REST_API.php — Independent Analytics – WordPress Analytics Plugin 1.22.1

independent-analytics / IAWP / REST_API.php

independent-analytics / IAWP Last commit date

AJAX 3 years ago Migrations 3 years ago Models 3 years ago Queries 3 years ago Tables 3 years ago Utils 3 years ago Campaign_Builder.php 3 years ago Capability_Manager.php 3 years ago Chart.php 3 years ago Chart_Geo.php 3 years ago Chart_SVG.php 3 years ago Current_Resource.php 3 years ago Dashboard_Options.php 3 years ago Dashboard_Widget.php 3 years ago Email_Reports.php 3 years ago Filters.php 3 years ago Geo_Database.php 3 years ago Geo_Database_Download_Job.php 3 years ago Health_Check.php 3 years ago Independent_Analytics.php 3 years ago Known_Referrers.php 3 years ago PDF.php 3 years ago Query.php 3 years ago Quick_Stats.php 3 years ago REST_API.php 3 years ago Real_Time.php 3 years ago Settings.php 3 years ago Track_Resource_Changes.php 3 years ago View_Counter.php 3 years ago WP_Option_Cache_Bust.php 3 years ago WooCommerce_Order.php 3 years ago

REST_API.php

192 lines

1	<?php
2
3	namespace IAWP_SCOPED\IAWP;
4
5	use IAWP_SCOPED\IAWP\Models\Visitor;
6	use IAWP_SCOPED\IAWP\Queries\View;
7	use IAWP_SCOPED\IAWP\Utils\Request;
8	use IAWP_SCOPED\IAWP\Utils\Salt;
9	use IAWP_SCOPED\IAWP\Utils\Security;
10	use IAWP_SCOPED\IAWP\Utils\String_Util;
11	class REST_API
12	{
13	public function __construct()
14	{
15	\add_action('wp_footer', [$this, 'echo_tracking_script']);
16	\add_action('rest_api_init', [$this, 'register_rest_api']);
17	// Support for PDF Viewer by Themencode
18	\add_action('tnc_pvfw_viewer_head', [$this, 'echo_tracking_script']);
19	// Support for Coming Soon and Maintenance by Colorlib
20	\add_action('ccsm_header', [$this, 'echo_tracking_script']);
21	}
22	public function echo_tracking_script()
23	{
24	if (!\get_option('iawp_track_authenticated_users') && \is_user_logged_in()) {
25	// Todo - Can we clear the cache plugins to make sure that the pages so tracking code as user logs in & out?
26	return;
27	}
28	if ($this->block_user_role()) {
29	return;
30	}
31	// Don't track post or page previews
32	if (\is_preview()) {
33	return;
34	}
35	$payload = [];
36	$current_resource = Current_Resource::get_resource();
37	if (\is_null($current_resource)) {
38	return;
39	}
40	$payload['resource'] = $current_resource->type();
41	if ($current_resource->has_meta()) {
42	$payload[$current_resource->meta_key()] = $current_resource->meta_value();
43	}
44	$payload['page'] = \max(1, \get_query_var('paged'));
45	$data = ['payload' => $payload];
46	$data['signature'] = \md5(Salt::request_payload_salt() . \json_encode($data['payload']));
47	$url = \get_rest_url() . 'iawp/search';
48	?>
49	<script>
50	(function () {
51	document.addEventListener("DOMContentLoaded", function (e) {
52	if (document.hasOwnProperty("visibilityState") && document.visibilityState === "prerender") {
53	return;
54	}
55
56	<?php
57	if (!\defined('IAWP_TESTING')) {
58	?>
59	if (navigator.webdriver \|\| /bot\|crawler\|spider\|crawling/i.test(navigator.userAgent)) {
60	return;
61	}
62	<?php
63	}
64	?>
65
66	let referrer_url = null;
67
68	if (typeof document.referrer === 'string' && document.referrer.length > 0) {
69	referrer_url = document.referrer;
70	}
71
72	const params = location.search.slice(1).split('&').reduce((acc, s) => {
73	const [k, v] = s.split('=')
74	return Object.assign(acc, {[k]: v})
75	}, {})
76
77	const url = "<?php
78	echo $url;
79	?>"
80	const body = {
81	referrer_url,
82	utm_source: params.utm_source,
