From adaf0fbb5bcfe14a024ceb96a574bfd8a4ca0f64 Mon Sep 17 00:00:00 2001
From: John Blackbourn <john@johnblackbourn.com>
Date: Fri, 19 Sep 2025 18:05:19 +0100
Subject: [PATCH 1/5] Introduce support for a `CRONTROL_DISALLOW_URL_EVENTS`
 constant.

---
 phpstan.neon.dist |  1 +
 src/bootstrap.php | 30 ++++++++++++++++++++++++++++++
 2 files changed, 31 insertions(+)

diff --git a/phpstan.neon.dist b/phpstan.neon.dist
index 2c680c57..4f3747db 100644
--- a/phpstan.neon.dist
+++ b/phpstan.neon.dist
@@ -16,6 +16,7 @@ parameters:
 		- tests/phpstan/stubs.php
 	dynamicConstantNames:
 		- CRONTROL_DISALLOW_PHP_EVENTS
+		- CRONTROL_DISALLOW_URL_EVENTS
 	WPCompat:
 		pluginFile: wp-crontrol.php
 	ignoreErrors:
diff --git a/src/bootstrap.php b/src/bootstrap.php
index fd69bdff..6a4c05ff 100644
--- a/src/bootstrap.php
+++ b/src/bootstrap.php
@@ -2657,6 +2657,11 @@ function json_output( $input, $pretty = true ) {
 /**
  * Fetches the URL in a URL cron event using the HTTP API.
  *
+ * If the `CRONTROL_DISALLOW_URL_EVENTS` constant is defined and set to `true` then URL cron events will be disabled
+ * completely. Any existing URL cron events will remain in place but their URL will not be fetched, and no URL cron
+ * events can be added, edited, or manually run. Users with permission to edit URL cron events will still be able to
+ * delete these events.
+ *
  * The URL that's saved in a URL cron event is protected with an integrity check which prevents it from being fetched
  * if the URL is tampered with.
  *
@@ -2681,6 +2686,10 @@ function json_output( $input, $pretty = true ) {
  * } $args
  */
 function action_url_cron_event( array $args ): void {
+	if ( ! url_cron_events_enabled() ) {
+		return;
+	}
+
 	list(
 		'url' => $url,
 		'method' => $method,
@@ -2855,3 +2864,24 @@ function php_cron_events_enabled(): bool {
 function current_user_can_manage_php_cron_events(): bool {
 	return ( php_cron_events_enabled() && current_user_can( 'edit_files' ) );
 }
+
+/**
+ * Returns whether URL cron events are enabled.
+ *
+ * The URL cron event functionality can be disabled by defining the `CRONTROL_DISALLOW_URL_EVENTS` constant and setting
+ * its value to `true`. This constant can be defined in the `wp-config.php` file.
+ */
+function url_cron_events_enabled(): bool {
+	if ( defined( 'CRONTROL_DISALLOW_URL_EVENTS' ) && CRONTROL_DISALLOW_URL_EVENTS ) {
+		return false;
+	}
+
+	return true;
+}
+
+/**
+ * Returns whether URL cron events are enabled and can be managed by the current user.
+ */
+function current_user_can_manage_url_cron_events(): bool {
+	return ( url_cron_events_enabled() && current_user_can( 'manage_options' ) );
+}

From 8e36e589a70a84ae4b3136d3f86b811b26f814a2 Mon Sep 17 00:00:00 2001
From: John Blackbourn <john@johnblackbourn.com>
Date: Fri, 19 Sep 2025 18:10:38 +0100
Subject: [PATCH 2/5] Account for disabling URL cron events throughout the
 plugin.

---
 src/bootstrap.php        | 48 +++++++++++++++++++++------
 src/event-list-table.php | 72 ++++++++++++++++++++++++++++++++++++----
 2 files changed, 102 insertions(+), 18 deletions(-)

diff --git a/src/bootstrap.php b/src/bootstrap.php
index 6a4c05ff..c9904ccb 100644
--- a/src/bootstrap.php
+++ b/src/bootstrap.php
@@ -163,6 +163,9 @@ function action_handle_posts() {
 		if ( 'crontrol_cron_job' === $cr->hookname ) {
 			wp_die( esc_html__( 'You are not allowed to add new PHP cron events.', 'wp-crontrol' ), 401 );
 		}
+		if ( 'crontrol_url_cron_job' === $cr->hookname ) {
+			wp_die( esc_html__( 'You are not allowed to add new URL cron events.', 'wp-crontrol' ), 401 );
+		}
 		$args = json_decode( $cr->args, true );
 
 		if ( empty( $args ) || ! is_array( $args ) ) {
@@ -211,8 +214,8 @@ function action_handle_posts() {
 		exit;
 
