403Webshell
Server IP : 172.67.214.6  /  Your IP : 216.73.216.73
Web Server : LiteSpeed
System : Linux premium900.web-hosting.com 4.18.0-553.22.1.lve.1.el8.x86_64 #1 SMP Tue Oct 8 15:52:54 UTC 2024 x86_64
User : redwjova ( 1790)
PHP Version : 8.1.32
Disable Function : NONE
MySQL : OFF |  cURL : ON |  WGET : ON |  Perl : ON |  Python : ON |  Sudo : OFF |  Pkexec : OFF
Directory :  /home/redwjova/sort.llc/wp-content/plugins/ultimate-post/classes/

Upload File :
current_dir [ Writeable] document_root [ Writeable]

 

Command :


[ Back ]     

Current File : /home/redwjova/sort.llc/wp-content/plugins/ultimate-post/classes/Dashboard.php
<?php
namespace ULTP;

/**
 * All Dashboard handler
 * @package ULTP\Dashboard
 * @since 4.1.11
*/

defined('ABSPATH') || exit;

/*
* Caches class.
*/
class Dashboard {
    
    /*
	 * Setup class.
	 * @since 4.1.11
	*/
    public function __construct() {
        add_action( 'rest_api_init', array($this, 'ultp_register_route') );
    }

    /**
	 * REST API Action
     * 
     * @since 4.1.11
	 * @return NULL
	*/
    public function ultp_register_route() {
        register_rest_route(
			'ultp/v2',
			'/addon_block_action/',
			array(
				array(
					'methods'  => 'POST',
					'callback' => array($this, 'addon_block_action'),
					'permission_callback' => function () {
						return current_user_can('manage_options');
					},
					'args' => array()
				)
			)
		);
        register_rest_route(
			'ultp/v2',
			'/save_plugin_settings/',
			array(
				array(
					'methods'  => 'POST',
					'callback' => array($this, 'save_plugin_settings'),
					'permission_callback' => function () {
						return current_user_can('manage_options');
					},
					'args' => array()
                )
            )
        );
        register_rest_route(
			'ultp/v2',
			'/get_all_settings/',
			array(
				array(
					'methods'  => 'POST',
					'callback' => array($this, 'get_all_settings'),
					'permission_callback' => function () {
						return current_user_can('manage_options');
					},
					'args' => array()
				)
			)
		);
        register_rest_route(
			'ultp/v2', 
			'/dashborad/',
			array(
				array(
					'methods'  => 'POST', 
					'callback' => array( $this, 'get_dashboard_callback'),
					'permission_callback' => function () {
						return current_user_can( 'manage_options' );
					},
					'args' => array()
				)
			)
        );
        register_rest_route(
			'ultp/v2', 
			'/wizard_site_status/',
			array(
				array(
					'methods'  => 'POST', 
					'callback' => array( $this, 'wizard_site_status_callback'),
					'permission_callback' => function () {
						return current_user_can( 'manage_options' );
					},
					'args' => array()
				)
			)
        );
        register_rest_route(
			'ultp/v2', 
			'/send_initial_plugin_data/',
			array(
				array(
					'methods'  => 'POST', 
					'callback' => array( $this, 'send_initial_plugin_data_callback'),
					'permission_callback' => function () {
						return current_user_can( 'manage_options' );
					},
					'args' => array()
				)
			)
        );
        register_rest_route(
			'ultp/v2', 
			'/initial_setup_complete/',
			array(
				array(
					'methods'  => 'POST', 
					'callback' => array( $this, 'initial_setup_complete_callback'),
					'permission_callback' => function () {
						return current_user_can( 'manage_options' );
					},
					'args' => array()
				)
			)
        );
        
        register_rest_route(
			'ultp/v2',
			'/template_action/',
			array(
				array(
					'methods'  => 'POST',
					'callback' => array($this, 'template_page_action'),
					'permission_callback' => function () {
						return current_user_can('manage_options');
					},
					'args' => array()
				)
			)
		);
    }


