# adminify/4.0.5.4/Inc/Admin/Frames/Init.php

Adminify – White Label, Admin Menu Editor, Login Customizer, version 4.0.5.4. 141 lines.

- Page: https://pluginprobe.com/plugins/adminify/4.0.5.4/code/Inc/Admin/Frames/Init.php
- Raw: https://pluginprobe.com/plugins/adminify/4.0.5.4/raw/Inc/Admin/Frames/Init.php
- Modified: 2025-01-26T11:38:36+00:00

Line numbers below start at 1. Link to a line or a range by appending a fragment to the
page URL, for example `https://pluginprobe.com/plugins/adminify/4.0.5.4/code/Inc/Admin/Frames/Init.php#L10-L20`.

```php
<?php

namespace WPAdminify\Inc\Admin\Frames;

// no direct access allowed
if (!defined('ABSPATH')) {
    exit;
}
/**
 * WP Adminify
 * Init Class
 *
 * @author Jewel Theme <support@jeweltheme.com>
 */

if (!class_exists('Init')) {
    class Init
    {
        public static $instance;
        public $admin;
        public $frame;

        public static function instance()
        {
            if (is_null(self::$instance)) {
                self::$instance = new self();
            }
            return self::$instance;
        }

        public function __construct()
        {

            if ( ! $this->is_allowed() ) {
                if ( is_iframe() ) {
                    $actual_link = (empty($_SERVER['HTTPS']) ? 'http' : 'https') . "://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";
                    Frames::custom_plugin_change_reload($actual_link);
                }
                return;
            }

            if ( is_iframe() ) {
                $this->frame = new Frames();
            } else {
                $this->admin = new Admin();
            }

        }

        public function is_allowed() {

            $not_allowed_urls = Admin::get_not_allowed_urls();

            foreach ( $not_allowed_urls as $url_object ) {
                if ( is_string( $url_object ) ) {

                    $is_allowed = true; // Scoped Default allowed
                    if ( $url_object === $_SERVER['PHP_SELF'] ) $is_allowed = false; // not allowed

                } else {

                    $is_allowed = false; // Scoped Default not allowed

                    if ( $url_object['url'] !== '*' && $url_object['url'] !== $_SERVER['PHP_SELF'] ) $is_allowed = true; // allowed
                    if ( ! $is_allowed && array_key_exists( 'query_params', $url_object ) ) {
                        if ( ! $this->check_query_params( $url_object['query_params'] ) ) $is_allowed = true; // allowed
                    }

                    if ( ! $is_allowed && array_key_exists( 'post_type', $url_object ) ) {
                        if ( ! $this->check_post_type( $url_object['post_type'] ) ) $is_allowed = true; // allowed
                    }

                }

                if ( ! $is_allowed ) return $is_allowed;

            }

            return true;

        }

        function check_query_params($query_params) {
            // Pattern 1: Both keys and their values should check in $_GET
            if (array_keys($query_params) === $query_params) {
                foreach ($query_params as $key => $value) {
                    if (!isset($_GET[$key]) || $_GET[$key] != $value) {
                        return false; // Key doesn't exist or the value doesn't match
                    }
                }
                return true; // All keys and values match
            }

            // Pattern 2: Check for only keys in $_GET, no need to check their values
            if (array_values($query_params) === $query_params) {
                foreach ($query_params as $param) {
                    if ( substr($param, -1) === '!' ) {
                        $param = substr($param, 0, -1);
                        if ( isset($_GET[$param]) ) return false; // The key exists in $_GET
                    } else {
                        if ( ! isset($_GET[$param]) ) return false; // The key doesn't exist in $_GET
                    }

                }
                return true; // All keys exist
            }

            // Pattern 3: A mix of key existence and key-value matching
            foreach ($query_params as $key => $value) {
                if (is_numeric($key)) {
                    // For numeric keys, we're checking only existence (Pattern 1 behavior)
                    if ( substr($value, -1) === '!' ) {
                        $value = substr($value, 0, -1);
                        if ( isset($_GET[$value]) ) return false; // The key exists in $_GET
                    } else {
                        if ( ! isset($_GET[$value]) ) return false; // The key doesn't exist in $_GET
                    }
                } else {
                    // For associative keys, we check for both key and value (Pattern 2 behavior)
                    if (!isset($_GET[$key]) || $_GET[$key] != $value) {
                        return false; // Key doesn't exist or value doesn't match
                    }
                }
            }

            return true; // All conditions are met
        }

        function check_post_type($post_types) {
            if ( isset( $_GET['post_type'] ) ) {
                return in_array( $_GET['post_type'], $post_types );
            } else if ( isset( $_GET['post'] ) ) {
                return in_array( get_post_type( $_GET['post'] ), $post_types );
            }
            return in_array( 'post', $post_types );
        }

    }

}

```