← All changes | includes/Hooks.php +66 -161 3.0.77 → 3.0.5 View file →

		@@ -1,186 +1,91 @@
1	1	<?php
2	2
3	3	namespace Hostinger;
4	4
5		-use Hostinger\Admin\Menu;
6	5	use Hostinger\Admin\PluginSettings;
7		-use Hostinger\Admin\Jobs\NotifyMcpJob;
8		-use Hostinger\Mcp\EventHandlerFactory;
9	6	use Hostinger\WpHelper\Utils;
10	7
11	8	defined( 'ABSPATH' ) || exit;
12	9
13	10	class Hooks {
14		- public function __construct() {
15		- add_filter( 'xmlrpc_enabled', array( $this, 'check_xmlrpc_enabled' ) );
16		- add_filter( 'wp_is_application_passwords_available', array( $this, 'check_authentication_password_enabled' ) );
17		- add_filter( 'wp_die_handler', array( $this, 'maybe_customize_application_password_die_handler' ) );
18		- add_filter( 'wp_headers', array( $this, 'check_pingback' ) );
19		- add_action( 'init', array( $this, 'plugins_loaded' ) );
20		- add_action( 'update_option_woocommerce_coming_soon', array( $this, 'litespeed_flush_cache' ) );
21		- add_action( 'update_option_woocommerce_store_pages_only', array( $this, 'litespeed_flush_cache' ) );
22		- add_action( 'transition_post_status', array( $this, 'handle_transition_post_status' ), 10, 3 );
23		- add_action( 'updated_option', array( $this, 'handle_updated_option' ), 10, 3 );
24		- }
	11	+ public function __construct() {
	12	+ // XMLRpc / Force SSL
	13	+ add_filter( 'xmlrpc_enabled', array( $this, 'check_xmlrpc_enabled' ) );
	14	+ add_filter( 'wp_headers', array( $this, 'check_pingback' ) );
	15	+ add_filter( 'plugins_loaded', array( $this, 'plugins_loaded' ) );
	16	+ }
25	17
26		- public function handle_transition_post_status( string $new_status, string $old_status, \WP_Post $post ): void {
27		- if ( $new_status === 'publish' || $old_status === 'publish' ) {
28		- do_action(
29		- NotifyMcpJob::JOB_NAME,
30		- array(
31		- 'event' => EventHandlerFactory::MCP_EVENT_PAGE_UPDATED,
32		- 'post_id' => $post->ID,
33		- )
34		- );
35		- }
36		- }
	18	+ /**
	19	+ * @return void
	20	+ */
	21	+ public function plugins_loaded() {
	22	+ $utils = new Utils();
	23	+ $plugin_settings = new PluginSettings();
	24	+ $settings = $plugin_settings->get_plugin_settings();
37	25
38		- public function handle_updated_option( string $option, mixed $old_value, mixed $value ): void {
39		- if ( $option === 'cron' || $this->is_transient( $option ) ) {
40		- return;
41		- }
	26	+ if ( defined( 'WP_CLI' ) && \WP_CLI ) {
	27	+ return;
	28	+ }
42	29
43		- if ( $old_value !== $value ) {
44		- do_action( NotifyMcpJob::JOB_NAME, array( 'event' => EventHandlerFactory::MCP_EVENT_UPDATED ) );
45		- }
	30	+ // Xmlrpc.
	31	+ if ( $settings->get_disable_xml_rpc() && $utils->isThisPage( 'xmlrpc.php' ) ) {
	32	+ exit( 'Disabled' );
	33	+ }
46	34
47		- if ( $option === HOSTINGER_PLUGIN_SETTINGS_OPTION && isset( $value['optin_mcp'] ) && isset( $old_value['optin_mcp'] ) ) {
48		- if ( $old_value['optin_mcp'] !== $value['optin_mcp'] ) {
49		- do_action(
50		- NotifyMcpJob::JOB_NAME,
51		- array(
52		- 'event' => EventHandlerFactory::MCP_EVENT_OPTIN_TOGGLED,
53		- 'value' => $value['optin_mcp'],
54		- )
55		- );
56		- }
57		- }
58		- }
	35	+ // SSL redirect.
	36	+ if ( $settings->get_force_https() && ! is_ssl() ) {
	37	+ if ( isset( $_SERVER['HTTP_HOST'] ) && isset( $_SERVER['REQUEST_URI'] ) ) {
	38	+ $host = sanitize_text_field( wp_unslash( $_SERVER['HTTP_HOST'] ) );
59	39
60		- /**
61		- * @return void
62		- */
63		- public function plugins_loaded() {
64		- $utils = new Utils();
65		- $plugin_settings = new PluginSettings();
66		- $settings = $plugin_settings->get_plugin_settings();
	40	+ if ( $settings->get_force_www() && strpos( $host, 'www.' ) === false ) {
	41	+ $host = 'www.' . $host;
	42	+ }
67	43
68		- if ( defined( 'WP_CLI' ) && \WP_CLI ) {
69		- return;
70		- }
	44	+ wp_safe_redirect( 'https://' . $host . sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ) ), 301 );
	45	+ exit;
	46	+ }
	47	+ }
71	48
72		- // Xmlrpc.
73		- if ( $settings->get_disable_xml_rpc() && $utils->isThisPage( 'xmlrpc.php' ) ) {
74		- exit( 'Disabled' );
75		- }
	49	+ // Force www.
