File manager

File manager - Edit - /home/abhiramc/public_html/biharafoods/wp-content/plugins/profile-builder/update/class-edd-sl-plugin-updater.php

Back
<?php // Exit if accessed directly if ( ! defined( 'ABSPATH' ) ) exit; /** * Allows plugins to use their own update API. * * @author Easy Digital Downloads * @version 1.6.13 / if( !class_exists('WPPB_EDD_SL_Plugin_Updater') ) { class WPPB_EDD_SL_Plugin_Updater { private $api_url = ''; private $api_data = array(); private $name = ''; private $beta = false; private $slug = ''; private $version = ''; private $wp_override = false; private $cache_key = ''; /* * Class constructor. * * @uses plugin_basename() * @uses hook() * * @param string $_api_url The URL pointing to the custom API endpoint. * @param string $_plugin_file Path to the plugin file. * @param array $_api_data Optional data to send with API calls. / public function __construct($_api_url, $_plugin_file, $_api_data = null) { global $edd_plugin_data; $this->api_url = trailingslashit($_api_url); $this->api_data = $_api_data; $this->name = plugin_basename($_plugin_file); $this->slug = basename($_plugin_file, '.php'); /* * Necessary in order for the View Details button to work properly when multiple products using * this class aare active * * The original takes the base file name as the slug, but our file names are just `index.php` so we * use the folder name instead / if ( $this->slug === 'index') { $this->slug = dirname( plugin_basename( $_plugin_file ) ); } // end modification $this->version = $_api_data['version']; $this->wp_override = isset($_api_data['wp_override']) ? (bool)$_api_data['wp_override'] : false; $this->beta = !empty($this->api_data['beta']) ? true : false; $this->cache_key = md5(serialize($this->slug . $this->api_data['license'] . $this->beta)); $edd_plugin_data[$this->slug] = $this->api_data; // Set up hooks. $this->init(); } /* * Set up WordPress filters to hook into WP's update process. * * @uses add_filter() * * @return void / public function init() { add_filter('pre_set_site_transient_update_plugins', array($this, 'check_update')); add_filter('plugins_api', array($this, 'plugins_api_filter'), 10, 3); remove_action('after_plugin_row_' . $this->name, 'wp_plugin_update_row', 10); add_action('after_plugin_row_' . $this->name, array($this, 'show_update_notification'), 10, 2); add_action('admin_init', array($this, 'show_changelog')); } /* * Check for Updates at the defined API endpoint and modify the update array. * * This function dives into the update API just when WordPress creates its update array, * then adds a custom API call and injects the custom plugin data retrieved from the API. * It is reassembled from parts of the native WordPress plugin update code. * See wp-includes/update.php line 121 for the original wp_update_plugins() function. * * @uses api_request() * * @param array $_transient_data Update array build by WordPress. * @return array Modified update array with custom plugin data. / public function check_update($_transient_data) { global $pagenow; if (!is_object($_transient_data)) { $_transient_data = new stdClass; } if ('plugins.php' == $pagenow && is_multisite()) { return $_transient_data; } if (!empty($_transient_data->response) && !empty($_transient_data->response[$this->name]) && false === $this->wp_override) { return $_transient_data; } $version_info = $this->get_cached_version_info(); if (false === $version_info) { $version_info = $this->api_request('plugin_latest_version', array('slug' => $this->slug, 'beta' => $this->beta)); $this->set_version_info_cache($version_info); } if (false !