<?php

[0] Fix | Delete

/**

[1] Fix | Delete

* REST endpoints and helpers for LiteSpeed.

[2] Fix | Delete

*

[3] Fix | Delete

* @since 2.9.4

[4] Fix | Delete

* @package LiteSpeed

[5] Fix | Delete

*/

[6] Fix | Delete

[7] Fix | Delete

namespace LiteSpeed;

[8] Fix | Delete

[9] Fix | Delete

defined( 'WPINC' ) || exit();

[10] Fix | Delete

[11] Fix | Delete

/**

[12] Fix | Delete

* Class REST

[13] Fix | Delete

*

[14] Fix | Delete

* Registers plugin REST endpoints and exposes helpers for REST detection.

[15] Fix | Delete

*/

[16] Fix | Delete

class REST extends Root {

[17] Fix | Delete

[18] Fix | Delete

const LOG_TAG = '☎️';

[19] Fix | Delete

[20] Fix | Delete

/**

[21] Fix | Delete

* Whether current request is an internal REST call.

[22] Fix | Delete

*

[23] Fix | Delete

* @var bool

[24] Fix | Delete

*/

[25] Fix | Delete

private $_internal_rest_status = false;

[26] Fix | Delete

[27] Fix | Delete

/**

[28] Fix | Delete

* Constructor.

[29] Fix | Delete

*

[30] Fix | Delete

* @since 2.9.4

[31] Fix | Delete

*/

[32] Fix | Delete

public function __construct() {

[33] Fix | Delete

// Hook to internal REST call.

[34] Fix | Delete

add_filter( 'rest_request_before_callbacks', [ $this, 'set_internal_rest_on' ] );

[35] Fix | Delete

add_filter( 'rest_request_after_callbacks', [ $this, 'set_internal_rest_off' ] );

[36] Fix | Delete

[37] Fix | Delete

add_action( 'rest_api_init', [ $this, 'rest_api_init' ] );

[38] Fix | Delete

}

[39] Fix | Delete

[40] Fix | Delete

/**

[41] Fix | Delete

* Register REST routes.

[42] Fix | Delete

*

[43] Fix | Delete

* @since 3.0

[44] Fix | Delete

* @return void

[45] Fix | Delete

*/

[46] Fix | Delete

public function rest_api_init() {

[47] Fix | Delete

// Activate or deactivate a specific crawler callback

[48] Fix | Delete

register_rest_route( 'litespeed/v1', '/toggle_crawler_state', [

[49] Fix | Delete

'methods' => 'POST',

[50] Fix | Delete

'callback' => [ $this, 'toggle_crawler_state' ],

[51] Fix | Delete

'permission_callback' => function () {

[52] Fix | Delete

return current_user_can( 'manage_network_options' ) || current_user_can( 'manage_options' );

[53] Fix | Delete

},

[54] Fix | Delete

] );

[55] Fix | Delete

[56] Fix | Delete

register_rest_route( 'litespeed/v1', '/tool/check_ip', [

[57] Fix | Delete

'methods' => 'GET',

[58] Fix | Delete

'callback' => [ $this, 'check_ip' ],

[59] Fix | Delete

'permission_callback' => function () {

[60] Fix | Delete

return current_user_can( 'manage_network_options' ) || current_user_can( 'manage_options' );

[61] Fix | Delete

},

[62] Fix | Delete

] );

[63] Fix | Delete

[64] Fix | Delete

register_rest_route( 'litespeed/v1', '/guest/sync', [

[65] Fix | Delete

'methods' => 'GET',

[66] Fix | Delete

'callback' => [ $this, 'guest_sync' ],

[67] Fix | Delete

'permission_callback' => function () {

[68] Fix | Delete

return current_user_can( 'manage_network_options' ) || current_user_can( 'manage_options' );

[69] Fix | Delete

},

[70] Fix | Delete

] );

[71] Fix | Delete

[72] Fix | Delete

// IP callback validate

[73] Fix | Delete

register_rest_route( 'litespeed/v3', '/ip_validate', [

[74] Fix | Delete

'methods' => 'POST',

[75] Fix | Delete

'callback' => [ $this, 'ip_validate' ],

[76] Fix | Delete

'permission_callback' => [ $this, 'is_from_cloud' ],

[77] Fix | Delete

] );