    /**
	 * Save addon / blocks on/off data 
     * 
     * @since v.3.0.0
     * @param STRING
	 * @return ARRAY | Inserted Post Url 
	*/
    public function addon_block_action($server) {
        $post = $server->get_params();
        $addon_name = isset($post['key'])? ultimate_post()->ultp_rest_sanitize_params($post['key']):'';
        $addon_value = isset($post['value'])? ultimate_post()->ultp_rest_sanitize_params($post['value']):'';
        if ($addon_name) {
            $addon_data = ultimate_post()->get_setting();
            $addon_data[$addon_name] = $addon_value;
            $GLOBALS['ultp_settings'][$addon_name] = $addon_value;
            update_option('ultp_options', $addon_data);
        }
        return array( 
            'success' => true, 
            'message' => ($addon_value == 'true' || $addon_value == 'false') ? ($addon_value == 'true' ? __('The addon has been enabled.', 'ultimate-post') : __('The addon has been disabled.', 'ultimate-post') ) : ($addon_value == 'yes' ? __('The block has been enabled.', 'ultimate-post') : __('The block has been disabled.', 'ultimate-post')) 
        );
    }

    /**
	 * Save Settings of Option Panel
     * 
     * @since v.3.0.0
	 * @return NULL
	*/
    public function save_plugin_settings($server) {
        $post = $server->get_params();
        $data = ultimate_post()->ultp_rest_sanitize_params($post['settings']);
        if (count($data) > 0) {
            foreach ($data as $key => $val) {
                ultimate_post()->set_setting($key, $val);
            }
            do_action('ultimate_post_after_setting_save');
        }
        return rest_ensure_response([
            'success' => true, 
            'message' => __('You have successfully saved the settings data.', 'ultimate-post') , 
            'wishListArr' => wp_json_encode($data)]);
    }

    /**
	 * Save Settings of Option Panel
     * 
     * @since v.3.0.0
	 * @return NULL
	*/
    public function get_all_settings($server) {
        return rest_ensure_response(['success' => true, 'settings' => ultimate_post()->get_setting()]);
    }

    /**
	 * Saved Template & Custom Font Actions 
     * 
     * @since v.3.0.0
     * @param STRING
	 * @return ARRAY | Inserted Post Url 
	*/
    public function get_dashboard_callback($server) {
        $post = $server->get_params();
        $request_type = isset($post['type'])?ultimate_post()->ultp_rest_sanitize_params($post['type']):'';
        $pType = isset($post['pType'])?ultimate_post()->ultp_rest_sanitize_params($post['pType']):'';
        switch ($request_type) {

            case 'saved_templates':
                $post_per_page = 10;
                $data = [];
                $args = array(
                    'post_type' => $pType,
                    'post_status' => array('publish', 'draft'),
                    'posts_per_page' => $post_per_page,
                    'paged' => isset($post['pages'])?ultimate_post()->ultp_rest_sanitize_params($post['pages']):1
                );

                if (isset($post['search'])) {
                    $args['paged'] = 1;
                    $args['s'] = ultimate_post()->ultp_rest_sanitize_params($post['search']);
                }

                $the_query = new \WP_Query( $args );
                if ( $the_query->have_posts() ) {
                    while ( $the_query->have_posts() ) {
                        $the_query->the_post();
                        $final = [
                            'id' => get_the_ID(),
                            'title' => get_the_title(),
                            'date' => get_the_modified_date('Y/m/d h:i a'),
                            'status' => get_post_status(),
                            'edit' => get_edit_post_link()
                        ];
    
                        if ($pType == 'ultp_custom_font') {
                            $final = array_merge($final ,['woff' => false,'woff2' => false,'ttf' => false,'svg' => false,'eot' => false]);
                            $settings = get_post_meta( get_the_ID(), '__font_settings', true );
                            foreach ($settings as $key => $value) {
                                if ($value['ttf']) { $final['ttf'] = true; }
                                if ($value['svg']) { $final['svg'] = true; }
                                if ($value['eot']) { $final['eot'] = true; }
                                if ($value['woff']) { $final['woff'] = true; }
                                if ($value['woff2']) { $final['woff2'] = true; }
                            }
                            $final['font_settings'] = $settings;
                        }
                        $data[] = $final;
                    }
                }
                wp_reset_postdata();
                return array(
                    'success' => true, 
                    'data' => $data,
                    'new' => ($pType == 'ultp_custom_font' ? admin_url('post-new.php?post_type=ultp_custom_font') : admin_url('post-new.php?post_type=ultp_templates')),
                    'found' => $the_query->found_posts,
                    'pages' => $the_query->max_num_pages
                );
            break;
            
