| @@ -1,181 +1,300 @@ | ||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | -if ( !class_exists( 'MeowCommon_Helpers' ) ) { | |
| 3 | +if ( !class_exists( 'MeowKit_MGL_Helpers' ) ) { | |
| 4 | 4 | |
| 5 | - class MeowCommon_Helpers { | |
| 6 | - | |
| 7 | - public static $version = MeowCommon_Admin::version; | |
| 5 | + class MeowKit_MGL_Helpers { | |
| 6 | + //public static $version = MeowKit_MGL_Admin::version; | |
| 7 | + private static $startTimes = []; | |
| 8 | + private static $startQueries = []; | |
| 8 | 9 | |
| 9 | - static function is_divi_builder() { | |
| 10 | - return isset( $_GET['et_fb'] ) && $_GET['et_fb'] === '1'; | |
| 11 | - } | |
| 10 | + public static function is_divi_builder() { | |
| 11 | + return isset( $_GET['et_fb'] ) && $_GET['et_fb'] === '1'; | |
| 12 | + } | |
| 12 | 13 | |
| 13 | - static function is_cornerstone_builder() { | |
| 14 | - return isset( $_GET['cs-render'] ) && $_GET['cs-render'] === '1'; | |
| 15 | - } | |
| 14 | + public static function is_beaver_builder() { | |
| 15 | + return isset( $_GET['fl_builder'] ); | |
| 16 | + } | |
| 16 | 17 | |
| 17 | - static function is_pagebuilder_request() { | |
| 18 | - return self::is_divi_builder() || self::is_cornerstone_builder(); | |
| 19 | - } | |
| 18 | + public static function is_cornerstone_builder() { | |
| 19 | + return isset( $_GET['cs-render'] ) && $_GET['cs-render'] === '1'; | |
| 20 | + } | |
| 20 | 21 | |
| 21 | - static function is_asynchronous_request() { | |
| 22 | - return self::is_ajax_request() || self::is_woocommerce_ajax_request() || self::is_rest(); | |
| 23 | - } | |
| 22 | + public static function is_pagebuilder_request() { | |
| 23 | + return self::is_divi_builder() || self::is_cornerstone_builder() || self::is_beaver_builder(); | |
| 24 | + } | |
| 24 | 25 | |
| 25 | - static function is_ajax_request() { | |
| 26 | - return wp_doing_ajax(); | |
| 27 | - } | |
| 26 | + public static function is_asynchronous_request() { | |
| 27 | + return self::is_ajax_request() || self::is_woocommerce_ajax_request() || self::is_rest(); | |
| 28 | + } | |
| 28 | 29 | |
| 29 | - static function is_woocommerce_ajax_request() { | |
| 30 | - return !empty( $_GET['wc-ajax'] ); | |
| 31 | - } | |
| 30 | + public static function is_ajax_request() { | |
| 31 | + return wp_doing_ajax(); | |
| 32 | + } | |
| 32 | 33 | |
| 33 | - // Originally created by matzeeable, modified by jordymeow | |
| 34 | - static function is_rest() { | |
| 34 | + public static function is_woocommerce_ajax_request() { | |
| 35 | + return !empty( $_GET['wc-ajax'] ); | |
| 36 | + } | |
| 35 | 37 | |
| 36 | - // WP_REST_Request init. | |
| 37 | - $is_rest_request = defined('REST_REQUEST') && REST_REQUEST; | |
| 38 | - if ( $is_rest_request ) { | |
| 39 | - MeowCommon_Classes_Rest::init_once(); | |
| 40 | - return true; | |
| 41 | - } | |
| 38 | + // This function makes sure that only the allowed HTML element names, | |
| 39 | + // attribute names, attribute values, and HTML entities will occur in the given text string. | |
| 40 | + public static function wp_kses( $html ) { | |
| 41 | + return wp_kses( $html, [ | |