[78] Fix | Delete

[79] Fix | Delete

// 1.2. WP REST Dryrun Callback

[80] Fix | Delete

register_rest_route( 'litespeed/v3', '/wp_rest_echo', [

[81] Fix | Delete

'methods' => 'POST',

[82] Fix | Delete

'callback' => [ $this, 'wp_rest_echo' ],

[83] Fix | Delete

'permission_callback' => [ $this, 'is_from_cloud' ],

[84] Fix | Delete

] );

[85] Fix | Delete

register_rest_route( 'litespeed/v3', '/ping', [

[86] Fix | Delete

'methods' => 'POST',

[87] Fix | Delete

'callback' => [ $this, 'ping' ],

[88] Fix | Delete

'permission_callback' => [ $this, 'is_from_cloud' ],

[89] Fix | Delete

] );

[90] Fix | Delete

[91] Fix | Delete

// CDN setup callback notification

[92] Fix | Delete

register_rest_route( 'litespeed/v3', '/cdn_status', [

[93] Fix | Delete

'methods' => 'POST',

[94] Fix | Delete

'callback' => [ $this, 'cdn_status' ],

[95] Fix | Delete

'permission_callback' => [ $this, 'is_from_cloud' ],

[96] Fix | Delete

] );

[97] Fix | Delete

[98] Fix | Delete

// Image optm notify_img

[99] Fix | Delete

// Need validation

[100] Fix | Delete

register_rest_route( 'litespeed/v1', '/notify_img', [

[101] Fix | Delete

'methods' => 'POST',

[102] Fix | Delete

'callback' => [ $this, 'notify_img' ],

[103] Fix | Delete

'permission_callback' => [ $this, 'is_from_cloud' ],

[104] Fix | Delete

] );

[105] Fix | Delete

[106] Fix | Delete

register_rest_route( 'litespeed/v1', '/notify_ccss', [

[107] Fix | Delete

'methods' => 'POST',

[108] Fix | Delete

'callback' => [ $this, 'notify_ccss' ],

[109] Fix | Delete

'permission_callback' => [ $this, 'is_from_cloud' ],

[110] Fix | Delete

] );

[111] Fix | Delete

[112] Fix | Delete

register_rest_route( 'litespeed/v1', '/notify_ucss', [

[113] Fix | Delete

'methods' => 'POST',

[114] Fix | Delete

'callback' => [ $this, 'notify_ucss' ],

[115] Fix | Delete

'permission_callback' => [ $this, 'is_from_cloud' ],

[116] Fix | Delete

] );

[117] Fix | Delete

[118] Fix | Delete

register_rest_route( 'litespeed/v1', '/notify_vpi', [

[119] Fix | Delete

'methods' => 'POST',

[120] Fix | Delete

'callback' => [ $this, 'notify_vpi' ],

[121] Fix | Delete

'permission_callback' => [ $this, 'is_from_cloud' ],

[122] Fix | Delete

] );

[123] Fix | Delete

[124] Fix | Delete

register_rest_route( 'litespeed/v3', '/err_domains', [

[125] Fix | Delete

'methods' => 'POST',

[126] Fix | Delete

'callback' => [ $this, 'err_domains' ],

[127] Fix | Delete

'permission_callback' => [ $this, 'is_from_cloud' ],

[128] Fix | Delete

] );

[129] Fix | Delete

[130] Fix | Delete

// Image optm check_img

[131] Fix | Delete

// Need validation

[132] Fix | Delete

register_rest_route( 'litespeed/v1', '/check_img', [

[133] Fix | Delete

'methods' => 'POST',

[134] Fix | Delete

'callback' => [ $this, 'check_img' ],

[135] Fix | Delete

'permission_callback' => [ $this, 'is_from_cloud' ],

[136] Fix | Delete

] );

