shell bypass 403
<?php
/**
* The Partner Settings
*/
namespace Extendify;
defined('ABSPATH') || die('No direct access.');
use Extendify\Shared\Services\Sanitizer;
/**
* Controller for handling partner settings
*/
class PartnerData
{
/**
* The partner id
*
* @var string
*/
public static $id;
/**
* The partner logo
*
* @var string
*/
public static $logo = '';
/**
* The partner display name
*
* @var string
*/
public static $name = '';
/**
* The partner colors
*
* @var string
*/
public static $colors = [];
/**
* The partner configuration.
*
* @var array
*/
protected static $config = [
'showDomainBanner' => false,
'showDomainTask' => false,
'showSecondaryDomainBanner' => false,
'showSecondaryDomainTask' => false,
'domainTLDs' => ['com', 'net'],
'stagingSites' => ['wordpress'],
'domainSearchURL' => '',
'showDraft' => false,
'aiChatEnabled' => false,
'enableImageImports-1-14-6' => false,
'disableLibraryAutoOpen' => false,
'enableApexDomain' => false,
'allowedPluginsSlugs' => [],
'requiredPlugins' => [],
];
// phpcs:disable Generic.Metrics.CyclomaticComplexity.MaxExceeded
/**
* Set up and collect partner data
*
* @return void
*/
public function __construct()
{
self::$id = Config::$partnerId;
$data = self::getPartnerData();
self::$config['showDomainBanner'] = ($data['showDomainBanner'] ?? self::$config['showDomainBanner']);
self::$config['showDomainTask'] = ($data['showDomainTask'] ?? self::$config['showDomainTask']);
self::$config['showSecondaryDomainTask'] = ($data['showSecondaryDomainTask'] ?? self::$config['showSecondaryDomainTask']);
self::$config['showSecondaryDomainBanner'] = ($data['showSecondaryDomainBanner'] ?? self::$config['showSecondaryDomainBanner']);
self::$config['domainTLDs'] = ($data['domainTLDs'] ?? self::$config['domainTLDs']);
self::$config['stagingSites'] = array_map('trim', ($data['stagingSites'] ?? self::$config['stagingSites']));
self::$config['domainSearchURL'] = ($data['domainSearchURL'] ?? self::$config['domainSearchURL']);
self::$logo = isset($data['logo'][0]['thumbnails']['large']['url']) ? $data['logo'][0]['thumbnails']['large']['url'] : self::$logo;
self::$config['showDraft'] = ($data['showDraft'] ?? self::$config['showDraft']);
self::$config['aiChatEnabled'] = ($data['showChat'] ?? self::$config['aiChatEnabled']);
self::$config['enableImageImports-1-14-6'] = ($data['enableImageImports-1-14-6'] ?? self::$config['enableImageImports-1-14-6']);
self::$config['disableLibraryAutoOpen'] = ($data['disableLibraryAutoOpen'] ?? self::$config['disableLibraryAutoOpen']);
self::$config['enableApexDomain'] = ($data['enableApexDomain'] ?? self::$config['enableApexDomain']);
self::$name = ($data['Name'] ?? self::$name);
self::$colors = [
'backgroundColor' => ($data['backgroundColor'] ?? null),
'foregroundColor' => ($data['foregroundColor'] ?? null),
'secondaryColor' => ($data['secondaryColor'] ?? ($data['backgroundColor'] ?? null)),
'secondaryColorText' => '#ffffff',
];
self::$config['allowedPluginsSlugs'] = ($data['allowedPluginsSlugs'] ?? self::$config['allowedPluginsSlugs']);
self::$config['requiredPlugins'] = ($data['requiredPlugins'] ?? self::$config['requiredPlugins']);
}
/**
* Retrieve partner data from a transient or from the API.
*
* @return array
*/
public static function getPartnerData()
{
// Do not make a request without a partner ID (i.e. it's opt in).
if (!self::$id || self::$id === 'no-partner') {
return [];
}
// Return if we have the transient. Data might be empty.
if (get_transient('extendify_partner_data_cache_check') !== false) {
return array_merge(self::$config, get_option('extendify_partner_data_v2', []));
}
$response = wp_remote_get(
add_query_arg(
[
'partner' => self::$id,
'wp_language' => \get_locale(),
],
'https://dashboard.extendify.com/api/onboarding/partner-data/'
),
['headers' => ['Accept' => 'application/json']]
);
if (is_wp_error($response)) {
// If the request fails, try again in 30 minutes.
set_transient('extendify_partner_data_cache_check', true, (30 * MINUTE_IN_SECONDS));
return array_merge(self::$config, get_option('extendify_partner_data_v2', []));
}
$result = json_decode(wp_remote_retrieve_body($response), true);
if (!array_key_exists('data', $result)) {
// If the request didn't have the data key, try again in 30 minutes.
set_transient('extendify_partner_data_cache_check', true, (30 * MINUTE_IN_SECONDS));
return array_merge(self::$config, get_option('extendify_partner_data_v2', []));
}
// Cache the data for 2 days.
set_transient('extendify_partner_data_cache_check', true, (2 * DAY_IN_SECONDS));
// In the case they sent in a partner id that didn't exist, we get [].
if (empty($result['data'])) {
update_option('extendify_partner_data_v2', []);
return [];
}
$sanitizedData = array_merge(
Sanitizer::sanitizeUnknown($result['data']),
['consentTermsHTML' => \sanitize_text_field(htmlentities(($result['data']['consentTermsHTML'] ?? '')))]
);
// Merge before persisting as this data is accessed directly elsewhere.
$mergedData = array_merge(self::$config, $sanitizedData);
update_option('extendify_partner_data_v2', $mergedData);
return $mergedData;
}
/**
* Return colors mapped as css variables
*
* @return array
*/
public static function cssVariableMapping()
{
$mapping = [
'backgroundColor' => '--ext-banner-main',
'foregroundColor' => '--ext-banner-text',
'secondaryColor' => '--ext-design-main',
'secondaryColorText' => '--ext-design-text',
];
$cssVariables = [];
$adminTheme = \get_user_option('admin_color', get_current_user_id());
if (isset($GLOBALS['_wp_admin_css_colors'][$adminTheme])) {
$theme = $GLOBALS['_wp_admin_css_colors'][$adminTheme];
if (in_array($adminTheme, ['modern', 'blue'], true)) {
$cssVariables['--wp-admin-theme-main'] = $theme->colors[1];
$cssVariables['--wp-admin-theme-accent'] = $theme->colors[2];
} else {
$cssVariables['--wp-admin-theme-bg'] = $theme->colors[0];
$cssVariables['--wp-admin-theme-main'] = $theme->colors[2];
$cssVariables['--wp-admin-theme-accent'] = $theme->colors[3];
}
}
// Partner specific colors.
foreach ($mapping as $color => $variable) {
if (isset(self::$colors[$color])) {
$cssVariables[$variable] = self::$colors[$color];
}
}
return $cssVariables;
}
/**
* Retrieves the value of a setting.
*
* This method first checks if the setting exists as a static property of the class.
* If it does, it returns the value of that property. Otherwise, it looks for the
* setting in the config array and returns its value if found.
*
* @param string $settingKey The key of the setting to retrieve.
* @return mixed The value of the setting if found, or null if not found.
*/
public static function setting($settingKey)
{
if (property_exists(self::class, $settingKey)) {
return self::$$settingKey;
}
return (self::$config[$settingKey] ?? null);
}
}