| 42 | + 'style' => [], | |
| 43 | + 'script' => [], | |
| 44 | + 'div' => [ | |
| 45 | + 'class' => [], | |
| 46 | + 'data-rating-date' => [], | |
| 47 | + 'style' => [], | |
| 48 | + ], | |
| 49 | + 'img' => [ | |
| 50 | + 'src' => [], | |
| 51 | + 'decoding' => [], | |
| 52 | + 'class' => [], | |
| 53 | + 'style' => [], | |
| 54 | + ], | |
| 55 | + 'p' => [ | |
| 56 | + 'style' => [], | |
| 57 | + ], | |
| 58 | + 'h2' => [ | |
| 59 | + 'class' => [], | |
| 60 | + ], | |
| 61 | + 'br' => [], | |
| 62 | + 'label' => [], | |
| 63 | + 'b' => [], | |
| 64 | + 'small' => [], | |
| 65 | + 'a' => [ | |
| 66 | + 'href' => [], | |
| 67 | + 'target' => [], | |
| 68 | + 'class' => [], | |
| 69 | + 'style' => [], | |
| 70 | + ], | |
| 71 | + 'form' => [ | |
| 72 | + 'method' => [], | |
| 73 | + 'action' => [], | |
| 74 | + 'class' => [], | |
| 75 | + 'style' => [], | |
| 76 | + ], | |
| 77 | + 'input' => [ | |
| 78 | + 'type' => [], | |
| 79 | + 'checked' => [], | |
| 80 | + 'name' => [], | |
| 81 | + 'value' => [], | |
| 82 | + 'id' => [], | |
| 83 | + 'class' => [], | |
| 84 | + ], | |
| 85 | + ] ); | |
| 86 | + } | |
| 42 | 87 | |
| 43 | - // Plain permalinks. | |
| 44 | - $prefix = rest_get_url_prefix(); | |
| 45 | - $request_contains_rest = isset( $_GET['rest_route'] ) && strpos( trim( $_GET['rest_route'], '\\/' ), $prefix , 0 ) === 0; | |
| 46 | - if ( $request_contains_rest) { | |
| 47 | - MeowCommon_Classes_Rest::init_once(); | |
| 48 | - return true; | |
| 49 | - } | |
| 88 | + // Diff between two strings | |
| 89 | + public static function diff( $first, $second ) { | |
| 90 | + $first = explode( ' ', $first ); | |
| 91 | + $second = explode( ' ', $second ); | |
| 92 | + $diff = array_diff( $first, $second ); | |
| 93 | + return implode( ' ', $diff ); | |
| 94 | + } | |
| 50 | 95 | |
| 51 | - // It can happen that WP_Rewrite is not yet initialized, so better to do it. | |
| 52 | - global $wp_rewrite; | |
| 53 | - if ( $wp_rewrite === null ) { | |
| 54 | - $wp_rewrite = new WP_Rewrite(); | |
| 55 | - } | |
| 56 | - $rest_url = wp_parse_url( trailingslashit( rest_url() ) ); | |
| 57 | - $current_url = wp_parse_url( add_query_arg( array() ) ); | |
| 58 | - if ( !$rest_url || !$current_url ) | |
| 59 | - return false; | |
| 96 | + // From August 2025: The New 'is_rest' function, more reliable, much cleaner. | |
| 97 | + public static function is_rest() { | |
| 60 | 98 | |
| 61 | - // URL Path begins with wp-json. | |
| 62 | - if ( !empty( $current_url['path'] ) && !empty( $rest_url['path'] ) ) { | |
| 63 | - $request_contains_rest = strpos( $current_url['path'], $rest_url['path'], 0 ) === 0; | |
| 64 | - if ( $request_contains_rest) { | |
| 65 | - MeowCommon_Classes_Rest::init_once(); | |
| 66 | - return true; | |
| 67 | - } | |
| 68 | - } | |
| 99 | + // WP 6.5+: only reliable after parse_request; otherwise skip this branch. | |
| 100 | + if ( function_exists( 'wp_is_serving_rest_request' ) && did_action( 'parse_request' ) && wp_is_serving_rest_request() ) { | |
| 101 | + MeowKit_MGL_Rest::init_once(); | |
| 102 | + return true; | |
| 103 | + } | |
| 69 | 104 | |