[137] Fix | Delete

}

[138] Fix | Delete

[139] Fix | Delete

/**

[140] Fix | Delete

* Call to freeze or melt the crawler clicked

[141] Fix | Delete

*

[142] Fix | Delete

* @since 4.3

[143] Fix | Delete

*/

[144] Fix | Delete

public function toggle_crawler_state() {

[145] Fix | Delete

// phpcs:ignore WordPress.Security.NonceVerification.Missing -- REST API nonce verified by WordPress

[146] Fix | Delete

$crawler_id = isset( $_POST['crawler_id'] ) ? sanitize_text_field( wp_unslash( $_POST['crawler_id'] ) ) : '';

[147] Fix | Delete

[148] Fix | Delete

if ( '' !== $crawler_id ) {

[149] Fix | Delete

return $this->cls( 'Crawler' )->toggle_activeness( $crawler_id ) ? 1 : 0;

[150] Fix | Delete

}

[151] Fix | Delete

}

[152] Fix | Delete

[153] Fix | Delete

/**

[154] Fix | Delete

* Check if the request is from cloud nodes.

[155] Fix | Delete

*

[156] Fix | Delete

* @since 4.2

[157] Fix | Delete

* @since 4.4.7 Token/API key validation makes IP validation redundant.

[158] Fix | Delete

* @return bool

[159] Fix | Delete

*/

[160] Fix | Delete

public function is_from_cloud() {

[161] Fix | Delete

return $this->cls( 'Cloud' )->is_from_cloud();

[162] Fix | Delete

}

[163] Fix | Delete

[164] Fix | Delete

/**

[165] Fix | Delete

* Ping pong.

[166] Fix | Delete

*

[167] Fix | Delete

* @since 3.0.4

[168] Fix | Delete

* @return mixed

[169] Fix | Delete

*/

[170] Fix | Delete

public function ping() {

[171] Fix | Delete

return $this->cls( 'Cloud' )->ping();

[172] Fix | Delete

}

[173] Fix | Delete

[174] Fix | Delete

/**

[175] Fix | Delete

* Launch IP check.

[176] Fix | Delete

*

[177] Fix | Delete

* @since 3.0

[178] Fix | Delete

* @return mixed

[179] Fix | Delete

*/

[180] Fix | Delete

public function check_ip() {

[181] Fix | Delete

return Tool::cls()->check_ip();

[182] Fix | Delete

}

[183] Fix | Delete

[184] Fix | Delete

/**

[185] Fix | Delete

* Sync Guest Mode IP/UA lists.

[186] Fix | Delete

*

[187] Fix | Delete

* @since 7.7

[188] Fix | Delete

* @return array

[189] Fix | Delete

*/

[190] Fix | Delete

public function guest_sync() {

[191] Fix | Delete

return Guest::cls()->sync_lists();

[192] Fix | Delete

}

[193] Fix | Delete

[194] Fix | Delete

/**

[195] Fix | Delete

* Validate IPs from cloud.

[196] Fix | Delete

*

[197] Fix | Delete

* @since 3.0

[198] Fix | Delete

* @return mixed

[199] Fix | Delete

*/

[200] Fix | Delete

public function ip_validate() {

[201] Fix | Delete

return $this->cls( 'Cloud' )->ip_validate();

[202] Fix | Delete

}

[203] Fix | Delete

[204] Fix | Delete

/**

[205] Fix | Delete

* REST echo helper.

[206] Fix | Delete

*

[207] Fix | Delete

* @since 3.0

[208] Fix | Delete

* @return mixed

[209] Fix | Delete

*/

[210] Fix | Delete

public function wp_rest_echo() {

[211] Fix | Delete

return $this->cls( 'Cloud' )->wp_rest_echo();

[212] Fix | Delete

}

[213] Fix | Delete

[214] Fix | Delete

/**

[215] Fix | Delete

* Endpoint to notify plugin of CDN status updates.

[216] Fix | Delete

*

[217] Fix | Delete

* @since 7.0

[218] Fix | Delete

* @return mixed

[219] Fix | Delete

*/

[220] Fix | Delete

public function cdn_status() {

[221] Fix | Delete

return $this->cls( 'Cloud' )->update_cdn_status();

[222] Fix | Delete

}

[223] Fix | Delete

[224] Fix | Delete

/**

[225] Fix | Delete

* Image optimization notification.