            case 'action_draft':
            case 'action_publish':
                if (isset($post['ids']) && is_array($post['ids'])) {
                    $post_ids = ultimate_post()->ultp_rest_sanitize_params($post['ids']);
                    foreach ($post_ids as $id) {
                        wp_update_post(array(
                            'ID' => $id,
                            'post_status' => str_replace('action_', '',$request_type)
                        ));
                    }
                    return array(
                        'success' => true, 
                        'message' => __('Status changed for selected items.', 'ultimate-post')
                    );
                }
            break;

            case 'license_action':
                $message = '';
                
                if ( isset($post['edd_ultp_license_key']) && function_exists('ultimate_post_pro') ) {
                    $is_success = false;
                    $license = trim( ultimate_post()->ultp_rest_sanitize_params( $post['edd_ultp_license_key'] ) );

                    if ($license && $license != '******************') {
                        update_option( 'edd_ultp_license_key', $license);
                        $api_params = array(
                            'edd_action' => 'activate_license',
                            'license'    => $license,
                            'item_id'    => 181,
                            'url'        => home_url()
                        );
                        
                        $response = wp_remote_post( 
                            'https://account.wpxpo.com', 
                            array( 
                                'timeout' => 15, 
                                'sslverify' => false, 
                                'body' => $api_params 
                            )
                        );
        
                        if ( is_wp_error( $response ) || 200 !== wp_remote_retrieve_response_code( $response ) ) {
                            $message =  ( is_wp_error( $response ) && ! empty( $response->get_error_message() ) ) ? $response->get_error_message() : __('An error occurred, please try again.', 'ultimate-post-pro');
                        } else {
                            $license_data = json_decode( wp_remote_retrieve_body( $response ) );
                            if ( false === $license_data->success ) {
                                update_option( 'edd_ultp_license_key', '');
                                switch( $license_data->error ) {
                                    case 'expired' :
                                        $message = sprintf(
                                            __('Your license key expired on %s.', 'ultimate-post'),
                                            date_i18n( get_option( 'date_format' ), strtotime( $license_data->expires, current_time( 'timestamp' ) ) )
                                        );
                                        break;
                                    case 'revoked' :
                                        $message = __('Your license key has been disabled.', 'ultimate-post');
                                        break;
                                    case 'missing' :
                                        $message = __('Invalid license.', 'ultimate-post');
                                        break;
                                    case 'invalid' :
                                    case 'site_inactive':
                                        $message = __( 'Your license is not active for this URL.', 'ultimate-post' );
                                        break;
                                    case 'item_name_mismatch':
                                        $message = __( 'This appears to be an invalid license key.', 'ultimate-post' );
                                        break;
                                    case 'no_activations_left':
                                        $message = __( 'Your license key has reached its activation limit.', 'ultimate-post' );
                                        break;
                                    default :
                                        $message = __( 'An error occurred, please try again.', 'ultimate-post' );
                                        break;
                                }
                            } else {
                                $message = __('Your license key has been updated.', 'ultimate-post');
                                $is_success = true;
                            }
                            update_option( 'edd_ultp_license_status', $license_data->license );
                            update_option( 'edd_ultp_license_expire', $license_data->expires );
                            update_option( 'edd_ultp_activations_left', $license_data->activations_left );