| 70 | - return false; | |
| 71 | - } | |
| 105 | + // Classic flag set during REST bootstrap (safe at any time). | |
| 106 | + if ( defined( 'REST_REQUEST' ) && REST_REQUEST ) { | |
| 107 | + MeowKit_MGL_Rest::init_once(); | |
| 108 | + return true; | |
| 109 | + } | |
| 72 | 110 | |
| 73 | - static function test_error( $error = 'timeout', $diceSides = 1 ) { | |
| 74 | - if ( rand( 1, $diceSides ) === 1 ) { | |
| 75 | - if ( $error === 'timeout' ) { | |
| 76 | - header("HTTP/1.0 408 Request Timeout"); | |
| 77 | - die(); | |
| 78 | - } | |
| 79 | - else { | |
| 80 | - trigger_error( "Error", E_USER_ERROR); | |
| 81 | - } | |
| 82 | - } | |
| 83 | - } | |
| 111 | + // Plain permalinks: ?rest_route=/... (route does NOT include the prefix). | |
| 112 | + if ( isset( $_GET['rest_route'] ) ) { | |
| 113 | + MeowKit_MGL_Rest::init_once(); | |
| 114 | + return true; | |
| 115 | + } | |
| 84 | 116 | |
| 85 | - static function php_error_logs() { | |
| 86 | - $errorpath = ini_get( 'error_log' ); | |
| 87 | - $output_lines = array(); | |
| 88 | - if ( !empty( $errorpath ) && file_exists( $errorpath ) ) { | |
| 89 | - try { | |
| 90 | - $file = new SplFileObject( $errorpath, 'r' ); | |
| 91 | - $file->seek( PHP_INT_MAX ); | |
| 92 | - $last_line = $file->key(); | |
| 93 | - $iterator = new LimitIterator( $file, $last_line > 3500 ? $last_line - 3500 : 0, $last_line ); | |
| 94 | - $lines = iterator_to_array( $iterator ); | |
| 95 | - $previous_line = null; | |
| 96 | - foreach ( $lines as $line ) { | |
| 117 | + // Pretty permalinks: compare request PATH to the site's REST base path, without using rest_url(). | |
| 118 | + // This works early in the bootstrap (no dependency on $wp_rewrite). | |
| 119 | + $req_path = isset( $_SERVER['REQUEST_URI'] ) ? wp_parse_url( $_SERVER['REQUEST_URI'], PHP_URL_PATH ) : null; | |
| 120 | + if ( $req_path ) { | |
| 121 | + $prefix = rest_get_url_prefix(); // e.g. 'wp-json' or custom | |
| 97 | 122 | |
| 98 | - // Parse the date | |
| 99 | - $date = ''; | |
| 100 | - try { | |
| 101 | - $dateArr = []; | |
| 102 | - preg_match( '~^\[(.*?)\]~', $line, $dateArr ); | |
| 103 | - if ( isset( $dateArr[0] ) ) { | |
| 104 | - $line = str_replace( $dateArr[0], '', $line ); | |
| 105 | - $line = trim( $line ); | |
| 106 | - $date = new DateTime( $dateArr[1] ); | |
| 107 | - $date = get_date_from_gmt( $date->format('Y-m-d H:i:s'), 'Y-m-d H:i:s' ); | |
| 108 | - } | |
| 109 | - else { | |
| 110 | - continue; | |
| 111 | - } | |
| 112 | - } | |
| 113 | - catch ( Exception $e ) { | |
| 114 | - continue; | |
| 115 | - } | |
| 123 | + // Check if the path contains /wp-json/ or /index.php/wp-json/ | |
| 124 | + // This handles multilingual plugins (WPML, Polylang) that add language prefixes like /fr/wp-json/ | |
| 125 | + $path = trailingslashit( $req_path ); | |
| 126 | + $rest_pattern = '/' . trim( $prefix, '/' ) . '/'; | |
| 127 | + $rest_pattern_index = '/index.php/' . trim( $prefix, '/' ) . '/'; | |
| 116 | 128 | |
| 117 | - // Parse the error | |
| 118 | - $type = ''; | |
| 119 | - if ( preg_match( '/PHP Fatal error/', $line ) ) { | |
