| @@ -749,72 +749,5 @@ | ||
| 749 | 749 | } |
| 750 | 750 | return $r; |
| 751 | 751 | } |
| 752 | 752 | |
| 753 | - /** | |
| 754 | - * Creates the plugin's working directory under wp-uploads and blocks direct | |
| 755 | - * web access to it. | |
| 756 | - * | |
| 757 | - * Everything the importer needs on disk lands here: the extracted pack (its | |
| 758 | - * WXR, its template JSON, its attachments), the AI-generated page JSON, and | |
| 759 | - * the FSI logs. wp-uploads is web-served, so these paths are not private just | |
| 760 | - * because their session id is a uuid — the guards are what makes them | |
| 761 | - * unreadable, not the name. | |
| 762 | - * | |
| 763 | - * .htaccess covers Apache and is inherited by everything below this point; | |
| 764 | - * web.config covers IIS; index.php stops a directory listing on any server. | |
| 765 | - * nginx honours none of them, so an nginx site still needs a location rule — | |
| 766 | - * this raises the floor, it does not replace server configuration. | |
| 767 | - * | |
| 768 | - * @param string $dir Absolute path to create and protect. | |
| 769 | - * | |
| 770 | - * @return bool Whether the directory exists and is usable. | |
| 771 | - */ | |
| 772 | - public static function protect_directory( $dir ) { | |
| 773 | - if ( empty( $dir ) ) { | |
| 774 | - return false; | |
| 775 | - } | |
| 776 | - | |
| 777 | - if ( ! is_dir( $dir ) && ! wp_mkdir_p( $dir ) ) { | |
| 778 | - return false; | |
| 779 | - } | |
| 780 | - | |
| 781 | - $guards = [ | |
| 782 | - 'index.php' => "<?php\n// Silence is golden.\n", | |
| 783 | - '.htaccess' => "# Templately working files — not for direct access.\n<IfModule mod_authz_core.c>\n\tRequire all denied\n</IfModule>\n<IfModule !mod_authz_core.c>\n\tOrder allow,deny\n\tDeny from all\n</IfModule>\n", | |
| 784 | - 'web.config' => "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<configuration>\n\t<system.webServer>\n\t\t<authorization>\n\t\t\t<deny users=\"*\" />\n\t\t</authorization>\n\t</system.webServer>\n</configuration>\n", | |
| 785 | - ]; | |
| 786 | - | |
| 787 | - foreach ( $guards as $file => $contents ) { | |
| 788 | - $path = trailingslashit( $dir ) . $file; | |
| 789 | - // Never overwrite: a site owner may have relaxed these deliberately. | |
| 790 | - if ( ! file_exists( $path ) ) { | |
| 791 | - @file_put_contents( $path, $contents ); // phpcs:ignore | |
| 792 | - } | |
| 793 | - } | |
| 794 | - | |
| 795 | - return true; | |
| 796 | - } | |
| 797 | - | |
| 798 | - /** | |
| 799 | - * Absolute path to the plugin's protected working directory in wp-uploads. | |
| 800 | - * | |
| 801 | - * @param string $sub Optional subdirectory ('tmp', 'log', 'preview', ...). | |
| 802 | - * | |
| 803 | - * @return string Trailing-slashed path, or '' when uploads is unusable. | |
| 804 | - */ | |
| 805 | - public static function upload_dir( $sub = '' ) { | |
| 806 | - $upload_dir = wp_upload_dir(); | |
| 807 | - | |
| 808 | - if ( ! empty( $upload_dir['error'] ) || empty( $upload_dir['basedir'] ) ) { | |
| 809 | - return ''; | |
| 810 | - } | |
| 811 | - | |
| 812 | - $base = trailingslashit( $upload_dir['basedir'] ) . 'templately' . DIRECTORY_SEPARATOR; | |
| 813 | - | |
| 814 | - // The guards go on the root so every subdirectory inherits them. | |
| 815 | - self::protect_directory( $base ); | |
| 816 | - | |
| 817 | - return '' === $sub ? $base : trailingslashit( $base . $sub ); | |
| 818 | - } | |
| 819 | - | |
| 820 | 753 | } |
