc1818;
 
-		&:hover {
+		&:hover:not(:disabled) {
 			color: #9e1313;
 		}
 
-		&:focus {
+		&:focus:not(:disabled) {
 			color: #710d0d;
 			border-color: #710d0d;
 		}
+
+		&:disabled {
+			color: #a7aaad;
+			cursor: not-allowed;
+		}
 	}
 
 	.help-tooltip {
@@ -61,6 +66,19 @@
 			> :last-child {
 				margin-inline-start: auto;
 			}
+
+			&.lock-control-container {
+				border-block-start: 1px solid #eee;
+				padding-block-start: 1em;
+				margin-block-start: 0.5em;
+
+				.description {
+					flex-basis: 100%;
+					margin-block-start: 4px;
+					color: #646970;
+					font-style: italic;
+				}
+			}
 		}
 
 		.block-form-field {
@@ -108,11 +126,15 @@ p.submit {
 	padding-block-start: 0;
 }
 
-.activation-switch-container label {
-	display: flex;
-	flex-flow: row;
-	gap: 5px;
-	justify-content: center;
+.activation-switch-container,
+.lock-control-container {
+	label {
+		display: flex;
+		flex-flow: row;
+		gap: 5px;
+		justify-content: center;
+		align-items: center;
+	}
 }
 
 .shortcode-tag-wrapper {
@@ -152,4 +174,4 @@ p.submit {
 	.components-spinner {
 		block-size: 12px;
 	}
-}
+}
\ No newline at end of file
diff --git a/src/css/manage.scss b/src/css/manage.scss
index f3a4a373..0340d2be 100644
--- a/src/css/manage.scss
+++ b/src/css/manage.scss
@@ -10,7 +10,7 @@
 @use 'common/direction';
 @use 'common/select';
 @use 'manage/cloud';
-
+ 
 .column-name,
 .column-type {
 	.dashicons {
@@ -23,6 +23,17 @@
 	.dashicons-clock {
 		vertical-align: middle;
 	}
+
+	.dashicons-lock {
+		color: #646970;
+		margin-inline-start: 4px;
+		opacity: 0.7;
+		cursor: help;
+
+		&:hover {
+			opacity: 1;
+		}
+	}
 }
 
 .active-snippet .column-name > .snippet-name {
@@ -91,6 +102,14 @@
 		color: #ddd;
 		position: relative;
 		inset-inline-start: 0;
+
+		.delete {
+			&.disabled {
+				color: #a7aaad;
+				cursor: not-allowed;
+				pointer-events: none;
+			}
+		}
 	}
 
 	.column-activate {
@@ -128,7 +147,7 @@
 	}
 
 	&, #all-snippets-table, #search-snippets-table {
-		a.delete:hover {
+		a.delete:not(.disabled):hover {
 			border-block-end: 1px solid #f00;
 			color: #f00;
 		}
@@ -212,4 +231,4 @@ td.column-description {
 			display: none;
 		}
 	}
-}
+}
\ No newline at end of file
diff --git a/src/js/components/EditorSidebar/EditorSidebar.tsx b/src/js/components/EditorSidebar/EditorSidebar.tsx
index f9808cd4..8b09f767 100644
--- a/src/js/components/EditorSidebar/EditorSidebar.tsx
+++ b/src/js/components/EditorSidebar/EditorSidebar.tsx
@@ -12,6 +12,7 @@ import { MultisiteSharingSettings } from './controls/MultisiteSharingSettings'
 import { ExportButtons } from './actions/ExportButtons'
 import { SubmitButtons } from './actions/SubmitButtons'
 import { ActivationSwitch } from './controls/ActivationSwitch'
+import { LockControl } from './controls/LockControl'
 import { DeleteButton } from './actions/DeleteButton'
 import { PriorityInput } from './controls/PriorityInput'
 import { RTLControl } from './controls/RTLControl'
@@ -29,6 +30,8 @@ export const EditorSidebar: React.FC<EditorSidebarProps> = ({ setIsUpgradeDialog
 			<div className="box">
 				{snippet.id && !isCondition(snippet) ? <ActivationSwitch /> : null}
 
+				{snippet.id ? <LockControl /> : null}
+
 				{isNetworkAdmin() ? <MultisiteSharingSettings /> : null}
 