                        }
                    } else {
                        $message = __( 'Invalid license.', 'ultimate-post' );
                    }
                } else {
                    $message = __( 'Invalid license.', 'ultimate-post' );
                    if (!function_exists('ultimate_post_pro')) {
                        $message = __( 'Install & Acivate PostX Pro plugin.', 'ultimate-post' );
                    }
                }
                return array('success' => $is_success, 'message' => $message);
            break;

            case 'action_delete':
                if (isset($post['ids']) && is_array($post['ids'])) {
                    $post_ids = ultimate_post()->ultp_rest_sanitize_params($post['ids']);
                    foreach ($post_ids as $id) {
                        wp_delete_post( $id, true); 
                    }
                }
                return array(
                    'success' => true, 
                    'message' => __('The selected item is deleted.', 'ultimate-post')
                );

            case 'support_data':
                $user_info = get_userdata( get_current_user_id() );
                $name = $user_info->first_name . ($user_info->last_name ? ' ' . $user_info->last_name : '');
                return array(
                    'success' => true, 
                    'data' => array(
                        'name' => $name ? $name : $user_info->user_login,
                        'email' => $user_info->user_email
                    )
                );
                
            case 'support_action':
                $api_params = array(
                    'user_name' => isset($post['name'])? ultimate_post()->ultp_rest_sanitize_params($post['name']):'',
                    'user_email' =>isset($post['email'])? sanitize_email($post['email']):'',
                    'subject' => isset($post['subject'])? ultimate_post()->ultp_rest_sanitize_params($post['subject']):'',
                    'desc' => isset($post['desc'])? sanitize_textarea_field($post['desc']):'',
                );
                $response = wp_remote_get(
                    'https://wpxpo.com/wp-json/v2/support_mail', 
                    array(
                        'method' => 'POST',
                        'timeout' => 120,
                        'body' =>  $api_params
                    )
                );
                $response_data = json_decode($response['body']);
                $success = ( isset($response_data->success) && $response_data->success ) ? true : false;

                return array(
                    'success' => $success,
                    'message' => $success ? __('New Support Ticket has been Created.', 'ultimate-post') : __('New Support Ticket is not Created Due to Some Issues.', 'ultimate-post')
                );
            break;

            case 'helloBarAction':
                set_transient( 'ultp_helloBar'.ULTP_HELLOBAR, 'hide', 1296000);
                return array(
                    'success' => true, 
                    'message' => __('Notice is removed.', 'ultimate-post')
                );
            break;
            case 'generalDiscountAction':
                set_transient( 'ultp_generalDiscount', 'hide', 60 * DAY_IN_SECONDS);
                return array(
                    'success' => true, 
                    'message' => __('Notice is removed.', 'ultimate-post')
                );
            break;

            default:
                # code...
                break;
        }
        
    }

    /**
     * wizard_site_status_callback
     *
     * * @since v.3.0.0
     * @return STRING
    */
    public static function wizard_site_status_callback() {
        if ( ! (isset($_POST['wpnonce']) && wp_verify_nonce( sanitize_key(wp_unslash($_POST['wpnonce'])), 'ultp-nonce' )) ) {
			die();
		}
		if ( isset( $_POST['siteType'] ) ) {
            $site_type = ultimate_post()->ultp_rest_sanitize_params( $_POST['siteType'] );
			update_option( '__ultp_site_type', $site_type );
		}
        require_once ULTP_PATH.'classes/Deactive.php';
        $obj = new \ULTP\Deactive();
        $obj->send_plugin_data('postx_wizard', $site_type ? $site_type : 'other');

        return rest_ensure_response( ['success' => true ]);
    }


    /**
     * Send Plugin Data When Initial Setup
     *
     * * @since v.2.8.1
     * @return STRING
    */
    public function send_initial_plugin_data_callback($server) {
        $post = $server->get_params();
        if ( ! (isset($post['wpnonce']) && wp_verify_nonce( sanitize_key(wp_unslash($post['wpnonce'])), 'ultp-nonce' )) ) {
            die();
		}
        

        $site = isset($post['site']) ? ultimate_post()->ultp_rest_sanitize_params( $post['site'] ) : '';

        require_once ULTP_PATH.'classes/Deactive.php';
        $obj = new \ULTP\Deactive();
        $obj->send_plugin_data('postx_wizard', $site);
    }

    /**
     * Initial Plugin Setup Complete
     *
     * * @since v.2.8.1
     * @return STRING
    */
    public static function initial_setup_complete_callback($server) {
        $post = $server->get_params();
        if ( ! (isset($post['wpnonce']) && wp_verify_nonce( sanitize_key(wp_unslash($post['wpnonce'])), 'ultp-nonce' )) ) {
            die();
		}
        ultimate_post()->set_setting('init_setup', 'yes');
        return rest_ensure_response([
            'success' => true, 
            'redirect' => admin_url('admin.php?page=ultp-settings#home'),
        ]);
    }