| 120 | - $line = trim( str_replace( 'PHP Fatal error:', '', $line ) ); | |
| 121 | - $type = 'fatal'; | |
| 122 | - } | |
| 123 | - else if ( preg_match( '/PHP Warning/', $line ) ) { | |
| 124 | - $line = trim( str_replace( 'PHP Warning:', '', $line ) ); | |
| 125 | - $type = 'warning'; | |
| 126 | - } | |
| 127 | - else if ( preg_match( '/PHP Notice/', $line ) ) { | |
| 128 | - $line = trim( str_replace( 'PHP Notice:', '', $line ) ); | |
| 129 | - $type = 'notice'; | |
| 130 | - } | |
| 131 | - else if ( preg_match( '/PHP Parse error/', $line ) ) { | |
| 132 | - $line = trim( str_replace( 'PHP Parse error:', '', $line ) ); | |
| 133 | - $type = 'parse'; | |
| 134 | - } | |
| 135 | - else if ( preg_match( '/PHP Exception/', $line ) ) { | |
| 136 | - $line = trim( str_replace( 'PHP Exception:', '', $line ) ); | |
| 137 | - $type = 'exception'; | |
| 138 | - } | |
| 139 | - else { | |
| 140 | - continue; | |
| 141 | - } | |
| 129 | + if ( strpos( $path, $rest_pattern ) !== false || strpos( $path, $rest_pattern_index ) !== false ) { | |
| 130 | + MeowKit_MGL_Rest::init_once(); | |
| 131 | + return true; | |
| 132 | + } | |
| 133 | + } | |
| 142 | 134 | |
| 143 | - // Skip the error if is the same as before. | |
| 144 | - if ( $line !== $previous_line ) { | |
| 145 | - array_push( $output_lines, array( 'date' => $date, 'type' => $type, 'content' => $line ) ); | |
| 146 | - $previous_line = $line; | |
| 147 | - } | |
| 148 | - } | |
| 149 | - } | |
| 150 | - catch ( OutOfBoundsException $e ) { | |
| 151 | - error_log( $e->getMessage() ); | |
| 152 | - return array(); | |
| 153 | - } | |
| 154 | - } | |
| 155 | - return $output_lines; | |
| 135 | + return false; | |
| 136 | + } | |
| 156 | 137 | |
| 157 | - // else { | |
| 158 | - // $output_lines = array_reverse( $output_lines ); | |
| 159 | - // $html = ''; | |
| 160 | - // $previous = ''; | |
| 161 | - // foreach ( $output_lines as $line ) { | |
| 162 | - // // Let's avoid similar errors, since it's not useful. We should also make this better | |
| 163 | - // // and not only theck this depending on tie. | |
| 164 | - // if ( preg_replace( '/\[.*\] PHP/', '', $previous ) !== preg_replace( '/\[.*\] PHP/', '', $line ) ) { | |
| 165 | - // $html .= $line; | |
| 166 | - // $previous = $line; | |
| 167 | - // } | |
| 168 | - // } | |
| 169 | - // return $html; | |
| 170 | - // } | |
| 171 | - } | |
| 172 | - } | |
| 138 | + // Originally created by matzeeable, modified by jordymeow | |
| 139 | + // public static function is_rest() { | |
| 173 | 140 | |
| 174 | - // Asked by WP Security Team to remove this. | |
| 141 | + // // WP_REST_Request init. | |
| 142 | + // $is_rest_request = defined( 'REST_REQUEST' ) && REST_REQUEST; | |
| 143 | + // if ( $is_rest_request ) { | |
| 144 | + // MeowKit_MGL_Rest::init_once(); | |
| 145 | + // return true; | |
| 146 | + // } | |
| 175 | 147 | |
| 176 | - // if ( MeowCommon_Helpers::is_rest() ) { | |
| 177 | - // ini_set( 'display_errors', 0 ); | |
| 178 | - // } | |
| 148 | + // // Plain permalinks. | |
| 149 | + // $prefix = rest_get_url_prefix(); | |
| 150 | + // $request_contains_rest = isset( $_GET['rest_route'] ) && strpos( trim( $_GET['rest_route'], '\\/' ), $prefix, 0 ) === 0; | |