 				{isRTL() ? <RTLControl /> : null}
@@ -53,4 +56,4 @@ export const EditorSidebar: React.FC<EditorSidebarProps> = ({ setIsUpgradeDialog
 			<Notices />
 		</div>
 	)
-}
+}
\ No newline at end of file
diff --git a/src/js/components/EditorSidebar/actions/DeleteButton.tsx b/src/js/components/EditorSidebar/actions/DeleteButton.tsx
index 7d584e58..38c20f7b 100644
--- a/src/js/components/EditorSidebar/actions/DeleteButton.tsx
+++ b/src/js/components/EditorSidebar/actions/DeleteButton.tsx
@@ -16,7 +16,7 @@ export const DeleteButton: React.FC = () => {
 			<Button
 				id="delete-snippet"
 				className="delete-button"
-				disabled={isWorking}
+				disabled={isWorking || snippet.locked}
 				onClick={() => {
 					setIsDialogOpen(true)
 				}}
@@ -49,4 +49,4 @@ export const DeleteButton: React.FC = () => {
 			</ConfirmDialog>
 		</>
 	)
-}
+}
\ No newline at end of file
diff --git a/src/js/components/EditorSidebar/controls/LockControl.tsx b/src/js/components/EditorSidebar/controls/LockControl.tsx
new file mode 100644
index 00000000..7f9e0114
--- /dev/null
+++ b/src/js/components/EditorSidebar/controls/LockControl.tsx
@@ -0,0 +1,52 @@
+import React from 'react'
+import { __ } from '@wordpress/i18n'
+import { useSnippetForm } from '../../../hooks/useSnippetForm'
+import { SubmitSnippetAction, useSubmitSnippet } from '../../../hooks/useSubmitSnippet'
+import { handleUnknownError } from '../../../utils/errors'
+
+export const LockControl: React.FC = () => {
+	const { snippet, setSnippet, isWorking } = useSnippetForm()
+	const { submitSnippet } = useSubmitSnippet()
+
+	const handleToggle = () => {
+		const newLockedStatus = !snippet.locked
+		
+		// Create the updated snippet object immediately
+		const updatedSnippet = { 
+			...snippet, 
+			locked: newLockedStatus 
+		}
+
+		// Update local state for immediate UI response
+		setSnippet(updatedSnippet)
+
+		// Submit to the server using the override to prevent stale state issues
+		submitSnippet(SubmitSnippetAction.SAVE, updatedSnippet)
+			.then(() => undefined)
+			.catch(handleUnknownError)
+	}
+
+	return (
+		<div className="inline-form-field lock-control-container">
+			<h4>{__('Lock Snippet', 'code-snippets')}</h4>
+
+			<label>
+				{snippet.locked
+					? __('Locked', 'code-snippets')
+					: __('Unlocked', 'code-snippets')}
+
+				<input
+					id="snippet-lock"
+					type="checkbox"
+					checked={snippet.locked}
+					disabled={isWorking}
+					className="switch"
+					onChange={handleToggle}
+				/>
+			</label>
+			<p className="description">
+				{__('Prevent accidental changes or deletion.', 'code-snippets')}
+			</p>
+		</div>
+	)
+}
\ No newline at end of file
diff --git a/src/js/hooks/useSnippetForm.tsx b/src/js/hooks/useSnippetForm.tsx
index 458b9f39..b96b8571 100644
--- a/src/js/hooks/useSnippetForm.tsx
+++ b/src/js/hooks/useSnippetForm.tsx
@@ -34,7 +34,10 @@ export const WithSnippetFormContext: React.FC<WithSnippetFormContextProps> = ({
 	const [currentNotice, setCurrentNotice] = useState<ScreenNotice>()
 	const [codeEditorInstance, setCodeEditorInstance] = useState<CodeEditorInstance>()
 
-	const isReadOnly = useMemo(() => !isLicensed() && isProSnippet({ scope: snippet.scope }), [snippet.scope])
+	const isReadOnly = useMemo(
+		() => snippet.locked || (!isLicensed() && isProSnippet({ scope: snippet.scope })),
+		[snippet.locked, snippet.scope]
+	)
 
 	const handleRequestError = useCallback((error: unknown, message?: string) => {
 		console.error('Request failed', error)
@@ -66,4 +69,4 @@ export const WithSnippetFormContext: React.FC<WithSnippetFormContextProps> = ({
 	}
 
 	return <SnippetFormContext.Provider value={value}>{children}</SnippetFormContext.Provider>
-}
+}
\ No newline at end of file
diff --git a/src/js/hooks/useSubmitSnippet.ts b/src/js/hooks/useSubmitSnippet.ts
index 2dc3530a..2c6b1811 100644
--- a/src/js/hooks/useSubmitSnippet.ts
+++ b/src/js/hooks/useSubmitSnippet.ts
@@ -76,50 +76,58 @@ const SUBMIT_ACTION_DELTA: Record<SubmitSnippetAction, Partial<Snippet>> = {
 }
 
 export interface UseSubmitSnippet {
-	submitSnippet: (action?: SubmitSnippetAction) => Promise<Snippet | undefined>
+	submitSnippet: (action?: SubmitSnippetAction, snippetOverride?: Snippet) => Promise<Snippet | undefined>
 }
 
 export const useSubmitSnippet = (): UseSubmitSnippet => {
 	const { snippetsAPI } = useRestAPI()
 	const { setIsWorking, setCurrentNotice, snippet, setSnippet } = useSnippetForm()
 