 	} elseif ( isset( $_POST['crontrol_action'] ) && ( 'new_url_cron' === $_POST['crontrol_action'] ) ) {
-		if ( ! current_user_can( 'manage_options' ) ) {
-			wp_die( esc_html__( 'You are not allowed to add new cron events.', 'wp-crontrol' ), 401 );
+		if ( ! current_user_can_manage_url_cron_events() ) {
+			wp_die( esc_html__( 'You are not allowed to add new URL cron events.', 'wp-crontrol' ), 401 );
 		}
 		check_admin_referer( 'crontrol-new-cron' );
 
@@ -339,6 +342,10 @@ function action_handle_posts() {
 			wp_die( esc_html__( 'You are not allowed to edit PHP cron events.', 'wp-crontrol' ), 401 );
 		}
 
+		if ( 'crontrol_url_cron_job' === $cr->hookname && ! current_user_can_manage_url_cron_events() ) {
+			wp_die( esc_html__( 'You are not allowed to edit URL cron events.', 'wp-crontrol' ), 401 );
+		}
+
 		$args = json_decode( $cr->args, true );
 
 		if ( empty( $args ) || ! is_array( $args ) ) {
@@ -737,10 +744,13 @@ function action_handle_posts() {
 		$deleted = false;
 		check_admin_referer( "crontrol-delete-hook_{$hook}" );
 
-		// Sanity check
+		// Sanity checks
 		if ( 'crontrol_cron_job' === $hook ) {
 			wp_die( esc_html__( 'You are not allowed to delete PHP cron events.', 'wp-crontrol' ), 401 );
 		}
+		if ( 'crontrol_url_cron_job' === $hook ) {
+			wp_die( esc_html__( 'You are not allowed to delete URL cron events.', 'wp-crontrol' ), 401 );
+		}
 
 		$deleted = wp_unschedule_hook( $hook, true );
 
@@ -790,6 +800,10 @@ function action_handle_posts() {
 			wp_die( esc_html__( 'You are not allowed to run cron events.', 'wp-crontrol' ), 401 );
 		}
 
+		if ( ( 'crontrol_url_cron_job' === $hook ) && ! url_cron_events_enabled() ) {
+			wp_die( esc_html__( 'You are not allowed to run cron events.', 'wp-crontrol' ), 401 );
+		}
+
 		$ran = Event\run( $hook, $sig );
 
 		$redirect = array(
@@ -871,7 +885,7 @@ function action_handle_posts() {
 
 		$hook = wp_unslash( $_GET['crontrol_id'] );
 
-		if ( 'crontrol_cron_job' === $hook ) {
+		if ( ( 'crontrol_cron_job' === $hook ) || ( 'crontrol_url_cron_job' === $hook ) ) {
 			wp_die( esc_html__( 'You are not allowed to pause or resume cron events.', 'wp-crontrol' ), 401 );
 		}
 
@@ -1663,7 +1677,15 @@ function show_cron_form( $editing ) {
 	}
 
 	$can_manage_php = current_user_can_manage_php_cron_events();
-	$allowed = ( ! $is_editing_php || $can_manage_php );
+	$can_manage_url = current_user_can_manage_url_cron_events();
+
+	if ( $is_editing_php ) {
+		$allowed = $can_manage_php;
+	} elseif ( $is_editing_url ) {
+		$allowed = $can_manage_url;
+	} else {
+		$allowed = true;
+	}
 	?>
 	<div id="crontrol_form" class="wrap narrow">
 		<?php
@@ -1709,6 +1731,8 @@ function show_cron_form( $editing ) {
 						'<input type="hidden" name="crontrol_action" value="%s"/>',
 						esc_attr( $action )
 					);
+				} elseif ( ! $can_manage_php && ! $can_manage_url ) {
+					echo '<input type="hidden" name="crontrol_action" value="new_cron"/>';
 				} else {
 					?>
 					<tr class="hide-if-no-js">
@@ -1726,12 +1750,14 @@ function show_cron_form( $editing ) {
 										<?php esc_html_e( 'Standard cron event', 'wp-crontrol' ); ?>
 									</label>
 								</p>
-								<p>
-									<label>
-										<input type="radio" name="crontrol_action" value="new_url_cron">
-										<?php esc_html_e( 'URL cron event', 'wp-crontrol' ); ?>
-									</label>
-								</p>
+								<?php if ( $can_manage_url ) { ?>
+									<p>
+										<label>
+											<input type="radio" name="crontrol_action" value="new_url_cron">
+											<?php esc_html_e( 'URL cron event', 'wp-crontrol' ); ?>
+										</label>
+									</p>
+								<?php } ?>
 								<?php if ( $can_manage_php ) { ?>
 									<p>
 										<label>
diff --git a/src/event-list-table.php b/src/event-list-table.php
index a9700561..1b943a32 100644
--- a/src/event-list-table.php
+++ b/src/event-list-table.php
@@ -9,6 +9,7 @@
 use stdClass;
 