== $version_info && is_object($version_info) && isset($version_info->new_version)) { if (version_compare($this->version, $version_info->new_version, '<')) { $_transient_data->response[$this->name] = $version_info; } $_transient_data->last_checked = current_time('timestamp'); $_transient_data->checked[$this->name] = $this->version; } return $_transient_data; } /* * show update nofication row -- needed for multisite subsites, because WP won't tell you otherwise! * * @param string $file * @param array $plugin / public function show_update_notification($file, $plugin) { if (is_network_admin()) { return; } if (!current_user_can('update_plugins')) { return; } if (!is_multisite()) { return; } if ($this->name != $file) { return; } // Remove our filter on the site transient remove_filter('pre_set_site_transient_update_plugins', array($this, 'check_update'), 10); $update_cache = get_site_transient('update_plugins'); $update_cache = is_object($update_cache) ? $update_cache : new stdClass(); if (empty($update_cache->response) \|\| empty($update_cache->response[$this->name])) { $version_info = $this->get_cached_version_info(); if (false === $version_info) { $version_info = $this->api_request('plugin_latest_version', array('slug' => $this->slug, 'beta' => $this->beta)); $this->set_version_info_cache($version_info); } if (!is_object($version_info)) { return; } if (version_compare($this->version, $version_info->new_version, '<')) { $update_cache->response[$this->name] = $version_info; } $update_cache->last_checked = current_time('timestamp'); $update_cache->checked[$this->name] = $this->version; set_site_transient('update_plugins', $update_cache); } else { $version_info = $update_cache->response[$this->name]; } // Restore our filter add_filter('pre_set_site_transient_update_plugins', array($this, 'check_update')); if (!empty($update_cache->response[$this->name]) && version_compare($this->version, $version_info->new_version, '<')) { // build a plugin list row, with update notification $wp_list_table = _get_list_table('WP_Plugins_List_Table'); # <tr class="plugin-update-tr"><td colspan="' . $wp_list_table->get_column_count() . '" class="plugin-update colspanchange"> echo '<tr class="plugin-update-tr" id="' . esc_attr( $this->slug ) . '-update" data-slug="' . esc_attr( $this->slug ) . '" data-plugin="' . esc_attr( $this->slug ) . '/' . esc_attr( $file ) . '">'; echo '<td colspan="3" class="plugin-update colspanchange">'; echo '<div class="update-message notice inline notice-warning notice-alt">'; $changelog_link = self_admin_url('index.php?edd_sl_action=view_plugin_changelog&plugin=' . $this->name . '&slug=' . $this->slug . '&TB_iframe=true&width=772&height=911'); if (empty($version_info->download_link)) { printf( __('There is a new version of %1$s available. %2$sView version %3$s details%4$s.', 'profile-builder'), //phpcs:ignore esc_html($version_info->name), '<a target="_blank" class="thickbox" href="' . esc_url($changelog_link) . '">', esc_html($version_info->new_version), '</a>' ); } else { printf( __('There is a new version of %1$s available. %2$sView version %3$s details%4$s or %5$supdate now%6$s.', 'profile-builder'), //phpcs:ignore esc_html($version_info->name), '<a target="_blank" class="thickbox" href="' . esc_url($changelog_link) . '">', esc_html($version_info->new_version), '</a>', '<a href="' . esc_url(wp_nonce_url(self_admin_url('update.php?action=upgrade-plugin&plugin=') . $this->name, 'upgrade-plugin_' . $this->name)) . '">', '</a>' ); } do_action("in_plugin_update_message-{$file}", $plugin, $version_info); echo '</div></td></tr>'; } } /* * Updates information on the "View version x.x details" page with custom data. * * @uses api_request() * * @param mixed $_data * @param string $_action * @param object $_args * @return object $_data / public function plugins_api_filter($_data, $_action = '', $_args = null) { if ($_action != 'plugin_information') { return $_data; } if (!isset($_args->slug) \|\| ($_args->slug != $this->slug)) { return $_data; } $to_send = array( 'slug' => $this->slug, 'is_ssl' => is_ssl(), 'fields' => array( 'banners' => array(), 'reviews' => false ) ); $cache_key = 'edd_api_request_' . md5(serialize($this->slug . $this->api_data['license'] . $this->beta)); // Get the transient where we store the api request for this plugin for 24 hours $edd_api_request_transient = $this->get_cached_version_info($cache_key); //If we have no transient-saved value, run the API, set a fresh transient with the API value, and return that value too right now. if (empty($edd_api_request_transient)) { $api_response = $this->api_request('plugin_information', $to_send); // Expires in 3 hours $this->set_version_info_cache($api_response, $cache_key); if (false !