-	const submitSnippet = useCallback(async (action: SubmitSnippetAction = SubmitSnippetAction.SAVE) => {
+	const submitSnippet = useCallback(async (
+		action: SubmitSnippetAction = SubmitSnippetAction.SAVE,
+		snippetOverride?: Snippet
+	) => {
 		setCurrentNotice(undefined)
+		setIsWorking(true)
+
+		// Use the override if provided (prevents stale state issues), otherwise use current context state
+		const activeSnippet = snippetOverride ?? snippet
 
 		const result = await (async (): Promise<Snippet | string | undefined> => {
 			try {
-				const request: Snippet = { ...snippet, ...SUBMIT_ACTION_DELTA[action] }
+				const request: Snippet = { ...activeSnippet, ...SUBMIT_ACTION_DELTA[action] }
 				const response = await (0 === request.id ? snippetsAPI.create(request) : snippetsAPI.update(request))
-				setIsWorking(false)
 				return response.id ? response : undefined
 			} catch (error) {
-				setIsWorking(false)
 				return isAxiosError(error) ? error.message : undefined
+			} finally {
+				setIsWorking(false)
 			}
 		})()
 
-		const messages = isCondition(snippet) ? conditionMessages : snippetMessages
+		const messages = isCondition(activeSnippet) ? conditionMessages : snippetMessages
 
 		if (undefined === result || 'string' === typeof result) {
 			const message = [
-				snippet.id ? messages.failedUpdate : messages.failedCreate,
+				activeSnippet.id ? messages.failedUpdate : messages.failedCreate,
 				result ?? __('The server did not send a valid response.', 'code-snippets')
 			]
 
 			setCurrentNotice(['error', message.filter(Boolean).join(' ')])
 			return undefined
 		} else {
-			setSnippet(createSnippetObject(result))
-			setCurrentNotice(['updated', getSuccessNotice(snippet, result, action)])
+			const updatedSnippet = createSnippetObject(result)
+			setSnippet(updatedSnippet)
+			setCurrentNotice(['updated', getSuccessNotice(activeSnippet, updatedSnippet, action)])
 
-			if (snippet.id && result.id) {
+			if (activeSnippet.id && updatedSnippet.id) {
 				window.document.title = window.document.title.replace(snippetMessages.addNew, messages.edit)
-				window.history.replaceState({}, '', addQueryArgs(window.CODE_SNIPPETS?.urls.edit, { id: result.id }))
+				window.history.replaceState({}, '', addQueryArgs(window.CODE_SNIPPETS?.urls.edit, { id: updatedSnippet.id }))
 			}
 
-			return result
+			return updatedSnippet
 		}
 	}, [snippetsAPI, setIsWorking, setCurrentNotice, snippet, setSnippet])
 
 	return { submitSnippet }
-}
+}
\ No newline at end of file
diff --git a/src/js/types/Snippet.ts b/src/js/types/Snippet.ts
index dfdec93f..6ea8e2d7 100644
--- a/src/js/types/Snippet.ts
+++ b/src/js/types/Snippet.ts
@@ -7,6 +7,7 @@ export interface Snippet {
 	readonly scope: SnippetScope
 	readonly priority: number
 	readonly active: boolean
+	readonly locked: boolean
 	readonly network: boolean
 	readonly shared_network?: boolean | null
 	readonly modified?: string
@@ -26,4 +27,4 @@ export const SNIPPET_TYPE_SCOPES = <const> {
 	css: ['admin-css', 'site-css'],
 	js: ['site-head-js', 'site-footer-js'],
 	cond: ['condition']
-}
+}
\ No newline at end of file
diff --git a/src/js/types/schema/SnippetSchema.ts b/src/js/types/schema/SnippetSchema.ts
index a765bf8e..fd7bcc11 100644
--- a/src/js/types/schema/SnippetSchema.ts
+++ b/src/js/types/schema/SnippetSchema.ts
@@ -8,6 +8,7 @@ export interface WritableSnippetSchema {
 	scope?: SnippetScope
 	condition_id?: number
 	active?: boolean
+	locked?: boolean
 	priority?: number
 	network?: boolean | null
 	shared_network?: boolean | null
@@ -17,4 +18,4 @@ export interface SnippetSchema extends Readonly<Required<WritableSnippetSchema>>
 	readonly id: number
 	readonly modified: string
 	readonly code_error?: readonly [string, number] | null
-}
+}
\ No newline at end of file
diff --git a/src/js/utils/snippets/api.ts b/src/js/utils/snippets/api.ts
index 64bfb155..7fab1ca6 100644
--- a/src/js/utils/snippets/api.ts
+++ b/src/js/utils/snippets/api.ts
@@ -34,6 +34,7 @@ const mapToSchema = ({
 	scope,
 	priority,
 	active,
+	locked,
 	network,
 	shared_network,
 	conditionId
@@ -45,6 +46,7 @@ const mapToSchema = ({
 	scope,
 	priority,
 	active,
+	locked,
 	network,
 	shared_network,
 	condition_id: conditionId
@@ -89,4 +91,4 @@ export const buildSnippetsAPI = ({ get, post, del, put }: RestAPI): SnippetsAPI
 
