class-activation.php
7 months ago
class-admin-menu-organizer.php
7 months ago
class-admin-menu-svg-icon-mask.php
7 months ago
class-auto-publish-posts-with-missed-schedule.php
7 months ago
class-avif-upload.php
7 months ago
class-captcha-protection.php
7 months ago
class-change-login-url.php
7 months ago
class-cleanup-admin-bar.php
7 months ago
class-common-methods.php
7 months ago
class-content-duplication.php
7 months ago
class-content-order.php
7 months ago
class-custom-admin-footer-text.php
7 months ago
class-custom-body-class.php
7 months ago
class-custom-css.php
7 months ago
class-custom-nav-menu-items-in-new-tab.php
7 months ago
class-deactivation.php
7 months ago
class-disable-author-archives.php
7 months ago
class-disable-comments.php
7 months ago
class-disable-dashboard-widgets.php
7 months ago
class-disable-embeds.php
7 months ago
class-disable-feeds.php
7 months ago
class-disable-gutenberg.php
7 months ago
class-disable-rest-api.php
7 months ago
class-disable-smaller-components.php
7 months ago
class-disable-updates.php
7 months ago
class-disable-xml-rpc.php
7 months ago
class-display-system-summary.php
7 months ago
class-email-address-obfuscator.php
7 months ago
class-email-delivery.php
7 months ago
class-enhance-list-tables.php
7 months ago
class-external-permalinks.php
7 months ago
class-heartbeat-control.php
7 months ago
class-hide-admin-bar.php
7 months ago
class-hide-admin-notices.php
7 months ago
class-image-sizes-panel.php
7 months ago
class-image-upload-control.php
7 months ago
class-insert-head-body-footer-code.php
7 months ago
class-last-login-column.php
7 months ago
class-limit-login-attempts.php
7 months ago
class-login-id-type.php
7 months ago
class-login-logout-menu.php
7 months ago
class-maintenance-mode.php
7 months ago
class-manage-ads-appads-txt.php
7 months ago
class-manage-robots-txt.php
7 months ago
class-media-replacement.php
7 months ago
class-multiple-user-roles.php
7 months ago
class-obfuscate-author-slugs.php
7 months ago
class-open-external-links-in-new-tab.php
7 months ago
class-password-protection.php
7 months ago
class-redirect-after-login.php
7 months ago
class-redirect-after-logout.php
7 months ago
class-redirect-fourofour.php
7 months ago
class-registration-date-column.php
7 months ago
class-revisions-control.php
7 months ago
class-search-engines-visibility.php
7 months ago
class-settings-fields-render.php
7 months ago
class-settings-sanitization.php
7 months ago
class-settings-sections-fields.php
7 months ago
class-show-custom-taxonomy-filters.php
7 months ago
class-site-identity-on-login-page.php
7 months ago
class-svg-upload.php
7 months ago
class-various-admin-ui-enhancements.php
7 months ago
class-view-admin-as-role.php
7 months ago
class-wider-admin-menu.php
7 months ago
class-wp-config-transformer.php
7 months ago
class-disable-rest-api.php
40 lines
| 1 | <?php |
| 2 | |
| 3 | namespace ASENHA\Classes; |
| 4 | |
| 5 | use WP_Error; |
| 6 | /** |
| 7 | * Class for Disable REST API module |
| 8 | * |
| 9 | * @since 6.9.5 |
| 10 | */ |
| 11 | class Disable_REST_API { |
| 12 | /** |
| 13 | * Disable REST API for non-authenticated users. This is for WP v4.7 or later. |
| 14 | * |
| 15 | * @since 2.9.0 |
| 16 | */ |
| 17 | public function disable_rest_api( $errors ) { |
| 18 | $allow_rest_api_access = false; |
| 19 | // Get the REST API route being requested,e.g. wp/v2/posts | altcha/v1/challenge (without preceding slash /) |
| 20 | // Ref: https://developer.wordpress.org/reference/hooks/rest_authentication_errors/#comment-6463 |
| 21 | $route = ltrim( $GLOBALS['wp']->query_vars['rest_route'], '/' ); |
| 22 | if ( empty( $route ) ) { |
| 23 | // This is when visiting /wp-json root |
| 24 | $allow_rest_api_access = false; |
| 25 | } elseif ( false !== strpos( $route, 'altcha/v1' ) || in_array( 'contact-form-7/wp-contact-form-7.php', get_option( 'active_plugins', array() ) ) && false !== strpos( $route, 'contact-form-7/' ) || in_array( 'the-events-calendar/the-events-calendar.php', get_option( 'active_plugins', array() ) ) && false !== strpos( $route, 'tribe/' ) ) { |
| 26 | $allow_rest_api_access = true; |
| 27 | } else { |
| 28 | } |
| 29 | if ( is_user_logged_in() ) { |
| 30 | $allow_rest_api_access = true; |
| 31 | } |
| 32 | if ( !$allow_rest_api_access ) { |
| 33 | return new WP_Error('rest_api_authentication_required', __( 'The REST API has been restricted to authenticated users.', 'admin-site-enhancements' ), array( |
| 34 | 'status' => rest_authorization_required_code(), |
| 35 | )); |
| 36 | } |
| 37 | } |
| 38 | |
| 39 | } |
| 40 |