Server : Apache/2 System : Linux vps.sdns.vn 3.10.0-1160.15.2.el7.x86_64 #1 SMP Wed Feb 3 15:06:38 UTC 2021 x86_64 User : phatdatpq ( 1022) PHP Version : 7.2.34 Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname Directory : /home/phatdatpq/public_html/wp-content/plugins/nextend-facebook-connect/admin/ |
Upload File : |
<?php define('NSL_ADMIN_PATH', __FILE__); require_once dirname(__FILE__) . '/upgrader.php'; NextendSocialUpgrader::init(); class NextendSocialLoginAdmin { public static function init() { add_action('admin_menu', 'NextendSocialLoginAdmin::admin_menu', 1); add_action('admin_init', 'NextendSocialLoginAdmin::admin_init'); add_filter('plugin_action_links', 'NextendSocialLoginAdmin::plugin_action_links', 10, 2); add_filter('nsl_update_settings_validate_nextend_social_login', 'NextendSocialLoginAdmin::validateSettings', 10, 2); add_action('wp_ajax_nsl_save_review_state', 'NextendSocialLoginAdmin::save_review_state'); } public static function getAdminUrl($view = 'providers') { return add_query_arg(array( 'page' => 'nextend-social-login', 'view' => $view ), admin_url('options-general.php')); } public static function getAdminSettingsUrl($subview = 'general') { return add_query_arg(array( 'page' => 'nextend-social-login', 'view' => 'global-settings', 'subview' => $subview ), admin_url('options-general.php')); } public static function admin_menu() { $menu = add_options_page('Nextend Social Login', 'Nextend Social Login', 'manage_options', 'nextend-social-login', array( 'NextendSocialLoginAdmin', 'display_admin' )); add_action('admin_print_styles-' . $menu, 'NextendSocialLoginAdmin::admin_css'); } public static function admin_css() { wp_enqueue_style('nsl-admin-stylesheet', plugins_url('/style.css?nsl-ver=' . urlencode(NextendSocialLogin::$version), NSL_ADMIN_PATH)); } public static function display_admin() { $view = !empty($_REQUEST['view']) ? $_REQUEST['view'] : ''; if (substr($view, 0, 9) == 'provider-') { $providerID = substr($view, 9); if (isset(NextendSocialLogin::$providers[$providerID])) { self::display_admin_area('provider', $providerID); return; } } switch ($view) { case 'fix-redirect-uri': self::display_admin_area('fix-redirect-uri'); break; case 'domain-changed': self::display_admin_area('domain-changed'); break; case 'debug': self::display_admin_area('debug'); break; case 'test-connection': self::display_admin_area('test-connection'); break; case 'global-settings': self::display_admin_area('global-settings'); break; case 'pro-addon': self::display_admin_area('pro-addon'); break; case 'install-pro': if (check_admin_referer('nextend-social-login')) { self::display_admin_area('install-pro'); } else { self::display_admin_area('providers'); } break; default: self::display_admin_area('providers'); break; } } /** * @param string $view * @param string $currentProvider */ private static function display_admin_area($view, $currentProvider = '') { if (empty($currentProvider)) { include(dirname(__FILE__) . '/templates/header.php'); include(dirname(__FILE__) . '/templates/menu.php'); \NSL\Notices::displayNotices(); /** @var string $view */ include(dirname(__FILE__) . '/templates/' . $view . '.php'); include(dirname(__FILE__) . '/templates/footer.php'); } else { include(dirname(__FILE__) . '/templates/' . $view . '.php'); } } public static function renderProSettings() { include(dirname(__FILE__) . '/templates/global-settings-pro.php'); } public static function admin_init() { if (current_user_can('manage_options')) { if (!isset($_GET['page']) || $_GET['page'] != 'nextend-social-login' || !isset($_GET['view']) || $_GET['view'] != 'fix-redirect-uri') { add_action('admin_notices', 'NextendSocialLoginAdmin::show_oauth_uri_notice'); } if (!self::isPro() && NextendSocialLogin::$settings->get('woocommerce_dismissed') == 0 && class_exists('woocommerce', false) && count(NextendSocialLogin::$enabledProviders)) { add_action('admin_notices', 