← All changes | includes/Plugin.php +1 -114 3.7.2 → 3.4.4 View file →

		@@ -12,16 +12,13 @@
12	12
13	13	use Templately\Admin\API\Settings as APISettings;
14	14	use Templately\Admin\Settings;
15	15	use Templately\API\AIContent;
16		-use Templately\API\LogoGeneration;
17	16	use Templately\API\Conditions;
18	17	use Templately\API\ThemeBuilderApi;
19	18	use Templately\Builder\ThemeBuilder;
20	19	use Templately\Core\Importer\FullSiteImport;
21		-use Templately\Utils\AuthErrorCode;
22	20	use Templately\Utils\Base;
23		-use Templately\Utils\Database;
24	21	use Templately\Utils\Enqueue;
25	22
26	23	use Templately\Core\Admin;
27	24	use Templately\Core\Module;
		@@ -28,9 +25,8 @@
28	25
29	26	use Templately\API\Tags;
30	27	use Templately\API\Items;
31	28	use Templately\API\Login;
32		-use Templately\API\Checkout;
33	29	use Templately\API\SignUp;
34	30	use Templately\API\Profile;
35	31	use Templately\API\Import;
36	32	use Templately\API\MyClouds;
		@@ -38,10 +34,8 @@
38	34	use Templately\API\Categories;
39	35	use Templately\API\Dependencies;
40	36	use Templately\API\TemplateTypes;
41	37	use Templately\API\SavedTemplates;
42		-use Templately\API\Sites;
43		-use Templately\API\Tour;
44	38	use Templately\Core\Maintenance;
45	39	use Templately\Core\Migrator;
46	40	use Templately\Core\Platform\Gutenberg;
47	41	use Templately\Core\Platform\Elementor;
		@@ -46,9 +40,9 @@
46	40	use Templately\Core\Platform\Gutenberg;
47	41	use Templately\Core\Platform\Elementor;
48	42
49	43	final class Plugin extends Base {
50		- public $version = '3.7.2';
	44	+ public $version = '3.4.4';
51	45
52	46	public $admin;
53	47	public $settings;
54	48	/**
		@@ -88,11 +82,8 @@
88	82	$this->init_developer_functionality();
89	83
90	84	add_action( 'plugins_loaded', [ $this, 'plugins_loaded' ] );
91	85	add_action( 'rest_api_init', [ $this, 'register_routes' ] );
92		-
93		- add_action( 'init', [ $this, 'google_login_handler' ] );
94		-
95	86	/**
96	87	* Initialize.
97	88	*/
98	89	do_action( 'templately_init' );
		@@ -188,21 +179,17 @@
188	179	Tags::get_instance();
189	180	ThemeBuilderApi::get_instance();
190	181
191	182	AIContent::get_instance();
192		- LogoGeneration::get_instance();
193	183	Items::get_instance();
194	184	SavedTemplates::get_instance();
195	185
196	186	Login::get_instance();
197		- Checkout::get_instance();
198	187	SignUp::get_instance();
199	188	Import::get_instance();
200	189	Profile::get_instance();
201	190	MyClouds::get_instance();
202	191	WorkSpaces::get_instance();
203		- Sites::get_instance();
204		- Tour::get_instance();
205	192
206	193	APISettings::get_instance();
207	194	// Note: DeveloperSettings::get_instance() is called in Developer::init_modules() when developer functionality is available and enabled
208	195	}
		@@ -264,106 +251,6 @@
264	251	*
265	252	*/
266	253	public function load_textdomain() {
267	254	load_plugin_textdomain( 'templately', false, dirname( TEMPLATELY_PLUGIN_BASENAME ) . '/languages' );
268		- }
269		-
270		- public function google_login_handler() {
271		- // Stop if not a templately google login request
272		- if ( empty( $_GET['templately_google_login'] ) ) {
273		- return;
274		- }
275		-
276		- if ( wp_doing_ajax() || wp_doing_cron() || ( defined( 'REST_REQUEST' ) && REST_REQUEST ) ) {
277		- return;
278		- }
279		-
280		- // Checked before the token is consumed: the callback can land while the
281		- // auth cookie is missing (expired session, cookie not yet set), and WP
282		- // will bounce the user through wp-login and back to this same URL.