	50	+ if ( $settings->get_force_www() ) {
	51	+ if ( isset( $_SERVER['HTTP_HOST'] ) && isset( $_SERVER['REQUEST_URI'] ) ) {
	52	+ $host = sanitize_text_field( wp_unslash( $_SERVER['HTTP_HOST'] ) );
76	53
77		- // SSL redirect.
78		- if ( $settings->get_force_https() && ! is_ssl() ) {
79		- if ( isset( $_SERVER['HTTP_HOST'] ) && isset( $_SERVER['REQUEST_URI'] ) ) {
80		- $host = sanitize_text_field( wp_unslash( $_SERVER['HTTP_HOST'] ) );
	54	+ if ( strpos( $host, 'www.' ) === false ) {
	55	+ wp_safe_redirect( 'https://www.' . $host . sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ) ), 301 );
	56	+ exit;
	57	+ }
	58	+ }
	59	+ }
	60	+ }
81	61
82		- if ( $settings->get_force_www() && strpos( $host, 'www.' ) === false ) {
83		- $host = 'www.' . $host;
84		- }
	62	+ /**
	63	+ * @param mixed $headers
	64	+ *
	65	+ * @return mixed
	66	+ */
	67	+ public function check_pingback( $headers ) {
	68	+ $plugin_settings = new PluginSettings();
	69	+ $settings = $plugin_settings->get_plugin_settings();
85	70
86		- wp_safe_redirect( 'https://' . $host . sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ) ), 301 );
87		- exit;
88		- }
89		- }
	71	+ if ( $settings->get_disable_xml_rpc() ) {
	72	+ unset( $headers['X-Pingback'] );
	73	+ }
90	74
91		- // Force www.
92		- if ( $settings->get_force_www() ) {
93		- if ( isset( $_SERVER['HTTP_HOST'] ) && isset( $_SERVER['REQUEST_URI'] ) ) {
94		- $host = sanitize_text_field( wp_unslash( $_SERVER['HTTP_HOST'] ) );
	75	+ return $headers;
	76	+ }
95	77
96		- if ( strpos( $host, 'www.' ) === false ) {
97		- wp_safe_redirect( 'https://www.' . $host . sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ) ), 301 );
98		- exit;
99		- }
100		- }
101		- }
102		- }
	78	+ /**
	79	+ * @return bool
	80	+ */
	81	+ public function check_xmlrpc_enabled(): bool {
	82	+ $plugin_settings = new PluginSettings();
	83	+ $settings = $plugin_settings->get_plugin_settings();
103	84
104		- /**
105		- * @param mixed $headers
106		- *
107		- * @return mixed
108		- */
109		- public function check_pingback( $headers ) {
110		- $plugin_settings = new PluginSettings();
111		- $settings = $plugin_settings->get_plugin_settings();
	85	+ if ( $settings->get_disable_xml_rpc() ) {
	86	+ return false;
	87	+ }
112	88
113		- if ( $settings->get_disable_xml_rpc() ) {
114		- unset( $headers['X-Pingback'] );
115		- }
116		-
117		- return $headers;
118		- }
119		-
120		- /**
121		- * @param bool $enabled
122		- *
123		- * @return bool
124		- */
125		- public function check_xmlrpc_enabled( bool $enabled ): bool {
126		- $plugin_settings = new PluginSettings();
127		- $settings = $plugin_settings->get_plugin_settings();
128		-
129		- if ( $settings->get_disable_xml_rpc() ) {
130		- return false;
131		- }
132		-
133		- return $enabled;
134		- }
135		-
136		- /**
137		- * @return bool
138		- */
139		- public function check_authentication_password_enabled(): bool {
140		- $plugin_settings = new PluginSettings();
141		- $settings = $plugin_settings->get_plugin_settings();
142		-
143		- if ( $settings->get_disable_authentication_password() ) {
144		- return false;
145		- }
146		-
147		- return true;
148		- }
149		-
150		- public function maybe_customize_application_password_die_handler( $handler ) {
151		- $plugin_settings = new PluginSettings();
152		- $settings = $plugin_settings->get_plugin_settings();
153		-
154		- if ( ! $settings->get_disable_authentication_password() ) {
155		- return $handler;
156		- }
157		-
158		- return function ( $message, $title = '', $args = array() ) use ( $handler ) {
159		- if ( is_string( $message ) && $message === __( 'Application passwords are not available.' ) ) {
160		- $message = $this->get_application_password_disabled_message();
161		- }
162		-
163		- call_user_func( $handler, $message, $title, $args );
164		- };
165		- }
166		-
167		- private function get_application_password_disabled_message(): string {
168		- $settings_url = admin_url( 'admin.php?page=' . Menu::MENU_SLUG );
169		-
170		- return sprintf(
171		- /* translators: %s: URL to the Hostinger Tools settings page. */
172		- __( 'Application passwords have been disabled by Hostinger for security reasons. You can turn them back on from <a href="%s">Hostinger Tools → Security settings</a>.', 'hostinger' ),
173		- esc_url( $settings_url )
174		- );
175		- }
176		-
177		- public function litespeed_flush_cache(): void {
178		- if ( has_action( 'litespeed_purge_all' ) ) {
179		- do_action( 'litespeed_purge_all' );
180		- }
181		- }
182		-
183		- private function is_transient( $option ): bool {
184		- return str_contains( $option, '_transient' );
185		- }
	89	+ return true;
	90	+ }
186	91	}