[226] Fix | Delete

*

[227] Fix | Delete

* @since 3.0

[228] Fix | Delete

* @return mixed

[229] Fix | Delete

*/

[230] Fix | Delete

public function notify_img() {

[231] Fix | Delete

return Img_Optm::cls()->notify_img();

[232] Fix | Delete

}

[233] Fix | Delete

[234] Fix | Delete

/**

[235] Fix | Delete

* Critical CSS notification.

[236] Fix | Delete

*

[237] Fix | Delete

* @since 7.1

[238] Fix | Delete

* @return mixed

[239] Fix | Delete

*/

[240] Fix | Delete

public function notify_ccss() {

[241] Fix | Delete

self::debug( 'notify_ccss' );

[242] Fix | Delete

return CSS::cls()->notify();

[243] Fix | Delete

}

[244] Fix | Delete

[245] Fix | Delete

/**

[246] Fix | Delete

* Unique CSS notification.

[247] Fix | Delete

*

[248] Fix | Delete

* @since 5.2

[249] Fix | Delete

* @return mixed

[250] Fix | Delete

*/

[251] Fix | Delete

public function notify_ucss() {

[252] Fix | Delete

self::debug( 'notify_ucss' );

[253] Fix | Delete

return UCSS::cls()->notify();

[254] Fix | Delete

}

[255] Fix | Delete

[256] Fix | Delete

/**

[257] Fix | Delete

* Viewport Images notification.

[258] Fix | Delete

*

[259] Fix | Delete

* @since 4.7

[260] Fix | Delete

* @return mixed

[261] Fix | Delete

*/

[262] Fix | Delete

public function notify_vpi() {

[263] Fix | Delete

self::debug( 'notify_vpi' );

[264] Fix | Delete

return VPI::cls()->notify();

[265] Fix | Delete

}

[266] Fix | Delete

[267] Fix | Delete

/**

[268] Fix | Delete

* Error domain report from cloud.

[269] Fix | Delete

*

[270] Fix | Delete

* @since 4.7

[271] Fix | Delete

* @return mixed

[272] Fix | Delete

*/

[273] Fix | Delete

public function err_domains() {

[274] Fix | Delete

self::debug( 'err_domains' );

[275] Fix | Delete

return $this->cls( 'Cloud' )->rest_err_domains();

[276] Fix | Delete

}

[277] Fix | Delete

[278] Fix | Delete

/**

[279] Fix | Delete

* Launch image check.

[280] Fix | Delete

*

[281] Fix | Delete

* @since 3.0

[282] Fix | Delete

* @return mixed

[283] Fix | Delete

*/

[284] Fix | Delete

public function check_img() {

[285] Fix | Delete

return Img_Optm::cls()->check_img();

[286] Fix | Delete

}

[287] Fix | Delete

[288] Fix | Delete

/**

[289] Fix | Delete

* Return a standardized error payload.

[290] Fix | Delete

*

[291] Fix | Delete

* @since 5.7.0.1

[292] Fix | Delete

* @param string|int $code Error code.

[293] Fix | Delete

* @return array

[294] Fix | Delete

*/

[295] Fix | Delete

public static function err( $code ) {

[296] Fix | Delete

return [

[297] Fix | Delete

'_res' => 'err',

[298] Fix | Delete

'_msg' => $code,

[299] Fix | Delete

];

[300] Fix | Delete

}

[301] Fix | Delete

[302] Fix | Delete

/**

[303] Fix | Delete

* Set internal REST tag to ON.

[304] Fix | Delete

*

[305] Fix | Delete

* @since 2.9.4

[306] Fix | Delete

* @param mixed $not_used Passthrough value from the filter.

[307] Fix | Delete

* @return mixed

[308] Fix | Delete

*/

[309] Fix | Delete

public function set_internal_rest_on( $not_used = null ) {

[310] Fix | Delete

$this->_internal_rest_status = true;

[311] Fix | Delete

Debug2::debug2( '[REST] ✅ Internal REST ON [filter] rest_request_before_callbacks' );

[312] Fix | Delete

[313] Fix | Delete

return $not_used;

[314] Fix | Delete

}

[315] Fix | Delete

[316] Fix | Delete

/**

[317] Fix | Delete

* Set internal REST tag to OFF.

