← All changes | WpInit/Router.php +308 -0 11.1.1 → 11.1.0 View file →

		@@ -1,0 +1,308 @@
	1	+<?php
	2	+
	3	+namespace AcyMailing\WpInit;
	4	+
	5	+defined('ABSPATH') || die('Restricted Access');
	6	+
	7	+use AcyMailing\Classes\PluginClass;
	8	+
	9	+class Router
	10	+{
	11	+ public function __construct()
	12	+ {
	13	+ // Back router
	14	+ add_action('wp_ajax_acymailing_router', [$this, 'router']);
	15	+ // Front router
	16	+ if (!acym_isAdmin()) {
	17	+ add_action('wp_loaded', [$this, 'frontRouter']);
	18	+ }
	19	+
	20	+ // Make sure we can redirect / download / modify headers if needed after some checks
	21	+ $pages = [
	22	+ 'automation',
	23	+ 'bounces',
	24	+ 'campaigns',
	25	+ 'configuration',
	26	+ 'dashboard',
	27	+ 'dynamics',
	28	+ 'fields',
	29	+ 'file',
	30	+ 'followups',
	31	+ 'forms',
	32	+ 'language',
	33	+ 'lists',
	34	+ 'mails',
	35	+ 'override',
	36	+ 'queue',
	37	+ 'segments',
	38	+ 'stats',
	39	+ 'users',
	40	+ ];
	41	+ $headerPages = [
	42	+ 'automation',
	43	+ 'bounces',
	44	+ 'campaigns',
	45	+ 'configuration',
	46	+ 'dashboard',
	47	+ 'fields',
	48	+ 'followups',
	49	+ 'forms',
	50	+ 'lists',
	51	+ 'mails',
	52	+ 'override',
	53	+ 'queue',
	54	+ 'segments',
	55	+ 'stats',
	56	+ 'users',
	57	+ ];
	58	+ foreach ($pages as $page) {
	59	+ if (in_array($page, $headerPages)) {
	60	+ // Ensure we can set headers in the plugin
	61	+ add_action('load-acymailing_page_acymailing_'.$page, [$this, 'waitHeaders']);
	62	+ }
	63	+ // Disable WP emojis in AcyMailing only
	64	+ add_action('admin_print_scripts-acymailing_page_acymailing_'.$page, [$this, 'disableJsBreakingPages']);
	65	+ add_action('admin_print_styles-acymailing_page_acymailing_'.$page, [$this, 'removeCssBreakingPages']);
	66	+ }
	67	+ add_action('admin_print_scripts-toplevel_page_acymailing_dashboard', [$this, 'disableJsBreakingPages']);
	68	+ add_action('admin_print_styles-toplevel_page_acymailing_dashboard', [$this, 'removeCssBreakingPages']);
	69	+ add_action('wp_enqueue_media', [$this, 'protectAcyMailingPages'], 100);
	70	+ add_action('init', [$this, 'autologin']);
	71	+ }
	72	+
	73	+ public function protectAcyMailingPages()
	74	+ {
	75	+ // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Make sure we're on an AcyMailing page.
	76	+ $page = isset($_REQUEST['page']) ? sanitize_text_field(wp_unslash($_REQUEST['page'])) : '';
	77	+ if (empty($page) || strpos($page, 'acymailing_') === false) {
	78	+ return;
	79	+ }
	80	+
	81	+ wp_dequeue_script('responsive-lightbox-admin-select2');
	82	+ wp_dequeue_style('responsive-lightbox-admin-select2');
	83	+
	84	+ // Remove theme loading select2 from Supreme module pro for divi
	85	+ wp_dequeue_script('dsm-select-two');
	86	+ wp_dequeue_style('dsm-select-two');
	87	+ }
	88	+
	89	+ public function waitHeaders()
	90	+ {
	91	+ ob_start();
	92	+ }
	93	+
	94	+ public function disableJsBreakingPages()
	95	+ {
	96	+ // Show normal emojis on AcyMailing pages
	97	+ remove_action('admin_print_scripts', 'print_emoji_detection_script');
	98	+
	99	+ // Slideshow ck breaks the editor
	100	+ remove_action('wp_enqueue_media', '\\Slideshowck\\Tinymce\\register_scripts_styles');
	101	+
	102	+ // Skaut Google Drive gallery breaks the editor
	103	+ remove_action('wp_enqueue_media', '\\Sgdg\\Admin\\TinyMCE\\register_scripts_styles');
	104	+
	105	+ // Remove theme loading select2 which breaks select2 in vueJS
	106	+ wp_dequeue_script('select2.js');
	107	+