 use function Crontrol\php_cron_events_enabled;
+use function Crontrol\url_cron_events_enabled;
 
 require_once ABSPATH . 'wp-admin/includes/class-wp-list-table.php';
 
@@ -30,6 +31,13 @@ class Table extends \WP_List_Table {
 	 */
 	protected static $can_manage_php_crons;
 
+	/**
+	 * Whether the current user has the capability to create or edit URL cron events.
+	 *
+	 * @var bool Whether the user can create or edit URL cron events.
+	 */
+	protected static $can_manage_url_crons;
+
 	/**
 	 * Whether PHP cron events are allowed.
 	 *
@@ -37,6 +45,13 @@ class Table extends \WP_List_Table {
 	 */
 	protected static $php_crons_enabled;
 
+	/**
+	 * Whether URL cron events are allowed.
+	 *
+	 * @var bool Whether URL cron events are allowed.
+	 */
+	protected static $url_crons_enabled;
+
 	/**
 	 * Array of the count of each hook.
 	 *
@@ -71,7 +86,9 @@ public function __construct() {
 	public function prepare_items() {
 		self::$persistent_core_hooks = \Crontrol\get_persistent_core_hooks();
 		self::$can_manage_php_crons  = current_user_can( 'edit_files' );
+		self::$can_manage_url_crons  = current_user_can( 'manage_options' );
 		self::$php_crons_enabled     = php_cron_events_enabled();
+		self::$url_crons_enabled     = url_cron_events_enabled();
 		self::$count_by_hook         = count_by_hook();
 
 		$events = get();
@@ -385,7 +402,11 @@ public function single_row( $event ) {
 			$classes[] = 'crontrol-paused';
 		}
 
-		if ( 'crontrol_cron_job' === $event->hook && ! php_cron_events_enabled() ) {
+		if ( 'crontrol_cron_job' === $event->hook && ! self::$php_crons_enabled ) {
+			$classes[] = 'crontrol-inactive';
+		}
+
+		if ( 'crontrol_url_cron_job' === $event->hook && ! self::$url_crons_enabled ) {
 			$classes[] = 'crontrol-inactive';
 		}
 
@@ -431,8 +452,17 @@ protected function handle_row_actions( $event, $column_name, $primary ) {
 			return $this->row_actions( $links );
 		}
 
-		// PHP cron events can be edited as long as they are enabled and the user has permission.
-		$can_edit = ( 'crontrol_cron_job' !== $event->hook ) || ( self::$can_manage_php_crons && self::$php_crons_enabled );
+		if ( $event->hook === 'crontrol_cron_job' ) {
+			// PHP cron events can be edited as long as they are enabled and the user has permission.
+			$can_edit = ( self::$can_manage_php_crons && self::$php_crons_enabled );
+		} elseif ( $event->hook === 'crontrol_url_cron_job' ) {
+			// URL cron events can be edited as long as they are enabled and the user has permission.
+			$can_edit = ( self::$can_manage_url_crons && self::$url_crons_enabled );
+		} else {
+			// All other cron events can be edited.
+			$can_edit = true;
+		}
+
 		$has_error = self::row_has_error( $event );
 
 		if ( $can_edit ) {
@@ -458,8 +488,16 @@ protected function handle_row_actions( $event, $column_name, $primary ) {
 			);
 		}
 