== $api_response) { $_data = $api_response; } } else { $_data = $edd_api_request_transient; } // Convert sections into an associative array, since we're getting an object, but Core expects an array. if (isset($_data->sections) && !is_array($_data->sections)) { $new_sections = array(); foreach ($_data->sections as $key => $value) { $new_sections[$key] = $value; } $_data->sections = $new_sections; } // Convert banners into an associative array, since we're getting an object, but Core expects an array. if (isset($_data->banners) && !is_array($_data->banners)) { $new_banners = array(); foreach ($_data->banners as $key => $value) { $new_banners[$key] = $value; } $_data->banners = $new_banners; } return $_data; } /* * Disable SSL verification in order to prevent download update failures * * @param array $args * @param string $url * @return object $array / public function http_request_args($args, $url) { $verify_ssl = $this->verify_ssl(); if (strpos($url, 'https://') !== false && strpos($url, 'edd_action=package_download')) { $args['sslverify'] = $verify_ssl; } return $args; } /* * Calls the API and, if successfull, returns the object delivered by the API. * * @uses get_bloginfo() * @uses wp_remote_post() * @uses is_wp_error() * * @param string $_action The requested action. * @param array $_data Parameters for the API action. * @return false\|object / private function api_request($_action, $_data) { global $wp_version; $data = array_merge($this->api_data, $_data); if ($data['slug'] != $this->slug) { return; } if ($this->api_url == trailingslashit(home_url())) { return false; // Don't allow a plugin to ping itself } $api_params = array( 'edd_action' => 'get_version', 'license' => !empty($data['license']) ? $data['license'] : '', 'item_name' => isset($data['item_name']) ? $data['item_name'] : false, 'item_id' => isset($data['item_id']) ? $data['item_id'] : false, 'version' => isset($data['version']) ? $data['version'] : false, 'slug' => $data['slug'], 'author' => $data['author'], 'url' => home_url(), 'beta' => !empty($data['beta']), ); $verify_ssl = $this->verify_ssl(); $request = wp_remote_post($this->api_url, array('timeout' => 15, 'sslverify' => $verify_ssl, 'body' => $api_params)); if (!is_wp_error($request)) { $request = json_decode(wp_remote_retrieve_body($request)); } if ($request && isset($request->sections)) { $request->sections = maybe_unserialize($request->sections); } else { $request = false; } if ($request && isset($request->banners)) { $request->banners = maybe_unserialize($request->banners); } if (!empty($request->sections)) { foreach ($request->sections as $key => $section) { $request->$key = (array)$section; } } return $request; } public function show_changelog() { global $edd_plugin_data; if (empty($_REQUEST['edd_sl_action']) \|\| 'view_plugin_changelog' != $_REQUEST['edd_sl_action']) { return; } if (empty($_REQUEST['plugin'])) { return; } if (empty($_REQUEST['slug'])) { return; } if (!current_user_can('update_plugins')) { wp_die( esc_html__('You do not have permission to install plugin updates', 'profile-builder'), esc_html__('Error', 'profile-builder'), array('response' => 403)); } $data = $edd_plugin_data[sanitize_text_field( $_REQUEST['slug'] )]; $beta = !empty($data['beta']) ? true : false; $cache_key = md5('edd_plugin_' . sanitize_key($_REQUEST['plugin']) . '_' . $beta . '_version_info'); $version_info = $this->get_cached_version_info($cache_key); if (false === $version_info) { $api_params = array( 'edd_action' => 'get_version', 'item_name' => isset($data['item_name']) ? $data['item_name'] : false, 'item_id' => isset($data['item_id']) ? $data['item_id'] : false, 'slug' => sanitize_text_field( $_REQUEST['slug'] ), 'author' => $data['author'], 