'NextendSocialLoginAdmin::show_woocommerce_notice'); } if (defined('THEME_MY_LOGIN_VERSION') && version_compare(THEME_MY_LOGIN_VERSION, '7.0.0', '>=')) { if (!NextendSocialLogin::getRegisterFlowPage() || !NextendSocialLogin::getProxyPage()) { add_action('admin_notices', 'NextendSocialLoginAdmin::show_theme_my_login_notice'); } } } if (isset($_GET['page']) && $_GET['page'] == 'nextend-social-login') { if (!empty($_GET['view'])) { switch ($_GET['view']) { case 'enable': case 'sub-enable': if (!empty($_GET['provider'])) { if (check_admin_referer('nextend-social-login_enable_' . $_GET['provider'])) { NextendSocialLogin::enableProvider($_GET['provider']); } if ($_GET['view'] == 'sub-enable') { wp_redirect(NextendSocialLogin::$providers[$_GET['provider']]->getAdmin() ->getUrl('settings')); exit; } wp_redirect(self::getAdminUrl()); exit; } break; case 'disable': case 'sub-disable': if (!empty($_GET['provider'])) { if (check_admin_referer('nextend-social-login_disable_' . $_GET['provider'])) { NextendSocialLogin::disableProvider($_GET['provider']); } if ($_GET['view'] == 'sub-disable') { wp_redirect(NextendSocialLogin::$providers[$_GET['provider']]->getAdmin() ->getUrl('settings')); exit; } wp_redirect(self::getAdminUrl()); exit; } break; case 'update_oauth_redirect_url': if (check_admin_referer('nextend-social-login_update_oauth_redirect_url')) { foreach (NextendSocialLogin::$enabledProviders AS $provider) { $provider->updateOauthRedirectUrl(); } } wp_redirect(self::getAdminUrl()); exit; case 'dismiss_woocommerce': if (check_admin_referer('nsl_dismiss_woocommerce')) { NextendSocialLogin::$settings->update(array( 'woocommerce_dismissed' => 1 )); if (!empty($_REQUEST['redirect_to'])) { wp_safe_redirect($_REQUEST['redirect_to']); exit; } } wp_redirect(self::getAdminUrl()); break; } } } add_action('admin_post_nextend-social-login', 'NextendSocialLoginAdmin::save_form_data'); add_action('wp_ajax_nextend-social-login', 'NextendSocialLoginAdmin::ajax_save_form_data'); add_action('admin_enqueue_scripts', 'NextendSocialLoginAdmin::admin_enqueue_scripts'); if (!function_exists('json_decode')) { add_settings_error('nextend-social', 'settings_updated', printf(__('%s needs json_decode function.', 'nextend-facebook-connect'), 'Nextend Social Login') . ' ' . __('Please contact your server administrator and ask for solution!', 'nextend-facebook-connect'), 'error'); } add_action('show_user_profile', array( 'NextendSocialLoginAdmin', 'showUserFields' )); add_action('edit_user_profile', array( 'NextendSocialLoginAdmin', 'showUserFields' )); add_filter('display_post_states', array( 'NextendSocialLoginAdmin', 'display_post_states' ), 10, 2); } public static function save_form_data() { if (current_user_can('manage_options') && check_admin_referer('nextend-social-login')) { foreach ($_POST AS $k => $v) { if (is_string($v)) { $_POST[$k] = stripslashes($v); } } $view = !empty($_REQUEST['view']) ? $_REQUEST['view'] : ''; if ($view == 'global-settings') { NextendSocialLogin::$settings->update($_POST); \NSL\Notices::addSuccess(__('Settings saved.')); wp_redirect(self::getAdminSettingsUrl(!empty($_REQUEST['subview']) ? $_REQUEST['subview'] : '')); exit; } else if ($view == 'pro-addon') { NextendSocialLogin::$settings->update($_POST); if (NextendSocialLogin::$settings->get('license_key_ok') == '1') { \NSL\Notices::addSuccess(__('The activation was successful', 'nextend-facebook-connect')); } wp_redirect(self::getAdminUrl($view)); exit; } else if ($view == 'pro-addon-deauthorize') { NextendSocialLogin::$settings->update(array( 'license_key' => '' )); \NSL\Notices::addSuccess(__('Deactivate completed.', 'nextend-facebook-connect')); wp_redirect(self::getAdminUrl('pro-addon')); exit; } else if ($view == 'import') { $provider = isset($_GET['provider']) ? $_GET['provider'] : ''; if (!empty($provider) && isset(NextendSocialLogin::$providers[$provider]) && NextendSocialLogin::$providers[$provider]->getState() == 'legacy') { NextendSocialLogin::$providers[$provider]->import(); wp_redirect(NextendSocialLogin::$providers[$provider]->getAdmin() ->getUrl('settings')); exit; } wp_redirect(NextendSocialLoginAdmin::getAdminUrl()); exit; } else if (substr($view, 0, 9) == 'provider-') { $providerID = substr($view, 9); if (isset(NextendSocialLogin::$providers[$providerID])) { NextendSocialLogin::$providers[$providerID]->settings->update($_POST); \NSL\Notices::addSuccess(__('Settings saved.')); wp_redirect(NextendSocialLogin::$providers[$providerID]->getAdmin() ->getUrl(isset($_POST['subview']) ? $_POST['subview'] : '')); exit; } } } wp_redirect(self::getAdminUrl()); exit; } public static function ajax_save_form_data() { check_ajax_referer('nextend-social-login'); if (current_user_can('manage_options')) { $view = !empty($_POST['view']) ? $_POST['view'] : ''; switch ($view) { case 'orderProviders': if (!empty($_POST['ordering'])) { NextendSocialLogin::$settings->update(array( 'ordering' => $_POST['ordering'] )); } break; case 'newsletterSubscribe': $user_info = wp_get_current_user(); update_user_meta($user_info->ID, 'nsl_newsletter_subscription', 1); break; } } } public static function validateSettings($newData, $postedData) { if (isset($postedData['redirect'])) { if (isset($postedData['custom_redirect_enabled']) && $postedData['custom_redirect_enabled'] == '1') { $newData['redirect'] = trim(sanitize_text_field($postedData['redirect'])); } else { $newData['redirect'] = ''; } } if (isset($postedData['redirect_reg'])) { if (isset($postedData['custom_redirect_reg_enabled']) && $postedData['custom_redirect_reg_enabled'] == '1') { $newData['redirect_reg'] = trim(sanitize_text_field($postedData['redirect_reg'])); } else { $newData['redirect_reg'] = ''; } } if (isset($postedData['default_redirect'])) { if (isset($postedData['default_redirect_enabled']) && $postedData['default_redirect_enabled'] == '1') { $newData['default_redirect'] = trim(sanitize_text_field($postedData['default_redirect'])); } else { $newData['default_redirect'] = ''; } } if (isset($postedData['default_redirect_reg'])) { if (isset($postedData['default_redirect_reg_enabled']) && $postedData['default_redirect_reg_enabled'] == '1') { $newData['default_redirect_reg'] = trim(sanitize_text_field($postedData['default_redirect_reg'])); } else { $newData['default_redirect_reg'] = ''; } } foreach ($postedData as $key => $value) { switch ($key) { case 'debug': case 'login_restriction': case 'terms_show': case 'store_name': case 'store_email': case 'avatar_store': case 'store_access_token': case 'redirect_prevent_external': if ($value == 1) { $newData[$key] = 1; } else { $newData[$key] = 0; } break; case 'terms': $newData[$key] = wp_kses_post($value); break; case 'blacklisted_urls': $newData[$key] = sanitize_textarea_field($postedData[$key]); break; case 'show_login_form': case 'show_registration_form': case 'show_embedded_login_form': $newData[$key] = sanitize_text_field($value); break; case 'enabled': if (is_array($value)) { $newData[$key] = $value; } break; case 'ordering': if (is_array($value)) { $newData[$key] = $value; } break; case 'license_key': \NSL\Notices::clear(); $value = trim(sanitize_text_field($value)); if ($value != NextendSocialLogin::$settings->get('license_key') || NextendSocialLogin::$settings->get('license_key_ok') == '0') { $newData['license_key_ok'] = '0'; if (!empty($value)) { try { $response = self::apiCall('test-license', array('license_key' => $value)); if ($response === 'OK') { $newData[$key] = $value; $newData['license_key_ok'] = '1'; $newData['authorized_domain'] = NextendSocialLogin::getDomain(); } } catch (Exception $e) { \NSL\Notices::addError($e->getMessage()); } } } break; case 'review_state': case 'woocommerce_dismissed': $newData[$key] = intval($value); break; case 'authorized_domain': $newData[$key] = $value; break; case 'register-flow-page': case 'proxy-page': if (get_post($value) !