-		// PHP cron events can be run as long as they are enabled.
-		$can_run = ( ( 'crontrol_cron_job' !== $event->hook ) || self::$php_crons_enabled ) && ! $has_error;
+		if ( $event->hook === 'crontrol_cron_job' ) {
+			// PHP cron events can be run as long as they are enabled.
+			$can_run = ( self::$php_crons_enabled && ! $has_error );
+		} elseif ( $event->hook === 'crontrol_url_cron_job' ) {
+			// URL cron events can be run as long as they are enabled.
+			$can_run = ( self::$url_crons_enabled && ! $has_error );
+		} else {
+			// All other cron events can be run.
+			$can_run = ( ! $has_error );
+		}
 
 		if ( ! is_paused( $event ) && $can_run ) {
 			$link = array(
@@ -625,7 +663,7 @@ protected function column_crontrol_hook( $event ) {
 				$output = esc_html__( 'PHP cron event', 'wp-crontrol' );
 			}
 
-			if ( ! php_cron_events_enabled() ) {
+			if ( ! self::$php_crons_enabled ) {
 				$output .= sprintf(
 					' &mdash; <strong class="status-crontrol-inactive post-state"><span class="dashicons dashicons-controls-pause" aria-hidden="true"></span> %s</strong>',
 					/* translators: State of a cron event, adjective */
@@ -668,6 +706,19 @@ protected function column_crontrol_hook( $event ) {
 				$output = esc_html__( 'URL cron event', 'wp-crontrol' );
 			}
 
+			if ( ! self::$url_crons_enabled ) {
+				$output .= sprintf(
+					' &mdash; <strong class="status-crontrol-inactive post-state"><span class="dashicons dashicons-controls-pause" aria-hidden="true"></span> %s</strong>',
+					/* translators: State of a cron event, adjective */
+					esc_html__( 'Inactive', 'wp-crontrol' )
+				);
+			} elseif ( integrity_failed( $event ) ) {
+				$output .= sprintf(
+					' &mdash; <strong class="status-crontrol-inactive post-state"><span class="dashicons dashicons-warning" aria-hidden="true"></span> %s</strong>',
+					esc_html__( 'Needs checking', 'wp-crontrol' )
+				);
+			}
+
 			if ( isset( $event->args[0]['url_error_message'] ) ) {
 				$output .= '<br><span class="status-crontrol-error"><span class="dashicons dashicons-warning" aria-hidden="true"></span> ';
 				$output .= esc_html( $event->args[0]['url_error_message'] );
@@ -705,13 +756,20 @@ protected function column_crontrol_hook( $event ) {
 	 * @return string The cell output.
 	 */
 	protected function column_crontrol_actions( $event ) {
-		if ( 'crontrol_cron_job' === $event->hook && ! php_cron_events_enabled() ) {
+		if ( 'crontrol_cron_job' === $event->hook && ! self::$php_crons_enabled ) {
 			return sprintf(
 				'<span class="status-crontrol-warning"><span class="dashicons dashicons-warning" aria-hidden="true"></span> %s</span>',
 				esc_html__( 'PHP cron events are disabled.', 'wp-crontrol' )
 			);
 		}
 
+		if ( 'crontrol_url_cron_job' === $event->hook && ! self::$url_crons_enabled ) {
+			return sprintf(
+				'<span class="status-crontrol-warning"><span class="dashicons dashicons-warning" aria-hidden="true"></span> %s</span>',
+				esc_html__( 'URL cron events are disabled.', 'wp-crontrol' )
+			);
+		}
+
 		$hook_callbacks = \Crontrol\get_hook_callbacks( $event->hook );
 
 		if ( 'crontrol_cron_job' === $event->hook || 'crontrol_url_cron_job' === $event->hook ) {

From 9b9286d0e869b9243e9018111bf1703eca1b87c1 Mon Sep 17 00:00:00 2001
From: John Blackbourn <john@johnblackbourn.com>
Date: Fri, 19 Sep 2025 18:16:52 +0100
Subject: [PATCH 3/5] Better handling of URL cron events in CSV exports.