 	detach: snippet =>
 		put(buildURL(snippet, 'detach'))
-})
+})
\ No newline at end of file
diff --git a/src/js/utils/snippets/objects.ts b/src/js/utils/snippets/objects.ts
index f542ab64..27e8efe6 100644
--- a/src/js/utils/snippets/objects.ts
+++ b/src/js/utils/snippets/objects.ts
@@ -10,6 +10,7 @@ const defaults: Omit<Snippet, 'tags'> = {
 	scope: 'global',
 	modified: '',
 	active: false,
+	locked: false,
 	network: isNetworkAdmin(),
 	shared_network: null,
 	priority: 10,
@@ -43,9 +44,10 @@ export const parseSnippetObject = (fields: unknown): Snippet => {
 		...'scope' in fields && isValidScope(fields.scope) && { scope: fields.scope },
 		...'modified' in fields && 'string' === typeof fields.modified && { modified: fields.modified },
 		...'active' in fields && 'boolean' === typeof fields.active && { active: fields.active },
+		...'locked' in fields && 'boolean' === typeof fields.locked && { locked: fields.locked },
 		...'network' in fields && 'boolean' === typeof fields.network && { network: fields.network },
 		...'shared_network' in fields && 'boolean' === typeof fields.shared_network && { shared_network: fields.shared_network },
 		...'priority' in fields && 'number' === typeof fields.priority && { priority: fields.priority },
 		...'condition_id' in fields && isAbsInt(fields.condition_id) && { conditionId: fields.condition_id }
 	}
-}
+}
\ No newline at end of file
diff --git a/src/php/class-db.php b/src/php/class-db.php
index 84ab399c..d6f3c364 100644
--- a/src/php/class-db.php
+++ b/src/php/class-db.php
@@ -177,6 +177,7 @@ public static function create_table( string $table_name ): bool {
 				condition_id BIGINT(20)   NOT NULL DEFAULT 0,
 				priority     SMALLINT     NOT NULL DEFAULT 10,
 				active       TINYINT(1)   NOT NULL DEFAULT 0,
+				locked       TINYINT(1)   NOT NULL DEFAULT 0,
 				modified     DATETIME     NOT NULL DEFAULT CURRENT_TIMESTAMP,
 				revision     BIGINT(20)   NOT NULL DEFAULT 1,
 				cloud_id     VARCHAR(255) NULL,
@@ -228,7 +229,7 @@ private static function fetch_snippets_from_table( string $table_name, array $sc
 		$snippets = $wpdb->get_results(
 			$wpdb->prepare(
 				"
-				SELECT id, code, scope, active, priority
+				SELECT id, code, scope, active, locked, priority
 				FROM $table_name
 				WHERE scope IN ($scopes_format) $extra_where
 				ORDER BY priority, id",
@@ -293,6 +294,7 @@ static function ( $a, $b ) use ( $comparisons ) {
 	 *     table: string,
 	 *     network: bool,
 	 *     priority: int,
+	 *     locked: bool,
 	 * } List of active snippets.
 	 */
 	public function fetch_active_snippets( array $scopes ): array {
@@ -309,6 +311,7 @@ public function fetch_active_snippets( array $scopes ): array {
 					'table'    => $this->table,
 					'network'  => false,
 					'priority' => intval( $snippet['priority'] ),
+					'locked'   => (bool) $snippet['locked'],
 				];
 			}
 		}
@@ -337,6 +340,7 @@ public function fetch_active_snippets( array $scopes ): array {
 						'table'    => $this->ms_table,
 						'network'  => true,
 						'priority' => intval( $snippet['priority'] ),
+						'locked'   => (bool) $snippet['locked'],
 					];
 				}
 
@@ -346,4 +350,4 @@ public function fetch_active_snippets( array $scopes ): array {
 
 		return $active_snippets;
 	}
-}
+}
\ No newline at end of file
diff --git a/src/php/class-list-table.php b/src/php/class-list-table.php
index 41ed1379..d91b080c 100644
--- a/src/php/class-list-table.php
+++ b/src/php/class-list-table.php
@@ -302,11 +302,14 @@ private function get_snippet_action_links( Snippet $snippet ): array {
 				$actions[ $action ] = sprintf( '<a href="%s">%s</a>', esc_url( $this->get_action_link( $action, $snippet ) ), $label );
 			}
 
-			$actions['delete'] = sprintf(
-				'<a href="%2$s" class="delete">%1$s</a>',
-				esc_html__( 'Trash', 'code-snippets' ),
-				esc_url( $this->get_action_link( 'delete', $snippet ) )
-			);
+			// Do not allow trashing/deleting locked snippets.
+			if ( ! $snippet->locked ) {
+				$actions['delete'] = sprintf(
+					'<a href="%2$s" class="delete">%1$s</a>',
+					esc_html__( 'Trash', 'code-snippets' ),
+					esc_url( $this->get_action_link( 'delete', $snippet ) )
+				);
+			}
 		}
 
 		return apply_filters( 'code_snippets/list_table/row_actions', $actions, $snippet );
@@ -390,7 +393,7 @@ protected function column_name( Snippet $snippet ): string {
 			apply_filters( 'code_snippets/list_table/row_actions_always_visible', true )
 		);
 
-		$out = esc_html( $snippet->display_name );
+		$display_name = esc_html( $snippet->display_name );
 		$user_can_manage_network = current_user_can( code_snippets()->get_network_cap_name() );
 