== null) { $newData[$key] = $value; } else { $newData[$key] = ''; } break; } } return $newData; } public static function plugin_action_links($links, $file) { if ($file != NSL_PLUGIN_BASENAME) { return $links; } $settings_link = '<a href="' . esc_url(menu_page_url('nextend-social-login', false)) . '">' . __('Settings') . '</a>'; array_unshift($links, $settings_link); return $links; } public static function admin_enqueue_scripts() { if ('settings_page_nextend-social-login' === get_current_screen()->id) { // Since WordPress 4.9 if (function_exists('wp_enqueue_code_editor')) { // Enqueue code editor and settings for manipulating HTML. $settings = wp_enqueue_code_editor(array('type' => 'text/html')); // Bail if user disabled CodeMirror. if (false === $settings) { return; } wp_add_inline_script('code-editor', sprintf('jQuery( function() { var settings = %s; jQuery(".nextend-html-editor").each(function(i, el){wp.codeEditor.initialize( el, settings);}); } );', wp_json_encode($settings))); $settings['codemirror']['readOnly'] = 'nocursor'; wp_add_inline_script('code-editor', sprintf('jQuery( function() { var settings = %s; jQuery(".nextend-html-editor-readonly").each(function(i, el){wp.codeEditor.initialize( el, settings);}); } );', wp_json_encode($settings))); } if (isset($_GET['view']) && $_GET['view'] == 'pro-addon') { wp_enqueue_script('plugin-install'); wp_enqueue_script('updates'); } } } private static $endpoint = 'https://api.nextendweb.com/v2/nextend-api/v2/'; public static function getEndpoint($action = '') { return self::$endpoint . 'product/nsl/' . urlencode($action); } /** * @param $action * @param array $args * * @return bool|mixed * @throws Exception */ public static function apiCall($action, $args = array()) { $http_args = array( 'timeout' => 15, 'user-agent' => 'WordPress', 'body' => array_merge(array( 'platform' => 'wordpress', 'domain' => NextendSocialLogin::getDomain(), 'license_key' => NextendSocialLogin::$settings->get('license_key') ), $args) ); $request = wp_remote_get(self::getEndpoint($action), $http_args); if (is_wp_error($request)) { throw new Exception($request->get_error_message()); } else if (wp_remote_retrieve_response_code($request) !== 200) { $response = json_decode(wp_remote_retrieve_body($request), true); if (isset($response['message'])) { $message = 'Nextend Social Login Pro Addon: ' . $response['message']; \NSL\Notices::addError($message); return new WP_Error('error', $message); } throw new Exception(sprintf(__('Unexpected response: %s', 'nextend-facebook-connect'), wp_remote_retrieve_body($request))); } $response = json_decode(wp_remote_retrieve_body($request), true); return $response; } public static function showProBox() { if (!self::isPro()) { include(dirname(__FILE__) . '/templates/pro.php'); } } public static function getProState() { if (NextendSocialLogin::$settings->get('license_key_ok') == '1') { if (self::isPro()) { return 'activated'; } else if (!current_user_can('install_plugins')) { return 'no-capability'; } else { if (file_exists(WP_PLUGIN_DIR . '/nextend-social-login-pro/nextend-social-login-pro.php')) { return 'installed'; } else { return 'not-installed'; } } } return 'no-license'; } public static function trackUrl($url, $source) { return add_query_arg(array( 'utm_campaign' => 'nsl', 'utm_source' => urlencode($source), 'utm_medium' => 'nsl-wordpress-' . (apply_filters('nsl-pro', false) ? 'pro' : 'free') ), $url); } public static function save_review_state() { check_ajax_referer('nsl_save_review_state'); if (isset($_POST['review_state'])) { $review_state = intval($_POST['review_state']); if ($review_state > 0) { NextendSocialLogin::$settings->update(array( 'review_state' => $review_state )); } } wp_die(); } public static function show_oauth_uri_notice() { foreach (NextendSocialLogin::$enabledProviders AS $provider) { if (!