---
 src/bootstrap.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/bootstrap.php b/src/bootstrap.php
index c9904ccb..1e17ca07 100644
--- a/src/bootstrap.php
+++ b/src/bootstrap.php
@@ -969,13 +969,15 @@ function action_handle_posts() {
 
 				if ( 'crontrol_cron_job' === $event->hook ) {
 					$args = __( 'PHP Code', 'wp-crontrol' );
+				} elseif ( 'crontrol_url_cron_job' === $event->hook ) {
+					$args = $event->args[0]['method'] . ' ' . $event->args[0]['url'];
 				} elseif ( empty( $event->args ) ) {
 					$args = '';
 				} else {
 					$args = \Crontrol\json_output( $event->args, false );
 				}
 
-				if ( 'crontrol_cron_job' === $event->hook ) {
+				if ( ( 'crontrol_cron_job' === $event->hook ) || ( 'crontrol_url_cron_job' === $event->hook ) ) {
 					$action = 'WP Crontrol';
 				} else {
 					$callbacks = array();

From b844208b66865c32f879cc7d4830be3a3955f48f Mon Sep 17 00:00:00 2001
From: John Blackbourn <john@johnblackbourn.com>
Date: Fri, 10 Oct 2025 01:27:58 +0100
Subject: [PATCH 4/5] Post merge fixes.

---
 src/bootstrap.php        | 30 +++++++++++++++---------------
 src/event-list-table.php | 20 ++++++++++----------
 2 files changed, 25 insertions(+), 25 deletions(-)

diff --git a/src/bootstrap.php b/src/bootstrap.php
index b502f4d0..c856a8c0 100644
--- a/src/bootstrap.php
+++ b/src/bootstrap.php
@@ -164,8 +164,8 @@ function action_handle_posts() {
 		if ( PHPCronEvent::HOOK_NAME === $cr->hookname ) {
 			wp_die( esc_html__( 'You are not allowed to add new PHP cron events.', 'wp-crontrol' ), 403 );
 		}
-		if ( 'crontrol_url_cron_job' === $cr->hookname ) {
-			wp_die( esc_html__( 'You are not allowed to add new URL cron events.', 'wp-crontrol' ), 401 );
+		if ( URLCronEvent::HOOK_NAME === $cr->hookname ) {
+			wp_die( esc_html__( 'You are not allowed to add new URL cron events.', 'wp-crontrol' ), 403 );
 		}
 		$args = json_decode( $cr->args, true );
 
@@ -265,7 +265,7 @@ function action_handle_posts() {
 			return $event;
 		}, 99 );
 
-		$added = Event\add( $next_run_local, $cr->schedule, 'crontrol_url_cron_job', $args );
+		$added = Event\add( $next_run_local, $cr->schedule, URLCronEvent::HOOK_NAME, $args );
 
 		$hookname = ( ! empty( $cr->eventname ) ) ? $cr->eventname : __( 'URL Cron', 'wp-crontrol' );
 		$redirect = array(
@@ -328,7 +328,7 @@ function action_handle_posts() {
 			return $event;
 		}, 99 );
 
-		$added = Event\add( $next_run_local, $cr->schedule, 'crontrol_cron_job', $args );
+		$added = Event\add( $next_run_local, $cr->schedule, PHPCronEvent::HOOK_NAME, $args );
 
 		$hookname = ( ! empty( $cr->eventname ) ) ? $cr->eventname : __( 'PHP Cron', 'wp-crontrol' );
 		$redirect = array(
@@ -358,8 +358,8 @@ function action_handle_posts() {
 			wp_die( esc_html__( 'You are not allowed to edit PHP cron events.', 'wp-crontrol' ), 403 );
 		}
 
-		if ( 'crontrol_url_cron_job' === $cr->hookname && ! current_user_can_manage_url_cron_events() ) {
-			wp_die( esc_html__( 'You are not allowed to edit URL cron events.', 'wp-crontrol' ), 401 );
+		if ( URLCronEvent::HOOK_NAME === $cr->hookname && ! current_user_can_manage_url_cron_events() ) {
+			wp_die( esc_html__( 'You are not allowed to edit URL cron events.', 'wp-crontrol' ), 403 );
 		}
 
 		$args = json_decode( $cr->args, true );
@@ -506,7 +506,7 @@ function action_handle_posts() {
 			return $event;
 		}, 99 );
 
-		$added = Event\add( $next_run_local, $cr->schedule, 'crontrol_url_cron_job', $args );
+		$added = Event\add( $next_run_local, $cr->schedule, URLCronEvent::HOOK_NAME, $args );
 
 		if ( is_wp_error( $added ) ) {
 			set_message( $added->get_error_message() );
@@ -588,7 +588,7 @@ function action_handle_posts() {
 			return $event;
 		}, 99 );
 