 		// Add a link to the snippet if it isn't an unreadable network-only snippet and isn't trashed.
@@ -398,16 +401,37 @@ protected function column_name( Snippet $snippet ): string {
 			$out = sprintf(
 				'<a href="%s" class="snippet-name">%s</a>',
 				esc_attr( code_snippets()->get_snippet_edit_url( $snippet->id, $snippet->network ? 'network' : 'admin' ) ),
-				$out
+				$display_name
 			);
 		} else {
-			$out = sprintf( '<span class="snippet-name">%s</span>', $out );
+			$out = sprintf( '<span class="snippet-name">%s</span>', $display_name );
 		}
 
 		$out = apply_filters( 'code_snippets/list_table/column_name', $out, $snippet );
 		return $out . $row_actions;
 	}
 
+	/**
+	 * Render the dedicated Locked column.
+	 *
+	 * @param Snippet $snippet Snippet object.
+	 *
+	 * @return string Column output.
+	 */
+	protected function column_locked( Snippet $snippet ): string {
+		if ( $snippet->locked ) {
+			return sprintf(
+				'<span class="dashicons dashicons-yes" style="color: #2271b1;" title="%s"></span>',
+				esc_attr__( 'This snippet is locked.', 'code-snippets' )
+			);
+		}
+
+		return sprintf(
+			'<span class="dashicons dashicons-no-alt" style="color: #646970; opacity: 0.5;" title="%s"></span>',
+			esc_attr__( 'This snippet is unlocked.', 'code-snippets' )
+		);
+	}
+
 	/**
 	 * Handles the checkbox column output.
 	 *
@@ -474,6 +498,7 @@ public function get_columns(): array {
 			'cb'          => '<input type="checkbox">',
 			'activate'    => '',
 			'name'        => __( 'Name', 'code-snippets' ),
+			'locked'      => __( 'Locked', 'code-snippets' ),
 			'type'        => __( 'Type', 'code-snippets' ),
 			'description' => __( 'Description', 'code-snippets' ),
 			'tags'        => __( 'Tags', 'code-snippets' ),
@@ -507,6 +532,7 @@ public function get_sortable_columns(): array {
 		$sortable_columns = [
 			'id'       => [ 'id', true ],
 			'name'     => 'name',
+			'locked'   => 'locked',
 			'type'     => [ 'type', true ],
 			'date'     => [ 'modified', true ],
 			'priority' => [ 'priority', true ],
@@ -1315,7 +1341,7 @@ private function set_order_vars() {
 			$this->order_by = sanitize_key( wp_unslash( $_REQUEST['orderby'] ) );
 		} else {
 			// otherwise, fetch the order from the setting, ensuring it is valid.
-			$valid_fields = [ 'id', 'name', 'type', 'modified', 'priority' ];
+			$valid_fields = [ 'id', 'name', 'locked', 'type', 'modified', 'priority' ];
 			$order_parts = explode( '-', $order, 2 );
 
 			$this->order_by = in_array( $order_parts[0], $valid_fields, true ) ? $order_parts[0] :
@@ -1515,4 +1541,4 @@ private function clone_snippets( array $ids ) {
 			save_snippet( $snippet );
 		}
 	}
-}
+}
\ No newline at end of file
diff --git a/src/php/class-snippet.php b/src/php/class-snippet.php
index dc3c6a95..176667af 100644
--- a/src/php/class-snippet.php
+++ b/src/php/class-snippet.php
@@ -21,6 +21,7 @@
  * @property int                    $condition_id       ID of the condition this snippet is linked to.
  * @property int                    $priority           Execution priority.
  * @property bool                   $active             The active status.
+ * @property bool                   $locked             Whether the snippet is locked from modification or deletion.
  * @property bool                   $network            true if is multisite-wide snippet, false if site-wide.
  * @property bool                   $shared_network     Whether the snippet is a shared network snippet.
  * @property string                 $modified           The date and time when the snippet data was most recently saved to the database.
@@ -78,6 +79,7 @@ public function __construct( $initial_data = null ) {
 			'scope'          => 'global',
 			'condition_id'   => 0,
 			'active'         => false,
+			'locked'         => false,
 			'priority'       => 10,
 			'network'        => null,
 			'shared_network' => null,
@@ -144,6 +146,9 @@ protected function prepare_field( $value, string $field ) {
 			case 'active':
 				return ( is_bool( $value ) ? $value : (bool) $value ) && ! $this->is_condition() && (int) $value != -1;
 