[318] Fix | Delete

*

[319] Fix | Delete

* @since 2.9.4

[320] Fix | Delete

* @param mixed $not_used Passthrough value from the filter.

[321] Fix | Delete

* @return mixed

[322] Fix | Delete

*/

[323] Fix | Delete

public function set_internal_rest_off( $not_used = null ) {

[324] Fix | Delete

$this->_internal_rest_status = false;

[325] Fix | Delete

Debug2::debug2( '[REST] ❎ Internal REST OFF [filter] rest_request_after_callbacks' );

[326] Fix | Delete

[327] Fix | Delete

return $not_used;

[328] Fix | Delete

}

[329] Fix | Delete

[330] Fix | Delete

/**

[331] Fix | Delete

* Whether current request is an internal REST call.

[332] Fix | Delete

*

[333] Fix | Delete

* @since 2.9.4

[334] Fix | Delete

* @return bool

[335] Fix | Delete

*/

[336] Fix | Delete

public function is_internal_rest() {

[337] Fix | Delete

return $this->_internal_rest_status;

[338] Fix | Delete

}

[339] Fix | Delete

[340] Fix | Delete

/**

[341] Fix | Delete

* Check whether a URL or current page is a REST request.

[342] Fix | Delete

*

[343] Fix | Delete

* @since 2.9.3

[344] Fix | Delete

* @since 2.9.4 Moved here from Utility, dropped static.

[345] Fix | Delete

* @param string|false $url URL to check; when false checks current request.

[346] Fix | Delete

* @return bool

[347] Fix | Delete

*/

[348] Fix | Delete

public function is_rest( $url = false ) {

[349] Fix | Delete

// For WP 4.4.0- compatibility.

[350] Fix | Delete

if ( ! function_exists( 'rest_get_url_prefix' ) ) {

[351] Fix | Delete

return ( defined( 'REST_REQUEST' ) && REST_REQUEST );

[352] Fix | Delete

}

[353] Fix | Delete

[354] Fix | Delete

$prefix = rest_get_url_prefix();

[355] Fix | Delete

[356] Fix | Delete

// Case #1: After WP_REST_Request initialization.

[357] Fix | Delete

if ( defined( 'REST_REQUEST' ) && REST_REQUEST ) {

[358] Fix | Delete

return true;

[359] Fix | Delete

}

[360] Fix | Delete

[361] Fix | Delete

// Case #2: Support "plain" permalink settings.

[362] Fix | Delete

// phpcs:ignore WordPress.Security.NonceVerification.Recommended

[363] Fix | Delete

$route = isset( $_GET['rest_route'] ) ? sanitize_text_field( wp_unslash( $_GET['rest_route'] ) ) : '';

[364] Fix | Delete

[365] Fix | Delete

if ( $route && 0 === strpos( trim( $route, '\\/' ), $prefix, 0 ) ) {

[366] Fix | Delete

return true;

[367] Fix | Delete

}

[368] Fix | Delete

[369] Fix | Delete

if ( !$url ) {

[370] Fix | Delete

return false;

[371] Fix | Delete

}

[372] Fix | Delete

[373] Fix | Delete

// Case #3: URL path begins with wp-json/ (REST prefix) – safe for subfolder installs.

[374] Fix | Delete

$rest_url = wp_parse_url( site_url( $prefix ) );

[375] Fix | Delete

$current_url = wp_parse_url( $url );

[376] Fix | Delete

[377] Fix | Delete

if ( false !== $current_url && ! empty( $current_url['path'] ) && false !== $rest_url && ! empty( $rest_url['path'] ) ) {

[378] Fix | Delete

return 0 === strpos( $current_url['path'], $rest_url['path'] );

[379] Fix | Delete

}

[380] Fix | Delete

[381] Fix | Delete

return false;

[382] Fix | Delete

}

[383] Fix | Delete

}

[384] Fix | Delete

[385] Fix | Delete