	108	+ // The "Checkout Field Manager for WooCommerce" plugin breaks the js on every pages
	109	+ wp_dequeue_script('checkout_fields_js');
	110	+
	111	+ // Fixed editor incompatibility
	112	+ wp_dequeue_script('wp-optimize-minify-admin-purge');
	113	+
	114	+ // Remove Happy Elementor Addons select2 which breaks our select2
	115	+ wp_dequeue_script('happy-elementor-addons-select2');
	116	+ wp_dequeue_script('select2');
	117	+ }
	118	+
	119	+ public function removeCssBreakingPages()
	120	+ {
	121	+ wp_dequeue_style('saswp-main-css');
	122	+ wp_dequeue_style('WP REST API Controller');
	123	+ wp_dequeue_style('wpml-select-2');
	124	+ wp_dequeue_style('swcfpc_admin_css');
	125	+
	126	+ // Remove Happy Elementor Addons select2 which breaks our select2
	127	+ wp_dequeue_style('happy-elementor-addons-select2');
	128	+ wp_dequeue_style('select2');
	129	+
	130	+ // Messes with the tooltips, the schedule date in emails for example
	131	+ wp_dequeue_style('qlwapp-admin-menu');
	132	+ }
	133	+
	134	+ public function frontRouter()
	135	+ {
	136	+ $page = acym_getVar('string', 'page');
	137	+ if (empty($page) || $page !== ACYM_COMPONENT.'_front') return;
	138	+
	139	+ $this->router(true);
	140	+ }
	141	+
	142	+ public function router(bool $front = false): void
	143	+ {
	144	+ acym_displayFreeTrialMessage();
	145	+
	146	+
	147	+ if (!$front) {
	148	+ auth_redirect();
	149	+
	150	+ // The router only enforces auth_redirect() and the 'dashboard' controller is exempt from call()'s ACL, so mirror Menu.php's back-office access gate (wp_access groups) to keep arbitrary logged-in users out.
	151	+ if (!acym_hasBackofficeAccess()) {
	152	+ wp_die(esc_html(acym_translation('ACYM_ACCESS_DENIED')), '', ['response' => 403]);
	153	+ }
	154	+ }
	155	+
	156	+ if (file_exists(ACYM_FOLDER.'update.php')) {
	157	+ $acyActivation = new Activation();
	158	+ if (is_multisite()) {
	159	+ $currentBlog = get_current_blog_id();
	160	+ $sites = get_sites();
	161	+
	162	+ foreach ($sites as $site) {
	163	+ if (is_object($site)) {
	164	+ $site = get_object_vars($site);
	165	+ }
	166	+ switch_to_blog($site['blog_id']);
	167	+ acym_config(true);
	168	+ $acyActivation->updateAcym();
	169	+ }
	170	+
	171	+ switch_to_blog($currentBlog);
	172	+ } else {
	173	+ $acyActivation->updateAcym();
	174	+ }
	175	+
	176	+ acym_deleteFile(ACYM_FOLDER.'update.php');
	177	+ }
	178	+
	179	+ $config = acym_config(true);
	180	+
	181	+ // Get controller. If not found, take it from the page
	182	+ $ctrl = acym_getVar('cmd', 'ctrl', '');
	183	+ $task = acym_getVar('cmd', 'task', '');
	184	+
	185	+ if (!$front && acym_isAdmin() && file_exists(ACYM_NEW_FEATURES_SPLASHSCREEN_JSON) && acym_isWritable(ACYM_NEW_FEATURES_SPLASHSCREEN_JSON)) {
	186	+ $ctrl = 'dashboard';
	187	+ $task = 'features';
	188	+ acym_setVar('ctrl', $ctrl);
	189	+ acym_setVar('task', $task);
	190	+ }
	191	+
	192	+ $needToMigrate = $config->get('migration') == 0 && acym_existsAcyMailing59() && acym_getVar('string', 'task') !== 'migrationDone';
	193	+ $forceDashboard = !$front && ($needToMigrate || $config->get('walk_through', 0) == 1) && !(defined('DOING_AJAX') && DOING_AJAX) && 'dynamics' !== $ctrl;
	194	+ if ($forceDashboard) {
	195	+ $ctrl = 'dashboard';
	196	+ acym_setVar('ctrl', $ctrl);
	197	+ }
	198	+
	199	+ if (empty($ctrl)) {
	200	+ $ctrl = str_replace(ACYM_COMPONENT.'_', '', acym_getVar('cmd', 'page', ''));
	201	+
	202	+ if (empty($ctrl)) {
	203	+ echo esc_html(acym_translation('ACYM_PAGE_NOT_FOUND'));