+			case 'locked':
+				return is_bool( $value ) ? $value : (bool) $value;
+
 			default:
 				return $value;
 		}
@@ -485,4 +490,4 @@ private function get_is_pro(): bool {
 	public function increment_revision() {
 		++$this->revision;
 	}
-}
+}
\ No newline at end of file
diff --git a/src/php/rest-api/class-snippets-rest-controller.php b/src/php/rest-api/class-snippets-rest-controller.php
index bf37e60b..ff0e7050 100644
--- a/src/php/rest-api/class-snippets-rest-controller.php
+++ b/src/php/rest-api/class-snippets-rest-controller.php
@@ -586,6 +586,10 @@ public function get_item_schema(): array {
 					'description' => esc_html__( 'Snippet activation status.', 'code-snippets' ),
 					'type'        => 'boolean',
 				],
+				'locked'         => [
+					'description' => esc_html__( 'Whether the snippet is locked from modification or deletion.', 'code-snippets' ),
+					'type'        => 'boolean',
+				],
 				'priority'       => [
 					'description' => esc_html__( 'Relative priority in which the snippet is executed.', 'code-snippets' ),
 					'type'        => 'integer',
@@ -615,4 +619,4 @@ public function get_item_schema(): array {
 
 		return $this->schema;
 	}
-}
+}
\ No newline at end of file
diff --git a/src/php/snippet-ops.php b/src/php/snippet-ops.php
index cfd66191..99d4a537 100644
--- a/src/php/snippet-ops.php
+++ b/src/php/snippet-ops.php
@@ -438,6 +438,11 @@ function delete_snippet( int $id, ?bool $network = null ): bool {
 
 	$snippet = get_snippet( $id, $network );
 
+	// Prevent deletion of locked snippets.
+	if ( $snippet->locked ) {
+		return false;
+	}
+
 	$result = $wpdb->delete(
 		$table,
 		array( 'id' => $id ),
@@ -471,6 +476,11 @@ function trash_snippet( int $id, ?bool $network = null ): bool {
 
 	$snippet = get_snippet( $id, $network );
 
+	// Prevent trashing of locked snippets.
+	if ( $snippet->locked ) {
+		return false;
+	}
+
 	$result = $wpdb->update(
 		$table,
 		array( 'active' => '-1' ),
@@ -567,6 +577,18 @@ function save_snippet( $snippet ) {
 		$snippet = new Snippet( $snippet );
 	}
 
+	// Prevent modification of locked snippets (allow unlocking itself).
+	if ( 0 !== $snippet->id ) {
+		$old_snippet = get_snippet( $snippet->id, $snippet->network );
+
+		if ( $old_snippet->locked && $snippet->locked ) {
+			// If it was locked and the new request still wants it locked,
+			// prevent changes to sensitive fields (code and name).
+			$snippet->code = $old_snippet->code;
+			$snippet->name = $old_snippet->name;
+		}
+	}
+
 	// Update the last modification date if necessary.
 	$snippet->update_modified();
 
@@ -603,6 +625,7 @@ function save_snippet( $snippet ) {
 		'condition_id' => intval( $snippet->condition_id ),
 		'priority'     => $snippet->priority,
 		'active'       => intval( $snippet->active ),
+		'locked'       => intval( $snippet->locked ),
 		'modified'     => $snippet->modified,
 		'revision'     => $snippet->revision,
 		'cloud_id'     => $snippet->cloud_id ? $snippet->cloud_id : null,
@@ -768,4 +791,4 @@ function execute_snippet_from_flat_file( $code, $file, int $id = 0, bool $force
 	do_action( 'code_snippets/after_execute_snippet_from_flat_file', $file, $id );
 
 	return $result ?? null;
-}
+}
\ No newline at end of file

From 34405082122daa0f089022f83bda8780635e830f Mon Sep 17 00:00:00 2001
From: mgiannopoulos24 <79588074+mgiannopoulos24@users.noreply.github.com>
Date: Thu, 18 Dec 2025 20:55:59 +0200
Subject: [PATCH 2/6] Implement Snippet Lock Feature to Prevent Accidental
 Deletion and Modification

---
 src/php/class-db.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/php/class-db.php b/src/php/class-db.php
index a37baa0f..d7686c6a 100644
--- a/src/php/class-db.php
+++ b/src/php/class-db.php
@@ -355,7 +355,7 @@ private static function fetch_snippets_from_table( string $table_name, array $sc
 		$snippets = $wpdb->get_results(
 			$wpdb->prepare(
 				"
-				SELECT id, code, scope, active, priority
+				SELECT id, code, scope, active, locked, priority
 				FROM $table_name
 				WHERE scope IN ($scopes_format) $extra_where
 				ORDER BY priority, id",
@@ -372,4 +372,4 @@ private static function fetch_snippets_from_table( string $table_name, array $sc
 
 		return false;
 	}
-}
\ No newline at end of file
+}

From 098958d617ac744bf2c47e01f623bc45e9c7493c Mon Sep 17 00:00:00 2001
From: mgiannopoulos24 <79588074+mgiannopoulos24@users.noreply.github.com>
Date: Mon, 22 Dec 2025 21:00:58 +0200
Subject: [PATCH 3/6] Use wp_options

---
 src/php/snippet-ops.php | 99 ++++++++++++++++++++++++++++++++++++++---
 1 file changed, 94 insertions(+), 5 deletions(-)

diff --git a/src/php/snippet-ops.php b/src/php/snippet-ops.php
index 99d4a537..382e921b 100644
--- a/src/php/snippet-ops.php
+++ b/src/php/snippet-ops.php
@@ -11,6 +11,59 @@
 use function Code_Snippets\Settings\get_self_option;
 use function Code_Snippets\Settings\update_self_option;
 