| 151 | + // if ( $request_contains_rest ) { | |
| 152 | + // MeowKit_MGL_Rest::init_once(); | |
| 153 | + // return true; | |
| 154 | + // } | |
| 155 | + | |
| 156 | + // // It can happen that WP_Rewrite is not yet initialized, so better to do it. | |
| 157 | + // global $wp_rewrite; | |
| 158 | + // if ( $wp_rewrite === null ) { | |
| 159 | + // $wp_rewrite = new WP_Rewrite(); | |
| 160 | + // } | |
| 161 | + // $rest_url = wp_parse_url( trailingslashit( get_rest_url() ) ); | |
| 162 | + // $current_url = wp_parse_url( add_query_arg( [] ) ); | |
| 163 | + // if ( !$rest_url || !$current_url ) { | |
| 164 | + // return false; | |
| 165 | + // } | |
| 166 | + | |
| 167 | + // // URL Path begins with wp-json. | |
| 168 | + // if ( !empty( $current_url['path'] ) && !empty( $rest_url['path'] ) ) { | |
| 169 | + // $request_contains_rest = strpos( $current_url['path'], $rest_url['path'], 0 ) === 0; | |
| 170 | + // if ( $request_contains_rest ) { | |
| 171 | + // MeowKit_MGL_Rest::init_once(); | |
| 172 | + // return true; | |
| 173 | + // } | |
| 174 | + // } | |
| 175 | + | |
| 176 | + // return false; | |
| 177 | + // } | |
| 178 | + | |
| 179 | + public static function test_error( $error = 'timeout', $diceSides = 1 ) { | |
| 180 | + if ( mt_rand( 1, $diceSides ) === 1 ) { | |
| 181 | + if ( $error === 'timeout' ) { | |
| 182 | + header( 'HTTP/1.0 408 Request Timeout' ); | |
| 183 | + die(); | |
| 184 | + } | |
| 185 | + else { | |
| 186 | + trigger_error( 'Error', E_USER_ERROR ); | |
| 187 | + } | |
| 188 | + } | |
| 189 | + } | |
| 190 | + | |
| 191 | + public static function php_error_logs() { | |
| 192 | + $errorpath = ini_get( 'error_log' ); | |
| 193 | + $output_lines = []; | |
| 194 | + if ( !empty( $errorpath ) && file_exists( $errorpath ) ) { | |
| 195 | + try { | |
| 196 | + $file = new SplFileObject( $errorpath, 'r' ); | |
| 197 | + $file->seek( PHP_INT_MAX ); | |
| 198 | + $last_line = $file->key(); | |
| 199 | + $iterator = new LimitIterator( $file, $last_line > 3500 ? $last_line - 3500 : 0, $last_line ); | |
| 200 | + $lines = iterator_to_array( $iterator ); | |
| 201 | + $previous_line = null; | |
| 202 | + foreach ( $lines as $line ) { | |
| 203 | + | |
| 204 | + // Parse the date | |
| 205 | + $date = ''; | |
| 206 | + try { | |
| 207 | + $dateArr = []; | |
| 208 | + preg_match( '~^\[(.*?)\]~', $line, $dateArr ); | |
| 209 | + if ( isset( $dateArr[0] ) ) { | |
| 210 | + $line = str_replace( $dateArr[0], '', $line ); | |
| 211 | + $line = trim( $line ); | |
| 212 | + $date = new DateTime( $dateArr[1] ); | |
| 213 | + $date = get_date_from_gmt( $date->format( 'Y-m-d H:i:s' ), 'Y-m-d H:i:s' ); | |
| 214 | + } | |
| 215 | + else { | |
| 216 | + continue; | |
| 217 | + } | |
| 218 | + } | |
| 219 | + catch ( Exception $e ) { | |
| 220 | + continue; | |
| 221 | + } | |
| 222 | + | |
| 223 | + // Parse the error | |
| 224 | + $type = ''; | |
| 225 | + if ( preg_match( '/PHP Fatal error/', $line ) ) { | |
| 226 | + $line = trim( str_replace( 'PHP Fatal error:', '', $line ) ); | |
| 227 | + $type = 'fatal'; | |