'url' => home_url(), 'beta' => !empty($data['beta']) ); $verify_ssl = $this->verify_ssl(); $request = wp_remote_post($this->api_url, array('timeout' => 15, 'sslverify' => $verify_ssl, 'body' => $api_params)); if (!is_wp_error($request)) { $version_info = json_decode(wp_remote_retrieve_body($request)); } if (!empty($version_info) && isset($version_info->sections)) { $version_info->sections = maybe_unserialize($version_info->sections); } else { $version_info = false; } if (!empty($version_info)) { foreach ($version_info->sections as $key => $section) { $version_info->$key = (array)$section; } } $this->set_version_info_cache($version_info, $cache_key); } if (!empty($version_info) && isset($version_info->sections['changelog'])) { echo '<div style="background:#fff;padding:10px;">' . wp_kses_post( $version_info->sections['changelog'] ) . '</div>'; } exit; } public function get_cached_version_info($cache_key = '') { if (empty($cache_key)) { $cache_key = $this->cache_key; } $cache = get_option($cache_key); if (empty($cache['timeout']) \|\| current_time('timestamp') > $cache['timeout']) { return false; // Cache is expired } return json_decode($cache['value']); } public function set_version_info_cache($value = '', $cache_key = '') { if (empty($cache_key)) { $cache_key = $this->cache_key; } $data = array( 'timeout' => strtotime('+3 hours', current_time('timestamp')), 'value' => json_encode($value) ); update_option($cache_key, $data); } /* * Returns if the SSL of the store should be verified. * * @since 1.6.13 * @return bool / private function verify_ssl() { return (bool)apply_filters('edd_sl_api_request_verify_ssl', true, $this); } } } class WPPB_Plugin_Updater { private $store_url = "https://www.cozmoslabs.com"; public function __construct(){ if( defined( 'WPPB_PAID_PLUGIN_DIR' ) ){ add_action('admin_init', array( $this, 'activate_license' ) ); add_action('admin_init', array( $this, 'deactivate_license' ) ); add_action('admin_notices', array( $this, 'admin_activation_notices' ) ); add_filter('pre_set_site_transient_update_plugins', array( $this, 'check_license' ) ); // Activate current site if license is correct add_action('admin_init', array( $this, 'initial_site_activation' ) ); } } protected function get_option( $license_key_option ){ return get_option( $license_key_option ); } protected function delete_option( $license_key_option ){ delete_option( $license_key_option ); } protected function update_option( $license_key_option, $value ){ update_option( $license_key_option, $value ); } protected function license_page_url( ){ if( !is_multisite() ) return admin_url( 'admin.php?page=profile-builder-general-settings' ); else return network_admin_url( 'admin.php?page=profile-builder-register' ); } public function edd_sanitize_license( $new ) { $new = sanitize_text_field($new); $old = wppb_get_serial_number(); if( $old && $old != $new ) { $this->delete_option( 'wppb_license_status' ); // new license has been entered, so must reactivate } return $new; } /* * This function is run when wordpress checks for updates ( twice a day I believe ) * @param $transient_data * @return mixed / public function check_license( $transient_data ){ if( empty( $transient_data->response ) ) return $transient_data; if ( false === ( $wppb_check_license = get_transient( 'wppb_checked_licence' ) ) ) { $license = trim( wppb_get_serial_number() ); $license_details = array(); // data to send in our API request $api_params = array( 'edd_action' => 'activate_license', //as the license is already activated this does not do anything. We could use check_license action but it gives different results so we can't use it consistently with the result we get from the moment we activate it 'license' => $license, 'item_name' => urlencode( $this->get_edd_product_name() ), // the name of our product in EDD 'url' => home_url() ); // Call the custom API. $response = wp_remote_post( $this->store_url, array( 'timeout' => 15, 'sslverify' => false, 'body' => $api_params ) ); // make sure the response came back okay if ( !is_wp_error($response) ) { $license_data = json_decode(wp_remote_retrieve_body($response)); if ( false === $license_data->success ) $license_details = $license_data; else $license_details = $license_data; } $this->update_option('wppb_license_details', $license_details); if( !