$provider->checkOauthRedirectUrl()) { echo '<div class="error"> <p>' . sprintf(__('%s detected that your login url changed. You must update the Oauth redirect URIs in the related social applications.', 'nextend-facebook-connect'), '<b>Nextend Social Login</b>') . '</p> <p class="submit"><a href="' . NextendSocialLoginAdmin::getAdminUrl('fix-redirect-uri') . '" class="button button-primary">' . __('Fix Error', 'nextend-facebook-connect') . ' - ' . __('Oauth Redirect URI', 'nextend-facebook-connect') . '</a></p> </div>'; break; } } } /* Legacy compatibility cessation notice */ public static function show_facebook_compat_cessation_notice() { global $pagenow; if (!($pagenow == 'options-general.php' && $_GET['view'] == 'provider-facebook' && $_GET['subview'] == 'import' )) { echo '<div class="error"> <p>' . sprintf(__('%2$s detected that you have saved configurations related to %1$s, which is discontinued and the backwards compatibility will be removed in the next release of %2$s. Please import the current settings of %1$s and replace your old social buttons with NSL!', 'nextend-facebook-connect'), 'Nextend Facebook Connect', '<b>Nextend Social Login</b>') . '</p> <p class="submit"><a href="' . add_query_arg(array( 'subview' => 'import' ), NextendSocialLoginAdmin::getAdminUrl('provider-google')) . '" class="button button-primary">' . __('Import', 'nextend-facebook-connect') . ' - Facebook ' . __('Legacy Settings', 'nextend-facebook-connect') . '</a></p> </div>'; } } public static function show_google_compat_cessation_notice() { global $pagenow; if (!($pagenow == 'options-general.php' && $_GET['view'] == 'provider-google' && $_GET['subview'] == 'import' )) { echo '<div class="error"> <p>' . sprintf(__('%2$s detected that you have saved configurations related to %1$s, which is discontinued and the backwards compatibility will be removed in the next release of %2$s. Please import the current settings of %1$s and replace your old social buttons with NSL!', 'nextend-facebook-connect'), 'Nextend Google Connect', '<b>Nextend Social Login</b>') . '</p> <p class="submit"><a href="' . add_query_arg(array( 'subview' => 'import' ), NextendSocialLoginAdmin::getAdminUrl('provider-google')) . '" class="button button-primary">' . __('Import', 'nextend-facebook-connect') . ' - Google ' . __('Legacy Settings', 'nextend-facebook-connect') . '</a></p> </div>'; } } public static function show_twitter_compat_cessation_notice() { global $pagenow; if (!($pagenow == 'options-general.php' && $_GET['view'] == 'provider-twitter' && $_GET['subview'] == 'import' )) { echo '<div class="error"> <p>' . sprintf(__('%2$s detected that you have saved configurations related to %1$s, which is discontinued and the backwards compatibility will be removed in the next release of %2$s. Please import the current settings of %1$s and replace your old social buttons with NSL!', 'nextend-facebook-connect'), 'Nextend Twitter Connect', '<b>Nextend Social Login</b>') . '</p> <p class="submit"><a href="' . add_query_arg(array( 'subview' => 'import' ), NextendSocialLoginAdmin::getAdminUrl('provider-twitter')) . '" class="button button-primary">' . __('Import', 'nextend-facebook-connect') . ' - Twitter ' . __('Legacy Settings', 'nextend-facebook-connect') . '</a></p> </div>'; } } /* Legacy compatibility cessation notice end */ public static function show_woocommerce_notice() { $dismissUrl = wp_nonce_url(add_query_arg(array('redirect_to' => NextendSocialLogin::getCurrentPageURL()), NextendSocialLoginAdmin::getAdminUrl('dismiss_woocommerce')), 'nsl_dismiss_woocommerce'); echo '<div class="notice notice-info"> <p>' . sprintf(__('%1$s detected that %2$s installed on your site. You need the Pro Addon to display Social Login buttons in %2$s login form!', 'nextend-facebook-connect'), '<b>Nextend Social Login</b>', '<b>WooCommerce</b>') . '</p> <p><a