wp-nonce.php
74 lines
| 1 | <?php |
| 2 | |
| 3 | |
| 4 | namespace JFB_Components\Wp_Nonce; |
| 5 | |
| 6 | // If this file is called directly, abort. |
| 7 | if ( ! defined( 'WPINC' ) ) { |
| 8 | die; |
| 9 | } |
| 10 | |
| 11 | class Wp_Nonce { |
| 12 | |
| 13 | const DEFAULT_OPTIONS = array( |
| 14 | 'name' => '_nonce', |
| 15 | ); |
| 16 | |
| 17 | protected $action; |
| 18 | protected $options; |
| 19 | |
| 20 | private $nonce; |
| 21 | |
| 22 | /** |
| 23 | * Wp_Nonce constructor. |
| 24 | * |
| 25 | * @param int|string $action |
| 26 | */ |
| 27 | public function __construct( $action = - 1, array $options = self::DEFAULT_OPTIONS ) { |
| 28 | $this->action = $action; |
| 29 | $this->options = $options; |
| 30 | } |
| 31 | |
| 32 | /** |
| 33 | * @return false|string |
| 34 | */ |
| 35 | public function create() { |
| 36 | if ( $this->nonce ) { |
| 37 | return $this->nonce; |
| 38 | } |
| 39 | $this->nonce = wp_create_nonce( $this->action ); |
| 40 | |
| 41 | return $this->nonce; |
| 42 | } |
| 43 | |
| 44 | /** |
| 45 | * @return false|int |
| 46 | */ |
| 47 | public function verify() { |
| 48 | $nonce = $this->get_nonce(); |
| 49 | |
| 50 | if ( ! $nonce ) { |
| 51 | return false; |
| 52 | } |
| 53 | |
| 54 | return wp_verify_nonce( $this->get_nonce(), $this->action ); |
| 55 | } |
| 56 | |
| 57 | protected function get_nonce(): string { |
| 58 | // phpcs:ignore WordPress.Security.NonceVerification.Recommended |
| 59 | return sanitize_key( $_REQUEST[ $this->options['name'] ] ?? '' ); |
| 60 | } |
| 61 | |
| 62 | /** |
| 63 | * @return int|string |
| 64 | */ |
| 65 | public function get_action() { |
| 66 | return $this->action; |
| 67 | } |
| 68 | |
| 69 | public function get_name(): string { |
| 70 | return $this->options['name']; |
| 71 | } |
| 72 | |
| 73 | } |
| 74 |