| 228 | + } | |
| 229 | + else if ( preg_match( '/PHP Warning/', $line ) ) { | |
| 230 | + $line = trim( str_replace( 'PHP Warning:', '', $line ) ); | |
| 231 | + $type = 'warning'; | |
| 232 | + } | |
| 233 | + else if ( preg_match( '/PHP Notice/', $line ) ) { | |
| 234 | + $line = trim( str_replace( 'PHP Notice:', '', $line ) ); | |
| 235 | + $type = 'notice'; | |
| 236 | + } | |
| 237 | + else if ( preg_match( '/PHP Parse error/', $line ) ) { | |
| 238 | + $line = trim( str_replace( 'PHP Parse error:', '', $line ) ); | |
| 239 | + $type = 'parse'; | |
| 240 | + } | |
| 241 | + else if ( preg_match( '/PHP Exception/', $line ) ) { | |
| 242 | + $line = trim( str_replace( 'PHP Exception:', '', $line ) ); | |
| 243 | + $type = 'exception'; | |
| 244 | + } | |
| 245 | + else { | |
| 246 | + continue; | |
| 247 | + } | |
| 248 | + | |
| 249 | + // Skip the error if is the same as before. | |
| 250 | + if ( $line !== $previous_line ) { | |
| 251 | + array_push( $output_lines, [ 'date' => $date, 'type' => $type, 'content' => $line ] ); | |
| 252 | + $previous_line = $line; | |
| 253 | + } | |
| 254 | + } | |
| 255 | + } | |
| 256 | + catch ( OutOfBoundsException $e ) { | |
| 257 | + error_log( $e->getMessage() ); | |
| 258 | + return []; | |
| 259 | + } | |
| 260 | + } | |
| 261 | + return $output_lines; | |
| 262 | + | |
| 263 | + // else { | |
| 264 | + // $output_lines = array_reverse( $output_lines ); | |
| 265 | + // $html = ''; | |
| 266 | + // $previous = ''; | |
| 267 | + // foreach ( $output_lines as $line ) { | |
| 268 | + // // Let's avoid similar errors, since it's not useful. We should also make this better | |
| 269 | + // // and not only theck this depending on tie. | |
| 270 | + // if ( preg_replace( '/\[.*\] PHP/', '', $previous ) !== preg_replace( '/\[.*\] PHP/', '', $line ) ) { | |
| 271 | + // $html .= $line; | |
| 272 | + // $previous = $line; | |
| 273 | + // } | |
| 274 | + // } | |
| 275 | + // return $html; | |
| 276 | + // } | |
| 277 | + } | |
| 278 | + | |
| 279 | + public static function timer_start( $timerName = 'default' ) { | |
| 280 | + MeowKit_MGL_Helpers::$startQueries[ $timerName ] = get_num_queries(); | |
| 281 | + MeowKit_MGL_Helpers::$startTimes[ $timerName ] = microtime( true ); | |
| 282 | + } | |
| 283 | + | |
| 284 | + public static function timer_elapsed( $timerName = 'default' ) { | |
| 285 | + return microtime( true ) - MeowKit_MGL_Helpers::$startTimes[ $timerName ]; | |
| 286 | + } | |
| 287 | + | |
| 288 | + public static function timer_log_elapsed( $timerName = 'default' ) { | |
| 289 | + $elapsed = MeowKit_MGL_Helpers::timer_elapsed( $timerName ); | |
| 290 | + $queries = get_num_queries() - MeowKit_MGL_Helpers::$startQueries[ $timerName ]; | |
| 291 | + error_log( $timerName . ': ' . $elapsed . 'ms (' . $queries . ' queries)' ); | |
| 292 | + } | |
| 293 | + } | |
| 294 | + | |
| 295 | + // Asked by WP Security Team to remove this. | |
| 296 | + | |
| 297 | + // if ( MeowKit_MGL_Helpers::is_rest() ) { | |
| 298 | + // ini_set( 'display_errors', 0 ); | |
| 299 | + // } | |
| 179 | 300 | } |
| 180 | - | |
| 181 | -?> | |