href="' . NextendSocialLoginAdmin::trackUrl('https://nextendweb.com/social-login/', 'woocommerce-notice') . '" target="_blank" onclick="window.location.href=\'' . esc_url($dismissUrl) . '\';" class="button button-primary">' . __('Dismiss and check Pro Addon', 'nextend-facebook-connect') . '</a> <a href="' . esc_url($dismissUrl) . '" class="button button-secondary">' . __('Dismiss', 'nextend-facebook-connect') . '</a></p> </div>'; } public static function show_theme_my_login_notice() { echo '<div class="notice notice-info"> <p>' . sprintf(__('%1$s detected that %2$s installed on your site. You must set "<b>Page for register flow</b>" and "<b>OAuth redirect uri proxy page</b>" in %1$s to work properly.', 'nextend-facebook-connect'), '<b>Nextend Social Login</b>', '<b>Theme My Login</b>') . '</p> <p><a href="' . NextendSocialLoginAdmin::getAdminSettingsUrl('general') . '" class="button button-primary">' . __('Fix now', 'nextend-facebook-connect') . '</a></p> </div>'; } public static function isPro() { return apply_filters('nsl-pro', false); } public static function showUserFields($user) { include(dirname(__FILE__) . '/EditUser.php'); } public static function authorizeBox($view = 'pro-addon') { $args = array( 'product' => 'nsl', 'domain' => NextendSocialLogin::getDomain(), 'platform' => 'wordpress' ); $authorizeUrl = NextendSocialLoginAdmin::trackUrl('https://secure.nextendweb.com/authorize/', 'authorize'); ?> <div class="nsl-box nsl-box-yellow nsl-box-padlock"> <h2 class="title"><?php _e('Activate your Pro Addon', 'nextend-facebook-connect'); ?></h2> <p><?php _e('To be able to use the Pro features, you need to activate Nextend Social Connect Pro Addon. You can do this by clicking on the Activate button below then select the related purchase.', 'nextend-facebook-connect'); ?></p> <p> <a href="#" onclick="window.authorizeWindow = NSLPopupCenter('<?php echo $authorizeUrl; ?>', 'authorize-window', 800, 800);return false;" class="button button-primary"><?php _e('Activate', 'nextend-facebook-connect'); ?></a> </p> </div> <script type="text/javascript"> (function ($) { var args = <?php echo wp_json_encode($args); ?>; window.addEventListener('message', function (e) { if (e.origin === 'https://secure.nextendweb.com') { if (typeof window.authorizeWindow === 'undefined') { if (typeof e.source !== 'undefined') { window.authorizeWindow = e.source; } else { return false; } } try { var envelope = JSON.parse(e.data); if (envelope.action) { switch (envelope.action) { case 'ready': window.authorizeWindow.postMessage(JSON.stringify({ 'action': 'authorize', 'data': args }), 'https://secure.nextendweb.com'); break; case 'license': $('#nsl_license_key').val(envelope.license_key); $('#nsl_license_form').submit(); break; } } } catch (ex) { console.error(ex); console.log(e); } } }); })(jQuery); </script> <form id="nsl_license_form" method="post" action="<?php echo admin_url('admin-post.php'); ?>" novalidate="novalidate" style="display:none;"> <?php wp_nonce_field('nextend-social-login'); ?> <input type="hidden" name="action" value="nextend-social-login"/> <input type="hidden" name="view" value="<?php echo $view; ?>"/> <table class="form-table"> <tbody> <tr> <th scope="row"><label for="nsl_license_key"><?php _e('License key', 'nextend-facebook-connect'); ?></label></th> <td><input name="license_key" type="text" id="nsl_license_key" value="<?php echo esc_attr(NextendSocialLogin::$settings->get('license_key')); ?>" class="regular-text"> </td> </tr> </tbody> </table> </form> <?php } public static function display_post_states($post_states, $post) { if (NextendSocialLogin::getProxyPage() === $post->ID) { $post_states['nsl_proxy_page'] = __('OAuth proxy page') . ' — NSL'; } if (NextendSocialLogin::getRegisterFlowPage() === $post->ID) { $post_states['nsl_proxy_page'] = __('Register flow page') . ' — NSL'; } return $post_states; } }