83	utm_medium: params.utm_medium,
84	utm_campaign: params.utm_campaign,
85	utm_term: params.utm_term,
86	utm_content: params.utm_content,
87	...<?php
88	echo \json_encode($data);
89	?>
90	}
91	const xhr = new XMLHttpRequest()
92	xhr.open("POST", url, true)
93	xhr.setRequestHeader("Content-Type", "application/json;charset=UTF-8")
94	xhr.send(JSON.stringify(body))
95	})
96	})();
97	</script>
98	<?php
99	}
100	public function register_rest_api()
101	{
102	\register_rest_route('iawp', '/search', ['methods' => 'POST', 'callback' => [$this, 'track_view'], 'permission_callback' => function () {
103	return \true;
104	}]);
105	}
106	public function track_view($request)
107	{
108	Migrations\Migration::create_or_migrate();
109	if (Migrations\Migration::is_migrating()) {
110	return;
111	}
112	if ($this->blocked_ip(Request::ip())) {
113	return;
114	}
115	$visitor = new Visitor(Request::ip(), Request::user_agent());
116	$visitor->upsert();
117	$signature = \md5(Salt::request_payload_salt() . \json_encode($request['payload']));
118	$campaign = [];
119	if (\IAWP_SCOPED\iawp_is_pro()) {
120	$campaign = ['utm_source' => $this->decode_or_nullify($request['utm_source']), 'utm_medium' => $this->decode_or_nullify($request['utm_medium']), 'utm_campaign' => $this->decode_or_nullify($request['utm_campaign']), 'utm_term' => $this->decode_or_nullify($request['utm_term']), 'utm_content' => $this->decode_or_nullify($request['utm_content'])];
121	}
122	if ($signature == $request['signature']) {
123	new View($request['payload'], $request['referrer_url'], $visitor, $campaign);
124	return new \WP_REST_Response(['success' => \true], 200, ['X-IAWP' => 'IAWP']);
125	} else {
126	return new \WP_REST_Response(['success' => \false], 200, ['X-IAWP' => 'IAWP']);
127	}
128	}
129	private function decode_or_nullify($string)
130	{
131	if (!isset($string)) {
132	return null;
133	}
134	$safe_string = \trim(\urldecode($string));
135	$safe_string = \str_replace('+', ' ', $safe_string);
136	$safe_string = Security::string($safe_string);
137	if (\strlen($safe_string) === 0) {
138	return null;
139	}
140	return $safe_string;
141	}
142	private function blocked_ip($visitor_ip)
143	{
144	$blocked_ips = \IAWP_SCOPED\iawp()->get_option('iawp_blocked_ips', []);
145	if (\count($blocked_ips) == 0) {
146	return \false;
147	}
148	if (\in_array($visitor_ip, $blocked_ips)) {
149	return \true;
150	}
151	$wildcard_ips = [];
152	foreach ($blocked_ips as $blocked_ip) {
153	if (String_Util::str_contains($blocked_ip, '*')) {
154	$wildcard_ips[] = $blocked_ip;
155	}
156	}
157	if (\count($wildcard_ips) == 0) {
158	return \false;
159	}
160	$visitor_parts = \explode('.', $visitor_ip);
161	$goal = \count($visitor_parts);
162	foreach ($wildcard_ips as $blocked_ip) {
163	$blocked_parts = \explode('.', $blocked_ip);
164	$matches = 0;
165	for ($i = 0; $i < \count($visitor_parts); $i++) {
166	if (!\array_key_exists($i, $blocked_parts)) {
167	$matches++;
168	} elseif ($visitor_parts[$i] == $blocked_parts[$i] \|\| $blocked_parts[$i] == '*') {
169	$matches++;
170	continue;
171	} else {
172	break;
173	}
174	}
175	if ($matches == $goal) {
176	return \true;
177	}
178	}
179	return \false;
180	}
181	private function block_user_role() : bool
182	{
183	$blocked_roles = \IAWP_SCOPED\iawp()->get_option('iawp_blocked_roles', []);
184	foreach (\wp_get_current_user()->roles as $visitor_role) {
185	if (\in_array($visitor_role, $blocked_roles)) {
186	return \true;
187	}
188	}
189	return \false;
190	}
191	}
192