$license ){ //we need to throw a notice if we have a pro addon active and no license entered $license_details = (object) array( 'error' => 'missing' ); $this->update_option('wppb_license_details', $license_details); } set_transient( 'wppb_checked_licence', 'yes', DAY_IN_SECONDS ); } return $transient_data; } public function admin_activation_notices() { if ( isset( $_GET['wppb_sl_activation'] ) && ! empty( $_GET['message'] ) ) { switch( $_GET['wppb_sl_activation'] ) { case 'false': $class ="error"; break; case 'true': default: $class ="updated"; break; } ?> <div class="<?php echo esc_attr( $class ); ?>"> <p><?php echo wp_kses_post( urldecode( $_GET['message'] ) );//phpcs:ignore ?></p> </div> <?php } } public function activate_license() { // listen for our activate button to be clicked if( isset( $_POST['wppb_edd_license_activate'] ) ) { // run a quick security check if( ! check_admin_referer( 'wppb_license_nonce', 'wppb_license_nonce' ) ) return; // get out if we didn't click the Activate button if( !current_user_can( 'manage_options' ) ) return; if ( isset( $_POST['wppb_license_key'] ) && preg_match('/^[]+$/', $_POST['wppb_license_key']) && strlen( $_POST['wppb_license_key'] ) > 5 ) { //phpcs:ignore // pressed submit without altering the existing license key (containing only * as outputted by default) // useful for Deactivating/Activating valid license back $license = wppb_get_serial_number(); } else { // save the license $license = $this->edd_sanitize_license( trim( $_POST['wppb_license_key'] ) );//phpcs:ignore $this->update_option( 'wppb_license_key', $license ); } $message = array(); $license_details = array(); // data to send in our API request $api_params = array( 'edd_action' => 'activate_license', 'license' => $license, 'item_name' => urlencode( $this->get_edd_product_name() ), // the name of our product in EDD 'url' => home_url() ); // Call the custom API. $response = wp_remote_post( $this->store_url, array( 'timeout' => 15, 'sslverify' => false, 'body' => $api_params ) ); // make sure the response came back okay if ( is_wp_error( $response ) \|\| 200 !== wp_remote_retrieve_response_code( $response ) ) { $response_error_message = $response->get_error_message(); $message[] = ( is_wp_error( $response ) && ! empty( $response_error_message ) ) ? $response->get_error_message() : __( 'An error occurred, please try again.', 'profile-builder' ); } else { $license_data = json_decode( wp_remote_retrieve_body( $response ) ); if ( false === $license_data->success ) { switch( $license_data->error ) { case 'expired' : $message[] = sprintf( __( 'Your license key expired on %s.', 'profile-builder' ), date_i18n( get_option( 'date_format' ), strtotime( $license_data->expires, current_time( 'timestamp' ) ) ) ); break; case 'revoked' : $message[] = __( 'Your license key has been disabled.', 'profile-builder' ); break; case 'missing' : $message[] = __( 'Invalid license.', 'profile-builder' ); break; case 'invalid' : case 'site_inactive' : $message[] = __( 'Your license is not active for this URL.', 'profile-builder' ); break; case 'item_name_mismatch' : $message[] = sprintf( __( 'This appears to be an invalid license key for %s.', 'profile-builder' ), $this->get_edd_product_name() ); break; case 'no_activations_left': $message[] = __( 'Your license key has reached its activation limit.', 'profile-builder' ); break; default : $message[] = __( 'An error occurred, please try again.', 'profile-builder' ); break; } $license_details = $license_data; } else { $license_details = $license_data; } } //store the license reponse for each addon in the database $this->update_option( 'wppb_license_details', $license_details ); // Check if anything passed on a message constituting