<?php

[0] Fix | Delete

[1] Fix | Delete

namespace WPForms\Integrations\LiteConnect;

[2] Fix | Delete

[3] Fix | Delete

use WPForms\Integrations\IntegrationInterface;

[4] Fix | Delete

[5] Fix | Delete

/**

[6] Fix | Delete

* Class LiteConnect.

[7] Fix | Delete

*

[8] Fix | Delete

* @since 1.7.4

[9] Fix | Delete

*/

[10] Fix | Delete

abstract class LiteConnect implements IntegrationInterface {

[11] Fix | Delete

[12] Fix | Delete

/**

[13] Fix | Delete

* The slug that will be used to save the option of Lite Connect.

[14] Fix | Delete

*

[15] Fix | Delete

* @since 1.7.4

[16] Fix | Delete

*

[17] Fix | Delete

* @var string

[18] Fix | Delete

*/

[19] Fix | Delete

const SETTINGS_SLUG = 'lite-connect-enabled';

[20] Fix | Delete

[21] Fix | Delete

/**

[22] Fix | Delete

* The $_GET argument to trigger the auth key endpoint.

[23] Fix | Delete

*

[24] Fix | Delete

* @since 1.7.4.1

[25] Fix | Delete

*

[26] Fix | Delete

* @var string

[27] Fix | Delete

*/

[28] Fix | Delete

const AUTH_KEY_ARG = 'wpforms-liteconnect-auth-key';

[29] Fix | Delete

[30] Fix | Delete

/**

[31] Fix | Delete

* Indicate if current integration is allowed to load.

[32] Fix | Delete

*

[33] Fix | Delete

* @since 1.7.4

[34] Fix | Delete

*

[35] Fix | Delete

* @return bool

[36] Fix | Delete

*/

[37] Fix | Delete

public function allow_load() {

[38] Fix | Delete

[39] Fix | Delete

return self::is_allowed();

[40] Fix | Delete

}

[41] Fix | Delete

[42] Fix | Delete

/**

[43] Fix | Delete

* Whether Lite Connect is allowed.

[44] Fix | Delete

*

[45] Fix | Delete

* @since 1.7.4

[46] Fix | Delete

*

[47] Fix | Delete

* @return bool

[48] Fix | Delete

*/

[49] Fix | Delete

public static function is_allowed() {

[50] Fix | Delete

[51] Fix | Delete

// Disable Lite Connect integration for local hosts.

[52] Fix | Delete

$allowed = ! self::is_local_not_debug() && self::is_production();

[53] Fix | Delete

[54] Fix | Delete

// phpcs:disable WPForms.PHP.ValidateHooks.InvalidHookName

[55] Fix | Delete

[56] Fix | Delete

/**

[57] Fix | Delete

* Determine whether Lite Connect integration is allowed to load.

[58] Fix | Delete

*

[59] Fix | Delete

* @since 1.7.4

[60] Fix | Delete

*

[61] Fix | Delete

* @param bool $is_allowed Is LiteConnect allowed? Value by default: true.

[62] Fix | Delete

*/

[63] Fix | Delete

return (bool) apply_filters( 'wpforms_integrations_lite_connect_is_allowed', $allowed );

[64] Fix | Delete

[65] Fix | Delete

// phpcs:enable WPForms.PHP.ValidateHooks.InvalidHookName

[66] Fix | Delete

}

[67] Fix | Delete

[68] Fix | Delete

/**

[69] Fix | Delete

* Whether Lite Connect is enabled.

[70] Fix | Delete

*

[71] Fix | Delete

* @since 1.7.4

[72] Fix | Delete

*

[73] Fix | Delete

* @return bool

[74] Fix | Delete

*/

[75] Fix | Delete

public static function is_enabled() {

[76] Fix | Delete

[77] Fix | Delete

// phpcs:disable WPForms.PHP.ValidateHooks.InvalidHookName

[78] Fix | Delete

[79] Fix | Delete

/**

[80] Fix | Delete

* Determine whether LiteConnect is enabled on the WPForms > Settings admin page.

[81] Fix | Delete

*

[82] Fix | Delete

* @since 1.7.4

[83] Fix | Delete

*

[84] Fix | Delete

* @param bool $is_enabled Is LiteConnect enabled on WPForms > Settings page?

[85] Fix | Delete

*/

[86] Fix | Delete

return (bool) apply_filters( 'wpforms_integrations_lite_connect_is_enabled', wpforms_setting( self::SETTINGS_SLUG ) );

[87] Fix | Delete

[88] Fix | Delete

// phpcs:enable WPForms.PHP.ValidateHooks.InvalidHookName

[89] Fix | Delete

}

[90] Fix | Delete

[91] Fix | Delete

/**

[92] Fix | Delete

* Load an integration.