    /**
	 * Delete Template Page and Handle builder, saved templates, custom font actions
     * 
     * @since v.2.6.6 // Shifted from RequestAPI since v4.0.3
     * @param STRING
	 * @return ARRAY | Success Message
	*/
    public function template_page_action($server) {
        $post = $server->get_params();
        $message = '';
        $s_Type = isset($post['type']) ? ultimate_post()->ultp_rest_sanitize_params($post['type']) : '';
        $s_id = isset($post['id']) ? ultimate_post()->ultp_rest_sanitize_params($post['id']) : '';
        $s_status = isset($post['status']) ? ultimate_post()->ultp_rest_sanitize_params($post['status']) : '';

        if ( $s_Type && $s_id ) {
            if ( $s_Type == 'delete' ) {
                if ( isset($post['section']) && $post['section'] == 'builder' ) { // phpcs:ignore WordPress.Security
                    $conditions = get_option('ultp_builder_conditions', []);
                    $builder_type = get_post_meta( $s_id, '__ultp_builder_type', true );
                    if ( isset($conditions[$builder_type][$s_id]) ) {
                        unset($conditions[$builder_type][$s_id]);
                        update_option('ultp_builder_conditions', $conditions);
                    }
                }
                wp_delete_post( $s_id, true);
                $message = __('Template has been deleted.', 'ultimate-post');
            } else if ( $s_Type == 'duplicate' ) {
                $fromBuilder = ( isset($post['section']) && $post['section'] == 'builder' ) ? true : false; // phpcs:ignore WordPress.Security
                $post_id = $s_id;
                $r_post = get_post( $post_id );
                $current_user = wp_get_current_user();
                $new_post_author = $current_user->ID;
                if ( isset( $r_post ) && $r_post != null ) {
                    $args = array(
                        'post_author'    => $new_post_author,
                        'post_content'   => str_replace(['u0022', 'u002d'], ['\u0022', '\u002d'], $r_post->post_content),
                        'post_excerpt'   => $r_post->post_excerpt,
                        'post_name'      => $r_post->post_name,
                        'post_status'    => $fromBuilder ? 'draft' : $r_post->post_status,
                        'post_title'     => $r_post->post_title,
                        'post_type'      => $r_post->post_type,
                    );
                }
                $new_post_id = wp_insert_post( $args );

                $css = get_post_meta( $post_id, '_ultp_css', true );
                update_post_meta( $new_post_id, '_ultp_css', $css );
                update_post_meta( $new_post_id, '_ultp_active', 'yes' );

                if ( $fromBuilder ) {
                    $type = get_post_meta( $post_id, '__ultp_builder_type', true );
                    update_post_meta( $new_post_id, '__ultp_builder_type', $type );

                    $width = get_post_meta( $post_id, '__container_width', true );
                    update_post_meta( $new_post_id, '__container_width', $width );
                    
                    $sidebar = get_post_meta( $post_id, '__builder_sidebar', true );
                    update_post_meta( $new_post_id, '__builder_sidebar', $sidebar );
    
                    $widget_area = get_post_meta( $post_id, '__builder_widget_area', true );
                    update_post_meta( $new_post_id, '__builder_widget_area', $widget_area );

                    $conditions = get_option('ultp_builder_conditions', array());
                    if ($conditions && $type) {
                        if (isset($conditions[$type][$post_id])) {
                            $conditions[$type][$new_post_id] = $conditions[$type][$post_id];
                            update_option('ultp_builder_conditions', $conditions);
                        }
                    }
                }
                $message = __('Template has been duplicated.', 'ultimate-post');
            } else if ( $s_Type == 'status') {
                if ( $s_status ) {
                    wp_update_post(array(
                        'ID' => $s_id,
                        'post_status' => $s_status
                    ));
                }
                $message = __('Status has been changed.', 'ultimate-post');
            }
        }
        
        return array(
            'success' => true,
            'message' => $message
        );
    }
}

Youez - 2016 - github.com/yon3zu
LinuXploit