-		$added = Event\add( $next_run_local, $cr->schedule, 'crontrol_cron_job', $args );
+		$added = Event\add( $next_run_local, $cr->schedule, PHPCronEvent::HOOK_NAME, $args );
 
 		if ( is_wp_error( $added ) ) {
 			set_message( $added->get_error_message() );
@@ -732,8 +732,8 @@ function action_handle_posts() {
 		if ( PHPCronEvent::HOOK_NAME === $hook ) {
 			wp_die( esc_html__( 'You are not allowed to delete PHP cron events.', 'wp-crontrol' ), 403 );
 		}
-		if ( 'crontrol_url_cron_job' === $hook ) {
-			wp_die( esc_html__( 'You are not allowed to delete URL cron events.', 'wp-crontrol' ), 401 );
+		if ( URLCronEvent::HOOK_NAME === $hook ) {
+			wp_die( esc_html__( 'You are not allowed to delete URL cron events.', 'wp-crontrol' ), 403 );
 		}
 
 		$deleted = wp_unschedule_hook( $hook, true );
@@ -784,8 +784,8 @@ function action_handle_posts() {
 			wp_die( esc_html__( 'You are not allowed to run cron events.', 'wp-crontrol' ), 403 );
 		}
 
-		if ( ( 'crontrol_url_cron_job' === $hook ) && ! url_cron_events_enabled() ) {
-			wp_die( esc_html__( 'You are not allowed to run cron events.', 'wp-crontrol' ), 401 );
+		if ( ( URLCronEvent::HOOK_NAME === $hook ) && ! url_cron_events_enabled() ) {
+			wp_die( esc_html__( 'You are not allowed to run cron events.', 'wp-crontrol' ), 403 );
 		}
 
 		$ran = Event\run( $hook, $sig );
@@ -869,7 +869,7 @@ function action_handle_posts() {
 
 		$hook = wp_unslash( $_GET['crontrol_id'] );
 
-		if ( ( 'crontrol_cron_job' === $hook ) || ( 'crontrol_url_cron_job' === $hook ) ) {
+		if ( ( PHPCronEvent::HOOK_NAME === $hook ) || ( URLCronEvent::HOOK_NAME === $hook ) ) {
 			wp_die( esc_html__( 'You are not allowed to pause or resume cron events.', 'wp-crontrol' ), 403 );
 		}
 
@@ -953,7 +953,7 @@ function action_handle_posts() {
 
 				if ( $event->is_php_cron() ) {
 					$args = __( 'PHP Code', 'wp-crontrol' );
-				} elseif ( 'crontrol_url_cron_job' === $event->hook ) {
+				} elseif ( $event->is_url_cron() ) {
 					$args = $event->args[0]['method'] . ' ' . $event->args[0]['url'];
 				} elseif ( empty( $event->args ) ) {
 					$args = '';
@@ -961,7 +961,7 @@ function action_handle_posts() {
 					$args = \Crontrol\json_output( $event->args, false );
 				}
 
-				if ( ( 'crontrol_cron_job' === $event->hook ) || ( 'crontrol_url_cron_job' === $event->hook ) ) {
+				if ( ( PHPCronEvent::HOOK_NAME === $event->hook ) || ( URLCronEvent::HOOK_NAME === $event->hook ) ) {
 					$action = 'WP Crontrol';
 				} else {
 					$callbacks = array();
diff --git a/src/event-list-table.php b/src/event-list-table.php
index 0e83d828..c70940e8 100644
--- a/src/event-list-table.php
+++ b/src/event-list-table.php
@@ -387,11 +387,11 @@ public function single_row( $event ) {
 			$classes[] = 'crontrol-paused';
 		}
 
-		if ( 'crontrol_cron_job' === $event->hook && ! self::$php_crons_enabled ) {
+		if ( $event->is_php_cron() && ! self::$php_crons_enabled ) {
 			$classes[] = 'crontrol-inactive';
 		}
 
-		if ( 'crontrol_url_cron_job' === $event->hook && ! self::$url_crons_enabled ) {
+		if ( $event->is_url_cron() && ! self::$url_crons_enabled ) {
 			$classes[] = 'crontrol-inactive';
 		}
 
@@ -437,10 +437,10 @@ protected function handle_row_actions( $event, $column_name, $primary ) {
 			return $this->row_actions( $links );
 		}
 