[93] Fix | Delete

*

[94] Fix | Delete

* @since 1.7.4

[95] Fix | Delete

*/

[96] Fix | Delete

public function load() {

[97] Fix | Delete

[98] Fix | Delete

$this->endpoints();

[99] Fix | Delete

}

[100] Fix | Delete

[101] Fix | Delete

/**

[102] Fix | Delete

* Whether Lite Connect is running locally and not in the debug mode.

[103] Fix | Delete

*

[104] Fix | Delete

* @since 1.7.4

[105] Fix | Delete

*

[106] Fix | Delete

* @return bool

[107] Fix | Delete

*/

[108] Fix | Delete

private static function is_local_not_debug() {

[109] Fix | Delete

[110] Fix | Delete

return ! defined( 'WPFORMS_DEBUG_LITE_CONNECT' ) && self::is_localhost();

[111] Fix | Delete

}

[112] Fix | Delete

[113] Fix | Delete

/**

[114] Fix | Delete

* Whether Lite Connect is running locally.

[115] Fix | Delete

*

[116] Fix | Delete

* @since 1.7.4

[117] Fix | Delete

*

[118] Fix | Delete

* @return bool

[119] Fix | Delete

*/

[120] Fix | Delete

private static function is_localhost() {

[121] Fix | Delete

[122] Fix | Delete

// Check for local TLDs.

[123] Fix | Delete

if ( ! empty( $_SERVER['HTTP_HOST'] ) ) {

[124] Fix | Delete

$host = sanitize_text_field( wp_unslash( $_SERVER['HTTP_HOST'] ) );

[125] Fix | Delete

[126] Fix | Delete

$local_tlds = [

[127] Fix | Delete

'.local',

[128] Fix | Delete

'.invalid',

[129] Fix | Delete

'.example',

[130] Fix | Delete

'.test',

[131] Fix | Delete

];

[132] Fix | Delete

[133] Fix | Delete

foreach ( $local_tlds as $tld ) {

[134] Fix | Delete

if ( preg_match( '/' . $tld . '$/', $host ) ) {

[135] Fix | Delete

return true;

[136] Fix | Delete

}

[137] Fix | Delete

}

[138] Fix | Delete

}

[139] Fix | Delete

[140] Fix | Delete

// Return false if IP and TLD are not local.

[141] Fix | Delete

return false;

[142] Fix | Delete

}

[143] Fix | Delete

[144] Fix | Delete

/**

[145] Fix | Delete

* Whether Lite Connect is running on production website.

[146] Fix | Delete

*

[147] Fix | Delete

* @since 1.7.6

[148] Fix | Delete

*

[149] Fix | Delete

* @return bool

[150] Fix | Delete

*/

[151] Fix | Delete

private static function is_production() {

[152] Fix | Delete

[153] Fix | Delete

return wp_get_environment_type() === 'production';

[154] Fix | Delete

}

[155] Fix | Delete

[156] Fix | Delete

/**

[157] Fix | Delete

* Provide responses to endpoint requests.

[158] Fix | Delete

*

[159] Fix | Delete

* @since 1.7.4

[160] Fix | Delete

*/

[161] Fix | Delete

private function endpoints() {

[162] Fix | Delete

[163] Fix | Delete

// We check nonce in the endpoint_key().

[164] Fix | Delete

// phpcs:ignore WordPress.Security.NonceVerification.Recommended

[165] Fix | Delete

if ( ! isset( $_GET[ self::AUTH_KEY_ARG ] ) ) {

[166] Fix | Delete

return;

[167] Fix | Delete

}

[168] Fix | Delete

[169] Fix | Delete

$this->endpoint_key();

[170] Fix | Delete

}

[171] Fix | Delete

[172] Fix | Delete

/**

[173] Fix | Delete

* Process endpoint for callback on generate_site_key().

