depicter / app / src / Middleware / NonceFieldMiddleware.php

NonceFieldMiddleware.php in Depicter — Popup & Slider Builder 1.5.2, at app/src/Middleware/NonceFieldMiddleware.php

48 lines 1.1 KB

Raw Download Zip

1	<?php
2	namespace Depicter\Middleware;
3
4
5	use WPEmerge\Requests\RequestInterface;
6	use WPEmerge\Responses\ResponseService;
7
8	class NonceFieldMiddleware
9	{
10
11	/**
12	* Response service.
13	*
14	* @var ResponseService
15	*/
16	protected $responseService = null;
17
18	/**
19	* Constructor.
20	*
21	* @codeCoverageIgnore
22	* @param ResponseService $responseService
23	*/
24	public function __construct( ResponseService $responseService ) {
25	$this->responseService = $responseService;
26	}
27
28	/**
29	* @param RequestInterface $request
30	* @param $next
31	* @param string $action
32	* @param string $nonce
33	* @param string $method
34	*
35	* @return mixed\|ResponseService
36	*/
37	public function handle( RequestInterface $request, $next, string $action = 'depicter-nonce', string $nonce = '_wpnonce', string $method = 'post' ){
38	$nonce = $method == 'post' ? $request->body($nonce ) : $request->query($nonce);
39	if ( empty($nonce) \|\| ! wp_verify_nonce( $nonce, $action ) ) {
40	return $this->responseService->json([
41	'errors' => ['Nonce is invalid']
42	]);
43	}
44
45	return $next( $request );
46	}
47	}
48