-		if ( $event->hook === 'crontrol_cron_job' ) {
+		if ( $event->is_php_cron() ) {
 			// PHP cron events can be edited as long as they are enabled and the user has permission.
 			$can_edit = ( self::$can_manage_php_crons && self::$php_crons_enabled );
-		} elseif ( $event->hook === 'crontrol_url_cron_job' ) {
+		} elseif ( $event->is_url_cron() ) {
 			// URL cron events can be edited as long as they are enabled and the user has permission.
 			$can_edit = ( self::$can_manage_url_crons && self::$url_crons_enabled );
 		} else {
@@ -448,7 +448,7 @@ protected function handle_row_actions( $event, $column_name, $primary ) {
 			$can_edit = true;
 		}
 
-		$has_error = self::row_has_error( $event );
+		$has_error = $event->has_error();
 
 		if ( $can_edit ) {
 			$link = array(
@@ -473,10 +473,10 @@ protected function handle_row_actions( $event, $column_name, $primary ) {
 			);
 		}
 
-		if ( $event->hook === 'crontrol_cron_job' ) {
+		if ( $event->is_php_cron() ) {
 			// PHP cron events can be run as long as they are enabled.
 			$can_run = ( self::$php_crons_enabled && ! $has_error );
-		} elseif ( $event->hook === 'crontrol_url_cron_job' ) {
+		} elseif ( $event->is_url_cron() ) {
 			// URL cron events can be run as long as they are enabled.
 			$can_run = ( self::$url_crons_enabled && ! $has_error );
 		} else {
@@ -682,7 +682,7 @@ protected function column_crontrol_hook( Event $event ): string {
 					/* translators: State of a cron event, adjective */
 					esc_html__( 'Inactive', 'wp-crontrol' )
 				);
-			} elseif ( integrity_failed( $event ) ) {
+			} elseif ( $event->integrity_failed() ) {
 				$output .= sprintf(
 					' &mdash; <strong class="status-crontrol-inactive post-state"><span class="dashicons dashicons-warning" aria-hidden="true"></span> %s</strong>',
 					esc_html__( 'Needs checking', 'wp-crontrol' )
@@ -726,14 +726,14 @@ protected function column_crontrol_hook( Event $event ): string {
 	 * @return string The cell output.
 	 */
 	protected function column_crontrol_actions( $event ) {
-		if ( 'crontrol_cron_job' === $event->hook && ! self::$php_crons_enabled ) {
+		if ( $event->is_php_cron() && ! self::$php_crons_enabled ) {
 			return sprintf(
 				'<span class="status-crontrol-warning"><span class="dashicons dashicons-warning" aria-hidden="true"></span> %s</span>',
 				esc_html__( 'PHP cron events are disabled.', 'wp-crontrol' )
 			);
 		}
 
-		if ( 'crontrol_url_cron_job' === $event->hook && ! self::$url_crons_enabled ) {
+		if ( $event->is_url_cron() && ! self::$url_crons_enabled ) {
 			return sprintf(
 				'<span class="status-crontrol-warning"><span class="dashicons dashicons-warning" aria-hidden="true"></span> %s</span>',
 				esc_html__( 'URL cron events are disabled.', 'wp-crontrol' )

From ff126a107595e86cd5338a125f130b19392681ef Mon Sep 17 00:00:00 2001
From: John Blackbourn <john@johnblackbourn.com>
Date: Fri, 10 Oct 2025 01:33:06 +0100
Subject: [PATCH 5/5] More tweaks.

---
 src/event-list-table.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/event-list-table.php b/src/event-list-table.php
index c70940e8..20ea6703 100644
--- a/src/event-list-table.php
+++ b/src/event-list-table.php
@@ -725,7 +725,7 @@ protected function column_crontrol_hook( Event $event ): string {
 	 * @param Event $event The cron event for the current row.
 	 * @return string The cell output.
 	 */
-	protected function column_crontrol_actions( $event ) {
+	protected function column_crontrol_actions( Event $event ): string {
 		if ( $event->is_php_cron() && ! self::$php_crons_enabled ) {
 			return sprintf(
 				'<span class="status-crontrol-warning"><span class="dashicons dashicons-warning" aria-hidden="true"></span> %s</span>',
@@ -740,7 +740,7 @@ protected function column_crontrol_actions( $event ) {
 			);
 		}
 
-		$hook_callbacks = \Crontrol\get_hook_callbacks( $event->hook );
+		$hook_callbacks = $event->get_callbacks();
 
 		if ( $event->is_crontrol_event() ) {
 			return 'WP Crontrol';