[174] Fix | Delete

*

[175] Fix | Delete

* @since 1.7.4

[176] Fix | Delete

*/

[177] Fix | Delete

private function endpoint_key() {

[178] Fix | Delete

[179] Fix | Delete

$json = file_get_contents( 'php://input' );

[180] Fix | Delete

$response = json_decode( $json, true );

[181] Fix | Delete

[182] Fix | Delete

if ( ! $response ) {

[183] Fix | Delete

$this->endpoint_die( 'Lite Connect: No response' );

[184] Fix | Delete

}

[185] Fix | Delete

[186] Fix | Delete

if ( isset( $response['error'] ) ) {

[187] Fix | Delete

$this->endpoint_die(

[188] Fix | Delete

'Lite Connect: unable to add the site to system',

[189] Fix | Delete

$response

[190] Fix | Delete

);

[191] Fix | Delete

}

[192] Fix | Delete

[193] Fix | Delete

if ( ! isset( $response['key'], $response['id'], $response['nonce'] ) ) {

[194] Fix | Delete

$this->endpoint_die(

[195] Fix | Delete

'Lite Connect: unknown communication error',

[196] Fix | Delete

$response

[197] Fix | Delete

);

[198] Fix | Delete

}

[199] Fix | Delete

[200] Fix | Delete

if ( ! wp_verify_nonce( $response['nonce'], API::KEY_NONCE_ACTION ) ) {

[201] Fix | Delete

$this->endpoint_die(

[202] Fix | Delete

'Lite Connect: nonce verification failed',

[203] Fix | Delete

$response

[204] Fix | Delete

);

[205] Fix | Delete

}

[206] Fix | Delete

[207] Fix | Delete

unset( $response['nonce'] );

[208] Fix | Delete

[209] Fix | Delete

$settings = get_option( Integration::get_option_name(), [] );

[210] Fix | Delete

$settings['site'] = $response;

[211] Fix | Delete

[212] Fix | Delete

update_option( API::GENERATE_KEY_ATTEMPT_COUNTER_OPTION, 0 );

[213] Fix | Delete

update_option( Integration::get_option_name(), $settings );

[214] Fix | Delete

[215] Fix | Delete

exit();

[216] Fix | Delete

}

[217] Fix | Delete

[218] Fix | Delete

/**

[219] Fix | Delete

* Finish the endpoint execution with wp_die().

[220] Fix | Delete

*

[221] Fix | Delete

* @since 1.7.4

[222] Fix | Delete

*

[223] Fix | Delete

* @param string $title Log message title.

[224] Fix | Delete

* @param array $response Response.

[225] Fix | Delete

*

[226] Fix | Delete

* @noinspection ForgottenDebugOutputInspection

[227] Fix | Delete

*/

[228] Fix | Delete

private function endpoint_die( $title = '', $response = [] ) { // phpcs:ignore WPForms.PHP.HooksMethod.InvalidPlaceForAddingHooks

[229] Fix | Delete

[230] Fix | Delete

$this->log( $title, $response );

[231] Fix | Delete

[232] Fix | Delete

// We call wp_die too early, before the query is run.

[233] Fix | Delete

// So, we should remove some filters to avoid having PHP notices in error log.

[234] Fix | Delete

remove_filter( 'wp_robots', 'wp_robots_noindex_embeds' );

[235] Fix | Delete

remove_filter( 'wp_robots', 'wp_robots_noindex_search' );

[236] Fix | Delete

[237] Fix | Delete

wp_die(

[238] Fix | Delete

esc_html__( 'This is the Lite Connect endpoint page.', 'wpforms-lite' ),

[239] Fix | Delete

'Lite Connect endpoint',

[240] Fix | Delete

400

[241] Fix | Delete

);

[242] Fix | Delete

}

[243] Fix | Delete

[244] Fix | Delete

/**

[245] Fix | Delete

* Log message.

[246] Fix | Delete

*

[247] Fix | Delete

* @since 1.7.4

[248] Fix | Delete

*

[249] Fix | Delete

* @param string $title Log message title.

[250] Fix | Delete

* @param array $response Response.

[251] Fix | Delete

*/

[252] Fix | Delete

private function log( $title = '', $response = [] ) {

[253] Fix | Delete

[254] Fix | Delete

if ( ! $title ) {

[255] Fix | Delete

return;

[256] Fix | Delete

}

[257] Fix | Delete

[258] Fix | Delete

wpforms_log(

[259] Fix | Delete

$title,

[260] Fix | Delete

[

[261] Fix | Delete

'response' => $response,

[262] Fix | Delete

'request' => [

[263] Fix | Delete

'domain' => isset( $response['domain'] ) ? $response['domain'] : '',

[264] Fix | Delete

'admin_email' => Integration::get_enabled_email(),

[265] Fix | Delete

],

[266] Fix | Delete

],

[267] Fix | Delete

[ 'type' => [ 'error' ] ]

[268] Fix | Delete

);

[269] Fix | Delete

}

[270] Fix | Delete

}

[271] Fix | Delete

[272] Fix | Delete