283		- // Burning the token here would fail that legitimate retry.
284		- if ( ! is_user_logged_in() ) {
285		- return;
286		- }
287		-
288		- $state = '';
289		- if ( ! empty( $_GET['templately_state'] ) ) {
290		- $state = sanitize_text_field( wp_unslash( $_GET['templately_state'] ) );
291		- } elseif ( ! empty( $_GET['state'] ) ) {
292		- $state = sanitize_text_field( wp_unslash( $_GET['state'] ) );
293		- }
294		-
295		- $state_user_id = false;
296		- if ( ! empty( $state ) ) {
297		- $state_user_id = Database::get_transient( 'google_state_' . $state );
298		- Database::delete_transient( 'google_state_' . $state );
299		- }
300		-
301		- $is_authorized = false !== $state_user_id
302		- && intval( $state_user_id ) === get_current_user_id()
303		- && current_user_can( 'delete_posts' );
304		-
305		- $redirect_url = remove_query_arg( [ 'templately_google_login', 'templately_state', 'api_key', 'error', 'state', 'redirect-to' ] );
306		-
307		- if ( ! $is_authorized ) {
308		- $error_code = AuthErrorCode::AUTH_STATE_INVALID;
309		- } elseif ( ! empty( $_GET['error'] ) ) {
310		- // Google's own reason is deliberately dropped rather than forwarded:
311		- // everything on this query string is attacker-controlled, and the
312		- // screen that displays it must never be handed prose from the URL.
313		- $error_code = AuthErrorCode::AUTH_PROVIDER_FAILED;
314		- } elseif ( ! empty( $_GET['api_key'] ) ) {
315		- $request = new \WP_REST_Request( 'POST', '/templately/v1/login' );
316		- $request->set_param( 'viaAPI', true );
317		- $request->set_param( 'api_key', sanitize_text_field( $_GET['api_key'] ) );
318		-
319		- /**
320		- * @var Login $login
321		- */
322		- $login = Login::get_instance();
323		- $login->permission_check( $request );
324		-
325		- // login() pins the write target to the acting user itself — no pin
326		- // here, or its finally would release ours mid-request.
327		- $response = $login->login();
328		-
329		- if ( ! is_wp_error( $response ) && ! empty( $response['user'] ) ) {
330		- $redirect_path = ! empty( $_GET['redirect-to'] ) ? sanitize_text_field( wp_unslash( $_GET['redirect-to'] ) ) : '';
331		- if ( ! empty( $redirect_path ) ) {
332		- if ( filter_var( $redirect_path, FILTER_VALIDATE_URL ) ) {
333		- $redirect_url = $redirect_path;
334		- } else {
335		- $is_templately = strpos( $redirect_url, 'page=templately' ) !== false;
336		- $is_elementor = strpos( $redirect_url, 'action=elementor' ) !== false;
337		- // Gutenberg editor usually has action=edit or is a block editor page
338		- $is_gutenberg = ( strpos( $redirect_url, 'action=edit' ) !== false || strpos( $redirect_url, 'post_type=' ) !== false ) && ! $is_elementor;
339		-
340		- if ( $is_templately || $is_elementor || $is_gutenberg ) {
341		- $redirect_url = add_query_arg( 'path', ltrim( $redirect_path, '/' ), $redirect_url );
342		-
343		- // Always open the modal in editors after google login
344		- if ( $is_elementor || $is_gutenberg ) {
345		- $redirect_url = add_query_arg( 'templately_open_modal', '1', $redirect_url );
346		- }
347		- }
348		- }
349		- }
350		-
351		- wp_safe_redirect( $redirect_url );
352		- exit;
353		- } else {
354		- // The cloud's own wording stays server-side; the screen resolves
355		- // its copy from the code.
356		- $error_code = AuthErrorCode::INVALID_API_KEY;
357		- }
358		- } else {
359		- $error_code = AuthErrorCode::AUTH_MISSING_API_KEY;
360		- }
361		-
362		- $redirect_url = add_query_arg( [
363		- 'templately_error' => $error_code,
364		- ], $redirect_url );
365		-
366		- wp_safe_redirect( $redirect_url );
367		- exit;
368	255	}
369	256	}