a failure if ( ! empty( $message ) ) { $message = implode( "<br/>", array_unique($message) );//if we got the same message for multiple addons show just one, and add a br in case we show multiple messages $redirect = add_query_arg( array( 'wppb_sl_activation' => 'false', 'message' => urlencode( $message ) ), $this->license_page_url() ); $this->update_option( 'wppb_license_status', isset( $license_data->error ) ? $license_data->error : $license_data->license ); wp_redirect( $redirect ); exit(); } // $license_data->license will be either "valid" or "invalid" $this->update_option( 'wppb_license_status', isset( $license_data->error ) ? $license_data->error : $license_data->license ); wp_redirect( add_query_arg( array( 'wppb_sl_activation' => 'true', 'message' => urlencode( __( 'You have successfully activated your license.', 'profile-builder' ) ) ), $this->license_page_url() ) ); exit(); } } public function initial_site_activation(){ if( is_multisite() ) $edd_sl_initial_activation = get_network_option( null, 'wppb_edd_sl_initial_activation', false ); else $edd_sl_initial_activation = get_option( 'wppb_edd_sl_initial_activation', false ); if( $edd_sl_initial_activation != false ) return; $license = wppb_get_serial_number(); if( empty( $license ) ) return; // data to send in our API request $api_params = array( 'edd_action' => 'activate_license', 'license' => $license, 'item_name' => urlencode( $this->get_edd_product_name() ), // the name of our product in EDD 'url' => home_url() ); // Call the custom API. $response = wp_remote_post( $this->store_url, array( 'timeout' => 15, 'sslverify' => false, 'body' => $api_params ) ); if ( !is_wp_error($response) ) { $license_data = json_decode(wp_remote_retrieve_body($response)); if ( false === $license_data->success ) $license_details = $license_data; else $license_details = $license_data; } $this->update_option('wppb_license_details', $license_details); if( is_multisite() ) update_network_option( null, 'wppb_edd_sl_initial_activation', 'yes' ); else update_option( 'wppb_edd_sl_initial_activation', 'yes', false ); } function deactivate_license() { // listen for our activate button to be clicked if( isset( $_POST['wppb_edd_license_deactivate'] ) ) { // run a quick security check if( ! check_admin_referer( 'wppb_license_nonce', 'wppb_license_nonce' ) ) return; // get out if we didn't click the Activate button if( !current_user_can( 'manage_options' ) ) return; // retrieve the license from the database $license = trim( wppb_get_serial_number() ); // data to send in our API request $api_params = array( 'edd_action' => 'deactivate_license', 'license' => $license, 'item_name' => urlencode( $this->get_edd_product_name() ), // the name of our product in EDD 'url' => home_url() ); // Call the custom API. $response = wp_remote_post( $this->store_url, array( 'timeout' => 15, 'sslverify' => false, 'body' => $api_params ) ); // make sure the response came back okay if ( is_wp_error( $response ) \|\| 200 !== wp_remote_retrieve_response_code( $response ) ) { if ( is_wp_error( $response ) ) $message = $response->get_error_message(); else $message = __( 'An error occurred, please try again.', 'profile-builder' ); wp_redirect( add_query_arg( array( 'wppb_sl_activation' => 'false', 'message' => urlencode( $message ) ), $this->license_page_url() ) ); exit(); } // decode the license data $license_data = json_decode( wp_remote_retrieve_body( $response ) ); // $license_data->license will be either "deactivated" or "failed" // regardless, we delete the record in the client website. Otherwise, if he tries to add a new license, he can't. if( $license_data->license == 'deactivated' \|\| $license_data->license == 'failed'){ delete_option( 'wppb_license_status' ); delete_option( 'wppb_license_details' ); } wp_redirect( $this->license_page_url() ); exit(); } } function get_edd_product_name(){ return PROFILE_BUILDER; } } new WPPB_Plugin_Updater();

| ver. 1.4 | Github | . | PHP 8.0.30 | Generation time: 0 | proxy | phpinfo | Settings