+/**
+ * Get the locked status for a snippet from wp_options.
+ *
+ * @param int       $snippet_id Snippet ID.
+ * @param bool|null $network    Whether the snippet is network-wide (true) or site-wide (false).
+ *
+ * @return bool Whether the snippet is locked.
+ */
+function get_snippet_locked( int $snippet_id, ?bool $network = null ): bool {
+	$network = DB::validate_network_param( $network );
+	$option_name = 'code_snippets_locked';
+	
+	if ( $network && is_multisite() ) {
+		$locked_snippets = get_site_option( $option_name, array() );
+	} else {
+		$locked_snippets = get_option( $option_name, array() );
+	}
+	
+	return isset( $locked_snippets[ $snippet_id ] ) && $locked_snippets[ $snippet_id ];
+}
+
+/**
+ * Set the locked status for a snippet in wp_options.
+ *
+ * @param int       $snippet_id Snippet ID.
+ * @param bool       $locked     Whether the snippet should be locked.
+ * @param bool|null  $network    Whether the snippet is network-wide (true) or site-wide (false).
+ *
+ * @return void
+ */
+function set_snippet_locked( int $snippet_id, bool $locked, ?bool $network = null ): void {
+	$network = DB::validate_network_param( $network );
+	$option_name = 'code_snippets_locked';
+	
+	if ( $network && is_multisite() ) {
+		$locked_snippets = get_site_option( $option_name, array() );
+	} else {
+		$locked_snippets = get_option( $option_name, array() );
+	}
+
+	if ( $locked ) {
+		$locked_snippets[ $snippet_id ] = true;
+	} else {
+		unset( $locked_snippets[ $snippet_id ] );
+	}
+
+	if ( $network && is_multisite() ) {
+		update_site_option( $option_name, $locked_snippets );
+	} else {
+		update_option( $option_name, $locked_snippets );
+	}
+}
+
 /**
  * Clean the cache where active snippets are stored.
  *
@@ -77,7 +130,12 @@ function get_snippets( array $ids = array(), ?bool $network = null ): array {
 			array_map(
 				function ( $snippet_data ) use ( $network ) {
 					$snippet_data['network'] = $network;
-					return new Snippet( $snippet_data );
+					$snippet = new Snippet( $snippet_data );
+					// Load locked from wp_options.
+					if ( $snippet->id > 0 ) {
+						$snippet->locked = get_snippet_locked( $snippet->id, $network );
+					}
+					return $snippet;
 				},
 				$results
 			) :
@@ -207,6 +265,12 @@ function get_snippet( int $id = 0, ?bool $network = null ): Snippet {
 	}
 
 	$snippet->network = $network;
+
+	// Load locked from wp_options if snippet has an ID.
+	if ( $snippet->id > 0 ) {
+		$snippet->locked = get_snippet_locked( $snippet->id, $network );
+	}
+
 	return apply_filters( 'code_snippets/get_snippet', $snippet, $id, $network );
 }
 
@@ -615,7 +679,7 @@ function save_snippet( $snippet ) {
 	// Shared network snippets are always considered inactive.
 	$snippet->active = $snippet->active && ! $snippet->shared_network;
 
-	// Build the list of data to insert.
+	// Build the list of data to insert (excluding locked, which is stored in wp_options).
 	$data = [
 		'name'         => $snippet->name,
 		'description'  => $snippet->desc,
@@ -625,7 +689,6 @@ function save_snippet( $snippet ) {
 		'condition_id' => intval( $snippet->condition_id ),
 		'priority'     => $snippet->priority,
 		'active'       => intval( $snippet->active ),
-		'locked'       => intval( $snippet->locked ),
 		'modified'     => $snippet->modified,
 		'revision'     => $snippet->revision,
 		'cloud_id'     => $snippet->cloud_id ? $snippet->cloud_id : null,
@@ -651,6 +714,11 @@ function save_snippet( $snippet ) {
 		do_action( 'code_snippets/update_snippet', $snippet, $table );
 	}
 
+	// Save locked to wp_options.
+	if ( $snippet->id > 0 ) {
+		set_snippet_locked( $snippet->id, $snippet->locked, $snippet->network );
+	}
+
 	update_shared_network_snippets( [ $snippet ] );
 	clean_snippets_cache( $table );
 	return $snippet;
@@ -727,6 +795,12 @@ function get_snippet_by_cloud_id( string $cloud_id, ?bool $multisite = null ): ?
 	$snippet_data = $wpdb->get_row( $wpdb->prepare( "SELECT * FROM $table_name WHERE cloud_id = %s", $cloud_id ) ); // cache pass, db call ok.
 	$snippet = $snippet_data ? new Snippet( $snippet_data ) : null;
 
+	// Load locked from wp_options if snippet exists.
+	if ( $snippet && $snippet->id > 0 ) {
+		$snippet->network = $multisite;
+		$snippet->locked = get_snippet_locked( $snippet->id, $multisite );
+	}
+
 	return apply_filters( 'code_snippets/get_snippet_by_cloud_id', $snippet, $cloud_id, $multisite );
 }
 