	204	+
	205	+ // For Google search console in the frontend to prevent from doing 404 errors
	206	+ $noCache = acym_getVar('int', 'nocache', 0);
	207	+ if (!empty($noCache)) {
	208	+ acym_redirect(acym_rootURI());
	209	+ }
	210	+
	211	+ return;
	212	+ }
	213	+
	214	+ acym_setVar('ctrl', $ctrl);
	215	+ }
	216	+
	217	+ $this->deactivateHookAdminFooter();
	218	+ $subNamespace = $front ? 'Front' : '';
	219	+ $controllerNamespace = 'AcyMailing\\'.$subNamespace.'Controllers\\'.ucfirst($ctrl).'Controller';
	220	+
	221	+ if (!class_exists($controllerNamespace)) {
	222	+ echo esc_html(acym_translation('ACYM_PAGE_NOT_FOUND').': '.$ctrl);
	223	+
	224	+ return;
	225	+ }
	226	+
	227	+ if (!$front && acym_isAdmin() && $task != 'edit' && !(defined('DOING_AJAX') && DOING_AJAX)) {
	228	+ $pluginClass = new PluginClass();
	229	+ $installedPlugins = $pluginClass->getAll('title');
	230	+ foreach (ACYM_AVAILABLE_PLUGINS as $onePlugin) {
	231	+ if (empty($installedPlugins[$onePlugin['name']])) continue;
	232	+ if ($installedPlugins[$onePlugin['name']]->type !== 'ADDON') continue;
	233	+
	234	+ acym_enqueueMessage(
	235	+ acym_translationSprintf(
	236	+ 'ACYM_NEW_PLUGIN_FORMAT',
	237	+ $onePlugin['name'],
	238	+ '<a target="_blank" style="color: #00a5ff;" href="'.$onePlugin['downloadlink'].'">'.acym_translation('ACYM_CLICK_HERE').'</a>'
	239	+ ),
	240	+ 'error'
	241	+ );
	242	+ }
	243	+ }
	244	+
	245	+ $controller = new $controllerNamespace();
	246	+ if (empty($task)) {
	247	+ $task = acym_getVar('cmd', 'defaulttask', $controller->defaulttask);
	248	+ }
	249	+
	250	+ if ($forceDashboard && !method_exists($controller, $task)) {
	251	+ $task = 'listing';
	252	+ acym_setVar('task', $task);
	253	+ }
	254	+
	255	+ $controller->call($task, $front);
	256	+ }
	257	+
	258	+ public function autologin()
	259	+ {
	260	+ $subId = acym_getVar('int', 'autoSubId');
	261	+ $subToken = acym_getVar('string', 'subKey');
	262	+
	263	+ if (empty($subId) || empty($subToken)) {
	264	+ return;
	265	+ }
	266	+
	267	+ $currentUrl = acym_currentURL();
	268	+ $cleanedUrl = acym_cleanUrl($currentUrl, ['autoSubId', 'subKey']);
	269	+
	270	+ $config = acym_config();
	271	+ if ($config->get('autologin_urls', 0) == 0) {
	272	+ acym_redirect($cleanedUrl);
	273	+ }
	274	+
	275	+ $subscriber = acym_loadObject('SELECT `cms_id`, `key` FROM #__acym_user WHERE `id` = '.intval($subId));
	276	+ if (empty($subscriber->cms_id) || $subscriber->cms_id === acym_currentUserId()) {
	277	+ acym_redirect($cleanedUrl);
	278	+ }
	279	+
	280	+ if (!acym_verifyAutologinToken($subId, $subToken, $subscriber->key)) {
	281	+ acym_redirect($cleanedUrl);
	282	+ }
	283	+
	284	+ $user = get_user_by('id', $subscriber->cms_id);
	285	+
	286	+ if (is_wp_error($user) || !$user) {
	287	+ acym_redirect($cleanedUrl);
	288	+ }
	289	+
	290	+ // Never allow autologin for administrator accounts
	291	+ if ($user->has_cap('manage_options')) {
	292	+ acym_redirect($cleanedUrl);
	293	+ }
	294	+
	295	+ wp_clear_auth_cookie();
	296	+ wp_set_current_user($user->ID);
	297	+ wp_set_auth_cookie($user->ID);
	298	+
	299	+ acym_redirect($cleanedUrl);
	300	+ }
	301	+
	302	+ private function deactivateHookAdminFooter()
	303	+ {
	304	+ //Remove hook function which break AcyMailing pages
	305	+ remove_action('admin_footer', 'Freemius::_enrich_ajax_url');
	306	+ remove_action('admin_footer', 'Freemius::_open_support_forum_in_new_page');
	307	+ }
	308	+}