@@ -749,16 +823,31 @@ function update_snippet_fields( int $snippet_id, array $fields, ?bool $network =
 
 	// Validate fields through the snippet class and copy them into a clean array.
 	$clean_fields = array();
+	$locked_value = null;
 
 	foreach ( $fields as $field => $value ) {
+		// Handle locked separately (stored in wp_options).
+		if ( 'locked' === $field ) {
+			if ( $snippet->set_field( $field, $value ) ) {
+				$locked_value = $snippet->$field;
+			}
+			continue;
+		}
 
 		if ( $snippet->set_field( $field, $value ) ) {
 			$clean_fields[ $field ] = $snippet->$field;
 		}
 	}
 
-	// Update the snippet in the database.
-	$wpdb->update( $table, $clean_fields, array( 'id' => $snippet->id ), null, array( '%d' ) );
+	// Update the snippet in the database (excluding locked).
+	if ( ! empty( $clean_fields ) ) {
+		$wpdb->update( $table, $clean_fields, array( 'id' => $snippet->id ), null, array( '%d' ) );
+	}
+
+	// Save locked to wp_options if it was provided.
+	if ( null !== $locked_value ) {
+		set_snippet_locked( $snippet->id, $locked_value, $network );
+	}
 
 	do_action( 'code_snippets/update_snippet', $snippet->id, $table );
 	clean_snippets_cache( $table );

From 83589a45e6f01e83c58393cd1d29599bd58c074c Mon Sep 17 00:00:00 2001
From: mgiannopoulos24 <79588074+mgiannopoulos24@users.noreply.github.com>
Date: Mon, 22 Dec 2025 21:05:29 +0200
Subject: [PATCH 4/6] Remove 'locked' column from database query

---
 src/php/class-db.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/php/class-db.php b/src/php/class-db.php
index d7686c6a..3fa60794 100644
--- a/src/php/class-db.php
+++ b/src/php/class-db.php
@@ -355,7 +355,7 @@ private static function fetch_snippets_from_table( string $table_name, array $sc
 		$snippets = $wpdb->get_results(
 			$wpdb->prepare(
 				"
-				SELECT id, code, scope, active, locked, priority
+				SELECT id, code, scope, active, priority
 				FROM $table_name
 				WHERE scope IN ($scopes_format) $extra_where
 				ORDER BY priority, id",

From 67dcb6e3fe9372e2e36ebe303ecaac52acebec8a Mon Sep 17 00:00:00 2001
From: mgiannopoulos24 <79588074+mgiannopoulos24@users.noreply.github.com>
Date: Mon, 22 Dec 2025 21:07:16 +0200
Subject: [PATCH 5/6] Remove locked property

---
 src/php/class-db.php | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/src/php/class-db.php b/src/php/class-db.php
index 3fa60794..071d7579 100644
--- a/src/php/class-db.php
+++ b/src/php/class-db.php
@@ -177,7 +177,6 @@ public static function create_table( string $table_name ): bool {
 				condition_id BIGINT(20)   NOT NULL DEFAULT 0,
 				priority     SMALLINT     NOT NULL DEFAULT 10,
 				active       TINYINT(1)   NOT NULL DEFAULT 0,
-				locked       TINYINT(1)   NOT NULL DEFAULT 0,
 				modified     DATETIME     NOT NULL DEFAULT CURRENT_TIMESTAMP,
 				revision     BIGINT(20)   NOT NULL DEFAULT 1,
 				cloud_id     VARCHAR(255) NULL,
@@ -352,7 +351,7 @@ private static function fetch_snippets_from_table( string $table_name, array $sc
 		$scopes_format = implode( ',', array_fill( 0, count( $scopes ), '%s' ) );
 		$extra_where = $active_only ? 'AND active=1' : '';
 
-		$snippets = $wpdb->get_results(
+			$snippets = $wpdb->get_results(
 			$wpdb->prepare(
 				"
 				SELECT id, code, scope, active, priority

From a028a30f5802d419ebbd8be75b3fce3baa61b1e5 Mon Sep 17 00:00:00 2001
From: mgiannopoulos24 <79588074+mgiannopoulos24@users.noreply.github.com>
Date: Mon, 22 Dec 2025 21:08:58 +0200
Subject: [PATCH 6/6] Fix indentation in get_results call

---
 src/php/class-db.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/php/class-db.php b/src/php/class-db.php
index 071d7579..4254dc51 100644
--- a/src/php/class-db.php
+++ b/src/php/class-db.php
@@ -351,7 +351,7 @@ private static function fetch_snippets_from_table( string $table_name, array $sc
 		$scopes_format = implode( ',', array_fill( 0, count( $scopes ), '%s' ) );
 		$extra_where = $active_only ? 'AND active=1' : '';
 
-			$snippets = $wpdb->get_results(
+		$snippets = $wpdb->get_results(
 			$wpdb->prepare(
 				"
 				SELECT id, code, scope, active, priority